CloudFront
tcp/80
openresty
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652220a42ff0
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true ignorecase = true precomposeunicode = true [remote "origin"] url = git@gitlab.playnexx.net:MiddlePlatform/OfficialWebsite.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "playdayy"] remote = origin merge = refs/heads/playdayy
Severity: medium
Fingerprint: 2580fa947e78dd08e645819d1cc87ef2172f6dd06e0f28aa87e5a8fa7718fe76
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 9586 Connection: close Server: AliyunOSS Date: Mon, 08 May 2023 04:51:46 GMT x-oss-request-id: 64587FE2C677077C4FB38A24 Accept-Ranges: bytes ETag: "913EFD4DD09A96AE5B0E45B3BE6849AC" Last-Modified: Thu, 08 Sep 2022 07:20:37 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 6267745847240494569 x-oss-storage-class: Standard Content-MD5: kT79TdCalq5bDkWzvmhJrA== x-oss-server-time: 1 Vary: Accept-Encoding,Accept-Encoding,Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a6f3857eba4e91de5ecf52859c1f6856.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DUS51-P4 X-Amz-Cf-Id: reyH3TmLVBhYuaCpLW7OCh1kjg-r8NWXE5B3znXb7knT1I9B4IMNFw== Age: 1 Vary: Origin Page title: Playdayy[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true ignorecase = true precomposeunicode = true [remote "origin"] url = git@gitlab.playnexx.net:MiddlePlatform/OfficialWebsite.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "playdayy"] remote = origin merge = refs/heads/playdayy
Severity: medium
Fingerprint: 2580fa947e78dd08e645819d1cc87ef2172f6dd06e0f28aa87e5a8fa533b7fac
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 9586 Connection: close Server: AliyunOSS Date: Mon, 08 May 2023 04:51:46 GMT x-oss-request-id: 64587FE2C677077C4FB38A24 Accept-Ranges: bytes ETag: "913EFD4DD09A96AE5B0E45B3BE6849AC" Last-Modified: Thu, 08 Sep 2022 07:20:37 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 6267745847240494569 x-oss-storage-class: Standard Content-MD5: kT79TdCalq5bDkWzvmhJrA== x-oss-server-time: 1 Vary: Accept-Encoding,Accept-Encoding,Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6bc756891d4e5936d9d654c8c717a704.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DUS51-P4 X-Amz-Cf-Id: L3KWtXCxQkKURTcSo9qWTIjHT8k0ZVTS3kX20Yc_WCrP_URFEY7wkg== Age: 3 Vary: Origin Page title: Playdayy[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true ignorecase = true precomposeunicode = true [remote "origin"] url = git@gitlab.playnexx.net:MiddlePlatform/OfficialWebsite.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "playdayy"] remote = origin merge = refs/heads/playdayy
Open service 18.154.63.46:443 · winidn25.com
2026-01-06 14:35
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Tue, 06 Jan 2026 14:35:37 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 c56940b696de15630f45de7e4da7bb32.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUS51-P4
X-Amz-Cf-Id: ZRTBoAerzMgZzaiyGuPlvlr5CNNcJjqDLAfWMK0e1Y_lYKFZGNmFqg==
Page title: Bergabunglah dalam Winidnbet!
<!DOCTYPE html>
<html>
<head>
<meta property="og:url" content="/" />
<meta property="og:type" content="website" />
<meta property="og:image:width" content="600" />
<meta property="og:image:height" content="314" />
<meta property="og:title" content="Bergabunglah dengan anggota Winidnbet!" />
<meta property="og:description" content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.<br>Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
<meta property="og:image" content="./share102.jpg" />
<meta property="fb:app_id" content="275231247713364" />
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
<meta content="telephone=no" name="format-detection" />
<meta property="url" content="/">
<meta property="type" content="website">
<meta property="title" content="Bergabunglah dalam Winidnbet!">
<meta property="description" content="Selamat datang di Winidnbet! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Winidnbet hari ini!">
<meta charset="UTF-8">
<meta name="viewport" content="width=720, user-scalable=no">
<title>Bergabunglah dalam Winidnbet!</title>
<link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
<link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
<script>
// Initialize the agent at application startup.
const fpPromise = import('/src/js/fingerprintjs.js')
.then(FingerprintJS => FingerprintJS.load())
// Get the visitor identifier when you need it.
