LeakIX - Host mfcentral.com

Domain mfcentral.com

United States

AMAZON-02

Software information

AmazonS3

tcp/443

CloudFront

tcp/80

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.66.112.15
Domain: mfcentral.com
Port: 443
URL: https://mfcentral.com

First seen 2022-07-14 09:27
Last seen 2026-02-09 13:59
Open for 1306 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652210d38bb5

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://git-codecommit.ap-south-1.amazonaws.com/v1/repos/mfcentral-landing-page
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "production"]
	remote = origin
	merge = refs/heads/production

Found on 2026-02-09 13:59

374 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652263c72123

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://git-codecommit.ap-south-1.amazonaws.com/v1/repos/mfcentral-landing-page
	fetch = +refs/heads/*:refs/remotes/origin/*

Found on 2025-06-26 17:28

242 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224284f3f6

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://git-codecommit.ap-south-1.amazonaws.com/v1/repos/mfcentral-landing-page
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "dr-landing-page"]
	remote = origin
	merge = refs/heads/dr-landing-page
[branch "production"]
	remote = origin
	merge = refs/heads/production

Found on 2024-09-26 21:31

454 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.66.112.15
Domain: mfcentral.com
Port: 443
URL: https://mfcentral.com

First seen 2025-01-15 02:16
Last seen 2026-02-09 13:59
Open for 390 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b766f95f5f575aec9892f8bb25dc285f45

Found 128 files trough .DS_Store spidering:

/css
/images
/images/about-bg.svg
/images/aditya.png
/images/apply-pan-white.svg
/images/apply-pan.svg
/images/attachment.svg
/images/attachment2.svg
/images/better-experience-img.svg
/images/border.svg
/images/change-broker-ria.svg
/images/change-num.svg
/images/client-logos
/images/client-logos/360-one.png
/images/client-logos/ABSL.png
/images/client-logos/aditya_v2_landing.png
/images/client-logos/angel_one.png
/images/client-logos/axis.png
/images/client-logos/bajaj-amc-new.png
/images/client-logos/bajaj-amc.png
/images/client-logos/Bandhan.png
/images/client-logos/bank_musc.png
/images/client-logos/baroda-bnp.png
/images/client-logos/boi.png
/images/client-logos/canara_robeco.png
/images/client-logos/DSP.png
/images/client-logos/edel.png
/images/client-logos/franklin.png
/images/client-logos/Groww-New.png
/images/client-logos/groww.png
/images/client-logos/HDFC.png
/images/client-logos/Helios.png
/images/client-logos/HSBC.png
/images/client-logos/ib.png
/images/client-logos/ICICI.png
/images/client-logos/idbimflogo.png
/images/client-logos/IDFC.png
/images/client-logos/IIFL.png
/images/client-logos/Invesco.png
/images/client-logos/itimf_logo.png
/images/client-logos/jmf.png
/images/client-logos/KOTAK.png
/images/client-logos/L&T.png
/images/client-logos/lic.png
/images/client-logos/MahindraManulife.png
/images/client-logos/mirae.png
/images/client-logos/mo.png
/images/client-logos/navi_mf_logo.png
/images/client-logos/navi_mutual_fund.svg
/images/client-logos/njam.png
/images/client-logos/Old_Bridge-2.png
/images/client-logos/oldbridge.png
/images/client-logos/PGIMamc.png
/images/client-logos/PPFAS.png
/images/client-logos/principalmf.png
/images/client-logos/quant.png
/images/client-logos/quantum.png
/images/client-logos/rel.png
/images/client-logos/sahara.png
/images/client-logos/samco.png
/images/client-logos/SBI.png
/images/client-logos/Shriram.png
/images/client-logos/SundaramMutualLogo.png
/images/client-logos/TATA.png
/images/client-logos/taurus.png
/images/client-logos/trust.png
/images/client-logos/Union.png
/images/client-logos/Union_2.png
/images/client-logos/uti.png
/images/client-logos/WhiteOak.png
/images/client-logos/zerodha.png
/images/close-black.svg
/images/close.svg
/images/coming-soon.svg
/images/e-filing.png
/images/efficient-icon.svg
/images/error-icon.svg
/images/esselmf.png
/images/fatca.svg
/images/favicon.png
/images/features-character.png
/images/features-character2.png
/images/features1.svg
/images/features2.svg
/images/features3.svg
/images/features4.svg
/images/footer-dots.png
/images/footer-fb-white.svg
/images/footer-fb.svg
/images/footer-linkedin-white.svg
/images/footer-linkedin.svg
/images/footer-logo.svg
/images/footer-twitter-white.svg
/images/footer-twitter.svg
/images/footer-yt-white.svg
/images/footer-yt.svg
/images/form-updation.svg
/images/green-tick.svg
/images/hamburger.svg
/images/icici-prudential.png
/images/itimf.png
/images/kfin-cams.png
/images/learn-more-arrow.svg
/images/left-arrow-long.svg
/images/left-arrow.svg
/images/login-border.svg
/images/logo.svg
/images/logo2.svg
/images/ltmf.png
/images/mahindramf.png
/images/miraeamf.png
/images/name-speak-of-us-img.png
/images/next-icon.svg
/images/nipponmf.png
/images/nsdl.png
/images/our-mission_img.svg
/images/our-vision_img.svg
/images/portfolio-img-icon.png
/images/portfolio-img.png
/images/portfolio-img2.png
/images/powerful-icon.svg
/images/prev-icon.svg
/images/reproducible-icon.svg
/images/right-arrow-long.svg
/images/right-arrow-small.svg
/images/right-arrow-white.svg
/images/right-arrow.svg
/images/sebi.png

