LeakIX - Host lootbox.callofwar.com

Domain lootbox.callofwar.com

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.64.149.209
Domain: lootbox.callofwar.com
Port: 443
URL: https://lootbox.callofwar.com

First seen 2025-12-07 03:00
Last seen 2026-02-09 19:30
Open for 64 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652271982569

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/bytro/lootbox-frontend
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX0Z4dHhrR2Jra1dUZ0owYXBiRjhNSVRWdEZlcU05MjNkT0M4Qw==
[branch "main"]
	remote = origin
	merge = refs/heads/main

//# sourceMappingURL=data:application/json;base64,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

Found on 2026-02-09 19:30

2.2 kBytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65220cc40cd4

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/bytro/lootbox-frontend
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX1NCZ2FaNExoUFVRbEdWTU1QblpvMGlxY1FWQUI0RjFka2xoVQ==
[branch "main"]
	remote = origin
	merge = refs/heads/main

//# sourceMappingURL=data:application/json;base64,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

Found on 2026-01-16 05:16

2.2 kBytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 104.18.38.47
Domain: lootbox.callofwar.com
Port: 80
URL: http://lootbox.callofwar.com

First seen 2025-12-07 03:00
Last seen 2026-02-09 09:34
Open for 64 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652271982569

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/bytro/lootbox-frontend
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX0Z4dHhrR2Jra1dUZ0owYXBiRjhNSVRWdEZlcU05MjNkT0M4Qw==
[branch "main"]
	remote = origin
	merge = refs/heads/main

//# sourceMappingURL=data:application/json;base64,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

Found on 2026-02-09 09:34

2.2 kBytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65220cc40cd4

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/bytro/lootbox-frontend
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX1NCZ2FaNExoUFVRbEdWTU1QblpvMGlxY1FWQUI0RjFka2xoVQ==
[branch "main"]
	remote = origin
	merge = refs/heads/main

//# sourceMappingURL=data:application/json;base64,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

Found on 2026-01-16 07:27

2.2 kBytes

Create report

Open service 104.18.38.47:80 · lootbox.callofwar.com

2026-01-23 06:40

HTTP/1.1 502 Bad Gateway
Date: Fri, 23 Jan 2026 06:40:52 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Service-Worker-Allowed: /
Server: cloudflare
CF-RAY: 9c254d55ce1995b3-FRA


error code: 502

Found 2026-01-23 by HttpPlugin

Create report

Open service 172.64.149.209:443 · lootbox.callofwar.com

2026-01-22 23:33

HTTP/1.1 502 Bad Gateway
Date: Thu, 22 Jan 2026 23:33:56 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Service-Worker-Allowed: /
Server: cloudflare
CF-RAY: 9c22dbf09bf2aee8-EWR


error code: 502

Found 2026-01-22 by HttpPlugin

Create report

callofwar.com*.callofwar.com

Fingerprint:

cdebe3ecdddb593194336cd49f1abaef48aafdc21434f6910e4126801dfb2fa8

CN:

callofwar.com

Key:

ECDSA-256

Issuer:

WE1

Not before:

2026-01-02 09:18

Not after:

2026-04-02 10:18

Domain summary

lootbox.callofwar.com 5

1 recorded

IP summary

104.18.38.47 1 172.64.149.209 1

2 recorded