LeakIX - Host 18.239.36.22

Host 18.239.36.22

United States

AMAZON-02

Software information

AmazonS3

tcp/443

CloudFront

tcp/443 tcp/80

nginx nginx

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.239.36.22
Domain: empathly.com
Port: 443
URL: https://empathly.com

First seen 2023-09-26 10:49
Last seen 2026-02-02 09:01
Open for 859 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c99d3320899d33208444ed0197a39688302143f4bf9370591

Found 44 files trough .DS_Store spidering:

/images
/images/create-card-icon-caption-title-paragraph.svg
/images/create-card-icon-icon-caption.svg
/images/create-card-icon-key-value.svg
/images/create-card-icon-list.svg
/images/create-card-icon-multi-list.svg
/images/create-card-icon-stat-caption.svg
/images/create-card-icon-table-simple.svg
/images/create-card-icon-video.svg
/images/dialog-box-wave.svg
/images/empathly-icon-dark.svg
/images/empathly-logo-dark.svg
/images/empathly-logo-light.svg
/images/home-expand-your-view.png
/images/home-expore-new-content.png
/images/home-extend-reach.png
/images/home-persona-card-stack.png
/images/home-purple-wave.svg
/images/home-your-path.png
/images/how-it-works-sign-up.png
/images/how-to-adding-content-with-cards.png
/images/how-to-canceling-a-subscription.png
/images/how-to-confirm-email.png
/images/how-to-create-a-persona.png
/images/how-to-downloading-personas.png
/images/how-to-duplicate-a-persona.png
/images/how-to-edit-a-persona.png
/images/how-to-search-starter-personas.png
/images/how-to-starter-template.png
/images/how-to-tagging-personas.png
/images/our-vision-amazing.png
/images/our-vision-collaboration.png
/images/our-vision-collective-mindset.png
/images/our-vision-hero.png
/images/our-vision-inspire-action.png
/images/our-vision-saving-time.png
/images/persona-placeholder.jpg
/images/prices-arrow.svg
/images/prices-hero-background.svg
/images/proofpoints-expand-view.svg
/images/proofpoints-extend-reach.svg
/images/proofpoints-get-started.svg
/images/sign-in-pattern.png
/images/TOC-FPO.png

Found on 2026-02-02 09:01

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 18.239.36.22
Domain: flowersbybuck.com
Port: 443
URL: https://flowersbybuck.com

First seen 2025-12-15 02:59

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e208a11888215c6dac8808add1a2a4291955ead644

GraphQL introspection enabled at /graphql/api
Types: 397 (by kind: ENUM: 41, INPUT_OBJECT: 86, INTERFACE: 24, OBJECT: 241, SCALAR: 5)
Operations:
- Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToWishlist
Directives: deprecated, include, oneOf, skip (total: 4)

Detected: Magento

Found on 2025-12-15 02:59

677.8 kBytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.36.22
Domain: vvcwjelulug.xyz
Port: 443
URL: https://vvcwjelulug.xyz

First seen 2023-10-08 14:54
Last seen 2024-02-13 11:40
Open for 127 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-13 11:40
  
  239 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.36.22
Domain: wpt7uh9kpgz.xyz
Port: 443
URL: https://wpt7uh9kpgz.xyz

First seen 2023-10-08 14:54
Last seen 2024-02-13 09:35
Open for 127 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-13 09:35
  
  239 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.36.22
Domain: pr417kdbh.xyz
Port: 443
URL: https://pr417kdbh.xyz

First seen 2023-12-07 11:32
Last seen 2024-02-04 13:13
Open for 59 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652205c2db34
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/bb/bb-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-04 13:13
  
  237 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.36.22
Domain: kmh0o6xidpc.xyz
Port: 443
URL: https://kmh0o6xidpc.xyz

First seen 2023-10-08 15:01
Last seen 2024-02-03 20:15
Open for 118 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-03 20:15
  
  239 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.36.22
Domain: 6vmknkhee09.xyz
Port: 443
URL: https://6vmknkhee09.xyz

First seen 2023-10-08 13:14
Last seen 2024-02-03 13:45
Open for 118 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-03 13:45
  
  239 Bytes
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.239.36.22
Domain: empathly.com
Port: 80
URL: http://empathly.com

First seen 2023-09-26 10:49
Last seen 2023-10-11 01:45
Open for 14 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c99d3320899d33208444ed0197a39688302143f4bf9370591

