LeakIX - Host 28sden.xyz

Domain 28sden.xyz

United States

CNSERVERS

Software information

openresty

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: 28sden.xyz
Port: 80
URL: http://28sden.xyz

First seen 2024-07-15 06:57
Last seen 2024-09-18 18:32
Open for 65 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 18:32
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: www.28sden.xyz
Port: 443
URL: https://www.28sden.xyz

First seen 2024-05-18 04:06
Last seen 2024-09-18 14:50
Open for 123 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 14:50
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: www.28sden.xyz
Port: 80
URL: http://www.28sden.xyz

First seen 2024-07-16 16:46
Last seen 2024-09-18 18:24
Open for 64 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 18:24
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: 28sden.xyz
Port: 443
URL: https://28sden.xyz

First seen 2024-05-17 06:47
Last seen 2024-09-16 15:31
Open for 122 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-16 15:31
Create report

Open service 23.225.145.90:443 · www.28sden.xyz

2024-09-14 16:45

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 16:45:50 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:80 · www.28sden.xyz

2024-09-14 16:45

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 16:45:47 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:80 · 28sden.xyz

2024-09-14 12:10

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 12:10:18 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:443 · www.28sden.xyz

2024-09-14 06:05

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 06:05:52 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:443 · 28sden.xyz

2024-09-14 05:50

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 05:50:59 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:80 · www.28sden.xyz

2024-09-14 05:14

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 05:14:37 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin