LeakIX - Host b99222.com

Domain b99222.com

United States

SHARKTECH

Ubuntu

Software information

Apache Apache 2.4.52

tcp/443

nginx nginx

tcp/443 tcp/80 tcp/8443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.239.128.211
Domain: b99222.com
Port: 443
URL: https://b99222.com

First seen 2022-12-30 13:11
Last seen 2024-07-30 15:45
Open for 578 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c8329733f8329733f38a43c588f42195df9574ce071268e3a
```
Found 10 files trough .DS_Store spidering:

/app-deskservice
/app-download
/event
/js
/landing
/landing/m
/qphtml
/README.md
/robots.txt
/tsnew-download
```
  Found on 2024-07-30 15:45
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3af247253af24725e4e6c40a7bf9281f28c8eb664de2e7e0
```
Found 9 files trough .DS_Store spidering:

/app-deskservice
/app-download
/event
/js
/landing
/qphtml
/README.md
/robots.txt
/tsnew-download
```
  Found on 2024-07-22 12:29
- Severity: low
  Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbef3dc898f318c42689ecaaaadd3a223f6
```
Found 15 files trough .DS_Store spidering:

/888
/app-deskservice
/app-download
/check.html
/event
/index.html
/js
/landing
/landing/m
/qphtml
/README.md
/robots.txt
/static
/static-boya
/tsnew-download
```
  Found on 2023-07-29 15:37
- Severity: low
  Fingerprint: 5f32cf5d6962f09c47dfe71947dfe719a4a4af442167a743ba1654042476bbfd
```
Found 16 files trough .DS_Store spidering:

/888
/app-deskservice
/app-download
/check.html
/event
/index.html
/js
/landing
/landing/m
/m
/qphtml
/README.md
/robots.txt
/static
/static-boya
/tsnew-download
```
  Found on 2022-12-30 13:11
- Severity: low
  Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbef3dc898f318c42689ecaaaad9eb42a3a
```
Found 15 files trough .DS_Store spidering:

/888
/app-deskservice
/app-download
/check.html
/event
/index.html
/js
/landing
/m
/qphtml
/README.md
/robots.txt
/static
/static-boya
/tsnew-download
```
  Found on 2022-12-30 13:11
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.239.128.211
Domain: www.b99222.com
Port: 443
URL: https://www.b99222.com

First seen 2022-12-30 13:11
Last seen 2024-10-18 17:18
Open for 658 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c8329733f8329733f38a43c588f42195df9574ce071268e3a
```
Found 10 files trough .DS_Store spidering:

/app-deskservice
/app-download
/event
/js
/landing
/landing/m
/qphtml
/README.md
/robots.txt
/tsnew-download
```
  Found on 2024-10-18 17:18
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3af247253af24725e4e6c40a7bf9281f28c8eb664de2e7e0
```
Found 9 files trough .DS_Store spidering:

/app-deskservice
/app-download
/event
/js
/landing
/qphtml
/README.md
/robots.txt
/tsnew-download
```
  Found on 2024-07-24 10:05
- Severity: low
  Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbef3dc898f318c42689ecaaaadd3a223f6
```
Found 15 files trough .DS_Store spidering:

/888
/app-deskservice
/app-download
/check.html
/event
/index.html
/js
/landing
/landing/m
/qphtml
/README.md
/robots.txt
/static
/static-boya
/tsnew-download
```
  Found on 2023-07-29 15:37
- Severity: low
  Fingerprint: 5f32cf5d6962f09c47dfe71947dfe719a4a4af442167a743ba1654042476bbfd
```
Found 16 files trough .DS_Store spidering:

/888
/app-deskservice
/app-download
/check.html
/event
/index.html
/js
/landing
/landing/m
/m
/qphtml
/README.md
/robots.txt
/static
/static-boya
/tsnew-download
```
  Found on 2022-12-30 13:11
- Severity: low
  Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbef3dc898f318c42689ecaaaad9eb42a3a
```
Found 15 files trough .DS_Store spidering:

/888
/app-deskservice
/app-download
/check.html
/event
/index.html
/js
/landing
/m
/qphtml
/README.md
/robots.txt
/static
/static-boya
/tsnew-download
```
  Found on 2022-12-30 13:11
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.239.128.211
Domain: www.b99222.com
Port: 80
URL: http://www.b99222.com

