LeakIX - Host 180.163.146.112

Host 180.163.146.112

China

CHINATELECOM Jiangsu province Changzhou 5G network

Software information

Tengine

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: quotation.gd6.liuboweb.cn
Port: 443
URL: https://quotation.gd6.liuboweb.cn

First seen 2025-11-21 02:09
Last seen 2026-02-13 01:42
Open for 83 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-02-13 01:42
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: quotation.gd6.liuboweb.cn
Port: 80
URL: http://quotation.gd6.liuboweb.cn

First seen 2025-11-21 02:09
Last seen 2026-02-13 01:42
Open for 83 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-02-13 01:42
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 180.163.146.112
Domain: xiezhiyi.com
Port: 80
URL: http://xiezhiyi.com

First seen 2024-08-07 07:29
Last seen 2026-02-11 00:17
Open for 552 days

Severity: medium
Fingerprint: 5f32cf5d6962f09cfdf2c773fdf2c7731da1dcccf5e5d557117634aef670fac8

Found 50 files trough .DS_Store spidering:

/2025618
/2025618/h5
/2025618/h5/lkd
/2025618/h5/lkd/3
/2025618/h5/lkd/5
/2025618/h5/lkd/6
/2025618/h5/lkd/7
/2025618/h5/lkzs
/2025618/h5/page
/admin
/attachment
/css
/css/guide2022
/font
/images
/images/common
/images/culture
/images/else
/images/goods
/images/goodsyang
/images/guide2022
/images/guide2023
/images/index
/images/index2
/images/index2023
/images/index2024
/images/lh
/images/lh/b
/images/lk
/images/lk/pc
/images/newsComm
/images/nianhuo2022
/images/nianhuo2023
/images/stores
/images/xiaochengxu
/images/ychdzx
/images/zz
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/ychdzx

Found on 2026-02-11 00:17

Severity: low
Fingerprint: 5f32cf5d6962f09c684e525d684e525de11e742ed1e5ea9186aa766833097f5e

Found 27 files trough .DS_Store spidering:

/2025618
/2025618/h5
/2025618/h5/lkd
/2025618/h5/lkd/3
/2025618/h5/lkd/5
/2025618/h5/lkd/6
/2025618/h5/lkd/7
/2025618/h5/lkzs
/2025618/h5/page
/admin
/attachment
/css
/font
/images
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/ychdzx

Found on 2026-02-11 00:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c3b95ca2b3b95ca2b00418884c91ce17fa3ca5956053d2f0c

Found 58 files trough .DS_Store spidering:

/2025618
/2025618/h5
/2025618/h5/lkd
/2025618/h5/lkd/3
/2025618/h5/lkd/5
/2025618/h5/lkd/6
/2025618/h5/lkd/7
/2025618/h5/lkzs
/2025618/h5/page
/admin
/attachment
/css
/css/guide2022
/font
/images
/images/common
/images/culture
/images/else
/images/goods
/images/goodsyang
/images/guide2022
/images/guide2023
/images/index
/images/index2
/images/index2023
/images/index2024
/images/lh
/images/lh/b
/images/lk
/images/lk/pc
/images/newsComm
/images/nianhuo2022
/images/nianhuo2023
/images/stores
/images/xiaochengxu
/images/ychdzx
/images/zz
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/Views/Home
/Views/Home/img
/Views/Home/img/2024
/Views/ychdzx
/Views/ychdzx/css
/Views/ychdzx/font
/Views/ychdzx/img
/Views/ychdzx/js
/ychdzx

Found on 2026-02-11 00:17

Severity: medium
Fingerprint: 5f32cf5d6962f09c680cb8ce680cb8cecc94559192f644440a644a6b1edc0151

Found 59 files trough .DS_Store spidering:

/2025618
/2025618/h5
/2025618/h5/lkd
/2025618/h5/lkd/3
/2025618/h5/lkd/5
/2025618/h5/lkd/6
/2025618/h5/lkd/7
/2025618/h5/lkzs
/2025618/h5/page
/admin
/attachment
/css
/css/guide2022
/font
/images
/images/common
/images/culture
/images/else
/images/goods
/images/goodsyang
/images/guide2022
/images/guide2023
/images/index
/images/index2
/images/index2023
/images/index2024
/images/lh
/images/lh/b
/images/lk
/images/lk/pc
/images/newsComm
/images/nianhuo2022
/images/nianhuo2023
/images/stores
/images/xiaochengxu
/images/ychdzx
/images/zz
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/Views/Home
/Views/Home/img
/Views/Home/img/2024
/Views/ychdzx
/Views/ychdzx/css
/Views/ychdzx/font
/Views/ychdzx/img
/Views/ychdzx/img/5
/Views/ychdzx/js
/ychdzx

Found on 2026-01-15 23:43

Severity: medium
Fingerprint: 5f32cf5d6962f09cecc85b04ecc85b04b2e3ca3f4c3b655aa78124a130db2eaf

Found 53 files trough .DS_Store spidering:

/2025618
/2025618/h5
/2025618/h5/lkd
/2025618/h5/lkd/3
/2025618/h5/lkd/5
/2025618/h5/lkd/6
/2025618/h5/lkd/7
/2025618/h5/lkzs
/2025618/h5/page
/admin
/attachment
/css
/css/guide2022
/font
/images
/images/common
/images/culture
/images/else
/images/goods
/images/goodsyang
/images/guide2022
/images/guide2023
/images/index
/images/index2
/images/index2023
/images/index2024
/images/lh
/images/lh/b
/images/lk
/images/lk/pc
/images/newsComm
/images/nianhuo2022
/images/nianhuo2023
/images/stores
/images/xiaochengxu
/images/ychdzx
/images/zz
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/Views/Home
/Views/Home/img
/Views/ychdzx
/ychdzx

Found on 2025-12-30 10:11

Severity: medium
Fingerprint: 5f32cf5d6962f09cef4770e6ef4770e6fcd32149dbc715b151812acbd79b7f03

Found 42 files trough .DS_Store spidering:

/2025618
/admin
/attachment
/css
/css/guide2022
/font
/images
/images/common
/images/culture
/images/else
/images/goods
/images/goodsyang
/images/guide2022
/images/guide2023
/images/index
/images/index2
/images/index2023
/images/index2024
/images/lh
/images/lh/b
/images/lk
/images/lk/pc
/images/newsComm
/images/nianhuo2022
/images/nianhuo2023
/images/stores
/images/xiaochengxu
/images/ychdzx
/images/zz
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/ychdzx

Found on 2025-12-26 08:02

Severity: medium
Fingerprint: 5f32cf5d6962f09c114fbe07114fbe07ad7f2b48d0d7f413a096bea29db11be1

Found 47 files trough .DS_Store spidering:

/2025618
/2025618/h5
/2025618/h5/lkd
/2025618/h5/lkd/3
/2025618/h5/lkd/5
/2025618/h5/lkd/6
/2025618/h5/lkd/7
/2025618/h5/lkzs
/2025618/h5/page
/admin
/attachment
/css
/font
/images
/images/common
/images/culture
/images/else
/images/goods
/images/goodsyang
/images/guide2022
/images/guide2023
/images/index
/images/index2
/images/index2023
/images/index2024
/images/lh
/images/lk
/images/newsComm
/images/nianhuo2022
/images/nianhuo2023
/images/stores
/images/xiaochengxu
/images/ychdzx
/images/zz
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/ychdzx

Found on 2025-12-20 07:36

Severity: medium
Fingerprint: 5f32cf5d6962f09c3e8b9cac3e8b9cac1f607547b2302472a9e6769954a1eacb

Found 48 files trough .DS_Store spidering:

/2025618
/2025618/h5
/2025618/h5/lkd
/2025618/h5/lkd/3
/2025618/h5/lkd/5
/2025618/h5/lkd/6
/2025618/h5/lkd/7
/2025618/h5/lkzs
/2025618/h5/page
/admin
/attachment
/css
/css/guide2022
/font
/images
/images/common
/images/culture
/images/else
/images/goods
/images/goodsyang
/images/guide2022
/images/guide2023
/images/index
/images/index2
/images/index2023
/images/index2024
/images/lh
/images/lk
/images/newsComm
/images/nianhuo2022
/images/nianhuo2023
/images/stores
/images/xiaochengxu
/images/ychdzx
/images/zz
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/ychdzx

Found on 2025-11-30 18:43

Severity: low
Fingerprint: 5f32cf5d6962f09c31c2f0b631c2f0b63ea708f923fbb9fc28fba0a389c4f448

Found 28 files trough .DS_Store spidering:

/2025618
/2025618/h5
/2025618/h5/lkd
/2025618/h5/lkd/3
/2025618/h5/lkd/5
/2025618/h5/lkd/6
/2025618/h5/lkd/7
/2025618/h5/lkzs
/2025618/h5/page
/admin
/attachment
/css
/css/guide2022
/font
/images
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/ychdzx

Found on 2025-11-26 10:00

Severity: medium
Fingerprint: 5f32cf5d6962f09c9150089691500896c2538f02154ce38211956142c0f81268

Found 37 files trough .DS_Store spidering:

/admin
/attachment
/css
/css/guide2022
/font
/images
/images/common
/images/culture
/images/else
/images/goods
/images/guide2022
/images/guide2023
/images/index
/images/index2023
/images/index2024
/images/lh
/images/lh/b
/images/lk
/images/newsComm
/images/nianhuo2022
/images/nianhuo2023
/images/stores
/images/xiaochengxu
/images/ychdzx
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/ychdzx

Found on 2025-04-16 04:22

Severity: medium
Fingerprint: 5f32cf5d6962f09c8efce1938efce1937c08a8ab28daedfdcdaad245e7175702

Found 36 files trough .DS_Store spidering:

/admin
/attachment
/css
/css/guide2022
/font
/images
/images/common
/images/culture
/images/else
/images/goods
/images/guide2022
/images/guide2023
/images/index
/images/index2023
/images/index2024
/images/lh
/images/lk
/images/newsComm
/images/nianhuo2022
/images/nianhuo2023
/images/stores
/images/xiaochengxu
/images/ychdzx
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/ychdzx

Found on 2025-04-14 05:00

Severity: medium
Fingerprint: 5f32cf5d6962f09c8f03d7bd8f03d7bdb2bd60650728fc9ffad2e9d76de51310

Found 38 files trough .DS_Store spidering:

/admin
/attachment
/css
/css/guide2022
/font
/images
/images/common
/images/culture
/images/else
/images/goods
/images/guide2022
/images/guide2023
/images/index
/images/index2023
/images/index2024
/images/lh
/images/lh/b
/images/lk
/images/lk/pc
/images/newsComm
/images/nianhuo2022
/images/nianhuo2023
/images/stores
/images/xiaochengxu
/images/ychdzx
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/ychdzx

Found on 2025-04-10 06:24

Severity: low
Fingerprint: 5f32cf5d6962f09cdc57c57adc57c57a14fa8a96f18d0d5623c9532e06c990d1

Found 19 files trough .DS_Store spidering:

/admin
/attachment
/css
/css/guide2022
/font
/images
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/ychdzx

Found on 2025-02-28 14:44

Severity: medium
Fingerprint: 5f32cf5d6962f09c8efce1938efce1937c08a8ab28daedfdcdaad2453d70ba8c

Found 36 files trough .DS_Store spidering:

/admin
/attachment
/css
/font
/images
/images/common
/images/culture
/images/else
/images/goods
/images/guide2022
/images/guide2023
/images/index
/images/index2023
/images/index2024
/images/lh
/images/lh/b
/images/lk
/images/newsComm
/images/nianhuo2022
/images/nianhuo2023
/images/stores
/images/xiaochengxu
/images/ychdzx
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/ychdzx

Found on 2024-08-20 11:30

Severity: medium
Fingerprint: 5f32cf5d6962f09c9150089691500896c2538f02154ce3821195614285a994a2

Found 37 files trough .DS_Store spidering:

/admin
/attachment
/css
/font
/images
/images/common
/images/culture
/images/else
/images/goods
/images/guide2022
/images/guide2023
/images/index
/images/index2023
/images/index2024
/images/lh
/images/lh/b
/images/lk
/images/lk/pc
/images/newsComm
/images/nianhuo2022
/images/nianhuo2023
/images/stores
/images/xiaochengxu
/images/ychdzx
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/ychdzx

