LeakIX - Host www.x16222.com

Domain www.x16222.com

United States

CTG Server Limited

Software information

nginx nginx

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.160.179.251
Domain: www.x16222.com
Port: 443
URL: https://www.x16222.com

First seen 2025-07-18 03:54
Last seen 2026-02-16 18:14
Open for 213 days

Severity: low
Fingerprint: 5f32cf5d6962f09c81c345f781c345f7610898f0fc94e7ed2eb3313d8985bd1a

Found 32 files trough .DS_Store spidering:

/.git
/888
/check.html
/event
/event/active
/event/css
/event/img
/event/js
/event/mp4
/index.html
/m
/new-download
/qphtml
/qphtml/static
/robots.txt
/static
/static-xpj80
/ts-download
/ts-download/css
/ts-download/images
/ts-download/js
/ts-download/muse-ui
/ts2-download
/ts2-download/css
/ts2-download/images
/ts2-download/js
/ts2-download/muse-ui
/tsnew-download
/tsnew-download/css
/tsnew-download/images
/tsnew-download/js
/tsnew-download/muse-ui

Found on 2026-02-16 18:14

Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a06acecbf67be709e61b39cc84972f8d6

Found 19 files trough .DS_Store spidering:

/.git
/888
/check.html
/event
/event/active
/event/css
/event/img
/event/js
/event/mp4
/index.html
/m
/new-download
/qphtml
/robots.txt
/static
/static-xpj80
/ts-download
/ts2-download
/tsnew-download

Found on 2025-12-01 13:04

Severity: low
Fingerprint: 5f32cf5d6962f09c31c2f0b631c2f0b6e32174b30812a2ea4749c0bc798445c4

Found 28 files trough .DS_Store spidering:

/.git
/888
/check.html
/event
/event/active
/event/css
/event/img
/event/js
/event/mp4
/index.html
/m
/new-download
/qphtml
/qphtml/static
/robots.txt
/static
/static-xpj80
/ts-download
/ts-download/css
/ts-download/images
/ts-download/js
/ts-download/muse-ui
/ts2-download
/ts2-download/css
/ts2-download/images
/ts2-download/js
/ts2-download/muse-ui
/tsnew-download

Found on 2025-11-27 03:59

Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e7ad6bcebe57a3e4283850fd4b5aa6322

Found 20 files trough .DS_Store spidering:

/.git
/888
/check.html
/event
/event/active
/event/css
/event/img
/event/js
/event/mp4
/index.html
/m
/new-download
/qphtml
/qphtml/static
/robots.txt
/static
/static-xpj80
/ts-download
/ts2-download
/tsnew-download

Found on 2025-11-12 07:28

Severity: low
Fingerprint: 5f32cf5d6962f09c0f8dcf020f8dcf02a719fba7d37be006adedc8500f87eec9

Found 24 files trough .DS_Store spidering:

/.git
/888
/check.html
/event
/event/active
/event/css
/event/img
/event/js
/event/mp4
/index.html
/m
/new-download
/qphtml
/qphtml/static
/robots.txt
/static
/static-xpj80
/ts-download
/ts-download/css
/ts-download/images
/ts-download/js
/ts-download/muse-ui
/ts2-download
/tsnew-download

Found on 2025-11-05 14:37

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 148.66.31.122
Domain: www.x16222.com
Port: 443
URL: https://www.x16222.com

First seen 2025-07-18 03:54
Last seen 2026-02-16 18:14
Open for 213 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652217995600
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = root@6669786.com:lottery-site/lottery-repo-xpj80
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-02-16 18:14
  
  273 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 137.220.202.97
Domain: www.x16222.com
Port: 80
URL: http://www.x16222.com

First seen 2025-03-21 11:32
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652217995600
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = root@6669786.com:lottery-site/lottery-repo-xpj80
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2025-03-21 11:32
  
  273 Bytes
Create report

Open service 104.160.179.251:443 · www.x16222.com

2026-01-23 02:52

HTTP/1.1 200 OK
Server: nginx 
Date: Fri, 23 Jan 2026 02:52:31 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 4535
Connection: close
Vary: Accept-Encoding
Last-Modified: Sun, 10 Aug 2025 10:53:29 GMT
ETag: "68987a29-11b7"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes

Page title: Welcome

<!DOCTYPE html>
<html style="height: 100%;">

<head>
  <meta charset="utf-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
  <title>Welcome</title>

