LeakIX - Host 52.84.174.116

Host 52.84.174.116

United States

AMAZON-02

Software information

AmazonS3

tcp/443

CloudFront

tcp/80

nginx nginx

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 52.84.174.116
Domain: rbuxe78po8.xyz
Port: 443
URL: https://rbuxe78po8.xyz

First seen 2024-10-04 18:48
Last seen 2024-10-08 23:01
Open for 4 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0904d808d7e02e9ac8f638f0164866dd3
```
Found 13 files trough .DS_Store spidering:

/.git
/.gitignore
/collect_301.html
/enter - 副本.html
/enter.html
/favicon.ico
/iframe.html
/index copy.html
/index.html
/QRcode - 副本.html
/QRcode.html
/README.md
/static
```
  Found on 2024-10-08 23:01
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 52.84.174.116
Domain: rbuxe78po8.xyz
Port: 443
URL: https://rbuxe78po8.xyz

First seen 2023-11-04 20:44
Last seen 2024-09-30 16:06
Open for 330 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652201fa2920
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://ngit.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-30 16:06
  
  240 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-08 23:57
  
  239 Bytes
Create report

Open service 52.84.174.116:443 · czur.co.kr

2026-01-10 18:27

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Date: Sat, 10 Jan 2026 18:27:46 GMT
Pragma: no-cache
Location: https://www.themuje.co.kr/
Server: nginx
P3P: CP="NOI CURa ADMa DEVa TAIa OUR DELa BUS IND PHY ONL UNI COM NAV INT DEM PRE"
Set-Cookie: IMWEBVSSID=8rp9td4clmm18al11inin70ca08jlts5lpoaqnpm2uaijl54vk4ge08tfse99raoe7cedrfk4qs4v59o67kke4v24hq6f2jnlke5j40; path=/; SameSite=None; Secure=true; domain=czur.co.kr; HttpOnly
Set-Cookie: al=KR; expires=Fri, 06-Nov-2026 18:27:46 GMT; Max-Age=25920000; path=/; domain=czur.co.kr; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
X-Cache: Miss from cloudfront
Via: 1.1 64ca9347ad04534b1e47b07966197f28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: CDG50-P1
X-Amz-Cf-Id: miDgQMBAM_VPxE6fSRYxT9PDnV8JyClElU46SCyDqvGfkc9EBUAl0A==

Found 2026-01-10 by HttpPlugin

Create report

Open service 52.84.174.116:80 · haneulgolf.com

2026-01-04 19:26

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 04 Jan 2026 19:26:06 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://haneulgolf.com/
X-Cache: Redirect from cloudfront
Via: 1.1 f732889a761ee496e041d15e73c58bd6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: CDG50-P1
X-Amz-Cf-Id: Wbsl12POrwv9vKvwDPSAziHyE_NYeC6I2486we3RTW7h9IZevP8faA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-04 by HttpPlugin

Create report

Open service 52.84.174.116:443 · haneulgolf.com

2026-01-04 19:26

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 7509
Connection: close
Date: Sun, 04 Jan 2026 19:26:09 GMT
Last-Modified: Thu, 29 May 2025 05:34:27 GMT
ETag: "5e61b94fb9a22bbc98e10b95a2dcacac"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 182e7ab2ee669d6d9e48c29c3622b7dc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: CDG50-P1
X-Amz-Cf-Id: C-_vBBoIKQZKIXqGL4CjG_tYmHlglQqhW9qIuI71cEiWLNBd2180sA==


