LeakIX - Host mt804.com

Domain mt804.com

United States

AMAZON-02

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.66.192.83
Domain: mt804.com
Port: 443
URL: https://mt804.com

First seen 2025-12-01 11:13
Last seen 2026-01-02 18:54
Open for 32 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9506476d147b2b72ed805f0ff5eb433dc
```
Found 5 files trough .DS_Store spidering:

/img
/img/bg.jpg
/img/footer.png
/img/icon.png
/index.html
```
  Found on 2026-01-02 18:54
Create report

Open service 18.66.192.83:443 · mt804.com

2026-01-10 01:00

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 2145
Connection: close
x-fc-request-id: 1-6960a3de-0460b1-f32611952036
Access-Control-Expose-Headers: Date,x-fc-request-id
ETag: "DC99771227E5D18E07EDB98AA4089EDD"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Access-Control-Allow-Credentials: false
Cache-Control: public, max-age=300
Last-Modified: Wed, 12 Nov 2025 02:23:30 GMT
Access-Control-Allow-Methods: GET, POST, PUT
Access-Control-Allow-Headers: Content-Type, Authorization, Range
Content-Disposition: inline
Date: Sat, 10 Jan 2026 01:00:24 GMT
X-Cache: Hit from cloudfront
Via: 1.1 77aa8087323921dee0b130bc0589bda8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
X-Amz-Cf-Id: d6CqPpVLkFsTroBVg8BfqyPuS1JH4K3cx-UpWRdPjTjz-tII6YXCGw==
Age: 3

Page title: MT966

<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <link rel="icon" href="./img/icon.png" />
    <script src="https://cdn.tailwindcss.com"></script>
    <title>MT966</title>
    <style>
        .btn1 {
          position: absolute;
          width: 75%;
          left: 12%;
          height: 3%;
          top: 46.5%;
          cursor: pointer;
        }
        
        .t {
          /* background-color: #6cf; */
          /* opacity: 0.5; */
        }
        
        .footer {
          position: fixed;
          display: flex;
          bottom: 5px;
          width: 100%;
        }
        
        .footer-bg {
          width: 100%;
          height: auto;
        }
        
        .icon {
          position: absolute;
          top: 13%;
          width: 13%;
          left: 3%;
        }
        
        .btn2 {
          position: absolute;
          width: 25%;
          left: 73%;
          height: 58%;
          top: 20.4%;
          cursor: pointer;
        }
        
        .logo {
          position: absolute;
          top: 6%;
          left: -17.5%;
          width: 75%;
          height: auto;
        }
    </style>
</head>

<body>
    <div class="relative max-w-[640px] mx-auto">
        <img src="./img/bg.jpg" alt="" class="w-full" />
        <div class="btn1 t" onclick="handleBtnDown1()">
        </div>
        <img src="./img/logo.png" alt="" class="logo">
        <div class="footer max-w-[640px] mx-auto">
            <div class="w-full relative">
                <img src="./img/footer.png" alt="" class="footer-bg" />
                <img src="./img/icon.png" alt="" class="icon">
                <div class="btn2 t" onclick="handleBtnDown2()"></div>
            </div>
        </div>
    </div>
</body>
<script>
    function handleBtnDown1() {
      const url = 'https://h5.mt599.com'
      window.open(url, '_blank');
    }
    function handleBtnDown2() {
      const url = 'https://download.appmt966.com/android/mt777_id2_ntla740.apk'
      window.open(url, '_blank');
    }
</script>

</html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 18.66.192.83:443 · mt804.com

2026-01-02 18:54

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 2145
Connection: close
x-fc-request-id: 1-6956e32a-0458ab-4b77d26f7330
Access-Control-Expose-Headers: Date,x-fc-request-id
Accept-Ranges: bytes
Access-Control-Allow-Headers: Content-Type, Authorization, Range
Access-Control-Allow-Credentials: false
Access-Control-Allow-Origin: *
Content-Disposition: inline
Access-Control-Allow-Methods: GET, POST, PUT
Last-Modified: Wed, 12 Nov 2025 02:23:30 GMT
Cache-Control: public, max-age=300
ETag: "DC99771227E5D18E07EDB98AA4089EDD"
Date: Fri, 02 Jan 2026 18:54:24 GMT
X-Cache: Hit from cloudfront
Via: 1.1 fb542039f97bb702c0e68d2142c449aa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
X-Amz-Cf-Id: Cbh0bTWnvS-mdQdfAJSUkH0AnuE84s7ebRj96eRRC2qg1EPf2NJNqg==

