nginx
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772677f2617ab34c1166667f0bb6903a682
Found 11 files trough .DS_Store spidering: /.git /888 /app-download /event /m /new-download /qphtml /static /static-vnso /ts-download /tsnew-download
Severity: medium
Fingerprint: 5f32cf5d6962f09c8f03d7bd8f03d7bd99078450c55477ba78a5a91ba981a6e3
Found 38 files trough .DS_Store spidering: /888 /check.html /event /event/active /event/css /event/img /event/js /event/mp4 /index.html /m /new-download /qphtml /robots.txt /static /static/public /static/tyc82 /static-amhg /static-amhg/css /static-amhg/fonts /static-amhg/img /static-amhg/js /static-tyc82 /static-tyc82/css /static-tyc82/fonts /static-tyc82/img /static-tyc82/js /ts-download /ts-download/css /ts-download/images /ts-download/js /ts-download/muse-ui /ts2-download /ts2-download/css /ts2-download/images /ts2-download/js /ts2-download/muse-ui /tsnew-download /tyc82
Severity: low
Fingerprint: 5f32cf5d6962f09c0f8dcf020f8dcf02a719fba705c191ae6e2d7272c7a04d8f
Found 24 files trough .DS_Store spidering: /.git /event /m /new-download /qphtml /robots.txt /static-amhg /ts-download /ts-download/css /ts-download/images /ts-download/js /ts-download/muse-ui /ts2-download /ts2-download/css /ts2-download/images /ts2-download/js /ts2-download/muse-ui /tsnew-download /tsnew-download/.vscode /tsnew-download/css /tsnew-download/images /tsnew-download/js /tsnew-download/muse-ui /tyc82
Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe626f729bc481b9a20df08ee6a2ff6675
Found 15 files trough .DS_Store spidering: /.git /event /m /new-download /qphtml /robots.txt /static-amhg /ts-download /ts-download/css /ts-download/images /ts-download/js /ts-download/muse-ui /ts2-download /tsnew-download /tyc82
Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a06acecbf424e5186f7052a8a1b5d39f0
Found 19 files trough .DS_Store spidering: /.git /event /m /new-download /qphtml /robots.txt /static-amhg /ts-download /ts-download/css /ts-download/images /ts-download/js /ts-download/muse-ui /ts2-download /ts2-download/css /ts2-download/images /ts2-download/js /ts2-download/muse-ui /tsnew-download /tyc82
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772677f2617ab34c1166667f0bb6903a682
Found 11 files trough .DS_Store spidering: /.git /888 /app-download /event /m /new-download /qphtml /static /static-vnso /ts-download /tsnew-download
Severity: low
Fingerprint: 5f32cf5d6962f09c0f8dcf020f8dcf02a719fba705c191ae6e2d7272c7a04d8f
Found 24 files trough .DS_Store spidering: /.git /event /m /new-download /qphtml /robots.txt /static-amhg /ts-download /ts-download/css /ts-download/images /ts-download/js /ts-download/muse-ui /ts2-download /ts2-download/css /ts2-download/images /ts2-download/js /ts2-download/muse-ui /tsnew-download /tsnew-download/.vscode /tsnew-download/css /tsnew-download/images /tsnew-download/js /tsnew-download/muse-ui /tyc82
Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a06acecbf424e5186f7052a8a1b5d39f0
Found 19 files trough .DS_Store spidering: /.git /event /m /new-download /qphtml /robots.txt /static-amhg /ts-download /ts-download/css /ts-download/images /ts-download/js /ts-download/muse-ui /ts2-download /ts2-download/css /ts2-download/images /ts2-download/js /ts2-download/muse-ui /tsnew-download /tyc82
Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe626f729bc481b9a20df08ee6a2ff6675
Found 15 files trough .DS_Store spidering: /.git /event /m /new-download /qphtml /robots.txt /static-amhg /ts-download /ts-download/css /ts-download/images /ts-download/js /ts-download/muse-ui /ts2-download /tsnew-download /tyc82
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e5b1425a
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = root@6669786.com:lottery-site/lottery-repo-tyc fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226033ece4
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = root@6669786.com:lottery-site/lottery-repo-tyc82 fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e5b1425a
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = root@6669786.com:lottery-site/lottery-repo-tyc fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226033ece4
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = root@6669786.com:lottery-site/lottery-repo-tyc82 fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 104.160.179.241:443 · www.t56112.com
2026-01-23 11:08
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Jan 2026 11:08:02 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 4522
Connection: close
Vary: Accept-Encoding
Last-Modified: Sat, 16 Aug 2025 19:01:09 GMT
ETag: "68a0d575-11aa"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes
Page title: Welcome
<!DOCTYPE html>
<html style="height: 100%;">
<head>
<meta charset="utf-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
<title>Welcome</title>
<script>
function isMobile() {
return !!(navigator.userAgent.match(
/(phone|pad|pod|iPhone|iPod|ios|iPad|android|Mobile|BlackBerry|IEMobile|MQQBrowser|JUC|Fennec|wOSBrowser|BrowserNG|WebOS|Symbian|Windows Phone)/i
))
}
if (isMobile() !== false) {
if (location.href.indexOf('#') > -1) {
location.href = location.origin + '/m/#/home?' + (location.href.split('#')[1].split('?')[1] || '')
} else {
location.href = location.origin + '/m/#/home' + location.search
}
}
(function () {
var url = window.location.href,
obj = {},
keyvalue = [],
key = '',
value = '',
parseString = url.substring(url.indexOf('?') + 1, url.length).split('&')
for (var i in parseString) {
keyvalue = parseString[i].split('=')
key = keyvalue[0]
value = keyvalue[1] && keyvalue[1].includes('#/') ? keyvalue[1].split('#/')[0] : keyvalue[1]
obj[key] = value
}
if (obj.agent) {
localStorage.setItem('agent', obj.agent)
}
if (obj.isPcInfo) {
isPcInfo = obj.isPcInfo;
}
if(obj.register){
if(!localStorage.token){
localStorage.setItem('register', obj.register)
}
}
})()
window.vis = true
window.onblur = function () {
window.vis = false
}
window.onfocus = function () {
window.vis = true
if (typeof window.balanceTask === 'function') {
window.balanceTask()
}
}
if(!document.querySelector('.statistics')) {
let head = document.head || document.getElementsByTagName('head')[0];
let script = document.createElement('script');
let div = document.createElement('div');
div.classList = 'statistics'
div.style.position = 'fixed'
div.style.left = '-9999px'
div.style.top = '-9999px'
script.setAttribute("src", "https://v1.cnzz.com/z_stat.php?id=1279815692&web_id=1279815692");
div.appendChild(script);
head.appendChild(div);
}
if(!isMobile()) {
function loadJS( url, callback ) {
var script = document.createElement('script'),
fn = callback || function(){};
script.type = 'text/javascript';
//IE
if(script.readyState){
script.onreadystatechange = function(){
if( script.readyState == 'loaded' || script.readyState == 'complete' ){
script.onreadystatechange = null;
fn()
}
}
}else{
// 其他浏览器
script.onload = function(){
fn()
}
}
script.src = url;
document.getElementsByTagName('head')[0].appendChild(script);
}
let loadTable = ['/static/public/js/stomp.js', '/static/public/js/qrcode.js'
, `https://cstaticdun.126.net/load.min.js?t=1755339207062`,
`https://acstatic-dun.126.net/tool.min.js?t=1755339207062`
]
// 用法
loadTable.forEach( (url) => {
loadJS(url,function(e){
// console.log("🚀 ~ file: index.html ~ line 85 ~ loadJS ~ url loaded success", url)
})
})
}
</script>
<link rel="shortcut icon" href="/static/vnso/img/favicon.ico" type="image/x-icon">
<!-- <script src="/static/public/js/stomp.js"></script> -->
<!-- <script src="/static/public/js/qrcode.js"></script> -->
<!-- <script src="http://cstaticdun.126.net/load.min.js"></script> -->
<!-- <script src="https://cstaticdun.126.net/load.min.js?t=1755339207062"></script> -->
<!-- <script type="text/javascript" src="https://acstatic-dun.126.net/tool.min.js?t=1755339207062"></script> -->
<!-- <script src="/static/public//js/tn_code.js"></script> -->
<link href="/static-vnso/style.css" rel="stylesheet"><link href="/static-vnso/css/pages/vnso/index.7849fb046c3b64d68f39607c90b8d121.css" rel="stylesheet"></head>
<bod
Open service 104.160.179.241:443 · www.t56112.com
2026-01-23 05:01
HTTP/1.1 604
Server: nginx
Date: Fri, 23 Jan 2026 05:01:06 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
<!DOCTYPE html>
<html>
<title></title>
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1">
<style>
body{font-family:-apple-system,system-ui,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"}a{color:#000;font-size:18px}p{font-size:20px;height:40px;line-height:40px}.msg{margin-right:auto;margin-left:auto;position:relative;max-width:767px}.title{background-color:#3a4781;border-radius:15px 15px 0 0;box-shadow:0 0 10px 0 rgba(0,0,0,0.5);transition:background .3s,border .3s,border-radius .3s,box-shadow .3s;padding:10px 25px;display:flex;color:#fff}.body{padding:35px 25px;border-radius:0 0 15px 15px;box-shadow:0 0 10px 0 rgba(0,0,0,0.5);transition:background .3s,border .3s,border-radius .3s,box-shadow .3s}.footer{display:inline;margin:auto;position:relative}.line1,.line2{display:flex;justify-content:center;align-items:center}.logo{color:#24305e;font-size:20px;margin-right:15px;height:120px;display:flex}.subtitle{font-size:30px;font-weight:bolder;height:40px;line-height:40px}.txt{display:flex;text-align:center;justify-content:center;height:40px}@media(max-width:480px){.logo,.cdnlink{display:flex;justify-content:center;align-items:center}.line1{display:block}}
</style>
</head>
<body>
<div class="container">
<div class="msg">
<div class="title" id="title">
<h1>604 - 黑名单国家</h1>
</div>
<div class="body" id="body">
<div class="subtitle">发生了什么?</div>
<p>请求被阻挡</p>
<div class="subtitle">我应该怎么做?</div>
<p>请联系管理员</p>
<p>编号: 0871bef45fe64e01aed222a8e55d08e2</p><p>访客地址: 157.230.19.140 </p><p>网址: https://www.t56112.com/ </p><p>请求方法: GET </p><p>时间: 2026-01-23 13:01:06 </p>
</div>
</div>
</div>
</body>
</html>
Open service 104.160.179.251:443 · t56112.com
2026-01-22 20:48
HTTP/1.1 601
Server: nginx
Date: Thu, 22 Jan 2026 20:48:35 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
<!DOCTYPE html>
<html>
<title></title>
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1">
<style>
body{font-family:-apple-system,system-ui,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"}a{color:#000;font-size:18px}p{font-size:20px;height:40px;line-height:40px}.msg{margin-right:auto;margin-left:auto;position:relative;max-width:767px}.title{background-color:#3a4781;border-radius:15px 15px 0 0;box-shadow:0 0 10px 0 rgba(0,0,0,0.5);transition:background .3s,border .3s,border-radius .3s,box-shadow .3s;padding:10px 25px;display:flex;color:#fff}.body{padding:35px 25px;border-radius:0 0 15px 15px;box-shadow:0 0 10px 0 rgba(0,0,0,0.5);transition:background .3s,border .3s,border-radius .3s,box-shadow .3s}.footer{display:inline;margin:auto;position:relative}.line1,.line2{display:flex;justify-content:center;align-items:center}.logo{color:#24305e;font-size:20px;margin-right:15px;height:120px;display:flex}.subtitle{font-size:30px;font-weight:bolder;height:40px;line-height:40px}.txt{display:flex;text-align:center;justify-content:center;height:40px}@media(max-width:480px){.logo,.cdnlink{display:flex;justify-content:center;align-items:center}.line1{display:block}}
</style>
<script src="https://www.recaptcha.net/recaptcha/api.js?hl=zh-CN" async defer></script>
<script>
function onSubmit(token) {
document.getElementById('cdn_recaptcha_token').value = token;
document.getElementById('cdn_form').action = window.location.href;
document.getElementById('cdn_form').submit()
}
</script>
</head>
<body>
<div class="container">
<div class="msg">
<div class="title">
<h1>t56112.com - 需要进行额外的安全检查</h1>
</div>
<div class="body">
<div class="txt">
<form id="cdn_form" method="GET" action="">
<input type="hidden" name="cdn_recaptcha_token" id="cdn_recaptcha_token" value="" />
<button id="cdn_button" class="g-recaptcha" data-sitekey="6LdSDsMrAAAAAGHztBUkmv1fG5Xl84M1lxcG7-Pc"
data-callback="onSubmit" style="font-size: 20px;padding:5px">人机验证</button>
</form>
</div>
<div class="subtitle">发生了什么?</div>
<p>请求被阻挡。</p>
<div class="subtitle">我应该怎么做?</div>
<p>点击人机验证解除阻挡</p>
<p>代码: 601</p><p>编号: 0871bef45fe64e01aed222a8e55d08e2</p><p>访客地址: 157.245.36.108 </p><p>网址: https://t56112.com/ </p><p>请求方法: GET </p><p>时间: 2026-01-23 04:48:35 </p>
</div>
</div>
</div>
</body>
</html>