LeakIX - Host 2bhcmt.xyz

Domain 2bhcmt.xyz

United States

CNSERVERS

Software information

openresty

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: 2bhcmt.xyz
Port: 80
URL: http://2bhcmt.xyz

First seen 2024-07-15 06:32
Last seen 2024-09-18 00:05
Open for 64 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 00:05
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: www.2bhcmt.xyz
Port: 80
URL: http://www.2bhcmt.xyz

First seen 2024-07-17 16:46
Last seen 2024-09-18 21:48
Open for 63 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 21:48
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: www.2bhcmt.xyz
Port: 443
URL: https://www.2bhcmt.xyz

First seen 2024-05-18 20:44
Last seen 2024-09-18 21:48
Open for 123 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 21:48
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: 2bhcmt.xyz
Port: 443
URL: https://2bhcmt.xyz

First seen 2024-05-17 06:43
Last seen 2024-09-18 13:59
Open for 124 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 13:59
Create report

Open service 23.225.145.90:443 · 2bhcmt.xyz

2024-09-16 07:42

HTTP/1.1 200 OK
Server: openresty
Date: Mon, 16 Sep 2024 07:42:27 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-16 by HttpPlugin

Create report

Open service 23.225.145.90:80 · www.2bhcmt.xyz

2024-09-15 16:45

HTTP/1.1 200 OK
Server: openresty
Date: Sun, 15 Sep 2024 16:45:49 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-15 by HttpPlugin

Create report

Open service 23.225.145.90:443 · www.2bhcmt.xyz

2024-09-15 16:45

HTTP/1.1 200 OK
Server: openresty
Date: Sun, 15 Sep 2024 16:45:53 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-15 by HttpPlugin

Create report

Open service 23.225.145.90:80 · 2bhcmt.xyz

2024-09-14 20:13

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 20:13:09 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:443 · www.2bhcmt.xyz

2024-09-14 15:13

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 15:13:05 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:443 · 2bhcmt.xyz

2024-09-14 06:01

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 06:01:33 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:80 · www.2bhcmt.xyz

2024-09-14 05:26

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 05:26:04 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin