cloudflare
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: medium
Fingerprint: 5f32cf5d6962f09cac85b122ac85b12273ffed16f1b550c33f51dc40aff32240
Found 99 files trough .DS_Store spidering: /alllang /alllang/static /alllang/static/css /alllang/static/font /alllang/static/image /alllang/static/images /alllang/static/js /alllang/static/picture /app /app/a.mobileconfig /app/css /app/img /app/img/0665a_1_600_411.jpg /app/img/0df0c_0_600_411.jpg /app/img/31cb4_4_200_200.png /app/img/5cbc4_5_1242_2007.png /app/img/9179e_3_600_411.jpg /app/img/a.png /app/index.html /app/js /app/xxx.mobileprovision /get-test /layer /layer/mobile /layer/theme /mdate /p_static1 /p_static1/css /p_static1/img /p_static1/img1 /p_static1/js /public /public/css /public/img /public/js /public/js/layer_mobile /public/js/picker /red /red/bootstrap /red/bootstrap/css /red/bootstrap/js /red/swiper /static /static/images /static/myself /static/plugs /static/plugs/angular /static/plugs/awesome /static/plugs/ckeditor /static/plugs/echarts /static/plugs/jquery /static/plugs/layui /static/plugs/michat /static/plugs/require /static/plugs/socket /static/plugs/supersized /static/plugs/ztree /static/theme /static/theme/css /static/theme/img /static/theme/img/login /static/theme/img/wechat /static_down /static_down/css /static_down/images /static_down/js /static_down/picture /static_indonesia /static_indonesia/headimg /static_indonesia/img /static_new /static_new/css /static_new/img /static_new/js /static_new/mobiscroll /static_new6 /static_new6/css /static_new6/headimg /static_new6/img /static_new6/js /statics /statics/css /statics/img /statics/js /statics/vender /statics/vender/intl-tel-input-master /statics/vender/intl-tel-input-master/css /statics/vender/intl-tel-input-master/img /statics/vender/intl-tel-input-master/js /upload /upload/07f9bd299a7e293c /upload/0ecd73550d517532 /upload/1394cea241781fa6 /upload/down /upload/goods_img /upload/goods_img/大家电 /upload/goods_img/户外服饰 /upload/goods_img/手机数码 /upload/goods_img/特色美食
Severity: medium
Fingerprint: 5f32cf5d6962f09c62fb79d662fb79d67e28f37aede00ce7c2bf71bcf29fa055
Found 95 files trough .DS_Store spidering: /alllang /alllang/static /alllang/static/css /alllang/static/font /alllang/static/image /alllang/static/images /alllang/static/js /alllang/static/picture /app /app/a.mobileconfig /app/css /app/img /app/img/0665a_1_600_411.jpg /app/img/0df0c_0_600_411.jpg /app/img/31cb4_4_200_200.png /app/img/5cbc4_5_1242_2007.png /app/img/9179e_3_600_411.jpg /app/img/a.png /app/index.html /app/js /app/xxx.mobileprovision /get-test /layer /layer/mobile /layer/theme /mdate /p_static1 /p_static1/css /p_static1/img /p_static1/img1 /p_static1/js /public /public/css /public/img /public/js /public/js/layer_mobile /public/js/picker /red /red/bootstrap /red/bootstrap/css /red/bootstrap/js /red/swiper /static /static/images /static/myself /static/plugs /static/plugs/angular /static/plugs/awesome /static/plugs/ckeditor /static/plugs/echarts /static/plugs/jquery /static/plugs/layui /static/plugs/michat /static/plugs/require /static/plugs/socket /static/plugs/supersized /static/plugs/ztree /static/theme /static/theme/css /static/theme/img /static/theme/img/login /static/theme/img/wechat /static_down /static_down/css /static_down/images /static_down/js /static_down/picture /static_indonesia /static_indonesia/headimg /static_indonesia/img /static_new /static_new/css /static_new/img /static_new/js /static_new/mobiscroll /static_new6 /static_new6/css /static_new6/headimg /static_new6/img /static_new6/js /statics /statics/css /statics/img /statics/js /statics/vender /statics/vender/intl-tel-input-master /statics/vender/intl-tel-input-master/css /statics/vender/intl-tel-input-master/img /statics/vender/intl-tel-input-master/js /upload /upload/07f9bd299a7e293c /upload/0ecd73550d517532 /upload/1394cea241781fa6 /upload/down /upload/goods_img
Severity: medium
Fingerprint: 5f32cf5d6962f09ca29b58f1a29b58f11c494725db774866a49c1923fe696545
Found 78 files trough .DS_Store spidering: /alllang /alllang/static /alllang/static/css /alllang/static/font /alllang/static/image /alllang/static/images /alllang/static/js /alllang/static/picture /app /app/a.mobileconfig /app/css /app/img /app/img/0665a_1_600_411.jpg /app/img/0df0c_0_600_411.jpg /app/img/31cb4_4_200_200.png /app/img/5cbc4_5_1242_2007.png /app/img/9179e_3_600_411.jpg /app/img/a.png /app/index.html /app/js /app/xxx.mobileprovision /get-test /layer /layer/mobile /layer/theme /mdate /p_static1 /p_static1/css /p_static1/img /p_static1/img1 /p_static1/js /public /public/css /public/img /public/js /public/js/layer_mobile /public/js/picker /red /red/bootstrap /red/bootstrap/css /red/bootstrap/js /red/swiper /static /static/images /static/myself /static/plugs /static/plugs/angular /static/plugs/awesome /static/plugs/ckeditor /static/plugs/echarts /static/plugs/jquery /static/plugs/layui /static/plugs/michat /static/plugs/require /static/plugs/socket /static/plugs/supersized /static/plugs/ztree /static/theme /static/theme/css /static/theme/img /static/theme/img/login /static/theme/img/wechat /static_down /static_down/css /static_down/images /static_down/js /static_down/picture /static_indonesia /static_indonesia/headimg /static_indonesia/img /static_new /static_new/css /static_new/img /static_new/js /static_new/mobiscroll /static_new6 /statics /upload
