LeakIX - Host do9.link

Domain do9.link

United States

AMAZON-02

Software information

nginx nginx 1.20.2

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.66.192.11
Domain: do9.link
Port: 443
URL: https://do9.link

First seen 2025-10-20 05:21
Last seen 2026-01-02 03:03
Open for 73 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392ab1b17978558eca234111763eee3bd8303
```
Found 7 files trough .DS_Store spidering:

/Adjustscript.js
/d
/globals.css
/img
/index.html
/js
/style.css
```
  Found on 2026-01-02 03:03
Create report

Open service 18.66.192.11:443 · do9.link

2026-01-09 11:40

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 4319
Connection: close
Server: nginx/1.20.2
Date: Fri, 09 Jan 2026 11:40:52 GMT
Last-Modified: Tue, 19 Nov 2024 07:26:01 GMT
Accept-Ranges: bytes
ETag: "673c3d89-10df"
X-Cache: Hit from cloudfront
Via: 1.1 c414bd1a4ce7ace94cbfdfa8efcbe5a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
X-Amz-Cf-Id: CxpS9ygWui_KyRNrrmrr9OOQLZVAA8ybRCIpLSe1B-IKR3nC7ymNTw==
Age: 2

Page title: do9.link

<html>

<head>
  <link rel="shortcut icon" href="./img/favicon.png" />
  <title>do9.link</title>
  <meta name="description" content="VND88" />
  <meta name="og:type" content="website" />
  <meta name="og:site_name" content="VND88" />
  <meta name="og:title" content="vipVND88" />
  <meta name="og:description" content="VND88" />
  <meta name="og:image" content="./img/20231110-163919.jpeg" />
  <meta name="twitter:card" content="photo" />
  <meta name="twitter:title" content="VND88" />
  <meta name="twitter:description" content="VND88" />
  <meta name="twitter:image:width" content="320px" />
  <meta name="twitter:image:height" content="320px" />
  <meta name="twitter:image:src" content="./img/20231110-163919.jpeg" />
  <meta name="apple-mobile-web-app-capable" content="yes" />
  <meta name="mobile-web-app-capable" content="yes" />
  <meta name="apple-mobile-web-app-status-bar-style" content="default" />
  <meta name="apple-mobile-web-app-title" content="VND88" />

  <link rel="stylesheet" href="globals.css" />
  <link rel="stylesheet" href="style.css" />
  <script>
    !(function (f, b, e, v, n, t, s) {
      if (f.fbq) return;
      n = f.fbq = function () {
        n.callMethod
          ? n.callMethod.apply(n, arguments)
          : n.queue.push(arguments);
      };
      if (!f._fbq) f._fbq = n;
      n.push = n;
      n.loaded = !0;
      n.version = "2.0";
      n.queue = [];
      t = b.createElement(e);
      t.async = !0;
      t.src = v;
      s = b.getElementsByTagName(e)[0];
      s.parentNode.insertBefore(t, s);
    })(
      window,
      document,
      "script",
      "https://connect.facebook.net/en_US/fbevents.js"
    );
    fbq("init", "2000484817118833");
    fbq("track", "PageView");
  </script>
  <noscript>
    <img height="1" width="1" style="display: none"
      src="https://www.facebook.com/tr?id=2000484817118833&ev=PageView&noscript=1" />
  </noscript>
  <!-- End Facebook Pixel Code -->

  <script src="Adjustscript.js"></script>
  <script>
    // get query string, and parse it with URLSearchParams
    const urlParams = new URLSearchParams(window.location.search);
    //p0 = urlParams.get("p0") and fallback to "default"
    p0 = urlParams.get("p0");
    p1 = urlParams.get("p1");
    p2 = urlParams.get("p2");
    p3 = urlParams.get("p3");
    p4 = urlParams.get("p4");
    p5 = urlParams.get("p5");
    p6 = urlParams.get("p6");
    fbPid = getFbPid();
    fbClickId = urlParams.get("fbclid");
    apkUrl = "https://do9.link/d/vnd88t26.apk";
    var userAgent = navigator.userAgent || navigator.vendor || window.opera;
    if (/iPad|iPhone|iPod/.test(userAgent) && !window.MSStream) {
      apkUrl = "https://apps.apple.com/us/app/aaa-o-drag-pacman/id6615062223";
    }
    url = buildURL(p0, p1, p2, p3, p4, p5, p6, apkUrl, fbClickId, fbPid);
    // add links
    window.addEventListener("DOMContentLoaded", function () {
      if (url) {
        var elements = document.querySelectorAll(".AdjustTracker");
        for (var i = 0; i < elements.length; i++) {
          elements[i].setAttribute("href", url);
        }
      } else {
        var elements = document.querySelectorAll(".AdjustTracker");
        for (var i = 0; i < elements.length; i++) {
          elements[i].setAttribute("href", apkUrl);
        }
      }
    });
  </script>
</head>

