Apache
tcp/80
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc3ef9dc4018c2371b19640ccd80002e12
Found 4 files trough .DS_Store spidering: /admin /admin/application /assets /assets/scripts
Open service 199.59.243.228:80 · ww25.m.auto168.bet
2026-01-09 16:21
HTTP/1.1 200 OK
date: Fri, 09 Jan 2026 16:21:26 GMT
content-type: text/html; charset=utf-8
content-length: 1058
x-request-id: 352df161-f084-41e9-a091-71f8cbc1a493
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_LpwuJC0svrg13mDR3s4dZsnzDhJiC6xHNJDKkzDXVJkb4ETq3/JVGkKkWRzYWIBuYaK9h4/qPSywX4Mngq/oUg==
set-cookie: parking_session=352df161-f084-41e9-a091-71f8cbc1a493; expires=Fri, 09 Jan 2026 16:36:26 GMT; path=/
connection: close
<!doctype html>
<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_LpwuJC0svrg13mDR3s4dZsnzDhJiC6xHNJDKkzDXVJkb4ETq3/JVGkKkWRzYWIBuYaK9h4/qPSywX4Mngq/oUg==" lang="en" style="background: #2B2B2B;">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC">
<link rel="preconnect" href="https://www.google.com" crossorigin>
</head>
<body>
<div id="target" style="opacity: 0"></div>
<script>window.park = "eyJ1dWlkIjoiMzUyZGYxNjEtZjA4NC00MWU5LWEwOTEtNzFmOGNiYzFhNDkzIiwicGFnZV90aW1lIjoxNzY3OTc1Njg2LCJwYWdlX3VybCI6Imh0dHA6Ly93dzI1Lm0uYXV0bzE2OC5iZXQvIiwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX2hlYWRlcnMiOnt9LCJob3N0Ijoid3cyNS5tLmF1dG8xNjguYmV0IiwiaXAiOiIyMDcuMTU0LjE5Ny4xMTMifQo=";</script>
<script src="/bTXZlZFOd.js"></script>
</body>
</html>
Open service 199.59.243.228:443 · ww25.m.auto168.bet
2026-01-09 16:21
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 16:21:25 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1058
X-Request-Id: d1242d2f-aa94-4ea9-82a4-4eaa66aa338d
Cache-Control: no-store, max-age=0
Accept-Ch: sec-ch-prefers-color-scheme
Critical-Ch: sec-ch-prefers-color-scheme
Vary: sec-ch-prefers-color-scheme
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_LpwuJC0svrg13mDR3s4dZsnzDhJiC6xHNJDKkzDXVJkb4ETq3/JVGkKkWRzYWIBuYaK9h4/qPSywX4Mngq/oUg==
Set-Cookie: parking_session=d1242d2f-aa94-4ea9-82a4-4eaa66aa338d; expires=Fri, 09 Jan 2026 16:36:26 GMT; path=/
Connection: close
<!doctype html>
<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_LpwuJC0svrg13mDR3s4dZsnzDhJiC6xHNJDKkzDXVJkb4ETq3/JVGkKkWRzYWIBuYaK9h4/qPSywX4Mngq/oUg==" lang="en" style="background: #2B2B2B;">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC">
<link rel="preconnect" href="https://www.google.com" crossorigin>
</head>
<body>
<div id="target" style="opacity: 0"></div>
<script>window.park = "eyJ1dWlkIjoiZDEyNDJkMmYtYWE5NC00ZWE5LTgyYTQtNGVhYTY2YWEzMzhkIiwicGFnZV90aW1lIjoxNzY3OTc1Njg2LCJwYWdlX3VybCI6Imh0dHBzOi8vd3cyNS5tLmF1dG8xNjguYmV0LyIsInBhZ2VfbWV0aG9kIjoiR0VUIiwicGFnZV9yZXF1ZXN0Ijp7fSwicGFnZV9oZWFkZXJzIjp7fSwiaG9zdCI6Ind3MjUubS5hdXRvMTY4LmJldCIsImlwIjoiMTQzLjExMC4yMTcuMjQ0In0K";</script>
<script src="/bmiARWmrG.js"></script>
</body>
</html>
Open service 103.224.212.216:80 · auto168.bet
2025-12-31 14:34
HTTP/1.1 302 Found date: Wed, 31 Dec 2025 14:34:56 GMT server: Apache set-cookie: __tad=1767191696.4440925; expires=Sat, 29 Dec 2035 14:34:56 GMT; Max-Age=315360000 location: http://ww25.auto168.bet/?subid1=20260101-0134-5644-a5b7-c071dcfd035a content-length: 2 content-type: text/html; charset=UTF-8 connection: close