nginx 1.20.2
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c026392ab026392ab1b17978558eca234111763eee3bd8303
Found 7 files trough .DS_Store spidering: /Adjustscript.js /d /globals.css /img /index.html /js /style.css
Open service 18.245.31.67:443 · bz5.link
2026-01-23 04:52
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 4631
Connection: close
Server: nginx/1.20.2
Date: Fri, 23 Jan 2026 04:52:11 GMT
Last-Modified: Fri, 27 Sep 2024 08:01:00 GMT
Accept-Ranges: bytes
ETag: "66f6663c-1217"
X-Cache: Hit from cloudfront
Via: 1.1 b81e506afc0d8b7cd6094e636331ca78.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P8
X-Amz-Cf-Id: 9dtoUEipXxr6xkUr-BlV9ZNEZhbZSWlyietaiLulQC7-dwxXtijjtQ==
Age: 1
Page title: bz5.link
<html>
<head>
<link rel="shortcut icon" href="./img/favicon.png" />
<title>bz5.link</title>
<meta name="description" content="vn123t" />
<meta name="og:type" content="website" />
<meta name="og:site_name" content="vnd88" />
<meta name="og:title" content="vnd88" />
<meta name="og:description" content="vnd88" />
<meta name="og:image" content="./img/20231110-163919.jpeg" />
<meta name="twitter:card" content="photo" />
<meta name="twitter:title" content="vnd88" />
<meta name="twitter:description" content="vnd88" />
<meta name="twitter:image:width" content="320px" />
<meta name="twitter:image:height" content="320px" />
<meta name="twitter:image:src" content="./img/20231110-163919.jpeg" />
<meta name="apple-mobile-web-app-capable" content="yes" />
<meta name="mobile-web-app-capable" content="yes" />
<meta name="apple-mobile-web-app-status-bar-style" content="default" />
<meta name="apple-mobile-web-app-title" content="vnd88" />
<link rel="stylesheet" href="globals.css" />
<link rel="stylesheet" href="style.css" />
<script>
!(function (f, b, e, v, n, t, s) {
if (f.fbq) return;
n = f.fbq = function () {
n.callMethod
? n.callMethod.apply(n, arguments)
: n.queue.push(arguments);
};
if (!f._fbq) f._fbq = n;
n.push = n;
n.loaded = !0;
n.version = "2.0";
n.queue = [];
t = b.createElement(e);
t.async = !0;
t.src = v;
s = b.getElementsByTagName(e)[0];
s.parentNode.insertBefore(t, s);
})(
window,
document,
"script",
"https://connect.facebook.net/en_US/fbevents.js"
);
fbq("init", "860319795700314");
fbq("track", "PageView");
</script>
<noscript>
<img height="1" width="1" style="display: none"
src="https://www.facebook.com/tr?id=860319795700314&ev=PageView&noscript=1" />
</noscript>
<!-- End Facebook Pixel Code -->
<script src="Adjustscript.js"></script>
<script>
// get query string, and parse it with URLSearchParams
const urlParams = new URLSearchParams(window.location.search);
//p0 = urlParams.get("p0") and fallback to "default"
p0 = urlParams.get("p0");
p1 = urlParams.get("p1");
p2 = urlParams.get("p2");
p3 = urlParams.get("p3");
p4 = urlParams.get("p4");
p5 = urlParams.get("p5");
p6 = urlParams.get("p6");
fbPid = getFbPid();
fbClickId = urlParams.get("fbclid");
apkUrl = "https://bz5.link/d/vnd88t15.apk";
var userAgent = navigator.userAgent || navigator.vendor || window.opera;
if (/iPad|iPhone|iPod/.test(userAgent) && !window.MSStream) {
apkUrl = "https://apps.apple.com/app/aaa-o-drag-pacman/id6615062223:w";
}
url = buildURL(p0, p1, p2, p3, p4, p5, p6, apkUrl, fbClickId, fbPid);
// add links
window.addEventListener("DOMContentLoaded", function () {
if (url) {