First seen 2022-12-30 13:11
Last seen 2024-01-28 12:40
Open for 393 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c8329733f8329733f38a43c588f42195df9574ce071268e3a
```
Found 10 files trough .DS_Store spidering:

/app-deskservice
/app-download
/event
/js
/landing
/landing/m
/qphtml
/README.md
/robots.txt
/tsnew-download
```
  Found on 2024-01-28 12:40
- Severity: low
  Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbef3dc898f318c42689ecaaaadd3a223f6
```
Found 15 files trough .DS_Store spidering:

/888
/app-deskservice
/app-download
/check.html
/event
/index.html
/js
/landing
/landing/m
/qphtml
/README.md
/robots.txt
/static
/static-boya
/tsnew-download
```
  Found on 2023-07-29 15:37
- Severity: low
  Fingerprint: 5f32cf5d6962f09c47dfe71947dfe719a4a4af442167a743ba1654042476bbfd
```
Found 16 files trough .DS_Store spidering:

/888
/app-deskservice
/app-download
/check.html
/event
/index.html
/js
/landing
/landing/m
/m
/qphtml
/README.md
/robots.txt
/static
/static-boya
/tsnew-download
```
  Found on 2022-12-30 13:11
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 20.239.128.211
Domain: b99222.com
Port: 80
URL: http://b99222.com

First seen 2022-12-30 13:11
Last seen 2024-01-28 12:40
Open for 393 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c8329733f8329733f38a43c588f42195df9574ce071268e3a
```
Found 10 files trough .DS_Store spidering:

/app-deskservice
/app-download
/event
/js
/landing
/landing/m
/qphtml
/README.md
/robots.txt
/tsnew-download
```
  Found on 2024-01-28 12:40
- Severity: low
  Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbef3dc898f318c42689ecaaaadd3a223f6
```
Found 15 files trough .DS_Store spidering:

/888
/app-deskservice
/app-download
/check.html
/event
/index.html
/js
/landing
/landing/m
/qphtml
/README.md
/robots.txt
/static
/static-boya
/tsnew-download
```
  Found on 2023-07-29 15:37
- Severity: low
  Fingerprint: 5f32cf5d6962f09c47dfe71947dfe719a4a4af442167a743ba1654042476bbfd
```
Found 16 files trough .DS_Store spidering:

/888
/app-deskservice
/app-download
/check.html
/event
/index.html
/js
/landing
/landing/m
/m
/qphtml
/README.md
/robots.txt
/static
/static-boya
/tsnew-download
```
  Found on 2022-12-30 13:11
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.247.230.113
Domain: www.b99222.com
Port: 443
URL: https://www.b99222.com

First seen 2022-12-30 13:11
Last seen 2024-10-18 17:18
Open for 658 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522f4e2e855
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = root@6669786.com:lottery-site/lottery-repo-boya
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-10-18 17:18
  
  272 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.247.107.120
Domain: b99222.com
Port: 80
URL: http://b99222.com

First seen 2022-12-30 13:11
Last seen 2024-01-28 12:40
Open for 393 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522f4e2e855
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = root@6669786.com:lottery-site/lottery-repo-boya
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-01-28 12:40
  
  272 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.247.107.120
Domain: b99222.com
Port: 443
URL: https://b99222.com

First seen 2022-12-30 13:11
Last seen 2024-07-30 15:45
Open for 578 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522f4e2e855
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = root@6669786.com:lottery-site/lottery-repo-boya
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-07-30 15:45
  
  272 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.247.107.120
Domain: www.b99222.com
Port: 80
URL: http://www.b99222.com