  <script>
    function isMobile() {
      return !!(navigator.userAgent.match(
        /(phone|pad|pod|iPhone|iPod|ios|iPad|android|Mobile|BlackBerry|IEMobile|MQQBrowser|JUC|Fennec|wOSBrowser|BrowserNG|WebOS|Symbian|Windows Phone)/i
        ))
    }
    if (isMobile() !== false) {
      if (location.href.indexOf('#') > -1) {
        location.href = location.origin + '/m/#/home?' + (location.href.split('#')[1].split('?')[1] || '')
      } else {
        location.href = location.origin + '/m/#/home' + location.search
      }
    }
    (function () {
      var url = window.location.href,
        obj = {},
        keyvalue = [],
        key = '',
        value = '',
        parseString = url.substring(url.indexOf('?') + 1, url.length).split('&')
      for (var i in parseString) {
        keyvalue = parseString[i].split('=')
        key = keyvalue[0]
        value = keyvalue[1] && keyvalue[1].includes('#/') ? keyvalue[1].split('#/')[0] : keyvalue[1]
        obj[key] = value
      }

      if (obj.agent) {
        localStorage.setItem('agent', obj.agent)
      }
      if (obj.isPcInfo) {
        isPcInfo = obj.isPcInfo;
      }
      if(obj.register){
          if(!localStorage.token){
              localStorage.setItem('register', obj.register)
          }
      }
    })()
    window.vis = true
    window.onblur = function () {
      window.vis = false
    }
    window.onfocus = function () {
      window.vis = true
      if (typeof window.balanceTask === 'function') {
        window.balanceTask()
      }
    }
    if(!document.querySelector('.statistics')) {
      let head = document.head || document.getElementsByTagName('head')[0];
      let script = document.createElement('script');
      let div = document.createElement('div');
      div.classList = 'statistics'
      div.style.position = 'fixed'
      div.style.left = '-9999px'
      div.style.top = '-9999px'
      script.setAttribute("src", "https://hm.baidu.com/hm.js?fd569754695de39b0c8fd88d702448fd");
      div.appendChild(script);
      head.appendChild(div);
    }
    if(!isMobile()) {
      function loadJS( url, callback ) {
        var script = document.createElement('script'),
        fn = callback || function(){};
        script.type = 'text/javascript';

        //IE
        if(script.readyState){
          script.onreadystatechange = function(){
            if( script.readyState == 'loaded' || script.readyState == 'complete' ){
                script.onreadystatechange = null;
                fn()
            }
          }
        }else{
          // 其他浏览器
          script.onload = function(){
            fn()
          }
        }
        script.src = url;
        document.getElementsByTagName('head')[0].appendChild(script);
      }

      let loadTable = ['/static/public/js/stomp.js', '/static/public/js/qrcode.js'
      , `https://cstaticdun.126.net/load.min.js?t=1754814007842`,
      `https://acstatic-dun.126.net/tool.min.js?t=1754814007842`
      ]
      // 用法
      loadTable.forEach( (url) => {
        loadJS(url,function(e){
          // console.log("🚀 ~ file: index.html ~ line 85 ~ loadJS ~ url loaded success", url)
        })
      })

    }
  </script>
  <!-- <link rel="shortcut icon" href="/static/xpj80/img/favicon.png" type="image/x-icon"> -->
  <!-- <script src="/static/public/js/stomp.js"></script> -->
  <!-- <script src="/static/public/js/qrcode.js"></script> -->

  <!-- <script src="http://cstaticdun.126.net/load.min.js"></script> -->
  <!-- <script src="https://cstaticdun.126.net/load.min.js?t=1754814007842"></script> -->
  <!-- <script type="text/javascript" src="https://acstatic-dun.126.net/tool.min.js?t=1754814007842"></script> -->
  <!-- <script src="/static/public//js/tn_code.js"></script> -->
<link href="/static-xpj80/style.css" rel="stylesheet"><link href="/static-xpj80/css/pages/xpj80/index.405fc576e33065dfccb7b6dcc7eceff6.css" rel="stylesheet"></he

Found 2026-01-23 by HttpPlugin

Create report

Open service 148.66.31.122:443 · www.x16222.com

2026-01-08 21:53

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 08 Jan 2026 21:53:15 GMT
Content-Type: text/html
Content-Length: 3476
Last-Modified: Mon, 04 Dec 2023 03:00:42 GMT
Connection: close
Vary: Accept-Encoding
ETag: "656d40da-d94"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