var elements = document.querySelectorAll(".AdjustTracker");
for (var i = 0; i < elements.length; i++) {
elements[i].setAttribute("href", url);
}
} else {
var elements = document.querySelectorAll(".AdjustTracker");
for (var i = 0; i < elements.length; i++) {
elements[i].setAttribute("href", apkUrl);
}
}
});
</script>
<script>
var _hmt = _hmt || [];
(function () {
var hm = document.createElement("script");
hm.src = "https://hm.baidu.com/hm.js?847727ea81c2cabfa0f565b1fdb610a6";
var s = document.getElementsByTagName("script")[0];
s.parentNode.insertBefore(hm, s);
})();
</script>
</head>
<body onload="chackAgent()">
<div class="frame">
<div class="div">
<div class="overlap-group">
<a target="_blank" rel="noopener noreferrer" onclick="fbq('track', 'click_download_button');"
class="AdjustTracker"><img class="PH-2" src="img/VND88-01.png" /></a>
<a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTracker"
onclick="fbq('track', 'click_download_button');">
<img class="element" src="img/VND88-
Open service 18.245.31.67:443 · bz5.link
2026-01-09 17:42
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 4631
Connection: close
Server: nginx/1.20.2
Date: Fri, 09 Jan 2026 17:42:01 GMT
Last-Modified: Fri, 27 Sep 2024 08:01:00 GMT
Accept-Ranges: bytes
ETag: "66f6663c-1217"
X-Cache: Hit from cloudfront
Via: 1.1 9eb1733bea847c3a8f4910adebcc8146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P8
X-Amz-Cf-Id: No_xdX3aCsTPFgC8ezMgf7gDtcxWELRh9M1m0p0WmQlQ_Hm4vtbaEw==
Age: 2
Page title: bz5.link
<html>
<head>
<link rel="shortcut icon" href="./img/favicon.png" />
<title>bz5.link</title>
<meta name="description" content="vn123t" />
<meta name="og:type" content="website" />
<meta name="og:site_name" content="vnd88" />
<meta name="og:title" content="vnd88" />
<meta name="og:description" content="vnd88" />
<meta name="og:image" content="./img/20231110-163919.jpeg" />
<meta name="twitter:card" content="photo" />
<meta name="twitter:title" content="vnd88" />
<meta name="twitter:description" content="vnd88" />
<meta name="twitter:image:width" content="320px" />
<meta name="twitter:image:height" content="320px" />
<meta name="twitter:image:src" content="./img/20231110-163919.jpeg" />
<meta name="apple-mobile-web-app-capable" content="yes" />
<meta name="mobile-web-app-capable" content="yes" />
<meta name="apple-mobile-web-app-status-bar-style" content="default" />
<meta name="apple-mobile-web-app-title" content="vnd88" />
<link rel="stylesheet" href="globals.css" />
<link rel="stylesheet" href="style.css" />
<script>
!(function (f, b, e, v, n, t, s) {
if (f.fbq) return;
n = f.fbq = function () {
n.callMethod
? n.callMethod.apply(n, arguments)
: n.queue.push(arguments);
};
if (!f._fbq) f._fbq = n;
n.push = n;
n.loaded = !0;
n.version = "2.0";
n.queue = [];
t = b.createElement(e);
t.async = !0;
t.src = v;
s = b.getElementsByTagName(e)[0];
s.parentNode.insertBefore(t, s);
})(
window,
document,
"script",
"https://connect.facebook.net/en_US/fbevents.js"
);
fbq("init", "860319795700314");
fbq("track", "PageView");
</script>
<noscript>
<img height="1" width="1" style="display: none"
src="https://www.facebook.com/tr?id=860319795700314&ev=PageView&noscript=1" />
</noscript>
<!-- End Facebook Pixel Code -->
<script src="Adjustscript.js"></script>
<script>
// get query string, and parse it with URLSearchParams
