LeakIX - Host uh3bw2v.xyz

Domain uh3bw2v.xyz

United States

CNSERVERS

Software information

openresty

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: www.uh3bw2v.xyz
Port: 443
URL: https://www.uh3bw2v.xyz

First seen 2024-07-15 03:15
Last seen 2024-09-18 20:53
Open for 65 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 20:53
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: uh3bw2v.xyz
Port: 443
URL: https://uh3bw2v.xyz

First seen 2024-07-13 02:40
Last seen 2024-09-18 20:16
Open for 67 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 20:16
Create report

Open service 23.225.145.90:80 · uh3bw2v.xyz

2024-09-14 20:40

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 20:40:14 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:80 · www.uh3bw2v.xyz

2024-09-14 17:54

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 17:54:36 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:443 · www.uh3bw2v.xyz

2024-09-14 16:57

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 16:57:18 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:443 · uh3bw2v.xyz

2024-09-14 14:36

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 14:36:27 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin