LeakIX - Host km9.link

Domain km9.link

United States

AMAZON-02

Software information

CloudFront

tcp/443

nginx nginx 1.20.2

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.32.99.31
Domain: km9.link
Port: 443
URL: https://km9.link

First seen 2025-09-12 02:23
Last seen 2025-12-21 03:56
Open for 100 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d28c73933cc5ef1f6b4f01854fd3ba1ad
```
Found 12 files trough .DS_Store spidering:

/Adjustscript.js
/d
/globals.css
/img
/img/VND88-01.png
/img/VND88-02.png
/img/VND88-03.png
/img/VND88-04.png
/img/VND88-05.png
/index.html
/js
/style.css
```
  Found on 2025-12-21 03:56
Create report

Open service 13.32.99.31:443 · km9.link

2026-01-09 04:34

HTTP/1.1 400 Bad Request
Server: CloudFront
Date: Fri, 09 Jan 2026 04:34:39 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 39e6266db143f6443f194d8c60e22480.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P3
X-Amz-Cf-Id: gzbSwWFA1ruKRijkJTUrKo-3smnAHNxeYwOnUxxuCp92xD2spO8pkw==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>400 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: gzbSwWFA1ruKRijkJTUrKo-3smnAHNxeYwOnUxxuCp92xD2spO8pkw==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-09 by HttpPlugin

Create report

Open service 13.32.99.31:443 · km9.link

2026-01-02 11:27

HTTP/1.1 400 Bad Request
Server: CloudFront
Date: Fri, 02 Jan 2026 11:27:00 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 dc0aad619823d3400ef947433d0af8fa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P3
X-Amz-Cf-Id: xLMSM0gnj8e0jZpqsWfgK7QKoB1Bs0P6et32gxDsdI-R9d3SK2jtjQ==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>400 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: xLMSM0gnj8e0jZpqsWfgK7QKoB1Bs0P6et32gxDsdI-R9d3SK2jtjQ==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-02 by HttpPlugin

Create report

Open service 13.32.99.31:443 · km9.link

2025-12-22 23:44

HTTP/1.1 400 Bad Request
Server: CloudFront
Date: Mon, 22 Dec 2025 23:44:01 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 74c5b19a4695b76162adbf07ed9ef370.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P3
X-Amz-Cf-Id: B7ld4cjEP3fJgVwNsc6lwFbPAqf4QXO-OHfs1LlDsNANAd2tNG9Bfw==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>400 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: B7ld4cjEP3fJgVwNsc6lwFbPAqf4QXO-OHfs1LlDsNANAd2tNG9Bfw==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2025-12-22 by HttpPlugin

Create report

Open service 13.32.99.31:443 · km9.link

2025-12-21 03:56

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 4324
Connection: close
Server: nginx/1.20.2
Date: Sun, 21 Dec 2025 03:56:29 GMT
Last-Modified: Sat, 12 Oct 2024 08:20:53 GMT
Accept-Ranges: bytes
ETag: "670a3165-10e4"
X-Cache: Hit from cloudfront
Via: 1.1 7395d1816622756cd6753f5e1281200c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P3
X-Amz-Cf-Id: KB9ECdJS-BKiXU9l4jztjImrtGsl4X7McZUbnq_4w8zfujmlFs2TMw==

Page title: km9.link

<html>

<head>
  <link rel="shortcut icon" href="./img/favicon.png" />
  <title>km9.link</title>
  <meta name="description" content="vnd88" />
  <meta name="og:type" content="website" />
  <meta name="og:site_name" content="vnd88" />
  <meta name="og:title" content="vnd88" />
  <meta name="og:description" content="vnd88" />
  <meta name="og:image" content="./img/20231110-163919.jpeg" />
  <meta name="twitter:card" content="photo" />
  <meta name="twitter:title" content="vnd88" />
  <meta name="twitter:description" content="vnd88" />
  <meta name="twitter:image:width" content="320px" />
  <meta name="twitter:image:height" content="320px" />
  <meta name="twitter:image:src" content="./img/20231110-163919.jpeg" />
  <meta name="apple-mobile-web-app-capable" content="yes" />
  <meta name="mobile-web-app-capable" content="yes" />
  <meta name="apple-mobile-web-app-status-bar-style" content="default" />
  <meta name="apple-mobile-web-app-title" content="vnd88" />

