LeakIX - Host 2.19.126.152

Host 2.19.126.152

Germany

Akamai International B.V.

Software information

AkamaiGHost

tcp/443 tcp/80

Apache Apache

tcp/443

GAZEL

tcp/443 tcp/80

UploadServer

tcp/443 tcp/80

nginx nginx

tcp/443 tcp/80

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 2.19.126.152
Domain: legendheroesgame.com
Port: 80
URL: http://legendheroesgame.com

First seen 2025-01-14 12:08
Last seen 2025-03-11 01:58
Open for 55 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb81b36fa3

[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = https://github.com/broad-solutions-group/game-template.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "template-4"]
	remote = origin
	merge = refs/heads/template-4
[branch "template-1"]
	remote = origin
	merge = refs/heads/template-1
	vscode-merge-base = origin/template-1
[branch "template-2"]
	remote = origin
	merge = refs/heads/template-2
	vscode-merge-base = origin/template-2
[branch "template-3"]
	remote = origin
	merge = refs/heads/template-3
	vscode-merge-base = origin/template-3

Found on 2025-03-11 01:58

656 Bytes

Create report

Open service 2.19.126.152:443 · imgs.binmotalk.net

2026-01-26 01:46

HTTP/1.1 200 OK
Server: nginx
Content-Length: 0
Date: Mon, 26 Jan 2026 01:46:18 GMT
Connection: close
Access-Control-Allow-Origin: *

Found 2026-01-26 by HttpPlugin

Create report

Open service 2.19.126.152:80 · static-gl.lilithgame.com

2026-01-26 00:07

HTTP/1.1 403 Forbidden
Content-Type: application/xml; charset=UTF-8
X-GUploader-UploadID: AJRbA5VzLrYTa5E_h8amIM9SHM6hdWRrw7Kn8lQwMg30NGEhCBKRwjlzWbkFFENVYO_3e-O52kYslS4
Content-Length: 300
Expires: Mon, 26 Jan 2026 00:08:06 GMT
Cache-Control: private, max-age=0
Server: UploadServer
Date: Mon, 26 Jan 2026 00:08:06 GMT
Connection: close


<?xml version='1.0' encoding='UTF-8'?><Error><Code>AccessDenied</Code><Message>Access denied.</Message><Details>Anonymous caller does not have storage.objects.list access to the Google Cloud Storage bucket. Permission 'storage.objects.list' denied on resource (or it may not exist).</Details></Error>

Found 2026-01-26 by HttpPlugin

Create report

Open service 2.19.126.152:443 · static-gl.lilithgame.com

2026-01-26 00:07

HTTP/1.1 403 Forbidden
Content-Type: application/xml; charset=UTF-8
X-GUploader-UploadID: AJRbA5UFrc93FnYLoQehuKSJvClLluHCpRpB725w_TEg_pSVhxw0zI5dKN8qWL1r3u3IovJgqE6D1w4
Content-Length: 300
Expires: Mon, 26 Jan 2026 00:07:43 GMT
Cache-Control: private, max-age=0
Server: UploadServer
Date: Mon, 26 Jan 2026 00:07:43 GMT
Connection: close


<?xml version='1.0' encoding='UTF-8'?><Error><Code>AccessDenied</Code><Message>Access denied.</Message><Details>Anonymous caller does not have storage.objects.list access to the Google Cloud Storage bucket. Permission 'storage.objects.list' denied on resource (or it may not exist).</Details></Error>

Found 2026-01-26 by HttpPlugin

Create report

Open service 2.19.126.152:80 · cdn-v2tw.talesv.com

2026-01-26 00:04

HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Content-Length: 162
Date: Mon, 26 Jan 2026 00:05:04 GMT
Connection: close

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body bgcolor="white">
<center><h1>403 Forbidden</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 2.19.126.152:443 · cdn-v2tw.talesv.com

2026-01-26 00:04

HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Content-Length: 162
Date: Mon, 26 Jan 2026 00:04:42 GMT
Connection: close

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body bgcolor="white">
<center><h1>403 Forbidden</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 2.19.126.152:443 · mstatic.sonyunara.tw

2026-01-25 23:14

HTTP/1.1 200 OK
Server: GAZEL
Pragma: no-cache
P3P: CP="NOI CURa ADMa DEVa TAIa OUR DELa BUS IND PHY ONL UNI COM NAV INT DEM PRE"
Content-Type: text/html;charset=utf-8
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Expires: Sun, 25 Jan 2026 23:14:44 GMT
Date: Sun, 25 Jan 2026 23:14:44 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding

Found 2026-01-25 by HttpPlugin

Create report

Open service 2.19.126.152:80 · mstatic.sonyunara.tw

2026-01-25 23:14

HTTP/1.1 302 Moved Temporarily
Server: GAZEL
Location: https://img.sonyunara.com/error_page/SN404.html
Content-Length: 231
Content-Type: text/html; charset=iso-8859-1
Date: Sun, 25 Jan 2026 23:15:06 GMT
Connection: close

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://img.sonyunara.com/error_page/SN404.html">here</a>.</p>
</body></html>