Page title: MT966

<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <link rel="icon" href="./img/icon.png" />
    <script src="https://cdn.tailwindcss.com"></script>
    <title>MT966</title>
    <style>
        .btn1 {
          position: absolute;
          width: 75%;
          left: 12%;
          height: 3%;
          top: 46.5%;
          cursor: pointer;
        }
        
        .t {
          /* background-color: #6cf; */
          /* opacity: 0.5; */
        }
        
        .footer {
          position: fixed;
          display: flex;
          bottom: 5px;
          width: 100%;
        }
        
        .footer-bg {
          width: 100%;
          height: auto;
        }
        
        .icon {
          position: absolute;
          top: 13%;
          width: 13%;
          left: 3%;
        }
        
        .btn2 {
          position: absolute;
          width: 25%;
          left: 73%;
          height: 58%;
          top: 20.4%;
          cursor: pointer;
        }
        
        .logo {
          position: absolute;
          top: 6%;
          left: -17.5%;
          width: 75%;
          height: auto;
        }
    </style>
</head>

<body>
    <div class="relative max-w-[640px] mx-auto">
        <img src="./img/bg.jpg" alt="" class="w-full" />
        <div class="btn1 t" onclick="handleBtnDown1()">
        </div>
        <img src="./img/logo.png" alt="" class="logo">
        <div class="footer max-w-[640px] mx-auto">
            <div class="w-full relative">
                <img src="./img/footer.png" alt="" class="footer-bg" />
                <img src="./img/icon.png" alt="" class="icon">
                <div class="btn2 t" onclick="handleBtnDown2()"></div>
            </div>
        </div>
    </div>
</body>
<script>
    function handleBtnDown1() {
      const url = 'https://h5.mt599.com'
      window.open(url, '_blank');
    }
    function handleBtnDown2() {
      const url = 'https://download.appmt966.com/android/mt777_id2_ntla740.apk'
      window.open(url, '_blank');
    }
</script>

</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 18.66.192.83:443 · mt804.com

2025-12-22 14:59

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 2145
Connection: close
x-fc-request-id: 1-69479b87-0460b1-d4137b17dd3d
Access-Control-Expose-Headers: Date,x-fc-request-id
ETag: "DC99771227E5D18E07EDB98AA4089EDD"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Access-Control-Allow-Credentials: false
Cache-Control: public, max-age=300
Last-Modified: Wed, 12 Nov 2025 02:23:30 GMT
Access-Control-Allow-Methods: GET, POST, PUT
Access-Control-Allow-Headers: Content-Type, Authorization, Range
Content-Disposition: inline
Date: Mon, 22 Dec 2025 14:59:21 GMT
X-Cache: Hit from cloudfront
Via: 1.1 033e374ece012797cbee0d505e2e61b4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
X-Amz-Cf-Id: BWXENxvd6d3wvlT4rXT7Fnlp2I1MxxGd79G5xkAnsXMiRuwcALAJFA==

Page title: MT966

<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <link rel="icon" href="./img/icon.png" />
    <script src="https://cdn.tailwindcss.com"></script>
    <title>MT966</title>
    <style>
        .btn1 {
          position: absolute;
          width: 75%;
          left: 12%;
          height: 3%;
          top: 46.5%;
          cursor: pointer;
        }
        
        .t {
          /* background-color: #6cf; */
          /* opacity: 0.5; */
        }
        
        .footer {
          position: fixed;
          display: flex;
          bottom: 5px;
          width: 100%;
        }
        
        .footer-bg {
          width: 100%;
          height: auto;
        }
        
        .icon {
          position: absolute;
          top: 13%;
          width: 13%;
          left: 3%;
        }
        
        .btn2 {
          position: absolute;
          width: 25%;
          left: 73%;
          height: 58%;
          top: 20.4%;
          cursor: pointer;
        }
        
        .logo {
          position: absolute;
          top: 6%;
          left: -17.5%;
          width: 75%;
          height: auto;
        }
    </style>
</head>

