LeakIX - Host 122.228.86.130

Host 122.228.86.130

China

CHINANET SiChuan Telecom Internet Data Center

Software information

openresty

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.134
Domain: cdn.node100.com
Port: 443
URL: https://cdn.node100.com

First seen 2025-11-30 07:50
Last seen 2026-02-12 16:57
Open for 74 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8efce1938efce193f79f19604e607baed8fdd494fb0744b2

Found 36 files trough .DS_Store spidering:

/index.php
/license.txt
/readme.html
/wp-activate.php
/wp-admin
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-content/index.php
/wp-content/languages
/wp-content/plugins
/wp-content/plugins/advanced-custom-fields-pro
/wp-content/plugins/akismet
/wp-content/plugins/hello.php
/wp-content/plugins/index.php
/wp-content/plugins/jet-elements
/wp-content/plugins/jupiterx-core
/wp-content/themes
/wp-content/themes/index.php
/wp-content/themes/jupiterx
/wp-content/themes/jupiterx-child
/wp-content/themes/twentytwentyone
/wp-content/upgrade
/wp-content/uploads
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2026-02-12 16:57

Severity: low
Fingerprint: 5f32cf5d6962f09c81c345f781c345f737ea2efc7860108ac8f65f78a0d140ad

Found 32 files trough .DS_Store spidering:

/index.php
/license.txt
/readme.html
/wp-activate.php
/wp-admin
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-content/index.php
/wp-content/languages
/wp-content/plugins
/wp-content/plugins/advanced-custom-fields-pro
/wp-content/plugins/akismet
/wp-content/plugins/hello.php
/wp-content/plugins/index.php
/wp-content/plugins/jet-elements
/wp-content/plugins/jupiterx-core
/wp-content/themes
/wp-content/upgrade
/wp-content/uploads
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2025-12-23 05:40

Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e46303911e2c8bb738f82ed3dd91fcc41

Found 20 files trough .DS_Store spidering:

/index.php
/license.txt
/readme.html
/wp-activate.php
/wp-admin
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2025-12-11 12:21

Severity: low
Fingerprint: 5f32cf5d6962f09c87f05b7087f05b70081341576b65621dec87f26b847267d4

Found 26 files trough .DS_Store spidering:

/index.php
/license.txt
/readme.html
/wp-activate.php
/wp-admin
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-content/index.php
/wp-content/languages
/wp-content/plugins
/wp-content/themes
/wp-content/upgrade
/wp-content/uploads
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2025-11-30 07:50

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 122.228.86.130
Domain: cdn.kingcyk.com
Port: 80
URL: http://cdn.kingcyk.com

First seen 2025-10-25 18:49
Last seen 2026-02-11 17:32
Open for 108 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-02-11 17:32
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.130
Domain: img.sdmengchuang.com
Port: 443
URL: https://img.sdmengchuang.com

First seen 2025-11-04 01:51
Last seen 2026-02-10 08:09
Open for 98 days

Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d325beceb325beceb325beceb325beceb
```
Found 1 files trough .DS_Store spidering:

/assets
```
Found on 2026-02-10 08:09

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b70033d239b9fea09bd17bcb956b884ca7

Found 128 files trough .DS_Store spidering:

/assets
/assets/addons
/assets/css
/assets/fonts
/assets/img
/assets/img/32px.png
/assets/img/40px.png
/assets/img/avatar.png
/assets/img/blank.gif
/assets/img/circle.png
/assets/img/cross.png
/assets/img/default_image.png
/assets/img/detection
/assets/img/detection/liy-img01.png
/assets/img/detection/liy-img02.png
/assets/img/detection/liy-img03.png
/assets/img/detection/liy-img04.png
/assets/img/detection/liy-img05.png
/assets/img/detection/liy-img06.png
/assets/img/detection/liy-img07.png
/assets/img/detection/liy-img08.png
/assets/img/detection/liy-img09.png
/assets/img/detection/liy-img10.png
/assets/img/detection/liy-img11.png
/assets/img/detection/liy-img12.png
/assets/img/detection/liy-img13.png
/assets/img/detection/liy-img14.png
/assets/img/detection/liy-img15.png
/assets/img/detection/liy-img16.png
/assets/img/detection/liy-img17.png
/assets/img/detection/liy-img18.png
/assets/img/detection/liy-img19.png
/assets/img/detection/liy-img20.png
/assets/img/detection/liy-img21.png
/assets/img/detection/liy-img22.png
/assets/img/detection/liy-img23.png
/assets/img/detection/liy-img24.png
/assets/img/detection/liy-img25.png
/assets/img/detection/liy-img26.png
/assets/img/detection/liy-img27.png
/assets/img/detection/liy-img28.png
/assets/img/detection/liy-img33.png
/assets/img/detection/liy-img34.png
/assets/img/detection/liy-img35.png
/assets/img/detection/liy-img36.png
/assets/img/detection/liy-img37.png
/assets/img/detection/liy-img38.png
/assets/img/detection/liy-img39.gif
/assets/img/error.svg
/assets/img/favicon.ico
/assets/img/health
/assets/img/health/liy-img01.png
/assets/img/health/liy-img02.png
/assets/img/health/liy-img03.png
/assets/img/health/liy-img04.png
/assets/img/health/liy-img05.png
/assets/img/health/liy-img06.png
/assets/img/health/liy-img07.png
/assets/img/health/liy-img08.png
/assets/img/health/liy-img09.png
/assets/img/health/liy-img10.png
/assets/img/health/liy-img11.png
/assets/img/health/liy-img12.png
/assets/img/health/liy-img13.png
/assets/img/health/liy-img14.png
/assets/img/health/liy-img15.png
/assets/img/health/liy-img16.png
/assets/img/health/liy-img17.png
/assets/img/health/liy-img18.png
/assets/img/health/liy-img19.png
/assets/img/health/liy-img20.png
/assets/img/health/liy-img21.png
/assets/img/health/liy-img22.png
/assets/img/health/liy-img23.png
/assets/img/health/liy-img24.png
/assets/img/health/liy-img25.png
/assets/img/health/liy-img26.png
/assets/img/health/liy-img27.png
/assets/img/health/liy-img28.png
/assets/img/health/liy-img29.png
/assets/img/health/liy-img30.png
/assets/img/health/liy-img31.png
/assets/img/health/liy-img32.png
/assets/img/health/liy-img33.png
/assets/img/health/liy-img34.png
/assets/img/health/liy-img35.png
/assets/img/health/liy-img36.png
/assets/img/health/liy-img37.png
/assets/img/health/liy-img38.png
/assets/img/health/liy-img39.png
/assets/img/health/liy-img40.png
/assets/img/health/liy-img41.png
/assets/img/health/liy-img42.png
/assets/img/health/liy-img43.png
/assets/img/health/liy-img44.png
/assets/img/health/liy-img45.png
/assets/img/health/liy-img46.png
/assets/img/health/liy-img47.png
/assets/img/health/liy-img48.png
/assets/img/health/liy-img49.png
/assets/img/health/liy-img50.png
/assets/img/health/liy-img51.png
/assets/img/health/liy-img52.jpg
/assets/img/images
/assets/img/images/63df9c36f7dcf7869e02ce1f25248c6e.png
/assets/img/images/8268cc5babc6c15bbc6383b00474d703.png
/assets/img/images/8b36933c0da0509541570880ad23524c.png
/assets/img/images/a1d359cecc2f4f6ab5ab1c2445dc0745.png
/assets/img/images/a5ead86d0974945360502b845ca6bcbc.png
/assets/img/images/adsasdjasdjkhasd.png
/assets/img/images/adshsadjhkasdjas.png
/assets/img/images/adsjhasdjkasdjhkasd.png
/assets/img/images/ajhsdjasdjhasd.png
/assets/img/images/d025125ff20e58878c1549d1b9d4ae58.jpg
/assets/img/images/d4a591853d52d9c4f91ccf2199b121c7.jpg
/assets/img/images/dahjwqhewqh.png
/assets/img/images/dasasdasdjhkas.png
/assets/img/images/dashjasdjhasdjhkasd.png
/assets/img/images/ewqewqwqewe.png
/assets/img/images/f0060bbc241e25408cf27021accdc03a.jpg
/assets/img/images/f68c619e04acf47beddf812a20c37eff.png
/assets/img/images/photo-1513159446162-54eb8bdaa79b.avif
/assets/img/images/qwekldsajlkdsa.png
/assets/img/images/sadsdajhksad.png
/assets/img/images/sadwqeiwqjke.png
/assets/img/images/sdajhasdjasdjhas.png
/assets/img/images/wqeiowuqoiads.png
/assets/img/images/wqeiuweqiwioqeiwq.png

Found on 2026-02-10 08:09

Severity: medium
Fingerprint: 5f32cf5d6962f09cacbf01a6acbf01a67fbba4229945d070aa259178d9c1025c

Found 118 files trough .DS_Store spidering:

/assets
/assets/addons
/assets/css
/assets/fonts
/assets/img
/assets/img/32px.png
/assets/img/40px.png
/assets/img/avatar.png
/assets/img/blank.gif
/assets/img/circle.png
/assets/img/cross.png
/assets/img/default_image.png
/assets/img/detection
/assets/img/detection/liy-img01.png
/assets/img/detection/liy-img02.png
/assets/img/detection/liy-img03.png
/assets/img/detection/liy-img04.png
/assets/img/detection/liy-img05.png
/assets/img/detection/liy-img06.png
/assets/img/detection/liy-img07.png
/assets/img/detection/liy-img08.png
/assets/img/detection/liy-img09.png
/assets/img/detection/liy-img10.png
/assets/img/detection/liy-img11.png
/assets/img/detection/liy-img12.png
/assets/img/detection/liy-img13.png
/assets/img/detection/liy-img14.png
/assets/img/detection/liy-img15.png
/assets/img/detection/liy-img16.png
/assets/img/detection/liy-img17.png
/assets/img/detection/liy-img18.png
/assets/img/detection/liy-img19.png
/assets/img/detection/liy-img20.png
/assets/img/detection/liy-img21.png
/assets/img/detection/liy-img22.png
/assets/img/detection/liy-img23.png
/assets/img/detection/liy-img24.png
/assets/img/detection/liy-img25.png
/assets/img/detection/liy-img26.png
/assets/img/detection/liy-img27.png
/assets/img/detection/liy-img28.png
/assets/img/detection/liy-img33.png
/assets/img/detection/liy-img34.png
/assets/img/detection/liy-img35.png
/assets/img/detection/liy-img36.png
/assets/img/detection/liy-img37.png
/assets/img/detection/liy-img38.png
/assets/img/detection/liy-img39.gif
/assets/img/error.svg
/assets/img/favicon.ico
/assets/img/health
/assets/img/health/liy-img01.png
/assets/img/health/liy-img02.png
/assets/img/health/liy-img03.png
/assets/img/health/liy-img04.png
/assets/img/health/liy-img05.png
/assets/img/health/liy-img06.png
/assets/img/health/liy-img07.png
/assets/img/health/liy-img08.png
/assets/img/health/liy-img09.png
/assets/img/health/liy-img10.png
/assets/img/health/liy-img11.png
/assets/img/health/liy-img12.png
/assets/img/health/liy-img13.png
/assets/img/health/liy-img14.png
/assets/img/health/liy-img15.png
/assets/img/health/liy-img16.png
/assets/img/health/liy-img17.png
/assets/img/health/liy-img18.png
/assets/img/health/liy-img19.png
/assets/img/health/liy-img20.png
/assets/img/health/liy-img21.png
/assets/img/health/liy-img22.png
/assets/img/health/liy-img23.png
/assets/img/health/liy-img24.png
/assets/img/health/liy-img25.png
/assets/img/health/liy-img26.png
/assets/img/health/liy-img27.png
/assets/img/health/liy-img28.png
/assets/img/health/liy-img29.png
/assets/img/health/liy-img30.png
/assets/img/health/liy-img31.png
/assets/img/health/liy-img32.png
/assets/img/health/liy-img33.png
/assets/img/health/liy-img34.png
/assets/img/health/liy-img35.png
/assets/img/health/liy-img36.png
/assets/img/health/liy-img37.png
/assets/img/health/liy-img38.png
/assets/img/health/liy-img39.png
/assets/img/health/liy-img40.png
/assets/img/health/liy-img41.png
/assets/img/health/liy-img42.png
/assets/img/health/liy-img43.png
/assets/img/health/liy-img44.png
/assets/img/health/liy-img45.png
/assets/img/health/liy-img46.png
/assets/img/health/liy-img47.png
/assets/img/health/liy-img48.png
/assets/img/health/liy-img49.png
/assets/img/health/liy-img50.png
/assets/img/health/liy-img51.png
/assets/img/health/liy-img52.jpg
/assets/img/images
/assets/img/index
/assets/img/info.svg
/assets/img/loading.gif
/assets/img/login-head.png
/assets/img/logo.png
/assets/img/mask.png
/assets/img/qrcode.png
/assets/img/screen
/assets/img/success.svg
/assets/img/throbber.gif
/assets/index.html
/assets/js
/assets/less
/assets/libs

Found on 2025-12-20 11:54

Severity: medium
Fingerprint: 5f32cf5d6962f09c8051bd0c8051bd0c499f85fcf8dbc9c2ff6510e64ec4a9fd

Found 66 files trough .DS_Store spidering:

/assets
/assets/addons
/assets/css
/assets/fonts
/assets/img
/assets/img/32px.png
/assets/img/40px.png
/assets/img/avatar.png
/assets/img/blank.gif
/assets/img/circle.png
/assets/img/cross.png
/assets/img/default_image.png
/assets/img/detection
/assets/img/detection/liy-img01.png
/assets/img/detection/liy-img02.png
/assets/img/detection/liy-img03.png
/assets/img/detection/liy-img04.png
/assets/img/detection/liy-img05.png
/assets/img/detection/liy-img06.png
/assets/img/detection/liy-img07.png
/assets/img/detection/liy-img08.png
/assets/img/detection/liy-img09.png
/assets/img/detection/liy-img10.png
/assets/img/detection/liy-img11.png
/assets/img/detection/liy-img12.png
/assets/img/detection/liy-img13.png
/assets/img/detection/liy-img14.png
/assets/img/detection/liy-img15.png
/assets/img/detection/liy-img16.png
/assets/img/detection/liy-img17.png
/assets/img/detection/liy-img18.png
/assets/img/detection/liy-img19.png
/assets/img/detection/liy-img20.png
/assets/img/detection/liy-img21.png
/assets/img/detection/liy-img22.png
/assets/img/detection/liy-img23.png
/assets/img/detection/liy-img24.png
/assets/img/detection/liy-img25.png
/assets/img/detection/liy-img26.png
/assets/img/detection/liy-img27.png
/assets/img/detection/liy-img28.png
/assets/img/detection/liy-img33.png
/assets/img/detection/liy-img34.png
/assets/img/detection/liy-img35.png
/assets/img/detection/liy-img36.png
/assets/img/detection/liy-img37.png
/assets/img/detection/liy-img38.png
/assets/img/detection/liy-img39.gif
/assets/img/error.svg
/assets/img/favicon.ico
/assets/img/health
/assets/img/images
/assets/img/index
/assets/img/info.svg
/assets/img/loading.gif
/assets/img/login-head.png
/assets/img/logo.png
/assets/img/mask.png
/assets/img/qrcode.png
/assets/img/screen
/assets/img/success.svg
/assets/img/throbber.gif
/assets/index.html
/assets/js
/assets/less
/assets/libs

Found on 2025-11-29 00:31

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247259b6c86338c92187d77bd18ebdb2a7615

Found 9 files trough .DS_Store spidering:

/assets
/assets/addons
/assets/css
/assets/fonts
/assets/img
/assets/index.html
/assets/js
/assets/less
/assets/libs

Found on 2025-11-27 06:34

Severity: low
Fingerprint: 5f32cf5d6962f09c2a439cf82a439cf87ec9e0e858fdca8e47d8723a5ddc3fe7

Found 31 files trough .DS_Store spidering:

/assets
/assets/addons
/assets/css
/assets/fonts
/assets/img
/assets/img/32px.png
/assets/img/40px.png
/assets/img/avatar.png
/assets/img/blank.gif
/assets/img/circle.png
/assets/img/cross.png
/assets/img/default_image.png
/assets/img/detection
/assets/img/error.svg
/assets/img/favicon.ico
/assets/img/health
/assets/img/images
/assets/img/index
/assets/img/info.svg
/assets/img/loading.gif
/assets/img/login-head.png
/assets/img/logo.png
/assets/img/mask.png
/assets/img/qrcode.png
/assets/img/screen
/assets/img/success.svg
/assets/img/throbber.gif
/assets/index.html
/assets/js
/assets/less
/assets/libs

Found on 2025-11-10 12:48

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b70033d239b9fea09bd17bcb951e09711b

Found 128 files trough .DS_Store spidering:

/assets
/assets/addons
/assets/css
/assets/fonts
/assets/img
/assets/img/32px.png
/assets/img/40px.png
/assets/img/avatar.png
/assets/img/blank.gif
/assets/img/circle.png
/assets/img/cross.png
/assets/img/default_image.png
/assets/img/detection
/assets/img/error.svg
/assets/img/favicon.ico
/assets/img/health
/assets/img/health/liy-img01.png
/assets/img/health/liy-img02.png
/assets/img/health/liy-img03.png
/assets/img/health/liy-img04.png
/assets/img/health/liy-img05.png
/assets/img/health/liy-img06.png
/assets/img/health/liy-img07.png
/assets/img/health/liy-img08.png
/assets/img/health/liy-img09.png
/assets/img/health/liy-img10.png
/assets/img/health/liy-img11.png
/assets/img/health/liy-img12.png
/assets/img/health/liy-img13.png
/assets/img/health/liy-img14.png
/assets/img/health/liy-img15.png
/assets/img/health/liy-img16.png
/assets/img/health/liy-img17.png
/assets/img/health/liy-img18.png
/assets/img/health/liy-img19.png
/assets/img/health/liy-img20.png
/assets/img/health/liy-img21.png
/assets/img/health/liy-img22.png
/assets/img/health/liy-img23.png
/assets/img/health/liy-img24.png
/assets/img/health/liy-img25.png
/assets/img/health/liy-img26.png
/assets/img/health/liy-img27.png
/assets/img/health/liy-img28.png
/assets/img/health/liy-img29.png
/assets/img/health/liy-img30.png
/assets/img/health/liy-img31.png
/assets/img/health/liy-img32.png
/assets/img/health/liy-img33.png
/assets/img/health/liy-img34.png
/assets/img/health/liy-img35.png
/assets/img/health/liy-img36.png
/assets/img/health/liy-img37.png
/assets/img/health/liy-img38.png
/assets/img/health/liy-img39.png
/assets/img/health/liy-img40.png
/assets/img/health/liy-img41.png
/assets/img/health/liy-img42.png
/assets/img/health/liy-img43.png
/assets/img/health/liy-img44.png
/assets/img/health/liy-img45.png
/assets/img/health/liy-img46.png
/assets/img/health/liy-img47.png
/assets/img/health/liy-img48.png
/assets/img/health/liy-img49.png
/assets/img/health/liy-img50.png
/assets/img/health/liy-img51.png
/assets/img/health/liy-img52.jpg
/assets/img/images
/assets/img/images/63df9c36f7dcf7869e02ce1f25248c6e.png
/assets/img/images/8268cc5babc6c15bbc6383b00474d703.png
/assets/img/images/8b36933c0da0509541570880ad23524c.png
/assets/img/images/a1d359cecc2f4f6ab5ab1c2445dc0745.png
/assets/img/images/a5ead86d0974945360502b845ca6bcbc.png
/assets/img/images/adsasdjasdjkhasd.png
/assets/img/images/adshsadjhkasdjas.png
/assets/img/images/adsjhasdjkasdjhkasd.png
/assets/img/images/ajhsdjasdjhasd.png
/assets/img/images/d025125ff20e58878c1549d1b9d4ae58.jpg
/assets/img/images/d4a591853d52d9c4f91ccf2199b121c7.jpg
/assets/img/images/dahjwqhewqh.png
/assets/img/images/dasasdasdjhkas.png
/assets/img/images/dashjasdjhasdjhkasd.png
/assets/img/images/ewqewqwqewe.png
/assets/img/images/f0060bbc241e25408cf27021accdc03a.jpg
/assets/img/images/f68c619e04acf47beddf812a20c37eff.png
/assets/img/images/photo-1513159446162-54eb8bdaa79b.avif
/assets/img/images/qwekldsajlkdsa.png
/assets/img/images/sadsdajhksad.png
/assets/img/images/sadwqeiwqjke.png
/assets/img/images/sdajhasdjasdjhas.png
/assets/img/images/wqeiowuqoiads.png
/assets/img/images/wqeiuweqiwioqeiwq.png
/assets/img/images/wqeiuwqiosa.png
/assets/img/images/wqeiwqoie.png
/assets/img/images/wqewqewqwe.png
/assets/img/images/wqewqiueuyiqw.png
/assets/img/images/wqewqoeisasdasd.png
/assets/img/index
/assets/img/index/liy-img01.png
/assets/img/index/liy-img02.png
/assets/img/index/liy-img03.png
/assets/img/index/liy-img04.png
/assets/img/index/liy-img05.png
/assets/img/index/liy-img06.png
/assets/img/index/liy-img07.png
/assets/img/index/liy-img08.png
/assets/img/index/liy-img10.png
/assets/img/index/liy-img11.png
/assets/img/index/liy-img12.png
/assets/img/index/liy-img14.png
/assets/img/index/liy-img15.png
/assets/img/index/liy-img16.png
/assets/img/index/liy-img17.png
/assets/img/index/liy-img18.png
/assets/img/index/liy-img19.png
/assets/img/index/liy-img20.png
/assets/img/index/liy-img21.png
/assets/img/index/liy-img22.png
/assets/img/index/liy-img23.png
/assets/img/index/liy-img24.png
/assets/img/index/liy-img25.png
/assets/img/index/liy-img26.png
/assets/img/index/liy-img27.png
/assets/img/index/liy-img28.png
/assets/img/index/liy-img29.png
/assets/img/index/liy-img30.png
/assets/img/index/liy-img31.png

Found on 2025-11-04 01:51

Severity: medium
Fingerprint: 5f32cf5d6962f09ce95adb67e95adb67f6f5680958de320bc47ac225bde3f9d5

Found 83 files trough .DS_Store spidering:

/assets
/assets/addons
/assets/css
/assets/fonts
/assets/img
/assets/img/32px.png
/assets/img/40px.png
/assets/img/avatar.png
/assets/img/blank.gif
/assets/img/circle.png
/assets/img/cross.png
/assets/img/default_image.png
/assets/img/detection
/assets/img/error.svg
/assets/img/favicon.ico
/assets/img/health
/assets/img/health/liy-img01.png
/assets/img/health/liy-img02.png
/assets/img/health/liy-img03.png
/assets/img/health/liy-img04.png
/assets/img/health/liy-img05.png
/assets/img/health/liy-img06.png
/assets/img/health/liy-img07.png
/assets/img/health/liy-img08.png
/assets/img/health/liy-img09.png
/assets/img/health/liy-img10.png
/assets/img/health/liy-img11.png
/assets/img/health/liy-img12.png
/assets/img/health/liy-img13.png
/assets/img/health/liy-img14.png
/assets/img/health/liy-img15.png
/assets/img/health/liy-img16.png
/assets/img/health/liy-img17.png
/assets/img/health/liy-img18.png
/assets/img/health/liy-img19.png
/assets/img/health/liy-img20.png
/assets/img/health/liy-img21.png
/assets/img/health/liy-img22.png
/assets/img/health/liy-img23.png
/assets/img/health/liy-img24.png
/assets/img/health/liy-img25.png
/assets/img/health/liy-img26.png
/assets/img/health/liy-img27.png
/assets/img/health/liy-img28.png
/assets/img/health/liy-img29.png
/assets/img/health/liy-img30.png
/assets/img/health/liy-img31.png
/assets/img/health/liy-img32.png
/assets/img/health/liy-img33.png
/assets/img/health/liy-img34.png
/assets/img/health/liy-img35.png
/assets/img/health/liy-img36.png
/assets/img/health/liy-img37.png
/assets/img/health/liy-img38.png
/assets/img/health/liy-img39.png
/assets/img/health/liy-img40.png
/assets/img/health/liy-img41.png
/assets/img/health/liy-img42.png
/assets/img/health/liy-img43.png
/assets/img/health/liy-img44.png
/assets/img/health/liy-img45.png
/assets/img/health/liy-img46.png
/assets/img/health/liy-img47.png
/assets/img/health/liy-img48.png
/assets/img/health/liy-img49.png
/assets/img/health/liy-img50.png
/assets/img/health/liy-img51.png
/assets/img/health/liy-img52.jpg
/assets/img/images
/assets/img/index
/assets/img/info.svg
/assets/img/loading.gif
/assets/img/login-head.png
/assets/img/logo.png
/assets/img/mask.png
/assets/img/qrcode.png
/assets/img/screen
/assets/img/success.svg
/assets/img/throbber.gif
/assets/index.html
/assets/js
/assets/less
/assets/libs

Found on 2025-11-04 01:51

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 122.228.86.130
Domain: xingchaocdn.xiaoqu88.cn
Port: 443
URL: https://xingchaocdn.xiaoqu88.cn

First seen 2025-11-05 10:49
Last seen 2026-02-04 23:32
Open for 91 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-04 23:32
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 122.228.86.130
Domain: xingchaocdn.xiaoqu88.cn
Port: 80
URL: http://xingchaocdn.xiaoqu88.cn

First seen 2025-11-05 10:49
Last seen 2026-02-04 23:32
Open for 91 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-04 23:32
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 122.228.86.130
Domain: kkcdn.xiaoqu88.cn
Port: 443
URL: https://kkcdn.xiaoqu88.cn

First seen 2025-11-12 05:22
Last seen 2026-01-31 10:46
Open for 80 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-31 10:46
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.130
Domain: zkstu.xiaoguanj.com
Port: 80
URL: http://zkstu.xiaoguanj.com

First seen 2025-11-28 16:11
Last seen 2026-01-29 18:11
Open for 62 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176423468803afd19f75dfd19f75dfd19f75d
```
Found 2 files trough .DS_Store spidering:

/app
/app/controller
```
  Found on 2026-01-29 18:11
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 122.228.86.130
Domain: img.huashitong.net
Port: 80
URL: http://img.huashitong.net

First seen 2025-10-30 01:38
Last seen 2026-01-27 11:55
Open for 89 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd110a331ecc3d9c705c3d9c705c3d9c705c3d9c705c3d9c705
```
Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /api/sl/common/getAdvertise
```
  Found on 2026-01-27 11:55
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.130
Domain: cdn2.rongzk.com
Port: 80
URL: http://cdn2.rongzk.com

First seen 2025-10-24 07:27
Last seen 2026-01-22 02:31
Open for 89 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe626f729b5dfb10b7382db33210200f1a
```
Found 15 files trough .DS_Store spidering:

/.git
/404.html
/app.js
/components
/components.js
/css
/fwxy.html
/images
/index.html
/lib
/main.js
/partners.html
/theme.js
/yhxy.html
/yszc.html
```
  Found on 2026-01-22 02:31
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.130
Domain: 1227xwifyzwcw8c1.iubtxqqu.cn
Port: 443
URL: https://1227xwifyzwcw8c1.iubtxqqu.cn

First seen 2025-12-27 07:32
Last seen 2026-01-18 03:42
Open for 21 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642f079f926267373622673736226737362
```
Found 2 files trough .DS_Store spidering:

/favicon.ico
/img
```
  Found on 2026-01-18 03:42
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.130
Domain: 105bfvm9pgdn.ealhki.cn
Port: 443
URL: https://105bfvm9pgdn.ealhki.cn

First seen 2026-01-05 09:57
Last seen 2026-01-18 03:42
Open for 12 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642f079f926267373622673736226737362
```
Found 2 files trough .DS_Store spidering:

/favicon.ico
/img
```
  Found on 2026-01-18 03:42
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 122.228.86.130
Domain: hlcdn.xiaoqu88.cn
Port: 80
URL: http://hlcdn.xiaoqu88.cn

First seen 2025-10-16 02:31
Last seen 2026-01-14 04:53
Open for 90 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-14 04:53
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 122.228.86.130
Domain: myapi.csgodt.com
Port: 80
URL: http://myapi.csgodt.com

First seen 2025-12-26 17:41
Last seen 2026-01-09 02:53
Open for 13 days

Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e558c7a6861fa20f9c011852d1a1197bce7af21c40

Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
POST /anon/index/findIndexTend
POST /anon/index/findLargeMarketKline
POST /anon/index/findPriceRank
POST /anon/index/index
POST /anon/monitorInventory/findInventoryBaseInfo/{steamId}
POST /anon/monitorInventory/findInventoryDetail
POST /anon/monitorInventory/findInventoryDynamicsPage
POST /anon/monitorInventory/findMonitorAllPage
POST /anon/monitorInventory/findMonitorDynamics
POST /anon/nav/findNav
POST /anon/nav/findNavCategorize
POST /anon/ornaments/findDetail
POST /anon/ornaments/findKline
POST /anon/ornaments/findOrnamentsIds
POST /anon/ornaments/findOrnamentsPage
POST /anon/ornaments/v2/findByTrends
POST /anon/steamGame/findAppIdAll
POST /anon/steamGame/findGameDetail/{appId}
POST /anon/steamGame/findPage
POST /anon/steamGame/findSteamOnline
POST /anon/user/bossLogin
POST /anon/user/bossSendCode
POST /anon/user/login
POST /anon/user/sendCode
POST /biz/file/upload
POST /biz/monitorInventory/deleteSteam
POST /biz/monitorInventory/findMonitorAllPage
POST /biz/monitorInventory/followSteam
POST /biz/monitorInventory/monitorSteam
POST /biz/monitorInventory/pauseSteam
POST /biz/user/findMyService
POST /biz/user/findUserDetail
POST /biz/user/logout
POST /biz/user/sendUpdateMobileCode
POST /biz/user/updateMobile
POST /biz/user/updateUser
POST /biz/userCollect/collect
POST /biz/userCollect/findMyCollect
POST /biz/userCollect/unCollect
POST /boss/file/upload
POST /boss/nav/create
POST /boss/nav/delete/{id}
POST /boss/nav/findBossNavPage
POST /boss/nav/update
POST /boss/navCategorize/create
POST /boss/navCategorize/delete/{id}
POST /boss/navCategorize/findNavCategorize
POST /boss/navCategorize/update
POST /boss/steamdtConfig/findConfig
POST /boss/steamdtConfig/update
POST /boss/steamdtKey/create
POST /boss/steamdtKey/delete/{id}
POST /boss/steamdtKey/findList
POST /boss/steamdtKey/update
POST /boss/zbt/saveBaseProduct

Found on 2026-01-09 02:53

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.132
Domain: img.shuidian.online
Port: 80
URL: http://img.shuidian.online

First seen 2025-10-09 02:39
Last seen 2026-01-05 06:25
Open for 88 days

Severity: low
Fingerprint: 5f32cf5d6962f09c31c2f0b631c2f0b6d18773e9bc564103e1325812c4d7348e

Found 28 files trough .DS_Store spidering:

/crmebimage
/crmebimage/change
/crmebimage/change/bargain_header
/crmebimage/change/bargain_header_bg
/crmebimage/change/bargain_post
/crmebimage/change/bargain_tip
/crmebimage/change/new_header
/crmebimage/change/share_tip
/crmebimage/demoimage
/crmebimage/file
/crmebimage/file/excel
/crmebimage/file/excel/2025
/crmebimage/file/excel/2025/03
/crmebimage/public
/crmebimage/public/content
/crmebimage/public/maintain
/crmebimage/public/maintain/2021
/crmebimage/public/maintain/2023
/crmebimage/public/maintain/2025
/crmebimage/public/operation
/crmebimage/public/operation/2021
/crmebimage/public/operation/2025
/crmebimage/public/product
/crmebimage/public/store
/crmebimage/public/store/2021
/crmebimage/public/store/2021/12
/crmebimage/public/store/2025
/crmebimage/public/user

Found on 2026-01-05 06:25

Severity: low
Fingerprint: 5f32cf5d6962f09c684e525d684e525d2a6de890d152a9bae57d888da9e6ea13

Found 27 files trough .DS_Store spidering:

/crmebimage
/crmebimage/change
/crmebimage/change/bargain_header
/crmebimage/change/bargain_header_bg
/crmebimage/change/bargain_post
/crmebimage/change/bargain_tip
/crmebimage/change/new_header
/crmebimage/change/share_tip
/crmebimage/demoimage
/crmebimage/file
/crmebimage/file/excel
/crmebimage/file/excel/2025
/crmebimage/public
/crmebimage/public/content
/crmebimage/public/maintain
/crmebimage/public/maintain/2021
/crmebimage/public/maintain/2023
/crmebimage/public/maintain/2025
/crmebimage/public/operation
/crmebimage/public/operation/2021
/crmebimage/public/operation/2025
/crmebimage/public/product
/crmebimage/public/store
/crmebimage/public/store/2021
/crmebimage/public/store/2021/12
/crmebimage/public/store/2025
/crmebimage/public/user

Found on 2026-01-05 06:25

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f87720669d23dd88e7de7e52ec2761c3f1d70

Found 11 files trough .DS_Store spidering:

/crmebimage
/crmebimage/change
/crmebimage/change/bargain_header
/crmebimage/change/bargain_header_bg
/crmebimage/change/bargain_post
/crmebimage/change/bargain_tip
/crmebimage/change/new_header
/crmebimage/change/share_tip
/crmebimage/demoimage
/crmebimage/file
/crmebimage/public

Found on 2025-12-01 06:31

Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e656fa5f1c783b47b25ff8bfa2c0dd0f6

Found 20 files trough .DS_Store spidering:

/crmebimage
/crmebimage/change
/crmebimage/change/bargain_header
/crmebimage/change/bargain_header_bg
/crmebimage/change/bargain_post
/crmebimage/change/bargain_tip
/crmebimage/change/new_header
/crmebimage/change/share_tip
/crmebimage/demoimage
/crmebimage/file
/crmebimage/file/excel
/crmebimage/file/excel/2025
/crmebimage/file/excel/2025/03
/crmebimage/public
/crmebimage/public/content
/crmebimage/public/maintain
/crmebimage/public/operation
/crmebimage/public/product
/crmebimage/public/store
/crmebimage/public/user

Found on 2025-11-27 02:14

Severity: low
Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea9ab6c1e841df8d61e5c31ad81aa36a1f6

Found 23 files trough .DS_Store spidering:

/crmebimage
/crmebimage/change
/crmebimage/change/bargain_header
/crmebimage/change/bargain_header_bg
/crmebimage/change/bargain_post
/crmebimage/change/bargain_tip
/crmebimage/change/new_header
/crmebimage/change/share_tip
/crmebimage/demoimage
/crmebimage/file
/crmebimage/file/excel
/crmebimage/file/excel/2025
/crmebimage/file/excel/2025/03
/crmebimage/public
/crmebimage/public/content
/crmebimage/public/maintain
/crmebimage/public/maintain/2021
/crmebimage/public/maintain/2023
/crmebimage/public/maintain/2025
/crmebimage/public/operation
/crmebimage/public/product
/crmebimage/public/store
/crmebimage/public/user

Found on 2025-11-23 00:50

Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9331f8144c9466dde5930c1d0a6511add

Found 5 files trough .DS_Store spidering:

/crmebimage
/crmebimage/change
/crmebimage/demoimage
/crmebimage/file
/crmebimage/public

Found on 2025-11-10 19:58

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d17fce480f4323f0a8818d33dfd0b9165

Found 12 files trough .DS_Store spidering:

/crmebimage
/crmebimage/change
/crmebimage/change/bargain_header
/crmebimage/change/bargain_header_bg
/crmebimage/change/bargain_post
/crmebimage/change/bargain_tip
/crmebimage/change/new_header
/crmebimage/change/share_tip
/crmebimage/demoimage
/crmebimage/file
/crmebimage/file/excel
/crmebimage/public

Found on 2025-11-01 14:33

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35be51499de5b82b32ccbd183b34dc4c107

Found 14 files trough .DS_Store spidering:

/crmebimage
/crmebimage/change
/crmebimage/change/bargain_header
/crmebimage/change/bargain_header_bg
/crmebimage/change/bargain_post
/crmebimage/change/bargain_tip
/crmebimage/change/new_header
/crmebimage/change/share_tip
/crmebimage/demoimage
/crmebimage/file
/crmebimage/file/excel
/crmebimage/file/excel/2025
/crmebimage/file/excel/2025/03
/crmebimage/public

Found on 2025-10-29 04:28

Severity: low
Fingerprint: 5f32cf5d6962f09ca0cc0fcfa0cc0fcfaa269aea778191f8b74c2cafd7e4217a

Found 25 files trough .DS_Store spidering:

/crmebimage
/crmebimage/change
/crmebimage/change/bargain_header
/crmebimage/change/bargain_header_bg
/crmebimage/change/bargain_post
/crmebimage/change/bargain_tip
/crmebimage/change/new_header
/crmebimage/change/share_tip
/crmebimage/demoimage
/crmebimage/file
/crmebimage/file/excel
/crmebimage/file/excel/2025
/crmebimage/file/excel/2025/03
/crmebimage/public
/crmebimage/public/content
/crmebimage/public/maintain
/crmebimage/public/maintain/2021
/crmebimage/public/maintain/2023
/crmebimage/public/maintain/2025
/crmebimage/public/operation
/crmebimage/public/operation/2021
/crmebimage/public/operation/2025
/crmebimage/public/product
/crmebimage/public/store
/crmebimage/public/user

Found on 2025-10-14 18:27

Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9df7278d50f7278d50f7278d50f7278d50
```
Found 1 files trough .DS_Store spidering:

/crmebimage
```
Found on 2025-10-10 15:45

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.132
Domain: share-h5-dxq.xijiedaojia.com
Port: 80
URL: http://share-h5-dxq.xijiedaojia.com

