.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9506476d147b2b72ed805f0ff5eb433dc
Found 5 files trough .DS_Store spidering: /img /img/bg.jpg /img/footer.png /img/icon.png /index.html
Open service 54.192.35.105:443 · h03ba.com
2026-01-23 01:22
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 2174
Connection: close
x-fc-request-id: 1-6972cd62-045d93-c91b5df7f3e8
Access-Control-Expose-Headers: Date,x-fc-request-id
Access-Control-Allow-Methods: GET, POST, PUT
Access-Control-Allow-Credentials: false
ETag: "3ED58739EE1F2AC303DBAF7C3A8C52F1"
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type, Authorization, Range
Accept-Ranges: bytes
Content-Disposition: inline
Cache-Control: public, max-age=300
Last-Modified: Wed, 12 Nov 2025 02:23:05 GMT
Date: Fri, 23 Jan 2026 01:22:42 GMT
X-Cache: Hit from cloudfront
Via: 1.1 8cada61dd7719c6c0ad123c11e1964f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P15
X-Amz-Cf-Id: CECgfG7CLozFMU2qhYCBTQH1oS0PjmJcuELXyNLTj5wfFhAIoWnzPQ==
Age: 1
Page title: H03
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>H03</title>
<style>
.btn1 {
position: absolute;
width: 80%;
left: 13%;
height: 7%;
top: 24.5%;
cursor: pointer;
}
.t {
/* background-color: #6cf; */
/* opacity: 0.5; */
}
.footer {
position: fixed;
display: flex;
bottom: 5px;
width: 100%;
}
.footer-bg {
width: 100%;
height: auto;
}
.icon {
position: absolute;
top: 13%;
width: 13%;
left: 1%;
}
.btn2 {
position: absolute;
width: 25%;
left: 73%;
height: 58%;
top: 20.4%;
cursor: pointer;
}
.logo {
position: absolute;
top: 6%;
left: -17.5%;
width: 75%;
height: auto;
}
</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>
function handleBtnDown1() {
const url = 'https://h5.h03.shop?chn=aDAzX2lkOF9udGxhMTE2Mw%3D%3D'
window.open(url, '_blank');
}
function handleBtnDown2() {
const url = 'https://download.h03.me/android/IUHzM_DwePjutNWQANQm3v.apk'
window.open(url, '_blank');
}
</script>
</html>
Open service 54.192.35.105:443 · h03ba.com
2026-01-09 23:13
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 2174
Connection: close
x-fc-request-id: 1-6961710c-0460b1-e4853c4e969c
Access-Control-Expose-Headers: Date,x-fc-request-id
ETag: "3ED58739EE1F2AC303DBAF7C3A8C52F1"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Access-Control-Allow-Credentials: false
Cache-Control: public, max-age=300
Last-Modified: Wed, 12 Nov 2025 02:23:05 GMT
Access-Control-Allow-Methods: GET, POST, PUT
Access-Control-Allow-Headers: Content-Type, Authorization, Range
Content-Disposition: inline
Date: Fri, 09 Jan 2026 23:13:15 GMT
X-Cache: Hit from cloudfront
Via: 1.1 2ce2e2dbbabc50ee771ee7128c823f30.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P15
X-Amz-Cf-Id: Scuw5KeHuWZklMdV5sbOT8XdeL2lVlNCQccys5g1tflPiX-ZXYzppA==
Age: 2
Page title: H03
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>H03</title>
<style>
.btn1 {
position: absolute;
width: 80%;
left: 13%;
height: 7%;
top: 24.5%;
cursor: pointer;
}
.t {
/* background-color: #6cf; */
/* opacity: 0.5; */
}
.footer {
position: fixed;
display: flex;
bottom: 5px;
width: 100%;
}
.footer-bg {
width: 100%;
height: auto;
}
.icon {
position: absolute;
top: 13%;
width: 13%;
left: 1%;
}
.btn2 {
position: absolute;
width: 25%;
left: 73%;
height: 58%;
top: 20.4%;
cursor: pointer;
}
.logo {
position: absolute;
top: 6%;
left: -17.5%;
width: 75%;
height: auto;
}
</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>
function handleBtnDown1() {
const url = 'https://h5.h03.shop?chn=aDAzX2lkOF9udGxhMTE2Mw%3D%3D'
window.open(url, '_blank');
}
function handleBtnDown2() {
const url = 'https://download.h03.me/android/IUHzM_DwePjutNWQANQm3v.apk'
window.open(url, '_blank');
}
</script>
</html>