Found 2026-01-25 by HttpPlugin

Create report

Open service 2.19.126.152:443 · prd-n8n.cvale.com.br

2026-01-25 21:13

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Last-Modified: Sun, 18 Jan 2026 00:18:10 GMT
ETag: W/"7b7-19bce7767a9"
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Akamai-Transformed: 9 1090 0 pmb=mRUM,1
Expires: Sun, 25 Jan 2026 21:13:39 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 25 Jan 2026 21:13:39 GMT
Content-Length: 6275
Connection: close
Set-Cookie: route=1769375620.659.45.545836|a59688a0f3c414604e7d1c9147d5359b; Expires=Tue, 27-Jan-26 21:13:39 GMT; Max-Age=172800; Path=/; Secure; HttpOnly
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=912
Server-Timing: origin; dur=5
Alt-Svc: h3=":443"; ma=93600
Server-Timing: ak_p; desc="1769375618682_34831704_1186646412_91466_14311_95_148_-";dur=1

Page title: n8n.io - Workflow Automation

<!DOCTYPE html>
<html lang="en">
	<head>
		<script type="module" crossorigin src="/assets/polyfills-C7eMRNFe.js"></script>

		<meta charset="utf-8" />
		<meta http-equiv="X-UA-Compatible" content="IE=edge" />
		<meta name="viewport" content="width=device-width,initial-scale=1.0" />
		<link rel="icon" href="/favicon.ico" />
		<style>@media (prefers-color-scheme: dark) { body { background-color: rgb(45, 46, 46) } }</style>
		<script type="text/javascript">
			window.BASE_PATH = '/';
			window.REST_ENDPOINT = 'rest';
		</script>
		<script src="/rest/sentry.js"></script>
		<script>!function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.async=!0,p.src=s.api_host+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="capture identify alias people.set people.set_once set_config register register_once unregister opt_out_capturing has_opted_out_capturing opt_in_capturing reset isFeatureEnabled getFeatureFlag onFeatureFlags reloadFeatureFlags".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[])</script>

		<title>n8n.io - Workflow Automation</title>
		<script type="module" crossorigin src="/assets/index-BwoviwZU.js"></script>
		<link rel="stylesheet" crossorigin href="/assets/index-DFFkAkMx.css">
	
                              <script>!function(e){var n="https://s.go-mpulse.net/boomerang/";if("False"=="True")e.BOOMR_config=e.BOOMR_config||{},e.BOOMR_config.PageParams=e.BOOMR_config.PageParams||{},e.BOOMR_config.PageParams.pci=!0,n="https://s2.go-mpulse.net/boomerang/";if(window.BOOMR_API_key="AYDA7-HYPF8-XWU3E-DCEUA-KCVG8",function(){function e(){if(!o){var e=document.createElement("script");e.id="boomr-scr-as",e.src=window.BOOMR.url,e.async=!0,i.parentNode.appendChild(e),o=!0}}function t(e){o=!0;var n,t,a,r,d=document,O=window;if(window.BOOMR.snippetMethod=e?"if":"i",t=function(e,n){var t=d.createElement("script");t.id=n||"boomr-if-as",t.src=window.BOOMR.url,BOOMR_lstart=(new Date).getTime(),e=e||d.body,e.appendChild(t)},!window.addEventListener&&window.attachEvent&&navigator.userAgent.match(/MSIE [67]\./))return window.BOOMR.snippetMethod="s",void t(i.parentNode,"boomr-async");a=document.createElement("IFRAME"),a.src="about:blank",a.title="",a.role="presentation",a.loading="eager",r=(a.frameElement||a).style,r.width=0,r.height=0,r.border=0,r.display="none",i.parentNode.appendChild(a);try{O=a.contentWindow,d=O.document.open()}catch(_){n=document.domain,a.src="javascript:var d=document.open();d.domain='"+n+"';void(0);",O=a.contentWindow,d=O.document.open()}if(n)d._boomrl=function(){this.domain=n,t()},d.write("<bo"+"dy onload='document._boomrl();'>");else if(O._boomrl=function(){t()},O.addEventListener)O.addEventListener("load",O._boomrl,!1);else if(O.attachEvent)O.attachEvent("onload",O._boomrl);d.close()}function a(e){window.BOOMR_onload=e&&e.timeStamp||(new Date).getTime()}if(!window.BOOMR||!window.BOOMR.version&&!window.BOOMR.snippetExecuted){window.BOOMR=window.BOOMR||{},window.BOOMR.snippetStart=(new Date).getTime(),window.BOOMR.snippetExecuted=!0,window.BOOMR.snippetVersion=12,window.BOOMR.url=n+"AYDA7-HYPF8-XWU3E-DCEUA-KCVG8";var i=document.currentScript||document.getElementsByTagName("script")[0],o=!1,r=document.createElement("link");if(r.relList&&"function"==typeof r.relList.supports&&r.relList.supports("preload")&&"as"in r)window.BOOMR.snippetMethod="p",r.href=window.BOOMR.url,r.rel="preload",r.as="script",r.addEventListener("load",e),r.addEventListener("error",function(){t(!0)}),setTimeout(function(){if(!o)t(!0)},3e3),BOOMR_lstart=(new Date).getTime(),i.parentNode.appendChild(r);else t(!1);i