const urlParams = new URLSearchParams(window.location.search);
//p0 = urlParams.get("p0") and fallback to "default"
p0 = urlParams.get("p0");
p1 = urlParams.get("p1");
p2 = urlParams.get("p2");
p3 = urlParams.get("p3");
p4 = urlParams.get("p4");
p5 = urlParams.get("p5");
p6 = urlParams.get("p6");
fbPid = getFbPid();
fbClickId = urlParams.get("fbclid");
apkUrl = "https://bz5.link/d/vnd88t15.apk";
var userAgent = navigator.userAgent || navigator.vendor || window.opera;
if (/iPad|iPhone|iPod/.test(userAgent) && !window.MSStream) {
apkUrl = "https://apps.apple.com/app/aaa-o-drag-pacman/id6615062223:w";
}
url = buildURL(p0, p1, p2, p3, p4, p5, p6, apkUrl, fbClickId, fbPid);
// add links
window.addEventListener("DOMContentLoaded", function () {
if (url) {
var elements = document.querySelectorAll(".AdjustTracker");
for (var i = 0; i < elements.length; i++) {
elements[i].setAttribute("href", url);
}
} else {
var elements = document.querySelectorAll(".AdjustTracker");
for (var i = 0; i < elements.length; i++) {
elements[i].setAttribute("href", apkUrl);
}
}
});
</script>
<script>
var _hmt = _hmt || [];
(function () {
var hm = document.createElement("script");
hm.src = "https://hm.baidu.com/hm.js?847727ea81c2cabfa0f565b1fdb610a6";
var s = document.getElementsByTagName("script")[0];
s.parentNode.insertBefore(hm, s);
})();
</script>
</head>
<body onload="chackAgent()">
<div class="frame">
<div class="div">
<div class="overlap-group">
<a target="_blank" rel="noopener noreferrer" onclick="fbq('track', 'click_download_button');"
class="AdjustTracker"><img class="PH-2" src="img/VND88-01.png" /></a>
<a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTracker"
onclick="fbq('track', 'click_download_button');">
<img class="element" src="img/VND88-
Open service 18.245.31.67:443 · bz5.link
2026-01-02 22:55
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 4631
Connection: close
Server: nginx/1.20.2
Date: Fri, 02 Jan 2026 22:55:48 GMT
Last-Modified: Fri, 27 Sep 2024 08:01:00 GMT
Accept-Ranges: bytes
ETag: "66f6663c-1217"
X-Cache: Hit from cloudfront
Via: 1.1 085a99da24636ecdd172026920429788.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P8
X-Amz-Cf-Id: HZaq8DOkTS1VejPy_sRcRCI8pGIMbgHeI3LQj523YhY8bUGUHLKpiA==
Page title: bz5.link
<html>
<head>
<link rel="shortcut icon" href="./img/favicon.png" />
<title>bz5.link</title>
<meta name="description" content="vn123t" />
<meta name="og:type" content="website" />
<meta name="og:site_name" content="vnd88" />
<meta name="og:title" content="vnd88" />
<meta name="og:description" content="vnd88" />
<meta name="og:image" content="./img/20231110-163919.jpeg" />
<meta name="twitter:card" content="photo" />
<meta name="twitter:title" content="vnd88" />
<meta name="twitter:description" content="vnd88" />
<meta name="twitter:image:width" content="320px" />
<meta name="twitter:image:height" content="320px" />
<meta name="twitter:image:src" content="./img/20231110-163919.jpeg" />
<meta name="apple-mobile-web-app-capable" content="yes" />
<meta name="mobile-web-app-capable" content="yes" />
<meta name="apple-mobile-web-app-status-bar-style" content="default" />
<meta name="apple-mobile-web-app-title" content="vnd88" />
<link rel="stylesheet" href="globals.css" />
<link rel="stylesheet" href="style.css" />
<script>
!(function (f, b, e, v, n, t, s) {