First seen 2025-12-31 07:34
Last seen 2026-01-02 23:28
Open for 2 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cf35cbfb3f35cbfb3a7578c3a9fdb652ec464b3f773be07c2
```
Found 29 files trough .DS_Store spidering:

/device-fingerprint.js
/favicon.ico
/images
/images/camera.png
/images/download1.png
/images/download2.png
/images/download3.png
/images/green-bg.png
/images/invite1.png
/images/invite2.png
/images/invite3.png
/images/invite4.png
/images/invite5.png
/images/level-bg.png
/images/logo.png
/images/massagist-bg1.png
/images/massagist-bg2.png
/images/overlay.png
/images/overlay2.png
/images/partner-bg1.png
/images/post2.png
/images/store-bg1.png
/images/store-bg2.png
/images/store-bg3.png
/images/tech-logo.png
/images/切图 40@2x.png
/manifest.json
/md5.js
/robots.txt
```
  Found on 2026-01-02 23:28
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814ed6236f572d81385fdd88af98ff62d122
```
Found 6 files trough .DS_Store spidering:

/device-fingerprint.js
/favicon.ico
/images
/manifest.json
/md5.js
/robots.txt
```
  Found on 2025-12-31 07:34
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.132
Domain: qncdn.moyi.vip
Port: 80
URL: http://qncdn.moyi.vip

First seen 2025-02-26 01:40
Last seen 2026-01-02 23:05
Open for 310 days

Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e925a4a2aee24fc780ba800edad5608c3

Found 20 files trough .DS_Store spidering:

/assets
/assets/addons
/assets/addons/example
/assets/addons/mymoyi
/assets/addons/qiniu
/assets/css
/assets/css/skins
/assets/css/wechat
/assets/fonts
/assets/fonts/lato
/assets/img
/assets/js
/assets/js/backend
/assets/less
/assets/libs
/assets/libs/art-template
/assets/libs/art-template/demo
/assets/libs/art-template/dist
/assets/libs/tableExport.jquery.plugin
/uploads

Found on 2026-01-02 23:05

Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57adf0e4e1694bf38d48887b0e1ea30e907

Found 19 files trough .DS_Store spidering:

/assets
/assets/addons
/assets/addons/example
/assets/addons/mymoyi
/assets/addons/qiniu
/assets/css
/assets/css/skins
/assets/css/wechat
/assets/fonts
/assets/img
/assets/js
/assets/js/backend
/assets/less
/assets/libs
/assets/libs/art-template
/assets/libs/art-template/demo
/assets/libs/art-template/dist
/assets/libs/tableExport.jquery.plugin
/uploads

Found on 2025-12-23 07:42

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d336cbabbf28773a5a1cb5e809fe308b3

Found 12 files trough .DS_Store spidering:

/assets
/assets/addons
/assets/addons/example
/assets/addons/mymoyi
/assets/addons/qiniu
/assets/css
/assets/fonts
/assets/img
/assets/js
/assets/less
/assets/libs
/uploads

Found on 2025-12-01 05:52

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35bf639e88d260f46cfc6cdf656e112c337

Found 14 files trough .DS_Store spidering:

/assets
/assets/addons
/assets/addons/example
/assets/addons/mymoyi
/assets/addons/qiniu
/assets/css
/assets/css/skins
/assets/css/wechat
/assets/fonts
/assets/img
/assets/js
/assets/less
/assets/libs
/uploads

Found on 2025-11-29 10:25

Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf176423f3e94dee53e19e1e53e19e1e53e19e1
```
Found 2 files trough .DS_Store spidering:

/assets
/uploads
```
Found on 2025-02-28 09:05

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.131
Domain: img.xinyueto.com
Port: 443
URL: https://img.xinyueto.com

First seen 2025-08-28 11:37
Last seen 2026-01-02 21:01
Open for 127 days

Severity: medium
Fingerprint: 5f32cf5d6962f09cd4047824d4047824b1f09fe969be4fb71fc1b9f1285a47d9

Found 35 files trough .DS_Store spidering:

/.well-known
/assets
/assets/addons
/assets/addons/editable
/assets/addons/editable/css
/assets/addons/editable/img
/assets/addons/editable/js
/assets/addons/epay
/assets/addons/epay/css
/assets/addons/epay/images
/assets/addons/epay/js
/assets/addons/epay/less
/assets/addons/posters
/assets/addons/summernote
/assets/addons/summernote/css
/assets/addons/summernote/font
/assets/addons/summernote/js
/assets/addons/summernote/lang
/assets/addons/wechat
/assets/addons/wechat/css
/assets/addons/wechat/images
/assets/addons/weixin
/assets/addons/weixin/css
/assets/addons/weixin/images
/assets/css
/assets/fonts
/assets/img
/assets/js
/assets/less
/assets/libs
/img
/share
/static
/template
/uploads

Found on 2026-01-02 21:01

Severity: medium
Fingerprint: 5f32cf5d6962f09cccd847a3ccd847a3fafb806e7c2b480ac25d87587b33af26

Found 43 files trough .DS_Store spidering:

/.well-known
/assets
/assets/addons
/assets/addons/editable
/assets/addons/editable/css
/assets/addons/editable/img
/assets/addons/editable/js
/assets/addons/epay
/assets/addons/epay/css
/assets/addons/epay/images
/assets/addons/epay/js
/assets/addons/epay/less
/assets/addons/posters
/assets/addons/summernote
/assets/addons/summernote/css
/assets/addons/summernote/font
/assets/addons/summernote/js
/assets/addons/summernote/lang
/assets/addons/wechat
/assets/addons/wechat/css
/assets/addons/wechat/images
/assets/addons/weixin
/assets/addons/weixin/css
/assets/addons/weixin/images
/assets/css
/assets/fonts
/assets/img
/assets/js
/assets/less
/assets/libs
/img
/share
/static
/static/css
/static/fonts
/static/img
/static/img1
/static/ios
/static/js
/static/static
/static/technician
/template
/uploads

Found on 2025-12-25 03:00

Severity: low
Fingerprint: 5f32cf5d6962f09c684e525d684e525dd69400b8bf9bcc28811297ce32d5f82b

Found 27 files trough .DS_Store spidering:

/.well-known
/assets
/assets/addons
/assets/addons/editable
/assets/addons/editable/css
/assets/addons/editable/img
/assets/addons/editable/js
/assets/addons/epay
/assets/addons/epay/css
/assets/addons/epay/images
/assets/addons/epay/js
/assets/addons/epay/less
/assets/addons/posters
/assets/addons/summernote
/assets/addons/wechat
/assets/addons/weixin
/assets/css
/assets/fonts
/assets/img
/assets/js
/assets/less
/assets/libs
/img
/share
/static
/template
/uploads

Found on 2025-11-30 20:38

Severity: low
Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea97af056fc3383868c31b09872ba036ed4

Found 23 files trough .DS_Store spidering:

/.well-known
/assets
/assets/addons
/assets/addons/editable
/assets/addons/editable/css
/assets/addons/editable/img
/assets/addons/editable/js
/assets/addons/epay
/assets/addons/posters
/assets/addons/summernote
/assets/addons/wechat
/assets/addons/weixin
/assets/css
/assets/fonts
/assets/img
/assets/js
/assets/less
/assets/libs
/img
/share
/static
/template
/uploads

Found on 2025-11-28 15:24

Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e1da4672b6f8970fdee0e9b5f6a2b14d0

Found 20 files trough .DS_Store spidering:

/.well-known
/assets
/assets/addons
/assets/addons/editable
/assets/addons/epay
/assets/addons/posters
/assets/addons/summernote
/assets/addons/wechat
/assets/addons/weixin
/assets/css
/assets/fonts
/assets/img
/assets/js
/assets/less
/assets/libs
/img
/share
/static
/template
/uploads

Found on 2025-11-21 11:46

Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe02cbe81bd18097cdf8d0a5ddf54bc9fe

Found 15 files trough .DS_Store spidering:

/.well-known
/assets
/img
/share
/static
/static/css
/static/fonts
/static/img
/static/img1
/static/ios
/static/js
/static/static
/static/technician
/template
/uploads

Found on 2025-08-28 11:37

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b6e0b27d6965e9db2040483a094f3da05

Found 14 files trough .DS_Store spidering:

/.well-known
/assets
/assets/addons
/assets/css
/assets/fonts
/assets/img
/assets/js
/assets/less
/assets/libs
/img
/share
/static
/template
/uploads

Found on 2025-08-28 11:37

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.130
Domain: tyc2.bpwfjt.com
Port: 443
URL: https://tyc2.bpwfjt.com

First seen 2025-08-05 15:04
Last seen 2026-01-02 20:06
Open for 150 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cf35cbfb3f35cbfb3f518e73162c6088522253e3d2e2c2e41
```
Found 29 files trough .DS_Store spidering:

/529.html
/a
/css
/img
/img/03c68b_158x158.png
/img/0dc137_750x144.jpg
/img/1214ba_660x104.png
/img/148b37_750x874.png
/img/14d8fe_248x86.png
/img/211380_158x158.png
/img/3dc2c7_158x158.png
/img/538496_244x68.png
/img/6a1a07_710x110.png
/img/6deaad_158x158.png
/img/75e483_750x160.png
/img/7d4ba3_750x842.png
/img/7de229_750x32.png
/img/874d2b_158x158.png
/img/917e45_158x158.png
/img/9a6c23_750x566.png
/img/a236a6_750x200.png
/img/b28fe4_750x158.png
/img/c99de1_750x4897.jpg
/img/d0a274_158x158.png
/img/d7ea55_158x158.png
/img/e780be_158x158.png
/img/eb6024_470x152.png
/img/efc61c_158x158.png
/js
```
  Found on 2026-01-02 20:06
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9788316afe2f17077806d909f7c4284ff
```
Found 5 files trough .DS_Store spidering:

/529.html
/a
/css
/img
/js
```
  Found on 2025-12-12 16:23
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 122.228.86.130
Domain: yinyuecdn.xiaoqu88.cn
Port: 80
URL: http://yinyuecdn.xiaoqu88.cn

First seen 2025-11-30 03:46
Last seen 2026-01-02 18:06
Open for 33 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-02 18:06
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 122.228.86.130
Domain: yunqicdn.xiaoqu88.cn
Port: 80
URL: http://yunqicdn.xiaoqu88.cn

First seen 2025-12-23 02:24
Last seen 2026-01-02 16:52
Open for 10 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-02 16:52
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 122.228.86.130
Domain: xiyicdn.xiaoqu88.cn
Port: 443
URL: https://xiyicdn.xiaoqu88.cn

First seen 2025-12-11 03:25
Last seen 2026-01-02 12:00
Open for 22 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-02 12:00
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.130
Domain: cdnqxshop.jx130.cn
Port: 443
URL: https://cdnqxshop.jx130.cn

First seen 2025-06-13 13:12
Last seen 2026-01-02 11:27
Open for 202 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7658cdf3b2ea848bb4c7400d3f14a5875

Found 128 files trough .DS_Store spidering:

/home
/home/home
/install
/install/view
/statics
/statics/font
/statics/images
/statics/images/activity
/statics/images/add-cart.png
/statics/images/admin-order-menu1.png
/statics/images/admin-order-menu2.png
/statics/images/admin-order-menu3.png
/statics/images/admin-order-menu4.png
/statics/images/admin-work-menu1.png
/statics/images/admin-work-menu2.png
/statics/images/admin-work-menu3.png
/statics/images/admin-work-menu4.png
/statics/images/admin-work-menu5.png
/statics/images/admin-work-menu6.png
/statics/images/admin-work-order1.png
/statics/images/admin-work-order2.png
/statics/images/admin-work-order3.png
/statics/images/admin-work-order4.png
/statics/images/ajcaptcha1.jpg
/statics/images/ajcaptcha2.jpg
/statics/images/ajcaptcha3.jpg
/statics/images/ajcaptcha4.jpg
/statics/images/ajcaptcha5.jpg
/statics/images/ajcaptcha6.jpg
/statics/images/balance_species.png
/statics/images/banner.png
/statics/images/bargain
/statics/images/bargain-list-bg.png
/statics/images/bargainBg.png
/statics/images/blue-bg.png
/statics/images/box1.png
/statics/images/brokerage_rank_bg1.png
/statics/images/brokerage_rank_bg2.png
/statics/images/cart.png
/statics/images/close.gif
/statics/images/close.png
/statics/images/co-bag.png
/statics/images/empty-box.gif
/statics/images/empty-box.png
/statics/images/empty-record.png
/statics/images/error-network.gif
/statics/images/error-network.png
/statics/images/extension.jpg
/statics/images/get_coupon_bg.png
/statics/images/gift01.png
/statics/images/gift02.png
/statics/images/gift03.png
/statics/images/gift04.png
/statics/images/gift05.png
/statics/images/gift06.png
/statics/images/gold-bg.png
/statics/images/grade-active.png
/statics/images/grade.png
/statics/images/grade01.png
/statics/images/green-bg.png
/statics/images/group-blue.png
/statics/images/group-btn.png
/statics/images/group-buy.png
/statics/images/group-golden.png
/statics/images/group-green.png
/statics/images/group-orange.png
/statics/images/group-pink.png
/statics/images/group-red.png
/statics/images/group-text.png
/statics/images/header.png
/statics/images/invoice-border-left.png
/statics/images/invoice-border-right.png
/statics/images/invoice-title.png
/statics/images/invoice-top.gif
/statics/images/invoice-top.png
/statics/images/level.png
/statics/images/login-bg-1.jpg
/statics/images/login-bg-2.jpg
/statics/images/login-bg-3.jpg
/statics/images/login-bg-4.jpg
/statics/images/login-bg-5.jpg
/statics/images/login-bg-6.jpg
/statics/images/look.png
/statics/images/lottery1.png
/statics/images/lottery2.png
/statics/images/lottery3.png
/statics/images/lottery4.png
/statics/images/lottery5.png
/statics/images/lottery6.png
/statics/images/lottery7.png
/statics/images/lottery8.png
/statics/images/lottery9.png
/statics/images/member.png
/statics/images/new-bg.png
/statics/images/newcomer
/statics/images/newVip1.png
/statics/images/newVip2.png
/statics/images/newVip3.png
/statics/images/no-thing.gif
/statics/images/no-thing.png
/statics/images/no-video.png
/statics/images/noActivity.gif
/statics/images/noActivity.png
/statics/images/noAddress.gif
/statics/images/noAddress.png
/statics/images/noCollection.gif
/statics/images/noCollection.png
/statics/images/noCoupon.gif
/statics/images/noCoupon.png
/statics/images/noExpress.gif
/statics/images/noExpress.png
/statics/images/noInvoice.gif
/statics/images/noInvoice.png
/statics/images/noMessage.gif
/statics/images/noMessage.png
/statics/images/noNews.gif
/statics/images/noNews.png
/statics/images/noOrder.gif
/statics/images/noOrder.png
/statics/images/noRefund.gif
/statics/images/noRefund.png
/statics/images/noSearch.gif
/statics/images/noSearch.png
/statics/images/noSign.gif
/statics/images/noSign.png
/statics/images/offline-result.png
/statics/images/open.gif
/statics/images/orange-bg.png

Found on 2026-01-02 11:27

Severity: medium
Fingerprint: 5f32cf5d6962f09c6e6dc6946e6dc694db8e753ed5696dc680d0484af0740004

Found 84 files trough .DS_Store spidering:

/home
/home/home
/install
/install/view
/statics
/upgrade
/uploads
/uploads/system
/uploads/system/00353202104251712149132.jpg
/uploads/system/00a8f202104291705362017.jpg
/uploads/system/0a73f202109230908134790.png
/uploads/system/0c4b29a624e97cb26ff7e4ca473b4c5f.jpg
/uploads/system/0e1afe894c946c459e2f892cc0894afa.png
/uploads/system/15ed21e8b1a3eacbac52c30bf8a82bc4.png
/uploads/system/1682e202104291658295445.jpg
/uploads/system/1773b3563b5bf6e8980231adf786d6b1.png
/uploads/system/1b244797f8b86b4cc0665d75d160aa30.png
/uploads/system/1c0fb1ff89e1f6f347fb131544056910.png
/uploads/system/1dfb2b9c571e71c044c5ec60f551b535.png
/uploads/system/1f05bd27a6af2da438dc2bb689995fc5.png
/uploads/system/28579c3fa0be9980bd2ac1d4bc802db7.png
/uploads/system/2c1bbd9fa1c769dde1f7dc9d12b690c2.png
/uploads/system/3241806839078a441d4e50d14af4ad33.png
/uploads/system/3258440ff097fb3675bb2cd72645585a.jpg
/uploads/system/3b0a1202104291705369422.jpg
/uploads/system/422aabba499263112231b8efecc042be.jpg
/uploads/system/47c6046274318574a4840ad4f4c566f1.png
/uploads/system/5379f202109230908215868.png
/uploads/system/537f9aea67cc6df860ba874044ab6611.png
/uploads/system/55f5518b80f35386bc7224cfb1ee3700.png
/uploads/system/5843fc72656c1cfee8cec3e6e8d3107f.png
/uploads/system/58908a8c245f422da6e0924dec27c95d.png
/uploads/system/5c9ccca12638a.gif
/uploads/system/5c9ccca178a67.gif
/uploads/system/5c9ccca1a01b6.gif
/uploads/system/5c9ccca1c78cd.gif
/uploads/system/5f3423bdca83b3c988afd15000d3b1ce.png
/uploads/system/723adbdd4e49a0f9394dfc700ab5dba3.png
/uploads/system/756bc202104251709155325.jpg
/uploads/system/75d9cd78e50fb23f73c4d24747ec8444.png
/uploads/system/7adae9b31744480adf98a5c28a4ea095.png
/uploads/system/7ba5e7e9bcd1ed480fdd432b49a3161a.gif
/uploads/system/85f97bbf62557aea738faaf8c578aed0.png
/uploads/system/88898202104251734516138.png
/uploads/system/8ed48a73f3184f62d76efd2e7a753f58.png
/uploads/system/915bc202104291705369876.jpg
/uploads/system/94289202104251713378235.png
/uploads/system/9726fa46fa5060f6fe4618aab121d619.png
/uploads/system/9a54e7723ab661ff4545984ee0e82dd4.png
/uploads/system/a1d1cce9c4760f313318a964745537c3.png
/uploads/system/a377176f6808c45ee34270377c32ffb3.png
/uploads/system/a4e42131851b34f6177caf633cdb18dd.png
/uploads/system/ad124b0ffb80f45cca002be5f6bdd9aa.png
/uploads/system/af39220228af28e2fa389d2b141ac378.png
/uploads/system/agent_self_order.png
/uploads/system/agent_self_order_price.png
/uploads/system/agent_spread.png
/uploads/system/agent_spread_order.png
/uploads/system/agent_spread_order_price.png
/uploads/system/b56f2bc3e92ddf7e306bdd228fae1993.png
/uploads/system/c560902bec05d70443886e8b0f46d4b7.png
/uploads/system/cee7e202104251734196138.png
/uploads/system/d4398c5d36757c1b1ed1f21202bea1c0.png
/uploads/system/d522b58032088f82443f3f94591b0fc0.png
/uploads/system/d9cea202104251713283778.png
/uploads/system/e3d227d703e847a02655132f223436f8.png
/uploads/system/e4822202104251713242598.png
/uploads/system/ed835202104251709094472.jpg
/uploads/system/f01d5202104291705368486.jpg
/uploads/system/f7c1177d4304372134c6c97f70f225ce.jpg
/uploads/system/f817d3954ffc65e14991ccb1ff2f9107.png
/uploads/system/f834709c81367d94f5fb67d82a7d34bd.png
/uploads/system/fbacd351e606f494431a9c777ce7522c.png
/uploads/system/fcc758713087632dc785fff3d37db928.png
/uploads/system/order_complete.gif
/uploads/system/order_invoice.gif
/uploads/system/order_unevaluate.gif
/uploads/system/order_unpaid.gif
/uploads/system/order_unshipped.gif
/uploads/system/order_untake.gif
/uploads/system/short_video.png
/uploads/system/store.png
/uploads/system/store_spread.png
/uploads/system/user_newcomer.png

Found on 2025-12-12 06:39

Severity: low
Fingerprint: 5f32cf5d6962f09c2eda814e2eda814e727cc29c68122ad4bba17d449671720e
```
Found 6 files trough .DS_Store spidering:

/home
/home/home
/install
/statics
/upgrade
/uploads
```
Found on 2025-12-01 12:30

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7658cdf3bba44e753a24ae4b1861bf60b

Found 128 files trough .DS_Store spidering:

/home
/install
/install/view
/statics
/statics/font
/statics/images
/statics/images/activity
/statics/images/add-cart.png
/statics/images/admin-order-menu1.png
/statics/images/admin-order-menu2.png
/statics/images/admin-order-menu3.png
/statics/images/admin-order-menu4.png
/statics/images/admin-work-menu1.png
/statics/images/admin-work-menu2.png
/statics/images/admin-work-menu3.png
/statics/images/admin-work-menu4.png
/statics/images/admin-work-menu5.png
/statics/images/admin-work-menu6.png
/statics/images/admin-work-order1.png
/statics/images/admin-work-order2.png
/statics/images/admin-work-order3.png
/statics/images/admin-work-order4.png
/statics/images/ajcaptcha1.jpg
/statics/images/ajcaptcha2.jpg
/statics/images/ajcaptcha3.jpg
/statics/images/ajcaptcha4.jpg
/statics/images/ajcaptcha5.jpg
/statics/images/ajcaptcha6.jpg
/statics/images/balance_species.png
/statics/images/banner.png
/statics/images/bargain
/statics/images/bargain-list-bg.png
/statics/images/bargainBg.png
/statics/images/blue-bg.png
/statics/images/box1.png
/statics/images/brokerage_rank_bg1.png
/statics/images/brokerage_rank_bg2.png
/statics/images/cart.png
/statics/images/close.gif
/statics/images/close.png
/statics/images/co-bag.png
/statics/images/empty-box.gif
/statics/images/empty-box.png
/statics/images/empty-record.png
/statics/images/error-network.gif
/statics/images/error-network.png
/statics/images/extension.jpg
/statics/images/get_coupon_bg.png
/statics/images/gift01.png
/statics/images/gift02.png
/statics/images/gift03.png
/statics/images/gift04.png
/statics/images/gift05.png
/statics/images/gift06.png
/statics/images/gold-bg.png
/statics/images/grade-active.png
/statics/images/grade.png
/statics/images/grade01.png
/statics/images/green-bg.png
/statics/images/group-blue.png
/statics/images/group-btn.png
/statics/images/group-buy.png
/statics/images/group-golden.png
/statics/images/group-green.png
/statics/images/group-orange.png
/statics/images/group-pink.png
/statics/images/group-red.png
/statics/images/group-text.png
/statics/images/header.png
/statics/images/invoice-border-left.png
/statics/images/invoice-border-right.png
/statics/images/invoice-title.png
/statics/images/invoice-top.gif
/statics/images/invoice-top.png
/statics/images/level.png
/statics/images/login-bg-1.jpg
/statics/images/login-bg-2.jpg
/statics/images/login-bg-3.jpg
/statics/images/login-bg-4.jpg
/statics/images/login-bg-5.jpg
/statics/images/login-bg-6.jpg
/statics/images/look.png
/statics/images/lottery1.png
/statics/images/lottery2.png
/statics/images/lottery3.png
/statics/images/lottery4.png
/statics/images/lottery5.png
/statics/images/lottery6.png
/statics/images/lottery7.png
/statics/images/lottery8.png
/statics/images/lottery9.png
/statics/images/member.png
/statics/images/new-bg.png
/statics/images/newcomer
/statics/images/newVip1.png
/statics/images/newVip2.png
/statics/images/newVip3.png
/statics/images/no-thing.gif
/statics/images/no-thing.png
/statics/images/no-video.png
/statics/images/noActivity.gif
/statics/images/noActivity.png
/statics/images/noAddress.gif
/statics/images/noAddress.png
/statics/images/noCollection.gif
/statics/images/noCollection.png
/statics/images/noCoupon.gif
/statics/images/noCoupon.png
/statics/images/noExpress.gif
/statics/images/noExpress.png
/statics/images/noInvoice.gif
/statics/images/noInvoice.png
/statics/images/noMessage.gif
/statics/images/noMessage.png
/statics/images/noNews.gif
/statics/images/noNews.png
/statics/images/noOrder.gif
/statics/images/noOrder.png
/statics/images/noRefund.gif
/statics/images/noRefund.png
/statics/images/noSearch.gif
/statics/images/noSearch.png
/statics/images/noSign.gif
/statics/images/noSign.png
/statics/images/offline-result.png
/statics/images/open.gif
/statics/images/orange-bg.png
/statics/images/order

Found on 2025-11-24 09:30

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744de85e1235f3e3dc55493a89713ed70250

Found 12 files trough .DS_Store spidering:

/home
/home/home
/install
/install/view
/statics
/statics/font
/statics/images
/statics/mp_view
/statics/poster
/statics/system
/upgrade
/uploads

Found on 2025-11-22 09:00

Severity: low
Fingerprint: 5f32cf5d6962f09c026392ab026392ab1f5ffdc7e85f230736933187076256a3
```
Found 7 files trough .DS_Store spidering:

/home
/home/home
/install
/install/view
/statics
/upgrade
/uploads
```
Found on 2025-11-20 11:47

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772d1446a08769294b048a29d4878139d07

Found 11 files trough .DS_Store spidering:

/home
/home/home
/install
/statics
/statics/font
/statics/images
/statics/mp_view
/statics/poster
/statics/system
/upgrade
/uploads

Found on 2025-09-24 21:00

Severity: low
Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d8acdf42daaf442e52f501bcbe9e8d1b79