First seen 2022-12-30 13:11
Last seen 2024-01-28 12:40
Open for 393 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522f4e2e855
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = root@6669786.com:lottery-site/lottery-repo-boya
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-01-28 12:40
  
  272 Bytes
Create report

Open service 104.160.179.229:8443 · www.b99222.com

2024-10-18 17:18

HTTP/1.1 200 OK
Server: nginx 
Date: Fri, 18 Oct 2024 17:18:17 GMT
Content-Type: application/octet-stream
Transfer-Encoding: chunked
Connection: close
Expires: Fri, 18 Oct 2024 17:18:16 GMT
Cache-Control: no-cache


success

Found 2024-10-18 by HttpPlugin

Create report

Open service 104.160.179.229:80 · www.b99222.com

2024-10-18 17:18

HTTP/1.1 301 Moved Permanently
Server: nginx 
Date: Fri, 18 Oct 2024 17:18:15 GMT
Content-Type: text/html
Content-Length: 163
Connection: close
Location: https://www.b99222.com:3443/
platform: polestarcloud.com
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx </center>
</body>
</html>

Found 2024-10-18 by HttpPlugin

Create report

Open service 104.160.179.229:443 · www.b99222.com

2024-10-18 17:18

HTTP/1.1 200 OK
Server: nginx 
Date: Fri, 18 Oct 2024 17:18:17 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 4444
Connection: close
Vary: Accept-Encoding
Last-Modified: Mon, 27 May 2024 11:21:37 GMT
ETag: "66546cc1-115c"
platform: polestarcloud.com
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes

Page title: Welcome

<!DOCTYPE html>
<html style="height: 100%;">

<head>
  <meta charset="utf-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
  <title>Welcome</title>
  <script>
    function isMobile() {
      return !!(navigator.userAgent.match(
        /(phone|pad|pod|iPhone|iPod|ios|iPad|android|Mobile|BlackBerry|IEMobile|MQQBrowser|JUC|Fennec|wOSBrowser|BrowserNG|WebOS|Symbian|Windows Phone)/i
        ))
    }
    if (isMobile() !== false) {
      if (location.href.indexOf('#') > -1) {
        location.href = location.origin + '/m/#/home?' + (location.href.split('#')[1].split('?')[1] || '')
      } else {
        location.href = location.origin + '/m/#/home' + location.search
      }
    }
    (function () {
      var url = window.location.href,
        obj = {},
        keyvalue = [],
        key = '',
        value = '',
        parseString = url.substring(url.indexOf('?') + 1, url.length).split('&')
      for (var i in parseString) {
        keyvalue = parseString[i].split('=')
        key = keyvalue[0]
        value = keyvalue[1] && keyvalue[1].includes('#/') ? keyvalue[1].split('#/')[0] : keyvalue[1]
        obj[key] = value
      }

      if (obj.agent) {
        localStorage.setItem('agent', obj.agent)
      }
      if(obj.register){
         if(!localStorage.token){
           localStorage.setItem('register', obj.register)
         }
      }
    })()
    window.vis = true
    window.onblur = function () {
      window.vis = false
    }
    window.onfocus = function () {
      window.vis = true
      if (typeof window.balanceTask === 'function') {
        window.balanceTask()
      }
    }
    if(!document.querySelector('.statistics')) {
      let head = document.head || document.getElementsByTagName('head')[0];
      let script = document.createElement('script');
      let div = document.createElement('div');
      div.classList = 'statistics'
      div.style.position = 'fixed'
      div.style.left = '-9999px'
      div.style.top = '-9999px'
      script.setAttribute("src", "https://hm.baidu.com/hm.js?7827baccba02b2574fb935c5e28182d2");
      div.appendChild(script);
      head.appendChild(div);
    }
    if(!isMobile()) {
      function loadJS( url, callback ) {
        var script = document.createElement('script'),
        fn = callback || function(){};
        script.type = 'text/javascript';

