LeakIX - Host softly.ai

Domain softly.ai

United States

AUTOMATTIC

Software information

nginx nginx

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.32.99.29
Domain: www.softly.ai
Port: 443
URL: https://www.softly.ai

First seen 2023-02-21 02:23
Last seen 2023-06-13 00:19
Open for 111 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2023-04-15 04:40
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f877272a0bbaee2c89bae6947ccc321ec352b
```
Found 11 files trough .DS_Store spidering:

/assets
/assets/img
/assets/img/clients
/assets/img/main
/assets/img/main/home_main
/assets/img/news
/assets/img/solution
/assets/img/streamade
/assets/img/team
/assets/vendor
/news
```
  Found on 2023-02-21 02:23
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.32.99.29
Domain: softly.ai
Port: 443
URL: https://softly.ai

First seen 2023-02-21 02:23
Last seen 2023-06-13 00:19
Open for 111 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2023-04-15 04:40
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f877272a0bbaee2c89bae6947ccc321ec352b
```
Found 11 files trough .DS_Store spidering:

/assets
/assets/img
/assets/img/clients
/assets/img/main
/assets/img/main/home_main
/assets/img/news
/assets/img/solution
/assets/img/streamade
/assets/img/team
/assets/vendor
/news
```
  Found on 2023-02-21 02:23
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.32.99.20
Domain: softly.ai
Port: 80
URL: http://softly.ai

First seen 2023-04-15 04:40
Last seen 2023-06-13 00:19
Open for 58 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2023-04-15 04:40
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.32.99.43
Domain: www.softly.ai
Port: 80
URL: http://www.softly.ai

First seen 2023-04-15 04:40
Last seen 2023-06-13 00:19
Open for 58 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2023-04-15 04:40
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.224.189.12
Domain: www.softly.ai
Port: 443
URL: https://www.softly.ai

First seen 2022-07-12 00:46
Last seen 2023-02-21 02:23
Open for 224 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c81cd9a2
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = git@github.com:softly-ai/website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "feat/companyinfo"]
	remote = origin
	merge = refs/heads/feat/companyinfo
```
  Found on 2022-07-12 00:46
  
  326 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.224.189.39
Domain: softly.ai
Port: 443
URL: https://softly.ai

First seen 2022-07-12 00:45
Last seen 2023-03-28 09:30
Open for 259 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c81cd9a2
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = git@github.com:softly-ai/website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "feat/companyinfo"]
	remote = origin
	merge = refs/heads/feat/companyinfo
```
  Found on 2022-07-12 00:45
  
  326 Bytes
Create report

Open service 192.0.78.167:443 · blog.softly.ai

2026-01-09 23:24

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Jan 2026 23:24:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-hacker: Want root?  Visit join.a8c.com and mention this header.
Host-Header: WordPress.com
Vary: accept, content-type, cookie
Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
Link: <https://blog.softly.ai/wp-json/>; rel="https://api.w.org/"
Link: <https://blog.softly.ai/wp-json/wp/v2/pages/861>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://wp.me/PeAfSq-dT>; rel=shortlink
X-ac: 32.jfk _atomic_dca UPDATING
Alt-Svc: h3=":443"; ma=86400
Server-Timing: a8c-cdn, dc;desc=jfk, cache;desc=UPDATING;dur=3.0

Found 2026-01-09 by HttpPlugin

Create report

Open service 192.0.78.167:443 · blog.softly.ai

2026-01-02 09:14

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Jan 2026 09:14:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-hacker: Want root?  Visit join.a8c.com and mention this header.
Host-Header: WordPress.com
Vary: accept, content-type, cookie
Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
Link: <https://blog.softly.ai/wp-json/>; rel="https://api.w.org/"
Link: <https://blog.softly.ai/wp-json/wp/v2/pages/861>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://wp.me/PeAfSq-dT>; rel=shortlink
Last-Modified: Mon, 22 Dec 2025 13:10:45 GMT
Cache-Control: max-age=300, must-revalidate
X-nananana: Batcache-Set
X-ac: 27.sin _atomic_bur UPDATING
Alt-Svc: h3=":443"; ma=86400
Server-Timing: a8c-cdn, dc;desc=sin, cache;desc=UPDATING;dur=1.0

