LeakIX - Host www2.bandcoder.com

Domain www2.bandcoder.com

China

China Telecom Group

Software information

Tengine

tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 61.170.77.81
Domain: www2.bandcoder.com
Port: 80
URL: http://www2.bandcoder.com

First seen 2025-09-26 07:52
Last seen 2026-02-09 03:29
Open for 135 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8e4417c08e4417c08f42a40867e19f846aad351dea05a053

Found 62 files trough .DS_Store spidering:

/html
/html/admin
/html/aliyun-oss-sdk.js
/html/axios.min.js
/html/clipboard.min.js
/html/fetch2oss.js
/html/images
/html/images/wx-android-download.png
/html/invite-v2
/html/invite-v2/invite.html
/html/invite-v2/invite_files
/html/invite-v2/invite_files/15.1aee34025f70bbd168a7.js
/html/invite-v2/invite_files/2.0eb35459aa18f9db1eca.js
/html/invite-v2/invite_files/4a6315ad99fab41c078e485f277a6185.png
/html/invite-v2/invite_files/9.f2013ef73193e3d91348.js
/html/invite-v2/invite_files/937b2673135d2c2df9ece55b095caac3.png
/html/invite-v2/invite_files/b2.c7ec767.png
/html/invite-v2/invite_files/current.f16fb50.png
/html/invite-v2/invite_files/head_title.ef5def3.png
/html/invite-v2/invite_files/index.20c9b41c0c37d30b3c8b.js
/html/invite-v2/invite_files/index.d544817a02da653407d1f7d195748b2a.css
/html/invite-v2/invite_files/level_up_new.b1d32b8.png
/html/invite-v2/invite_files/lock.7bb6caf.png
/html/invite-v2/invite_files/manifest.98df386b74e74f88392b.js
/html/invite-v2/invite_files/mobilesdk.min.js
/html/invite-v2/invite_files/paste-example.png
/html/invite-v2/invite_files/rb.ea8a931.png
/html/invite-v2/invite_files/share_middle_btn.e7ee513.png
/html/invite-v2/invite_files/share_middle_txt.1257e5b (1).png
/html/invite-v2/invite_files/share_middle_txt.1257e5b.png
/html/invite-v2/invite_files/sp_bg.b95d009.png
/html/invite-v2/invite_files/sp_card.215417c.png
/html/invite-v2/invite_files/sp_head_desc.6d3fa4a.png
/html/invite-v2/invite_files/vendor.61ab3e98886c47a9c11a.js
/html/invite-v2/invite_files/yaoqin_icon4.fa5d15a.png
/html/invite.html
/html/invite_files
/html/js.cookie.min.js
/html/lucky-wheel
/html/lucky-wheel/favicon_32.9dc99275.ico.1
/html/lucky-wheel/FjallaOne-Regular.ttf
/html/lucky-wheel/icon_gift_sprites.a67ae37.png
/html/lucky-wheel/index.html
/html/lucky-wheel/Luckydraw_btn_click_2x.267341c.png
/html/lucky-wheel/Luckydraw_btn_click_disable_2x.c835d84.png
/html/lucky-wheel/manifest.c9d8782ad2f0f523239a.js
/html/lucky-wheel/sentryVendor.85fea9e718ec5b5ba7a3.js
/html/lucky-wheel/turntable.37a26e3b65ee0872dd6e.css
/html/lucky-wheel/turntable.ca7ea8681b75d485f996.js
/html/lucky-wheel/utils.43b73357e0e5c6a85112.js
/html/lucky-wheel/vendor.35dcbc26b15dfce1c5ca.js
/html/md5.js
/html/privacy-policy
/html/privacy-policy.html
/html/user-policy
/html/user-policy.html
/html/vue-video-player.js
/html/wx-android-download.html
/html/zepto.min.js
/index.php
/index_prod.php
/MP_verify_ROVEXFrzg8JDFXIm.txt

