LeakIX - Host nusasdtr.com

Domain nusasdtr.com

United States

AMAZON-02

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.175.126
Domain: nusasdtr.com
Port: 443
URL: https://nusasdtr.com

First seen 2025-12-10 13:44
Last seen 2026-02-09 19:35
Open for 61 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392ab7537a2ebab850d8c75840001f7bfbff1
```
Found 7 files trough .DS_Store spidering:

/img
/img/bg.jpg
/img/footer.png
/img/icon.png
/img/logo.png
/index.html
/js
```
  Found on 2026-02-09 19:35
Create report

Open service 65.9.175.126:443 · nusasdtr.com

2026-01-23 14:16

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 2370
Connection: close
x-fc-request-id: 1-69706b94-049394-40b5e60b18dc
Access-Control-Expose-Headers: Date,x-fc-request-id
Access-Control-Allow-Credentials: false
ETag: "F43F860D6355BDA5324F844A287BDB1F"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Last-Modified: Wed, 12 Nov 2025 02:12:11 GMT
Access-Control-Allow-Headers: Content-Type, Authorization, Range
Access-Control-Allow-Methods: GET, POST, PUT
Content-Disposition: inline
Cache-Control: public, max-age=300
Date: Fri, 23 Jan 2026 14:16:42 GMT
X-Cache: Hit from cloudfront
Via: 1.1 95f719856b35c3a7e9bc14f3202145a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Y1WgNg87gwhWxJcY1Lm5jNS_qLLEeRPrmTNh743jWaan7I8LYP7dbw==
Age: 2

Page title: NusaSlots

<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <link rel="icon" href="./img/icon.png" />
    <script src="https://cdn.tailwindcss.com"></script>
    <meta name="page-desc" content="cnllcXV2enF1enh6c3lrdXd2enp4enN5a2NzeWtmcXVyeXF1enh6">
    <title>NusaSlots</title>
    <style>
        .btn1 {
          position: absolute;
          width: 80%;
          left: 3%;
          height: 15%;
          top: 19.5%;
          cursor: pointer;
        }
        
        .t {
          /* background-color: #6cf; */
          /* opacity: 0.5; */
        }
        
        .footer {
          position: fixed;
          display: flex;
          bottom: 5px;
          width: 100%;
        }
        
        .footer-bg {
          width: 100%;
          height: auto;
        }
        
        .icon {
          position: absolute;
          top: 13%;
          width: 13%;
          left: 1%;
        }
        
        .btn2 {
          position: absolute;
          width: 25%;
          left: 73%;
          height: 58%;
          top: 20.4%;
          cursor: pointer;
        }
        
        .logo {
          position: absolute;
          top: 6%;
          left: 15.5%;
          width: 75%;
          height: auto;
        }
    </style>
</head>

<body>
    <div class="relative max-w-[640px] mx-auto">
        <img src="./img/bg.jpg" alt="" class="w-full" />
        <div class="btn1 t" onclick="handleBtnDown1()">
        </div>
        <img src="./img/logo.png" alt="" class="logo">
        <div class="footer max-w-[640px] mx-auto">
            <div class="w-full relative">
                <img src="./img/footer.png" alt="" class="footer-bg" />
                <img src="./img/icon.png" alt="" class="icon">
                <div class="btn2 t" onclick="handleBtnDown2()"></div>
            </div>
        </div>
    </div>
</body>
<script>
    Facebook.init({
      fbpxid: '1147176187225054',
      adjustToken: '1rkwgio8',
    })
    function handleBtnDown1() {
      const url = 'https://h5.nusabt.com?chn=bnVzYXNsb3RzX2lkN19udGxhMTc%3D'
      window.open(url, '_blank');
    }
    function handleBtnDown2() {
      const url = 'https://download.nusabr.com/android/MUc_gPiEqBWMtiopQ5Wehe.apk'
      window.open(url, '_blank');
    }
</script>

</html>

Found 2026-01-23 by HttpPlugin

Create report

Open service 65.9.175.126:443 · nusasdtr.com

2026-01-09 23:03

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 2370
Connection: close
x-fc-request-id: 1-696088f4-0458ab-e6c9378616ed
Access-Control-Expose-Headers: Date,x-fc-request-id
Accept-Ranges: bytes
Access-Control-Allow-Headers: Content-Type, Authorization, Range
Access-Control-Allow-Credentials: false
Access-Control-Allow-Origin: *
Content-Disposition: inline
Access-Control-Allow-Methods: GET, POST, PUT
Last-Modified: Wed, 12 Nov 2025 02:12:11 GMT
Cache-Control: public, max-age=300
ETag: "F43F860D6355BDA5324F844A287BDB1F"
Date: Fri, 09 Jan 2026 23:03:55 GMT
X-Cache: Hit from cloudfront
Via: 1.1 b608ed0f3426ba08cff51718fbecc028.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: bERw5WUKk2-hUIx0_ACW-78gK21o6S0P86gVWcCzUR1yZEsmiyan9g==
Age: 2

Page title: NusaSlots

<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <link rel="icon" href="./img/icon.png" />
    <script src="https://cdn.tailwindcss.com"></script>
    <meta name="page-desc" content="cnllcXV2enF1enh6c3lrdXd2enp4enN5a2NzeWtmcXVyeXF1enh6">
    <title>NusaSlots</title>
    <style>
        .btn1 {
          position: absolute;
          width: 80%;
          left: 3%;
          height: 15%;
          top: 19.5%;
          cursor: pointer;
        }
        
        .t {
          /* background-color: #6cf; */
          /* opacity: 0.5; */
        }
        