Page title: Welcome


<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>Welcome</title>
<link rel="stylesheet" type="text/css" href="./Public/Admin/style/css/css.css">
<style type="text/css">
			h1{margin: 0;text-align:center;font: normal 90px/1 "Microsoft YaHei", Helvetica, Arial, sans-serif;color: #e3d641;text-shadow: 0 1px 0 #cccccc, 0 2px 0 #c9c9c9, 0 3px 0 #bbbbbb, 0 4px 0 #b9b9b9, 0 5px 0 #aaaaaa, 0 6px 1px rgba(0, 0, 0, 0.1), 0 0 5px rgba(0, 0, 0, 0.1), 0 1px 3px rgba(0, 0, 0, 0.3), 0 3px 5px rgba(0, 0, 0, 0.2), 0 5px 10px rgba(0, 0, 0, 0.25), 0 10px 10px rgba(0, 0, 0, 0.2), 0 20px 20px rgba(0, 0, 0, 0.15);-webkit-transition: .2s all linear;filter:progid:DXImageTransform.Microsoft.MotionBlur(strength=3, direction=145);}
		</style>
</head>
<body>
<form id="form1" name="form1" method="post" action>
<input type="hidden" name="act" value="user_login">
<div class="back3" style="background-image:url(./Public/bg_2.jpg)">
<div style="float:left;padding-top:60px;width:588px;"><h1 class="logoName" id="logoName">&nbsp;</h1></div>
<div class="loginc" style="padding-top:150px;">
<div class="login1c">
<div class="login1h">
<div class="login1h">
<div class="logintext">
<span class="white18">账 号：</span>
</div>
<input name="username" type="text" id="username" style="width:135px;">
</div>
<div class="login1h">
<div class="logintext">
<span class="white18">密 码：</span>
</div>
<input name="pwd" type="password" id="pwd" style="width:135px;">
</div>
</div>
<div class="loginC">
<input type="image" src="./Public/Admin/style/images/butter2.gif" width="65" height="51" onclick="return c(this.form)" />
</div>
</div>
</div>
<div class="textC"> </div>
</div>
</form>
<script type="text/javascript">
			if(window.parent.length>0)window.parent.location=location;
			_t=Math.round((new Date).getTime()/1e3);
			function c(e){
				if(e.username.value==''||e.username.value.length<3){
					alert(e.username.value==''?"请输入账号":"账号长度不少于3位");
					e.username.focus();return false;
				}else if(e.pwd.value==''||e.pwd.value.length<8){
					alert(e.pwd.value==''?"请输入密码":"密码长度不少于8位");
					e.pwd.focus();return false;
				}g("f",_t);e.action="index.php/Login?t="+_t;
			}
			function g(e,n){t=document.createElement("input");t.type="hidden";t.name=e;t.value=n;form1.appendChild(t)}
			document.oncontextmenu=function(){return false}
			document.getElementById('username').focus();gn();
			function gn() {
				try {
					xhr = new XMLHttpRequest();
				} catch(e) {
					xhr = new ActiveXObject("Microsoft.XMLHTTP");
				}
				xhr.open('post','index.php/Login?getname=2',true);
				xhr.setRequestHeader("content-type","application/x-www-form-urlencoded");
				xhr.send();
				xhr.onreadystatechange = function() {
					if (xhr.readyState == 4 && xhr.status == 200 && typeof(xhr.responseText) == 'string') {
						var n = eval("("+xhr.responseText.replace(/\s+/g,'　')+")");
						if (n.length < 7) {document.getElementById('logoName').innerText=n;return false;}
						document.getElementById('logoName').style.fontSize = 82+'px';
						setTimeout(function(){document.getElementById('logoName').innerText=n},350);
					}
				};
			}
		</script>
<script>
			(function(){
				document.getElementsByTagName('head')[0].appendChild = '';
				document.body.appendChild = '';
			})();
		</script>
</body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

www.x16222.com

Fingerprint:

60777bba1b3c3fcb449eaa30b983b495116dd6022848e16d090d42906ad297cc

CN:

www.x16222.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-07 16:15

Not after:

2026-03-07 16:15

wkperf81.bbm8k.comwkperf83.bbm8k.comwkperf85.bbm8k.com

Fingerprint:

576ebba45e17d47fa3dd10dcbd86f10519cf42a7fa870c1b7f950bf82f525067

CN:

wkperf81.bbm8k.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-31 12:14

Not after:

2026-03-31 12:14

Domain summary

www.x16222.com 8

1 recorded

IP summary

104.160.179.251 1 148.66.31.122 1 137.220.202.97 1

3 recorded

Domain www.x16222.com

United States

Software information

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Create report

Create report

www.x16222.com

wkperf81.bbm8k.comwkperf83.bbm8k.comwkperf85.bbm8k.com

Domain summary

IP summary