Found on 2026-02-09 13:59

Severity: low
Fingerprint: 5f32cf5d6962f09c2eda814e2eda814ebe1cdd56e5f47a5f9a8c3f93b3edc5e9
```
Found 6 files trough .DS_Store spidering:

/css
/images
/index.html
/js
/owl-carousel
/public
```
Found on 2025-10-23 13:02

Create report

Open service 18.66.112.15:443 · mfcentral.com

2026-01-23 05:15

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 29267
Connection: close
Date: Fri, 23 Jan 2026 03:37:25 GMT
Last-Modified: Wed, 10 Dec 2025 17:37:30 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 4CYCti2ANHcF7IpsKLZbOzFseqXEvVJV
Accept-Ranges: bytes
Server: AmazonS3
ETag: "7fb48ba880d4dc6323b6699e570c3e84"
X-Cache: Hit from cloudfront
Via: 1.1 83f46196ad7d99e4351e2a7adab8f174.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P5
X-Amz-Cf-Id: w1cRJ2d5UtDe_Sib_OdFTbCd92FcYnHzwdlywY6NS7g2AxOC9u1Vtg==
Age: 5911
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: same-origin
Content-Security-Policy: default-src 'self' mfcentral.com app.mfcentral.com services.mfcentral.com;             script-src 'none';             script-src-attr 'self';             report-uri https://mfcentral.com/report;             script-src-elem 'self' https://www.google.com https://www.gstatic.com;             style-src 'self' https://fonts.googleapis.com https://www.gstatic.com 'sha256-S8Gsm2rlcDeusiW81F3Fjn2fZSvMLBxZ5oaEo149K6g=' 'report-sample';             font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com;             frame-src https://www.goo gle.com;             img-src 'self' data:;             object-src 'none';             base-uri 'self';             form-action 'none'
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

Page title: MFCentral

<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="UTF-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>MFCentral</title>
  <link rel="preconnect" href="https://fonts.gstatic.com">
  <link rel="icon" href="images/favicon.png">
  <link rel="stylesheet" href="public/css/bootstrap.min.css?version=5.2.2">
  <link rel="stylesheet" href="css/style.css">
  <link rel="stylesheet" href="public/css/aos.css" />
  <link rel="stylesheet" href="public/owl-carousel/css/owl.carousel.min.css">
  <link href="https://fonts.googleapis.com/css2?family=Montserrat:wght@200;300;400;500;600;700;800;900&display=swap"
    rel="stylesheet">
  <style>
    .SmoothScroll {
      position: fixed;
      left: 50%;
      transform: translateX(-50%);
    }

    .viewport {
      width: 100%;
      margin: 0 auto;
    }
    .link-style{
      color: black;
    }
    .transform-style{
      transform: rotateY(0deg) rotateX(0deg);
    }
  </style>
</head>