  <link rel="stylesheet" href="globals.css" />
  <link rel="stylesheet" href="style.css" />
  <script>
    !(function (f, b, e, v, n, t, s) {
      if (f.fbq) return;
      n = f.fbq = function () {
        n.callMethod
          ? n.callMethod.apply(n, arguments)
          : n.queue.push(arguments);
      };
      if (!f._fbq) f._fbq = n;
      n.push = n;
      n.loaded = !0;
      n.version = "2.0";
      n.queue = [];
      t = b.createElement(e);
      t.async = !0;
      t.src = v;
      s = b.getElementsByTagName(e)[0];
      s.parentNode.insertBefore(t, s);
    })(
      window,
      document,
      "script",
      "https://connect.facebook.net/en_US/fbevents.js"
    );
    fbq("init", "1137476284461208");
    fbq("track", "PageView");
  </script>
  <noscript>
    <img height="1" width="1" style="display: none"
      src="https://www.facebook.com/tr?id=1137476284461208&ev=PageView&noscript=1" />
  </noscript>
  <!-- End Facebook Pixel Code -->

  <script src="Adjustscript.js"></script>
  <script>
    // get query string, and parse it with URLSearchParams
    const urlParams = new URLSearchParams(window.location.search);
    //p0 = urlParams.get("p0") and fallback to "default"
    p0 = urlParams.get("p0");
    p1 = urlParams.get("p1");
    p2 = urlParams.get("p2");
    p3 = urlParams.get("p3");
    p4 = urlParams.get("p4");
    p5 = urlParams.get("p5");
    p6 = urlParams.get("p6");
    fbPid = getFbPid();
    fbClickId = urlParams.get("fbclid");
    apkUrl = "https://apps.apple.com/app/stacked-card-crafters/id6736679480?l=vi";
    var userAgent = navigator.userAgent || navigator.vendor || window.opera;
    if (/iPad|iPhone|iPod/.test(userAgent) && !window.MSStream) {
      apkUrl = "https://apps.apple.com/app/stacked-card-crafters/id6736679480?l=vi";
    }
    url = buildURL(p0, p1, p2, p3, p4, p5, p6, apkUrl, fbClickId, fbPid);
    // add links
    window.addEventListener("DOMContentLoaded", function () {
      if (url) {
        var elements = document.querySelectorAll(".AdjustTracker");
        for (var i = 0; i < elements.length; i++) {
          elements[i].setAttribute("href", url);
        }
      } else {
        var elements = document.querySelectorAll(".AdjustTracker");
        for (var i = 0; i < elements.length; i++) {
          elements[i].setAttribute("href", apkUrl);
        }
      }
    });
  </script>
</head>

<body>
  <div class="frame">
    <div class="div">
      <div class="overlap-group">
        <a target="_blank" rel="noopener noreferrer" onclick="fbq('track', 'click_download_button');"
          class="AdjustTracker"><img class="PH-2" src="img/VND88-01.png" /></a>
          <a target="_blank" rel="noopener noreferrer" onclick="fbq('track', 'click_download_button');"
          class="AdjustTracker"><img class="PH-20" src="img/btn1.gif" /></a>
        
        <a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTracker"
          onclick="fbq('track', 'click_download_button');">
          <img class="PH-23" src="img/btn2.gif" />
        </a>
        <a target="_blank" rel="noopener noreferrer" class="download-btn Ad

Found 2025-12-21 by HttpPlugin

Create report

km9.link

Fingerprint:

cfc399488addcf921ad6b16168df98f8a05f61fbc57931c64cb0f77fc2194d6a

CN:

km9.link

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M04

Not before:

2025-09-12 00:00

Not after:

2026-10-11 23:59

Domain summary

km9.link 4

1 recorded

IP summary

13.32.99.31 2

1 recorded

Domain km9.link

United States

Software information

MacOS file listing through .DS_Store file

Create report

Create report

Create report

Create report

km9.link

Domain summary

IP summary