Found on 2024-08-14 22:41

Severity: medium
Fingerprint: 5f32cf5d6962f09cd4047824d4047824a8e0d068c82c8a680478f4302c643fe0

Found 35 files trough .DS_Store spidering:

/admin
/attachment
/css
/font
/images
/images/common
/images/culture
/images/else
/images/goods
/images/guide2022
/images/guide2023
/images/index
/images/index2023
/images/index2024
/images/lh
/images/lk
/images/newsComm
/images/nianhuo2022
/images/nianhuo2023
/images/stores
/images/xiaochengxu
/images/ychdzx
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/ychdzx

Found on 2024-08-08 20:49

Severity: medium
Fingerprint: 5f32cf5d6962f09ca629b8b1a629b8b186d52c99bbaa8aa37a8322b3e768ab5f

Found 34 files trough .DS_Store spidering:

/admin
/attachment
/css
/font
/images
/images/common
/images/culture
/images/else
/images/goods
/images/guide2022
/images/guide2023
/images/index
/images/index2023
/images/index2024
/images/lk
/images/newsComm
/images/nianhuo2022
/images/nianhuo2023
/images/stores
/images/xiaochengxu
/images/ychdzx
/js
/m
/min
/mobile
/mp4
/new
/news
/server_img
/stores
/tixie
/UploadImage
/Views
/ychdzx

Found on 2024-08-07 07:29

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 180.163.146.112
Domain: assets.artnfr.com
Port: 80
URL: http://assets.artnfr.com

First seen 2025-12-13 20:16
Last seen 2026-02-10 03:49
Open for 58 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814e21ea37eba18660d688e45eae869e6dba
```
Found 6 files trough .DS_Store spidering:

/.well-known
/build
/css
/js
/static
/vendor
```
  Found on 2026-02-10 03:49
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 180.163.146.112
Domain: assets.artnfr.com
Port: 443
URL: https://assets.artnfr.com

First seen 2025-12-13 20:16
Last seen 2026-02-10 03:49
Open for 58 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814e21ea37eba18660d688e45eae869e6dba
```
Found 6 files trough .DS_Store spidering:

/.well-known
/build
/css
/js
/static
/vendor
```
  Found on 2026-02-10 03:49
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 180.163.146.112
Domain: mi.act.yimingyouli.cn
Port: 443
URL: https://mi.act.yimingyouli.cn

First seen 2025-11-07 08:20
Last seen 2026-02-09 07:08
Open for 93 days

Severity: low
Fingerprint: 5f32cf5d6962f09c47dfe71947dfe7198fa8ebe05caf2a0893b1f9fe6c3c41a7

Found 16 files trough .DS_Store spidering:

/imgs
/manageui
/manageui/element-plus
/manageui/layui
/manageui/layui/layuiadmin
/manageui/layui/layuiadmin/layui
/manageui/public_static
/static
/test
/upload
/upload/mi-order
/upload/mi-order/2025-09-07
/upload/mi-order/2025090723452469932
/upload/mi-order/2025091020541130193
/version-order-rt
/version-order-rt/2025-09-09

Found on 2026-02-09 07:08

Severity: low
Fingerprint: 5f32cf5d6962f09c668fcbec668fcbecc3d38abb40776acd2eb4d43b7cd4eb19

Found 17 files trough .DS_Store spidering:

/imgs
/manageui
/manageui/element-plus
/manageui/layui
/manageui/layui/layuiadmin
/manageui/layui/layuiadmin/layui
/manageui/public_static
/manageui/public_static/bootstrap
/manageui/public_static/bootstrap/css
/manageui/public_static/watermark
/manageui/public_static/watermark/fonts
/manageui/public_static/watermark/images
/static
/test
/upload
/upload/mi-order
/version-order-rt

Found on 2026-01-23 03:31

Severity: low
Fingerprint: 5f32cf5d6962f09cab28146bab28146baee8e9c2f70ab9629025f610b34b30ed

Found 21 files trough .DS_Store spidering:

/imgs
/manageui
/manageui/element-plus
/manageui/layui
/manageui/layui/layuiadmin
/manageui/layui/layuiadmin/layui
/manageui/public_static
/manageui/public_static/bootstrap
/manageui/public_static/bootstrap/css
/manageui/public_static/watermark
/manageui/public_static/watermark/fonts
/manageui/public_static/watermark/images
/static
/test
/upload
/upload/mi-order
/upload/mi-order/2025-09-07
/upload/mi-order/2025090723452469932
/upload/mi-order/2025091020541130193
/version-order-rt
/version-order-rt/2025-09-09

Found on 2026-01-01 19:30

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d5f3a901498d8cc44846061e2447e2bc5

Found 12 files trough .DS_Store spidering:

/imgs
/manageui
/manageui/element-plus
/manageui/layui
/manageui/layui/layuiadmin
/manageui/public_static
/static
/test
/upload
/upload/mi-order
/version-order-rt
/version-order-rt/2025-09-09

Found on 2025-12-11 12:54

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f87723895af613529f3c3530b4ee15adafa15

Found 11 files trough .DS_Store spidering:

/imgs
/manageui
/manageui/element-plus
/manageui/layui
/manageui/layui/layuiadmin
/manageui/layui/layuiadmin/layui
/manageui/public_static
/static
/test
/upload
/version-order-rt

Found on 2025-11-29 04:18

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b77f1bff26e7a77d2eacb592034e019f0

Found 14 files trough .DS_Store spidering:

/imgs
/manageui
/manageui/element-plus
/manageui/layui
/manageui/layui/layuiadmin
/manageui/layui/layuiadmin/layui
/manageui/public_static
/manageui/public_static/bootstrap
/manageui/public_static/bootstrap/css
/manageui/public_static/watermark
/static
/test
/upload
/version-order-rt

Found on 2025-11-27 10:54

Severity: low
Fingerprint: 5f32cf5d6962f09c2eda814e2eda814e2ba98abd8147da07fd129ae49ace253a
```
Found 6 files trough .DS_Store spidering:

/imgs
/manageui
/static
/test
/upload
/version-order-rt
```
Found on 2025-11-21 13:14

Severity: low
Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0bc22937f600347a981a71d0f59cb7ed7

Found 13 files trough .DS_Store spidering:

/imgs
/manageui
/manageui/element-plus
/manageui/layui
/manageui/layui/layuiadmin
/manageui/layui/layuiadmin/layui
/manageui/public_static
/manageui/public_static/bootstrap
/manageui/public_static/watermark
/static
/test
/upload
/version-order-rt

Found on 2025-11-16 12:57

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: admin.hbcarai.cn
Port: 80
URL: http://admin.hbcarai.cn

First seen 2025-12-08 17:57
Last seen 2026-02-06 20:54
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-02-06 20:54
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: yk.fuliniu.cn
Port: 443
URL: https://yk.fuliniu.cn

First seen 2025-11-02 06:10
Last seen 2026-02-06 07:54
Open for 96 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-02-06 07:54
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: scnx.pay.scscxsyzxx.cn
Port: 443
URL: https://scnx.pay.scscxsyzxx.cn

First seen 2025-12-07 16:23
Last seen 2026-02-05 16:07
Open for 59 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd151e75e4bacd5d07953e15afb30f1d7879cdd91b070f607ee
```
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /scnx/getPayStatus
GET /scnx/payment
POST /callBack
POST /scnx/adviseSettlement
POST /scnx/closeOrder
POST /scnx/createOrder
POST /scnx/createOrderOnly
POST /scnx/getCheckFileUrl
POST /scnx/refundOrder
POST /scnx/selectOrderDetail
POST /scnx/selectOrderList
POST /scnx/settlementInformationInquiry
```
  Found on 2026-02-05 16:07
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: xn--m6ts29ejjh.cn
Port: 443
URL: https://xn--m6ts29ejjh.cn

First seen 2025-11-05 02:24
Last seen 2026-01-29 16:04
Open for 85 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-29 16:04
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 180.163.146.112
Domain: zhengqi100.com
Port: 80
URL: http://zhengqi100.com

First seen 2024-02-02 00:18
Last seen 2026-01-28 21:19
Open for 726 days

Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65220ad7fc50

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://5e991082afcc954c8986160a:aga_15beb7285fa7d3caf24f17b4a992567a@codeup.aliyun.com/622303f716f8e034350f49ed/zhengqi-group/official-website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2026-01-28 21:19