Severity: medium
Fingerprint: 5f32cf5d6962f09c5a2cc21a5a2cc21a53f540be0b95f2ab1997aff8b4334380
Found 82 files trough .DS_Store spidering: /alllang /alllang/static /alllang/static/css /alllang/static/font /alllang/static/image /alllang/static/images /alllang/static/js /alllang/static/picture /app /app/a.mobileconfig /app/css /app/img /app/img/0665a_1_600_411.jpg /app/img/0df0c_0_600_411.jpg /app/img/31cb4_4_200_200.png /app/img/5cbc4_5_1242_2007.png /app/img/9179e_3_600_411.jpg /app/img/a.png /app/index.html /app/js /app/xxx.mobileprovision /get-test /layer /layer/mobile /layer/theme /mdate /p_static1 /p_static1/css /p_static1/img /p_static1/img1 /p_static1/js /public /public/css /public/img /public/js /public/js/layer_mobile /public/js/picker /red /red/bootstrap /red/bootstrap/css /red/bootstrap/js /red/swiper /static /static/images /static/myself /static/plugs /static/plugs/angular /static/plugs/awesome /static/plugs/ckeditor /static/plugs/echarts /static/plugs/jquery /static/plugs/layui /static/plugs/michat /static/plugs/require /static/plugs/socket /static/plugs/supersized /static/plugs/ztree /static/theme /static/theme/css /static/theme/img /static/theme/img/login /static/theme/img/wechat /static_down /static_down/css /static_down/images /static_down/js /static_down/picture /static_indonesia /static_indonesia/headimg /static_indonesia/img /static_new /static_new/css /static_new/img /static_new/js /static_new/mobiscroll /static_new6 /static_new6/css /static_new6/headimg /static_new6/img /static_new6/js /statics /upload
Open service 172.67.172.155:443 · financialpnc.com
2026-01-09 03:47
HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 09 Jan 2026 03:47:58 GMT Content-Type: text/html Content-Length: 253 Connection: close CF-RAY: - Page title: 400 The plain HTTP request was sent to HTTPS port <html> <head><title>400 The plain HTTP request was sent to HTTPS port</title></head> <body> <center><h1>400 Bad Request</h1></center> <center>The plain HTTP request was sent to HTTPS port</center> <hr><center>cloudflare</center> </body> </html>
Open service 172.67.172.155:443 · financialpnc.com
2026-01-02 04:34
HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 02 Jan 2026 04:34:55 GMT Content-Type: text/html Content-Length: 253 Connection: close CF-RAY: - Page title: 400 The plain HTTP request was sent to HTTPS port <html> <head><title>400 The plain HTTP request was sent to HTTPS port</title></head> <body> <center><h1>400 Bad Request</h1></center> <center>The plain HTTP request was sent to HTTPS port</center> <hr><center>cloudflare</center> </body> </html>
Open service 172.67.172.155:443 · financialpnc.com
2025-12-30 12:06
HTTP/1.1 400 Bad Request Server: cloudflare Date: Tue, 30 Dec 2025 12:06:46 GMT Content-Type: text/html Content-Length: 253 Connection: close CF-RAY: - Page title: 400 The plain HTTP request was sent to HTTPS port <html> <head><title>400 The plain HTTP request was sent to HTTPS port</title></head> <body> <center><h1>400 Bad Request</h1></center> <center>The plain HTTP request was sent to HTTPS port</center> <hr><center>cloudflare</center> </body> </html>
Open service 172.67.172.155:443 · financialpnc.com
2025-12-23 09:34
HTTP/1.1 403 Forbidden
Date: Tue, 23 Dec 2025 09:34:32 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=0ITchEcTqQOyZR7G%2BxNgbTDhNu9Z%2FQV2klEwdZOz6B6JOHiDMmPrOhZFPTflOpYLhFFfn94Vlgt5c41JuwFybWUI5SG9SVuPnYreEzMkgQg%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9b26dd1bea1aaac7-YYZ
Page title: Suspected phishing site | Cloudflare
<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->
<head>
<title>Suspected phishing site | Cloudflare</title>
<meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>
<!--[if gte IE 10]><!-->
<script>
if (!navigator.cookieEnabled) {
window.addEventListener('DOMContentLoaded', function () {
var cookieEl = document.getElementById('cookie-alert');
cookieEl.style.display = 'block';
})
}
</script>
<!--<![endif]-->
<script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
<script>
function onTurnstileSuccess(token) {
document.getElementById("bypass-button").disabled = false;
}
</script>
</head>
<body>
<div id="cf-wrapper">
<div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
cookies.
