LeakIX - Host playdayy.com

Domain playdayy.com

United States

CLOUDFLARENET

Software information

AliyunOSS

tcp/443 tcp/80

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.154.63.20
Domain: playdayy.com
Port: 443
URL: https://playdayy.com

First seen 2022-07-01 02:49
Last seen 2024-10-29 09:21
Open for 851 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652220a42ff0

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = git@gitlab.playnexx.net:MiddlePlatform/OfficialWebsite.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "playdayy"]
	remote = origin
	merge = refs/heads/playdayy

Found on 2024-10-29 09:21

332 Bytes

Severity: medium
Fingerprint: 2580fa947e78dd08e645819d1cc87ef2172f6dd06e0f28aa87e5a8fa7718fe76

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 9586
Connection: close
Server: AliyunOSS
Date: Mon, 08 May 2023 04:51:46 GMT
x-oss-request-id: 64587FE2C677077C4FB38A24
Accept-Ranges: bytes
ETag: "913EFD4DD09A96AE5B0E45B3BE6849AC"
Last-Modified: Thu, 08 Sep 2022 07:20:37 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6267745847240494569
x-oss-storage-class: Standard
Content-MD5: kT79TdCalq5bDkWzvmhJrA==
x-oss-server-time: 1
Vary: Accept-Encoding,Accept-Encoding,Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a6f3857eba4e91de5ecf52859c1f6856.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUS51-P4
X-Amz-Cf-Id: reyH3TmLVBhYuaCpLW7OCh1kjg-r8NWXE5B3znXb7knT1I9B4IMNFw==
Age: 1
Vary: Origin

Page title: Playdayy[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = git@gitlab.playnexx.net:MiddlePlatform/OfficialWebsite.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "playdayy"]
	remote = origin
	merge = refs/heads/playdayy

Found on 2023-05-08 04:51

332 Bytes

Severity: medium
Fingerprint: 2580fa947e78dd08e645819d1cc87ef2172f6dd06e0f28aa87e5a8fa533b7fac

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 9586
Connection: close
Server: AliyunOSS
Date: Mon, 08 May 2023 04:51:46 GMT
x-oss-request-id: 64587FE2C677077C4FB38A24
Accept-Ranges: bytes
ETag: "913EFD4DD09A96AE5B0E45B3BE6849AC"
Last-Modified: Thu, 08 Sep 2022 07:20:37 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6267745847240494569
x-oss-storage-class: Standard
Content-MD5: kT79TdCalq5bDkWzvmhJrA==
x-oss-server-time: 1
Vary: Accept-Encoding,Accept-Encoding,Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6bc756891d4e5936d9d654c8c717a704.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUS51-P4
X-Amz-Cf-Id: L3KWtXCxQkKURTcSo9qWTIjHT8k0ZVTS3kX20Yc_WCrP_URFEY7wkg==
Age: 3
Vary: Origin

Page title: Playdayy[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = git@gitlab.playnexx.net:MiddlePlatform/OfficialWebsite.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "playdayy"]
	remote = origin
	merge = refs/heads/playdayy

Found on 2023-05-08 04:51

332 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 2a06:98c1:3121::
Domain: playdayy.com
Port: 443
URL: https://playdayy.com

First seen 2022-02-06 05:46
Last seen 2022-03-07 14:03
Open for 29 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cdafa5447dafa544751bf49c0a44d45b4725fdbb076206409
```
Found 18 files trough .DS_Store spidering:

/.git
/.git/hooks
/.git/info
/.git/logs
/.git/objects
/.git/refs
/cn
/css
/images
/images/about
/images/break
/images/common-img
/images/farm
/images/fish
/images/mb
/images/tile
/images/wood
/js
```
  Found on 2022-02-06 05:46
- Severity: low
  Fingerprint: 5f32cf5d6962f09c8329733f8329733fdb294238ec27d27c6e9661281cf93f76
```
Found 10 files trough .DS_Store spidering:

/.git
/.git/hooks
/.git/info
/.git/logs
/.git/objects
/.git/refs
/cn
/css
/images
/js
```
  Found on 2022-02-06 05:46
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.32.99.34
Domain: playdayy.com
Port: 80
URL: http://playdayy.com

