LeakIX - Host h38859.com

Domain h38859.com

United States

Cloudie Limited

Software information

nginx nginx

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 182.237.0.203
Domain: h38859.com
Port: 80
URL: http://h38859.com

First seen 2025-04-12 13:49
Last seen 2025-06-12 06:55
Open for 60 days

Severity: low
Fingerprint: 5f32cf5d6962f09c31c2f0b631c2f0b6e32174b30812a2ea51c22c6d9a9d136b

Found 28 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/img/active
/event/img/sites
/event/img/src
/event/js
/event/mp4
/landing
/landing-login
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-06-12 06:55

Severity: medium
Fingerprint: 5f32cf5d6962f09c7d264b917d264b912bed5b224ff64ddb00a48a4c664f9918

Found 52 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/img/active
/event/img/sites
/event/img/src
/event/js
/event/mp4
/landing
/landing/css
/landing/images
/landing/js
/landing-login
/landing-login/css
/landing-login/css/h5
/landing-login/images
/landing-login/images/pc
/landing-login/js
/landing-login/js/crypto-es
/landing-login/js/qs
/new-download
/qphtml
/qphtml/static
/qphtml/static/active
/qphtml/static/css
/qphtml/static/img
/qphtml/static/js
/qphtml/static/mp4
/static
/static-amhg
/ts-download
/ts-download/css
/ts-download/images
/ts-download/js
/ts-download/muse-ui
/tsnew-download
/tsnew-download/css
/tsnew-download/images
/tsnew-download/js
/tsnew-download/muse-ui

Found on 2025-05-28 02:12

Severity: medium
Fingerprint: 5f32cf5d6962f09cb3107650b3107650f167953d3f4999d063cf6a373de6ca60

Found 39 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/js
/event/mp4
/landing
/landing/css
/landing/images
/landing/js
/landing-login
/landing-login/css
/landing-login/css/h5
/landing-login/images
/landing-login/images/pc
/landing-login/js
/new-download
/qphtml
/ts-download
/ts-download/css
/ts-download/images
/ts-download/js
/ts-download/muse-ui
/tsnew-download
/tsnew-download/css
/tsnew-download/images
/tsnew-download/js
/tsnew-download/muse-ui

Found on 2025-05-20 02:13

Severity: low
Fingerprint: 5f32cf5d6962f09cf35cbfb3f35cbfb3af8132f4042b9df904b60b16701f165f

Found 29 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/js
/event/mp4
/landing
/landing/css
/landing/images
/landing/js
/landing-login
/m
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-04-22 02:10

Severity: low
Fingerprint: 5f32cf5d6962f09c87f05b7087f05b7077e6845d0b01bdf0e060f1d7786b3985

Found 26 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/js
/event/mp4
/landing
/landing-login
/m
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-04-18 14:13

Severity: low
Fingerprint: 5f32cf5d6962f09cab28146bab28146b48c39a0cc5aa657177acdbce0f885978

Found 21 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/landing
/landing-login
/m
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-04-12 13:49

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.160.179.226
Domain: www.h38859.com
Port: 443
URL: https://www.h38859.com

First seen 2025-04-12 13:49
Last seen 2026-02-02 10:42
Open for 295 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c7d264b917d264b912bed5b224ff64ddb00a48a4c664f9918

Found 52 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/img/active
/event/img/sites
/event/img/src
/event/js
/event/mp4
/landing
/landing/css
/landing/images
/landing/js
/landing-login
/landing-login/css
/landing-login/css/h5
/landing-login/images
/landing-login/images/pc
/landing-login/js
/landing-login/js/crypto-es
/landing-login/js/qs
/new-download
/qphtml
/qphtml/static
/qphtml/static/active
/qphtml/static/css
/qphtml/static/img
/qphtml/static/js
/qphtml/static/mp4
/static
/static-amhg
/ts-download
/ts-download/css
/ts-download/images
/ts-download/js
/ts-download/muse-ui
/tsnew-download
/tsnew-download/css
/tsnew-download/images
/tsnew-download/js
/tsnew-download/muse-ui

