LeakIX - Host 18.239.18.3

Host 18.239.18.3

United States

AMAZON-02

Software information

AmazonS3

tcp/443

CloudFront

tcp/443 tcp/80

nginx nginx

tcp/443

openresty 1.17.8.2

tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.239.18.3
Domain: rummy91.in
Port: 443
URL: https://rummy91.in

First seen 2024-09-05 12:04
Last seen 2024-11-10 20:15
Open for 66 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d83d508c476936112bd453896bab278158
```
Found 8 files trough .DS_Store spidering:

/about-us
/files
/img
/img/logo
/img/testimonials
/img/top-games
/privacy-policy
/terms-condition
```
  Found on 2024-11-10 20:15
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.18.3
Domain: 3jz9th48lk.xyz
Port: 443
URL: https://3jz9th48lk.xyz

First seen 2024-07-07 12:48
Last seen 2024-09-30 13:01
Open for 85 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e4a6e4dd
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://ngit.2jsncsk2dxks.xyz/taozi/ios_down.git
```
  Found on 2024-09-30 13:01
  
  165 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65221b9b3a71
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/taozi/ios_down.git
```
  Found on 2024-08-24 19:55
  
  164 Bytes
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.32.27.21
Domain: bookshare.ie
Port: 443
URL: https://bookshare.ie

First seen 2023-10-11 04:36
Last seen 2024-06-30 11:13
Open for 263 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522736e9b95

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:Stryve-Solutions/bookshare.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-06-30 11:13

270 Bytes

Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbbfd8d489d

[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = ssh://codeserver.dev.8695ac6d-3cf6-4b45-a4e6-45c1a8020391@codeserver.dev.8695ac6d-3cf6-4b45-a4e6-45c1a8020391.drush.in:2222/~/repository.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[lfs]
	repositoryformatversion = 0

Found on 2024-02-01 23:18

438 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.18.3
Domain: 3yc8t7pmwgm.xyz
Port: 443
URL: https://3yc8t7pmwgm.xyz

First seen 2023-10-08 13:02
Last seen 2024-02-13 11:27
Open for 127 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-13 11:27
  
  239 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.18.3
Domain: vhue982a91o.xyz
Port: 443
URL: https://vhue982a91o.xyz

First seen 2023-10-08 13:39
Last seen 2024-02-03 13:51
Open for 118 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-03 13:51
  
  239 Bytes
Create report

Open service 18.239.18.3:80 · kingfunmoi.com

2026-01-11 20:41

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 11 Jan 2026 20:41:08 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://kingfunmoi.com/
X-Cache: Redirect from cloudfront
Via: 1.1 02aeb7f16c6c229502db31b43fb88506.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: a1viJ_6q7_tYvl5VrdpJfK3N4I9nfVxB04BbdfbEtKuFEGLshHacfw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.239.18.3:443 · kingfunmoi.com

2026-01-11 20:41

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Sun, 11 Jan 2026 20:41:08 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 428178e04c8c5f5460c3935b1e7203be.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: pZ3SqZDxvYyvPrhoNrvHam1TdaqowNh2beSKoun9tZaryXxoXskcrQ==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: pZ3SqZDxvYyvPrhoNrvHam1TdaqowNh2beSKoun9tZaryXxoXskcrQ==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.239.18.3:80 · mir7sa.com

2026-01-11 20:39

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 11 Jan 2026 20:39:22 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://mir7sa.com/
X-Cache: Redirect from cloudfront
Via: 1.1 9c7ba0aaf8652834e3f6b51b901da726.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: StXbUe13kC9yTjfJWa6JzLOI39KX2Hyz5lZ99h8DLQMZgQGOsX_UtQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.239.18.3:443 · mir7sa.com

2026-01-11 20:39

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Sun, 11 Jan 2026 20:39:22 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 65c7ccdbbbb8463f3d45d2d76098350e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: 9RBTJosRgC61NIBO7MXoqHL0icVtF2GN1_GNTRtdtpO6I9tvMd4klg==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: 9RBTJosRgC61NIBO7MXoqHL0icVtF2GN1_GNTRtdtpO6I9tvMd4klg==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.239.18.3:443 · www.esrafalnou.com

2026-01-10 17:39

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 42805
Connection: close
Date: Sat, 10 Jan 2026 17:39:22 GMT
Cache-Control: public, max-age=600
Expires: 1753268532173
Last-Modified: Wed, 23 Jul 2025 10:52:13 GMT
ETag: "796ad073f62923367e8bfc5f0c04f67e"
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 36a7c1e18cbe5ff8281d77427bf1c0e6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: F-y2YiXdI9luZEpSCo65mYFH_G1_KHVBls-9Og3q745MDiz6ppjUsw==
Age: 2

