LeakIX - Host 18.239.36.118

Host 18.239.36.118

United States

AMAZON-02

Software information

AmazonS3

tcp/443 tcp/80

Apache Apache

tcp/443

CloudFront

tcp/443 tcp/80

Kestrel Kestrel

tcp/443

nginx nginx

tcp/443

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.36.118
Domain: juheye1.com
Port: 443
URL: https://juheye1.com

First seen 2023-05-19 09:49
Last seen 2026-01-23 05:20
Open for 979 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ca92a4d7
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://www.y1ccommon.com/zhangmazi/juheye.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2026-01-23 05:20
  
  209 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652263a27398
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://cdn-tv.hnmting.com/ouyangmu/juhe123.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2023-05-19 09:49
  
  272 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.36.118
Domain: thcu3h5ubg.xyz
Port: 443
URL: https://thcu3h5ubg.xyz

First seen 2023-09-29 14:58
Last seen 2024-02-03 01:35
Open for 126 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-03 01:35
  
  239 Bytes
Create report

Open service 18.239.36.118:443 · juheye1.com

2026-01-23 05:20

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 8393
Connection: close
Server: nginx
Date: Fri, 23 Jan 2026 05:20:21 GMT
Last-Modified: Mon, 24 Feb 2025 08:40:10 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
ETag: "67bc306a-20c9"
X-Cache: Miss from cloudfront
Via: 1.1 8e6f6d7e57b70cc43be20c132da08b18.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: UCSRB15z4U9TUYJ0VU4MJB9P-P-EamEfRLkPUQ0HxjkFvab4X97OuA==

Page title: 聚合页APP导航

<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>聚合页APP导航</title>
    <link rel="stylesheet" href="/css/public.css">
    <script src="/js/jquery-3.4.1.min.js"></script>
    <script src="/js/base64.js"></script>
    <style>
        body {
            background: #000;
        }

        .wraper {
            max-width: 750px;
            margin: 0 auto;
            position: relative;
        }

        .bg {
            width: 100%;
            height: 100vh;
            background-position: center center;
            background-repeat: no-repeat;
            background-size: cover;
        }


        .logo {
            width: 100%;
            position: absolute;
            top: 0;
            left: 0;
            display: flex;
            align-items: center;
            padding-top: 0.6rem;
            padding-left: 0.6rem;
        }

        .logo img {
            width: 2.4rem;
            height: 2.4rem;
            margin-right: 2.6%;
            border-radius: 20%;
            box-shadow: 0 0.08rem 0.16rem 0 rgba(0, 0, 0, 0.2), 0 0.12rem 0.4rem rgba(0, 0, 0, 0.38);
        }

        .logo span {
            font-size: 0.6rem;
            flex: 1;
            color: #ffffff;
            text-shadow: 0.04rem 0.04rem 0.08rem rgba(0, 0, 0, 0.38);
        }

        .content {
            max-width: 750px;
            position: fixed;
            left: 50%;
            transform: translateX(-50%);
            bottom: 0.6rem;
            width: 100%;
            height: 6.4rem;
            display: flex;
            flex-direction: column;
            justify-content: space-between;
            align-items: center;
        }

        .button {
            display: flex;
            align-items: center;
            justify-content: center;
            background-color: #fe4445;
            width: 92%;
            height: 1.96rem;
            border-radius: 0.98rem;
        }

        .button img {
            height: 0.68rem;
            width: 0.68rem;
        }

        .button span {
            color: #ffffff;
            font-size: 0.6rem;
            margin-left: 0.2rem;
        }

        .tab {
            width: 92%;
            display: flex;
            justify-content: space-between;
            height: 3.2rem;
        }

        .tab li {
            width: 2.4rem;
            height: 100%;
        }

        .tab li a {
            width: 100%;
            height: 100%;
            display: flex;
            flex-direction: column;
            align-content: center;
            justify-content: space-between;
        }

        .tab li a img {
            width: 100%;
            height: 2.4rem;
            border-radius: 20%;
            box-shadow: 0 0.08rem 0.16rem 0 rgba(0, 0, 0, 0.2), 0 0.12rem 0.4rem rgba(0, 0, 0, 0.38);
        }

        .tab li a span {
            width: 100%;
            text-align: center;
            font-size: 0.56rem;
            color: #ffffff;
            text-shadow: 0.04rem 0.04rem 0.08rem rgba(0, 0, 0, 0.38);
        }

        .weixinTip {
            position: fixed;
            top: 15px;
            right: 15px;
            z-index: 10;
            width: 120px;
            height: 50px;
            overflow: hidden;
            display: none;
        }

        .weixinTip>img {
            position: absolute;
            top: 0;
            left: 0;
            width: 100%;
        }
    </style>
</head>

<body>
    <div class="wraper">
        <div class="bg"></div>
        <div class="logo">
            <img src="" alt="">
            <span></span>
        </div>
        <div class="content">
            <a href="#" class="button" id="download">
                <img src="/images/xiazai.png" alt="">
                <span>立即下载</span>
            </a>
            <ul class="tab">
                <!-- <li>
                    <a href="#">
                        <img src="./images/email.png" alt="">
                        <span>产品</spa

Found 2026-01-23 by HttpPlugin

Create report

Open service 18.239.36.118:80 · constructbuy.com

2026-01-22 22:12

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Thu, 22 Jan 2026 22:12:54 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://constructbuy.com/
X-Cache: Redirect from cloudfront
Via: 1.1 8e6f6d7e57b70cc43be20c132da08b18.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: HulcaMI07KJwx0goBhc5duWiDLceicGYhRdCqyvUSTPWfij0VwCbsQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-22 by HttpPlugin

Create report

Open service 18.239.36.118:443 · constructbuy.com

2026-01-22 22:12

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Date: Thu, 22 Jan 2026 22:12:54 GMT
Server: Kestrel
ConstructBuyVersion: 3.8.16-20260105-6ca7f9e
Set-Cookie: AWSALB=zyxS+QNhEvpm82mtWR6GlNXlMFY56vSiqWFw0XOw6597QbnBHUmEtXIH2CmoZLMwFUKLuwlCs+HzESQxnUztBSfRDDBm+COh7ADiPb4ifCgN9HRlh7VhG8dhMtFw; Expires=Thu, 29 Jan 2026 22:12:54 GMT; Path=/
Set-Cookie: AWSALBCORS=zyxS+QNhEvpm82mtWR6GlNXlMFY56vSiqWFw0XOw6597QbnBHUmEtXIH2CmoZLMwFUKLuwlCs+HzESQxnUztBSfRDDBm+COh7ADiPb4ifCgN9HRlh7VhG8dhMtFw; Expires=Thu, 29 Jan 2026 22:12:54 GMT; Path=/; SameSite=None; Secure
Set-Cookie: CBLang=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/
Set-Cookie: CBLang=9; path=/
X-Cache: Miss from cloudfront
Via: 1.1 bec13cdbd4d650c71ed35e5a7991d3ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: Url_84xC04eRx1FLCPhz7upxVyBO2tPvpnZON90eq0cYzL4k_ZK0ng==





<html data-culture="9">
<head>
    <style>
    body {
        background-color: #333;
        margin: 0;
        padding: 0;
        display: flex;
        align-items: center;
        justify-content: center;
        width: 100%;
        height: 100%;
    }

    .imgloading-container {
        width: 0%;
        height: 100%;
        position: absolute;
        top: 0;
        left: 0;
        display: block;
        overflow: hidden;
        will-change: width, opacity;
        transform-origin: 0 0;
    }

    .imgloading-animation {
        animation: imgLoadingH 6s linear infinite;
    }

    @keyframes imgLoadingH {
        0% {
            width: 0%;
            opacity: 1;
        }

        85% {
            width: 100%;
            opacity: 1;
        }

        95% {
            width: 100%;
            opacity: 1;
        }

        100% {
            width: 100%;
            opacity: 0;
        }
    }

    .imgloading {
        position: absolute;
        top: 0;
        left: 0;
        display: block;
        background-image: url(/images/ConstructBuy_White.png);
        background-repeat: no-repeat;
        background-size: contain;
        width: 500px;
        height: 49px;
    }

    #loader {
        display: inline-block;
        position: absolute;
        width: 500px;
        height: 49px;
    }

    img {
        width: 500px;
        height: 49px;
        position: relative;
        top: 0;
        left: 0;
        opacity: 0.3;
    }
    @media all and (-ms-high-contrast: none), (-ms-high-contrast: active) {
        .imgloading-container {
            margin-top: -25px;
        }
    }
</style>

</head>
<body>
        <div id="loader">
        <div class="imgloading-container imgloading-animation">
            <span class="imgloading"></span>
        </div>
    </div>
    <img src="/images/ConstructBuy_White.png" />

    
<script src="https://browser.sentry-cdn.com/5.29.2/bundle.min.js" crossorigin="anonymous"></script>
<script>(window.Sentry||document.write("\u003Cscript src=\u0022/dist/20260105-6ca7f9e/sentry.min.js\u0022 crossorigin=\u0022anonymous\u0022\u003E\u003C/script\u003E"));</script>

<script>
        var whiteListUrls = [/\/constructbuy\.com/i];
        var sentryKey = "https://1942615666afff87e14549fb06011579@o67286.ingest.sentry.io/4506836824489984";
        var environmentName = "CB-Prod";

        var errorsToIgnore = [
            'top.GLOBALS',
            'originalCreateNotification',
            'canvas.contentDocument',
            'MyApp_RemoveAllHighlights',
            'Can\'t find variable: ZiteReader',
            'jigsaw is not defined',
            'google is not defined',
            'ComboSearch is not defined',
            'atomicFindClose',
            'fb_xd_fragment',
            'bmi_SafeAddOnload',
            'EBCallBackMessageReceived',
            'conduitPage',
            /Script error.*/,
            /Failed to load resource.*/i,
            /Unterminated string constant.*/i,
            "Permission denied",
            /Non-Error promise rejection captured with value: Object Not Found Matching.*/i
        ];

        var doNotLogMoreErrors = false;

