LeakIX - Host blur.me

Domain blur.me

South Korea

AMAZON-02

Software information

Apache Apache

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.32.99.7
Domain: blur.me
Port: 443
URL: https://blur.me

First seen 2022-12-12 23:14
Last seen 2023-07-18 09:59
Open for 217 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a4f0f020f6da4fa2a01f9ccca7f9c9974
```
Found 19 files trough .DS_Store spidering:

/_redirects
/blog
/blog/post-01
/blurme_anim_hero.mp4
/blurme_anim_res_01_001.mp4
/blurme_anim_res_02_001.mp4
/childrens-collage-summer-photos-600w-1072592387.jpg.webp
/cover.png
/face_detect.png
/favicon
/icons
/kidsmom.png
/locales
/momkids.png
/momkids_blurr.jpg
/momkids_blurr2.jpg
/momkids_mosaic.jpg
/robots.txt
/sharenting.jpg
```
  Found on 2023-02-23 10:18
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3838040e3838040e3c1a6e1b55a355ee4083bbf6f315a03a
```
Found 20 files trough .DS_Store spidering:

/_redirects
/blog
/blog/post-01
/blurme_anim_hero.mp4
/blurme_anim_res_01_001.mp4
/blurme_anim_res_02_001.mp4
/childrens-collage-summer-photos-600w-1072592387.jpg.webp
/cover.png
/face_detect.png
/favicon
/icons
/kidsmom.png
/locales
/locales/en
/momkids.png
/momkids_blurr.jpg
/momkids_blurr2.jpg
/momkids_mosaic.jpg
/robots.txt
/sharenting.jpg
```
  Found on 2022-12-12 23:14
Create report

Open service 43.201.137.87:443 · strapi3479.blur.me

2025-12-18 23:51

HTTP/1.1 200 OK
Date: Thu, 18 Dec 2025 23:51:26 GMT
Server: Apache
Content-Security-Policy: connect-src 'self' https:;img-src 'self' data: blob: dl.airtable.com https://blurme-prod-strapi.s3.ap-northeast-2.amazonaws.com/ https://d38q8xieo0wwkg.cloudfront.net;media-src 'self' data: blob: dl.airtable.com https://blurme-prod-strapi.s3.ap-northeast-2.amazonaws.com/ https://d38q8xieo0wwkg.cloudfront.net;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
Vary: Origin,Accept-Encoding
Access-Control-Allow-Origin: 
Access-Control-Allow-Credentials: true
Content-Type: text/html; charset=utf-8
X-Powered-By: Strapi <strapi.io>
Connection: close
Transfer-Encoding: chunked

Page title: Welcome to your Strapi app

<!doctype html>
<html>
  <head>
    <meta charset="utf-8" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
    <title>Welcome to your Strapi app</title>
    <meta name="viewport" content="width=device-width, initial-scale=1" />
    <meta name="robots" content="noindex, nofollow">
    <link href="https://cdnjs.cloudflare.com/ajax/libs/meyer-reset/2.0/reset.min.css" rel="stylesheet" />
    <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/css/all.min.css" rel="stylesheet" />
    <link href="https://fonts.googleapis.com/css?family=Lato:400,700&display=swap" rel="stylesheet" />
    <style>
      *{-webkit-box-sizing:border-box;text-decoration:none}body,html{margin:0;padding:0;font-size:62.5%;-webkit-font-smoothing:antialiased}body{font-size:1.3rem;font-family:Lato,Helvetica,Arial,Verdana,sans-serif;background:#fafafb;margin:0;padding:80px 0;color:#333740;line-height:1.8rem}strong{font-weight:700}.wrapper{width:684px;margin:auto}h1{text-align:center}h2{font-size:1.8rem;font-weight:700;margin-bottom:1px}.logo{height:40px;margin-bottom:74px}.informations{position:relative;overflow:hidden;display:flex;justify-content:space-between;width:100%;height:126px;margin-top:18px;padding:20px 30px;background:#fff;border-radius:2px;box-shadow:0 2px 4px 0 #e3e9f3}.informations:before{position:absolute;top:0;left:0;content:'';display:block;width:100%;height:2px;background:#007eff}.environment{display:inline-block;padding:0 10px;height:20px;margin-bottom:36px;background:#e6f0fb;border:1px solid #aed4fb;border-radius:2px;text-transform:uppercase;color:#007eff;font-size:1.2rem;font-weight:700;line-height:20px;letter-spacing:.05rem}.cta{display:inline-block;height:30px;padding:0 15px;margin-top:32px;border-radius:2px;color:#fff;font-weight:700;line-height:28px}.cta i{position:relative;display:inline-block;height:100%;vertical-align:middle;font-size:1rem;margin-right:20px}.cta i:before{position:absolute;top:8px}.cta-primary{background:#007eff}.cta-secondary{background:#6dbb1a}.text-align-right{text-align:right}.lets-started{position:relative;overflow:hidden;width:100%;height:144px;margin-top:18px;padding:20px 30px;background:#fff;border-radius:2px;box-shadow:0 2px 4px 0 #e3e9f3}.people-saying-hello{position:absolute;right:30px;bottom:-8px;width:113px;height:70px}.visible{opacity:1!important}.people-saying-hello img{position:absolute;max-width:100%;opacity:0;transition:opacity .2s ease-out}@media only screen and (max-width:768px){.wrapper{width:auto!important;margin:0 20px}.informations{flex-direction:column;height:auto}.environment{width:100%;text-align:center;margin-bottom:18px}.text-align-right{margin-top:18px;text-align:center}.cta{width:100%;text-align:center}.lets-started{height:auto}.people-saying-hello{display:none}}
    </style>
  </head>
  <body lang="en">
    <section class="wrapper">
      <h1><img class="logo" src="/assets/images/logo_login.png" /></h1>
      
        <div class="informations">
          <div>
            <span class="environment">production</span>
            <p>The server is running successfully.</p>
          </div>
          <div class="text-align-right">
            <p>Thu, 18 Dec 2025 23:51:26 GMT</p>
          </div>
        </div>
      
    </section>

    
  </body>
</html>

Found 2025-12-18 by HttpPlugin

Create report

Open service 43.201.137.87:80 · strapi3479.blur.me

2025-12-18 23:51

HTTP/1.1 302 Found
Date: Thu, 18 Dec 2025 23:51:25 GMT
Server: Apache
Location: https://strapi3479.blur.me/
Content-Length: 211
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://strapi3479.blur.me/">here</a>.</p>
</body></html>

Found 2025-12-18 by HttpPlugin

Create report

strapi3479.blur.me

Fingerprint:

1128e9afce77d4d037b6e1eeca561dfa10205ae86480c3f7bc4b30ab4a2068c2

CN:

strapi3479.blur.me

Key:

ECDSA-256

Issuer:

Not before:

2025-12-18 22:51

Not after:

2026-03-18 22:51

Domain summary

blur.me 2 strapi3479.blur.me 1

2 recorded

IP summary

43.201.137.87 2 13.32.99.7 1 13.224.189.119 1

3 recorded

Domain blur.me

South Korea

Software information

MacOS file listing through .DS_Store file

Create report

Create report

strapi3479.blur.me

Domain summary

IP summary