372 Bytes

Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65227d0b7412

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://5e991082afcc954c8986160a:aga_2371eaf55e8a8d93c2966aa4fdc5a4ff@codeup.aliyun.com/622303f716f8e034350f49ed/zhengqi-group/official-website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2025-12-13 12:23

372 Bytes

Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226cc8b31e

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://5e991082afcc954c8986160a:aga_8dfd7a3c87bf73bd905b151575001b93@codeup.aliyun.com/622303f716f8e034350f49ed/zhengqi-group/official-website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2024-12-08 03:39

372 Bytes

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 180.163.146.112
Domain: archsource.cn
Port: 443
URL: https://archsource.cn

First seen 2025-07-29 14:38
Last seen 2026-01-26 00:09
Open for 180 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b72f4af8badc2eadb138909a0ca766bcbf

Found 128 files trough .DS_Store spidering:

/data
/data/backups
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/features/DJI_0007-hq.avif
/images/features/DJI_0007-lq.avif
/images/features/DJI_0007.avif
/images/features/DJI_0007.jpg
/images/features/DJI_0025-hq.avif
/images/features/DJI_0025-lq.avif
/images/features/DJI_0025.avif
/images/features/DJI_0025.jpg
/images/features/DJI_0048-hq.avif
/images/features/DJI_0048-lq.avif
/images/features/DJI_0048.avif
/images/features/DJI_0048.jpg
/images/features/DJI_0130-hq.avif
/images/features/DJI_0130-lq.avif
/images/features/DJI_0130.avif
/images/features/DJI_0130.jpg
/images/features/DJI_0216-hq.avif
/images/features/DJI_0216-lq.avif
/images/features/DJI_0216.avif
/images/features/DJI_0216.jpg
/images/features/DJI_0266-hq.avif
/images/features/DJI_0266-lq.avif
/images/features/DJI_0266.avif
/images/features/DJI_0266.jpg
/images/features/DJI_0638-hq.avif
/images/features/DJI_0638-lq.avif
/images/features/DJI_0638.avif
/images/features/DJI_0638.jpg
/images/features/DSC02846-hq.avif
/images/features/DSC02846-lq.avif
/images/features/DSC02846.avif
/images/features/DSC02846.jpg
/images/features/DSCF0728-hq.avif
/images/features/DSCF0728-lq.avif
/images/features/DSCF0728.avif
/images/features/DSCF0728.jpg
/images/features/DSCF1896-hq.avif
/images/features/DSCF1896-lq.avif
/images/features/DSCF1896.avif
/images/features/DSCF1896.jpg
/images/features/DSCF4138-hq.avif
/images/features/DSCF4138-lq.avif
/images/features/DSCF4138.avif
/images/features/DSCF4138.jpg
/images/features/DSCF5497-hq.avif
/images/features/DSCF5497-lq.avif
/images/features/DSCF5497.avif
/images/features/DSCF5497.jpg
/images/features/DSCF6576-hq.avif
/images/features/DSCF6576-lq.avif
/images/features/DSCF6576.avif
/images/features/DSCF6576.jpg
/images/features/DSCF7859-hq.avif
/images/features/DSCF7859-lq.avif
/images/features/DSCF7859.avif
/images/features/DSCF7859.jpg
/images/features/DSCF8967-hq.avif
/images/features/DSCF8967-lq.avif
/images/features/DSCF8967.avif
/images/features/DSCF8967.jpg
/images/notfound
/images/notfound/avif
/images/notfound/jpg
/images/projects
/images/projects/926-craftsman-museum
/images/projects/alila-wuzhen
/images/projects/alila-wuzhen/DJI_0614-lq.avif
/images/projects/alila-wuzhen/DJI_0614.avif
/images/projects/alila-wuzhen/DJI_0614.jpg
/images/projects/anji-culture-and-art-center
/images/projects/anji-culture-and-art-center/DJI_0351-lq.avif
/images/projects/anji-culture-and-art-center/DJI_0351.avif
/images/projects/anji-culture-and-art-center/DJI_0351.jpg
/images/projects/aranya-art-center
/images/projects/aranya-art-center/avif
/images/projects/aranya-art-center/jpg
/images/projects/aranya-cloud-center
/images/projects/aranya-cloud-center/avif
/images/projects/aranya-cloud-center/jpg
/images/projects/bank-of-china-financial-center
/images/projects/bing-ding-wood-kiln
/images/projects/bing-ding-wood-kiln/avif
/images/projects/bing-ding-wood-kiln/jpg
/images/projects/caa-liangzhu-campus-phase-i
/images/projects/caa-liangzhu-campus-phase-i/avif
/images/projects/caa-liangzhu-campus-phase-i/jpg
/images/projects/change-x-community
/images/projects/change-x-community/avif
/images/projects/change-x-community/jpg
/images/projects/changjiang-art-museum
/images/projects/changzhou-culture-plaza
/images/projects/changzhou-culture-plaza/avif
/images/projects/changzhou-culture-plaza/jpg
/images/projects/chaoyang-park-plaza
/images/projects/chaoyang-park-plaza/avif
/images/projects/chaoyang-park-plaza/jpg
/images/projects/chapel-of-music
/images/projects/chow-tai-fook-financial-center
/images/projects/cliff-cafe-and-tower-house
/images/projects/east-china-electric-power-design-institute
/images/projects/expo-riverside-hotel
/images/projects/flying-bird-pavilion
/images/projects/hillside-terrance-complex
/images/projects/huangshan-mountain-village
/images/projects/jiaxing-civic-center
/images/projects/jiming-island-wedding-hall
/images/projects/leeza-soho
/images/projects/louis-vuitton-matsuya-ginza-facade-renewal
/images/projects/magic-square-pavilion
/images/projects/nation-museum-of-western-art
/images/projects/ooeli
/images/projects/pingshan-art-museum
/images/projects/qiantan-media-port
/images/projects/qujiang-museum-of-fine-arts-extension
/images/projects/renovation-of-no1-sinopec-gas-station
/images/projects/rockbund-building-renovation
/images/projects/sky-city-dji-headquarter
/images/projects/sky-mountain
/images/projects/sumida-hokusai-museum
/images/projects/sun-tower

