.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9506476d147b2b72ed805f0ff5eb433dc
Found 5 files trough .DS_Store spidering: /img /img/bg.jpg /img/footer.png /img/icon.png /index.html
Open service 18.66.192.3:443 · mt986.com
2026-01-09 04:18
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 2145
Connection: close
x-fc-request-id: 1-695fabda-0458ab-82b72307eb2a
Access-Control-Expose-Headers: Date,x-fc-request-id
Accept-Ranges: bytes
Access-Control-Allow-Headers: Content-Type, Authorization, Range
Access-Control-Allow-Credentials: false
Access-Control-Allow-Origin: *
Content-Disposition: inline
Access-Control-Allow-Methods: GET, POST, PUT
Last-Modified: Wed, 12 Nov 2025 02:23:30 GMT
Cache-Control: public, max-age=300
ETag: "DC99771227E5D18E07EDB98AA4089EDD"
Date: Fri, 09 Jan 2026 04:18:02 GMT
X-Cache: Hit from cloudfront
Via: 1.1 aedc37d054398c84a361f8542a82efea.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
X-Amz-Cf-Id: Fov_fi3kzY5CZRcb8b9ljXUZyhyv7e5ur-tcMrgg0TIgbpFL9eGXkA==
Age: 2
Page title: MT966
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>MT966</title>
<style>
.btn1 {
position: absolute;
width: 75%;
left: 12%;
height: 3%;
top: 46.5%;
cursor: pointer;
}
.t {
/* background-color: #6cf; */
/* opacity: 0.5; */
}
.footer {
position: fixed;
display: flex;
bottom: 5px;
width: 100%;
}
.footer-bg {
width: 100%;
height: auto;
}
.icon {
position: absolute;
top: 13%;
width: 13%;
left: 3%;
}
.btn2 {
position: absolute;
width: 25%;
left: 73%;
height: 58%;
top: 20.4%;
cursor: pointer;
}
.logo {
position: absolute;
top: 6%;
left: -17.5%;
width: 75%;
height: auto;
}
</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>
function handleBtnDown1() {
const url = 'https://h5.mt599.com'
window.open(url, '_blank');
}
function handleBtnDown2() {
const url = 'https://download.appmt966.com/android/mt777_id2_ntla740.apk'
window.open(url, '_blank');
}
</script>
</html>
Open service 18.66.192.3:443 · mt986.com
2026-01-02 05:12
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 2145
Connection: close
x-fc-request-id: 1-6956e97e-0458ab-7c444b22aa9e
Access-Control-Expose-Headers: Date,x-fc-request-id
Accept-Ranges: bytes
Access-Control-Allow-Headers: Content-Type, Authorization, Range
Access-Control-Allow-Credentials: false
Access-Control-Allow-Origin: *
Content-Disposition: inline
Access-Control-Allow-Methods: GET, POST, PUT
Last-Modified: Wed, 12 Nov 2025 02:23:30 GMT
Cache-Control: public, max-age=300
ETag: "DC99771227E5D18E07EDB98AA4089EDD"
Date: Fri, 02 Jan 2026 05:12:58 GMT
X-Cache: Hit from cloudfront
Via: 1.1 c414bd1a4ce7ace94cbfdfa8efcbe5a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
X-Amz-Cf-Id: IurtF2FDfYbdbbbnur_DhUPMdKi5x30SN4poU9k8MJfg9lgtJk0Q1A==
Page title: MT966
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>MT966</title>
<style>
.btn1 {
position: absolute;
width: 75%;
left: 12%;
height: 3%;
top: 46.5%;
cursor: pointer;
}
.t {
/* background-color: #6cf; */
/* opacity: 0.5; */
}
.footer {
position: fixed;
display: flex;
bottom: 5px;
width: 100%;
}
.footer-bg {
width: 100%;
height: auto;
}
.icon {
position: absolute;
top: 13%;
width: 13%;
left: 3%;
}
.btn2 {
position: absolute;
width: 25%;
left: 73%;
height: 58%;
top: 20.4%;
cursor: pointer;
}
.logo {
position: absolute;
top: 6%;
left: -17.5%;
width: 75%;
height: auto;
}
</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>
function handleBtnDown1() {
const url = 'https://h5.mt599.com'
window.open(url, '_blank');
}
function handleBtnDown2() {
const url = 'https://download.appmt966.com/android/mt777_id2_ntla740.apk'
window.open(url, '_blank');
}
</script>
</html>
Open service 18.66.192.3:443 · mt986.com
2025-12-26 11:27
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 2145
Connection: close
x-fc-request-id: 1-694d828b-0458ab-b23a258ef492
Access-Control-Expose-Headers: Date,x-fc-request-id
Accept-Ranges: bytes
Access-Control-Allow-Headers: Content-Type, Authorization, Range
Access-Control-Allow-Credentials: false
Access-Control-Allow-Origin: *
Content-Disposition: inline
Access-Control-Allow-Methods: GET, POST, PUT
Last-Modified: Wed, 12 Nov 2025 02:23:30 GMT
Cache-Control: public, max-age=300
ETag: "DC99771227E5D18E07EDB98AA4089EDD"
Date: Fri, 26 Dec 2025 11:27:14 GMT
X-Cache: Hit from cloudfront
Via: 1.1 66ce4848bcf993e3c57b596461cd0b82.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
X-Amz-Cf-Id: mDhVmuCh2royqYk23_760QDoNJAHmHl96ZprMu1eSsPZ74eb0Om-5A==
Page title: MT966
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>MT966</title>
<style>
.btn1 {
position: absolute;
width: 75%;
left: 12%;
height: 3%;
top: 46.5%;
cursor: pointer;
}
.t {
/* background-color: #6cf; */
/* opacity: 0.5; */
}
.footer {
position: fixed;
display: flex;
bottom: 5px;
width: 100%;
}
.footer-bg {
width: 100%;
height: auto;
}
.icon {
position: absolute;
top: 13%;
width: 13%;
left: 3%;
}
.btn2 {
position: absolute;
width: 25%;
left: 73%;
height: 58%;
top: 20.4%;
cursor: pointer;
}
.logo {
position: absolute;
top: 6%;
left: -17.5%;
width: 75%;
height: auto;
}
</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>
function handleBtnDown1() {
const url = 'https://h5.mt599.com'
window.open(url, '_blank');
}
function handleBtnDown2() {
const url = 'https://download.appmt966.com/android/mt777_id2_ntla740.apk'
window.open(url, '_blank');
}
</script>
</html>
Open service 18.66.192.3:443 · mt986.com
2025-12-22 13:45
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 2145
Connection: close
x-fc-request-id: 1-69492c00-0460b1-866975cd778b
Access-Control-Expose-Headers: Date,x-fc-request-id
ETag: "DC99771227E5D18E07EDB98AA4089EDD"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Access-Control-Allow-Credentials: false
Cache-Control: public, max-age=300
Last-Modified: Wed, 12 Nov 2025 02:23:30 GMT
Access-Control-Allow-Methods: GET, POST, PUT
Access-Control-Allow-Headers: Content-Type, Authorization, Range
Content-Disposition: inline
Date: Mon, 22 Dec 2025 13:45:01 GMT
X-Cache: Hit from cloudfront
Via: 1.1 aedc37d054398c84a361f8542a82efea.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
X-Amz-Cf-Id: hbMgU7sDO5oTIJgP3GODRWt7RYck38HjcKFytiKE040TKSYbO_zZ2A==
Page title: MT966
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>MT966</title>
<style>
.btn1 {
position: absolute;
width: 75%;
left: 12%;
height: 3%;
top: 46.5%;
cursor: pointer;
}
.t {
/* background-color: #6cf; */
/* opacity: 0.5; */
}
.footer {
position: fixed;
display: flex;
bottom: 5px;
width: 100%;
}
.footer-bg {
width: 100%;
height: auto;
}
.icon {
position: absolute;
top: 13%;
width: 13%;
left: 3%;
}
.btn2 {
position: absolute;
width: 25%;
left: 73%;
height: 58%;
top: 20.4%;
cursor: pointer;
}
.logo {
position: absolute;
top: 6%;
left: -17.5%;
width: 75%;
height: auto;
}
</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>
function handleBtnDown1() {
const url = 'https://h5.mt599.com'
window.open(url, '_blank');
}
function handleBtnDown2() {
const url = 'https://download.appmt966.com/android/mt777_id2_ntla740.apk'
window.open(url, '_blank');
}
</script>
</html>
Open service 18.66.192.3:443 · mt986.com
2025-12-20 13:31
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 2145
Connection: close
x-fc-request-id: 1-694628f4-0458ab-baed52d85aab
Access-Control-Expose-Headers: Date,x-fc-request-id
Accept-Ranges: bytes
Access-Control-Allow-Headers: Content-Type, Authorization, Range
Access-Control-Allow-Credentials: false
Access-Control-Allow-Origin: *
Content-Disposition: inline
Access-Control-Allow-Methods: GET, POST, PUT
Last-Modified: Wed, 12 Nov 2025 02:23:30 GMT
Cache-Control: public, max-age=300
ETag: "DC99771227E5D18E07EDB98AA4089EDD"
Date: Sat, 20 Dec 2025 13:31:31 GMT
X-Cache: Hit from cloudfront
Via: 1.1 551f2461af0b3bf4faaad831ee6e5b1e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
X-Amz-Cf-Id: _NsMZdrvqypHxccNmJ-QeiAyBzf6Hg8zg0byU8SIIvLbdoKu5X7x_w==
Page title: MT966
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>MT966</title>
<style>
.btn1 {
position: absolute;
width: 75%;
left: 12%;
height: 3%;
top: 46.5%;
cursor: pointer;
}
.t {
/* background-color: #6cf; */
/* opacity: 0.5; */
}
.footer {
position: fixed;
display: flex;
bottom: 5px;
width: 100%;
}
.footer-bg {
width: 100%;
height: auto;
}
.icon {
position: absolute;
top: 13%;
width: 13%;
left: 3%;
}
.btn2 {
position: absolute;
width: 25%;
left: 73%;
height: 58%;
top: 20.4%;
cursor: pointer;
}
.logo {
position: absolute;
top: 6%;
left: -17.5%;
width: 75%;
height: auto;
}
</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>
function handleBtnDown1() {
const url = 'https://h5.mt599.com'
window.open(url, '_blank');
}
function handleBtnDown2() {
const url = 'https://download.appmt966.com/android/mt777_id2_ntla740.apk'
window.open(url, '_blank');
}
</script>
</html>