</div>
<div id="cf-error-details" class="cf-error-details-wrapper">
<div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
<div class="cf-columns one">
<div class="cf-column">
<h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
height: 18px;
width: 18px;
margin-bottom: 2px;"></i> Warning</h4>
<h2 style="margin: 16px 0;">Suspected Phishing</h2>
<strong>This website has been reported for potential phishing.</strong>
<p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
</p>
<form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
<a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
<input type="hidden" name="atok" value="DmGh0XXNcW5YAPP6.oZGJltGbBoDI.vy6rqaUOOvLcY-1766482472.3024416-0.0.1.1-/">
<input type="hidden" name="original_path" value="/">
<button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
</button>
<br> <br>
<div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
</div>
</form>
</div>
</div>
</div><!-- /.section -->
<div id="ts-blocks" style="display:none;"></div>
<div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
<p class="text-13">
<span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9b26dd1bea1aaac7</strong></span>
<span class="cf-footer-separator sm:hidden">•</span>
<span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
Your IP:
<button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
<span class="hidden" id="cf-footer-ip">159.89.127.165</span>
<span clas
Open service 172.67.172.155:443 · financialpnc.com
2025-12-21 04:51
HTTP/1.1 403 Forbidden
Date: Sun, 21 Dec 2025 04:51:21 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kJMBOTiylG8JKegrgmCvhwSZopOY8Iwh3JBomyFYeFthFUeocSJjVcBvN5ub4S8Vk0uTpE3LXq5Ps6%2BXOTXMCY8%2F5kwiG%2BJSmL9y1r%2FjlvA%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9b14c388d85396fb-AMS
Page title: Suspected phishing site | Cloudflare
<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->
<head>
<title>Suspected phishing site | Cloudflare</title>
<meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>
<!--[if gte IE 10]><!-->
<script>
if (!navigator.cookieEnabled) {
window.addEventListener('DOMContentLoaded', function () {
var cookieEl = document.getElementById('cookie-alert');
cookieEl.style.display = 'block';
})
}
</script>
<!--<![endif]-->
<script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
<script>
function onTurnstileSuccess(token) {
document.getElementById("bypass-button").disabled = false;
}
</script>
</head>
<body>
<div id="cf-wrapper">
<div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
cookies.
</div>
<div id="cf-error-details" class="cf-error-details-wrapper">
<div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
<div class="cf-columns one">
<div class="cf-column">
<h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
height: 18px;
width: 18px;
margin-bottom: 2px;"></i> Warning</h4>
<h2 style="margin: 16px 0;">Suspected Phishing</h2>
<strong>This website has been reported for potential phishing.</strong>
<p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
</p>
<form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
<a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
<input type="hidden" name="atok" value="mllMMEZdCwOEiim2D48iRP3Ipg0NgZMo2z7n33v4f.k-1766292681.092175-0.0.1.1-/">
<input type="hidden" name="original_path" value="/">
<button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
</button>
<br> <br>
<div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
</div>
</form>
</div>
</div>
</div><!-- /.section -->
<div id="ts-blocks" style="display:none;"></div>
<div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
<p class="text-13">
<span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9b14c388d85396fb</strong></span>
<span class="cf-footer-separator sm:hidden">•</span>
<span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
Your IP:
<button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
<span class="hidden" id="cf-footer-ip">142.93.129.190</span>
<span class