LeakIX - Host 163.181.225.48

Host 163.181.225.48

Germany

Zhejiang Taobao Network Co.,Ltd

Software information

ESA

tcp/443 tcp/80 tcp/8443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 163.181.225.48
Domain: alcj0412w1.wxyyjwx.com
Port: 80
URL: http://alcj0412w1.wxyyjwx.com

First seen 2025-12-25 12:18
Last seen 2026-01-23 09:50
Open for 28 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-23 09:50
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 163.181.225.48
Domain: alcj0412w1.wxyyjwx.com
Port: 8443
URL: https://alcj0412w1.wxyyjwx.com:8443

First seen 2025-12-25 12:18
Last seen 2026-01-22 22:28
Open for 28 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-22 22:28
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 163.181.225.48
Domain: www.lingview.xyz
Port: 443
URL: https://www.lingview.xyz

First seen 2025-10-16 15:43
Last seen 2026-01-22 21:36
Open for 98 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-22 21:36
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 163.181.225.48
Domain: alcj0412w1.wxyyjwx.com
Port: 443
URL: https://alcj0412w1.wxyyjwx.com

First seen 2025-12-25 12:18
Last seen 2026-01-16 00:35
Open for 21 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-16 00:35
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 163.181.225.48
Domain: www.14weixinfnakgka.shop
Port: 443
URL: https://www.14weixinfnakgka.shop

First seen 2025-08-28 10:00
Last seen 2025-09-02 06:03
Open for 4 days

Severity: high
Fingerprint: 5f32cf5d6962f09c6e6dc6946e6dc694588733fb7e57d4971b47f10a00942c0a

Found 84 files trough .DS_Store spidering:

/403.html
/404.html
/file.txt
/index.php
/log.txt
/MP_verify_yJtMiwiYepCS7wVr.txt
/newdb_list.json
/notice.json
/phpinfo.php
/static
/uploads
/video
/video/bjsc
/video/jld28
/video/jld28.html
/video/jsmt
/video/jsmt/api.php
/video/jsmt/cocos2d
/video/jsmt/cocos2d.js
/video/jsmt/index.php
/video/jsmt/jquery.js
/video/jsmt/main.js
/video/jsmt/res
/video/jsmt/res/20001.png
/video/jsmt/res/40001.png
/video/jsmt/res/bgNumber.png
/video/jsmt/res/btm_bg.jpg
/video/jsmt/res/cai1.png
/video/jsmt/res/cai10.png
/video/jsmt/res/cai2.png
/video/jsmt/res/cai3.png
/video/jsmt/res/cai4.png
/video/jsmt/res/cai5.png
/video/jsmt/res/cai6.png
/video/jsmt/res/cai7.png
/video/jsmt/res/cai8.png
/video/jsmt/res/cai9.png
/video/jsmt/res/car1.png
/video/jsmt/res/car10.png
/video/jsmt/res/car2.png
/video/jsmt/res/car3.png
/video/jsmt/res/car4.png
/video/jsmt/res/car5.png
/video/jsmt/res/car6.png
/video/jsmt/res/car7.png
/video/jsmt/res/car8.png
/video/jsmt/res/car9.png
/video/jsmt/res/car_rank1.png
/video/jsmt/res/car_rank10.png
/video/jsmt/res/car_rank2.png
/video/jsmt/res/car_rank3.png
/video/jsmt/res/car_rank4.png
/video/jsmt/res/car_rank5.png
/video/jsmt/res/car_rank6.png
/video/jsmt/res/car_rank7.png
/video/jsmt/res/car_rank8.png
/video/jsmt/res/car_rank9.png
/video/jsmt/res/carLong.png
/video/jsmt/res/edit.mp3
/video/jsmt/res/ffff.png
/video/jsmt/res/light.png
/video/jsmt/res/mid_bg.jpg
/video/jsmt/res/paodao.jpg
/video/jsmt/res/qianmi.png
/video/jsmt/res/rank1.png
/video/jsmt/res/rank2.png
/video/jsmt/res/rank3.png
/video/jsmt/res/s1.png
/video/jsmt/res/s10.png
/video/jsmt/res/s2.png
/video/jsmt/res/s3.png
/video/jsmt/res/s4.png
/video/jsmt/res/s5.png
/video/jsmt/res/s6.png
/video/jsmt/res/s7.png
/video/jsmt/res/s8.png
/video/jsmt/res/s9.png
/video/jsmt/res/top_bg.jpg
/video/jsmt/res/top_bg1.jpg
/video/jsmt/src
/video/jsmt.zip
/video/pc28
/video/pc28.html
/video/xyft

Found on 2025-09-02 06:03

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 163.181.225.48
Domain: www.14weixinfnakgka.shop
Port: 80
URL: http://www.14weixinfnakgka.shop

First seen 2025-08-28 10:00
Last seen 2025-09-02 06:03
Open for 4 days

Severity: high
Fingerprint: 5f32cf5d6962f09c6e6dc6946e6dc694588733fb7e57d4971b47f10a00942c0a

Found 84 files trough .DS_Store spidering:

/403.html
/404.html
/file.txt
/index.php
/log.txt
/MP_verify_yJtMiwiYepCS7wVr.txt
/newdb_list.json
/notice.json
/phpinfo.php
/static
/uploads
/video
/video/bjsc
/video/jld28
/video/jld28.html
/video/jsmt
/video/jsmt/api.php
/video/jsmt/cocos2d
/video/jsmt/cocos2d.js
/video/jsmt/index.php
/video/jsmt/jquery.js
/video/jsmt/main.js
/video/jsmt/res
/video/jsmt/res/20001.png
/video/jsmt/res/40001.png
/video/jsmt/res/bgNumber.png
/video/jsmt/res/btm_bg.jpg
/video/jsmt/res/cai1.png
/video/jsmt/res/cai10.png
/video/jsmt/res/cai2.png
/video/jsmt/res/cai3.png
/video/jsmt/res/cai4.png
/video/jsmt/res/cai5.png
/video/jsmt/res/cai6.png
/video/jsmt/res/cai7.png
/video/jsmt/res/cai8.png
/video/jsmt/res/cai9.png
/video/jsmt/res/car1.png
/video/jsmt/res/car10.png
/video/jsmt/res/car2.png
/video/jsmt/res/car3.png
/video/jsmt/res/car4.png
/video/jsmt/res/car5.png
/video/jsmt/res/car6.png
/video/jsmt/res/car7.png
/video/jsmt/res/car8.png
/video/jsmt/res/car9.png
/video/jsmt/res/car_rank1.png
/video/jsmt/res/car_rank10.png
/video/jsmt/res/car_rank2.png
/video/jsmt/res/car_rank3.png
/video/jsmt/res/car_rank4.png
/video/jsmt/res/car_rank5.png
/video/jsmt/res/car_rank6.png
/video/jsmt/res/car_rank7.png
/video/jsmt/res/car_rank8.png
/video/jsmt/res/car_rank9.png
/video/jsmt/res/carLong.png
/video/jsmt/res/edit.mp3
/video/jsmt/res/ffff.png
/video/jsmt/res/light.png
/video/jsmt/res/mid_bg.jpg
/video/jsmt/res/paodao.jpg
/video/jsmt/res/qianmi.png
/video/jsmt/res/rank1.png
/video/jsmt/res/rank2.png
/video/jsmt/res/rank3.png
/video/jsmt/res/s1.png
/video/jsmt/res/s10.png
/video/jsmt/res/s2.png
/video/jsmt/res/s3.png
/video/jsmt/res/s4.png
/video/jsmt/res/s5.png
/video/jsmt/res/s6.png
/video/jsmt/res/s7.png
/video/jsmt/res/s8.png
/video/jsmt/res/s9.png
/video/jsmt/res/top_bg.jpg
/video/jsmt/res/top_bg1.jpg
/video/jsmt/src
/video/jsmt.zip
/video/pc28
/video/pc28.html
/video/xyft

Found on 2025-09-02 06:03

Create report

Open service 163.181.225.48:80 · www.7ty943.sbs

2026-02-06 16:39

HTTP/1.1 301 Moved Permanently
Server: ESA
Date: Fri, 06 Feb 2026 16:39:45 GMT
Content-Type: text/html
Content-Length: 3858
Connection: close
Set-Cookie: acw_tc=a3b55c9e17703959854682775ee19cdf310395efada51ba73d18751097;path=/;HttpOnly;Max-Age=3600
Set-Cookie: cdn_sec_tc=a3b55c9e17703959854682775ee19cdf310395efada51ba73d18751097;path=/;HttpOnly;Max-Age=3600
Location: https://www.7ty943.sbs/
Via: ens-cache10.de5[,0]
Timing-Allow-Origin: *
EagleId: a3b55c9e17703959854682775e

Page title: Document

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0,maximum-scale=1.0, minimum-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>Document</title>
  <style> * { box-sizing: border-box; } html { height: 100%; font-style: normal; } body{ height: 100%; margin: 0; padding: 0; font-style: normal; font-family: PingFang SC; .error-page{ position: absolute; left: 50%; transform: translateX(-50%); height: 100%; width: 70%; padding-top: 150px; max-width: 920px; .http-status { font-size: 68px; font-weight: 500; line-height: normal; letter-spacing: normal; color: #FF6A00; } .title { font-size: 24px; font-weight: 500; line-height: normal; letter-spacing: normal; color: #333333; } .desc { margin-top: 4px; font-size: 16px; font-weight: 500; line-height: 24px; letter-spacing: normal; color: #333333; } .request{ margin-top: 16px; width: 100%; height: 84px; border-radius: 6px; background: #F9F9F9; box-sizing: border-box; border: 1px solid #F4F4F4; padding: 16px 24px; font-size: 14px; font-weight: 500; line-height: 22px; letter-spacing: normal; color: #555555; .request-time { margin-top: 8px; }} .error-img { margin-top: 16px; width: 100%; img{ width: 100%; } } } .footer{ border-top: 1px solid #F4F4F4; position: fixed; text-align: center; line-height: 45px; height: 45px; width: 100%; bottom: 0; font-size: 16px; font-weight: 500; letter-spacing: normal; color: #AAAAAA; a{ color: #0064C8; text-decoration:none } } } </style>

</head>
<body>
<div class="error-page">
  <div class="http-status"></div>
  <div class="title"></div>
  <div class="desc">
  </div>
  <div class="request">
    <div class="request-id"></div>
    <div class="request-time"></div>
  </div>
  <div class="error-img"></div>
</div>
<div class="footer">Performance & Security by <a href="https://www.alibabacloud.com/help/en/edge-security-acceleration/esa/product-overview/what-is-esa">ESA</a></div>
</body>
<script>
  var { http_status, title, desc, traceid, datetime, x_site_origin_resp_info }  = window.__ESA_ERROR_PAGE_INFO
  var hundredDigit = Math.floor(http_status / 100);
  var imgLinks = {
    'clientError': 'https://img.alicdn.com/imgextra/i1/O1CN01UFU7Za20FcE57RuJ0_!!6000000006820-2-tps-1840-504.png',
    'esaError': 'https://img.alicdn.com/imgextra/i2/O1CN01JGkrte1mu0XIkuUx2_!!6000000005013-2-tps-1840-504.png',
    'serverError': 'https://img.alicdn.com/imgextra/i4/O1CN01fhinso28KfWUOinu6_!!6000000007914-2-tps-1840-504.png'
  }
  var imgSrc = undefined
  var flag5xx = x_site_origin_resp_info.split('||')[1]
  if (hundredDigit === 4) {
    if (http_status === 403) {
      imgSrc = undefined
    } else {
      imgSrc = imgLinks['clientError']
    }
  } else if (hundredDigit === 5) {
    if (flag5xx === '2' || flag5xx === '0') {
      imgSrc = imgLinks['serverError']
    }else if(flag5xx === '1') {
      imgSrc = imgLinks['esaError']
    }else{
      imgSrc = imgLinks['esaError']
    }
  }
  window.onload = function () {
    var httpStatus = document.getElementsByClassName('http-status')[0];
    httpStatus.innerHTML = http_status;
    var errorTitle = document.getElementsByClassName('title')[0];
    errorTitle.innerHTML = title;
    var subContent = document.getElementsByClassName('desc')[0];
    subContent.innerHTML = desc;
    var requestId = document.getElementsByClassName('request-id')[0];
    requestId.innerHTML = `Request ID: ${traceid}`;
    var requestTime = document.getElementsByClassName('request-time')[0];
    requestTime.innerHTML = datetime;
    var errorImg = document.getElementsByClassName('error-img')[0];
    errorImg.innerHTML = imgSrc ? `<img alt="" src=${imgSrc}>` : null;
  }
</script>
</html>

Found 2026-02-06 by HttpPlugin

Host 163.181.225.48

Germany

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

*.agency.beta.lingxuan.top*.api.beta.lingxuan.top*.beta.lingxuan.topbeta.lingxuan.top

llkfm243.i643g.com

flmqekn.comwww.flmqekn.com

wmapp.sc.comwww.wmapp.sc.com

*.icixy.comicixy.com

blog.zhijie2025.top

account.l0op.site

www.zpxfeop.comzpxfeop.com

obelus.cc

nqiudya.nfgqx.cn

he45ws2e.dbwap.com

d2f3sdfdf.zhengsimaomao.com

www.fztwc.comfztwc.com

alcj0412w1.wxyyjwx.com

*.lingview.xyz

*.qiqii.cnqiqii.cn

acsgbrz.comwww.acsgbrz.com

dl.pengjiayou.cn

game.wawa.arcoinfun.com

static.uukei.com

new.51face.top

hjef45e-f.jiuhengrongdan.net

*.beijianceshi.combeijianceshi.com

api.fxylko.cnimages.fxylko.cnimg.fxylko.cnwebrtc.fxylko.cnwww.fxylko.cn

comment.naturesuki.net

zh.zxfk.rhuzjoc.com

Domain summary

.agency.beta.lingxuan.top.api.beta.lingxuan.top*.beta.lingxuan.topbeta.lingxuan.top