Found 44 files trough .DS_Store spidering:

/images
/images/create-card-icon-caption-title-paragraph.svg
/images/create-card-icon-icon-caption.svg
/images/create-card-icon-key-value.svg
/images/create-card-icon-list.svg
/images/create-card-icon-multi-list.svg
/images/create-card-icon-stat-caption.svg
/images/create-card-icon-table-simple.svg
/images/create-card-icon-video.svg
/images/dialog-box-wave.svg
/images/empathly-icon-dark.svg
/images/empathly-logo-dark.svg
/images/empathly-logo-light.svg
/images/home-expand-your-view.png
/images/home-expore-new-content.png
/images/home-extend-reach.png
/images/home-persona-card-stack.png
/images/home-purple-wave.svg
/images/home-your-path.png
/images/how-it-works-sign-up.png
/images/how-to-adding-content-with-cards.png
/images/how-to-canceling-a-subscription.png
/images/how-to-confirm-email.png
/images/how-to-create-a-persona.png
/images/how-to-downloading-personas.png
/images/how-to-duplicate-a-persona.png
/images/how-to-edit-a-persona.png
/images/how-to-search-starter-personas.png
/images/how-to-starter-template.png
/images/how-to-tagging-personas.png
/images/our-vision-amazing.png
/images/our-vision-collaboration.png
/images/our-vision-collective-mindset.png
/images/our-vision-hero.png
/images/our-vision-inspire-action.png
/images/our-vision-saving-time.png
/images/persona-placeholder.jpg
/images/prices-arrow.svg
/images/prices-hero-background.svg
/images/proofpoints-expand-view.svg
/images/proofpoints-extend-reach.svg
/images/proofpoints-get-started.svg
/images/sign-in-pattern.png
/images/TOC-FPO.png

Found on 2023-10-11 01:45

Create report

Open service 18.239.36.22:443 · gacgroup.pl

2026-01-25 21:17

HTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 31614
Connection: close
Last-Modified: Fri, 23 Jan 2026 14:22:19 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 6YwJMwvpguitP65j45YQtSrh5kwdtCUk
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 25 Jan 2026 19:12:04 GMT
ETag: "fdf78282b2cbd0e1c5987e1182b5a09c"
X-Cache: Error from cloudfront
Via: 1.1 0df834b214e5d5be3767a579b1941edc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: 3mxhNHmAEnHsjJ7WsBBT2tpWVFftTBDkr3B1LPnC_ZZqQphm-ohtcA==
Age: 18959