fpPromise
.then(fp => fp.get())
.then(result => {
// This is the visitor identifier:
const visitorId = result.visitorId
console.log(visitorId);
var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
var xhr = new XMLHttpRequest();
xhr.onreadystatechange = function() {
if (xhr.readyState == 4) {
if (xhr.status == 200) {
var data = xhr.responseText;
console.log(data);
if(data.indexOf('http') == 0) {
// window.location.href = data;
// document.getElementById("playnow").href=data;
document.getElementById("down_apk_2").href=data;
//document.getElementById("down_apk_2").target="_blank"
//document.getElementById("playnow").target="_blank"
document.getElementById("down_apk_2").setAttribute("target","_blank")
//document.getElementById("playnow").setAttribute("target","_blank")
document.getElementById("wait_download").style.display="none"
document.getElementById("can_download").style.display="inline"
} else {
alert('Gagal mendapatkan tautan dari server')
}
} else {
alert('Gagal mendapatkan tautan')
}
}
}
xhr.open
Open service 18.154.63.46:80 · winidn25.com
2026-01-06 14:35
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Tue, 06 Jan 2026 14:35:36 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://winidn25.com/ X-Cache: Redirect from cloudfront Via: 1.1 a519b78387f012b2d3b1ed2288111abe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DUS51-P4 X-Amz-Cf-Id: f1vja1Am1jrdArhUjB98125sQZz19VB1ww7mlqhrry_xo5TuJQk0PA== Vary: Origin Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 18.154.63.46:80 · winidn30.com
2026-01-06 13:14
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Tue, 06 Jan 2026 13:14:39 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://winidn30.com/ X-Cache: Redirect from cloudfront Via: 1.1 0f614fbd956590bdb4b3def9e1395ca6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DUS51-P4 X-Amz-Cf-Id: MsONcC3TzE2U8gjd1JBVdh30jR-ncvHOv4SS1qhvbntxFZ_LyooFGQ== Vary: Origin Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 18.154.63.46:443 · winidn30.com
2026-01-06 13:14
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Tue, 06 Jan 2026 13:14:36 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 ea3d06e94081b5e61e2cf220951142d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUS51-P4
X-Amz-Cf-Id: SKJM2j5Mzib6xIuInumKIg4CRVcUwhuxkP2i1_jZfI_NRJw2iOj-jA==
Page title: Bergabunglah dalam Winidnbet!
<!DOCTYPE html>
<html>
<head>
<meta property="og:url" content="/" />
<meta property="og:type" content="website" />
<meta property="og:image:width" content="600" />
<meta property="og:image:height" content="314" />
<meta property="og:title" content="Bergabunglah dengan anggota Winidnbet!" />
<meta property="og:description" content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.<br>Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
<meta property="og:image" content="./share102.jpg" />
<meta property="fb:app_id" content="275231247713364" />
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
<meta content="telephone=no" name="format-detection" />
<meta property="url" content="/">
<meta property="type" content="website">
<meta property="title" content="Bergabunglah dalam Winidnbet!">
<meta property="description" content="Selamat datang di Winidnbet! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Winidnbet hari ini!">
<meta charset="UTF-8">
<meta name="viewport" content="width=720, user-scalable=no">
<title>Bergabunglah dalam Winidnbet!</title>
<link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
<link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
<script>
// Initialize the agent at application startup.
const fpPromise = import('/src/js/fingerprintjs.js')
.then(FingerprintJS => FingerprintJS.load())
// Get the visitor identifier when you need it.
fpPromise
.then(fp => fp.get())
.then(result => {
// This is the visitor identifier:
const visitorId = result.visitorId
console.log(visitorId);
var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
var xhr = new XMLHttpRequest();
xhr.onreadystatechange = function() {
if (xhr.readyState == 4) {
if (xhr.status == 200) {
var data = xhr.responseText;
console.log(data);
if(data.indexOf('http') == 0) {
// window.location.href = data;
// document.getElementById("playnow").href=data;
document.getElementById("down_apk_2").href=data;
//document.getElementById("down_apk_2").target="_blank"
//document.getElementById("playnow").target="_blank"
document.getElementById("down_apk_2").setAttribute("target","_blank")
//document.getElementById("playnow").setAttribute("target","_blank")
document.getElementById("wait_download").style.display="none"
document.getElementById("can_download").style.display="inline"
} else {
alert('Gagal mendapatkan tautan dari server')
}
} else {
alert('Gagal mendapatkan tautan')
}
}
}
xhr.open
Open service 18.154.63.46:80 · floot.com
2026-01-04 11:17
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sun, 04 Jan 2026 11:17:34 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://floot.com/ X-Cache: Redirect from cloudfront Via: 1.1 e854bbca657208a759bb2d8d135f9d78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DUS51-P4 X-Amz-Cf-Id: Mxx3wVOhJ4GOGfwIFGVVCYLhewg7pb571s45zsOEI6KuvdOlAtH23g== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 18.154.63.46:443 · floot.com
2026-01-04 11:17
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Date: Sun, 04 Jan 2026 11:17:34 GMT Link: </images/yc_logo.svg>; rel=preload; as="image", <https://api.producthunt.com/widgets/embed-image/v1/top-post-badge.svg?post_id=999324&theme=light&period=daily&t=1754694669786>; rel=preload; as="image", </landing/chatbuild-poster.png>; rel=preload; as="image", </landing/drawtochange-poster.png>; rel=preload; as="image", </landing/investigate-poster.png>; rel=preload; as="image", <https://assets.floot.app/9f7aa15f-407b-42a1-a912-67490a670b75/d421bd2d-a5df-4bc7-b7f3-834d3df07f30.png>; rel=preload; as="image" X-Amzn-Trace-Id: Root=1-695a4c4e-281e22a93727fa865bb0d893;Parent=5452b5e98a0f8b2a;Sampled=0;Lineage=1:be00906c:0 x-amzn-RequestId: d69b658f-889a-42c1-a264-7e0a0349bf53 Content-Encoding: identity x-frame-options: SAMEORIGIN Set-Cookie: landing_page_jan_26=newText; Path=/; Expires=Mon, 04 Jan 2027 11:17:34 GMT; Max-Age=31536000 x-opennext: 1 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate x-powered-by: Next.js X-Cache: Miss from cloudfront Via: 1.1 47c4e8338b148239463956ff49af0736.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DUS51-P4 X-Amz-Cf-Id: A6jAf0R5VcgFdGw-Gd2yerezuqbW_uAIbAX-xML1Zt7-b2afp6Tv2Q==