Apache
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0904d808d7e02e9ac8f638f0164866dd3
Found 13 files trough .DS_Store spidering: /.git /.gitignore /collect_301.html /enter - 副本.html /enter.html /favicon.ico /iframe.html /index copy.html /index.html /QRcode - 副本.html /QRcode.html /README.md /static
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652201fa2920
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true hooksPath = /dev/null [remote "origin"] url = http://ngit.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git fetch = +refs/heads/*:refs/remotes/origin/*
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true hooksPath = /dev/null [remote "origin"] url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git fetch = +refs/heads/*:refs/remotes/origin/*
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652208309e9a
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://cdn-tv.hnmting.com/69cy/69cy_web.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 18.165.201.51:443 · www.wjd.de
2026-01-09 00:16
HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Date: Fri, 09 Jan 2026 00:16:13 GMT Server: Apache Pragma: no-cache Expires: Fri, 09 Jan 2026 01:16:13 GMT Cache-Control: max-age=3600 X-Redirect-By: WordPress Set-Cookie: PHPSESSID=907r726ql2hshqiu18320ks4ci; path=/ Location: https://wjd.de/ X-Cache: Miss from cloudfront Via: 1.1 cb9d66c261e91793be744f629d6e309e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: xbMkN4bYONYeJFptIXr6OHtlN20NzMNAIXnwyMExFtlVyapI8-1vFA==