LeakIX - Host www.magicpay.pro

Domain www.magicpay.pro

Russia

Timeweb, LLP

Software information

nginx nginx 1.18.0

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.125.200.4
Domain: www.magicpay.pro
Port: 443
URL: https://www.magicpay.pro

First seen 2023-03-26 17:40
Last seen 2026-01-02 01:22
Open for 1012 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0f8c03449c3529897ddc784c90b3d1fd8
```
Found 13 files trough .DS_Store spidering:

/.htaccess
/assets
/assets/css
/assets/fonts
/assets/img
/assets/img/avatars
/assets/img/icons
/assets/img/logos
/assets/img/photos
/assets/js
/favicon.ico
/index.php
/robots.txt
```
  Found on 2026-01-02 01:22
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 185.125.200.4
Domain: www.magicpay.pro
Port: 80
URL: http://www.magicpay.pro

First seen 2023-03-26 17:40
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0f8c03449c3529897ddc784c90b3d1fd8
```
Found 13 files trough .DS_Store spidering:

/.htaccess
/assets
/assets/css
/assets/fonts
/assets/img
/assets/img/avatars
/assets/img/icons
/assets/img/logos
/assets/img/photos
/assets/js
/favicon.ico
/index.php
/robots.txt
```
  Found on 2023-03-26 17:40
Create report

Open service 185.125.200.4:443 · www.magicpay.pro

2026-01-09 13:15

HTTP/1.1 302 Found
Server: nginx/1.18.0
Date: Fri, 09 Jan 2026 13:15:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, must-revalidate
Location: https://www.magicpay.pro/login
pragma: no-cache
expires: -1
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjA4SFlCRlVBMzlUWmd2ZnY0a0R2d0E9PSIsInZhbHVlIjoiZlB0OC9rRkxHWXhBSmlaVG4rL1UzMFFxYnFXbndMZWtKZG16aExlUE41Ump0VVZsUHpPZENscEFNUEhNVEtXdytNSXBGRmZEaTY3cmc1c2MzWEdJZlRvYUFXM0FFVG5OWENhZEdCMGhJTlBxWTJ0RWVrZS9xTSt5am8vNktOUVUiLCJtYWMiOiJiMDg2NTcyYjM0NGNjODM5MjMxYmUxOWU0MjY5MTA4MzkwNTU3NTQ4MGY5MTUwODU2MTk5NDYwMzE3ZTJhNTkwIiwidGFnIjoiIn0%3D; expires=Fri, 09 Jan 2026 15:15:02 GMT; Max-Age=7200; path=/; samesite=lax
Set-Cookie: magicpay_session=eyJpdiI6Ik1TVjdqT1lCamtCWk5ncWxxWGNTNlE9PSIsInZhbHVlIjoiaEszZ2NaZ3RnenY3NXM1U295SXBhSkdnL1dxaEQ1bjZzREloWEtrbnNhNlM3R21Dd1l3TTVoWVhORWhuOGV1RW0zNGV5SnYxaFRvWU5TejdBSHZBQzhlRzB5VGorb0R5L3hycWNhZXh6ZkF0WlF5U1ROcjE2ZVZadlNZQVJuUDYiLCJtYWMiOiI0NDVmMzE3OWVjNmRhYTI2ZGViNzhjN2RkZWM5MzJiZWI2MWE1YWM1NmYwZTI1MDQwZTgwYmFiNzAxODU2ZjBhIiwidGFnIjoiIn0%3D; expires=Fri, 09 Jan 2026 15:15:02 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Strict-Transport-Security: max-age=31536000;

Page title: Redirecting to https://www.magicpay.pro/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='https://www.magicpay.pro/login'" />

        <title>Redirecting to https://www.magicpay.pro/login</title>
    </head>
    <body>
        Redirecting to <a href="https://www.magicpay.pro/login">https://www.magicpay.pro/login</a>.
    </body>
</html>