Found on 2026-02-02 10:42

Severity: low
Fingerprint: 5f32cf5d6962f09c47dfe71947dfe719155d132a71296f030021b0d46c89c05f

Found 16 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/event
/landing
/landing-login
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2026-01-02 20:02

Severity: medium
Fingerprint: 5f32cf5d6962f09c99d3320899d33208c3af8875e1889108d2b85c0fe56ae2b1

Found 44 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/img/active
/event/img/sites
/event/img/src
/event/js
/event/mp4
/landing
/landing/css
/landing/images
/landing/js
/landing-login
/landing-login/css
/landing-login/css/h5
/landing-login/images
/landing-login/images/pc
/landing-login/js
/landing-login/js/crypto-es
/landing-login/js/qs
/new-download
/qphtml
/qphtml/static
/qphtml/static/active
/qphtml/static/css
/qphtml/static/img
/qphtml/static/js
/qphtml/static/mp4
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-12-27 06:07

Severity: medium
Fingerprint: 5f32cf5d6962f09c3e8b9cac3e8b9cac0b6b4661b29f418cb0ed470b6bce67d0

Found 48 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/img/active
/event/img/sites
/event/img/src
/event/js
/event/mp4
/landing
/landing/css
/landing/images
/landing/js
/landing-login
/landing-login/css
/landing-login/css/h5
/landing-login/images
/landing-login/images/pc
/landing-login/js
/landing-login/js/crypto-es
/landing-login/js/qs
/new-download
/qphtml
/qphtml/static
/qphtml/static/active
/qphtml/static/css
/qphtml/static/img
/qphtml/static/js
/qphtml/static/mp4
/static
/static-amhg
/ts-download
/ts-download/css
/ts-download/images
/ts-download/js
/ts-download/muse-ui
/tsnew-download

Found on 2025-12-24 21:07

Severity: low
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcf947301c83d9eabc5c40700aa24fffbf6

Found 25 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/js
/event/mp4
/landing
/landing-login
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-12-01 16:02

Severity: low
Fingerprint: 5f32cf5d6962f09c2a439cf82a439cf8ce7a926524c8951840ac91df84782a88

Found 31 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/img/active
/event/img/sites
/event/img/src
/event/js
/event/mp4
/landing
/landing/css
/landing/images
/landing/js
/landing-login
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-11-29 07:16

Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e7ad6bcebe57a3e4242c116c55fdef6dd

Found 20 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/landing
/landing-login
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-11-21 09:57

Severity: medium
Fingerprint: 5f32cf5d6962f09ca629b8b1a629b8b1461559c22d7bc4fbba3a33ecac0bc682

Found 34 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/img/active
/event/img/sites
/event/img/src
/event/js
/event/mp4
/landing
/landing/css
/landing/images
/landing/js
/landing-login
/landing-login/css
/landing-login/images
/landing-login/js
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-10-29 04:43

Severity: low
Fingerprint: 5f32cf5d6962f09c31c2f0b631c2f0b6e32174b30812a2ea51c22c6d9a9d136b

Found 28 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/img/active
/event/img/sites
/event/img/src
/event/js
/event/mp4
/landing
/landing-login
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-10-27 08:23

Severity: low
Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea9026c29bae627df736fd4d744d625ff4a

Found 23 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/js
/event/mp4
/landing
/landing-login
/new-download
/qphtml
/ts-download
/tsnew-download

Found on 2025-05-16 08:30

Severity: low
Fingerprint: 5f32cf5d6962f09c87f05b7087f05b7077e6845d0b01bdf0e060f1d7786b3985

Found 26 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/js
/event/mp4
/landing
/landing-login
/m
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-04-20 09:34

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.160.179.226
Domain: h38859.com
Port: 443
URL: https://h38859.com

First seen 2025-10-09 13:14
Last seen 2026-02-09 20:19
Open for 123 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c99d3320899d33208c3af8875e1889108d2b85c0fe56ae2b1

Found 44 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/img/active
/event/img/sites
/event/img/src
/event/js
/event/mp4
/landing
/landing/css
/landing/images
/landing/js
/landing-login
/landing-login/css
/landing-login/css/h5
/landing-login/images
/landing-login/images/pc
/landing-login/js
/landing-login/js/crypto-es
/landing-login/js/qs
/new-download
/qphtml
/qphtml/static
/qphtml/static/active
/qphtml/static/css
/qphtml/static/img
/qphtml/static/js
/qphtml/static/mp4
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2026-02-09 20:19

Severity: medium
Fingerprint: 5f32cf5d6962f09c7d264b917d264b912bed5b224ff64ddb00a48a4c664f9918

Found 52 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/img/active
/event/img/sites
/event/img/src
/event/js
/event/mp4
/landing
/landing/css
/landing/images
/landing/js
/landing-login
/landing-login/css
/landing-login/css/h5
/landing-login/images
/landing-login/images/pc
/landing-login/js
/landing-login/js/crypto-es
/landing-login/js/qs
/new-download
/qphtml
/qphtml/static
/qphtml/static/active
/qphtml/static/css
/qphtml/static/img
/qphtml/static/js
/qphtml/static/mp4
/static
/static-amhg
/ts-download
/ts-download/css
/ts-download/images
/ts-download/js
/ts-download/muse-ui
/tsnew-download
/tsnew-download/css
/tsnew-download/images
/tsnew-download/js
/tsnew-download/muse-ui

Found on 2026-02-09 20:19

Severity: medium
Fingerprint: 5f32cf5d6962f09c3e8b9cac3e8b9cac0b6b4661b29f418cb0ed470b6bce67d0

Found 48 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/img/active
/event/img/sites
/event/img/src
/event/js
/event/mp4
/landing
/landing/css
/landing/images
/landing/js
/landing-login
/landing-login/css
/landing-login/css/h5
/landing-login/images
/landing-login/images/pc
/landing-login/js
/landing-login/js/crypto-es
/landing-login/js/qs
/new-download
/qphtml
/qphtml/static
/qphtml/static/active
/qphtml/static/css
/qphtml/static/img
/qphtml/static/js
/qphtml/static/mp4
/static
/static-amhg
/ts-download
/ts-download/css
/ts-download/images
/ts-download/js
/ts-download/muse-ui
/tsnew-download

Found on 2026-02-02 10:01

Severity: low
Fingerprint: 5f32cf5d6962f09c47dfe71947dfe719155d132a71296f030021b0d46c89c05f

Found 16 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/event
/landing
/landing-login
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2026-01-02 20:38

Severity: low
Fingerprint: 5f32cf5d6962f09c2a439cf82a439cf8ce7a926524c8951840ac91df84782a88

Found 31 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/img/active
/event/img/sites
/event/img/src
/event/js
/event/mp4
/landing
/landing/css
/landing/images
/landing/js
/landing-login
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-12-13 04:38

Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e7ad6bcebe57a3e4242c116c55fdef6dd

Found 20 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/landing
/landing-login
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-11-28 17:54

Severity: low
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcf947301c83d9eabc5c40700aa24fffbf6

Found 25 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/js
/event/mp4
/landing
/landing-login
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-11-26 22:53

Severity: low
Fingerprint: 5f32cf5d6962f09c31c2f0b631c2f0b6e32174b30812a2ea51c22c6d9a9d136b

Found 28 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/img/active
/event/img/sites
/event/img/src
/event/js
/event/mp4
/landing
/landing-login
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-11-14 18:02

Severity: medium
Fingerprint: 5f32cf5d6962f09ca629b8b1a629b8b1461559c22d7bc4fbba3a33ecac0bc682

Found 34 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/img/active
/event/img/sites
/event/img/src
/event/js
/event/mp4
/landing
/landing/css
/landing/images
/landing/js
/landing-login
/landing-login/css
/landing-login/images
/landing-login/js
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-10-29 00:41

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 43.240.15.43
Domain: www.h38859.com
Port: 80
URL: http://www.h38859.com

First seen 2025-04-12 13:49
Last seen 2025-05-26 05:32
Open for 43 days

Severity: low
Fingerprint: 5f32cf5d6962f09c31c2f0b631c2f0b6e32174b30812a2ea51c22c6d9a9d136b

