LeakIX - Host idion.locker

Open service 2400:52e0:1e00::864:1:80 · idion.locker

2026-01-24 23:05

HTTP/1.1 301 Moved Permanently
Date: Sat, 24 Jan 2026 23:05:48 GMT
Content-Type: text/html
Content-Length: 166
Connection: close
Server: BunnyCDN-DE1-864
CDN-PullZone: 5071379
CDN-RequestCountryCode: IN
Location: https://idion.locker/
CDN-RequestId: 6c8fe186f7e8cd65499c1852ebdab5b3
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=(), payment=()
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Resource-Policy: same-origin
Cross-Origin-Opener-Policy: same-origin
X-Content-Type-Options: nosniff
CDN-RequestTime: 0

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>openresty</center>
</body>
</html>

Found 2026-01-24 by HttpPlugin

Create report

Open service 185.59.220.198:80 · idion.locker

2026-01-24 23:05

HTTP/1.1 301 Moved Permanently
Date: Sat, 24 Jan 2026 23:05:47 GMT
Content-Type: text/html
Content-Length: 166
Connection: close
Server: BunnyCDN-DE1-723
CDN-PullZone: 5071379
CDN-RequestCountryCode: DE
Location: https://idion.locker/
CDN-RequestId: e2fc0b1bb5f64b2376e35d27c4e4e6ed
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=(), payment=()
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Resource-Policy: same-origin
Cross-Origin-Opener-Policy: same-origin
X-Content-Type-Options: nosniff
CDN-RequestTime: 0

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>openresty</center>
</body>
</html>

Found 2026-01-24 by HttpPlugin

Create report

Open service 185.59.220.198:443 · idion.locker

2026-01-24 23:05

HTTP/1.1 200 OK
Date: Sat, 24 Jan 2026 23:05:48 GMT
Content-Type: text/html
Content-Length: 6474
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-DE1-723
CDN-PullZone: 5071379
CDN-RequestCountryCode: SG
Cache-Control: public, max-age=2592000
Last-Modified: Sun, 04 Jan 2026 23:35:22 GMT
x-amz-request-id: HCFF00690058E231E5
CDN-ProxyVer: 1.43
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 206
CDN-CachedAt: 01/10/2026 16:46:55
CDN-EdgeStorageId: 1334
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Resource-Policy: same-origin
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=(), payment=()
CDN-RequestId: 7c13d9799f90950778deea7bd8305883
CDN-Cache: HIT
CDN-Status: 200
CDN-RequestTime: 0
Accept-Ranges: bytes


<!doctype html>
<html lang="en">
<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
	<base href="/" />
    <style>
        :root {
            --font-stack: 'Inter', 'Noto Sans', sans-serif;
            --bg-color: #050505;
            --text-color: #050505;
        }

        body {
            margin: 0;
            background: var(--bg-color);
            color: var(--text-color);
            height: 100vh;
            display: flex;
            flex-direction: column;
            justify-content: center;
            align-items: center;
            font-family: var(--font-stack); 
            overflow: hidden;
        }

        h1 {
            font-weight: 700; 
            font-size: 8rem;
            margin: 0;
            letter-spacing: -0.04em;
            line-height: 1;
        }

        @media (max-width: 600px) {
            h1 { font-size: 4rem; }
        }
    </style>

	<!-- 1. LOAD SHARED LOGIC SYNCHRONOUSLY -->
	<script src="./config/loader.js"></script>

	<!-- 2. SECURE CONFIG LOADER (Uses globals from ./config/loader.js) -->
	<script>
		(async () => {
			// Use constants/functions from ./config/loader.js
			const SALT = window.SALT || 'h3cr8';
			const getID = window.getID;
			const extractHostname = window.extractHostname;

			if (!getID || !extractHostname) {
				console.error("Critical: ./config/loader.js failed to load.");
				return;
			}

			//const url = "https://app.example.com/index.html"; // Example with BRAND NAME
			const url = window.location.href;
			const hostname = extractHostname(url);

			// Helper: Inject DOM Elements
			const inject = (tag, attr = {}, parent = document.head) => {
				const el = document.createElement(tag);
				for (const k in attr) el.setAttribute(k, attr[k]);
				parent.appendChild(el);
				return el;
			};

			// Helper: Wait for DOM to be ready
			const ready = () => new Promise(r => document.readyState !== 'loading' ? r() : document.addEventListener('DOMContentLoaded', r));

			// --- CASCADING LOOKUP ---
			let config = null;

			// Generate hierarchy candidates: e.g. ["sub.domain.com", "domain.com", "com", ""]
			const candidates = [];
			if (hostname) {
				const labels = hostname.split('.');
				for (let i = 0; i < labels.length; i++) {
					candidates.push(labels.slice(i).join('.'));
				}
			}
			// Fallback: The empty string evaluates to the root hash (gtmu080g3r2e4eqoix3c6r1dw)
			candidates.push("");

			for (const domain of candidates) {
				try {
					const hash = await getID(domain, SALT);
					// Import config. The config file itself MUST resolve its own asset paths.
					config = (await import(`./config/${hash}/config.js`)).default;
					if (config) {
						console.log(`Config loaded for '${domain}' (${hash})`);
						break;
					}
				} catch (e) {
					// alert(domain);
					// Config not found for this level, continue cascading up
				}
			}

			// --- APPLY ---
			if (config) {
				// 1. Expose Config Globally for UI Components (OmniBar, etc.)
				window.CONFIG = config;

				// 2. Set Meta Title (Browser Tab)
				// Priority: metaTitle -> title
				document.title = config.metaTitle || config.title;

