LeakIX - Host 18.238.243.24

Host 18.238.243.24

United States

AMAZON-02

Ubuntu

Software information

AmazonS3

tcp/443

Apache Apache

tcp/443

Apache Apache 2.4.41

tcp/443

CloudFront

tcp/443 tcp/80

OpenSSL OpenSSL 1.1.1g

tcp/443

nginx nginx

tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.238.243.24
Domain: vbtj4yul4uui.xyz
Port: 443
URL: https://vbtj4yul4uui.xyz

First seen 2024-10-04 10:01
Last seen 2024-10-08 07:28
Open for 3 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0904d808d7e02e9ac8f638f0164866dd3
```
Found 13 files trough .DS_Store spidering:

/.git
/.gitignore
/collect_301.html
/enter - 副本.html
/enter.html
/favicon.ico
/iframe.html
/index copy.html
/index.html
/QRcode - 副本.html
/QRcode.html
/README.md
/static
```
  Found on 2024-10-08 07:28
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.238.243.24
Domain: vbtj4yul4uui.xyz
Port: 443
URL: https://vbtj4yul4uui.xyz

First seen 2024-05-06 05:57
Last seen 2024-09-30 14:18
Open for 147 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652201fa2920
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://ngit.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-30 14:18
  
  240 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-08 15:43
  
  239 Bytes
Create report

Open service 18.238.243.24:80 · gosuplay.io

2026-01-11 20:31

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 11 Jan 2026 20:31:55 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://gosuplay.io/
X-Cache: Redirect from cloudfront
Via: 1.1 650363fa7465273dd14fde086a851a86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: jy3yW6ihztF9h3WB-6Yro3f_I4rDaWi1kUWyBwZVQKThqDnUFsJVEQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.238.243.24:443 · gosuplay.io

2026-01-11 20:31

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 108275
Connection: close
Date: Tue, 06 Jan 2026 22:23:46 GMT
ETag: "wtayjcmxbc2bjh"
x-nextjs-cache: HIT
x-nextjs-prerender: 1
x-nextjs-stale-time: 300
X-Powered-By: Next.js
Cache-Control: s-maxage=5, stale-while-revalidate=31535995
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 e6ef76f348359a0bc64c007ab009ebd2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: tu2C9QUDg_FrWUSRLO9zykbVqT4UrCnrf8yJnp9QvOgihBnLwkht5w==
Age: 425289

Page title: GosuPLAY: Online Casino & Sports Betting - Play with Crypto

<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, minimum-scale=1, user-scalable=no"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/_next/static/media/17ca7b5076343a61-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/421533e6800fc691-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/6063e64bfca035f3-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/904be59b21bd51cb-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/92daa4d0098aa288-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/bd9b9909c3a641ff-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/d3ef82aa6298d1b9-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/d7345f90f5c9e322-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/e4af272ccee01ff0-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/e807dee2426166ad-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/f15837ddf307a9c9-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" as="image" href="/gosu/splash-logo.webp"/><link rel="stylesheet" href="/_next/static/css/8c65378c4aa6062a.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/2a9030ebde49c0dc.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/f7aa08928fde91af.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/34306115e73a42ad.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/83730aacf2916d9e.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-fff3765f43850e95.js"/><script src="/_next/static/chunks/4bd1b696-100b9d70ed4e49c1.js" async=""></script><script src="/_next/static/chunks/1255-8befde0980f5cba9.js" async=""></script><script src="/_next/static/chunks/main-app-234525b5e3ddebfb.js" async=""></script><script src="/_next/static/chunks/aaea2bcf-5db6c6b3882c7585.js" async=""></script><script src="/_next/static/chunks/ca377847-f779044b431048e2.js" async=""></script><script src="/_next/static/chunks/b56196ea-d77a06f93eb6a7b2.js" async=""></script><script src="/_next/static/chunks/d0f5a89a-af7b72e16913fa3e.js" async=""></script><script src="/_next/static/chunks/e8686b1f-63f88af9c275f1b9.js" async=""></script><script src="/_next/static/chunks/9129-88813dfc549e9b33.js" async=""></script><script src="/_next/static/chunks/7004-8fb9ed72390c4834.js" async=""></script><script src="/_next/static/chunks/9025-d75ab65fe79525cd.js" async=""></script><script src="/_next/static/chunks/9128-5355aef8113e0afb.js" async=""></script><script src="/_next/static/chunks/7598-803cfc622262b4cf.js" async=""></script><script src="/_next/static/chunks/4257-28da7763486167dd.js" async=""></script><script src="/_next/static/chunks/9968-dba2abae0d601d43.js" async=""></script><script src="/_next/static/chunks/1039-6f9473c29c316bf4.js" async=""></script><script src="/_next/static/chunks/9241-736f37d7b3ad6843.js" async=""></script><script src="/_next/static/chunks/app/layout-cc279d111ca781b3.js" async=""></script><script src="/_next/static/chunks/app/error-6f7cb0a6ea8df56a.js" async=""></script><script src="/_next/static/chunks/app/not-found-dabd48a8c5dcce06.js" async=""></script><script src="/_next/static/chunks/app/global-error-e436eb954ff54c82.js" async=""></script><script src="/_next/static/chunks/app/page-37639ab761b8a608.js" async=""></script><link rel="preload" href="/scripts/btisport.js" as="script"/><link rel="preload" href="https://www.googletagmanager.com/gtm.js?id=GT

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.238.243.24:80 · www.jwbaseball.co.kr