Found 28 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/img/active
/event/img/sites
/event/img/src
/event/js
/event/mp4
/landing
/landing-login
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-05-26 05:32

Severity: low
Fingerprint: 5f32cf5d6962f09c87f05b7087f05b7077e6845d0b01bdf0e060f1d7786b3985

Found 26 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/js
/event/mp4
/landing
/landing-login
/m
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-05-06 10:29

Severity: low
Fingerprint: 5f32cf5d6962f09cf35cbfb3f35cbfb3af8132f4042b9df904b60b16701f165f

Found 29 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/event/active
/event/css
/event/img
/event/js
/event/mp4
/landing
/landing/css
/landing/images
/landing/js
/landing-login
/m
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-05-06 03:51

Severity: low
Fingerprint: 5f32cf5d6962f09cab28146bab28146b48c39a0cc5aa657177acdbce0f885978

Found 21 files trough .DS_Store spidering:

/.git
/888
/app-deskservice
/app-deskservice/css
/app-deskservice/js
/app-deskservice/static
/app-download
/app-download/css
/app-download/files
/app-download/images
/app-download/js
/event
/landing
/landing-login
/m
/new-download
/qphtml
/static
/static-amhg
/ts-download
/tsnew-download

Found on 2025-04-12 13:49

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 182.237.0.203
Domain: h38859.com
Port: 80
URL: http://h38859.com

First seen 2025-04-12 13:49
Last seen 2025-06-12 06:55
Open for 60 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522def08037
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = root@6669786.com:lottery-site/lottery-repo-amhg
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2025-06-12 06:55
  
  272 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 43.240.15.43
Domain: www.h38859.com
Port: 80
URL: http://www.h38859.com

First seen 2025-04-12 13:49
Last seen 2025-05-26 05:32
Open for 43 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522def08037
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = root@6669786.com:lottery-site/lottery-repo-amhg
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2025-05-26 05:32
  
  272 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 43.240.15.43
Domain: www.h38859.com
Port: 443
URL: https://www.h38859.com

First seen 2025-04-12 13:49
Last seen 2026-02-02 10:42
Open for 295 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522def08037
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = root@6669786.com:lottery-site/lottery-repo-amhg
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-02-02 10:42
  
  272 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 104.160.179.251
Domain: h38859.com
Port: 443
URL: https://h38859.com

First seen 2025-10-09 13:14
Last seen 2026-02-09 20:19
Open for 123 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522def08037
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = root@6669786.com:lottery-site/lottery-repo-amhg
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-02-09 20:19
  
  272 Bytes
Create report

Open service 104.160.179.226:443 · www.h38859.com

2026-01-23 07:16

HTTP/1.1 601 
Server: nginx 
Date: Fri, 23 Jan 2026 07:16:35 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload


<!DOCTYPE html>
<html>
<title></title>
<head>
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <style>
        body{font-family:-apple-system,system-ui,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"}a{color:#000;font-size:18px}p{font-size:20px;height:40px;line-height:40px}.msg{margin-right:auto;margin-left:auto;position:relative;max-width:767px}.title{background-color:#3a4781;border-radius:15px 15px 0 0;box-shadow:0 0 10px 0 rgba(0,0,0,0.5);transition:background .3s,border .3s,border-radius .3s,box-shadow .3s;padding:10px 25px;display:flex;color:#fff}.body{padding:35px 25px;border-radius:0 0 15px 15px;box-shadow:0 0 10px 0 rgba(0,0,0,0.5);transition:background .3s,border .3s,border-radius .3s,box-shadow .3s}.footer{display:inline;margin:auto;position:relative}.line1,.line2{display:flex;justify-content:center;align-items:center}.logo{color:#24305e;font-size:20px;margin-right:15px;height:120px;display:flex}.subtitle{font-size:30px;font-weight:bolder;height:40px;line-height:40px}.txt{display:flex;text-align:center;justify-content:center;height:40px}@media(max-width:480px){.logo,.cdnlink{display:flex;justify-content:center;align-items:center}.line1{display:block}}
    </style>
    <script src="https://www.recaptcha.net/recaptcha/api.js?hl=zh-CN" async defer></script>
    <script>
        function onSubmit(token) {
            document.getElementById('cdn_recaptcha_token').value = token;
            document.getElementById('cdn_form').action = window.location.href;
            document.getElementById('cdn_form').submit()
        }
    </script>
</head>
<body>
<div class="container">
    <div class="msg">
        <div class="title">
            <h1>www.h38859.com - 需要进行额外的安全检查</h1>
        </div>
        <div class="body">
            <div class="txt">
                <form id="cdn_form" method="GET" action="">
                    
                    <input type="hidden" name="cdn_recaptcha_token" id="cdn_recaptcha_token" value="" />
                    <button id="cdn_button" class="g-recaptcha" data-sitekey="6LdSDsMrAAAAAGHztBUkmv1fG5Xl84M1lxcG7-Pc"
                            data-callback="onSubmit" style="font-size: 20px;padding:5px">人机验证</button>
                </form>
            </div>
            <div class="subtitle">发生了什么？</div>
            <p>请求被阻挡。</p>
            <div class="subtitle">我应该怎么做？</div>
            <p>点击人机验证解除阻挡</p>
            <p>代码: 601</p><p>编号: 0871bef45fe64e01aed222a8e55d08e2</p><p>访客地址: 138.68.82.23 </p><p>网址: https://www.h38859.com/ </p><p>请求方法: GET </p><p>时间: 2026-01-23 15:16:35 </p>
        </div>
    </div>
</div>
</body>
</html>

Found 2026-01-23 by HttpPlugin

Create report

Open service 104.160.179.226:443 · h38859.com

2026-01-23 04:48

HTTP/1.1 200 OK
Server: nginx 
Date: Fri, 23 Jan 2026 04:48:55 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 4350
Connection: close
Vary: Accept-Encoding
Last-Modified: Sat, 04 Oct 2025 12:00:55 GMT
ETag: "68e10c77-10fe"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes

Page title: Welcome

<!DOCTYPE html>
<html style="height: 100%;">

<head>
  <meta charset="utf-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
  <title>Welcome</title>

  <script>
    function isMobile() {
      return !!(navigator.userAgent.match(
        /(phone|pad|pod|iPhone|iPod|ios|iPad|android|Mobile|BlackBerry|IEMobile|MQQBrowser|JUC|Fennec|wOSBrowser|BrowserNG|WebOS|Symbian|Windows Phone)/i
        ))
    }
    if (isMobile() !== false) {
      if (location.href.indexOf('#') > -1) {
        location.href = location.origin + '/m/#/home?' + (location.href.split('#')[1].split('?')[1] || '')
      } else {
        location.href = location.origin + '/m/#/home' + location.search
      }
    }
    (function () {
      var url = window.location.href,
        obj = {},
        keyvalue = [],
        key = '',
        value = '',
        parseString = url.substring(url.indexOf('?') + 1, url.length).split('&')
      for (var i in parseString) {
        keyvalue = parseString[i].split('=')
        key = keyvalue[0]
        value = keyvalue[1] && keyvalue[1].includes('#/') ? keyvalue[1].split('#/')[0] : keyvalue[1]
        obj[key] = value
      }

      if (obj.agent) {
        localStorage.setItem('agent', obj.agent)
      }
      if (obj.isPcInfo) {
        isPcInfo = obj.isPcInfo;
      }
      if(obj.register){
          if(!localStorage.token){
              localStorage.setItem('register', obj.register)
          }
      }
    })()
    window.vis = true
    window.onblur = function () {
      window.vis = false
    }
    window.onfocus = function () {
      window.vis = true
      if (typeof window.balanceTask === 'function') {
        window.balanceTask()
      }
    }
    if(!document.querySelector('.statistics')) {
      let head = document.head || document.getElementsByTagName('head')[0];
      let script = document.createElement('script');
      let div = document.createElement('div');
      div.classList = 'statistics'
      div.style.position = 'fixed'
      div.style.left = '-9999px'
      div.style.top = '-9999px'
      script.setAttribute("src", "https://hm.baidu.com/hm.js?d31496c5dd1bc8f680917e22dbaf6106");
      div.appendChild(script);
      head.appendChild(div);
    }
    if(!isMobile()) {
      function loadJS( url, callback ) {
        var script = document.createElement('script'),
        fn = callback || function(){};
        script.type = 'text/javascript';

