LeakIX - Host itu9ir.xyz

Domain itu9ir.xyz

United States

CNSERVERS

Software information

openresty

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: www.itu9ir.xyz
Port: 80
URL: http://www.itu9ir.xyz

First seen 2024-07-17 17:32
Last seen 2024-09-18 12:22
Open for 62 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 12:22
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: itu9ir.xyz
Port: 443
URL: https://itu9ir.xyz

First seen 2024-05-17 06:46
Last seen 2024-09-18 03:24
Open for 123 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 03:24
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: www.itu9ir.xyz
Port: 443
URL: https://www.itu9ir.xyz

First seen 2024-05-18 21:13
Last seen 2024-09-18 21:45
Open for 123 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 21:45
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: itu9ir.xyz
Port: 80
URL: http://itu9ir.xyz

First seen 2024-07-15 06:29
Last seen 2024-09-18 07:26
Open for 65 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 07:26
Create report

Open service 23.225.145.90:80 · itu9ir.xyz

2024-09-16 07:48

HTTP/1.1 200 OK
Server: openresty
Date: Mon, 16 Sep 2024 07:48:04 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-16 by HttpPlugin

Create report

Open service 23.225.145.90:80 · www.itu9ir.xyz

2024-09-14 18:05

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 18:05:27 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:443 · www.itu9ir.xyz

2024-09-14 18:05

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 18:05:31 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:443 · itu9ir.xyz

2024-09-14 17:03

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 17:03:23 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:80 · www.itu9ir.xyz

2024-09-14 16:57

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 16:57:21 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:443 · www.itu9ir.xyz

2024-09-14 13:07

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 13:07:09 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:80 · itu9ir.xyz

2024-09-14 05:53

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 05:53:29 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin