LeakIX - Host 65.9.95.15

Host 65.9.95.15

United States

AMAZON-02

Software information

AmazonS3

tcp/443

Apache Apache 2

tcp/80

Apache Apache

tcp/443

CloudFront

tcp/443 tcp/80

nginx nginx

tcp/443

nginx nginx 1.20.0

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.95.15
Domain: kichi.io
Port: 443
URL: https://kichi.io

First seen 2024-12-03 06:45
Last seen 2026-01-16 17:17
Open for 409 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfca832ed7f0d10d1b74f1be2b42c67248f
```
Found 4 files trough .DS_Store spidering:

/fonts
/img
/mov
/svg
```
  Found on 2026-01-16 17:17
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 65.9.95.15
Domain: kichi.io
Port: 443
URL: https://kichi.io

First seen 2025-10-17 00:58
Last seen 2026-01-16 17:17
Open for 91 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d656d565bd9aecfb5f2a815ad856d815f33b801ea3
```
GraphQL introspection enabled at /api/graphql
Types: 32 (by kind: ENUM: 2, INPUT_OBJECT: 7, OBJECT: 18, SCALAR: 5)
Operations:
- Query: Query | fields: decks, deletedCards, deletedDecks, deletedMediaItems, flashcards
- Mutation: Mutation | fields: sync
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-16 17:17
  
  42.8 kBytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.95.15
Domain: sevenre-dev.com
Port: 443
URL: https://sevenre-dev.com

First seen 2023-03-07 00:34
Last seen 2026-01-16 11:18
Open for 1046 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d86bfb45c8612ad1a940c4fe9f347418fd
```
Found 8 files trough .DS_Store spidering:

/assets
/assets/images
/assets/js
/assets/js/pre-js
/assets/lottie-anim
/vendor
/vendor/normalize-css
/vendor/slick
```
  Found on 2026-01-16 11:18
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.95.15
Domain: biblezonedaily.com
Port: 443
URL: https://biblezonedaily.com

First seen 2022-12-10 02:08
Last seen 2026-01-15 21:34
Open for 1132 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0c6c8f30f1373744f3efbb68819deea20
```
Found 13 files trough .DS_Store spidering:

/about.html
/contact.html
/images
/images/bg.jpg
/images/biblezone.png
/images/step-1.png
/images/step-2.png
/images/step-3.png
/index.html
/privacy.html
/styles.css
/terms.html
/uninstall.html
```
  Found on 2026-01-15 21:34
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 65.9.95.15
Domain: omnbzkr7l4.xyz
Port: 443
URL: https://omnbzkr7l4.xyz

First seen 2024-10-04 13:25
Last seen 2024-10-08 21:37
Open for 4 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0904d808d7e02e9ac8f638f0164866dd3
```
Found 13 files trough .DS_Store spidering:

/.git
/.gitignore
/collect_301.html
/enter - 副本.html
/enter.html
/favicon.ico
/iframe.html
/index copy.html
/index.html
/QRcode - 副本.html
/QRcode.html
/README.md
/static
```
  Found on 2024-10-08 21:37
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 65.9.95.15
Domain: omnbzkr7l4.xyz
Port: 443
URL: https://omnbzkr7l4.xyz

First seen 2023-11-18 07:10
Last seen 2024-09-30 20:46
Open for 317 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652201fa2920
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://ngit.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-30 20:46
  
  240 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-09-08 22:40
  
  239 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 143.204.215.72
Domain: d.atv999.org
Port: 80
URL: http://d.atv999.org

First seen 2023-02-02 21:26
Last seen 2024-02-02 14:28
Open for 364 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225bc514f6
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://www.yc2common.com/web-page/91tvweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-02-02 14:28
  
  271 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229f8ece2c
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://cdn-tv.hnmting.com/group-twp/91tvweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2023-02-02 21:26
  
  273 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 143.204.215.72
Domain: d.atv111.org
Port: 443
URL: https://d.atv111.org

First seen 2023-02-02 21:26
Last seen 2024-02-02 14:28
Open for 364 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225bc514f6
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://www.yc2common.com/web-page/91tvweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-02-02 14:28
  
  271 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229f8ece2c
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://cdn-tv.hnmting.com/group-twp/91tvweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2023-02-02 21:26
  
  273 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 143.204.215.79
Domain: d.atv333.org
Port: 80
URL: http://d.atv333.org

First seen 2023-02-02 21:26
Last seen 2024-02-02 12:58
Open for 364 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225bc514f6
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://www.yc2common.com/web-page/91tvweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-02-02 12:58
  
  271 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229f8ece2c
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://cdn-tv.hnmting.com/group-twp/91tvweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2023-02-02 21:26
  
  273 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 65.9.95.15
Domain: 0hjlfoto5t.xyz
Port: 443
URL: https://0hjlfoto5t.xyz

First seen 2023-10-23 09:52
Last seen 2024-02-02 02:33
Open for 101 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-02 02:33
  
  239 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 143.204.215.31
Domain: d.atv222.org
Port: 443
URL: https://d.atv222.org

First seen 2023-02-02 21:26
Last seen 2024-02-02 00:04
Open for 364 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225bc514f6
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://www.yc2common.com/web-page/91tvweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-02-02 00:04
  
  271 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229f8ece2c
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://cdn-tv.hnmting.com/group-twp/91tvweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2023-02-02 21:26
  
  273 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 143.204.215.79
Domain: d.atv222.org
Port: 80
URL: http://d.atv222.org

First seen 2023-02-02 21:26
Last seen 2024-02-02 00:04
Open for 364 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225bc514f6
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://www.yc2common.com/web-page/91tvweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-02-02 00:04
  
  271 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229f8ece2c
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://cdn-tv.hnmting.com/group-twp/91tvweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2023-02-02 21:26
  
  273 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 65.9.95.15
Domain: t.tmor8.com
Port: 443
URL: https://t.tmor8.com

First seen 2022-12-07 14:37
Last seen 2023-03-20 08:57
Open for 102 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224b1cb545
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://cdn-tv.hnmting.com/linmo/tm_web_new.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-12-07 14:37
  
  272 Bytes
Create report

Open service 65.9.95.15:443 · www.eurocolchoes.com

2026-01-11 11:09

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Date: Sun, 11 Jan 2026 11:09:19 GMT
X-VTEX-Cache-Server: ip-10-203-51-57.ec2.internal
X-VTEX-Cache-Time: 0.000
Server: nginx
Cache-Control: public, max-age=608, s-maxage=60, stale-while-revalidate=1200, stale-if-error=3600
ETag: "AE5CBEBCD9CD6DB96548961747C04649"
X-VTEX-Janus-Router-Backend-App: io-production-vstore-group-1-1a-cl4
X-Router-Cache: MISS
X-Vtex-Io-Cluster-Id: prod-dj-iostore-eks-use1a-cl4
X-Frame-Options: SAMEORIGIN
x-vtex-product: store
x-vtex-renderer: render@8
x-vtex-etag-control: public, max-age=608
Link: <https://tezm99.vtexassets.com>; rel="dns-prefetch",<https://tezm99.vtexassets.com>; rel="preconnect"; crossorigin,<https://www.google-analytics.com>; rel="dns-prefetch",<https://www.googletagmanager.com>; rel="dns-prefetch",<https://connect.facebook.net>; rel="dns-prefetch"
X-Vtex-Router-Elapsed-Time: 00:00:00.6516668
X-Request-ID: b514221dd7e84c24b277f5c6e50aacab
X-Vtex-Router-Version: 9.17.17
X-Vtex-Backend-Elapsed-Time: 00:00:00.6452426
X-VTEX-Cache-Status: HIT
X-Powered-By-VTEX-Cache: 2.6.1
Vary: Accept-Encoding,accept-encoding
X-Cache: Miss from cloudfront
Via: 1.1 b5f551be30f63eca57ca04273cb75994.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: oxquudLl_q0X-hYmYt5b-KKFLKiPI4aI1kx4OfpOCdIczhrexvwvLA==

Found 2026-01-11 by HttpPlugin

Create report

Open service 65.9.95.15:80 · www.eurocolchoes.com

2026-01-11 11:09

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 11 Jan 2026 11:09:19 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://www.eurocolchoes.com/
X-Cache: Redirect from cloudfront
Via: 1.1 b031f43146c9801101822eabdc464390.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: BOwJnm8UhB7TbZzm6RE3sYFqYXczeYT0AgrmTDn2oJ8nYZEM6LOFVw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-11 by HttpPlugin

Create report

Open service 65.9.95.15:443 · litefcp-test-qwjlyivexc.878311921321.lambda-lite.global.on.aws

2026-01-10 00:14

HTTP/1.1 502 Bad Gateway
Server: CloudFront
Date: Sat, 10 Jan 2026 00:14:51 GMT
Content-Type: text/html
Content-Length: 960
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 8197d89da72990bb606996d5e7c73ab6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: QwxJWybRceARZ38s0bUhz6K6W2S5J3xCy2SddltPyqBlaQTQxirMsA==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>502 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
CloudFront wasn't able to resolve the origin domain name.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: QwxJWybRceARZ38s0bUhz6K6W2S5J3xCy2SddltPyqBlaQTQxirMsA==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-10 by HttpPlugin

Create report

Open service 65.9.95.15:80 · litefcp-test-qwjlyivexc.878311921321.lambda-lite.global.on.aws

2026-01-10 00:14

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Sat, 10 Jan 2026 00:14:50 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 bb390afd921c223e0fe4921fbc23bbe8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: F-LB1gK4-gIHaTXd8tYeI8ygoeMicUKR3oIODuQu5O8YtAZ0y1Kw3A==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: F-LB1gK4-gIHaTXd8tYeI8ygoeMicUKR3oIODuQu5O8YtAZ0y1Kw3A==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-10 by HttpPlugin