<body>
  <div class="frame">
    <div class="div">
      <div class="overlap-group">
        <a target="_blank" rel="noopener noreferrer" onclick="fbq('track', 'click_download_button');"
          class="AdjustTracker"><img class="PH-2" src="img/VND88-01.png" /></a>
        
        <a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTracker"
          onclick="fbq('track', 'click_download_button');">
          <img class="PH-23" src="img/btn1.gif" />
        </a>
        <a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTracker"
          onclick="fbq('track', 'click_download_button');">
          <img class="PH-20" src="img/btn2.gif" />
        </a>
        <a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTra

Found 2026-01-09 by HttpPlugin

Create report

Open service 18.66.192.11:443 · do9.link

2026-01-02 03:03

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 4319
Connection: close
Server: nginx/1.20.2
Date: Fri, 02 Jan 2026 03:03:53 GMT
Last-Modified: Tue, 19 Nov 2024 07:26:01 GMT
Accept-Ranges: bytes
ETag: "673c3d89-10df"
X-Cache: Hit from cloudfront
Via: 1.1 eec5ede1fdb15ceb2352a4ebfb155362.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
X-Amz-Cf-Id: FcRQ9bdkKjbJZLCYDKtaAwXGiPGe3voKQQRwwJv3xyv53AjM5vbV1g==

Page title: do9.link

<html>

<head>
  <link rel="shortcut icon" href="./img/favicon.png" />
  <title>do9.link</title>
  <meta name="description" content="VND88" />
  <meta name="og:type" content="website" />
  <meta name="og:site_name" content="VND88" />
  <meta name="og:title" content="vipVND88" />
  <meta name="og:description" content="VND88" />
  <meta name="og:image" content="./img/20231110-163919.jpeg" />
  <meta name="twitter:card" content="photo" />
  <meta name="twitter:title" content="VND88" />
  <meta name="twitter:description" content="VND88" />
  <meta name="twitter:image:width" content="320px" />
  <meta name="twitter:image:height" content="320px" />
  <meta name="twitter:image:src" content="./img/20231110-163919.jpeg" />
  <meta name="apple-mobile-web-app-capable" content="yes" />
  <meta name="mobile-web-app-capable" content="yes" />
  <meta name="apple-mobile-web-app-status-bar-style" content="default" />
  <meta name="apple-mobile-web-app-title" content="VND88" />

  <link rel="stylesheet" href="globals.css" />
  <link rel="stylesheet" href="style.css" />
  <script>
    !(function (f, b, e, v, n, t, s) {
      if (f.fbq) return;
      n = f.fbq = function () {
        n.callMethod
          ? n.callMethod.apply(n, arguments)
          : n.queue.push(arguments);
      };
      if (!f._fbq) f._fbq = n;
      n.push = n;
      n.loaded = !0;
      n.version = "2.0";
      n.queue = [];
      t = b.createElement(e);
      t.async = !0;
      t.src = v;
      s = b.getElementsByTagName(e)[0];
      s.parentNode.insertBefore(t, s);
    })(
      window,
      document,
      "script",
      "https://connect.facebook.net/en_US/fbevents.js"
    );
    fbq("init", "2000484817118833");
    fbq("track", "PageView");
  </script>
  <noscript>
    <img height="1" width="1" style="display: none"
      src="https://www.facebook.com/tr?id=2000484817118833&ev=PageView&noscript=1" />
  </noscript>
  <!-- End Facebook Pixel Code -->