        .footer {
          position: fixed;
          display: flex;
          bottom: 5px;
          width: 100%;
        }
        
        .footer-bg {
          width: 100%;
          height: auto;
        }
        
        .icon {
          position: absolute;
          top: 13%;
          width: 13%;
          left: 1%;
        }
        
        .btn2 {
          position: absolute;
          width: 25%;
          left: 73%;
          height: 58%;
          top: 20.4%;
          cursor: pointer;
        }
        
        .logo {
          position: absolute;
          top: 6%;
          left: 15.5%;
          width: 75%;
          height: auto;
        }
    </style>
</head>

<body>
    <div class="relative max-w-[640px] mx-auto">
        <img src="./img/bg.jpg" alt="" class="w-full" />
        <div class="btn1 t" onclick="handleBtnDown1()">
        </div>
        <img src="./img/logo.png" alt="" class="logo">
        <div class="footer max-w-[640px] mx-auto">
            <div class="w-full relative">
                <img src="./img/footer.png" alt="" class="footer-bg" />
                <img src="./img/icon.png" alt="" class="icon">
                <div class="btn2 t" onclick="handleBtnDown2()"></div>
            </div>
        </div>
    </div>
</body>
<script>
    Facebook.init({
      fbpxid: '1147176187225054',
      adjustToken: '1rkwgio8',
    })
    function handleBtnDown1() {
      const url = 'https://h5.nusabt.com?chn=bnVzYXNsb3RzX2lkN19udGxhMTc%3D'
      window.open(url, '_blank');
    }
    function handleBtnDown2() {
      const url = 'https://download.nusabr.com/android/MUc_gPiEqBWMtiopQ5Wehe.apk'
      window.open(url, '_blank');
    }
</script>

</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 65.9.175.126:443 · nusasdtr.com

2026-01-02 13:19

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 2370
Connection: close
x-fc-request-id: 1-6956f958-0460b1-e80bd52edb05
Access-Control-Expose-Headers: Date,x-fc-request-id
ETag: "F43F860D6355BDA5324F844A287BDB1F"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Access-Control-Allow-Credentials: false
Cache-Control: public, max-age=300
Last-Modified: Wed, 12 Nov 2025 02:12:11 GMT
Access-Control-Allow-Methods: GET, POST, PUT
Access-Control-Allow-Headers: Content-Type, Authorization, Range
Content-Disposition: inline
Date: Fri, 02 Jan 2026 13:19:06 GMT
X-Cache: Hit from cloudfront
Via: 1.1 476fd70bdb0e3f01a7cdbc322ceae0d8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: cIsGmdTGnVg9_z2s1J1cOf7tVEYPJD1e9hMuDUnoem78ox7US2Z44w==

Page title: NusaSlots

<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <link rel="icon" href="./img/icon.png" />
    <script src="https://cdn.tailwindcss.com"></script>
    <meta name="page-desc" content="cnllcXV2enF1enh6c3lrdXd2enp4enN5a2NzeWtmcXVyeXF1enh6">
    <title>NusaSlots</title>
    <style>
        .btn1 {
          position: absolute;
          width: 80%;
          left: 3%;
          height: 15%;
          top: 19.5%;
          cursor: pointer;
        }
        
        .t {
          /* background-color: #6cf; */
          /* opacity: 0.5; */
        }
        
        .footer {
          position: fixed;
          display: flex;
          bottom: 5px;
          width: 100%;
        }
        
        .footer-bg {
          width: 100%;
          height: auto;
        }
        
        .icon {
          position: absolute;
          top: 13%;
          width: 13%;
          left: 1%;
        }
        
        .btn2 {
          position: absolute;
          width: 25%;
          left: 73%;
          height: 58%;
          top: 20.4%;
          cursor: pointer;
        }
        
        .logo {
          position: absolute;
          top: 6%;
          left: 15.5%;
          width: 75%;
          height: auto;
        }
    </style>
</head>

<body>
    <div class="relative max-w-[640px] mx-auto">
        <img src="./img/bg.jpg" alt="" class="w-full" />
        <div class="btn1 t" onclick="handleBtnDown1()">
        </div>
        <img src="./img/logo.png" alt="" class="logo">
        <div class="footer max-w-[640px] mx-auto">
            <div class="w-full relative">
                <img src="./img/footer.png" alt="" class="footer-bg" />
                <img src="./img/icon.png" alt="" class="icon">
                <div class="btn2 t" onclick="handleBtnDown2()"></div>
            </div>
        </div>
    </div>
</body>
<script>
    Facebook.init({
      fbpxid: '1147176187225054',
      adjustToken: '1rkwgio8',
    })
    function handleBtnDown1() {
      const url = 'https://h5.nusabt.com?chn=bnVzYXNsb3RzX2lkN19udGxhMTc%3D'
      window.open(url, '_blank');
    }
    function handleBtnDown2() {
      const url = 'https://download.nusabr.com/android/MUc_gPiEqBWMtiopQ5Wehe.apk'
      window.open(url, '_blank');
    }
</script>

</html>

Found 2026-01-02 by HttpPlugin

Create report

*.nusasdtr.comnusasdtr.com

Fingerprint:

e34e4528e26eb15627f7a67ee1f27385678570b4947134fe99f2edc2eb730ec2

CN:

*.nusasdtr.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-10 12:45

Not after:

2026-03-10 12:45

Domain summary

nusasdtr.com 3

1 recorded

IP summary

65.9.175.126 2

1 recorded

Domain nusasdtr.com

United States

MacOS file listing through .DS_Store file

Create report

Create report

Create report

*.nusasdtr.comnusasdtr.com

Domain summary

IP summary