        //IE
        if(script.readyState){
          script.onreadystatechange = function(){
            if( script.readyState == 'loaded' || script.readyState == 'complete' ){
                script.onreadystatechange = null;
                fn()
            }
          }
        }else{
          // 其他浏览器
          script.onload = function(){
            fn()
          }
        }
        script.src = url;
        document.getElementsByTagName('head')[0].appendChild(script);
      }

      let loadTable = ['/static/public/js/stomp.js', '/static/public/js/qrcode.js'
      , `https://cstaticdun.126.net/load.min.js?t=1759565099345`,
      `https://acstatic-dun.126.net/tool.min.js?t=1759565099345`
      ]
      // 用法
      loadTable.forEach( (url) => {
        loadJS(url,function(e){
          // console.log("🚀 ~ file: index.html ~ line 85 ~ loadJS ~ url loaded success", url)
        })
      })

    }
  </script>
  <link rel="shortcut icon" href="/static/amhg/img/favicon.ico" type="image/x-icon">
  <!-- <script src="/static/public/js/stomp.js"></script>
  <script src="/static/public/js/qrcode.js"></script>
  <script src="https://cstaticdun.126.net/load.min.js?t=201903281201"></script>
  <script type="text/javascript" src="https://acstatic-dun.126.net/tool.min.js?t=201903281201"></script> -->
<link href="/static-amhg/style.css" rel="stylesheet"><link href="/static-amhg/css/pages/amhg/index.162c11812b5978cb64ae8485fdf0170d.css" rel="stylesheet"></head>

<body style="height: 100%;">
  <div id="klkApp">

  </div>
<script type="text/javascript" src="/static-amhg/js/manifest.8c360726061d06cd94fe.js?v=2025-10-4-16:04:46"></script><

Found 2026-01-23 by HttpPlugin

Create report

Open service 104.160.179.251:443 · h38859.com

2026-01-23 04:48

HTTP/1.1 200 OK
Server: nginx 
Date: Fri, 23 Jan 2026 04:48:55 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 4350
Connection: close
Vary: Accept-Encoding
Last-Modified: Sat, 04 Oct 2025 12:00:55 GMT
ETag: "68e10c77-10fe"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes

Page title: Welcome

<!DOCTYPE html>
<html style="height: 100%;">

<head>
  <meta charset="utf-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
  <title>Welcome</title>

  <script>
    function isMobile() {
      return !!(navigator.userAgent.match(
        /(phone|pad|pod|iPhone|iPod|ios|iPad|android|Mobile|BlackBerry|IEMobile|MQQBrowser|JUC|Fennec|wOSBrowser|BrowserNG|WebOS|Symbian|Windows Phone)/i
        ))
    }
    if (isMobile() !== false) {
      if (location.href.indexOf('#') > -1) {
        location.href = location.origin + '/m/#/home?' + (location.href.split('#')[1].split('?')[1] || '')
      } else {
        location.href = location.origin + '/m/#/home' + location.search
      }
    }
    (function () {
      var url = window.location.href,
        obj = {},
        keyvalue = [],
        key = '',
        value = '',
        parseString = url.substring(url.indexOf('?') + 1, url.length).split('&')
      for (var i in parseString) {
        keyvalue = parseString[i].split('=')
        key = keyvalue[0]
        value = keyvalue[1] && keyvalue[1].includes('#/') ? keyvalue[1].split('#/')[0] : keyvalue[1]
        obj[key] = value
      }