2026-01-10 10:58

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Date: Sat, 10 Jan 2026 10:58:54 GMT
Pragma: no-cache
Cache-Control: no-cache, must-revalidate
Server: nginx
Vary: Accept-Encoding
P3P: CP="NOI CURa ADMa DEVa TAIa OUR DELa BUS IND PHY ONL UNI COM NAV INT DEM PRE"
Set-Cookie: IMWEBVSSID=5p5e4piclatokojk8opad8o4g04pq3t7e16klp2q36p2s25upm3v2i5rjcpi10oejoiajj02daegjggfj6r2rvhkk2hhen6qb3q6461; path=/; domain=jwbaseball.co.kr; HttpOnly
Set-Cookie: al=KR; expires=Fri, 06-Nov-2026 10:58:54 GMT; Max-Age=25920000; path=/; domain=jwbaseball.co.kr; HttpOnly
Set-Cookie: _imweb_login_state=N; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
X-Cache: Miss from cloudfront
Via: 1.1 f5a3dd79e879ec195790fd94291f3198.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
X-Amz-Cf-Id: A4G4RulimP2dP03no45Nj6YeMV8DllrSxogveN-3ClB0j33JU_Hg1A==

Found 2026-01-10 by HttpPlugin

Create report

Open service 18.238.243.24:443 · status.glia.com

2026-01-10 07:40

HTTP/1.1 405 Not Allowed
Server: CloudFront
Date: Sat, 10 Jan 2026 07:40:44 GMT
Content-Length: 2515
Connection: close
x-amzn-waf-action: captcha
Cache-Control: no-store, max-age=0
Content-Type: text/html; charset=UTF-8
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 86400
Access-Control-Allow-Methods: OPTIONS,GET,POST
Access-Control-Expose-Headers: x-amzn-waf-action
X-Cache: Error from cloudfront
Via: 1.1 b10069b378f22e10f0382c21d0a9578e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
X-Amz-Cf-Id: 3d9uosjKv4wtKDKve23UGpErnsIhi07qgkQMUc_F7By8n3Pntzcwgg==

Page title: Human Verification

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>Human Verification</title>
    <style>
        body {
            font-family: "Arial";
        }
    </style>
    <script type="text/javascript">
    window.awsWafCookieDomainList = [];
    window.gokuProps = {
"key":"AQIDAHjcYu/GjX+QlghicBgQ/7bFaQZ+m5FKCMDnO+vTbNg96AFJDgH7Hva0PDWzDG+o+lxtAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMtICMwjzAEGqc06Z9AgEQgDv8HfE614lzKs0bgPDL5sQqSLXwmKiI8bI6UrZbgYkrNzYjpk/WburdFTXOKUcQtMzhflG3kQne4iP2Lg==",
          "iv":"EkQzKgGTSAAAD3Xi",
          "context":"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"
};
    </script>
    <script src="https://f48903af0885.d03db55b.eu-west-1.token.awswaf.com/f48903af0885/06bd3ab5be3e/5f054ab15711/challenge.js"></script>
    <script src="https://f48903af0885.d03db55b.eu-west-1.captcha.awswaf.com/f48903af0885/06bd3ab5be3e/5f054ab15711/captcha.js"></script>
</head>
<body>
    <div id="captcha-container"></div>
    <script type="text/javascript">
        AwsWafIntegration.saveReferrer();
        window.addEventListener("load", function() {
          const container = document.querySelector("#captcha-container");
          CaptchaScript.renderCaptcha(container, async (voucher) => {
              await ChallengeScript.submitCaptcha(voucher);
              window.location.reload(true);
          }
      );
    });
    </script>
    <noscript>
        <h1>JavaScript is disabled</h1>
        In order to continue, you need to verify that you're not a robot by solving a CAPTCHA puzzle.
         The CAPTCHA puzzle requires JavaScript. Enable JavaScript and then reload the page.
    </noscript>
</body>
</html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 18.238.243.24:443 · www.pitcherandpianolondoncornhill.co.uk

2026-01-10 04:31

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Sat, 10 Jan 2026 04:31:20 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 1e22254f0abea6547aaa07a03d921130.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
X-Amz-Cf-Id: mVfZYpllXhdjPeEOoaTSpS5wKu6yr1PO2h0N1gPACaV5aSWeObJpow==
X-XSS-Protection: 1
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-Powered-By: Propeller Headless

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: mVfZYpllXhdjPeEOoaTSpS5wKu6yr1PO2h0N1gPACaV5aSWeObJpow==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-10 by HttpPlugin

Create report

Open service 18.238.243.24:443 · www.techcopilotapp.com

2026-01-10 03:38

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 459
Connection: close
Date: Sun, 04 Jan 2026 05:07:33 GMT
Cache-Control: public, max-age=0, s-maxage=31536000
Server: AmazonS3
Accept-Ranges: bytes
ETag: "415d1a6d29218cedbbfb826ed75ac97f"
Last-Modified: Tue, 04 Nov 2025 12:30:16 GMT
X-Cache: Hit from cloudfront
Via: 1.1 4c691f43539bb56ddcaef755730a6e86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: AhRxEv3sCpI3BUW2EhfEVY8TKgFiYAp67xNKWgNzQjYgkeYY6gtTiQ==
Age: 513080

Page title: Tech Copilot

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" type="image/svg+xml" href="/vite.svg" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Tech Copilot</title>
    <script type="module" crossorigin src="/assets/index-BFfIqXtn.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-BYSciHyH.css">
  </head>
  <body>
    <div id="root"></div>
  </body>
</html>

Found 2026-01-10 by HttpPlugin