LeakIX - Host ph2.mytoolx.cn

Domain ph2.mytoolx.cn

China

Shenzhen Tencent Computer Systems Company Limited

Software information

nginx nginx

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 1.94.102.117
Domain: ph2.mytoolx.cn
Port: 443
URL: https://ph2.mytoolx.cn

First seen 2023-01-15 09:30
Last seen 2024-05-01 02:45
Open for 471 days
- Severity: medium
  Fingerprint: 5f32cf5d6962f09c248e4f81248e4f81cb3a648f866d48075ab2ff1828e84f37
```
Found 41 files trough .DS_Store spidering:

/assets
/css
/css/mobile
/dist
/dist/js
/fonts
/images
/images/admin
/images/award
/images/bot
/images/collectword
/images/corp
/images/corpClinetRed
/images/corpTask
/images/cutprice
/images/define
/images/defineposter
/images/desc
/images/distribution
/images/emoji
/images/goodscode
/images/groupPurchase
/images/hypermarket
/images/icon
/images/livefission
/images/liveturn
/images/login
/images/markPersonal
/images/mobile
/images/mobileCenter
/images/official
/images/proxy
/images/share
/images/test
/images/thirdPart
/images/vrheader
/images/yzmpic
/js
/lib
/svg
/vendor
```
  Found on 2024-05-01 02:45
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f877272a0bbae9752f4b6fa843b4b9976b809
```
Found 11 files trough .DS_Store spidering:

/assets
/css
/css/mobile
/dist
/dist/js
/fonts
/images
/js
/lib
/svg
/vendor
```
  Found on 2024-04-18 20:45
Create report
Laravel development panel enabled
The application has Laravel development panel enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 152.136.253.125
Domain: ph2.mytoolx.cn
Port: 80
URL: http://ph2.mytoolx.cn

First seen 2023-01-15 09:30
- Fingerprint: 3ae8115d762f12d0c52d91a6c52d91a6c52d91a6c52d91a6c52d91a6c52d91a6
```
Laravel Telescope enabled at http://ph2.mytoolx.cn
```
  Found on 2023-01-15 09:30
Create report
Laravel development panel enabled
The application has Laravel development panel enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 152.136.253.125
Domain: ph2.mytoolx.cn
Port: 443
URL: https://ph2.mytoolx.cn

First seen 2023-01-15 09:30
Last seen 2024-05-01 02:45
Open for 471 days
- Fingerprint: 3ae8115d762f12d04d3783754d3783754d3783754d3783754d3783754d378375
```
Laravel Telescope enabled at https://ph2.mytoolx.cn
```
  Found on 2024-05-01 02:45
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 152.136.253.125
Domain: ph2.mytoolx.cn
Port: 80
URL: http://ph2.mytoolx.cn

First seen 2023-01-15 09:30
- Severity: low
  Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d336cbabb8fe0009b75006054ad7259c7
```
Found 12 files trough .DS_Store spidering:

/assets
/css
/css/mobile
/dist
/dist/js
/fonts
/images
/js
/js/mobile
/lib
/svg
/vendor
```
  Found on 2023-01-15 09:30
Create report

Open service 1.94.102.117:443 · ph2.mytoolx.cn

2024-05-12 19:17

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 12 May 2024 19:17:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Powered-By: PHP/7.2.31
Cache-Control: private, must-revalidate
pragma: no-cache
expires: -1
Set-Cookie: laravel_session=p1trM7bGGF5ugNJVyCUQr48l14sFLhGrlLLGmLk5; expires=Tue, 21-May-2024 03:17:44 GMT; Max-Age=720000; path=/; httponly
Strict-Transport-Security: max-age=31536000

Page title: 裂变宝典——私域电商变现专家

<!DOCTYPE html v-cloak>

<html lang="zh" style="height: 100%; font-size: 100px;">

<head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta http-equiv="X-UA-Compatible" content="ie=edge" />
    <title>裂变宝典——私域电商变现专家</title>
    <link rel="icon" href="/images/titleImg.png"/>
    <!-- <script src="/js/test.js"></script> -->
    <link rel="stylesheet" type="text/css" href="/css/login.css" />
    
