LeakIX - Host 256911.com

Domain 256911.com

South Africa

Dream Cloud Innovation Limited

Software information

nginx nginx

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 45.119.7.196
Domain: 256911.com
Port: 443
URL: https://256911.com

First seen 2022-11-19 11:43
Last seen 2023-01-29 08:02
Open for 70 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3af247253af247255468757ecb9aff4f9ac2dce0ca3a454d
```
Found 9 files trough .DS_Store spidering:

/.git
/888
/app-download
/m
/qphtml
/static
/static-hty
/ts-download
/tsnew-download
```
  Found on 2023-01-29 08:02
- Severity: low
  Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a06acecbf67be709edbe0097320853887
```
Found 19 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/qphtml
/static
/static-hty
/ts-download
/ts-download/css
/ts-download/images
/ts-download/js
/ts-download/muse-ui
/tsnew-download
/tsnew-download/css
/tsnew-download/images
/tsnew-download/js
/tsnew-download/muse-ui
```
  Found on 2023-01-29 08:02
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772677f2617ab34c1166667f0bbae149a99
```
Found 11 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/qphtml
/static
/static-hty
/ts-download
/tsnew-download
```
  Found on 2022-11-19 11:43
- Severity: low
  Fingerprint: 5f32cf5d6962f09c668fcbec668fcbec813998a16e9077cc5d31b1814c14ebb3
```
Found 17 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/js
/m/media
/m/static
/qphtml
/static
/static-hty
/ts-download
/tsnew-download
```
  Found on 2022-11-19 11:43
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 134.122.216.30
Domain: www.256911.com
Port: 443
URL: https://www.256911.com

First seen 2022-11-19 11:43
Last seen 2023-01-29 07:47
Open for 70 days

Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe626f729baf90f1521e1f9337d4ccec18

Found 15 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/qphtml
/static
/static-hty
/ts-download
/ts-download/css
/ts-download/images
/ts-download/js
/ts-download/muse-ui
/tsnew-download

Found on 2023-01-29 07:47

Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a06acecbf67be709edbe0097320853887

Found 19 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/qphtml
/static
/static-hty
/ts-download
/ts-download/css
/ts-download/images
/ts-download/js
/ts-download/muse-ui
/tsnew-download
/tsnew-download/css
/tsnew-download/images
/tsnew-download/js
/tsnew-download/muse-ui

Found on 2023-01-29 07:47

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772677f2617ab34c1166667f0bbae149a99

Found 11 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/qphtml
/static
/static-hty
/ts-download
/tsnew-download

Found on 2022-11-19 11:43

Severity: low
Fingerprint: 5f32cf5d6962f09c87f05b7087f05b7077e6845d0b01bdf0a3a0c0e5ede0a475

Found 26 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/img/sites
/m/img/src
/m/js
/m/media
/m/static
/qphtml
/static
/static/hty
/static/hty/img
/static/hty/img/new_games
/static/hty/img/new_games/banner
/static/hty/img/new_games/new_icon
/static/hty/img/new_games/new_icon_a
/static/public
/static-hty
/ts-download
/tsnew-download

Found on 2022-11-19 11:43

Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a06acecbf67be709edbe00973739b76d7

Found 19 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/img/sites
/m/img/src
/m/js
/m/media
/m/static
/qphtml
/static
/static-hty
/ts-download
/tsnew-download

Found on 2022-11-19 11:43

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247255468757ecb9aff4f9ac2dce0ca3a454d

Found 9 files trough .DS_Store spidering:

/.git
/888
/app-download
/m
/qphtml
/static
/static-hty
/ts-download
/tsnew-download

Found on 2022-11-19 11:43

Severity: low
Fingerprint: 5f32cf5d6962f09c668fcbec668fcbec813998a16e9077cc5d31b1814c14ebb3

Found 17 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/js
/m/media
/m/static
/qphtml
/static
/static-hty
/ts-download
/tsnew-download

Found on 2022-11-19 11:43

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 156.238.15.70
Domain: www.256911.com
Port: 443
URL: https://www.256911.com

First seen 2022-07-20 15:32
Last seen 2023-01-29 07:47
Open for 192 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65221801e97d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = root@6669786.com:lottery-site/lottery-repo-hty
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-07-20 15:32
  
  271 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 156.238.15.10
Domain: 256911.com
Port: 443
URL: https://256911.com

First seen 2022-07-18 19:16
Last seen 2023-01-29 08:02
Open for 194 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65221801e97d
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = root@6669786.com:lottery-site/lottery-repo-hty
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-07-18 19:16
  
  271 Bytes
Create report

Open service 168.76.196.66:443 · 256911.com

2024-10-16 11:50

HTTP/1.1 302 Found
Server: nginx
Date: Wed, 16 Oct 2024 11:50:38 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: home_lang=cn; path=/
Set-Cookie: admin_lang=cn; path=/
Location: https://m.256911.com/
Strict-Transport-Security: max-age=31536000