        Sentry.init({
            dsn: sentryKey, environment: environmentName, allowUrls: whiteListUrls, release: '3.8.16-20260105-6ca7f9e', ignoreErrors: errorsToIgnore,
            beforeSend: function(event) {
                // Too many sync ajax request warning, this is deactivated until this is resolved by making all calls async
                if (event.level && event.level != "fatal" && event.level != "critical" && event.level != "error" || doNotLogMoreErrors)
                    return null;

                if(typeof(moment) == "undefined" || typeof(entryPoint) == "undefined" || typeof(entryPoint.main) == "undefined"){
                    doNotLogMoreErrors = true;
                    // this interval is necessary since the body is not available while logging the first error and it won't show the error message
                    // it will interval every 250ms until the div is available

Found 2026-01-22 by HttpPlugin

Create report

Open service 18.239.36.118:443 · apppromotionsummit.com

2026-01-11 18:29

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Sun, 11 Jan 2026 18:29:51 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 bec13cdbd4d650c71ed35e5a7991d3ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: aXWLc5iRJlf3NXSuzK5owbC6AkiEkk5ZjuskuKLVgV-V9pHS7LxvoQ==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: aXWLc5iRJlf3NXSuzK5owbC6AkiEkk5ZjuskuKLVgV-V9pHS7LxvoQ==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.239.36.118:80 · apppromotionsummit.com

2026-01-11 18:29

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 11 Jan 2026 18:29:51 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://apppromotionsummit.com/
X-Cache: Redirect from cloudfront
Via: 1.1 8e6f6d7e57b70cc43be20c132da08b18.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: jJzrKvAOCnzK1TthedSDv0-dm2Iv1hKmCZEwrLD7GJmN6q77gfP-RA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.239.36.118:443 · quickwinplayhub.com

2026-01-11 15:43

HTTP/1.1 404 Not Found
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: close
Server: AmazonS3
Date: Sun, 11 Jan 2026 15:43:51 GMT
X-Cache: Error from cloudfront
Via: 1.1 bb69678e2a9bd96a2b2aa070ba9687a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: e6eZe3JM1EYdEJu7ktQVF4OyYFRSYS0T4sq6DaucsNPD6-l26s1qsg==


<?xml version="1.0" encoding="UTF-8"?>
<Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message><Key>quickwinplayhub.com/index.html</Key><RequestId>06BNHVXT0KBVRX35</RequestId><HostId>pKGBf+Ne8kgwsxMZd6iDgC/gjUViHC6d/HcyyF5liJWXF+y9ctDeOPVtYpv7bkajGZ6+hq/uoL8=</HostId></Error>

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.239.36.118:80 · quickwinplayhub.com

2026-01-11 15:43

HTTP/1.1 404 Not Found
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: close
Server: AmazonS3
Date: Sun, 11 Jan 2026 15:43:51 GMT
X-Cache: Error from cloudfront
Via: 1.1 24f924c22589fd0429b4463876b2c576.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: yAMxfTVJGb9toc1chZO22VCkjarN9-3dJUpsLXmuFGhMWX3HY6mgfw==


<?xml version="1.0" encoding="UTF-8"?>
<Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message><Key>quickwinplayhub.com/index.html</Key><RequestId>1Z4NNEFQ8NJ7V2MH</RequestId><HostId>q14VbSYzozOf1iKimxEB6Ill7oSosYgrHsKZs5z6KFsjJjQrbgvwKK8t+evJ7VhPUpzrB5zoEoemJZw3/lsJQK3Gc264UL64</HostId></Error>

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.239.36.118:443 · 7luckwheelus6.vip

2026-01-10 21:36

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Sat, 10 Jan 2026 21:36:54 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 fa7c071d9391a32eff94728584435f34.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: 05UYr0FpnwPrGA9db-mMe7Wl4gKM1gls5FFaxFBQrvR0BLKuOQBIOw==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: 05UYr0FpnwPrGA9db-mMe7Wl4gKM1gls5FFaxFBQrvR0BLKuOQBIOw==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-10 by HttpPlugin

Create report

Open service 18.239.36.118:80 · 7luckwheelus6.vip

2026-01-10 21:36

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Sat, 10 Jan 2026 21:36:53 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 db85cac9bd06b81c92694774b9b6f520.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: prG1dPwGkLPIYqULJwOyDJh3X3wSw3SynHkLtQ0rvRjadpiz-VPa4A==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: prG1dPwGkLPIYqULJwOyDJh3X3wSw3SynHkLtQ0rvRjadpiz-VPa4A==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-10 by HttpPlugin

Create report

Open service 18.239.36.118:80 · fm.autocom.dk

2026-01-10 10:43

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 10:43:08 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://fm.autocom.dk/
X-Cache: Redirect from cloudfront
Via: 1.1 7c0d1e5d9f8346ae6627430911337f42.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: wt0K3WfieBfNFrUkEXVbWR8v1fecdu4n3JQ8Iy8tW3shuwna1ZDJ4Q==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-10 by HttpPlugin