				// 3. Set Theme Color
				document.documentElement.style.setProperty('--bg-app', config.color);

				if (config.manifest) inject('link', { rel: 'manifest', href: config.manifest });
				if (config.color) inject('meta', { name: 'theme-color', content: config.color });

				// --- DYNAMIC SVG ICON GENERATION ---
				// UPDATED LOGIC: Prioritize explicit Initials over inherited Icons.
				// This fixes the issue where spread syntax (...primary) causes specific configs
				// to inherit the fallback icon even when they defined 'initials'.

				const hasExplicitInitials = (typeof config.initials === 'string');

				if (hasExplicitInitials) {
					// 1. Explicit Initials (User wanted this)
					const initials = config.initials;
					const svgString = `
                    <svg xmlns="http://www.w3.org/2000/svg" width="100" height="100" viewBox="0 0 100 100">
                    <circle cx="5

Found 2026-01-24 by HttpPlugin

Create report

Open service 2400:52e0:1e00::864:1:443 · idion.locker

2026-01-24 23:05

HTTP/1.1 200 OK
Date: Sat, 24 Jan 2026 23:05:47 GMT
Content-Type: text/html
Content-Length: 6474
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-DE1-864
CDN-PullZone: 5071379
CDN-RequestCountryCode: GB
Cache-Control: public, max-age=2592000
Last-Modified: Sun, 04 Jan 2026 23:35:22 GMT
x-amz-request-id: HCFF00690058E231E5
CDN-ProxyVer: 1.43
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 206
CDN-CachedAt: 01/10/2026 16:46:55
CDN-EdgeStorageId: 1334
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Resource-Policy: same-origin
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=(), payment=()
CDN-RequestId: dac8875c3093f564095b6714e16a9f31
CDN-Cache: HIT
CDN-Status: 200
CDN-RequestTime: 0
Accept-Ranges: bytes


<!doctype html>
<html lang="en">
<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
	<base href="/" />
    <style>
        :root {
            --font-stack: 'Inter', 'Noto Sans', sans-serif;
            --bg-color: #050505;
            --text-color: #050505;
        }

        body {
            margin: 0;
            background: var(--bg-color);
            color: var(--text-color);
            height: 100vh;
            display: flex;
            flex-direction: column;
            justify-content: center;
            align-items: center;
            font-family: var(--font-stack); 
            overflow: hidden;
        }

        h1 {
            font-weight: 700; 
            font-size: 8rem;
            margin: 0;
            letter-spacing: -0.04em;
            line-height: 1;
        }

        @media (max-width: 600px) {
            h1 { font-size: 4rem; }
        }
    </style>

	<!-- 1. LOAD SHARED LOGIC SYNCHRONOUSLY -->
	<script src="./config/loader.js"></script>

	<!-- 2. SECURE CONFIG LOADER (Uses globals from ./config/loader.js) -->
	<script>
		(async () => {
			// Use constants/functions from ./config/loader.js
			const SALT = window.SALT || 'h3cr8';
			const getID = window.getID;
			const extractHostname = window.extractHostname;

			if (!getID || !extractHostname) {
				console.error("Critical: ./config/loader.js failed to load.");
				return;
			}

			//const url = "https://app.example.com/index.html"; // Example with BRAND NAME
			const url = window.location.href;
			const hostname = extractHostname(url);

			// Helper: Inject DOM Elements
			const inject = (tag, attr = {}, parent = document.head) => {
				const el = document.createElement(tag);
				for (const k in attr) el.setAttribute(k, attr[k]);
				parent.appendChild(el);
				return el;
			};

			// Helper: Wait for DOM to be ready
			const ready = () => new Promise(r => document.readyState !== 'loading' ? r() : document.addEventListener('DOMContentLoaded', r));

			// --- CASCADING LOOKUP ---
			let config = null;

			// Generate hierarchy candidates: e.g. ["sub.domain.com", "domain.com", "com", ""]
			const candidates = [];
			if (hostname) {
				const labels = hostname.split('.');
				for (let i = 0; i < labels.length; i++) {
					candidates.push(labels.slice(i).join('.'));
				}
			}
			// Fallback: The empty string evaluates to the root hash (gtmu080g3r2e4eqoix3c6r1dw)
			candidates.push("");

			for (const domain of candidates) {
				try {
					const hash = await getID(domain, SALT);
					// Import config. The config file itself MUST resolve its own asset paths.
					config = (await import(`./config/${hash}/config.js`)).default;
					if (config) {
						console.log(`Config loaded for '${domain}' (${hash})`);
						break;
					}
				} catch (e) {
					// alert(domain);
					// Config not found for this level, continue cascading up
				}
			}

			// --- APPLY ---
			if (config) {
				// 1. Expose Config Globally for UI Components (OmniBar, etc.)
				window.CONFIG = config;

				// 2. Set Meta Title (Browser Tab)
				// Priority: metaTitle -> title
				document.title = config.metaTitle || config.title;

				// 3. Set Theme Color
				document.documentElement.style.setProperty('--bg-app', config.color);

				if (config.manifest) inject('link', { rel: 'manifest', href: config.manifest });
				if (config.color) inject('meta', { name: 'theme-color', content: config.color });

				// --- DYNAMIC SVG ICON GENERATION ---
				// UPDATED LOGIC: Prioritize explicit Initials over inherited Icons.
				// This fixes the issue where spread syntax (...primary) causes specific configs
				// to inherit the fallback icon even when they defined 'initials'.

				const hasExplicitInitials = (typeof config.initials === 'string');

				if (hasExplicitInitials) {
					// 1. Explicit Initials (User wanted this)
					const initials = config.initials;
					const svgString = `
                    <svg xmlns="http://www.w3.org/2000/svg" width="100" height="100" viewBox="0 0 100 100">
                    <circle cx="5

Found 2026-01-24 by HttpPlugin