LeakIX - Host 5671k.com

Domain 5671k.com

United States

Shanghai Anchang Network Security Technology Co.,Ltd.

Software information

nginx nginx 1.12.2

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 154.218.10.29
Domain: 5671k.com
Port: 80
URL: http://5671k.com

First seen 2022-11-15 07:59

Severity: low
Fingerprint: 5f32cf5d6962f09cdafa5447dafa544751bf49c071aa561d299bfd4edab95310

Found 18 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/js
/m/media
/m/static
/qphtml
/static
/static-839qp
/ts-download
/tsnew-download
/yuebao

Found on 2022-11-15 07:59

Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e7ad6bcebe57a3e4283bf952703d9245b

Found 20 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/img/sites
/m/img/src
/m/js
/m/media
/m/static
/qphtml
/static
/static-839qp
/ts-download
/tsnew-download
/yuebao

Found on 2022-11-15 07:59

Severity: medium
Fingerprint: 5f32cf5d6962f09cd4047824d404782479c418999efa78c4e3f7c8295e26cf24

Found 35 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/img/sites
/m/img/src
/m/js
/m/media
/m/static
/qphtml
/static
/static/839qp
/static/839qp/html
/static/839qp/img
/static/839qp/img/new_games
/static/839qp/img/new_games/banner
/static/839qp/img/new_games/new_icon
/static/839qp/img/new_games/new_icon_a
/static/public
/static/public/active
/static/public/image
/static/public/image/live
/static-839qp
/static-839qp/css
/static-839qp/fonts
/static-839qp/img
/static-839qp/js
/ts-download
/tsnew-download
/yuebao

Found on 2022-11-15 07:59

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.247.230.108
Domain: www.5671k.com
Port: 443
URL: https://www.5671k.com

First seen 2022-11-15 07:58
- Severity: low
  Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d9930cc46f98a81177e8ab118660331a8
```
Found 12 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/qphtml
/static
/static-839qp
/ts-download
/tsnew-download
/yuebao
```
  Found on 2022-11-15 07:58
- Severity: low
  Fingerprint: 5f32cf5d6962f09cdafa5447dafa544751bf49c071aa561d299bfd4edab95310
```
Found 18 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/js
/m/media
/m/static
/qphtml
/static
/static-839qp
/ts-download
/tsnew-download
/yuebao
```
  Found on 2022-11-15 07:58
- Severity: low
  Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcf947301c83d9eabc5feba3166ca9415ec
```
Found 25 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/img/sites
/m/img/src
/m/js
/m/media
/m/static
/qphtml
/static
/static/839qp
/static/839qp/html
/static/839qp/img
/static/839qp/img/new_games
/static/public
/static-839qp
/ts-download
/tsnew-download
/yuebao
```
  Found on 2022-11-15 07:58
- Severity: low
  Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bca7f850319cd7993cf8ee2ef1f12ba2c9
```
Found 22 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/img/sites
/m/img/src
/m/js
/m/media
/m/static
/qphtml
/static
/static/839qp
/static/public
/static-839qp
/ts-download
/tsnew-download
/yuebao
```
  Found on 2022-11-15 07:58
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 216.224.123.154
Domain: 5671k.com
Port: 443
URL: https://5671k.com

First seen 2022-11-15 07:59
Last seen 2024-10-20 21:06
Open for 705 days

Severity: low
Fingerprint: 5f32cf5d6962f09c2a439cf82a439cf8ce7a926524c89518ee8eb21dfc5172d4

Found 31 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/check.html
/index.html
/m
/qphtml
/qphtml/active
/qphtml/css
/qphtml/favicon.ico
/qphtml/img
/qphtml/img/active
/qphtml/img/agency
/qphtml/img/agent
/qphtml/img/attendrule
/qphtml/img/public
/qphtml/img/sites
/qphtml/img/src
/qphtml/img/vipdetail
/qphtml/index.html
/qphtml/js
/qphtml/mp4
/README.md
/robots.txt
/static
/static-839qp
/ts-download
/tsnew-download
/yuebao

Found on 2024-10-20 21:06

Severity: medium
Fingerprint: 5f32cf5d6962f09c92dfb71592dfb7159851d7eecf36c59f164488b096814dd5

Found 45 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/check.html
/index.html
/m
/qphtml
/qphtml/active
/qphtml/css
/qphtml/favicon.ico
/qphtml/img
/qphtml/img/active
/qphtml/img/agency
/qphtml/img/agent
/qphtml/img/attendrule
/qphtml/img/public
/qphtml/img/sites
/qphtml/img/sites/839qp
/qphtml/img/sites/839qp/static
/qphtml/img/sites/cpyb
/qphtml/img/src
/qphtml/img/vipdetail
/qphtml/index.html
/qphtml/js
/qphtml/mp4
/README.md
/robots.txt
/static
/static-839qp
/ts-download
/ts-download/css
/ts-download/images
/ts-download/js
/ts-download/muse-ui
/tsnew-download
/tsnew-download/css
/tsnew-download/images
/tsnew-download/js
/tsnew-download/muse-ui
/yuebao
/yuebao/css
/yuebao/img
/yuebao/js