    
    <link rel="stylesheet" type="text/css" href="//at.alicdn.com/t/font_1565580_jgju61az6di.css" />
    <script src="/lib/all.js"></script>
    <script src="/lib/axios.js?_version="></script>
    <script src="/lib/vue.js?_version="></script>
    <script src="/js/copy.js"></script>
    <script src="/lib/bootstrap.min.js?_version="></script>
    <link href="/lib/element/index.css?_version=" rel="stylesheet">
    <script src="/js/elementUI.js?_version="></script>
    <style>
        .message p a{
            color: #7A8A9A;
        }
        .message1 p a{
            color: #000;
        }
        .back1Img {
            position: fixed;
            top: 0;
            left: 0;
            width: 100%;
            height: 100%;
            z-index: -999;
            object-fit: cover;
            background-repeat: no-repeat;
        }
        .cover1Img{
            position: fixed;
            left: 50%;
            top: 50%;
            transform: translate(-50%,-50%);
            width: 65vw;
            height: 25vw;
            z-index: -888;
            object-fit: cover;
            border-radius: 10px;
        }
        .cover2Img{
            position: fixed;
            right: 5.2%;
            top: 50%;
            transform: translatey(-50%);
            width: 37.5vw;
            height: 83.33vh;
            z-index: -888;
            border-radius:0 20px 20px 0 ;
        }
        .temp1Content{
            top: 50%;
            left: 65%;
            transform: translate(-50%, -50%);
            position: fixed;
            width: 31.25vw;
            height: 30vw;
            background: #FFFFFF;
            box-shadow: 0px 0px 10px 1px rgba(54,130,244,0.49);
            border-radius: 8px 8px 8px 8px;
            display: flex;
            flex-direction: column;
            justify-content: space-evenly;
            align-items: center;
        }
        .temp2Content{
            top: 50%;
            right: 42.7%;
            transform: translatey(-50%);
            position: fixed;
            width: 27.08vw;
            height: 83.33vh;
            background: #FFFFFF;
            box-shadow: 0px 0px 10px 1px rgba(0,0,0,0.13);
            border-radius:20px 0 0 20px;
            display: flex;
            flex-direction: column;
            justify-content: space-evenly;
            align-items: center;
            overflow: auto;
        }
        .inputContainer{
            display: flex;
            justify-content: center;
            align-items: center;
            border-bottom: 1px solid #dfdfdf;
            padding: 0.7vw 0.7vw 0.7vw 0;
        }
        .inputBody{
            min-width: 0;
            flex:1; 
            border: none;
            outline: none;
            margin-left: 0.2rem;
            font-size: .15rem;
        }
        @media (max-width: 600px) {
            .temp1Content {
                width: 80%;
                left: 50%;
                height: 80vw;
                transform: translate(-50%,-50%);
                min-width: 200px;
                min-height: 200px;
            }
            .temp2Content {
                width: 80% !important;
                left: 50%;
                height: 80vw;
                transform: translate(-50%,-50%);
                min-width: 200px;
                min-height: 200px;
                border-radius: 20px;
            }
            .cover2Img{
                width: 0;
                height: 0;
            }
            .loginBtnCont{
                margin-top: 10vw !important;
            }
        }
        @media (max-width

Found 2024-05-12 by HttpPlugin

Create report

Open service 1.94.102.117:443 · ph2.mytoolx.cn

2024-05-01 02:45

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 May 2024 02:45:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Powered-By: PHP/7.2.31
Cache-Control: private, must-revalidate
pragma: no-cache
expires: -1
Set-Cookie: laravel_session=0LDNKVWvlMVNzKf75PbKR6Zhgf2ChofM4fZ3ZRKN; expires=Thu, 09-May-2024 10:45:25 GMT; Max-Age=720000; path=/; httponly
Strict-Transport-Security: max-age=31536000

Page title: 裂变宝典——私域电商变现专家

<!DOCTYPE html v-cloak>

<html lang="zh" style="height: 100%; font-size: 100px;">

<head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta http-equiv="X-UA-Compatible" content="ie=edge" />
    <title>裂变宝典——私域电商变现专家</title>
    <link rel="icon" href="/images/titleImg.png"/>
    <!-- <script src="/js/test.js"></script> -->
    <link rel="stylesheet" type="text/css" href="/css/login.css" />
    
    
    <link rel="stylesheet" type="text/css" href="//at.alicdn.com/t/font_1565580_jgju61az6di.css" />
    <script src="/lib/all.js"></script>
    <script src="/lib/axios.js?_version="></script>
    <script src="/lib/vue.js?_version="></script>
    <script src="/js/copy.js"></script>
    <script src="/lib/bootstrap.min.js?_version="></script>
    <link href="/lib/element/index.css?_version=" rel="stylesheet">
    <script src="/js/elementUI.js?_version="></script>
    <style>
        .message p a{
            color: #7A8A9A;
        }
        .message1 p a{
            color: #000;
        }
        .back1Img {
            position: fixed;
            top: 0;
            left: 0;
            width: 100%;
            height: 100%;
            z-index: -999;
            object-fit: cover;
            background-repeat: no-repeat;
        }
        .cover1Img{
            position: fixed;
            left: 50%;
            top: 50%;
            transform: translate(-50%,-50%);
            width: 65vw;
            height: 25vw;
            z-index: -888;
            object-fit: cover;
            border-radius: 10px;
        }
        .cover2Img{
            position: fixed;
            right: 5.2%;
            top: 50%;
            transform: translatey(-50%);
            width: 37.5vw;
            height: 83.33vh;
            z-index: -888;
            border-radius:0 20px 20px 0 ;
        }
        .temp1Content{
            top: 50%;
            left: 65%;
            transform: translate(-50%, -50%);
            position: fixed;
            width: 31.25vw;
            height: 30vw;
            background: #FFFFFF;
            box-shadow: 0px 0px 10px 1px rgba(54,130,244,0.49);
            border-radius: 8px 8px 8px 8px;
            display: flex;
            flex-direction: column;
            justify-content: space-evenly;
            align-items: center;
        }
        .temp2Content{
            top: 50%;
            right: 42.7%;
            transform: translatey(-50%);
            position: fixed;
            width: 27.08vw;
            height: 83.33vh;
            background: #FFFFFF;
            box-shadow: 0px 0px 10px 1px rgba(0,0,0,0.13);
            border-radius:20px 0 0 20px;
            display: flex;
            flex-direction: column;
            justify-content: space-evenly;
            align-items: center;
            overflow: auto;
        }
        .inputContainer{
            display: flex;
            justify-content: center;
            align-items: center;
            border-bottom: 1px solid #dfdfdf;
            padding: 0.7vw 0.7vw 0.7vw 0;
        }
        .inputBody{
            min-width: 0;
            flex:1; 
            border: none;
            outline: none;
            margin-left: 0.2rem;
            font-size: .15rem;
        }
        @media (max-width: 600px) {
            .temp1Content {
                width: 80%;
                left: 50%;
                height: 80vw;
                transform: translate(-50%,-50%);
                min-width: 200px;
                min-height: 200px;
            }
            .temp2Content {
                width: 80% !important;
                left: 50%;
                height: 80vw;
                transform: translate(-50%,-50%);
                min-width: 200px;
                min-height: 200px;
                border-radius: 20px;
            }
            .cover2Img{
                width: 0;
                height: 0;
            }
            .loginBtnCont{
                margin-top: 10vw !important;
            }
        }
        @media (max-width

Found 2024-05-01 by HttpPlugin

Create report

Open service 1.94.102.117:443 · ph2.mytoolx.cn

2024-04-18 20:45

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 20:46:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Powered-By: PHP/7.2.31
Cache-Control: private, must-revalidate
pragma: no-cache
expires: -1
Set-Cookie: laravel_session=GviTzJtLgoim7OWzET9hE9EbUFmyMbQVnW9nP7th; expires=Sat, 27-Apr-2024 04:46:05 GMT; Max-Age=720000; path=/; httponly
Strict-Transport-Security: max-age=31536000

Page title: 裂变宝典——私域电商变现专家

<!DOCTYPE html v-cloak>

<html lang="zh" style="height: 100%; font-size: 100px;">

<head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta http-equiv="X-UA-Compatible" content="ie=edge" />
    <title>裂变宝典——私域电商变现专家</title>
    <link rel="icon" href="/images/titleImg.png"/>
    <!-- <script src="/js/test.js"></script> -->
    <link rel="stylesheet" type="text/css" href="/css/login.css" />
    
    
    <link rel="stylesheet" type="text/css" href="//at.alicdn.com/t/font_1565580_jgju61az6di.css" />
    <script src="/lib/all.js"></script>
    <script src="/lib/axios.js?_version="></script>
    <script src="/lib/vue.js?_version="></script>
    <script src="/js/copy.js"></script>
    <script src="/lib/bootstrap.min.js?_version="></script>
    <link href="/lib/element/index.css?_version=" rel="stylesheet">
    <script src="/js/elementUI.js?_version="></script>
    <style>
        .message p a{
            color: #7A8A9A;
        }
        .message1 p a{
            color: #000;
        }
        .back1Img {
            position: fixed;
            top: 0;
            left: 0;
            width: 100%;
            height: 100%;
            z-index: -999;
            object-fit: cover;
            background-repeat: no-repeat;
        }
        .cover1Img{
            position: fixed;
            left: 50%;
            top: 50%;
            transform: translate(-50%,-50%);
            width: 65vw;
            height: 25vw;
            z-index: -888;
            object-fit: cover;
            border-radius: 10px;
        }
        .cover2Img{
            position: fixed;
            right: 5.2%;
            top: 50%;
            transform: translatey(-50%);
            width: 37.5vw;
            height: 83.33vh;
            z-index: -888;
            border-radius:0 20px 20px 0 ;
        }
        .temp1Content{
            top: 50%;
            left: 65%;
            transform: translate(-50%, -50%);
            position: fixed;
            width: 31.25vw;
            height: 30vw;
            background: #FFFFFF;
            box-shadow: 0px 0px 10px 1px rgba(54,130,244,0.49);
            border-radius: 8px 8px 8px 8px;
            display: flex;
            flex-direction: column;
            justify-content: space-evenly;
            align-items: center;
        }
        .temp2Content{
            top: 50%;
            right: 42.7%;
            transform: translatey(-50%);
            position: fixed;
            width: 27.08vw;
            height: 83.33vh;
            background: #FFFFFF;
            box-shadow: 0px 0px 10px 1px rgba(0,0,0,0.13);
            border-radius:20px 0 0 20px;
            display: flex;
            flex-direction: column;
            justify-content: space-evenly;
            align-items: center;
            overflow: auto;
        }
        .inputContainer{
            display: flex;
            justify-content: center;
            align-items: center;
            border-bottom: 1px solid #dfdfdf;
            padding: 0.7vw 0.7vw 0.7vw 0;
        }
        .inputBody{
            min-width: 0;
            flex:1; 
            border: none;
            outline: none;
            margin-left: 0.2rem;
            font-size: .15rem;
        }
        @media (max-width: 600px) {
            .temp1Content {
                width: 80%;
                left: 50%;
                height: 80vw;
                transform: translate(-50%,-50%);
                min-width: 200px;
                min-height: 200px;
            }
            .temp2Content {
                width: 80% !important;
                left: 50%;
                height: 80vw;
                transform: translate(-50%,-50%);
                min-width: 200px;
                min-height: 200px;
                border-radius: 20px;
            }
            .cover2Img{
                width: 0;
                height: 0;
            }
            .loginBtnCont{
                margin-top: 10vw !important;
            }
        }
        @media (max-width

Found 2024-04-18 by HttpPlugin

Create report

ph2.mytoolx.cn

Fingerprint:

4be68a99cbd4e6ffb9814c12871dd558b62bda504c262efcdc40c7a4e26130d0

CN:

ph2.mytoolx.cn

Key:

RSA-2048

Issuer:

TrustAsia RSA DV TLS CA G2

Not before:

2024-01-18 00:00

Not after:

2025-01-17 23:59

Domain summary

ph2.mytoolx.cn 7

1 recorded

IP summary

1.94.102.117 2 152.136.253.125 1

2 recorded

Domain ph2.mytoolx.cn

China

Software information

MacOS file listing through .DS_Store file

Laravel development panel enabled

Laravel development panel enabled

MacOS file listing through .DS_Store file

Create report

Create report

Create report

ph2.mytoolx.cn

Domain summary

IP summary