LeakIX - Host ypk0ik1mok9n.xyz

Domain ypk0ik1mok9n.xyz

United States

AMAZON-02

Software information

CloudFront

tcp/80

nginx nginx 1.22.0

tcp/443

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.238.243.74
Domain: ypk0ik1mok9n.xyz
Port: 443
URL: https://ypk0ik1mok9n.xyz

First seen 2024-05-06 06:12
Last seen 2024-09-30 09:24
Open for 147 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652201fa2920
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://ngit.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-30 09:24
  
  240 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-08 20:01
  
  239 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.238.243.74
Domain: ypk0ik1mok9n.xyz
Port: 443
URL: https://ypk0ik1mok9n.xyz

First seen 2024-10-04 06:52
Last seen 2024-10-08 03:55
Open for 3 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0904d808d7e02e9ac8f638f0164866dd3
```
Found 13 files trough .DS_Store spidering:

/.git
/.gitignore
/collect_301.html
/enter - 副本.html
/enter.html
/favicon.ico
/iframe.html
/index copy.html
/index.html
/QRcode - 副本.html
/QRcode.html
/README.md
/static
```
  Found on 2024-10-08 03:55
Create report

Open service 18.238.243.74:443 · ypk0ik1mok9n.xyz

2024-11-02 06:28

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 952
Connection: close
Server: nginx/1.22.0
Last-Modified: Sat, 19 Oct 2024 07:36:34 GMT
Accept-Ranges: bytes
Date: Fri, 01 Nov 2024 09:57:34 GMT
ETag: "67136182-3b8"
X-Cache: Hit from cloudfront
Via: 1.1 c325bcaec82bfa9f1a033070b385ab14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
X-Amz-Cf-Id: PcwykRajukN5gW-CO8fA72BBRYMBXh1L_sXohVoT5KDovYjuex-95w==
Age: 73843


<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta http-equiv="pragram" content="no-cache">
    <meta http-equiv="cache-control" content="no-cache, no-store, must-revalidate">
    <meta http-equiv="expires" content="0">
</head>

<body>
    <div style="  font-size: 18px;
    text-align: center;
    color: #000;
    position: absolute;
    top: 30%;
    left: 50%;
    transform: translateX(-50%) translateY(-50%);">
        &#x9875;&#x9762;&#x8DF3;&#x8F6C;&#x4E2D;...
    </div>
    <div id="app"></div>
    <script src="static/js/common.js?t=202409091529"></script>
    <script src="static/cdn/js/vue.min.js"></script>
    <script src="static/cdn/js/axios.min.js"></script>
    <script src="static/cdn/js/crypto-js.min.js"></script>
    <script src="static/js/collect_301.js?t=202409091529"></script>
</body>

</html>

Found 2024-11-02 by HttpPlugin

Create report

Open service 18.238.243.74:443 · ypk0ik1mok9n.xyz

2024-11-02 03:12

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 952
Connection: close
Server: nginx/1.22.0
Last-Modified: Sat, 19 Oct 2024 07:36:34 GMT
Accept-Ranges: bytes
Date: Fri, 01 Nov 2024 09:57:34 GMT
ETag: "67136182-3b8"
X-Cache: Hit from cloudfront
Via: 1.1 a4f5633e78f92f983940236e96220232.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
X-Amz-Cf-Id: yG814aCc9GmkfNp_r1rpqLberBf7Ys0mJ8fQhhrUIsEXMX5Ea15EsA==
Age: 62091


<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta http-equiv="pragram" content="no-cache">
    <meta http-equiv="cache-control" content="no-cache, no-store, must-revalidate">
    <meta http-equiv="expires" content="0">
</head>

<body>
    <div style="  font-size: 18px;
    text-align: center;
    color: #000;
    position: absolute;
    top: 30%;
    left: 50%;
    transform: translateX(-50%) translateY(-50%);">
        &#x9875;&#x9762;&#x8DF3;&#x8F6C;&#x4E2D;...
    </div>
    <div id="app"></div>
    <script src="static/js/common.js?t=202409091529"></script>
    <script src="static/cdn/js/vue.min.js"></script>
    <script src="static/cdn/js/axios.min.js"></script>
    <script src="static/cdn/js/crypto-js.min.js"></script>
    <script src="static/js/collect_301.js?t=202409091529"></script>
</body>

</html>

Found 2024-11-02 by HttpPlugin

Create report

Open service 18.238.243.74:443 · ypk0ik1mok9n.xyz

2024-11-01 04:11

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 952
Connection: close
Server: nginx/1.22.0
Last-Modified: Sat, 19 Oct 2024 07:36:34 GMT
Accept-Ranges: bytes
Date: Thu, 31 Oct 2024 09:18:12 GMT
ETag: "67136182-3b8"
X-Cache: Hit from cloudfront
Via: 1.1 70edb33d401d701d341a00ffeb978b84.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
X-Amz-Cf-Id: YBqh9F8AF5PYNdg7qAJyMnBCKDWCaAYvd6qEETVc4molM68cbes3aw==
Age: 68027


<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta http-equiv="pragram" content="no-cache">
    <meta http-equiv="cache-control" content="no-cache, no-store, must-revalidate">
    <meta http-equiv="expires" content="0">
</head>

<body>
    <div style="  font-size: 18px;
    text-align: center;
    color: #000;
    position: absolute;
    top: 30%;
    left: 50%;
    transform: translateX(-50%) translateY(-50%);">
        &#x9875;&#x9762;&#x8DF3;&#x8F6C;&#x4E2D;...
    </div>
    <div id="app"></div>
    <script src="static/js/common.js?t=202409091529"></script>
    <script src="static/cdn/js/vue.min.js"></script>
    <script src="static/cdn/js/axios.min.js"></script>
    <script src="static/cdn/js/crypto-js.min.js"></script>
    <script src="static/js/collect_301.js?t=202409091529"></script>
</body>

</html>

Found 2024-11-01 by HttpPlugin

Create report

Open service 18.238.243.74:443 · ypk0ik1mok9n.xyz

2024-11-01 01:07

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 952
Connection: close
Server: nginx/1.22.0
Last-Modified: Sat, 19 Oct 2024 07:36:34 GMT
Accept-Ranges: bytes
Date: Thu, 31 Oct 2024 09:18:12 GMT
ETag: "67136182-3b8"
X-Cache: Hit from cloudfront
Via: 1.1 d86b0ef5c17f755a14a26fbae67aba4e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
X-Amz-Cf-Id: ziGeHPJwkxUkMReGUXBXZvJ3Vses1baiALsLKeulviwm5oExGknB8g==
Age: 56933


<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta http-equiv="pragram" content="no-cache">
    <meta http-equiv="cache-control" content="no-cache, no-store, must-revalidate">
    <meta http-equiv="expires" content="0">
</head>

<body>
    <div style="  font-size: 18px;
    text-align: center;
    color: #000;
    position: absolute;
    top: 30%;
    left: 50%;
    transform: translateX(-50%) translateY(-50%);">
        &#x9875;&#x9762;&#x8DF3;&#x8F6C;&#x4E2D;...
    </div>
    <div id="app"></div>
    <script src="static/js/common.js?t=202409091529"></script>
    <script src="static/cdn/js/vue.min.js"></script>
    <script src="static/cdn/js/axios.min.js"></script>
    <script src="static/cdn/js/crypto-js.min.js"></script>
    <script src="static/js/collect_301.js?t=202409091529"></script>
</body>

</html>

Found 2024-11-01 by HttpPlugin