  <script src="Adjustscript.js"></script>
  <script>
    // get query string, and parse it with URLSearchParams
    const urlParams = new URLSearchParams(window.location.search);
    //p0 = urlParams.get("p0") and fallback to "default"
    p0 = urlParams.get("p0");
    p1 = urlParams.get("p1");
    p2 = urlParams.get("p2");
    p3 = urlParams.get("p3");
    p4 = urlParams.get("p4");
    p5 = urlParams.get("p5");
    p6 = urlParams.get("p6");
    fbPid = getFbPid();
    fbClickId = urlParams.get("fbclid");
    apkUrl = "https://do9.link/d/vnd88t26.apk";
    var userAgent = navigator.userAgent || navigator.vendor || window.opera;
    if (/iPad|iPhone|iPod/.test(userAgent) && !window.MSStream) {
      apkUrl = "https://apps.apple.com/us/app/aaa-o-drag-pacman/id6615062223";
    }
    url = buildURL(p0, p1, p2, p3, p4, p5, p6, apkUrl, fbClickId, fbPid);
    // add links
    window.addEventListener("DOMContentLoaded", function () {
      if (url) {
        var elements = document.querySelectorAll(".AdjustTracker");
        for (var i = 0; i < elements.length; i++) {
          elements[i].setAttribute("href", url);
        }
      } else {
        var elements = document.querySelectorAll(".AdjustTracker");
        for (var i = 0; i < elements.length; i++) {
          elements[i].setAttribute("href", apkUrl);
        }
      }
    });
  </script>
</head>

<body>
  <div class="frame">
    <div class="div">
      <div class="overlap-group">
        <a target="_blank" rel="noopener noreferrer" onclick="fbq('track', 'click_download_button');"
          class="AdjustTracker"><img class="PH-2" src="img/VND88-01.png" /></a>
        
        <a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTracker"
          onclick="fbq('track', 'click_download_button');">
          <img class="PH-23" src="img/btn1.gif" />
        </a>
        <a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTracker"
          onclick="fbq('track', 'click_download_button');">
          <img class="PH-20" src="img/btn2.gif" />
        </a>
        <a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTra

Found 2026-01-02 by HttpPlugin

Create report

Open service 18.66.192.11:443 · do9.link

2025-12-22 18:35

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 4319
Connection: close
Server: nginx/1.20.2
Date: Mon, 22 Dec 2025 18:35:44 GMT
Last-Modified: Tue, 19 Nov 2024 07:26:01 GMT
Accept-Ranges: bytes
ETag: "673c3d89-10df"
X-Cache: Hit from cloudfront
Via: 1.1 f4c3162878591c5abd76f8ee1f873476.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
X-Amz-Cf-Id: 5R9OrMWxzxWJ6bdrYfo_MoL_ZZho_6_RF_AJuZcKPNDaAzzfPdPnlA==

Page title: do9.link

<html>

<head>
  <link rel="shortcut icon" href="./img/favicon.png" />
  <title>do9.link</title>
  <meta name="description" content="VND88" />
  <meta name="og:type" content="website" />
  <meta name="og:site_name" content="VND88" />
  <meta name="og:title" content="vipVND88" />
  <meta name="og:description" content="VND88" />
  <meta name="og:image" content="./img/20231110-163919.jpeg" />
  <meta name="twitter:card" content="photo" />
  <meta name="twitter:title" content="VND88" />
  <meta name="twitter:description" content="VND88" />
  <meta name="twitter:image:width" content="320px" />
  <meta name="twitter:image:height" content="320px" />
  <meta name="twitter:image:src" content="./img/20231110-163919.jpeg" />
  <meta name="apple-mobile-web-app-capable" content="yes" />
  <meta name="mobile-web-app-capable" content="yes" />
  <meta name="apple-mobile-web-app-status-bar-style" content="default" />
  <meta name="apple-mobile-web-app-title" content="VND88" />