<body>
  <!-- Go to Top -->

  <!-- <button id="myBtn" title="Go to top">
    <img loading="lazy" src="images/top.png" alt="Go to top">
  </button> -->
  <div class="go-to-top" title="Go to top" id="myBtn">
    <div class="go-to-top-inner">
      <p class="pct">0%</p>
      <img loading="lazy" src="images/up.svg" alt="Go to top">
      <svg width="70" height="70" viewport="0 0 50 50">
        <defs>
          <linearGradient id="grad">
            <stop offset="0%" stop-color="#7067df"></stop>
            <stop offset="100%" stop-color="#a6c1ee"></stop>
          </linearGradient>
        </defs>
        <circle cx="35" cy="35" r="25"></circle>
        <circle class="progress-bar" cx="35" cy="35" r="25"></circle>
      </svg>
    </div>
  </div>

  <header>
    <nav class="navbar navbar-expand-md max-width">
      <div class="nav_brand">
        <a href="/"><img src="images/logo.svg" data-aos="fade-up" data-aos-delay="250"></a>
      </div>
      <a class="nav-link mitra-responsive" target="_blank" href="https://app.mfcentral.com/links/mitra">
        MITRA
        <span>
          <img class="new-icon" src="/images/new_menu_icon.svg" alt="icon" />
        </span>
      </a>
      <button class="navbar-toggler" type="button" data-bs-target="#collapsibleNavbar">
        <img class="toggle-open" src="/images/hamburger.svg" alt="hamburger icon">
        <img class="toggle-close" src="/images/close.svg" alt="close icon">
      </button>
      <div class="collapse navbar-collapse" id="collapsibleNavbar">
        <ul class="navbar-nav">
          <li class="nav-item" data-aos="fade-up" data-aos-delay="500">
            <a class="nav-link" href="#features">Features</a>
          </li>
          <li class="nav-item" data-aos="fade-up" data-aos-delay="750">
            <a class="nav-link" href="#about">About</a>
          </li>
          <li class="nav-item" data-aos="fade-up" data-aos-delay="1000">
            <a class="nav-link" href="#quick-links">Quick Links</a>
          </li>
          <li class="nav-item" data-aos="fade-up" data-aos-delay="1250">
            <a class="nav-link" target="_blank" href="https://app.mfcentral.com/links/faq">FAQs</a>
          </li>
          <li class="nav-item" data-aos="fade-up" data-aos-delay="1500">
            <a class="nav-link" href="#" data-bs-toggle="modal" data-bs-target="#contactModal">Contact Us</a>
          </li>
          <li class="nav-item mitra-desktop" data-aos="fade-up" data-aos-delay="1500">
            <a class="nav-link" target="_blank" href="https://app.mfcentral.com/links/mitra">
              MITRA
            <span>
              <img class="new-icon" src="/images/new_menu_icon.svg" alt="icon" />
          </span>
            </a>
          </li>
          <div class="nav-btns">
            <a class="btn login-btn" href="https://app.mfcentral.com/investor/signin" data-aos="fade-up"
              data-aos-delay="1750">Sign In</a>
            <a class="btn signup-btn" href="https://app.mfcentral.com/investor/signup" data-aos="fade-up"
              data-aos

Found 2026-01-23 by HttpPlugin

Create report

Open service 18.66.112.15:443 · mfcentral.com

2026-01-23 04:17

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 29267
Connection: close
Date: Fri, 23 Jan 2026 03:37:25 GMT
Last-Modified: Wed, 10 Dec 2025 17:37:30 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 4CYCti2ANHcF7IpsKLZbOzFseqXEvVJV
Accept-Ranges: bytes
Server: AmazonS3
ETag: "7fb48ba880d4dc6323b6699e570c3e84"
X-Cache: Hit from cloudfront
Via: 1.1 0c39e892d8c809025c8f47425847f680.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P5
X-Amz-Cf-Id: UF9FAuNyYHAJTWoEFrGps7hjE6dVEiBRCNTlx2nxFKR2jALJ3MBhhA==
Age: 2436
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: same-origin
Content-Security-Policy: default-src 'self' mfcentral.com app.mfcentral.com services.mfcentral.com;             script-src 'none';             script-src-attr 'self';             report-uri https://mfcentral.com/report;             script-src-elem 'self' https://www.google.com https://www.gstatic.com;             style-src 'self' https://fonts.googleapis.com https://www.gstatic.com 'sha256-S8Gsm2rlcDeusiW81F3Fjn2fZSvMLBxZ5oaEo149K6g=' 'report-sample';             font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com;             frame-src https://www.goo gle.com;             img-src 'self' data:;             object-src 'none';             base-uri 'self';             form-action 'none'
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