Page title: Home | Agroturisme Es Rafal Nou

<!doctype html><!--[if lt IE 7 ]><html lang="en" class="no-js ie6"><![endif]--><!--[if IE 7 ]><html lang="en" class="no-js ie7"><![endif]--><!--[if IE 8 ]><html lang="en" class="no-js ie8"><![endif]--><!--[if IE 9 ]><html lang="en" class="no-js ie9"><![endif]--><!--[if (gt IE 9)|!(IE)]><!--><html lang="en" class="no-js"><!--<![endif]--><head prefix="og: http://ogp.me/ns#"><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=5"><link rel="icon" type="image/x-icon" href="//webbox-assets.siteminder.com/assets/images/favicon-home.ico"><title>Home | Agroturisme Es Rafal Nou</title><link rel="canonical" href="https://www.esrafalnou.com"><link rel="alternate" hreflang="ca" href="https://www.esrafalnou.com/ca/index.html"><link rel="alternate" hreflang="en" href="https://www.esrafalnou.com"><link rel="alternate" hreflang="de" href="https://www.esrafalnou.com/de/index.html"><link rel="alternate" hreflang="es" href="https://www.esrafalnou.com/es/index.html"><meta name="robots" content="index, follow"><meta name="author" content="Agroturisme Es Rafal Nou"><meta name="description" content=""><meta property="og:title" content="Home"><meta property="og:type" content="website"><meta name="og:description" content=""><meta name="og:site_name" content="www.esrafalnou.com"><meta property="og:locale:alternate" content="ca"><meta name="og:locale" content="en"><meta property="og:locale:alternate" content="de"><meta property="og:locale:alternate" content="es"><meta property="og:url" content="https://www.esrafalnou.com"><meta property="og:image" content=""><link rel="stylesheet" href="//webbox-assets.siteminder.com/assets/themes/css/theme1colorPalette8-95a38e0cd3007b499c0ad41655b1cda3.css"><script defer>window.smcv=window.smcv||{},window.smcv.fireWhenReady=function(n,e){var r,c=0,i=setInterval(function(){try{20===++c&&(console.warn(n+" failed indefinitely. "),clearInterval(i)),r=n.split(".").reduce(function(n,e){return n[e]},window)}catch(e){console.info("retrying..."+c+" "+n)}void 0!==r&&(e(),clearInterval(i))},500)};</script><script>
    window.propertyId= "8b511009-fcfb-4280-a86a-4ac5eba3d57d";
</script><script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
            new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
        j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
        'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
    })(window,document,'script','dataLayer','GTM-WD6VSBF');</script><link rel="stylesheet" href="https://unpkg.com/leaflet@1.3.1/dist/leaflet.css" integrity="sha512-Rksm5RenBEKSKFjgI3a41vrjkw4EVPlJ3+OiI65vTjIdo9brlAacEuKOiQ5OFh7cOI1bkDwLqdLw3Zg0cRJAAQ==" crossorigin=""><script src="https://unpkg.com/leaflet@1.3.1/dist/leaflet.js" integrity="sha512-/Nsx9X4HebavoBvEBuyp3I7od5tA0UzAxs+j83KgC8PU0kgB4XiK4Lfe4y4cgBtaRJQEIFCW+oC506aPT2L1zw==" crossorigin="" async></script><script type="application/javascript" src="//webbox-assets.siteminder.com/assets/libs/js/canvas-js-bundle-v4.js"></script><script type="application/ld+json">{"@context": "http://schema.org","@type": "Hotel","description": "WELCOME TO ES RAFAL NOU - ","hasMap": "https://maps.googleapis.com/maps/api/staticmap?zoom=15&center=39.53847747,3.14839880&size=1600x1200&sensor=false&markers=color:blue%7c39.53847747,3.14839880","address": {"@type": "PostalAddress","addressLocality": "Manacor","addressRegion": "PM","postalCode": "07500","streetAddress": "Ctra. Felanitx - Petra, Km. 5","addressCountry": "Spain"},"geo": {"@type": "GeoCoordinates","latitude": 39.53847747,"longitude": 3.14839880},"telephone": "+34671076657","url": "https://www.esrafalnou.com","name": "Agroturisme Es Rafal Nou","starRating": { "@type": "Rating", "ratingValue" : "4.0" }}</script></head><body class="horizontal_logo theme1 colorPalette8 typography1 buttonStyle3 page-home lang-en"><div class="navbar-container"><nav class="navbar navbar-fixed-top navbar-main"><div class="container"><div class="row"><div

Found 2026-01-10 by HttpPlugin

Create report

Open service 18.239.18.3:443 · acrcloud.com

2026-01-10 09:28

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Sat, 10 Jan 2026 09:28:19 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 9158fa1ac72d0c0684fe558c8655aeda.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: UBGsmPDBB3bLl7KlHRNTfL7aUH1BWihzQLfkwoYbI4ewoElOJ_khlw==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: UBGsmPDBB3bLl7KlHRNTfL7aUH1BWihzQLfkwoYbI4ewoElOJ_khlw==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-10 by HttpPlugin

Create report

Open service 18.239.18.3:80 · www.potagercity.com

2026-01-10 00:26

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 00:26:59 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://www.potagercity.com/
X-Cache: Redirect from cloudfront
Via: 1.1 11e924fe383f6400148d019b996a5864.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: TG9Qxm33rfbA2vhPCtOAnZIhuu5_7M4DKaXv1DOqndOH7Muo4wM47Q==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-10 by HttpPlugin