  <link rel="stylesheet" href="globals.css" />
  <link rel="stylesheet" href="style.css" />
  <script>
    !(function (f, b, e, v, n, t, s) {
      if (f.fbq) return;
      n = f.fbq = function () {
        n.callMethod
          ? n.callMethod.apply(n, arguments)
          : n.queue.push(arguments);
      };
      if (!f._fbq) f._fbq = n;
      n.push = n;
      n.loaded = !0;
      n.version = "2.0";
      n.queue = [];
      t = b.createElement(e);
      t.async = !0;
      t.src = v;
      s = b.getElementsByTagName(e)[0];
      s.parentNode.insertBefore(t, s);
    })(
      window,
      document,
      "script",
      "https://connect.facebook.net/en_US/fbevents.js"
    );
    fbq("init", "2000484817118833");
    fbq("track", "PageView");
  </script>
  <noscript>
    <img height="1" width="1" style="display: none"
      src="https://www.facebook.com/tr?id=2000484817118833&ev=PageView&noscript=1" />
  </noscript>
  <!-- End Facebook Pixel Code -->

  <script src="Adjustscript.js"></script>
  <script>
    // get query string, and parse it with URLSearchParams
    const urlParams = new URLSearchParams(window.location.search);
    //p0 = urlParams.get("p0") and fallback to "default"
    p0 = urlParams.get("p0");
    p1 = urlParams.get("p1");
    p2 = urlParams.get("p2");
    p3 = urlParams.get("p3");
    p4 = urlParams.get("p4");
    p5 = urlParams.get("p5");
    p6 = urlParams.get("p6");
    fbPid = getFbPid();
    fbClickId = urlParams.get("fbclid");
    apkUrl = "https://do9.link/d/vnd88t26.apk";
    var userAgent = navigator.userAgent || navigator.vendor || window.opera;
    if (/iPad|iPhone|iPod/.test(userAgent) && !window.MSStream) {
      apkUrl = "https://apps.apple.com/us/app/aaa-o-drag-pacman/id6615062223";
    }
    url = buildURL(p0, p1, p2, p3, p4, p5, p6, apkUrl, fbClickId, fbPid);
    // add links
    window.addEventListener("DOMContentLoaded", function () {
      if (url) {
        var elements = document.querySelectorAll(".AdjustTracker");
        for (var i = 0; i < elements.length; i++) {
          elements[i].setAttribute("href", url);
        }
      } else {
        var elements = document.querySelectorAll(".AdjustTracker");
        for (var i = 0; i < elements.length; i++) {
          elements[i].setAttribute("href", apkUrl);
        }
      }
    });
  </script>
</head>

<body>
  <div class="frame">
    <div class="div">
      <div class="overlap-group">
        <a target="_blank" rel="noopener noreferrer" onclick="fbq('track', 'click_download_button');"
          class="AdjustTracker"><img class="PH-2" src="img/VND88-01.png" /></a>
        
        <a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTracker"
          onclick="fbq('track', 'click_download_button');">
          <img class="PH-23" src="img/btn1.gif" />
        </a>
        <a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTracker"
          onclick="fbq('track', 'click_download_button');">
          <img class="PH-20" src="img/btn2.gif" />
        </a>
        <a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTra

Found 2025-12-22 by HttpPlugin

Create report

Open service 18.66.192.11:443 · do9.link

2025-12-20 21:16

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 4319
Connection: close
Server: nginx/1.20.2
Date: Sat, 20 Dec 2025 21:16:17 GMT
Last-Modified: Tue, 19 Nov 2024 07:26:01 GMT
Accept-Ranges: bytes
ETag: "673c3d89-10df"
X-Cache: Hit from cloudfront
Via: 1.1 5cc4b35b46cb9b55d49e7f47442e6838.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
X-Amz-Cf-Id: fxNHIkH3fb9TwCIlEjAmcmDbC79Tqe8nOO_eJ9UJvtqLV4LX15sAfw==

Page title: do9.link

<html>

<head>
  <link rel="shortcut icon" href="./img/favicon.png" />
  <title>do9.link</title>
  <meta name="description" content="VND88" />
  <meta name="og:type" content="website" />
  <meta name="og:site_name" content="VND88" />
  <meta name="og:title" content="vipVND88" />
  <meta name="og:description" content="VND88" />
  <meta name="og:image" content="./img/20231110-163919.jpeg" />
  <meta name="twitter:card" content="photo" />
  <meta name="twitter:title" content="VND88" />
  <meta name="twitter:description" content="VND88" />
  <meta name="twitter:image:width" content="320px" />
  <meta name="twitter:image:height" content="320px" />
  <meta name="twitter:image:src" content="./img/20231110-163919.jpeg" />
  <meta name="apple-mobile-web-app-capable" content="yes" />
  <meta name="mobile-web-app-capable" content="yes" />
  <meta name="apple-mobile-web-app-status-bar-style" content="default" />
  <meta name="apple-mobile-web-app-title" content="VND88" />