<body>
    <div class="relative max-w-[640px] mx-auto">
        <img src="./img/bg.jpg" alt="" class="w-full" />
        <div class="btn1 t" onclick="handleBtnDown1()">
        </div>
        <img src="./img/logo.png" alt="" class="logo">
        <div class="footer max-w-[640px] mx-auto">
            <div class="w-full relative">
                <img src="./img/footer.png" alt="" class="footer-bg" />
                <img src="./img/icon.png" alt="" class="icon">
                <div class="btn2 t" onclick="handleBtnDown2()"></div>
            </div>
        </div>
    </div>
</body>
<script>
    function handleBtnDown1() {
      const url = 'https://h5.mt599.com'
      window.open(url, '_blank');
    }
    function handleBtnDown2() {
      const url = 'https://download.appmt966.com/android/mt777_id2_ntla740.apk'
      window.open(url, '_blank');
    }
</script>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 18.66.192.83:443 · mt804.com

2025-12-20 19:17

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 2145
Connection: close
x-fc-request-id: 1-6946ef84-0458ab-c66d30134484
Access-Control-Expose-Headers: Date,x-fc-request-id
Accept-Ranges: bytes
Access-Control-Allow-Headers: Content-Type, Authorization, Range
Access-Control-Allow-Credentials: false
Access-Control-Allow-Origin: *
Content-Disposition: inline
Access-Control-Allow-Methods: GET, POST, PUT
Last-Modified: Wed, 12 Nov 2025 02:23:30 GMT
Cache-Control: public, max-age=300
ETag: "DC99771227E5D18E07EDB98AA4089EDD"
Date: Sat, 20 Dec 2025 19:17:04 GMT
X-Cache: Hit from cloudfront
Via: 1.1 0f14828b89630f6555c6372e13fc999a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
X-Amz-Cf-Id: _spf5P8m9zk4o7_ZePZwkawxQOx3gBf80eFRtXzJ249qcA_vKYq4ZQ==
Age: 1

Page title: MT966

<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <link rel="icon" href="./img/icon.png" />
    <script src="https://cdn.tailwindcss.com"></script>
    <title>MT966</title>
    <style>
        .btn1 {
          position: absolute;
          width: 75%;
          left: 12%;
          height: 3%;
          top: 46.5%;
          cursor: pointer;
        }
        
        .t {
          /* background-color: #6cf; */
          /* opacity: 0.5; */
        }
        
        .footer {
          position: fixed;
          display: flex;
          bottom: 5px;
          width: 100%;
        }
        
        .footer-bg {
          width: 100%;
          height: auto;
        }
        
        .icon {
          position: absolute;
          top: 13%;
          width: 13%;
          left: 3%;
        }
        
        .btn2 {
          position: absolute;
          width: 25%;
          left: 73%;
          height: 58%;
          top: 20.4%;
          cursor: pointer;
        }
        
        .logo {
          position: absolute;
          top: 6%;
          left: -17.5%;
          width: 75%;
          height: auto;
        }
    </style>
</head>

<body>
    <div class="relative max-w-[640px] mx-auto">
        <img src="./img/bg.jpg" alt="" class="w-full" />
        <div class="btn1 t" onclick="handleBtnDown1()">
        </div>
        <img src="./img/logo.png" alt="" class="logo">
        <div class="footer max-w-[640px] mx-auto">
            <div class="w-full relative">
                <img src="./img/footer.png" alt="" class="footer-bg" />
                <img src="./img/icon.png" alt="" class="icon">
                <div class="btn2 t" onclick="handleBtnDown2()"></div>
            </div>
        </div>
    </div>
</body>
<script>
    function handleBtnDown1() {
      const url = 'https://h5.mt599.com'
      window.open(url, '_blank');
    }
    function handleBtnDown2() {
      const url = 'https://download.appmt966.com/android/mt777_id2_ntla740.apk'
      window.open(url, '_blank');
    }
</script>

</html>

Found 2025-12-20 by HttpPlugin

Create report

*.mt804.commt804.com

Fingerprint:

35eef52a8e42b53eab91b9e038242e7102878063cedb433a92f42cb42b0b4050

CN:

*.mt804.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-08 14:17

Not after:

2026-02-06 14:17

Domain summary

mt804.com 4

1 recorded

IP summary

18.66.192.83 2

1 recorded

Domain mt804.com

United States

MacOS file listing through .DS_Store file

Create report

Create report

Create report

Create report

*.mt804.commt804.com

Domain summary

IP summary