LeakIX - Host 156.226.116.39

Host 156.226.116.39

Hong Kong

LUOGELANG FRANCE LIMITED

Software information

nginx nginx

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 156.226.116.39
Domain: www.yql0.com
Port: 443
URL: https://www.yql0.com

First seen 2025-02-19 08:32
Last seen 2026-02-09 20:49
Open for 355 days
- Severity: high
  Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45da81e919a69caed573c4d1aa5cf74474
```
Found 30 files trough .DS_Store spidering:

/app
/article.png
/composer.json
/composer.lock
/config
/config/1.php
/config/2.php
/config/3.php
/config/4.php
/config/5.php
/config/6.php
/config/database.php
/content
/delete.php
/index.php
/ixed.lin
/lilith_com.sql
/logo.php
/muban
/myyjjpp.js
/post.php
/proxy_ip.php
/README.md
/robots.txt
/sql.php
/themes
/token.php
/update.php
/uploads
/vendor
```
  Found on 2026-02-09 20:49
- Severity: high
  Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea969d9d3352ce140897e14271e6d0abf84
```
Found 23 files trough .DS_Store spidering:

/app
/article.png
/composer.json
/composer.lock
/config
/content
/delete.php
/index.php
/ixed.lin
/lilith_com.sql
/logo.php
/muban
/myyjjpp.js
/post.php
/proxy_ip.php
/README.md
/robots.txt
/sql.php
/themes
/token.php
/update.php
/uploads
/vendor
```
  Found on 2025-11-27 10:33
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 156.226.116.39
Domain: www.shashadan.com
Port: 443
URL: https://www.shashadan.com

First seen 2025-01-22 04:58
Last seen 2026-02-09 19:44
Open for 383 days
- Severity: high
  Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45da81e919a69caed573c4d1aa5cf74474
```
Found 30 files trough .DS_Store spidering:

/app
/article.png
/composer.json
/composer.lock
/config
/config/1.php
/config/2.php
/config/3.php
/config/4.php
/config/5.php
/config/6.php
/config/database.php
/content
/delete.php
/index.php
/ixed.lin
/lilith_com.sql
/logo.php
/muban
/myyjjpp.js
/post.php
/proxy_ip.php
/README.md
/robots.txt
/sql.php
/themes
/token.php
/update.php
/uploads
/vendor
```
  Found on 2026-02-09 19:44
- Severity: high
  Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea969d9d3352ce140897e14271e6d0abf84
```
Found 23 files trough .DS_Store spidering:

/app
/article.png
/composer.json
/composer.lock
/config
/content
/delete.php
/index.php
/ixed.lin
/lilith_com.sql
/logo.php
/muban
/myyjjpp.js
/post.php
/proxy_ip.php
/README.md
/robots.txt
/sql.php
/themes
/token.php
/update.php
/uploads
/vendor
```
  Found on 2025-12-26 15:32
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 156.226.116.39
Domain: www.nhcdyey.com
Port: 443
URL: https://www.nhcdyey.com

First seen 2025-12-18 10:33
Last seen 2026-02-09 18:57
Open for 53 days
- Severity: high
  Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45da81e919a69caed573c4d1aa5cf74474
```
Found 30 files trough .DS_Store spidering:

/app
/article.png
/composer.json
/composer.lock
/config
/config/1.php
/config/2.php
/config/3.php
/config/4.php
/config/5.php
/config/6.php
/config/database.php
/content
/delete.php
/index.php
/ixed.lin
/lilith_com.sql
/logo.php
/muban
/myyjjpp.js
/post.php
/proxy_ip.php
/README.md
/robots.txt
/sql.php
/themes
/token.php
/update.php
/uploads
/vendor
```
  Found on 2026-02-09 18:57
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 156.226.116.39
Domain: www.4008813168.com
Port: 443
URL: https://www.4008813168.com

First seen 2025-02-16 08:32
Last seen 2026-02-09 18:20
Open for 358 days
- Severity: high
  Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45da81e919a69caed573c4d1aa5cf74474
```
Found 30 files trough .DS_Store spidering:

/app
/article.png
/composer.json
/composer.lock
/config
/config/1.php
/config/2.php
/config/3.php
/config/4.php
/config/5.php
/config/6.php
/config/database.php
/content
/delete.php
/index.php
/ixed.lin
/lilith_com.sql
/logo.php
/muban
/myyjjpp.js
/post.php
/proxy_ip.php
/README.md
/robots.txt
/sql.php
/themes
/token.php
/update.php
/uploads
/vendor
```
  Found on 2026-02-09 18:20
- Severity: high
  Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea969d9d3352ce140897e14271e6d0abf84
```
Found 23 files trough .DS_Store spidering:

/app
/article.png
/composer.json
/composer.lock
/config
/content
/delete.php
/index.php
/ixed.lin
/lilith_com.sql
/logo.php
/muban
/myyjjpp.js
/post.php
/proxy_ip.php
/README.md
/robots.txt
/sql.php
/themes
/token.php
/update.php
/uploads
/vendor
```
  Found on 2025-03-03 08:56
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 156.226.116.39
Port: 443
URL: https://156.226.116.39

First seen 2025-01-06 22:35
Last seen 2026-01-29 16:06
Open for 387 days
- Severity: high
  Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45da81e919a69caed573c4d1aa5cf74474
```
Found 30 files trough .DS_Store spidering:

/app
/article.png
/composer.json
/composer.lock
/config
/config/1.php
/config/2.php
/config/3.php
/config/4.php
/config/5.php
/config/6.php
/config/database.php
/content
/delete.php
/index.php
/ixed.lin
/lilith_com.sql
/logo.php
/muban
/myyjjpp.js
/post.php
/proxy_ip.php
/README.md
/robots.txt
/sql.php
/themes
/token.php
/update.php
/uploads
/vendor
```
  Found on 2026-01-29 16:06
Create report

Open service 156.226.116.39:443 · www.nhcdyey.com

2026-01-23 12:00

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Jan 2026 12:00:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Powered-By: UCMS
Strict-Transport-Security: max-age=31536000

Found 2026-01-23 by HttpPlugin

Create report

Open service 156.226.116.39:443 · www.yql0.com

2026-01-23 11:28

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Jan 2026 11:28:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Powered-By: UCMS
Strict-Transport-Security: max-age=31536000

Found 2026-01-23 by HttpPlugin

Create report

Open service 156.226.116.39:443 · www.4008813168.com

2026-01-23 10:32

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Jan 2026 10:32:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Powered-By: UCMS
Strict-Transport-Security: max-age=31536000

Found 2026-01-23 by HttpPlugin

Create report

Open service 156.226.116.39:443 · www.shashadan.com

2026-01-23 04:26

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Jan 2026 04:26:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Powered-By: UCMS
Strict-Transport-Security: max-age=31536000

Found 2026-01-23 by HttpPlugin

Create report

Open service 156.226.116.39:443

2026-01-22 17:29

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 22 Jan 2026 17:29:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Powered-By: UCMS
Strict-Transport-Security: max-age=31536000

Found 2026-01-22 by HttpPlugin

Create report

nhcdyey.comwww.nhcdyey.com

Fingerprint:

06361f8869363aeab5d71b22654487ebd22284e7b6a91ca82e19a2c354269006

CN:

nhcdyey.com

Key:

ECDSA-256

Issuer:

Not before:

2025-12-18 09:34

Not after:

2026-03-18 09:34

www.yql0.comyql0.com

Fingerprint:

291ae2c0af54bd2f358a27bd2edf32a0afd537d7fa841f273b86d211d8669448

CN:

yql0.com

Key:

ECDSA-256

Issuer:

Not before:

2025-12-14 09:06

Not after:

2026-03-14 09:06

0096zz.comwww.0096zz.com

Fingerprint:

1099df06b05d5bca3b48216b2e84a4787d895c72943f1b8a42e0d82fa07e2f17

CN:

0096zz.com

Key:

ECDSA-256

Issuer:

Not before:

2025-12-18 08:42

Not after:

2026-03-18 08:42

shashadan.comwww.shashadan.com

Fingerprint:

a0b0c3304eadc7d4ef67fccaffc9de0ed977a34b12edb2cbe7d83d7f6458f13b

CN:

shashadan.com

Key:

ECDSA-256

Issuer:

Not before:

2025-10-14 07:58

Not after:

2026-01-12 07:58

Domain summary

www.yql0.com 2 www.4008813168.com 2 www.shashadan.com 2 www.nhcdyey.com 1

4 recorded

Host 156.226.116.39

Hong Kong

Software information

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Create report

Create report

Create report

Create report

Create report

nhcdyey.comwww.nhcdyey.com

www.yql0.comyql0.com

0096zz.comwww.0096zz.com

shashadan.comwww.shashadan.com

Domain summary