<!doctype html><html><head><meta charset="utf-8"/><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta name="viewport" content="width=device-width,initial-scale=1"/><title></title><meta data-react-helmet="true" name="description" content=""><link data-react-helmet="true" rel="icon" type="image/x-icon" href="" sizes="32x32"/><meta data-react-helmet="true" property="og:title" content=""><meta data-react-helmet="true" property="og:description" content=""><meta data-react-helmet="true" property="og:image" content=""><meta data-react-helmet="true" property="og:site_name" content=""><meta property="og:price:currency" content="KRW"><meta property="og:locale" content="ko_KR"><link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin><link href="https://fonts.googleapis.com/css2?family=Noto+Sans&display=swap" rel="stylesheet"><link href="https://fonts.googleapis.com/css2?family=Raleway:wght@900&display=swap" rel="stylesheet"/></head><body><div id="spa-root"></div><script src="/wwwroot/js/object-fit-images/ofi.min.js"></script><script src="/wwwroot/js/formatUnicorn.js"></script><script>window.MSInputMethodContext&&document.documentMode&&document.write('<script src="/wwwroot/js/ie11CustomProperties.min.js"><\/script>')</script><script>objectFitImages()</script><script src="/wwwroot/js/dist/npm.ant-design~3b38e777.entry.js"></script><script src="/wwwroot/js/dist/npm.ant-design~504cf7c0.entry.js"></script><script src="/wwwroot/js/dist/npm.ant-design~0c8a5edb.entry.js"></script><script src="/wwwroot/js/dist/npm.ant-design~8a80e7ed.entry.js"></script><script src="/wwwroot/js/dist/npm.ant-design~bf242c0e.entry.js"></script><script src="/wwwroot/js/dist/npm.ant-design~d3808226.entry.js"></script><script src="/wwwroot/js/dist/npm.ant-design~46681b78.entry.js"></script><script src="/wwwroot/js/dist/npm.ant-design~1a897d9d.entry.js"></script><script src="/wwwroot/js/dist/npm.ant-design~c8eee38b.entry.js"></script><script src="/wwwroot/js/dist/npm.ant-design~e5843ae5.entry.js"></script><script src="/wwwroot/js/dist/npm.ant-design~7f633b15.entry.js"></script><script src="/wwwroot/js/dist/npm.ant-design~09a76322.entry.js"></script><script src="/wwwroot/js/dist/npm.ant-design~22bd6e24.entry.js"></script><script src="/wwwroot/js/dist/npm.ant-design~738e8330.entry.js"></script><script src="/wwwroot/js/dist/npm.core-js~4572b388.entry.js"></script><script src="/wwwroot/js/dist/npm.core-js~11bb84b7.entry.js"></script><script src="/wwwroot/js/dist/npm.antd~e1cad0f3.entry.js"></script><script src="/wwwroot/js/dist/npm.antd~323d67b2.entry.js"></script><script src="/wwwroot/js/dist/npm.antd~628502f6.entry.js"></script><script src="/wwwroot/js/dist/npm.antd~b1b551ce.entry.js"></script><script src="/wwwroot/js/dist/npm.antd~712a407e.entry.js"></script><script src="/wwwroot/js/dist/npm.antd~78aac3e1.entry.js"></script><script src="/wwwroot/js/dist/npm.antd~fe4e949a.entry.js"></script><script src="/wwwroot/js/dist/npm.antd~e349ba94.entry.js"></script><script src="/wwwroot/js/dist/npm.antd~be1e0659.entry.js"></script><script src="/wwwroot/js/dist/npm.antd~79e2ec06.entry.js"></script><script src="/wwwroot/js/dist/npm.antd~f0fc8b86.entry.js"></script><script src="/wwwroot/js/dist/npm.lodash~2930ad93.entry.js"></script><script src="/wwwroot/js/dist/npm.moment~399b027d.entry.js"></script><script src="/wwwroot/js/dist/npm.moment~8a7b4606.entry.js"></script><script src="/wwwroot/js/dist/npm.moment~e258e298.entry.js"></script><script src="/wwwroot/js/dist/npm.moment~d22b72d1.entry.js"></script><script src="/wwwroot/js/dist/npm.moment~8eeb4602.entry.js"></script><script src="/wwwroot/js/dist/npm.moment~15f0789d.entry.js"></script><script src="/wwwroot/js/dist/npm.moment~0a56fd24.entry.js"></script><script src="/wwwroot/js/dist/npm.lodash-es~b92ffc84.entry.js"></script><script src="/wwwroot/js/dist/npm.rc-picker~234c55c2.entry.js"></script><script src="/wwwroot/js/dist/npm.rc-util~85923994.entry.js"></script><script src="/wwwroot/js/dist/npm.rc-table~370c78e2.entry.js"></script><script

Found 2026-01-04 by HttpPlugin

Create report

czur.co.kr*.czur.co.kr

Fingerprint:

040c438912e91f0bf2de07d4321d31f95b03c242c2fa50393c4a28491447b703

CN:

czur.co.kr

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M02

Not before:

2025-04-16 00:00

Not after:

2026-05-16 23:59

haneulgolf.com*.haneulgolf.com

Fingerprint:

e162149ec66e1638efff99108569a40c0fdf934221c474f779577ea94d448c3f

CN:

haneulgolf.com

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M04

Not before:

2025-05-29 00:00

Not after:

2026-06-27 23:59

Domain summary

rbuxe78po8.xyz 3 czur.co.kr 0 haneulgolf.com 1

3 recorded

Host 52.84.174.116

United States

Software information

MacOS file listing through .DS_Store file

Git configuration and history exposed

Create report

Create report

Create report

czur.co.kr*.czur.co.kr

haneulgolf.com*.haneulgolf.com

Domain summary