Found 8 files trough .DS_Store spidering:

/home
/home/home
/install
/install/view
/statics
/upgrade
/uploads
/uploads/system

Found on 2025-09-08 14:21

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7658cdf3b2ea848bb4c7400d3a0e4e29d

Found 128 files trough .DS_Store spidering:

/home
/home/home
/install
/statics
/statics/font
/statics/images
/statics/images/activity
/statics/images/add-cart.png
/statics/images/admin-order-menu1.png
/statics/images/admin-order-menu2.png
/statics/images/admin-order-menu3.png
/statics/images/admin-order-menu4.png
/statics/images/admin-work-menu1.png
/statics/images/admin-work-menu2.png
/statics/images/admin-work-menu3.png
/statics/images/admin-work-menu4.png
/statics/images/admin-work-menu5.png
/statics/images/admin-work-menu6.png
/statics/images/admin-work-order1.png
/statics/images/admin-work-order2.png
/statics/images/admin-work-order3.png
/statics/images/admin-work-order4.png
/statics/images/ajcaptcha1.jpg
/statics/images/ajcaptcha2.jpg
/statics/images/ajcaptcha3.jpg
/statics/images/ajcaptcha4.jpg
/statics/images/ajcaptcha5.jpg
/statics/images/ajcaptcha6.jpg
/statics/images/balance_species.png
/statics/images/banner.png
/statics/images/bargain
/statics/images/bargain-list-bg.png
/statics/images/bargainBg.png
/statics/images/blue-bg.png
/statics/images/box1.png
/statics/images/brokerage_rank_bg1.png
/statics/images/brokerage_rank_bg2.png
/statics/images/cart.png
/statics/images/close.gif
/statics/images/close.png
/statics/images/co-bag.png
/statics/images/empty-box.gif
/statics/images/empty-box.png
/statics/images/empty-record.png
/statics/images/error-network.gif
/statics/images/error-network.png
/statics/images/extension.jpg
/statics/images/get_coupon_bg.png
/statics/images/gift01.png
/statics/images/gift02.png
/statics/images/gift03.png
/statics/images/gift04.png
/statics/images/gift05.png
/statics/images/gift06.png
/statics/images/gold-bg.png
/statics/images/grade-active.png
/statics/images/grade.png
/statics/images/grade01.png
/statics/images/green-bg.png
/statics/images/group-blue.png
/statics/images/group-btn.png
/statics/images/group-buy.png
/statics/images/group-golden.png
/statics/images/group-green.png
/statics/images/group-orange.png
/statics/images/group-pink.png
/statics/images/group-red.png
/statics/images/group-text.png
/statics/images/header.png
/statics/images/invoice-border-left.png
/statics/images/invoice-border-right.png
/statics/images/invoice-title.png
/statics/images/invoice-top.gif
/statics/images/invoice-top.png
/statics/images/level.png
/statics/images/login-bg-1.jpg
/statics/images/login-bg-2.jpg
/statics/images/login-bg-3.jpg
/statics/images/login-bg-4.jpg
/statics/images/login-bg-5.jpg
/statics/images/login-bg-6.jpg
/statics/images/look.png
/statics/images/lottery1.png
/statics/images/lottery2.png
/statics/images/lottery3.png
/statics/images/lottery4.png
/statics/images/lottery5.png
/statics/images/lottery6.png
/statics/images/lottery7.png
/statics/images/lottery8.png
/statics/images/lottery9.png
/statics/images/member.png
/statics/images/new-bg.png
/statics/images/newcomer
/statics/images/newVip1.png
/statics/images/newVip2.png
/statics/images/newVip3.png
/statics/images/no-thing.gif
/statics/images/no-thing.png
/statics/images/no-video.png
/statics/images/noActivity.gif
/statics/images/noActivity.png
/statics/images/noAddress.gif
/statics/images/noAddress.png
/statics/images/noCollection.gif
/statics/images/noCollection.png
/statics/images/noCoupon.gif
/statics/images/noCoupon.png
/statics/images/noExpress.gif
/statics/images/noExpress.png
/statics/images/noInvoice.gif
/statics/images/noInvoice.png
/statics/images/noMessage.gif
/statics/images/noMessage.png
/statics/images/noNews.gif
/statics/images/noNews.png
/statics/images/noOrder.gif
/statics/images/noOrder.png
/statics/images/noRefund.gif
/statics/images/noRefund.png
/statics/images/noSearch.gif
/statics/images/noSearch.png
/statics/images/noSign.gif
/statics/images/noSign.png
/statics/images/offline-result.png
/statics/images/open.gif
/statics/images/orange-bg.png
/statics/images/order

Found on 2025-08-06 11:29

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.132
Domain: cdnqxshop.jx130.cn
Port: 80
URL: http://cdnqxshop.jx130.cn

First seen 2025-09-08 14:21
Last seen 2026-01-02 10:28
Open for 115 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7658cdf3b2ea848bb4c7400d3f14a5875

Found 128 files trough .DS_Store spidering:

/home
/home/home
/install
/install/view
/statics
/statics/font
/statics/images
/statics/images/activity
/statics/images/add-cart.png
/statics/images/admin-order-menu1.png
/statics/images/admin-order-menu2.png
/statics/images/admin-order-menu3.png
/statics/images/admin-order-menu4.png
/statics/images/admin-work-menu1.png
/statics/images/admin-work-menu2.png
/statics/images/admin-work-menu3.png
/statics/images/admin-work-menu4.png
/statics/images/admin-work-menu5.png
/statics/images/admin-work-menu6.png
/statics/images/admin-work-order1.png
/statics/images/admin-work-order2.png
/statics/images/admin-work-order3.png
/statics/images/admin-work-order4.png
/statics/images/ajcaptcha1.jpg
/statics/images/ajcaptcha2.jpg
/statics/images/ajcaptcha3.jpg
/statics/images/ajcaptcha4.jpg
/statics/images/ajcaptcha5.jpg
/statics/images/ajcaptcha6.jpg
/statics/images/balance_species.png
/statics/images/banner.png
/statics/images/bargain
/statics/images/bargain-list-bg.png
/statics/images/bargainBg.png
/statics/images/blue-bg.png
/statics/images/box1.png
/statics/images/brokerage_rank_bg1.png
/statics/images/brokerage_rank_bg2.png
/statics/images/cart.png
/statics/images/close.gif
/statics/images/close.png
/statics/images/co-bag.png
/statics/images/empty-box.gif
/statics/images/empty-box.png
/statics/images/empty-record.png
/statics/images/error-network.gif
/statics/images/error-network.png
/statics/images/extension.jpg
/statics/images/get_coupon_bg.png
/statics/images/gift01.png
/statics/images/gift02.png
/statics/images/gift03.png
/statics/images/gift04.png
/statics/images/gift05.png
/statics/images/gift06.png
/statics/images/gold-bg.png
/statics/images/grade-active.png
/statics/images/grade.png
/statics/images/grade01.png
/statics/images/green-bg.png
/statics/images/group-blue.png
/statics/images/group-btn.png
/statics/images/group-buy.png
/statics/images/group-golden.png
/statics/images/group-green.png
/statics/images/group-orange.png
/statics/images/group-pink.png
/statics/images/group-red.png
/statics/images/group-text.png
/statics/images/header.png
/statics/images/invoice-border-left.png
/statics/images/invoice-border-right.png
/statics/images/invoice-title.png
/statics/images/invoice-top.gif
/statics/images/invoice-top.png
/statics/images/level.png
/statics/images/login-bg-1.jpg
/statics/images/login-bg-2.jpg
/statics/images/login-bg-3.jpg
/statics/images/login-bg-4.jpg
/statics/images/login-bg-5.jpg
/statics/images/login-bg-6.jpg
/statics/images/look.png
/statics/images/lottery1.png
/statics/images/lottery2.png
/statics/images/lottery3.png
/statics/images/lottery4.png
/statics/images/lottery5.png
/statics/images/lottery6.png
/statics/images/lottery7.png
/statics/images/lottery8.png
/statics/images/lottery9.png
/statics/images/member.png
/statics/images/new-bg.png
/statics/images/newcomer
/statics/images/newVip1.png
/statics/images/newVip2.png
/statics/images/newVip3.png
/statics/images/no-thing.gif
/statics/images/no-thing.png
/statics/images/no-video.png
/statics/images/noActivity.gif
/statics/images/noActivity.png
/statics/images/noAddress.gif
/statics/images/noAddress.png
/statics/images/noCollection.gif
/statics/images/noCollection.png
/statics/images/noCoupon.gif
/statics/images/noCoupon.png
/statics/images/noExpress.gif
/statics/images/noExpress.png
/statics/images/noInvoice.gif
/statics/images/noInvoice.png
/statics/images/noMessage.gif
/statics/images/noMessage.png
/statics/images/noNews.gif
/statics/images/noNews.png
/statics/images/noOrder.gif
/statics/images/noOrder.png
/statics/images/noRefund.gif
/statics/images/noRefund.png
/statics/images/noSearch.gif
/statics/images/noSearch.png
/statics/images/noSign.gif
/statics/images/noSign.png
/statics/images/offline-result.png
/statics/images/open.gif
/statics/images/orange-bg.png

Found on 2026-01-02 10:28

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7658cdf3b2ea848bb4c7400d3a0e4e29d

Found 128 files trough .DS_Store spidering:

/home
/home/home
/install
/statics
/statics/font
/statics/images
/statics/images/activity
/statics/images/add-cart.png
/statics/images/admin-order-menu1.png
/statics/images/admin-order-menu2.png
/statics/images/admin-order-menu3.png
/statics/images/admin-order-menu4.png
/statics/images/admin-work-menu1.png
/statics/images/admin-work-menu2.png
/statics/images/admin-work-menu3.png
/statics/images/admin-work-menu4.png
/statics/images/admin-work-menu5.png
/statics/images/admin-work-menu6.png
/statics/images/admin-work-order1.png
/statics/images/admin-work-order2.png
/statics/images/admin-work-order3.png
/statics/images/admin-work-order4.png
/statics/images/ajcaptcha1.jpg
/statics/images/ajcaptcha2.jpg
/statics/images/ajcaptcha3.jpg
/statics/images/ajcaptcha4.jpg
/statics/images/ajcaptcha5.jpg
/statics/images/ajcaptcha6.jpg
/statics/images/balance_species.png
/statics/images/banner.png
/statics/images/bargain
/statics/images/bargain-list-bg.png
/statics/images/bargainBg.png
/statics/images/blue-bg.png
/statics/images/box1.png
/statics/images/brokerage_rank_bg1.png
/statics/images/brokerage_rank_bg2.png
/statics/images/cart.png
/statics/images/close.gif
/statics/images/close.png
/statics/images/co-bag.png
/statics/images/empty-box.gif
/statics/images/empty-box.png
/statics/images/empty-record.png
/statics/images/error-network.gif
/statics/images/error-network.png
/statics/images/extension.jpg
/statics/images/get_coupon_bg.png
/statics/images/gift01.png
/statics/images/gift02.png
/statics/images/gift03.png
/statics/images/gift04.png
/statics/images/gift05.png
/statics/images/gift06.png
/statics/images/gold-bg.png
/statics/images/grade-active.png
/statics/images/grade.png
/statics/images/grade01.png
/statics/images/green-bg.png
/statics/images/group-blue.png
/statics/images/group-btn.png
/statics/images/group-buy.png
/statics/images/group-golden.png
/statics/images/group-green.png
/statics/images/group-orange.png
/statics/images/group-pink.png
/statics/images/group-red.png
/statics/images/group-text.png
/statics/images/header.png
/statics/images/invoice-border-left.png
/statics/images/invoice-border-right.png
/statics/images/invoice-title.png
/statics/images/invoice-top.gif
/statics/images/invoice-top.png
/statics/images/level.png
/statics/images/login-bg-1.jpg
/statics/images/login-bg-2.jpg
/statics/images/login-bg-3.jpg
/statics/images/login-bg-4.jpg
/statics/images/login-bg-5.jpg
/statics/images/login-bg-6.jpg
/statics/images/look.png
/statics/images/lottery1.png
/statics/images/lottery2.png
/statics/images/lottery3.png
/statics/images/lottery4.png
/statics/images/lottery5.png
/statics/images/lottery6.png
/statics/images/lottery7.png
/statics/images/lottery8.png
/statics/images/lottery9.png
/statics/images/member.png
/statics/images/new-bg.png
/statics/images/newcomer
/statics/images/newVip1.png
/statics/images/newVip2.png
/statics/images/newVip3.png
/statics/images/no-thing.gif
/statics/images/no-thing.png
/statics/images/no-video.png
/statics/images/noActivity.gif
/statics/images/noActivity.png
/statics/images/noAddress.gif
/statics/images/noAddress.png
/statics/images/noCollection.gif
/statics/images/noCollection.png
/statics/images/noCoupon.gif
/statics/images/noCoupon.png
/statics/images/noExpress.gif
/statics/images/noExpress.png
/statics/images/noInvoice.gif
/statics/images/noInvoice.png
/statics/images/noMessage.gif
/statics/images/noMessage.png
/statics/images/noNews.gif
/statics/images/noNews.png
/statics/images/noOrder.gif
/statics/images/noOrder.png
/statics/images/noRefund.gif
/statics/images/noRefund.png
/statics/images/noSearch.gif
/statics/images/noSearch.png
/statics/images/noSign.gif
/statics/images/noSign.png
/statics/images/offline-result.png
/statics/images/open.gif
/statics/images/orange-bg.png
/statics/images/order