Found 16 hours ago by HttpPlugin

Create report

Open service 185.125.200.4:443 · www.magicpay.pro

2026-01-02 01:22

HTTP/1.1 302 Found
Server: nginx/1.18.0
Date: Fri, 02 Jan 2026 01:22:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, must-revalidate
Location: https://www.magicpay.pro/login
pragma: no-cache
expires: -1
Set-Cookie: XSRF-TOKEN=eyJpdiI6IjJsV1JVQTVWN0VCVUx5ZlZzbVZnalE9PSIsInZhbHVlIjoiZWwxbGNYYnNGNXQrVzZEalh0NlQyRGFpL1E5RHh6cHkxNVBhMVJ1SldEZk90OHJVU1prRXpSbnN1QVp2L1RwRzlzWXBjSnhrNWdHV2MvMGpwd0pUZHZZUEQ4WUtkRkJadFRIRisxK2VGV3Y0LzFuemhsWXh1dUtIRjIxVjFRWWkiLCJtYWMiOiI1MjdkNmY0MTAxMzFhNTQwYjQ0ODNjMDA4OWNmMDkxYTczY2Q0OGJlNDUzYjhlYmNjMjg5ZDk0YTM5ZmM0MzE4IiwidGFnIjoiIn0%3D; expires=Fri, 02 Jan 2026 03:22:04 GMT; Max-Age=7200; path=/; samesite=lax
Set-Cookie: magicpay_session=eyJpdiI6ImtMRVRwWFo3a0VlZFZ1UUF0QU5ZWHc9PSIsInZhbHVlIjoiajg3b29DbDRPOTZwRzJzWHg5YmZtZVgreG1VVGJSaHJTVEgwZUU5QkVaa1pZTXg3UFd5OHhZNU80bDBDdDVjeDZvRUJaaExRWXExRkdBRXlZWDlaK3VDVzJEVWoyT0JvNUQ5b003bVBDUlgwYXRUajBVSWl0VkdzT2o3aXNCVU8iLCJtYWMiOiIxZDk2OTJkNTBkNzQ5NzIxNmM5NmI1ZGI2ZWQ5OGU4MzU2MmEwMThhY2FkODk2ODc1NTc0Njc3MmZkN2UyMWZlIiwidGFnIjoiIn0%3D; expires=Fri, 02 Jan 2026 03:22:04 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Strict-Transport-Security: max-age=31536000;

Page title: Redirecting to https://www.magicpay.pro/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='https://www.magicpay.pro/login'" />

        <title>Redirecting to https://www.magicpay.pro/login</title>
    </head>
    <body>
        Redirecting to <a href="https://www.magicpay.pro/login">https://www.magicpay.pro/login</a>.
    </body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 185.125.200.4:443 · www.magicpay.pro

2025-12-30 13:09

HTTP/1.1 302 Found
Server: nginx/1.18.0
Date: Tue, 30 Dec 2025 13:09:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, must-revalidate
Location: https://www.magicpay.pro/login
pragma: no-cache
expires: -1
Set-Cookie: XSRF-TOKEN=eyJpdiI6InhBb3NqdEIxNGZCK1FZSUNFamNRekE9PSIsInZhbHVlIjoibzZ2WFcwT2QwejB3aDljemxYQmtuam1KM05SQWk3MlJNNUdEbUsvYjI5Z3pPaTllQXZ3OHREQmNNNit2Z212T3g3dVBGNU9HTVNjVm1wdWxaYzdlaWQ5WElJQlZ0WlltblRKQUZVNWZROWI0M3ViL0NzeHZnMTNFZktOMjNVTG0iLCJtYWMiOiI4ODUwZDMzZGViZTI3NzdmYTIwYzQ3Njk2MzY1NTkzOTkyM2IzOTlhOGZhMWFmYTI3ZDhmMTRlNWM0ZGM3MTg5IiwidGFnIjoiIn0%3D; expires=Tue, 30 Dec 2025 15:09:12 GMT; Max-Age=7200; path=/; samesite=lax
Set-Cookie: magicpay_session=eyJpdiI6IjZCL2dlUm9ERHlpNjAyaCtuWXBYUlE9PSIsInZhbHVlIjoidGM0S2h6UzBqYU55RlZXR2c3bDgzVXh2bjg0MXdFWG9MdUNOTkZxaVduOEl1UWllbCtCdFFoMmpqc2dSRUNxcVlId0d3OCtBNDJCdFpta1FsT0VVeXIwbTJjcnlURjBQUmovaFpFRzRUUVB0ZnQ0dk9NOGxHNnp1eHNDcGJGNlQiLCJtYWMiOiJhMDNkMjg5NDZiMjI1NmM3YWI1MzdiMGUxODI3Yzk3NzBkZDliNGE3ODFlYTkzMjkwNDg5ODBhZGMzMmU1YjJlIiwidGFnIjoiIn0%3D; expires=Tue, 30 Dec 2025 15:09:12 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Strict-Transport-Security: max-age=31536000;

Page title: Redirecting to https://www.magicpay.pro/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='https://www.magicpay.pro/login'" />

        <title>Redirecting to https://www.magicpay.pro/login</title>
    </head>
    <body>
        Redirecting to <a href="https://www.magicpay.pro/login">https://www.magicpay.pro/login</a>.
    </body>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 185.125.200.4:443 · www.magicpay.pro

