LeakIX - Host 18.239.18.105

Host 18.239.18.105

United States

AMAZON-02

Software information

AmazonS3

tcp/443

CloudFront

tcp/443 tcp/80

cloudflare

tcp/443

nginx nginx

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.239.18.105
Domain: f39czyvv4k.xyz
Port: 443
URL: https://f39czyvv4k.xyz

First seen 2024-10-04 13:25
Last seen 2024-10-08 17:32
Open for 4 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0904d808d7e02e9ac8f638f0164866dd3
```
Found 13 files trough .DS_Store spidering:

/.git
/.gitignore
/collect_301.html
/enter - 副本.html
/enter.html
/favicon.ico
/iframe.html
/index copy.html
/index.html
/QRcode - 副本.html
/QRcode.html
/README.md
/static
```
  Found on 2024-10-08 17:32
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.18.105
Domain: f39czyvv4k.xyz
Port: 443
URL: https://f39czyvv4k.xyz

First seen 2023-11-18 07:03
Last seen 2024-09-30 19:54
Open for 317 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652201fa2920
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://ngit.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-30 19:54
  
  240 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-08 22:05
  
  239 Bytes
Create report

Open service 18.239.18.105:443 · plazv8z5zyig.xyz

2026-01-25 19:03

HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Date: Sat, 24 Jan 2026 23:21:39 GMT
cf-cache-status: DYNAMIC
CF-RAY: 9c3344b18e8e78c3-FRA
Server: cloudflare
Last-Modified: Thu, 28 Aug 2025 06:42:25 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=9SUTh0wHEQ5oppRMmKPSvNm2rj1eV4fFiwtKJAi8g%2FfOV%2Bhl2JyfYKQuGiAw8igyTnjzYQ7bFWmEMk9OhggMCW%2Fd9l77%2BLZWD00YnA%3D%3D"}]}
Accept-Ranges: bytes
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 552fc57e69ec905c4246244771e7453a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: x0JFKZRLD9EFD4OjW1weH0t-ZnkO8dArZaTd3VeEjMarBShyFgejOg==
Age: 70903

Page title: P站视频

<!DOCTYPE html><html lang=zh-CN><head><meta charset=utf-8><meta http-equiv=X-UA-Compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1"><meta name=referrer content=no-referrer><meta name=theme-color content=#ffffff><link rel=icon href=favicon.ico><title>P站视频</title><script>var pathIndex = getCookie('pathIndex') || 0;
    var hadSetNext = false;

    function setCookie(name, value) {
      document.cookie = name + '=' + encodeURI(value);
    }
    function getCookie(name) {
      let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
      if (arr = document.cookie.match(reg)) {
        return decodeURI(arr[2]);
      } else {
        return null;
      }
    }
    function loadError() {
      if (hadSetNext) return;
      if (pathIndex >= pathList.length - 1) {
        if (pathList[pathIndex] == './') {
          return;
        }
        pathIndex = 0;
      } else {
        pathIndex++;
      }
      hadSetNext = true;
      setCookie('pathIndex', pathIndex);
      window.location.reload();
    };</script><link href="static/cdn/css/element-ui/index.css?v=1.0.1" rel=stylesheet><link href="static/cdn/css/element-ui/display.css?v=1.0.1" rel=stylesheet><link href="static/cdn/css/nprogress.css?v=1.0.1" rel=stylesheet><link href=static/20250828143701/css/vendor~f3a3ebe1.css rel=stylesheet><link href=static/20250828143701/css/styles.css rel=stylesheet><link href=static/20250828143701/css/app.css rel=stylesheet></head><body><div id=app></div><script src="static/cdn/js/axios.min.js?v=1.0.1"></script><script src="static/cdn/js/lodash.min.js?v=1.0.1"></script><script src="static/cdn/js/nprogress.js?v=1.0.1"></script><script src="static/cdn/js/hls.min.js?v=1.0.1"></script><script src="static/cdn/js/DPlayer.min.js?v=1.0.1"></script><script src="static/cdn/js/jsjiami.js?v=1.0.1"></script><script>window.onload = function () {
          setTimeout(() => {
            loadJS("https://www.googletagmanager.com/gtag/js?id=G-YN9976Y17E", true)
            window.dataLayer = window.dataLayer || [];
            function gtag() { dataLayer.push(arguments); }
            gtag('js', new Date());
            gtag('config', 'G-YN9976Y17E');
          }, 5000)
        }

        function loadJS(url, bol = false) {
          var script = document.createElement('script')
          script.setAttribute("src", url);
          if (bol) {
            script.setAttribute("async", "async");
          }
          var first = document.getElementsByTagName('script');
          var here = first[first.length - 1];
          here.parentNode.appendChild(script);
        }
        function loadCSS(url) {
          var link = document.createElement('link'),
            head = document.head || document.getElementsByTagName("head")[0];
          link.setAttribute("rel", "stylesheet");
          link.setAttribute("href", url);
          head.appendChild(link);
        }</script><script src=static/20250828143701/js/vendor~f269b12e.js></script><script src=static/20250828143701/js/vendor~df4692b5.js></script><script src=static/20250828143701/js/vendor~9161a349.js></script><script src=static/20250828143701/js/vendor~7159bfa5.js></script><script src=static/20250828143701/js/vendor~3a70cbed.js></script><script src=static/20250828143701/js/vendor~9d675abe.js></script><script src=static/20250828143701/js/vendor~6cb95173.js></script><script src=static/20250828143701/js/vendor~64d248ce.js></script><script src=static/20250828143701/js/vendor~cc10276c.js></script><script src=static/20250828143701/js/vendor~6ba02bd5.js></script><script src=static/20250828143701/js/vendor~bf0f8b8f.js></script><script src=static/20250828143701/js/vendor~691ceb8b.js></script><script src=static/20250828143701/js/vendor~7e5e8261.js></script><script src=static/20250828143701/js/vendor~92c00e46.js></script><script src=static/20250828143701/js/vendor~93acefaf.js></script><script src=static/20250828143701/js/vendor~5793d01e.js></script><script src=static/20250828143701/js/vendor~909464d4.js></script><scri

Found 2026-01-25 by HttpPlugin

Create report

Open service 18.239.18.105:80 · plazv8z5zyig.xyz

2026-01-25 19:03

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 25 Jan 2026 19:03:22 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://plazv8z5zyig.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 c2905f891f96a0ec9c7fab16916dbb46.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: 9TzEPYFRMKOm8dtyPnV8bWugotjvEi7XoK3ezS4REEf7nFnF6Mt2XQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-25 by HttpPlugin

Create report

Open service 18.239.18.105:443 · singnplaypiano.com

2026-01-21 18:03

HTTP/1.1 301 Redirecting
Server: CloudFront
Date: Wed, 21 Jan 2026 18:03:06 GMT
Content-Length: 0
Connection: close
Location: https://www.singnplaypiano.com/
X-Cache: FunctionGeneratedResponse from cloudfront
Via: 1.1 297dc74786919df7ba1867fc37f80bb6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: 8SMO1WFux8EBL4HAoHQTFnZZqaC8508T-VgupixmBY6chl7lBgIWnQ==

Found 2026-01-21 by HttpPlugin

Create report

Open service 18.239.18.105:80 · singnplaypiano.com

2026-01-21 18:03

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 21 Jan 2026 18:03:05 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://singnplaypiano.com/
X-Cache: Redirect from cloudfront
Via: 1.1 9dba3ae645587c3cf23f9d232c9cb4e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: m-I5Y19FSCrHm249MZtl-lid6VozgieANUKbhCTycGMga2uDElnztg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-21 by HttpPlugin