LeakIX - Host 112.90.43.63

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 42.4.53.183
Domain: fkzbt.buyuleyuan.com
Port: 443
URL: https://fkzbt.buyuleyuan.com

First seen 2022-09-21 15:37
Last seen 2025-12-08 10:10
Open for 1173 days

Severity: low
Fingerprint: 5f32cf5d6962f09c2eda814e2eda814e7da9529eb81fb2cf2763fa9af7de018a
```
Found 6 files trough .DS_Store spidering:

/attachment
/Tpl
/Tpl/admin
/Tpl/layui
/Tpl/layui/css
/Tpl/layui/font
```
Found on 2025-12-08 10:10
Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf176426141f8428442ac0b8442ac0b8442ac0b
```
Found 2 files trough .DS_Store spidering:

/attachment
/Tpl
```
Found on 2025-12-06 05:43
Severity: low
Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc679bef9cecda15a157712480672686c4
```
Found 4 files trough .DS_Store spidering:

/attachment
/Tpl
/Tpl/admin
/Tpl/layui
```
Found on 2022-09-21 15:37

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 112.90.43.63
Domain: www.usails.com.cn
Port: 443
URL: https://www.usails.com.cn

First seen 2022-09-26 03:12
Last seen 2025-10-24 07:11
Open for 1124 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb0c894e87

[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = https://e.coding.net/usails/Official/youfan-official-web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2025-10-24 07:11

323 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 112.90.43.63
Domain: m.adyounger.com
Port: 443
URL: https://m.adyounger.com

First seen 2022-09-02 08:22
Last seen 2025-07-31 01:42
Open for 1062 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226eeb60d1

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitee.com/flypomlee/fw-static-js.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2025-07-31 01:42

269 Bytes

Create report

Laravel development panel enabled

The application has Laravel development panel enabled.

It enables an attacker to access the following sensitive content :

System configuration
Request log, including POST request with credentials and/or api keys

IP: 112.90.43.63
Domain: lzji.cn
Port: 443
URL: https://lzji.cn

First seen 2022-08-24 02:57
Last seen 2025-05-22 07:22
Open for 1002 days

Fingerprint: 3ae8115d762f12d0061d6ad6061d6ad6061d6ad6061d6ad6061d6ad6061d6ad6
```
Laravel Telescope enabled at https://lzji.cn
```
Found on 2025-05-22 07:22

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 112.90.43.63
Domain: www.qiuchenglei.top
Port: 443
URL: https://www.qiuchenglei.top

First seen 2022-09-07 03:10
Last seen 2023-09-19 03:25
Open for 377 days

Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf176421954ce76dc37be22dc37be22dc37be22
```
Found 2 files trough .DS_Store spidering:

/img
/manifest.json
```
Found on 2022-09-07 03:11

Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733fc0965ef72c8d104c2ad7b9d390915c91

Found 10 files trough .DS_Store spidering:

/img
/img/beian.png
/img/code.jpg
/img/favicon.ico
/img/icons.png
/img/ld4k.jpg
/img/logo_img.png
/img/pika.png
/img/wx.jpg
/manifest.json

Found on 2022-09-07 03:10

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 42.4.53.189
Domain: piao.zhongbaolb.cn
Port: 443
URL: https://piao.zhongbaolb.cn

First seen 2022-09-12 13:35
Last seen 2022-10-11 10:22
Open for 28 days

Severity: low
Fingerprint: 5f32cf5d6962f09c47dfe71947dfe7199d67b136f23b658dda5d81abb7a79c14

Found 16 files trough .DS_Store spidering:

/Application
/Application/Home
/Application/Home/Controller
/Application/Home/View
/Application/Home/View/default
/Application/Home/View/default/Index
/Application/Home/View/Index
/Application/Home/View/view3
/Application/Home/View/view3/Index
/Application/Payment
/Application/Tpl
/Application/User
/assets
/dfdemo
/Public
/Runtime

Found on 2022-10-11 10:22

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772ac4f867986b12274291ec5eaab82e319

Found 11 files trough .DS_Store spidering:

/Application
/Application/Home
/Application/Home/Controller
/Application/Home/View
/Application/Payment
/Application/Tpl
/Application/User
/assets
/dfdemo
/Public
/Runtime

Found on 2022-10-11 10:22

Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe3d5e20dd7f8729787389055647d804ae

Found 15 files trough .DS_Store spidering:

/Application
/Application/Home
/Application/Home/Controller
/Application/Home/View
/Application/Home/View/default
/Application/Home/View/default/Index
/Application/Home/View/Index
/Application/Home/View/view3
/Application/Payment
/Application/Tpl
/Application/User
/assets
/dfdemo
/Public
/Runtime

Found on 2022-09-12 13:36

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35bb9380c68e14e281b40a825557ecedebb

Found 14 files trough .DS_Store spidering:

/Application
/Application/Home
/Application/Home/Controller
/Application/Home/View
/Application/Home/View/default
/Application/Home/View/Index
/Application/Home/View/view3
/Application/Payment
/Application/Tpl
/Application/User
/assets
/dfdemo
/Public
/Runtime

Found on 2022-09-12 13:36

Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9f7aa63e686f49de2cb46035684108403
```
Found 5 files trough .DS_Store spidering:

/Application
/assets
/dfdemo
/Public
/Runtime
```
Found on 2022-09-12 13:35

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 114.112.221.148
Domain: c33.vxmanghe.site
Port: 80
URL: http://c33.vxmanghe.site

First seen 2022-09-27 07:56
Last seen 2022-09-27 07:56

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d5dd52db43be5730b01ae3e447294b8af

Found 12 files trough .DS_Store spidering:

/sdk
/sdk/demo_c
/sdk/demo_c/E0XPayService.Utils
/sdk/demo_c/E0XPayService.Web
/sdk/demo_c/packages
/sdk/demo_java
/sdk/demo_java/src
/sdk/demo_java/src/main
/sdk/demo_java/src/test
/sdk/demo_php
/sdk/plugin_epay
/sdk/plugin_erphpdown

Found on 2022-09-27 07:56

Severity: low
Fingerprint: 5f32cf5d6962f09c2eda814e2eda814ea6f416ebd11d272a6ace37bedfdc7446

Found 6 files trough .DS_Store spidering:

/sdk
/sdk/demo_c
/sdk/demo_java
/sdk/demo_php
/sdk/plugin_epay
/sdk/plugin_erphpdown

Found on 2022-09-27 07:56

Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e4395032b5543416a6456e08f9d56bfc6

Found 20 files trough .DS_Store spidering:

/sdk
/sdk/demo_c
/sdk/demo_c/E0XPayService.Utils
/sdk/demo_c/E0XPayService.Web
/sdk/demo_c/packages
/sdk/demo_java
/sdk/demo_java/src
/sdk/demo_java/src/main
/sdk/demo_java/src/main/java
/sdk/demo_java/src/main/java/com
/sdk/demo_java/src/main/java/com/example
/sdk/demo_java/src/main/java/com/example/config
/sdk/demo_java/src/main/java/com/example/controller
/sdk/demo_java/src/main/java/com/example/DemoApplication.java
/sdk/demo_java/src/main/java/com/example/utils
/sdk/demo_java/src/main/resources
/sdk/demo_java/src/test
/sdk/demo_php
/sdk/plugin_epay
/sdk/plugin_erphpdown

Found on 2022-09-27 07:56

Severity: low
Fingerprint: 5f32cf5d6962f09c47dfe71947dfe719fb5ede700e19712fe0970028c086925b

Found 16 files trough .DS_Store spidering:

/sdk
/sdk/demo_c
/sdk/demo_c/E0XPayService.Utils
/sdk/demo_c/E0XPayService.Web
/sdk/demo_c/packages
/sdk/demo_java
/sdk/demo_java/src
/sdk/demo_java/src/main
/sdk/demo_java/src/main/java
/sdk/demo_java/src/main/java/com
/sdk/demo_java/src/main/java/com/example
/sdk/demo_java/src/main/resources
/sdk/demo_java/src/test
/sdk/demo_php
/sdk/plugin_epay
/sdk/plugin_erphpdown

Found on 2022-09-27 07:56

Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbeb54b233bcd8a315ae9f90f5f24cbcdc1

Found 15 files trough .DS_Store spidering:

/sdk
/sdk/demo_c
/sdk/demo_c/E0XPayService.Utils
/sdk/demo_c/E0XPayService.Web
/sdk/demo_c/packages
/sdk/demo_java
/sdk/demo_java/src
/sdk/demo_java/src/main
/sdk/demo_java/src/main/java
/sdk/demo_java/src/main/java/com
/sdk/demo_java/src/main/resources
/sdk/demo_java/src/test
/sdk/demo_php
/sdk/plugin_epay
/sdk/plugin_erphpdown

Found on 2022-09-27 07:56

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247253dc86eccc966c7733a3191acdaf15505

Found 9 files trough .DS_Store spidering:

/sdk
/sdk/demo_c
/sdk/demo_c/E0XPayService.Utils
/sdk/demo_c/E0XPayService.Web
/sdk/demo_c/packages
/sdk/demo_java
/sdk/demo_php
/sdk/plugin_epay
/sdk/plugin_erphpdown

Found on 2022-09-27 07:56

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 42.4.53.189
Domain: c33.vxmanghe.site
Port: 443
URL: https://c33.vxmanghe.site

First seen 2022-09-27 07:56
Last seen 2022-09-27 07:56

Severity: low
Fingerprint: 5f32cf5d6962f09c2eda814e2eda814ea6f416ebd11d272a6ace37bedfdc7446

Found 6 files trough .DS_Store spidering:

/sdk
/sdk/demo_c
/sdk/demo_java
/sdk/demo_php
/sdk/plugin_epay
/sdk/plugin_erphpdown

Found on 2022-09-27 07:56

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d5dd52db43be5730b01ae3e447294b8af

Found 12 files trough .DS_Store spidering:

/sdk
/sdk/demo_c
/sdk/demo_c/E0XPayService.Utils
/sdk/demo_c/E0XPayService.Web
/sdk/demo_c/packages
/sdk/demo_java
/sdk/demo_java/src
/sdk/demo_java/src/main
/sdk/demo_java/src/test
/sdk/demo_php
/sdk/plugin_epay
/sdk/plugin_erphpdown

Found on 2022-09-27 07:56

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b4b10f88666079e8dbc5bd4220fce74be

Found 14 files trough .DS_Store spidering:

/sdk
/sdk/demo_c
/sdk/demo_c/E0XPayService.Utils
/sdk/demo_c/E0XPayService.Web
/sdk/demo_c/packages
/sdk/demo_java
/sdk/demo_java/src
/sdk/demo_java/src/main
/sdk/demo_java/src/main/java
/sdk/demo_java/src/main/resources
/sdk/demo_java/src/test
/sdk/demo_php
/sdk/plugin_epay
/sdk/plugin_erphpdown

Found on 2022-09-27 07:56

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247253dc86eccc966c7733a3191acdaf15505

Found 9 files trough .DS_Store spidering:

/sdk
/sdk/demo_c
/sdk/demo_c/E0XPayService.Utils
/sdk/demo_c/E0XPayService.Web
/sdk/demo_c/packages
/sdk/demo_java
/sdk/demo_php
/sdk/plugin_epay
/sdk/plugin_erphpdown

Found on 2022-09-27 07:56

Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733fada54b5a96533e5973c6da5eb4d2c130