First seen 2022-07-01 02:49
Last seen 2022-07-01 02:49
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652220a42ff0
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = git@gitlab.playnexx.net:MiddlePlatform/OfficialWebsite.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "playdayy"]
	remote = origin
	merge = refs/heads/playdayy
```
  Found on 2022-07-01 02:49
  
  332 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 143.204.215.107
Domain: image.homepage.playdayy.com
Port: 443
URL: https://image.homepage.playdayy.com

First seen 2022-12-16 02:24
Last seen 2024-10-28 05:46
Open for 682 days
- Severity: medium
  Fingerprint: 5f32cf5d6962f09ca629b8b1a629b8b17666444312dbc85f1df7ccd576a6e3d6
```
Found 34 files trough .DS_Store spidering:

/about
/about_us.jpg
/apple-store.jpg
/apple-store.png
/break
/button
/common-img
/copyfooter.png
/farm
/favicon.ico
/fish
/footer_navline.png
/footerlogo.png
/games
/google-store.png
/header_navline.png
/hot-games
/join-us
/mb
/mb-index
/navlogo.png
/navlogo2.png
/partner_logo
/swiper
/tile
/wood
/word_div
/合作伙伴logo
/导航栏中英文分隔.png
/底部菜单分隔线.png
/成就丝带.png
/版权栏.png
/网页替换内容12.28
/首页banner按钮.png
```
  Found on 2024-10-28 05:46
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 143.204.215.107
Domain: image.homepage.playdayy.com
Port: 80
URL: http://image.homepage.playdayy.com

First seen 2022-12-16 02:24
Last seen 2024-10-28 11:42
Open for 682 days
- Severity: medium
  Fingerprint: 5f32cf5d6962f09ca629b8b1a629b8b17666444312dbc85f1df7ccd576a6e3d6
```
Found 34 files trough .DS_Store spidering:

/about
/about_us.jpg
/apple-store.jpg
/apple-store.png
/break
/button
/common-img
/copyfooter.png
/farm
/favicon.ico
/fish
/footer_navline.png
/footerlogo.png
/games
/google-store.png
/header_navline.png
/hot-games
/join-us
/mb
/mb-index
/navlogo.png
/navlogo2.png
/partner_logo
/swiper
/tile
/wood
/word_div
/合作伙伴logo
/导航栏中英文分隔.png
/底部菜单分隔线.png
/成就丝带.png
/版权栏.png
/网页替换内容12.28
/首页banner按钮.png
```
  Found on 2024-10-28 11:42
Create report

Open service 2600:9000:2130:3600:a:fa41:7cc0:93a1:80 · playdayy.com

2026-01-01 23:12

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 18506
Connection: close
Server: AliyunOSS
Date: Thu, 01 Jan 2026 23:12:15 GMT
x-oss-server-time: 21
x-oss-request-id: 6956FF4F5910FE80E863980A
Accept-Ranges: bytes
ETag: "298C904C07F8BE4C6B9B12AA7E5D2DFF"
Last-Modified: Tue, 15 Apr 2025 04:08:11 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9744886525771989709
x-oss-storage-class: Standard
Content-MD5: KYyQTAf4vkxrmxKqfl0t/w==
Vary: Accept-Encoding,Accept-Encoding,Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 503a07995c5acbfa2d4c8d341848f82c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P15
X-Amz-Cf-Id: -UiqJ9YmQYn0btRlVgPrvPNUdZT65ZxFp2LIPJPomy2o39qqGUhUdw==
Age: 1

Page title: Playdayy

<!DOCTYPE html><html lang="en"> <head><meta charset="UTF-8"><meta name="description" content="PLAYNEXX is devoted to creating captivating mobile puzzle games"><meta name="viewport" content="width=device-width" ,initial-scale="1.0," user-scalable="no"><link rel="icon" type="image/svg+xml" href="/x2.png"><meta name="generator" content="Astro v4.16.7"><title>Playdayy</title><link rel="stylesheet" href="/_astro/index.CRtEcyRo.css"><script type="module">let b,D;const m={THROTTLE_TIME:400,INERTIA_THRESHOLD:.3,DELTA_THRESHOLD:40,TOUCH_DISTANCE:45,ANIMATION_DURATION:[]},o={isScrolling:!1,lastDeltaY:0,lastTime:0,velocity:0,isInertia:!1};function I(e,t,n,s,a,i,l){b=c=>R(c,e,t,n,a,s,i,l),D=c=>H(c,e,t,n,a,s,i,l),window.addEventListener("wheel",b,{passive:!1}),window.addEventListener("touchstart",N,{passive:!1}),window.addEventListener("touchmove",D,{passive:!1})}function k(){window.removeEventListener("wheel",b),window.removeEventListener("touchstart",N),window.removeEventListener("touchmove",D)}function R(e,t,n,s,a,i,l,c){e.preventDefault();const h=Date.now(),d=e.deltaY;if(o.lastTime!==0){const S=h-o.lastTime;o.velocity=(d-o.lastDeltaY)/S,o.isInertia=Math.abs(o.velocity)<m.INERTIA_THRESHOLD&&Math.abs(d)<Math.abs(o.lastDeltaY)}if(o.isInertia)return;const r=Math.abs(d),p=o.isInertia?m.DELTA_THRESHOLD*1.5:m.DELTA_THRESHOLD;r<p||h-o.lastTime<m.THROTTLE_TIME||(o.lastDeltaY=d,o.lastTime=h,M(d>0?"down":"up",t,n,s,a,i,l,c))}function M(e,t,n,s,a,i,l,c){if(o.isScrolling)return;o.isScrolling=!0;const d=Array.from(t).filter(S=>getComputedStyle(S).display!=="none").length;let r=i.num;e==="down"?r=Math.min(r+1,d-1):r=Math.max(r-1,0);const p=g(d,s,l,c);x(n,r,p),a(r),i.num=r,setTimeout(()=>{o.isScrolling=!1,setTimeout(()=>{o.lastDeltaY=0},800)},m.ANIMATION_DURATION[r])}function g(e,t,n,s){const a=new Array(e).fill(`${t}px`);return m.ANIMATION_DURATION=new Array(e).fill(400),n&&s&&n.forEach((i,l)=>{a[i+1]=s[l],m.ANIMATION_DURATION[i+1]=200}),a.reduce((i,l,c)=>c===0?["0px"]:[...i,`${i[c-1]} - ${l}`],[])}function x(e,t,n){e.style.transition=`top ${m.ANIMATION_DURATION[t]}ms cubic-bezier(0.4, 0, 0.2, 1)`,e.style.top=`calc(${n[t]} + 0.9rem * ${t})`}function H(e,t,n,s,a,i,l,c){if(!v)return;const h=e.touches[0].clientY,d=v-h,r=window.innerHeight*.08;Math.abs(d)>r&&(M(d>0?"down":"up",t,n,s,a,i,l,c),v=null)}let v=null;function N(e){v=e.touches[0].clientY}const E=document.querySelector(".menu"),L=document.querySelector(".close"),O=document.querySelector(".mask"),_=document.querySelectorAll(".mask-list"),T=document.querySelector(".swiper-inner"),f=document.querySelectorAll(".header-text"),Y=document.querySelector(".header-textBox");let y=document.documentElement.clientHeight;const A=document.querySelectorAll(".swiper"),u={num:0};A.forEach(e=>{e.style.height=`calc(${y}px - 0.9rem)`});_.forEach(e=>{e.addEventListener("click",t=>{switch(t.target.innerText){case"Home":u.num=0;break;case"Games":u.num=1;break;default:return}T.style.top=`calc((-${y}px + 0.9rem) * ${u.num})`,w(u.num),O.style.display="none",L.style.display="none",E.style.display="block",I(A,T,y,u,w,[4],["1.68rem"])})});L.addEventListener("click",()=>{O.style.display="none",L.style.display="none",E.style.display="block",I(A,T,y,u,w,[4],["1.68rem"])});E.addEventListener("click",()=>{O.style.display="flex",L.style.display="block",E.style.display="none",k()});Y?.addEventListener("click",e=>{if(e.target.classList.contains("header-text")){switch(e.target.id){case"home":u.num=0;break;case"games":u.num=1;break}T.style.top=`calc((-${y}px + 0.9rem) * ${u.num})`,w(u.num)}});function w(e){switch(e){case 0:f[0].classList.add("active"),f[1].classList.remove("active");break;case 1:case 2:case 3:case 4:f[1].classList.add("active"),f[0].classList.remove("active");break;case 5:f[0].classList.remove("active"),f[1].classList.remove("active");break}}I(A,T,y,u,w,[4],["1.68rem"]);function $(){let e=1920;function t(){let s=100,a=window.innerWidth&&document.documentElement.clientWidth?Math.min(window.innerWidth,document.documentElement.clientWidth):window.innerWidth||document.documentElement.clientWidth||document.body&&docum