Found 2026-01-25 by HttpPlugin

Create report

Open service 2.19.126.152:80 · gztv76.com

2026-01-25 18:37

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://gztv76.com/
Expires: Sun, 25 Jan 2026 18:37:37 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 25 Jan 2026 18:37:37 GMT
Connection: close
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *

Found 2026-01-25 by HttpPlugin

Create report

Open service 2.19.126.152:443 · gztv76.com

2026-01-25 18:37

HTTP/1.1 200 OK
Server: X
Content-Type: text/html
Content-Length: 5444
Last-Modified: Fri, 16 Jan 2026 09:16:58 GMT
ETag: "696a020a-1544"
Referrer-Policy: no-referrer
Accept-Ranges: bytes
Expires: Sun, 25 Jan 2026 18:37:14 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 25 Jan 2026 18:37:14 GMT
Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600
Connection: close
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *

Page title: 星辉科技有限公司 - 智能解决方案服务商

<!doctype html><html lang="zh"><head><meta charset="UTF-8"/><meta name="viewport" content="maximum-scale=1,minimum-scale=1,user-scalable=0,width=device-width,initial-scale=1,user-scalable=no"/><meta name="full-screen" content="yes"/><meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><meta name="referrer" content="no-referrer"/><link rel="shortcut icon" type="image/x-icon" href="/favicon.ico"/><title>星辉科技有限公司 - 智能解决方案服务商</title><meta name="description" content="星辉科技有限公司专注于提供AI智能、企业管理系统、数据分析平台等数字化解决方案，助力企业高效增长。"><meta name="keywords" content="企业数字化, AI解决方案, 企业管理系统, 数据分析, 星辉科技"><style>#MainWeb {
            width: 100vw;
            height: 100vh;
            position: fixed;
            z-index: -1;
            top: -200vw;
            left: 0;
            opacity: 0;
        }

        #LandingPage {
            width: 100%;
            height: 100%;
            position: relative;
        }

        #loader {
            width: 96px;
            height: 16px;
            position: absolute;
            left: 50%;
            top: 50%;
            transform: translate(-50%, -50%);
            display: inline-block;
            background-color: #fff;
            border: 1px solid rgba(0, 0, 0, 0.2);
            border-radius: 4px;
            background-image: linear-gradient(45deg, rgba(0, 0, 0, 0.25) 25%, transparent 25%, transparent 50%, rgba(0, 0, 0, 0.25) 50%, rgba(0, 0, 0, 0.25) 75%, transparent 75%, transparent);
            font-size: 30px;
            background-size: 1em 1em;
            box-sizing: border-box;
            animation: barStripe 1s linear infinite;
        }

        @keyframes barStripe {
            0% {
                background-position: 1em 0;
            }

            100% {
                background-position: 0 0;
            }
        }</style><script>var _czc = _czc || [];
        window.MATOMO_OBJ = {
            urlParma: '',
            matomoaburl: '',
            urlArr: [],
        }
        MATOMO_OBJ.urlParma = new URLSearchParams(window.location.search);
        MATOMO_OBJ.matomoaburl = MATOMO_OBJ.urlParma.get('url');
        // 如果需要AB测试，则用需要取数据的域名
        if (MATOMO_OBJ.matomoaburl) {
            MATOMO_OBJ.urlArr = MATOMO_OBJ.matomoaburl.split(',');
            window.ANALYSIS_URL = MATOMO_OBJ.urlArr[Math.floor(Math.random() * MATOMO_OBJ.urlArr.length)];
        } else {
            window.ANALYSIS_URL = window.location.hostname;
        }
        var _paq = window._paq = window._paq || [];
        /* tracker methods like "setCustomDimension" should be called before "trackPageView" */
        _paq.push(["setDocumentTitle", document.domain]);
        _paq.push(['setCustomDimension', 3, window.ANALYSIS_URL]);
        _paq.push(['trackPageView']);
        _paq.push(['enableLinkTracking']);
        (function () {
            var u = "https://mt.j3udzhyj.com/";
            _paq.push(['setTrackerUrl', u + 'matomo.php']);
            _paq.push(['setSiteId', '2']);
            // var d = document, g = d.createElement('script'), s = d.getElementsByTagName('script')[0];
            // g.async = true; g.src = u + 'matomo.js'; s.parentNode.insertBefore(g, s);
        })();</script><noscript><p><img src="https://mt.n3fxk.top/matomo.php?idsite=2&amp;rec=1" style="border:0;" alt=""/></p></noscript><noscript><img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=1309588083746161&ev=PageView&noscript=1"/></noscript><script src="./matomo.js"></script><script defer="defer" src="js/chunk-vendors.46857522.js"></script><script defer="defer" src="js/index.e99d474b.js"></script><link href="css/index.2029decd.css" rel="stylesheet"></head><body id="LandingPage"><span id="loader"></span><div id=

Found 2026-01-25 by HttpPlugin