        //IE
        if(script.readyState){
          script.onreadystatechange = function(){
            if( script.readyState == 'loaded' || script.readyState == 'complete' ){
                script.onreadystatechange = null;
                fn()
            }
          }
        }else{
          // 其他浏览器
          script.onload = function(){
            fn()
          }
        }
        script.src = url;
        document.getElementsByTagName('head')[0].appendChild(script);
      }

      let loadTable = ['/static/public/js/stomp.js', '/static/public/js/qrcode.js'
      , `https://cstaticdun.126.net/load.min.js?t=1716800235616`,
      `https://acstatic-dun.126.net/tool.min.js?t=1716800235616`
      ]
      // 用法
      loadTable.forEach( (url) => {
        loadJS(url,function(e){
          // console.log("🚀 ~ file: index.html ~ line 85 ~ loadJS ~ url loaded success", url)
        })
      })

    }
  </script>
  <link rel="shortcut icon" href="/static/boya/img/favicon.ico" type="image/x-icon">
  <!-- <script src="/static/public/js/stomp.js"></script> -->
  <!-- <script src="/static/public/js/qrcode.js"></script> -->

  <!-- <script src="http://cstaticdun.126.net/load.min.js"></script> -->
  <!-- <script src="https://cstaticdun.126.net/load.min.js?t=201903281201"></script> -->
  <!-- <script type="text/javascript" src="https://acstatic-dun.126.net/tool.min.js?t=201903281201"></script> -->
  <!-- <script src="/static/public//js/tn_code.js"></script> -->
<link href="/static-boya/style.css" rel="stylesheet"><link href="/static-boya/css/pages/boya/index.86a4a7e7a32dacc4c90fb7f11b040ca2.css" rel="stylesheet"></head>

<body style="height: 100%;">
  <div id="Appboya">

  </div>
<script type="text/java

Found 2024-10-18 by HttpPlugin

Create report

Open service 172.247.107.120:443 · b99222.com

2024-09-28 04:03

HTTP/1.1 403 Forbidden
Date: Sat, 28 Sep 2024 04:03:21 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 276
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 403 Forbidden

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access this resource.</p>
<hr>
<address>Apache/2.4.52 (Ubuntu) Server at b99222.com Port 443</address>
</body></html>

Found 2024-09-28 by HttpPlugin

Create report

monitor0.greycdn.com

Fingerprint:

224b0e9dc91ff47216fcb93cef690d7d51703cf9d39940e1dcc8d9e88227e24d

CN:

monitor0.greycdn.com

Key:

ECDSA-256

Issuer:

SG CA

Not before:

2021-07-07 03:07

Not after:

2061-07-07 03:07

www.b99222.com

Fingerprint:

375421a331a0d8295fa2d6f0734669324c80d6aa2b1b73dbb79e301a20e35d63

CN:

www.b99222.com

Key:

RSA-2048

Issuer:

ZeroSSL RSA Domain Secure Site CA

Not before:

2024-10-18 00:00

Not after:

2025-01-16 23:59

yumianhu.cnm.yumianhu.cnwww.yumianhu.cn

Fingerprint:

8a1fc65950b42c1268a24a89b19f1a2c0b586224fd1dd0a330f9bb985b4f409b

CN:

yumianhu.cn

Key:

ECDSA-256

Issuer:

ZeroSSL ECC Domain Secure Site CA

Not before:

2024-09-09 00:00

Not after:

2024-12-08 23:59

Domain summary

www.b99222.com 12 b99222.com 10

2 recorded

IP summary

104.160.179.229 2 172.247.107.120 1 20.239.128.211 1 43.132.236.77 1 172.247.230.113 1 47.242.17.76 1 172.247.230.116 1 154.202.53.245 1

8 recorded

Domain b99222.com

United States

Software information

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Create report

Create report

Create report

Create report

monitor0.greycdn.com

www.b99222.com

yumianhu.cnm.yumianhu.cnwww.yumianhu.cn

Domain summary

IP summary