if (f.fbq) return;
n = f.fbq = function () {
n.callMethod
? n.callMethod.apply(n, arguments)
: n.queue.push(arguments);
};
if (!f._fbq) f._fbq = n;
n.push = n;
n.loaded = !0;
n.version = "2.0";
n.queue = [];
t = b.createElement(e);
t.async = !0;
t.src = v;
s = b.getElementsByTagName(e)[0];
s.parentNode.insertBefore(t, s);
})(
window,
document,
"script",
"https://connect.facebook.net/en_US/fbevents.js"
);
fbq("init", "860319795700314");
fbq("track", "PageView");
</script>
<noscript>
<img height="1" width="1" style="display: none"
src="https://www.facebook.com/tr?id=860319795700314&ev=PageView&noscript=1" />
</noscript>
<!-- End Facebook Pixel Code -->
<script src="Adjustscript.js"></script>
<script>
// get query string, and parse it with URLSearchParams
const urlParams = new URLSearchParams(window.location.search);
//p0 = urlParams.get("p0") and fallback to "default"
p0 = urlParams.get("p0");
p1 = urlParams.get("p1");
p2 = urlParams.get("p2");
p3 = urlParams.get("p3");
p4 = urlParams.get("p4");
p5 = urlParams.get("p5");
p6 = urlParams.get("p6");
fbPid = getFbPid();
fbClickId = urlParams.get("fbclid");
apkUrl = "https://bz5.link/d/vnd88t15.apk";
var userAgent = navigator.userAgent || navigator.vendor || window.opera;
if (/iPad|iPhone|iPod/.test(userAgent) && !window.MSStream) {
apkUrl = "https://apps.apple.com/app/aaa-o-drag-pacman/id6615062223:w";
}
url = buildURL(p0, p1, p2, p3, p4, p5, p6, apkUrl, fbClickId, fbPid);
// add links
window.addEventListener("DOMContentLoaded", function () {
if (url) {
var elements = document.querySelectorAll(".AdjustTracker");
for (var i = 0; i < elements.length; i++) {
elements[i].setAttribute("href", url);
}
} else {
var elements = document.querySelectorAll(".AdjustTracker");
for (var i = 0; i < elements.length; i++) {
elements[i].setAttribute("href", apkUrl);
}
}
});
</script>
<script>
var _hmt = _hmt || [];
(function () {
var hm = document.createElement("script");
hm.src = "https://hm.baidu.com/hm.js?847727ea81c2cabfa0f565b1fdb610a6";
var s = document.getElementsByTagName("script")[0];
s.parentNode.insertBefore(hm, s);
})();
</script>
</head>
<body onload="chackAgent()">
<div class="frame">
<div class="div">
<div class="overlap-group">
<a target="_blank" rel="noopener noreferrer" onclick="fbq('track', 'click_download_button');"
class="AdjustTracker"><img class="PH-2" src="img/VND88-01.png" /></a>
<a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTracker"
onclick="fbq('track', 'click_download_button');">
<img class="element" src="img/VND88-
Open service 18.245.31.67:443 · bz5.link
2025-12-22 18:13
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 4631
Connection: close
Server: nginx/1.20.2
Date: Mon, 22 Dec 2025 18:13:27 GMT
Last-Modified: Fri, 27 Sep 2024 08:01:00 GMT
Accept-Ranges: bytes
ETag: "66f6663c-1217"
X-Cache: Hit from cloudfront
Via: 1.1 7e3b2ebcc561cb84cf59a80a76eb7e28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P8
X-Amz-Cf-Id: UYWsg6ZTApNj5oNMcOXFssS3QJbOddzVkbavoLggxP-EKZfvZl-RVQ==
Page title: bz5.link
<html>
<head>
<link rel="shortcut icon" href="./img/favicon.png" />
<title>bz5.link</title>
<meta name="description" content="vn123t" />
<meta name="og:type" content="website" />
<meta name="og:site_name" content="vnd88" />
<meta name="og:title" content="vnd88" />