Found on 2025-12-12 06:39

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 122.228.86.130
Domain: funiucdn.xiaoqu88.cn
Port: 80
URL: http://funiucdn.xiaoqu88.cn

First seen 2025-11-28 03:34
Last seen 2026-01-02 09:06
Open for 35 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-02 09:06
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.130
Domain: www.newroad.top
Port: 80
URL: http://www.newroad.top

First seen 2025-12-24 01:42
Last seen 2026-01-02 07:22
Open for 9 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bcbef89d5c10037604d18cecd2a32dcaf4
```
Found 22 files trough .DS_Store spidering:

/css
/download.html
/fingerprint.html
/images
/images/website
/images/website/home_1.png
/images/website/logo.png
/images/website/product_about2.png
/index.html
/law.html
/permissions.html
/privacy.html
/sdk.html
/StaticJS
/vip-privacy.html
/yyq
/yyq/css
/yyq/favicon.ico
/yyq/files
/yyq/img
/yyq/index.html
/yyq/js
```
  Found on 2026-01-02 07:22
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.130
Domain: coach-dxq.xijiedaojia.com
Port: 443
URL: https://coach-dxq.xijiedaojia.com

First seen 2025-12-31 07:34
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fd02d6687ffa752cf31197ce731197ce7
```
Found 3 files trough .DS_Store spidering:

/css
/img
/js
```
  Found on 2025-12-31 07:34
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.130
Domain: www1.nakjoll.top
Port: 80
URL: http://www1.nakjoll.top

First seen 2025-08-07 06:51
Last seen 2025-12-30 14:27
Open for 145 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772e5159b4a1ab8a48bb567160664486b26
```
Found 11 files trough .DS_Store spidering:

/download.html
/images
/images/download-bg.png
/images/download-page.png
/images/logo.png
/images/register-bg.png
/images/register-page.png
/index.html
/law.html
/privacy.html
/register.html
```
  Found on 2025-12-30 14:27
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.130
Domain: cdntech.zuwol.xyz
Port: 443
URL: https://cdntech.zuwol.xyz

First seen 2022-10-14 10:59
Last seen 2025-12-30 14:26
Open for 1173 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814ebe1cdd56ff90c56d54e9df7d58785b51
```
Found 6 files trough .DS_Store spidering:

/css
/fonts
/img
/img/index
/js
/old_version
```
  Found on 2025-12-30 14:26
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e94a7e0559075c565abf4c23beafcab823
```
Found 5 files trough .DS_Store spidering:

/css
/fonts
/img
/js
/old_version
```
  Found on 2025-12-20 08:11
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.130
Domain: h5.xunsheng.org.cn
Port: 443
URL: https://h5.xunsheng.org.cn

First seen 2024-02-02 06:33
Last seen 2025-12-27 06:49
Open for 694 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c7d264b917d264b910bae44d3695010b2e5c98637c5d010f5

Found 52 files trough .DS_Store spidering:

/1.txt
/api
/apph5
/apple-app-site-association
/assets
/backend
/classinvite
/comment
/config
/controllers
/coursemanage
/data
/doc
/ebook
/family
/favicon.ico
/h5
/h5/activity
/h5/classtools
/h5/commentchart
/h5/h5live
/h5/muse-course
/h5/offlinereport
/h5/pc
/h5/realperson
/h5/xsactrealperson
/index.php
/judge
/kkjmyr
/log
/merchant
/models
/MP_verify_KKgl5mcn4SglDqcD.txt
/MP_verify_wPVEnLVbchqm2n8V.txt
/pubh5
/pubh52
/pubh5c
/README.md
/robots.txt
/runtime
/scholarl
/school
/vendor
/views
/wap
/web
/windowsupdate
/workupload
/xsmatch
/xsmatchtest
/xunsld
/yii

Found on 2025-12-27 06:49

Severity: medium
Fingerprint: 5f32cf5d6962f09cccd847a3ccd847a3e17cefd56490bc703e8b80510f2b93ef

Found 43 files trough .DS_Store spidering:

/1.txt
/api
/apph5
/apple-app-site-association
/assets
/backend
/classinvite
/comment
/config
/controllers
/coursemanage
/data
/doc
/ebook
/family
/favicon.ico
/h5
/index.php
/judge
/kkjmyr
/log
/merchant
/models
/MP_verify_KKgl5mcn4SglDqcD.txt
/MP_verify_wPVEnLVbchqm2n8V.txt
/pubh5
/pubh52
/pubh5c
/README.md
/robots.txt
/runtime
/scholarl
/school
/vendor
/views
/wap
/web
/windowsupdate
/workupload
/xsmatch
/xsmatchtest
/xunsld
/yii

Found on 2025-10-12 07:41

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.130
Domain: static.panghoo.com
Port: 80
URL: http://static.panghoo.com

First seen 2025-07-01 15:51
Last seen 2025-12-26 14:13
Open for 177 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c74247ea574247ea5654e894bff91742aa648398e7f76d12c

Found 56 files trough .DS_Store spidering:

/.sync
/.sync/Archive
/.sync/Streams
/amis
/amis/1.0.19
/animate
/animate/3.5.1
/animate/3.7.0
/bootstrap
/bootstrap/3.3.1
/bootstrap/3.3.5
/bootstrap/3.3.6
/bootstrap/3.3.7
/bootstrap/4.0.0
/bootstrap/4.1.1
/buttons
/custom
/custom/oneui
/custom/oneui/oneui-310
/custom/oneui/oneui-310/01 - OneUI Get Started
/custom/oneui/oneui-310/02 - OneUI Source (HTML)
/custom/oneui/oneui-310/02 - OneUI Source (HTML)/src
/custom/oneui/oneui-310/03 - OneUI Source (AngularJS)
/custom/oneui/oneui-310/Documentation
/exif-js
/Font-Awesome
/fontdiao
/grayscale
/html2canvas
/html5shiv
/imagesLoaded
/jquery
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-12-26 14:13

Severity: medium
Fingerprint: 5f32cf5d6962f09cfdf2c773fdf2c773d000e08daff26c987d649468161f5071

Found 50 files trough .DS_Store spidering:

/.sync
/.sync/Archive
/.sync/Streams
/amis
/amis/1.0.19
/animate
/animate/3.5.1
/animate/3.7.0
/bootstrap
/buttons
/custom
/custom/oneui
/custom/oneui/oneui-310
/custom/oneui/oneui-310/01 - OneUI Get Started
/custom/oneui/oneui-310/02 - OneUI Source (HTML)
/custom/oneui/oneui-310/02 - OneUI Source (HTML)/src
/custom/oneui/oneui-310/03 - OneUI Source (AngularJS)
/custom/oneui/oneui-310/Documentation
/exif-js
/Font-Awesome
/fontdiao
/grayscale
/html2canvas
/html5shiv
/imagesLoaded
/jquery
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-12-25 04:34

Severity: medium
Fingerprint: 5f32cf5d6962f09c680cb8ce680cb8ce029ffd1c29e7ab3d24c057a9adb80b79

Found 59 files trough .DS_Store spidering:

/.sync
/.sync/Archive
/.sync/Streams
/amis
/amis/1.0.19
/animate
/animate/3.5.1
/animate/3.7.0
/bootstrap
/bootstrap/3.3.1
/bootstrap/3.3.5
/bootstrap/3.3.6
/bootstrap/3.3.7
/bootstrap/4.0.0
/bootstrap/4.1.1
/buttons
/custom
/custom/oneui
/custom/oneui/oneui-310
/custom/oneui/oneui-310/01 - OneUI Get Started
/custom/oneui/oneui-310/02 - OneUI Source (HTML)
/custom/oneui/oneui-310/02 - OneUI Source (HTML)/src
/custom/oneui/oneui-310/03 - OneUI Source (AngularJS)
/custom/oneui/oneui-310/Documentation
/exif-js
/Font-Awesome
/Font-Awesome/3.2.1
/Font-Awesome/4.7.0
/Font-Awesome/6.1.1
/fontdiao
/grayscale
/html2canvas
/html5shiv
/imagesLoaded
/jquery
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-12-22 05:50

Severity: medium
Fingerprint: 5f32cf5d6962f09c20f30ab920f30ab9687196f7817f3356699d84527a04fcfe

Found 67 files trough .DS_Store spidering:

/.sync
/.sync/Archive
/.sync/Streams
/amis
/amis/1.0.19
/animate
/animate/3.5.1
/animate/3.7.0
/bootstrap
/bootstrap/3.3.1
/bootstrap/3.3.5
/bootstrap/3.3.6
/bootstrap/3.3.7
/bootstrap/4.0.0
/bootstrap/4.1.1
/buttons
/custom
/custom/oneui
/custom/oneui/oneui-310
/custom/oneui/oneui-310/01 - OneUI Get Started
/custom/oneui/oneui-310/02 - OneUI Source (HTML)
/custom/oneui/oneui-310/02 - OneUI Source (HTML)/src
/custom/oneui/oneui-310/03 - OneUI Source (AngularJS)
/custom/oneui/oneui-310/Documentation
/exif-js
/Font-Awesome
/Font-Awesome/3.2.1
/Font-Awesome/4.7.0
/Font-Awesome/6.1.1
/fontdiao
/grayscale
/html2canvas
/html2canvas/0.5.0-beta4
/html2canvas/0.5.0-beta41
/html2canvas/1.0.0-rc.7
/html5shiv
/imagesLoaded
/jquery
/jquery/1.10.2
/jquery/1.7.1
/jquery/1.8.0
/jquery/1.9.1
/jquery/2.1.4
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-12-22 05:50

Severity: medium
Fingerprint: 5f32cf5d6962f09c8e4417c08e4417c099507ba2227b40b77dee1cf723bf56cf

Found 62 files trough .DS_Store spidering:

/.sync
/.sync/Archive
/.sync/Streams
/amis
/amis/1.0.19
/animate
/animate/3.5.1
/animate/3.7.0
/bootstrap
/bootstrap/3.3.1
/bootstrap/3.3.5
/bootstrap/3.3.6
/bootstrap/3.3.7
/bootstrap/4.0.0
/bootstrap/4.1.1
/buttons
/custom
/custom/oneui
/custom/oneui/oneui-310
/custom/oneui/oneui-310/01 - OneUI Get Started
/custom/oneui/oneui-310/02 - OneUI Source (HTML)
/custom/oneui/oneui-310/02 - OneUI Source (HTML)/src
/custom/oneui/oneui-310/03 - OneUI Source (AngularJS)
/custom/oneui/oneui-310/Documentation
/exif-js
/Font-Awesome
/Font-Awesome/3.2.1
/Font-Awesome/4.7.0
/Font-Awesome/6.1.1
/fontdiao
/grayscale
/html2canvas
/html2canvas/0.5.0-beta4
/html2canvas/0.5.0-beta41
/html2canvas/1.0.0-rc.7
/html5shiv
/imagesLoaded
/jquery
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-12-22 05:50

Severity: medium
Fingerprint: 5f32cf5d6962f09cccd847a3ccd847a36ff18bbd23bf9ec8660147d897433f4a

Found 43 files trough .DS_Store spidering:

/.sync
/.sync/Archive
/.sync/Streams
/amis
/amis/1.0.19
/animate
/animate/3.5.1
/animate/3.7.0
/bootstrap
/buttons
/custom
/exif-js
/Font-Awesome
/fontdiao
/grayscale
/html2canvas
/html5shiv
/imagesLoaded
/jquery
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-11-30 20:47

Severity: medium
Fingerprint: 5f32cf5d6962f09ccbc000d9cbc000d9cc6017176d6d3436fab080724dfe679f

Found 49 files trough .DS_Store spidering:

/.sync
/.sync/Archive
/.sync/Streams
/amis
/amis/1.0.19
/animate
/animate/3.5.1
/animate/3.7.0
/bootstrap
/bootstrap/3.3.1
/bootstrap/3.3.5
/bootstrap/3.3.6
/bootstrap/3.3.7
/bootstrap/4.0.0
/bootstrap/4.1.1
/buttons
/custom
/exif-js
/Font-Awesome
/fontdiao
/grayscale
/html2canvas
/html5shiv
/imagesLoaded
/jquery
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-11-28 19:58

Severity: medium
Fingerprint: 5f32cf5d6962f09c778888b4778888b44d094a1e7fbacf636d9fa6bb9f13be5f

Found 40 files trough .DS_Store spidering:

/.sync
/.sync/Archive
/.sync/Streams
/amis
/animate
/bootstrap
/buttons
/custom
/exif-js
/Font-Awesome
/fontdiao
/grayscale
/html2canvas
/html5shiv
/imagesLoaded
/jquery
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-11-27 01:44

Severity: medium
Fingerprint: 5f32cf5d6962f09c114fbe07114fbe0738c3c369fe9d7df6154163bbe5456e18

Found 47 files trough .DS_Store spidering:

/.sync
/amis
/amis/1.0.19
/animate
/animate/3.5.1
/animate/3.7.0
/bootstrap
/bootstrap/3.3.1
/bootstrap/3.3.5
/bootstrap/3.3.6
/bootstrap/3.3.7
/bootstrap/4.0.0
/bootstrap/4.1.1
/buttons
/custom
/exif-js
/Font-Awesome
/fontdiao
/grayscale
/html2canvas
/html5shiv
/imagesLoaded
/jquery
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-11-21 15:15

Severity: medium
Fingerprint: 5f32cf5d6962f09c248e4f81248e4f813ae80ddf70c7062efbb0558afda323cd

Found 41 files trough .DS_Store spidering:

/.sync
/.sync/Archive
/.sync/Streams
/amis
/amis/1.0.19
/animate
/bootstrap
/buttons
/custom
/exif-js
/Font-Awesome
/fontdiao
/grayscale
/html2canvas
/html5shiv
/imagesLoaded
/jquery
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-10-24 13:03

Severity: medium
Fingerprint: 5f32cf5d6962f09cecc85b04ecc85b045c80f16ee16218f38a19e54bc8cfa63b

Found 53 files trough .DS_Store spidering:

/.sync
/.sync/Archive
/.sync/Streams
/amis
/amis/1.0.19
/animate
/bootstrap
/bootstrap/3.3.1
/bootstrap/3.3.5
/bootstrap/3.3.6
/bootstrap/3.3.7
/bootstrap/4.0.0
/bootstrap/4.1.1
/buttons
/custom
/custom/oneui
/custom/oneui/oneui-310
/custom/oneui/oneui-310/01 - OneUI Get Started
/custom/oneui/oneui-310/02 - OneUI Source (HTML)
/custom/oneui/oneui-310/03 - OneUI Source (AngularJS)
/custom/oneui/oneui-310/Documentation
/exif-js
/Font-Awesome
/fontdiao
/grayscale
/html2canvas
/html5shiv
/imagesLoaded
/jquery
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-09-27 15:34

Severity: medium
Fingerprint: 5f32cf5d6962f09c910c508a910c508a9ae90cd06874aab18375bef588b8a274

Found 55 files trough .DS_Store spidering:

/.sync
/.sync/Archive
/.sync/Streams
/amis
/amis/1.0.19
/animate
/animate/3.5.1
/animate/3.7.0
/bootstrap
/bootstrap/3.3.1
/bootstrap/3.3.5
/bootstrap/3.3.6
/bootstrap/3.3.7
/bootstrap/4.0.0
/bootstrap/4.1.1
/buttons
/custom
/custom/oneui
/custom/oneui/oneui-310
/custom/oneui/oneui-310/01 - OneUI Get Started
/custom/oneui/oneui-310/02 - OneUI Source (HTML)
/custom/oneui/oneui-310/03 - OneUI Source (AngularJS)
/custom/oneui/oneui-310/Documentation
/exif-js
/Font-Awesome
/fontdiao
/grayscale
/html2canvas
/html5shiv
/imagesLoaded
/jquery
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-09-27 15:34

Severity: medium
Fingerprint: 5f32cf5d6962f09c75d69a7675d69a765319cbc4843f9915bf6b27812000317e

Found 51 files trough .DS_Store spidering:

/.sync
/.sync/Archive
/.sync/Streams
/amis
/amis/1.0.19
/animate
/animate/3.5.1
/animate/3.7.0
/bootstrap
/bootstrap/3.3.1
/bootstrap/3.3.5
/bootstrap/3.3.6
/bootstrap/3.3.7
/bootstrap/4.0.0
/bootstrap/4.1.1
/buttons
/custom
/custom/oneui
/custom/oneui/oneui-310
/exif-js
/Font-Awesome
/fontdiao
/grayscale
/html2canvas
/html5shiv
/imagesLoaded
/jquery
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-09-26 14:34

Severity: medium
Fingerprint: 5f32cf5d6962f09c910c508a910c508a9ae90cd06874aab18375bef5553897a8

Found 55 files trough .DS_Store spidering:

/.sync
/.sync/Archive
/.sync/Streams
/amis
/animate
/animate/3.5.1
/animate/3.7.0
/bootstrap
/bootstrap/3.3.1
/bootstrap/3.3.5
/bootstrap/3.3.6
/bootstrap/3.3.7
/bootstrap/4.0.0
/bootstrap/4.1.1
/buttons
/custom
/custom/oneui
/custom/oneui/oneui-310
/custom/oneui/oneui-310/01 - OneUI Get Started
/custom/oneui/oneui-310/02 - OneUI Source (HTML)
/custom/oneui/oneui-310/02 - OneUI Source (HTML)/src
/custom/oneui/oneui-310/03 - OneUI Source (AngularJS)
/custom/oneui/oneui-310/Documentation
/exif-js
/Font-Awesome
/fontdiao
/grayscale
/html2canvas
/html5shiv
/imagesLoaded
/jquery
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-09-03 07:49

Severity: medium
Fingerprint: 5f32cf5d6962f09ccbc000d9cbc000d9cc6017176d6d3436fab08072831f6ad0

Found 49 files trough .DS_Store spidering:

/.sync
/.sync/Archive
/.sync/Streams
/amis
/amis/1.0.19
/animate
/animate/3.5.1
/animate/3.7.0
/bootstrap
/buttons
/custom
/custom/oneui
/custom/oneui/oneui-310
/custom/oneui/oneui-310/01 - OneUI Get Started
/custom/oneui/oneui-310/02 - OneUI Source (HTML)
/custom/oneui/oneui-310/03 - OneUI Source (AngularJS)
/custom/oneui/oneui-310/Documentation
/exif-js
/Font-Awesome
/fontdiao
/grayscale
/html2canvas
/html5shiv
/imagesLoaded
/jquery
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-07-22 09:11

Severity: medium
Fingerprint: 5f32cf5d6962f09c92dfb71592dfb715b7f5887ba932c55a9cff4a7ea826a6fa

Found 45 files trough .DS_Store spidering:

/.sync
/.sync/Archive
/.sync/Streams
/amis
/amis/1.0.19
/animate
/animate/3.5.1
/animate/3.7.0
/bootstrap
/buttons
/custom
/custom/oneui
/custom/oneui/oneui-310
/exif-js
/Font-Awesome
/fontdiao
/grayscale
/html2canvas
/html5shiv
/imagesLoaded
/jquery
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-07-09 05:02

Severity: medium
Fingerprint: 5f32cf5d6962f09cfdf2c773fdf2c773d000e08daff26c987d649468392241f2

Found 50 files trough .DS_Store spidering:

/.sync
/.sync/Archive
/.sync/Streams
/amis
/amis/1.0.19
/animate
/animate/3.5.1
/animate/3.7.0
/bootstrap
/bootstrap/3.3.1
/bootstrap/3.3.5
/bootstrap/3.3.6
/bootstrap/3.3.7
/bootstrap/4.0.0
/bootstrap/4.1.1
/buttons
/custom
/custom/oneui
/exif-js
/Font-Awesome
/fontdiao
/grayscale
/html2canvas
/html5shiv
/imagesLoaded
/jquery
/jquery-plugins
/jquery.cookie
/jquery.DataTables
/jQuery.eraser
/jQuery.imgLoadCatch
/jquery.tmpl
/layer
/layer-mobile
/layui
/less
/masonry
/metisMenu
/mobiscroll
/Modernizr
/phpserializer
/Swiper
/Swiper-mobile
/themify-icons
/videojs
/vue
/web-fonts
/weui
/yall-js
/zepto

Found on 2025-07-07 18:29

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.130
Domain: www.nnjskz.cn
Port: 443
URL: https://www.nnjskz.cn

First seen 2025-11-05 13:10
Last seen 2025-11-29 03:55
Open for 23 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176421954ce7692a42eb492a42eb492a42eb4
```
Found 2 files trough .DS_Store spidering:

/img
/js
```
  Found on 2025-11-29 03:55
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.130
Domain: cdn.apple110.com
Port: 80
URL: http://cdn.apple110.com

First seen 2022-09-24 03:56
Last seen 2025-11-16 17:50
Open for 1149 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c1e3ea8c61e3ea8c605a1c0f92cfb3a28683b107cdd2ff4a1

Found 86 files trough .DS_Store spidering:

/404.php
/ads.txt
/bdunion.txt
/blog
/csz
/date.php
/debug
/debug/php_20200202.log
/debug/php_20200203.log
/debug/php_20200204.log
/debug/php_20200205.log
/debug/php_20200206.log
/debug/php_20200207.log
/debug/php_20200208.log
/debug/php_20200209.log
/debug/php_20200210.log
/debug/php_20200211.log
/debug/php_20200212.log
/debug/php_20200213.log
/debug/php_20200214.log
/debug/php_20200215.log
/debug/php_20200216.log
/debug/php_20200217.log
/debug/php_20200218.log
/debug/php_20200219.log
/debug/php_20200220.log
/debug/php_20200221.log
/debug/php_20200222.log
/debug/php_20200223.log
/debug/php_20200224.log
/debug/php_20200225.log
/debug/php_20200226.log
/debug/php_20200227.log
/debug/php_20200228.log
/debug/php_20200229.log
/debug/php_20200301.log
/debug/php_20200302.log
/debug/php_20200303.log
/debug/php_20200304.log
/debug/php_20200305.log
/debug/php_20200306.log
/debug/php_20200307.log
/debug/php_20200308.log
/debug/php_20200309.log
/debug/php_20200310.log
/debug/php_20200311.log
/debug/php_20200312.log
/debug/php_20200313.log
/debug/php_20200314.log
/debug/php_20200315.log
/debug/php_20200316.log
/debug/php_20200317.log
/debug/php_20200318.log
/debug/php_20200319.log
/debug/php_20200320.log
/debug/php_20200321.log
/debug/php_20200322.log
/debug/php_20200323.log
/e1cfdb944f86.html
/emotion
/faq.php
/get-apple-iphone-4s.php
/group
/hardware
/images
/inc
/index.php
/iphone-check.php
/item
/jos_guid.txt
/links.php
/list
/m
/memcache.php
/MP_verify_FKEABDdeU0RDFufC.txt
/page.php
/pn
/price
/pricefix.php
/qsubscribe
/robots.txt
/shanzhai.php
/sn
/tool
/var.php
/weixin

Found on 2025-11-16 17:50

Severity: medium
Fingerprint: 5f32cf5d6962f09cd4047824d40478243eebd0276862228a9235f446f85e5212

Found 35 files trough .DS_Store spidering:

/404.php
/ads.txt
/bdunion.txt
/blog
/csz
/date.php
/debug
/e1cfdb944f86.html
/emotion
/faq.php
/get-apple-iphone-4s.php
/group
/hardware
/images
/inc
/index.php
/iphone-check.php
/item
/jos_guid.txt
/links.php
/list
/m
/memcache.php
/MP_verify_FKEABDdeU0RDFufC.txt
/page.php
/pn
/price
/pricefix.php
/qsubscribe
/robots.txt
/shanzhai.php
/sn
/tool
/var.php
/weixin

Found on 2025-09-22 08:16

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 122.228.86.130
Domain: pjx2.bpwfjt.com
Port: 80
URL: http://pjx2.bpwfjt.com

First seen 2025-08-08 05:45
Last seen 2025-08-08 05:45
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfcdac64d60a953f078ce6544ec4f451d32
```
Found 4 files trough .DS_Store spidering:

/a
/css
/img
/js
```
  Found on 2025-08-08 05:45
Create report

Open service 122.228.86.130:80 · ylsjob.yunqinet.com

2026-01-09 00:45

HTTP/1.1 404 Not Found
Server: openresty
Date: Fri, 09 Jan 2026 00:45:25 GMT
Content-Type: application/json
Content-Length: 30
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: X-Log, X-Reqid
Access-Control-Max-Age: 2592000
Age: 2
X-Log: X-Log
X-M-Log: QNM:cdn-cache-dls-zjwz-wz-22;QNM:yzh154;QNM3/404;QNM3:20/404
X-M-Reqid: 7W88CzKK9
X-Qnm-Cache: Miss
X-Qnm-Cache: Hit
X-Reqid: j0MAAACgSYZw6YgY
X-Svr: IO


{"error":"Document not found"}

Found 2026-01-09 by HttpPlugin