Page title: GAC Polska

<!DOCTYPE html><!--UT8G0sSnsoOVGQGi5hMhl--><html lang="pl" class="geist_a71539c9-module__T19VSG__variable geist_mono_8d43a2aa-module__8Li5zG__variable red_hat_display_b984dd69-module__dQmchG__variable montserrat_9268490a-module__Yd_7pq__variable inter_2fe1ab3d-module__-T-KAq__variable lato_111f3fb4-module__3IWzwG__variable"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="image" href="https://d2e4u25u6oksl8.cloudfront.net/gacpl/gac_logo_954038f50e_8a93dd61ce.png"/><link rel="stylesheet" href="/_next/static/chunks/b0540c6741621f57.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/chunks/833f2c9151072b58.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/bb424c1367d77707.js"/><script src="/_next/static/chunks/e0c9f99bf92d8d80.js" async=""></script><script src="/_next/static/chunks/eaad74200afeb6e0.js" async=""></script><script src="/_next/static/chunks/3fa7363dafae8f47.js" async=""></script><script src="/_next/static/chunks/ea0ff3e29e0f35a5.js" async=""></script><script src="/_next/static/chunks/turbopack-7ab9ea86500e22bc.js" async=""></script><script src="/_next/static/chunks/d6df2205c231f75c.js" async=""></script><script src="/_next/static/chunks/c81db6e24f0cfdeb.js" async=""></script><script src="/_next/static/chunks/ff2a974e8298acab.js" async=""></script><script src="/_next/static/chunks/7c37eae070f8f6a7.js" async=""></script><link rel="preload" href="https://fonts.googleapis.com/css2?family=Noto+Sans:ital,wght@0,100..900;1,100..900&amp;family=Nunito:ital,wght@1,700&amp;family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&amp;display=swap" as="style"/><link rel="preload" href="https://cdn.cookielaw.org/consent/0195dc81-8cd1-7fcb-8758-19acb1c3e9d0/otSDKStub.js" as="script"/><link rel="preload" href="https://cdnjs.cloudflare.com/ajax/libs/wow/1.1.2/wow.min.js" as="script"/><meta name="robots" content="noindex"/><meta name="next-size-adjust" content=""/><meta name="version" content="1.0.3"/><link rel="preconnect" href="https://fonts.googleapis.com"/><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin="anonymous"/><link rel="canonical" href="https://gacgroup.pl/_not-found/"/><title>GAC Polska</title><meta name="description" content="GAC"/><meta name="robots" content="index, follow"/><link rel="shortcut icon" href="https://d2e4u25u6oksl8.cloudfront.net/gacpl/gac_favicon_8141df4eff.png" type="image/png"/><link rel="icon" href="https://d2e4u25u6oksl8.cloudfront.net/gacpl/gac_favicon_8141df4eff.png" sizes="any" type="image/png"/><link rel="apple-touch-icon" href="https://d2e4u25u6oksl8.cloudfront.net/gacpl/gac_favicon_8141df4eff.png" type="image/png" sizes="180x180"/><link rel="icon" href="https://d2e4u25u6oksl8.cloudfront.net/gacpl/gac_favicon_8141df4eff.png" sizes="16x16" type="image/png"/><link rel="icon" href="https://d2e4u25u6oksl8.cloudfront.net/gacpl/gac_favicon_8141df4eff.png" sizes="32x32" type="image/png"/><link href="https://fonts.googleapis.com/css2?family=Noto+Sans:ital,wght@0,100..900;1,100..900&amp;family=Nunito:ital,wght@1,700&amp;family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&amp;display=swap" rel="stylesheet"/><script>(self.__next_s=self.__next_s||[]).push(["https://cdn.cookielaw.org/consent/0195dc81-8cd1-7fcb-8758-19acb1c3e9d0/otSDKStub.js",{"type":"text/javascript","charset":"UTF-8","data-domain-script":"0195dc81-8cd1-7fcb-8758-19acb1c3e9d0"}])</script><script>(self.__next_s=self.__next_s||[]).push([0,{"children":"function OptanonWrapper() { }","id":"onetrust-wrapper"}])</script><script>(self.__next_s=self.__next_s||[]).push([0,{"children":"\n\t\t\t\t\t\t(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':\n\t\t\t\t\t\tnew Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],\n\t\t\t\t\t\tj=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=\n\t\t\t\t\t\t'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNo

Found 2026-01-25 by HttpPlugin

Host 18.239.36.22

United States

Software information

MacOS file listing through .DS_Store file

GraphQL introspection is enabled.

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

MacOS file listing through .DS_Store file

gacgroup.pl*.gacgroup.pl

*.plushyzeus.complushyzeus.com

tonyandkuku.lovetony-kuku.love*.tony-kuku.love*.tonyandkuku.love

seabrookprimaryschool.co.ukwww.seabrookprimaryschool.co.uk

empathly.com*.empathly.com

i.drpexe.com

potofwellness.comwww.potofwellness.com

wmpca.org.au*.wmpca.org.au

spencergulfnightlynews.com.auwww.spencergulfnightlynews.com.au

*.newwatoytogo.comnewwatoytogo.com

palmbayluckygarden.com*.palmbayluckygarden.com

admin.opentradesandbox.comapp.opentradesandbox.comapi.opentradesandbox.com

bedrijfs-borrel.nl

techgremlinwarrior.com*.techgremlinwarrior.com

nextstepglow.com

499949.comwww.499949.vip*.49170.topwww.499949.com*.49167.topwww.499018.com499019.cc499018.com499018.ccwww.499018.ccwww.499019.cc*.49168.topwww.499019.com499949.vip499019.com

iihf-hockey.tviihf.tviihfhockey.tv

888b.casa*.888b.casa

Domain summary

tonyandkuku.lovetony-kuku.love.tony-kuku.love.tonyandkuku.love

499949.comwww.499949.vip.49170.topwww.499949.com.49167.topwww.499018.com499019.cc499018.com499018.ccwww.499018.ccwww.499019.cc*.49168.topwww.499019.com499949.vip499019.com