LeakIX - Host 18.238.243.89

Host 18.238.243.89

United States

AMAZON-02

Software information

AmazonS3

tcp/443

Apache Apache

tcp/443

CloudFront

tcp/443 tcp/80

Server

tcp/443

anywhere

tcp/443 tcp/80

nginx nginx

tcp/443

nginx nginx 1.25.5

tcp/443

openresty

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.238.243.89
Domain: 8a1hjv1sz98i.xyz
Port: 443
URL: https://8a1hjv1sz98i.xyz

First seen 2024-10-04 13:25
Last seen 2024-10-06 15:25
Open for 2 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0904d808d7e02e9ac8f638f0164866dd3
```
Found 13 files trough .DS_Store spidering:

/.git
/.gitignore
/collect_301.html
/enter - 副本.html
/enter.html
/favicon.ico
/iframe.html
/index copy.html
/index.html
/QRcode - 副本.html
/QRcode.html
/README.md
/static
```
  Found on 2024-10-06 15:25
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.238.243.89
Domain: 8a1hjv1sz98i.xyz
Port: 443
URL: https://8a1hjv1sz98i.xyz

First seen 2024-06-01 07:01
Last seen 2024-09-30 18:20
Open for 121 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652201fa2920
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://ngit.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-30 18:20
  
  240 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-08 03:01
  
  239 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.238.243.89
Domain: 2rgsyxngkjg.xyz
Port: 443
URL: https://2rgsyxngkjg.xyz

First seen 2023-10-08 12:05
Last seen 2024-02-03 19:49
Open for 118 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b011144f
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/pzhan/pzhan-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-03 19:49
  
  220 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.238.243.89
Domain: sd6ct1lmqe3.xyz
Port: 443
URL: https://sd6ct1lmqe3.xyz

First seen 2023-10-08 12:05
Last seen 2024-02-03 11:12
Open for 117 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b011144f
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/pzhan/pzhan-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-03 11:12
  
  220 Bytes
Create report

Open service 18.238.243.89:443 · consorciopalmeiras.com.br

2026-01-22 18:02

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 69451
Connection: close
Last-Modified: Fri, 05 Dec 2025 13:12:35 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: anywhere
Date: Thu, 22 Jan 2026 18:02:45 GMT
ETag: "552acf93d78e5e257a0feaca62eef5b1"
X-Cache: Error from cloudfront
Via: 1.1 5fee70391560223c206b9f4887737d74.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
X-Amz-Cf-Id: gwBMnfskGHsMC9zB7Koog2Xb0DGuLoe1OT8QAd4lB5kOnbMBOoTmWQ==
Age: 75422
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: frame-ancestors 'none'
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000

Page title: 404: This page could not be found.Consórcio Palmeiras

<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/_next/static/media/47cbc4e2adbc5db9-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="stylesheet" href="/_next/static/css/bcf5bda908bd9bb6.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/e4a4cab61dbdacbb.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-d01a54036e121d32.js"/><script src="/_next/static/chunks/91dd81b6-5121f097d2ee9e83.js" async=""></script><script src="/_next/static/chunks/413-66424e072584ef7f.js" async=""></script><script src="/_next/static/chunks/main-app-3479058ed7af5a11.js" async=""></script><script src="/_next/static/chunks/da31e3a9-a729a949e3043251.js" async=""></script><script src="/_next/static/chunks/44c83eb9-0d7a91ebc428bd19.js" async=""></script><script src="/_next/static/chunks/881-bdd6cd43050e182c.js" async=""></script><script src="/_next/static/chunks/760-96fc7715b74adc80.js" async=""></script><script src="/_next/static/chunks/app/layout-8c8725573a7a4bfb.js" async=""></script><link rel="preload" href="//js.hs-scripts.com/8573517.js" as="script"/><title>404: This page could not be found.</title><title>Consórcio Palmeiras</title><meta name="description" content="Consórcio Palmeiras: conquistar faz parte do seu caminho."/><meta name="next-size-adjust"/><script src="/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js" noModule=""></script><style id="antd-cssinjs" data-rc-order="prepend" data-rc-priority="-1000">.css-var-R2ja{--ant-blue:#1677ff;--ant-purple:#722ED1;--ant-cyan:#13C2C2;--ant-green:#52C41A;--ant-magenta:#EB2F96;--ant-pink:#eb2f96;--ant-red:#F5222D;--ant-orange:#FA8C16;--ant-yellow:#FADB14;--ant-volcano:#FA541C;--ant-geekblue:#2F54EB;--ant-gold:#FAAD14;--ant-lime:#A0D911;--ant-color-primary:#076134;--ant-color-success:#52c41a;--ant-color-warning:#faad14;--ant-color-error:#ff4d4f;--ant-color-info:#1677ff;--ant-color-link:#b59348;--ant-color-text-base:#000;--ant-color-bg-base:#fff;--ant-font-family:-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial,
'Noto Sans', sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol',
'Noto Color Emoji';--ant-font-family-code:'SFMono-Regular', Consolas, 'Liberation Mono', Menlo, Courier, monospace;--ant-font-size:14px;--ant-line-width:1px;--ant-line-type:solid;--ant-motion-ease-out-circ:cubic-bezier(0.08, 0.82, 0.17, 1);--ant-motion-ease-in-out-circ:cubic-bezier(0.78, 0.14, 0.15, 0.86);--ant-motion-ease-out:cubic-bezier(0.215, 0.61, 0.355, 1);--ant-motion-ease-in-out:cubic-bezier(0.645, 0.045, 0.355, 1);--ant-motion-ease-out-back:cubic-bezier(0.12, 0.4, 0.29, 1.46);--ant-motion-ease-in-back:cubic-bezier(0.71, -0.46, 0.88, 0.6);--ant-motion-ease-in-quint:cubic-bezier(0.755, 0.05, 0.855, 0.06);--ant-motion-ease-out-quint:cubic-bezier(0.23, 1, 0.32, 1);--ant-border-radius:2px;--ant-size-popup-arrow:16px;--ant-control-height:32px;--ant-z-index-base:0;--ant-z-index-popup-base:1000;--ant-opacity-image:1px;--ant-color-border:#076134;--ant-color-text:#b59348;--ant-color-bg-container:#FFFFFF;--ant-color-link-hover:#076134;--ant-color-text-heading:#FFFFFF;--ant-padding-lg:32px;--ant-control-height-lg:48px;--ant-blue-1:#e6f4ff;--ant-blue-2:#bae0ff;--ant-blue-3:#91caff;--ant-blue-4:#69b1ff;--ant-blue-5:#4096ff;--ant-blue-6:#1677ff;--ant-blue-7:#0958d9;--ant-blue-8:#003eb3;--ant-blue-9:#002c8c;--ant-blue-10:#001d66;--ant-purple-1:#f9f0ff;--ant-purple-2:#efdbff;--ant-purple-3:#d3adf7;--ant-purple-4:#b37feb;--ant-purple-5:#9254de;--ant-purple-6:#722ed1;--ant-purple-7:#531dab;--ant-purple-8:#391085;--ant-purple-9:#22075e;--ant-purple-10:#120338;--ant-cyan-1:#e6fffb;--ant-cyan-2:#b5f5ec;--ant-cyan-3:#87e8de;--ant-cyan-4:#5cdbd3;--ant-cyan-5:#36cfc9;--ant-cyan-6:#13c2c2;--ant-cyan-7:#08979c;--ant-cyan-8:#006d75;--ant-cyan-9:#00474f;--ant-cyan-10:#002329;--ant-green-1:#f6ffed;--ant-green-2:#d9f7be;--ant-green-3:#b7eb8f;--ant-green-4:#95de64;--ant-green-5:#73d13d;--ant-