Found on 2026-02-09 03:29

Severity: medium
Fingerprint: 5f32cf5d6962f09cfdf2c773fdf2c7735f7453f5db4387afd94823ecbb1efce3

Found 50 files trough .DS_Store spidering:

/html
/html/admin
/html/aliyun-oss-sdk.js
/html/axios.min.js
/html/clipboard.min.js
/html/fetch2oss.js
/html/images
/html/images/wx-android-download.png
/html/invite-v2
/html/invite-v2/invite.html
/html/invite-v2/invite_files
/html/invite-v2/invite_files/15.1aee34025f70bbd168a7.js
/html/invite-v2/invite_files/2.0eb35459aa18f9db1eca.js
/html/invite-v2/invite_files/4a6315ad99fab41c078e485f277a6185.png
/html/invite-v2/invite_files/9.f2013ef73193e3d91348.js
/html/invite-v2/invite_files/937b2673135d2c2df9ece55b095caac3.png
/html/invite-v2/invite_files/b2.c7ec767.png
/html/invite-v2/invite_files/current.f16fb50.png
/html/invite-v2/invite_files/head_title.ef5def3.png
/html/invite-v2/invite_files/index.20c9b41c0c37d30b3c8b.js
/html/invite-v2/invite_files/index.d544817a02da653407d1f7d195748b2a.css
/html/invite-v2/invite_files/level_up_new.b1d32b8.png
/html/invite-v2/invite_files/lock.7bb6caf.png
/html/invite-v2/invite_files/manifest.98df386b74e74f88392b.js
/html/invite-v2/invite_files/mobilesdk.min.js
/html/invite-v2/invite_files/paste-example.png
/html/invite-v2/invite_files/rb.ea8a931.png
/html/invite-v2/invite_files/share_middle_btn.e7ee513.png
/html/invite-v2/invite_files/share_middle_txt.1257e5b (1).png
/html/invite-v2/invite_files/share_middle_txt.1257e5b.png
/html/invite-v2/invite_files/sp_bg.b95d009.png
/html/invite-v2/invite_files/sp_card.215417c.png
/html/invite-v2/invite_files/sp_head_desc.6d3fa4a.png
/html/invite-v2/invite_files/vendor.61ab3e98886c47a9c11a.js
/html/invite-v2/invite_files/yaoqin_icon4.fa5d15a.png
/html/invite.html
/html/invite_files
/html/js.cookie.min.js
/html/lucky-wheel
/html/md5.js
/html/privacy-policy
/html/privacy-policy.html
/html/user-policy
/html/user-policy.html
/html/vue-video-player.js
/html/wx-android-download.html
/html/zepto.min.js
/index.php
/index_prod.php
/MP_verify_ROVEXFrzg8JDFXIm.txt

Found on 2025-11-12 15:34

Create report

Open service 61.170.77.81:80 · www2.bandcoder.com

2026-01-22 22:57

HTTP/1.1 400 Bad Request
Server: Tengine
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Date: Thu, 22 Jan 2026 22:57:05 GMT
Cache-Control: no-cache, private
Access-Control-Allow-Origin: *
Via: ens-cache45.l2cn9026[139,139,400-1280,M], ens-cache68.l2cn9026[140,0], ens-cache10.cn6020[150,150,400-1280,M], ens-cache19.cn6020[153,0]
Ali-Swift-Global-Savetime: 1769122625
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-Error: orig response 4XX error
X-Swift-SaveTime: Thu, 22 Jan 2026 22:57:05 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 3daa4d2717691226254404300e


{
    "type": "Symfony\\Component\\HttpKernel\\Exception\\BadRequestHttpException",
    "message": "token is expired"
}

Found 2026-01-22 by HttpPlugin

Create report

Domain summary

www2.bandcoder.com 2

1 recorded

IP summary

61.170.77.81 1 180.163.147.214 1

2 recorded