LeakIX - Host xv56hf.xyz

Domain xv56hf.xyz

United States

CNSERVERS

Software information

openresty

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: www.xv56hf.xyz
Port: 443
URL: https://www.xv56hf.xyz

First seen 2024-05-18 03:19
Last seen 2024-09-18 13:31
Open for 123 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 13:31
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: www.xv56hf.xyz
Port: 80
URL: http://www.xv56hf.xyz

First seen 2024-07-16 18:03
Last seen 2024-09-18 16:38
Open for 63 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 16:38
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: xv56hf.xyz
Port: 443
URL: https://xv56hf.xyz

First seen 2024-05-17 06:46
Last seen 2024-09-18 18:07
Open for 124 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 18:07
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.225.145.90
Domain: xv56hf.xyz
Port: 80
URL: http://xv56hf.xyz

First seen 2024-07-15 07:12
Last seen 2024-09-18 04:37
Open for 64 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9dac936db2ac936db2ac936db2ac936db2
```
Found 1 files trough .DS_Store spidering:

/pdf
```
  Found on 2024-09-18 04:37
Create report

Open service 23.225.145.90:80 · xv56hf.xyz

2024-09-16 05:31

HTTP/1.1 200 OK
Server: openresty
Date: Mon, 16 Sep 2024 05:31:33 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-16 by HttpPlugin

Create report

Open service 23.225.145.90:80 · www.xv56hf.xyz

2024-09-14 20:47

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 20:47:55 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:80 · www.xv56hf.xyz

2024-09-14 19:10

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 19:10:51 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:443 · www.xv56hf.xyz

2024-09-14 19:10

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 19:10:52 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:443 · xv56hf.xyz

2024-09-14 16:18

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 16:18:14 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:443 · www.xv56hf.xyz

2024-09-14 11:52

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 11:52:55 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 23.225.145.90:80 · xv56hf.xyz

2024-09-14 03:55

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 14 Sep 2024 03:55:35 GMT
Content-Type: text/html
Content-Length: 1076
Last-Modified: Thu, 01 Aug 2024 13:33:19 GMT
Connection: close
ETag: "66ab8e9f-434"
Accept-Ranges: bytes

Page title: mmtt

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="./favicon.ico" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no" />
    <script async src="https://img.maskanalyse.com/node/script?appId=todaynews&channel=默认"></script>
    <script src='./socket.io.js'></script>
    <script src="./pdf/build/pdf.js"></script>
    <title>mmtt</title>
    <script type="module" crossorigin src="./assets/index.5b07fc1c.js"></script>
    <link rel="stylesheet" href="./assets/index.16dc570f.css">
  </head>
  <body>
    <div id="app"></div>
    
    <script>
      var _hmt = _hmt || [];
      (function() {
        var hm = document.createElement("script");
        hm.src = "https://hm.baidu.com/hm.js?ae57fd99ea771dabc2738f1afdb7d1c5";
        var s = document.getElementsByTagName("script")[0]; 
        s.parentNode.insertBefore(hm, s);
      })();
      </script>
  </body>
</html>

Found 2024-09-14 by HttpPlugin