Found 2026-01-22 by HttpPlugin

Create report

Open service 18.238.243.89:80 · consorciopalmeiras.com.br

2026-01-22 18:02

HTTP/1.1 301 Moved Permanently
Date: Thu, 22 Jan 2026 18:02:46 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://consorciopalmeiras.com.br/
X-Cache: Redirect from cloudfront
Via: 1.1 7b082441eaf35142a6f7785a74fb7a50.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
X-Amz-Cf-Id: mP6FItw7qVtysXu4os8eW0eHf5GfO8MoMQIIdZoM4l-kTNSYSKsiYw==
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: frame-ancestors 'none'
X-Content-Type-Options: nosniff
server: anywhere

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-22 by HttpPlugin

Create report

Open service 18.238.243.89:443 · medicalnote-qa.jp

2026-01-12 01:34

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Date: Mon, 12 Jan 2026 01:34:35 GMT
X-Iinfo: 13-254559325-254559326 NNNN CT(238 238 0) RT(1768181674438 2) q(0 0 5 0) r(8 11) U24
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
ETag: W/"6b9e2b6700f31241fee5a17bc1f1ba01"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: user_tracking_id=4a7af503-2b42-4756-bf8e-19d80b932296; path=/; expires=Fri, 12 Jan 2046 01:34:35 GMT; secure
Set-Cookie: landing_referer=; path=/; expires=Fri, 12 Jan 2046 01:34:35 GMT; secure
Set-Cookie: _session_id=21754ad224b8658a39dd7a5a1842f37d; path=/; secure; HttpOnly
Set-Cookie: visid_incap_2219613=Ggi+VyW9RCqyCP7DnQG0ralPZGkAAAAAQUIPAAAAAACpqvARhZsMl3F7BOzrw65l; expires=Mon, 11 Jan 2027 22:29:41 GMT; HttpOnly; path=/; Domain=.medicalnote-qa.jp
Set-Cookie: nlbi_2219613=n+0rBc3732Q356i1p/FoCAAAAADisuyWB0zU5v7+RHV4VfAA; HttpOnly; path=/; Domain=.medicalnote-qa.jp
Set-Cookie: incap_ses_281_2219613=3V0mRw333Veg6Yx1flDmA6pPZGkAAAAABmHgOYSGjwN71Tl5Vd4Iuw==; path=/; Domain=.medicalnote-qa.jp
X-Request-Id: 0c0d7847-052d-4510-8beb-93be685471a2
X-Runtime: 0.080786
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-CDN: Imperva
X-Cache: Miss from cloudfront
Via: 1.1 056d6ac2ca676a55ced60e0ac6451d22.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
X-Amz-Cf-Id: 2qjdXbj9_axtsNufIg_UqHadOLpHuXiBJTnL_HqkaSLq70oru9ZzHw==

Found 2026-01-12 by HttpPlugin

Create report

Open service 18.238.243.89:80 · medicalnote-qa.jp

2026-01-12 01:34

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 12 Jan 2026 01:34:33 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://medicalnote-qa.jp/
X-Cache: Redirect from cloudfront
Via: 1.1 056d6ac2ca676a55ced60e0ac6451d22.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P1
X-Amz-Cf-Id: zKB2Mj7ZPUPCrWoGQ9YxRL3mVRlpHikEaqvcaVfZAJEutQ7u772B4A==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-12 by HttpPlugin