LeakIX - Host totocrown.com

Domain totocrown.com

United States

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.67.163.253
Domain: totocrown.com
Port: 443
URL: https://totocrown.com

First seen 2023-11-14 07:51
Last seen 2026-02-09 15:51
Open for 818 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b70033d2390bfcb64fa83bd52b177c53d3

Found 128 files trough .DS_Store spidering:

/assets
/assets/css
/assets/font
/assets/font-awesome-4.6.3
/assets/fonts
/assets/img
/assets/img/24d-dragontiger.jpg
/assets/img/aa
/assets/img/aaa
/assets/img/aab
/assets/img/aac
/assets/img/aad
/assets/img/aae
/assets/img/aaf
/assets/img/aag
/assets/img/aah
/assets/img/aai
/assets/img/aaj
/assets/img/aak
/assets/img/aal
/assets/img/aam
/assets/img/aan
/assets/img/aao
/assets/img/aap
/assets/img/aaq
/assets/img/aar
/assets/img/aas
/assets/img/aat
/assets/img/aau
/assets/img/aav
/assets/img/aaw
/assets/img/aax
/assets/img/aay
/assets/img/aaz
/assets/img/ab
/assets/img/aba
/assets/img/abb
/assets/img/abc
/assets/img/abd
/assets/img/abe
/assets/img/abf
/assets/img/abg
/assets/img/abh
/assets/img/abi
/assets/img/abj
/assets/img/abk
/assets/img/abl
/assets/img/abm
/assets/img/abn
/assets/img/abo
/assets/img/abp
/assets/img/abq
/assets/img/abr
/assets/img/abs
/assets/img/abt
/assets/img/abu
/assets/img/abv
/assets/img/abw
/assets/img/abx
/assets/img/aby
/assets/img/abz
/assets/img/ac
/assets/img/aca
/assets/img/acb
/assets/img/acc
/assets/img/accept-a.png
/assets/img/accept-b.png
/assets/img/accept-c.png
/assets/img/acd
/assets/img/ace
/assets/img/acf
/assets/img/acg
/assets/img/ach
/assets/img/aci
/assets/img/acj
/assets/img/ack
/assets/img/acl
/assets/img/acm
/assets/img/acn
/assets/img/aco
/assets/img/acp
/assets/img/acq
/assets/img/acr
/assets/img/acs
/assets/img/act
/assets/img/acu
/assets/img/acv
/assets/img/acw
/assets/img/acx
/assets/img/acy
/assets/img/acz
/assets/img/ad
/assets/img/ad.png
/assets/img/ada
/assets/img/adb
/assets/img/adc
/assets/img/add
/assets/img/ade
/assets/img/adf
/assets/img/adg
/assets/img/adi
/assets/img/adj
/assets/img/adk
/assets/img/adl
/assets/img/adm
/assets/img/adn
/assets/img/ado
/assets/img/adq
/assets/img/adr
/assets/img/ads
/assets/img/adt
/assets/img/adu
/assets/img/adv
/assets/img/adw
/assets/img/adx
/assets/img/ady
/assets/img/adz
/assets/img/ae
/assets/img/aea
/assets/img/aeb
/assets/img/aec
/assets/img/aed
/assets/img/aee
/assets/img/aef
/assets/img/aeg
/assets/img/aeh
/assets/img/aei
/assets/img/aej

Found on 2026-02-09 15:51

Severity: low
Fingerprint: 5f32cf5d6962f09c684e525d684e525dcca2f42b6c43b445bf714ef19c55c3c3

Found 27 files trough .DS_Store spidering:

/assets
/assets/css
/assets/font
/assets/font-awesome-4.6.3
/assets/fonts
/assets/img
/assets/jquery.js
/assets/js
/assets/lang
/assets/re-template
/assets/sample.png
/assets/shio.swf
/assets/suwit.jpg
/assets/totobaru
/css
/favicon.ico
/images
/img
/index.php
/js
/mix-manifest.json
/mobile
/robots.txt
/svg
/sw.js
/web.config
/web.config-

Found on 2025-11-14 14:34

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35bf639e88d48541655944b560995a6f4c9

Found 14 files trough .DS_Store spidering:

/assets
/css
/favicon.ico
/images
/img
/index.php
/js
/mix-manifest.json
/mobile
/robots.txt
/svg
/sw.js
/web.config
/web.config-

Found on 2025-07-27 06:55

Create report

Open service 172.67.163.253:443 · totocrown.com

2026-01-23 07:50

HTTP/1.1 403 Forbidden
Date: Fri, 23 Jan 2026 07:50:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
vary: Accept-Encoding
cache-control: no-cache, private
set-cookie: laravel_session=eyJpdiI6IkNxYnVHcm5SRFRycytNYlBEalI5VEE9PSIsInZhbHVlIjoiTkkvRkQ2TnhoUU9zM0ZENUxad085SFdWZXNlTkpENkNZKzl3Q0JKVWl3czNNeFZlenRwaVREYndVeWtQeFdrZnRvbkRMd2lNZkpjSnhrUEpmNFBISGxRMXVLenBBaGpQMGlLbEhFS21vVDg0TFFvWEFkK0x6S0xxek9VTjc0UHE0OFgySllRMWU0YWxLNXJzNlEreDUwd2V4dzBFNG1HWGZEdDAvUW9XUkJQZFVXa2FBankvSzF6TEJUZWhGNUZQb3RYWnJkKy9vbmN1RFg5NUU4S2FnVlppRUY4WS9QYWdZWjZxUTJNOGhZMkcwSjdNTHdSNW1Pd0hjZjVFbkkwMkhHNnNYdWI4ZXNtb1lQZHQ3dTdsZzkzT0FQSkh1cXRDZTRzVElScHB3dUlRMDgxTGVSSEUvMkYrZDZBYVhETS9KSHVFRjJkUllnUE9GQ1FHMlFtdGxsSDRoRzViSXJZTWFaZ3M3bzNDci9nOURpNFZlVEZteWxxQURCaHBNa1FzV1JyZytRNzBLV0M2TG1zTXovRktFQ3prdDI4Rkd6WEFCcGl2OWlWZmlXU3pwWWVqWW9zOUNHdTdvcitpT2ZzcGVXckhpa1JvUXN6ZjJTOEUyUExpeExKUGtjYXBVbzZLMkNsTFBCdUJXYnNvaWxCdXE1YUlLTWpxNEIreDNpYnQiLCJtYWMiOiJjYTlkZmM4NDQ2MDFmNWM3ZGYwNTRlOWY5NmVlYTE2NTk0ODI0MjJmNWI2MmE4MmI0Mjg4OWFkYmY2YzNlMDZmIiwidGFnIjoiIn0%3D; path=/; httponly
set-cookie: SRVNAME=88f; path=/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=iQo3PXNm%2B438b1OkEpeN7EE4iAgltlQ9%2FyeuJ5Yha848xbcVAAHvpKX08H7obpl192Jyq2UTQ42R9G%2BBwTKyXO9cnd5f6LtKd2ejDeI%3D"}]}
age: 0
x-cache: MISS
x-cache-hits: 0
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9c25b3434b45d380-FRA
alt-svc: h3=":443"; ma=86400

Page title: Forbidden

<!DOCTYPE html>
<html >
    <head>
        <meta charset="utf-8">
        <meta name="viewport" content="width=device-width, initial-scale=1">
        <meta name="robots" content="noindex, nofollow">
        <title>Forbidden</title>

        <!-- Fonts -->
        <link rel="preconnect" href="https://fonts.gstatic.com">
        <link href="https://fonts.googleapis.com/css2?family=Nunito&display=swap" rel="stylesheet">

        <style>
            /*! normalize.css v8.0.1 | MIT License | github.com/necolas/normalize.css */html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}a{background-color:transparent}code{font-family:monospace,monospace;font-size:1em}[hidden]{display:none}html{font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;line-height:1.5}*,:after,:before{box-sizing:border-box;border:0 solid #e2e8f0}a{color:inherit;text-decoration:inherit}code{font-family:Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace}svg,video{display:block;vertical-align:middle}video{max-width:100%;height:auto}.bg-white{--bg-opacity:1;background-color:#fff;background-color:rgba(255,255,255,var(--bg-opacity))}.bg-gray-100{--bg-opacity:1;background-color:#f7fafc;background-color:rgba(247,250,252,var(--bg-opacity))}.border-gray-200{--border-opacity:1;border-color:#edf2f7;border-color:rgba(237,242,247,var(--border-opacity))}.border-gray-400{--border-opacity:1;border-color:#cbd5e0;border-color:rgba(203,213,224,var(--border-opacity))}.border-t{border-top-width:1px}.border-r{border-right-width:1px}.flex{display:flex}.grid{display:grid}.hidden{display:none}.items-center{align-items:center}.justify-center{justify-content:center}.font-semibold{font-weight:600}.h-5{height:1.25rem}.h-8{height:2rem}.h-16{height:4rem}.text-sm{font-size:.875rem}.text-lg{font-size:1.125rem}.leading-7{line-height:1.75rem}.mx-auto{margin-left:auto;margin-right:auto}.ml-1{margin-left:.25rem}.mt-2{margin-top:.5rem}.mr-2{margin-right:.5rem}.ml-2{margin-left:.5rem}.mt-4{margin-top:1rem}.ml-4{margin-left:1rem}.mt-8{margin-top:2rem}.ml-12{margin-left:3rem}.-mt-px{margin-top:-1px}.max-w-xl{max-width:36rem}.max-w-6xl{max-width:72rem}.min-h-screen{min-height:100vh}.overflow-hidden{overflow:hidden}.p-6{padding:1.5rem}.py-4{padding-top:1rem;padding-bottom:1rem}.px-4{padding-left:1rem;padding-right:1rem}.px-6{padding-left:1.5rem;padding-right:1.5rem}.pt-8{padding-top:2rem}.fixed{position:fixed}.relative{position:relative}.top-0{top:0}.right-0{right:0}.shadow{box-shadow:0 1px 3px 0 rgba(0,0,0,.1),0 1px 2px 0 rgba(0,0,0,.06)}.text-center{text-align:center}.text-gray-200{--text-opacity:1;color:#edf2f7;color:rgba(237,242,247,var(--text-opacity))}.text-gray-300{--text-opacity:1;color:#e2e8f0;color:rgba(226,232,240,var(--text-opacity))}.text-gray-400{--text-opacity:1;color:#cbd5e0;color:rgba(203,213,224,var(--text-opacity))}.text-gray-500{--text-opacity:1;color:#a0aec0;color:rgba(160,174,192,var(--text-opacity))}.text-gray-600{--text-opacity:1;color:#718096;color:rgba(113,128,150,var(--text-opacity))}.text-gray-700{--text-opacity:1;color:#4a5568;color:rgba(74,85,104,var(--text-opacity))}.text-gray-900{--text-opacity:1;color:#1a202c;color:rgba(26,32,44,var(--text-opacity))}.uppercase{text-transform:uppercase}.underline{text-decoration:underline}.antialiased{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.tracking-wider{letter-spacing:.05em}.w-5{width:1.25rem}.w-8{width:2rem}.w-auto{width:auto}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}@-webkit-keyframes spin{0%{transform:rotate(0deg)}to{transform:rotate(1turn)}}@keyframes  spin{0%{transform:rotate(0deg)}to{transform:rotate(1turn)}}@-webkit-keyframes ping{0%{transform:scale(1);opacity:1}75%,to{transform:scale(2);opacity:0}}@keyframes  ping{0%{transform:scale(1);opacity:1}75%,to{transform:scale(2);opacity:0}}@-webkit-keyframes pulse{0%,to{opacity:1}50%{opacity:.5}}@keyframes  pulse{0%,to{opacity:1}50%{opacity:.5}}@-webkit-keyframes bounce{0%,to{transform:transla

Found 2026-01-23 by HttpPlugin