Found on 2024-09-24 11:37

Severity: medium
Fingerprint: 5f32cf5d6962f09c2acf29aa2acf29aa23b728ef12cbbf6e67da3f43e3552249

Found 33 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/check.html
/index.html
/m
/qphtml
/qphtml/active
/qphtml/css
/qphtml/favicon.ico
/qphtml/img
/qphtml/img/active
/qphtml/img/agency
/qphtml/img/agent
/qphtml/img/attendrule
/qphtml/img/public
/qphtml/img/sites
/qphtml/img/sites/839qp
/qphtml/img/sites/cpyb
/qphtml/img/src
/qphtml/img/vipdetail
/qphtml/index.html
/qphtml/js
/qphtml/mp4
/README.md
/robots.txt
/static
/static-839qp
/ts-download
/tsnew-download
/yuebao

Found on 2024-09-16 19:07

Severity: low
Fingerprint: 5f32cf5d6962f09cdafa5447dafa544751bf49c071aa561d299bfd4edab95310

Found 18 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/js
/m/media
/m/static
/qphtml
/static
/static-839qp
/ts-download
/tsnew-download
/yuebao

Found on 2022-11-15 07:59

Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e7ad6bcebe57a3e4283bf952703d9245b

Found 20 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/img/sites
/m/img/src
/m/js
/m/media
/m/static
/qphtml
/static
/static-839qp
/ts-download
/tsnew-download
/yuebao

Found on 2022-11-15 07:59

Severity: low
Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e455648281eb2dd686fb0a81f007cdaf106

Found 30 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/img/sites
/m/img/src
/m/js
/m/media
/m/static
/qphtml
/static
/static/839qp
/static/839qp/html
/static/839qp/img
/static/839qp/img/new_games
/static/839qp/img/new_games/banner
/static/839qp/img/new_games/new_icon
/static/839qp/img/new_games/new_icon_a
/static/public
/static/public/active
/static/public/image
/static-839qp
/ts-download
/tsnew-download
/yuebao

Found on 2022-11-15 07:59

Severity: low
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcf947301c83d9eabc5feba3166ca9415ec

Found 25 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/img/sites
/m/img/src
/m/js
/m/media
/m/static
/qphtml
/static
/static/839qp
/static/839qp/html
/static/839qp/img
/static/839qp/img/new_games
/static/public
/static-839qp
/ts-download
/tsnew-download
/yuebao

Found on 2022-11-15 07:59

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 154.218.10.29
Domain: www.5671k.com
Port: 80
URL: http://www.5671k.com

First seen 2022-11-15 07:58

Severity: low
Fingerprint: 5f32cf5d6962f09cdafa5447dafa544751bf49c071aa561d299bfd4edab95310

Found 18 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/js
/m/media
/m/static
/qphtml
/static
/static-839qp
/ts-download
/tsnew-download
/yuebao

Found on 2022-11-15 07:58

Severity: medium
Fingerprint: 5f32cf5d6962f09cd4047824d404782479c418999efa78c4e3f7c8295e26cf24

Found 35 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/img/sites
/m/img/src
/m/js
/m/media
/m/static
/qphtml
/static
/static/839qp
/static/839qp/html
/static/839qp/img
/static/839qp/img/new_games
/static/839qp/img/new_games/banner
/static/839qp/img/new_games/new_icon
/static/839qp/img/new_games/new_icon_a
/static/public
/static/public/active
/static/public/image
/static/public/image/live
/static-839qp
/static-839qp/css
/static-839qp/fonts
/static-839qp/img
/static-839qp/js
/ts-download
/tsnew-download
/yuebao

Found on 2022-11-15 07:58

Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e7ad6bcebe57a3e4283bf952703d9245b

Found 20 files trough .DS_Store spidering:

/.git
/888
/app-download
/app-download/images
/app-download/js
/m
/m/css
/m/font
/m/img
/m/img/sites
/m/img/src
/m/js
/m/media
/m/static
/qphtml
/static
/static-839qp
/ts-download
/tsnew-download
/yuebao

Found on 2022-11-15 07:58

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.247.230.108
Domain: 5671k.com
Port: 80
URL: http://5671k.com

First seen 2022-11-15 07:59
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229a6ca707
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = root@6669786.com:lottery-site/lottery-repo-839qp
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-11-15 07:59
  
  273 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 154.218.10.94
Domain: www.5671k.com
Port: 80
URL: http://www.5671k.com

First seen 2022-11-15 07:58
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229a6ca707
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = root@6669786.com:lottery-site/lottery-repo-839qp
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-11-15 07:58
  
  273 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 154.218.10.94
Domain: 5671k.com
Port: 443
URL: https://5671k.com

