LeakIX - Host spin101.click

Domain spin101.click

United States

AMAZON-02

Software information

CloudFront

tcp/80

openresty

tcp/443

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.172.112.11
Domain: spin101.click
Port: 443
URL: https://spin101.click

First seen 2024-09-09 04:24
Last seen 2024-12-04 23:42
Open for 86 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbbbe8ef33b

[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = http://git.jiuyi.com:3000/penghaoran/yd1_download.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "main"]
	remote = origin
	merge = refs/heads/main
[branch "yd2"]
	remote = origin
	merge = refs/heads/yd2
[branch "yd3"]
	remote = origin
	merge = refs/heads/yd3
[branch "yd5"]
	remote = origin
	merge = refs/heads/yd5
[branch "yd6"]
	remote = origin
	merge = refs/heads/yd6
[branch "yd9"]
	remote = origin
	merge = refs/heads/yd9
[branch "yd10"]
	remote = origin
	merge = refs/heads/yd10
[branch "yd11"]
	remote = origin
	merge = refs/heads/yd11
[branch "yd12"]
	remote = origin
	merge = refs/heads/yd12
[branch "yd15"]
	remote = origin
	merge = refs/heads/yd15
[branch "yd16"]
	remote = origin
	merge = refs/heads/yd16
[branch "yd17"]
	remote = origin
	merge = refs/heads/yd17
[branch "yd8"]
	remote = origin
	merge = refs/heads/yd8
[branch "yd7"]
	remote = origin
	merge = refs/heads/yd7
[branch "yd13"]
	remote = origin
	merge = refs/heads/yd13
[branch "yd105"]
	remote = origin
	merge = refs/heads/yd105
[branch "indonesia_1"]
	remote = origin
	merge = refs/heads/indonesia_1
[branch "yd108"]
	remote = origin
	merge = refs/heads/yd108
[branch "yd113"]
	remote = origin
	merge = refs/heads/yd113
[branch "yd18"]
	remote = origin
	merge = refs/heads/yd18
[branch "yd107"]
	remote = origin
	merge = refs/heads/yd107
[branch "yd207"]
	remote = origin
	merge = refs/heads/yd207
[branch "yd208"]
	remote = origin
	merge = refs/heads/yd208
[branch "yd209"]
	remote = origin
	merge = refs/heads/yd209
[branch "yd210"]
	remote = origin
	merge = refs/heads/yd210

Found on 2024-12-04 23:42

1.8 kBytes

Create report

Open service 2600:9000:235a:6c00:b:a265:d80:93a1:443 · spin101.click

2026-01-01 05:21

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Thu, 01 Jan 2026 05:21:50 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 32c1b1f3aed1f2411468b70713ad6556.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P9
X-Amz-Cf-Id: F00PyKJPtLTYVfVstKV6-hW80A5fhIicz49H_ihMYcVjiD-UvIJ8jg==

Page title: Join in Spin101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Join in Spin101!" />
        <meta property="og:description"   content="Enter my referral code and get 100 coins!" />
        <meta property="og:image"         content="./share102.png" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Join in Spin101!">
        <meta property="description" content="Welcome to Spin101! Discover an array of exciting games, including slots, Rummy, Teenpatti, Aviator, and more. As India&#039;s leading online gaming platform, we provide endless opportunities to win big cash prizes. Don&#039;t miss our daily mystery bonus for even more chances to hit the jackpot! Join our community of avid gamers and start winning at Spin101 today!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Join in Spin101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Failed to obtain link from server')
                                }
                            } else {
                                alert('Failed to obtain link')
                            }
                        }
                    }
                    xhr.open('GET', url, true);
                    xhr.send();
                })
        </script>
        <script type="text/javascript" src="./src/js/jquery.min.js"></script>
        <script type="text/javascript" src="./src/js/index.js?t=2342342