Found 2026-01-02 by HttpPlugin

Create report

Open service 192.0.78.167:443 · blog.softly.ai

2025-12-22 13:10

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 Dec 2025 13:10:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
X-hacker: Want root?  Visit join.a8c.com and mention this header.
Host-Header: WordPress.com
Vary: accept, content-type, cookie
Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
Link: <https://blog.softly.ai/wp-json/>; rel="https://api.w.org/"
Link: <https://blog.softly.ai/wp-json/wp/v2/pages/861>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://wp.me/PeAfSq-dT>; rel=shortlink
Last-Modified: Mon, 22 Dec 2025 13:10:45 GMT
Cache-Control: max-age=300, must-revalidate
X-nananana: Batcache-Set
X-ac: 27.sin _atomic_bur MISS
Alt-Svc: h3=":443"; ma=86400
Server-Timing: a8c-cdn, dc;desc=sin, cache;desc=MISS;dur=1342.0

Found 2025-12-22 by HttpPlugin

Create report

Open service 192.0.78.167:443 · blog.softly.ai

2025-12-20 13:06

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 20 Dec 2025 13:06:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
X-hacker: Want root?  Visit join.a8c.com and mention this header.
Host-Header: WordPress.com
Vary: accept, content-type, cookie
Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
Link: <https://blog.softly.ai/wp-json/>; rel="https://api.w.org/"
Link: <https://blog.softly.ai/wp-json/wp/v2/pages/861>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://wp.me/PeAfSq-dT>; rel=shortlink
Last-Modified: Sat, 20 Dec 2025 13:06:52 GMT
Cache-Control: max-age=300, must-revalidate
X-nananana: Batcache-Set
X-ac: 2.ams _atomic_ams MISS
Alt-Svc: h3=":443"; ma=86400
Server-Timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=1172.0

Found 2025-12-20 by HttpPlugin

Create report

*.wordpress.comwordpress.com

Fingerprint:

f70998483128eabeee9ec70b2366b133a41426ebba98beb27258b0d363566c54

CN:

wordpress.com

Key:

ECDSA-256

Issuer:

Not before:

2026-01-07 19:45

Not after:

2026-04-07 19:45

*.wordpress.comwordpress.com

Fingerprint:

b5f98de67b0a81fd65eec06637d1b9dd4be4f1fcecf9a5082cb30e506155c59c

CN:

wordpress.com

Key:

ECDSA-256

Issuer:

Not before:

2025-11-08 19:45

Not after:

2026-02-06 19:45

antoniosantoropaintings.comblog.softly.aicycleoli.sport.blogdominicspiteri.jpes.smawatch.comfaithlutheranbv.orgforestlakefriendsqld.comgetonemove.comhealthbeautybd.fitness.blogklimt.music.blogkukuipihacandle.comnicurls.comokyouth.caolyamarino.artpanamamemphis.compemasarandigital.car.blogppfcars.comraysbabyshop.family.blogsmallcloth.finance.blogtarrantvalley10.orgtheandrea.family.blogtls.automattic.comtractor.music.blogtulipmonsellasector53gurgaon.fitness.blogtulipmonsellasector53gurgaon.health.blogtulipmonsellasector53gurgaon.movie.blogtulipmonsellasector53gurgaon.politics.blogwww.antoniosantoropaintings.comwww.batter.music.blogwww.beyondthefront.comwww.dominicspiteri.jpwww.es.smawatch.comwww.forestlakefriendsqld.comwww.forexexperttradingautoinvest.finance.blogwww.getonemove.comwww.lavonnestheagency.comwww.nicurls.comwww.okyouth.cawww.pemasarandigital.car.blogwww.raysbabyshop.family.blogwww.recoverydharmaberlin.dewww.showerofmoney.finance.blogwww.slowlane.family.blogwww.smallcloth.finance.blogwww.theandrea.family.blogwww.tractor.music.blogwww.tricktechbd.tech.blogwww.tulipmonsellasector53gurgaon.fitness.blogwww.tulipmonsellasector53gurgaon.health.blogwww.tulipmonsellasector53gurgaon.movie.blogwww.tulipmonsellasector53gurgaon.politics.blog

Fingerprint:

d7fe66b08324d8aaf0ca8a383fade3a98bd4e23ba9f16cfcce14692487a6f434

CN:

tls.automattic.com

Key:

ECDSA-256

Issuer:

Not before:

2025-10-17 17:16

Not after:

2026-01-15 17:16

Domain summary

www.softly.ai 4 softly.ai 4 blog.softly.ai 3

3 recorded

IP summary

192.0.78.167 2 13.32.99.29 2 18.66.112.43 1 18.66.112.17 1 13.32.99.20 1 13.32.99.43 1 13.224.189.12 1 13.224.189.39 1

8 recorded

Domain softly.ai

United States

Software information

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Create report

Create report

Create report

Create report

*.wordpress.comwordpress.com

*.wordpress.comwordpress.com

Domain summary

IP summary