  <link rel="stylesheet" href="globals.css" />
  <link rel="stylesheet" href="style.css" />
  <script>
    !(function (f, b, e, v, n, t, s) {
      if (f.fbq) return;
      n = f.fbq = function () {
        n.callMethod
          ? n.callMethod.apply(n, arguments)
          : n.queue.push(arguments);
      };
      if (!f._fbq) f._fbq = n;
      n.push = n;
      n.loaded = !0;
      n.version = "2.0";
      n.queue = [];
      t = b.createElement(e);
      t.async = !0;
      t.src = v;
      s = b.getElementsByTagName(e)[0];
      s.parentNode.insertBefore(t, s);
    })(
      window,
      document,
      "script",
      "https://connect.facebook.net/en_US/fbevents.js"
    );
    fbq("init", "2000484817118833");
    fbq("track", "PageView");
  </script>
  <noscript>
    <img height="1" width="1" style="display: none"
      src="https://www.facebook.com/tr?id=2000484817118833&ev=PageView&noscript=1" />
  </noscript>
  <!-- End Facebook Pixel Code -->

  <script src="Adjustscript.js"></script>
  <script>
    // get query string, and parse it with URLSearchParams
    const urlParams = new URLSearchParams(window.location.search);
    //p0 = urlParams.get("p0") and fallback to "default"
    p0 = urlParams.get("p0");
    p1 = urlParams.get("p1");
    p2 = urlParams.get("p2");
    p3 = urlParams.get("p3");
    p4 = urlParams.get("p4");
    p5 = urlParams.get("p5");
    p6 = urlParams.get("p6");
    fbPid = getFbPid();
    fbClickId = urlParams.get("fbclid");
    apkUrl = "https://do9.link/d/vnd88t26.apk";
    var userAgent = navigator.userAgent || navigator.vendor || window.opera;
    if (/iPad|iPhone|iPod/.test(userAgent) && !window.MSStream) {
      apkUrl = "https://apps.apple.com/us/app/aaa-o-drag-pacman/id6615062223";
    }
    url = buildURL(p0, p1, p2, p3, p4, p5, p6, apkUrl, fbClickId, fbPid);
    // add links
    window.addEventListener("DOMContentLoaded", function () {
      if (url) {
        var elements = document.querySelectorAll(".AdjustTracker");
        for (var i = 0; i < elements.length; i++) {
          elements[i].setAttribute("href", url);
        }
      } else {
        var elements = document.querySelectorAll(".AdjustTracker");
        for (var i = 0; i < elements.length; i++) {
          elements[i].setAttribute("href", apkUrl);
        }
      }
    });
  </script>
</head>

<body>
  <div class="frame">
    <div class="div">
      <div class="overlap-group">
        <a target="_blank" rel="noopener noreferrer" onclick="fbq('track', 'click_download_button');"
          class="AdjustTracker"><img class="PH-2" src="img/VND88-01.png" /></a>
        
        <a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTracker"
          onclick="fbq('track', 'click_download_button');">
          <img class="PH-23" src="img/btn1.gif" />
        </a>
        <a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTracker"
          onclick="fbq('track', 'click_download_button');">
          <img class="PH-20" src="img/btn2.gif" />
        </a>
        <a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTra

Found 2025-12-20 by HttpPlugin

Create report

do9.link

Fingerprint:

6b1125bd954a01c15fd87455964f7284190d832b0d86658a96f6e5902eabb5d7

CN:

do9.link

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M01

Not before:

2025-10-20 00:00

Not after:

2026-11-18 23:59

Domain summary

do9.link 4

1 recorded

IP summary

18.66.192.11 2

1 recorded

Domain do9.link

United States

Software information

MacOS file listing through .DS_Store file

Create report

Create report

Create report

Create report

do9.link

Domain summary

IP summary