First seen 2022-11-15 07:59
Last seen 2024-10-20 21:06
Open for 705 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229a6ca707
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = root@6669786.com:lottery-site/lottery-repo-839qp
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-10-20 21:06
  
  273 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 154.218.10.94
Domain: www.5671k.com
Port: 443
URL: https://www.5671k.com

First seen 2022-11-15 07:58
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229a6ca707
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = root@6669786.com:lottery-site/lottery-repo-839qp
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2022-11-15 07:58
  
  273 Bytes
Create report

Open service 216.224.123.154:443 · 5671k.com

2024-10-20 21:06

HTTP/1.1 200 OK
Content-Type: text/html
Date: Sun, 20 Oct 2024 21:06:07 GMT
Etag: W/"6635ec42-ee7"
Last-Modified: Sat, 04 May 2024 08:05:22 GMT
Server: nginx/1.12.2
X-Cache: BYPASS
Connection: close
Transfer-Encoding: chunked

Page title: Welcome

<!DOCTYPE html>
<html>

<head>
  <meta charset="utf-8" />
  <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
  <title>Welcome</title>
  <style>
    html{
      height: 100%;
    }
    body{
      height: 100%;
    }
  </style>
  <script>
    function isMobile() {
      return !!(navigator.userAgent.match(
        /(phone|pad|pod|iPhone|iPod|ios|iPad|android|Mobile|BlackBerry|IEMobile|MQQBrowser|JUC|Fennec|wOSBrowser|BrowserNG|WebOS|Symbian|Windows Phone)/i
        ))
    }
    if (isMobile() !== false) {
      if (location.href.indexOf('#') > -1) {
        location.href = location.origin + '/m/#/home?' + (location.href.split('#')[1].split('?')[1] || '')
      } else {
        location.href = location.origin + '/m/#/home' + location.search
      }
    }
    (function () {
      var url = window.location.href,
        obj = {},
        keyvalue = [],
        key = '',
        value = '',
        parseString = url.substring(url.indexOf('?') + 1, url.length).split('&')
      for (var i in parseString) {
        keyvalue = parseString[i].split('=')
        key = keyvalue[0]
        value = keyvalue[1] && keyvalue[1].includes('#/') ? keyvalue[1].split('#/')[0] : keyvalue[1]
        obj[key] = value
      }

      if (obj.agent) {
        localStorage.setItem('agent', obj.agent)
      }
      if(obj.register){
        if(!localStorage.token){
              localStorage.setItem('register', obj.register)
          }
      }
    })()
    window.vis = true
    window.onblur = function () {
      window.vis = false
    }
    window.onfocus = function () {
      window.vis = true
      if (typeof window.balanceTask === 'function') {
        window.balanceTask()
      }
    }
    if(!isMobile()) {
      function loadJS( url, callback ) {
        var script = document.createElement('script'),
        fn = callback || function(){};
        script.type = 'text/javascript';

        //IE
        if(script.readyState){
          script.onreadystatechange = function(){
            if( script.readyState == 'loaded' || script.readyState == 'complete' ){
                script.onreadystatechange = null;
                fn()
            }
          }
        }else{
          // 其他浏览器
          script.onload = function(){
            fn()
          }
        }
        script.src = url;
        document.getElementsByTagName('head')[0].appendChild(script);
      }

      let loadTable = ['/static/public/js/stomp.js', '/static/public/js/qrcode.js'
      , `https://cstaticdun.126.net/load.min.js?t=1714127654714`,
      `https://acstatic-dun.126.net/tool.min.js?t=1714127654714`
      ]
      // 用法
      loadTable.forEach( (url) => {
        loadJS(url,function(e){
          // console.log("🚀 ~ file: index.html ~ line 85 ~ loadJS ~ url loaded success", url)
        })
      })

    }
  </script>
  <link rel="shortcut icon" href="/static/839qp/img/favicon.ico" type="image/x-icon">
  <!-- <script src="/static/public/js/stomp.js"></script>
  <script src="/static/public/js/qrcode.js"></script>
  <script src="https://cstaticdun.126.net/load.min.js?t=201903281201"></script>
  <script type="text/javascript" src="https://acstatic-dun.126.net/tool.min.js?t=201903281201"></script> -->
<link href="/static-839qp/style.css" rel="stylesheet"><link href="/static-839qp/css/pages/839qp/index.7ffac360b0fff44d6e838b140222279b.css" rel="stylesheet"></head>

<body>
  <div id="vnstApp">

  </div>
<script type="text/javascript" src="/static-839qp/js/manifest.253ee9371934bde266a4.js?v=2024-4-26-18:33:27"></script><script type="text/javascript" src="/static-839qp/js/vendor.f2fd394ddb8b1898e20a.js?v=2024-4-26-18:33:27"></script><script type="text/javascript" src="/static-839qp/js/pages/839qp/index.2af5021e5386dc53640e.js?v=2024-4-26-18:33:27"></script></body>

</html>

Found 2024-10-20 by HttpPlugin