      if (obj.agent) {
        localStorage.setItem('agent', obj.agent)
      }
      if (obj.isPcInfo) {
        isPcInfo = obj.isPcInfo;
      }
      if(obj.register){
          if(!localStorage.token){
              localStorage.setItem('register', obj.register)
          }
      }
    })()
    window.vis = true
    window.onblur = function () {
      window.vis = false
    }
    window.onfocus = function () {
      window.vis = true
      if (typeof window.balanceTask === 'function') {
        window.balanceTask()
      }
    }
    if(!document.querySelector('.statistics')) {
      let head = document.head || document.getElementsByTagName('head')[0];
      let script = document.createElement('script');
      let div = document.createElement('div');
      div.classList = 'statistics'
      div.style.position = 'fixed'
      div.style.left = '-9999px'
      div.style.top = '-9999px'
      script.setAttribute("src", "https://hm.baidu.com/hm.js?d31496c5dd1bc8f680917e22dbaf6106");
      div.appendChild(script);
      head.appendChild(div);
    }
    if(!isMobile()) {
      function loadJS( url, callback ) {
        var script = document.createElement('script'),
        fn = callback || function(){};
        script.type = 'text/javascript';

        //IE
        if(script.readyState){
          script.onreadystatechange = function(){
            if( script.readyState == 'loaded' || script.readyState == 'complete' ){
                script.onreadystatechange = null;
                fn()
            }
          }
        }else{
          // 其他浏览器
          script.onload = function(){
            fn()
          }
        }
        script.src = url;
        document.getElementsByTagName('head')[0].appendChild(script);
      }

      let loadTable = ['/static/public/js/stomp.js', '/static/public/js/qrcode.js'
      , `https://cstaticdun.126.net/load.min.js?t=1759565099345`,
      `https://acstatic-dun.126.net/tool.min.js?t=1759565099345`
      ]
      // 用法
      loadTable.forEach( (url) => {
        loadJS(url,function(e){
          // console.log("🚀 ~ file: index.html ~ line 85 ~ loadJS ~ url loaded success", url)
        })
      })

    }
  </script>
  <link rel="shortcut icon" href="/static/amhg/img/favicon.ico" type="image/x-icon">
  <!-- <script src="/static/public/js/stomp.js"></script>
  <script src="/static/public/js/qrcode.js"></script>
  <script src="https://cstaticdun.126.net/load.min.js?t=201903281201"></script>
  <script type="text/javascript" src="https://acstatic-dun.126.net/tool.min.js?t=201903281201"></script> -->
<link href="/static-amhg/style.css" rel="stylesheet"><link href="/static-amhg/css/pages/amhg/index.162c11812b5978cb64ae8485fdf0170d.css" rel="stylesheet"></head>

<body style="height: 100%;">
  <div id="klkApp">

  </div>
<script type="text/javascript" src="/static-amhg/js/manifest.8c360726061d06cd94fe.js?v=2025-10-4-16:04:46"></script><

Found 2026-01-23 by HttpPlugin

Create report

Open service 104.160.179.226:443 · www.h38859.com

2026-01-10 00:38

HTTP/1.1 200 OK
Server: nginx 
Date: Sat, 10 Jan 2026 00:38:31 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 4350
Connection: close
Vary: Accept-Encoding
Last-Modified: Sat, 04 Oct 2025 12:00:55 GMT
ETag: "68e10c77-10fe"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes

Page title: Welcome

<!DOCTYPE html>
<html style="height: 100%;">

<head>
  <meta charset="utf-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
  <title>Welcome</title>

  <script>
    function isMobile() {
      return !!(navigator.userAgent.match(
        /(phone|pad|pod|iPhone|iPod|ios|iPad|android|Mobile|BlackBerry|IEMobile|MQQBrowser|JUC|Fennec|wOSBrowser|BrowserNG|WebOS|Symbian|Windows Phone)/i
        ))
    }
    if (isMobile() !== false) {
      if (location.href.indexOf('#') > -1) {
        location.href = location.origin + '/m/#/home?' + (location.href.split('#')[1].split('?')[1] || '')
      } else {
        location.href = location.origin + '/m/#/home' + location.search
      }
    }
    (function () {
      var url = window.location.href,
        obj = {},
        keyvalue = [],
        key = '',
        value = '',
        parseString = url.substring(url.indexOf('?') + 1, url.length).split('&')
      for (var i in parseString) {
        keyvalue = parseString[i].split('=')
        key = keyvalue[0]
        value = keyvalue[1] && keyvalue[1].includes('#/') ? keyvalue[1].split('#/')[0] : keyvalue[1]
        obj[key] = value
      }