2025-12-22 06:54

HTTP/1.1 302 Found
Server: nginx/1.18.0
Date: Mon, 22 Dec 2025 06:54:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, must-revalidate
Location: https://www.magicpay.pro/login
pragma: no-cache
expires: -1
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImhYZmlaZjRKaytJOE8ydVUrSVFJTlE9PSIsInZhbHVlIjoiWUNPWW9COENYMTZ5VTcrbk1ZSVV4c2J3UmUrS25JUjlaTFg3NkdBOHlwSU8rTEdVVEowN0dVdzRyaUdRaGNiL0JwZ051M2JPVk1DWHJEZnlSWnkySEpkV2ZiU0E2YXJzbElCUHBrWXFoSnU2a1lMTjFUODRhcUpGUmcxUnd6ZlAiLCJtYWMiOiJiYzVhMTJiZDVkZjVlZjdiNDk5MjU5YTc1ZTU3NWE3NzYyMzU0Njg1M2U2YzNhMTMzOTE1YTI0MjBiYzI5Y2FiIiwidGFnIjoiIn0%3D; expires=Mon, 22 Dec 2025 08:54:14 GMT; Max-Age=7200; path=/; samesite=lax
Set-Cookie: magicpay_session=eyJpdiI6IlczM3RYUkFQakZNNXBjMlhBTnhmWXc9PSIsInZhbHVlIjoiYW9SS0h5QVVwNHNSaTdacTlmUmROcVpjb0E5cEZteExOL2JOcVo4RGtUaW5Jc2JPQ2t2MnZ1RFkzZXpnZkdBMWVQU08rdW9CR3BFb3NtY2ZIWjR6ZkpSZHhPbHN1eTNrSXc2Vk80R0NOWC9HQ29zZFF2M2t2VzBqSEthdzNKU2siLCJtYWMiOiIxNTk4ZTc3OTE1N2FhN2M1NWY5ZTA0ZTFjNDQ3ZWExODQ4NjljZmZmYzMyNjgzN2FiY2EwODkwODYxYWJhMjc0IiwidGFnIjoiIn0%3D; expires=Mon, 22 Dec 2025 08:54:14 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Strict-Transport-Security: max-age=31536000;

Page title: Redirecting to https://www.magicpay.pro/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='https://www.magicpay.pro/login'" />

        <title>Redirecting to https://www.magicpay.pro/login</title>
    </head>
    <body>
        Redirecting to <a href="https://www.magicpay.pro/login">https://www.magicpay.pro/login</a>.
    </body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 185.125.200.4:443 · www.magicpay.pro

2025-12-19 02:15

HTTP/1.1 302 Found
Server: nginx/1.18.0
Date: Fri, 19 Dec 2025 02:15:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, must-revalidate
Location: https://www.magicpay.pro/login
pragma: no-cache
expires: -1
Set-Cookie: XSRF-TOKEN=eyJpdiI6Ilk4U0Y0dHYzOWhZa0U5b1psZnhWQmc9PSIsInZhbHVlIjoiUHV0WXIzakVlWHMrdDA2cW5GYWFWNTkwTlprb2IrSUkzQU1ucGFHekRVVXV6MmtmVVlCOSs4UVBYdCs2OXp4SWdUaGFRNExQcnh2alFYbkMwcWdvaFA1UTVib1R2bEl0dGFaL0xjNG9IYzM3TEg0MnVRcXM5RnArSDJVMW9hNVoiLCJtYWMiOiIxZTE0MDE1YjE5NjE3OTgwMGU4YjRlOGFhMzdkZTA4NTQzYTE4NDJkYjIxM2M3Yzk0ZmQxNjA5YWEyMDE2NDUxIiwidGFnIjoiIn0%3D; expires=Fri, 19 Dec 2025 04:15:12 GMT; Max-Age=7200; path=/; samesite=lax
Set-Cookie: magicpay_session=eyJpdiI6IldXbXRXL01pSVltUzJkY0h6b2xEYXc9PSIsInZhbHVlIjoiRmF6L0ozRDh6bXBjTU9VYXRmZWpiSEg4TG0wSVpGK29xSXNtc294TGF0dnJaQVlhc1QwY0NvbHc5RGlwV1QvaXhmU3BlLzFsVGZ2c1J6YkVaenl2YlFCVDdLMVltK3BSNnF0U1pZWEIzdVJhcnFPNkpUaXZjZUtmOFk4TUZseUwiLCJtYWMiOiIwNmViMGUwNWY0MTFhNzE1YjEwNTNiNWUxMGI1OGVlYmZmZWRlMTU0ODIyMjc5ZTcyODIzNDcxZTM4YjIyZDMwIiwidGFnIjoiIn0%3D; expires=Fri, 19 Dec 2025 04:15:12 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Strict-Transport-Security: max-age=31536000;

Page title: Redirecting to https://www.magicpay.pro/login

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='https://www.magicpay.pro/login'" />

        <title>Redirecting to https://www.magicpay.pro/login</title>
    </head>
    <body>
        Redirecting to <a href="https://www.magicpay.pro/login">https://www.magicpay.pro/login</a>.
    </body>
</html>

Found 2025-12-19 by HttpPlugin

Create report

magicpay.prowww.magicpay.pro

Fingerprint:

6a2158f7914a255833f5db32d2bb7b53ca7d6e5bded7fc3932fd1e6ceaed77f1

CN:

magicpay.pro

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-10 23:48

Not after:

2026-02-08 23:48

Domain summary

www.magicpay.pro 6

1 recorded

IP summary

185.125.200.4 2

1 recorded

Domain www.magicpay.pro

Russia

Software information

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Create report

Create report

Create report

Create report

Create report

magicpay.prowww.magicpay.pro

Domain summary

IP summary