Found 10 files trough .DS_Store spidering:

/sdk
/sdk/demo_c
/sdk/demo_c/E0XPayService.Utils
/sdk/demo_c/E0XPayService.Web
/sdk/demo_c/packages
/sdk/demo_java
/sdk/demo_java/src
/sdk/demo_php
/sdk/plugin_epay
/sdk/plugin_erphpdown

Found on 2022-09-27 07:56

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 61.54.91.250
Domain: www.ikymec.cn
Port: 443
URL: https://www.ikymec.cn

First seen 2022-09-21 06:21

Severity: low
Fingerprint: 5f32cf5d6962f09c47dfe71947dfe719fb5ede700e19712fe0970028c086925b

Found 16 files trough .DS_Store spidering:

/sdk
/sdk/demo_c
/sdk/demo_c/E0XPayService.Utils
/sdk/demo_c/E0XPayService.Web
/sdk/demo_c/packages
/sdk/demo_java
/sdk/demo_java/src
/sdk/demo_java/src/main
/sdk/demo_java/src/main/java
/sdk/demo_java/src/main/java/com
/sdk/demo_java/src/main/java/com/example
/sdk/demo_java/src/main/resources
/sdk/demo_java/src/test
/sdk/demo_php
/sdk/plugin_epay
/sdk/plugin_erphpdown

Found on 2022-09-21 06:21

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d5dd52db43be5730b01ae3e447294b8af

Found 12 files trough .DS_Store spidering:

/sdk
/sdk/demo_c
/sdk/demo_c/E0XPayService.Utils
/sdk/demo_c/E0XPayService.Web
/sdk/demo_c/packages
/sdk/demo_java
/sdk/demo_java/src
/sdk/demo_java/src/main
/sdk/demo_java/src/test
/sdk/demo_php
/sdk/plugin_epay
/sdk/plugin_erphpdown

Found on 2022-09-21 06:21

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b4b10f88666079e8dbc5bd4220fce74be

Found 14 files trough .DS_Store spidering:

/sdk
/sdk/demo_c
/sdk/demo_c/E0XPayService.Utils
/sdk/demo_c/E0XPayService.Web
/sdk/demo_c/packages
/sdk/demo_java
/sdk/demo_java/src
/sdk/demo_java/src/main
/sdk/demo_java/src/main/java
/sdk/demo_java/src/main/resources
/sdk/demo_java/src/test
/sdk/demo_php
/sdk/plugin_epay
/sdk/plugin_erphpdown

Found on 2022-09-21 06:21

Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733fada54b5a96533e5973c6da5eb4d2c130

Found 10 files trough .DS_Store spidering:

/sdk
/sdk/demo_c
/sdk/demo_c/E0XPayService.Utils
/sdk/demo_c/E0XPayService.Web
/sdk/demo_c/packages
/sdk/demo_java
/sdk/demo_java/src
/sdk/demo_php
/sdk/plugin_epay
/sdk/plugin_erphpdown

Found on 2022-09-21 06:21

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247253dc86eccc966c7733a3191acdaf15505

Found 9 files trough .DS_Store spidering:

/sdk
/sdk/demo_c
/sdk/demo_c/E0XPayService.Utils
/sdk/demo_c/E0XPayService.Web
/sdk/demo_c/packages
/sdk/demo_java
/sdk/demo_php
/sdk/plugin_epay
/sdk/plugin_erphpdown

Found on 2022-09-21 06:21

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 112.90.43.63
Domain: www.zhihuiqice.com
Port: 443
URL: https://www.zhihuiqice.com

First seen 2022-08-12 08:38
Last seen 2022-08-12 08:38

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652246e522b6

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://gitlab.zhihuiqice.com:7777/zhqc/company-website/gw-web
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2022-08-12 08:38

286 Bytes

Create report

Host 112.90.43.63

China

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Laravel development panel enabled

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Domain summary