Page title: MFCentral

<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="UTF-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>MFCentral</title>
  <link rel="preconnect" href="https://fonts.gstatic.com">
  <link rel="icon" href="images/favicon.png">
  <link rel="stylesheet" href="public/css/bootstrap.min.css?version=5.2.2">
  <link rel="stylesheet" href="css/style.css">
  <link rel="stylesheet" href="public/css/aos.css" />
  <link rel="stylesheet" href="public/owl-carousel/css/owl.carousel.min.css">
  <link href="https://fonts.googleapis.com/css2?family=Montserrat:wght@200;300;400;500;600;700;800;900&display=swap"
    rel="stylesheet">
  <style>
    .SmoothScroll {
      position: fixed;
      left: 50%;
      transform: translateX(-50%);
    }

    .viewport {
      width: 100%;
      margin: 0 auto;
    }
    .link-style{
      color: black;
    }
    .transform-style{
      transform: rotateY(0deg) rotateX(0deg);
    }
  </style>
</head>

<body>
  <!-- Go to Top -->

  <!-- <button id="myBtn" title="Go to top">
    <img loading="lazy" src="images/top.png" alt="Go to top">
  </button> -->
  <div class="go-to-top" title="Go to top" id="myBtn">
    <div class="go-to-top-inner">
      <p class="pct">0%</p>
      <img loading="lazy" src="images/up.svg" alt="Go to top">
      <svg width="70" height="70" viewport="0 0 50 50">
        <defs>
          <linearGradient id="grad">
            <stop offset="0%" stop-color="#7067df"></stop>
            <stop offset="100%" stop-color="#a6c1ee"></stop>
          </linearGradient>
        </defs>
        <circle cx="35" cy="35" r="25"></circle>
        <circle class="progress-bar" cx="35" cy="35" r="25"></circle>
      </svg>
    </div>
  </div>

  <header>
    <nav class="navbar navbar-expand-md max-width">
      <div class="nav_brand">
        <a href="/"><img src="images/logo.svg" data-aos="fade-up" data-aos-delay="250"></a>
      </div>
      <a class="nav-link mitra-responsive" target="_blank" href="https://app.mfcentral.com/links/mitra">
        MITRA
        <span>
          <img class="new-icon" src="/images/new_menu_icon.svg" alt="icon" />
        </span>
      </a>
      <button class="navbar-toggler" type="button" data-bs-target="#collapsibleNavbar">
        <img class="toggle-open" src="/images/hamburger.svg" alt="hamburger icon">
        <img class="toggle-close" src="/images/close.svg" alt="close icon">
      </button>
      <div class="collapse navbar-collapse" id="collapsibleNavbar">
        <ul class="navbar-nav">
          <li class="nav-item" data-aos="fade-up" data-aos-delay="500">
            <a class="nav-link" href="#features">Features</a>
          </li>
          <li class="nav-item" data-aos="fade-up" data-aos-delay="750">
            <a class="nav-link" href="#about">About</a>
          </li>
          <li class="nav-item" data-aos="fade-up" data-aos-delay="1000">
            <a class="nav-link" href="#quick-links">Quick Links</a>
          </li>
          <li class="nav-item" data-aos="fade-up" data-aos-delay="1250">
            <a class="nav-link" target="_blank" href="https://app.mfcentral.com/links/faq">FAQs</a>
          </li>
          <li class="nav-item" data-aos="fade-up" data-aos-delay="1500">
            <a class="nav-link" href="#" data-bs-toggle="modal" data-bs-target="#contactModal">Contact Us</a>
          </li>
          <li class="nav-item mitra-desktop" data-aos="fade-up" data-aos-delay="1500">
            <a class="nav-link" target="_blank" href="https://app.mfcentral.com/links/mitra">
              MITRA
            <span>
              <img class="new-icon" src="/images/new_menu_icon.svg" alt="icon" />
          </span>
            </a>
          </li>
          <div class="nav-btns">
            <a class="btn login-btn" href="https://app.mfcentral.com/investor/signin" data-aos="fade-up"
              data-aos-delay="1750">Sign In</a>
            <a class="btn signup-btn" href="https://app.mfcentral.com/investor/signup" data-aos="fade-up"
              data-aos

Found 2026-01-23 by HttpPlugin