<meta name="og:description" content="vnd88" />
<meta name="og:image" content="./img/20231110-163919.jpeg" />
<meta name="twitter:card" content="photo" />
<meta name="twitter:title" content="vnd88" />
<meta name="twitter:description" content="vnd88" />
<meta name="twitter:image:width" content="320px" />
<meta name="twitter:image:height" content="320px" />
<meta name="twitter:image:src" content="./img/20231110-163919.jpeg" />
<meta name="apple-mobile-web-app-capable" content="yes" />
<meta name="mobile-web-app-capable" content="yes" />
<meta name="apple-mobile-web-app-status-bar-style" content="default" />
<meta name="apple-mobile-web-app-title" content="vnd88" />
<link rel="stylesheet" href="globals.css" />
<link rel="stylesheet" href="style.css" />
<script>
!(function (f, b, e, v, n, t, s) {
if (f.fbq) return;
n = f.fbq = function () {
n.callMethod
? n.callMethod.apply(n, arguments)
: n.queue.push(arguments);
};
if (!f._fbq) f._fbq = n;
n.push = n;
n.loaded = !0;
n.version = "2.0";
n.queue = [];
t = b.createElement(e);
t.async = !0;
t.src = v;
s = b.getElementsByTagName(e)[0];
s.parentNode.insertBefore(t, s);
})(
window,
document,
"script",
"https://connect.facebook.net/en_US/fbevents.js"
);
fbq("init", "860319795700314");
fbq("track", "PageView");
</script>
<noscript>
<img height="1" width="1" style="display: none"
src="https://www.facebook.com/tr?id=860319795700314&ev=PageView&noscript=1" />
</noscript>
<!-- End Facebook Pixel Code -->
<script src="Adjustscript.js"></script>
<script>
// get query string, and parse it with URLSearchParams
const urlParams = new URLSearchParams(window.location.search);
//p0 = urlParams.get("p0") and fallback to "default"
p0 = urlParams.get("p0");
p1 = urlParams.get("p1");
p2 = urlParams.get("p2");
p3 = urlParams.get("p3");
p4 = urlParams.get("p4");
p5 = urlParams.get("p5");
p6 = urlParams.get("p6");
fbPid = getFbPid();
fbClickId = urlParams.get("fbclid");
apkUrl = "https://bz5.link/d/vnd88t15.apk";
var userAgent = navigator.userAgent || navigator.vendor || window.opera;
if (/iPad|iPhone|iPod/.test(userAgent) && !window.MSStream) {
apkUrl = "https://apps.apple.com/app/aaa-o-drag-pacman/id6615062223:w";
}
url = buildURL(p0, p1, p2, p3, p4, p5, p6, apkUrl, fbClickId, fbPid);
// add links
window.addEventListener("DOMContentLoaded", function () {
if (url) {
var elements = document.querySelectorAll(".AdjustTracker");
for (var i = 0; i < elements.length; i++) {
elements[i].setAttribute("href", url);
}
} else {
var elements = document.querySelectorAll(".AdjustTracker");
for (var i = 0; i < elements.length; i++) {
elements[i].setAttribute("href", apkUrl);
}
}
});
</script>
<script>
var _hmt = _hmt || [];
(function () {
var hm = document.createElement("script");
hm.src = "https://hm.baidu.com/hm.js?847727ea81c2cabfa0f565b1fdb610a6";
var s = document.getElementsByTagName("script")[0];
s.parentNode.insertBefore(hm, s);
})();
</script>
</head>
<body onload="chackAgent()">
<div class="frame">
<div class="div">
<div class="overlap-group">
<a target="_blank" rel="noopener noreferrer" onclick="fbq('track', 'click_download_button');"
class="AdjustTracker"><img class="PH-2" src="img/VND88-01.png" /></a>
<a target="_blank" rel="noopener noreferrer" class="download-btn AdjustTracker"
onclick="fbq('track', 'click_download_button');">
<img class="element" src="img/VND88-