      if (obj.agent) {
        localStorage.setItem('agent', obj.agent)
      }
      if (obj.isPcInfo) {
        isPcInfo = obj.isPcInfo;
      }
      if(obj.register){
          if(!localStorage.token){
              localStorage.setItem('register', obj.register)
          }
      }
    })()
    window.vis = true
    window.onblur = function () {
      window.vis = false
    }
    window.onfocus = function () {
      window.vis = true
      if (typeof window.balanceTask === 'function') {
        window.balanceTask()
      }
    }
    if(!document.querySelector('.statistics')) {
      let head = document.head || document.getElementsByTagName('head')[0];
      let script = document.createElement('script');
      let div = document.createElement('div');
      div.classList = 'statistics'
      div.style.position = 'fixed'
      div.style.left = '-9999px'
      div.style.top = '-9999px'
      script.setAttribute("src", "https://hm.baidu.com/hm.js?d31496c5dd1bc8f680917e22dbaf6106");
      div.appendChild(script);
      head.appendChild(div);
    }
    if(!isMobile()) {
      function loadJS( url, callback ) {
        var script = document.createElement('script'),
        fn = callback || function(){};
        script.type = 'text/javascript';

        //IE
        if(script.readyState){
          script.onreadystatechange = function(){
            if( script.readyState == 'loaded' || script.readyState == 'complete' ){
                script.onreadystatechange = null;
                fn()
            }
          }
        }else{
          // 其他浏览器
          script.onload = function(){
            fn()
          }
        }
        script.src = url;
        document.getElementsByTagName('head')[0].appendChild(script);
      }

      let loadTable = ['/static/public/js/stomp.js', '/static/public/js/qrcode.js'
      , `https://cstaticdun.126.net/load.min.js?t=1759565099345`,
      `https://acstatic-dun.126.net/tool.min.js?t=1759565099345`
      ]
      // 用法
      loadTable.forEach( (url) => {
        loadJS(url,function(e){
          // console.log("🚀 ~ file: index.html ~ line 85 ~ loadJS ~ url loaded success", url)
        })
      })

    }
  </script>
  <link rel="shortcut icon" href="/static/amhg/img/favicon.ico" type="image/x-icon">
  <!-- <script src="/static/public/js/stomp.js"></script>
  <script src="/static/public/js/qrcode.js"></script>
  <script src="https://cstaticdun.126.net/load.min.js?t=201903281201"></script>
  <script type="text/javascript" src="https://acstatic-dun.126.net/tool.min.js?t=201903281201"></script> -->
<link href="/static-amhg/style.css" rel="stylesheet"><link href="/static-amhg/css/pages/amhg/index.162c11812b5978cb64ae8485fdf0170d.css" rel="stylesheet"></head>

<body style="height: 100%;">
  <div id="klkApp">

  </div>
<script type="text/javascript" src="/static-amhg/js/manifest.8c360726061d06cd94fe.js?v=2025-10-4-16:04:46"></script><

Found 2026-01-10 by HttpPlugin

Create report

www.h38859.com

Fingerprint:

18841e425117ea89ec2230abc7141e5c8f4465780e9932d8ddab0bd4c2d6bfde

CN:

www.h38859.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-12-08 19:00

Not after:

2026-03-08 19:00

h38859.com

Fingerprint:

61c452c6e86eee1da268d9625e9a6a4bdfb1b0788b3fc18d21be52b21361bab0

CN:

h38859.com

Key:

RSA-2048

Issuer:

ZeroSSL RSA Domain Secure Site CA

Not before:

2025-12-08 00:00

Not after:

2026-03-08 23:59

Domain summary

www.h38859.com 18 h38859.com 18

2 recorded

IP summary

104.160.179.226 3 104.160.179.251 1 182.237.0.203 1 43.240.15.43 1

4 recorded

Domain h38859.com

United States

Software information

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Create report

Create report

Create report

Create report

www.h38859.com

h38859.com

Domain summary

IP summary