Found on 2026-01-26 00:09

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b72f4af8badc2eadb138909a0c7b4fb72a

Found 128 files trough .DS_Store spidering:

/data
/data/backups
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/features/DJI_0007-hq.avif
/images/features/DJI_0007-lq.avif
/images/features/DJI_0007.avif
/images/features/DJI_0007.jpg
/images/features/DJI_0025-hq.avif
/images/features/DJI_0025-lq.avif
/images/features/DJI_0025.avif
/images/features/DJI_0025.jpg
/images/features/DJI_0048-hq.avif
/images/features/DJI_0048-lq.avif
/images/features/DJI_0048.avif
/images/features/DJI_0048.jpg
/images/features/DJI_0130-hq.avif
/images/features/DJI_0130-lq.avif
/images/features/DJI_0130.avif
/images/features/DJI_0130.jpg
/images/features/DJI_0216-hq.avif
/images/features/DJI_0216-lq.avif
/images/features/DJI_0216.avif
/images/features/DJI_0216.jpg
/images/features/DJI_0266-hq.avif
/images/features/DJI_0266-lq.avif
/images/features/DJI_0266.avif
/images/features/DJI_0266.jpg
/images/features/DJI_0638-hq.avif
/images/features/DJI_0638-lq.avif
/images/features/DJI_0638.avif
/images/features/DJI_0638.jpg
/images/features/DSC02846-hq.avif
/images/features/DSC02846-lq.avif
/images/features/DSC02846.avif
/images/features/DSC02846.jpg
/images/features/DSCF0728-hq.avif
/images/features/DSCF0728-lq.avif
/images/features/DSCF0728.avif
/images/features/DSCF0728.jpg
/images/features/DSCF1896-hq.avif
/images/features/DSCF1896-lq.avif
/images/features/DSCF1896.avif
/images/features/DSCF1896.jpg
/images/features/DSCF4138-hq.avif
/images/features/DSCF4138-lq.avif
/images/features/DSCF4138.avif
/images/features/DSCF4138.jpg
/images/features/DSCF5497-hq.avif
/images/features/DSCF5497-lq.avif
/images/features/DSCF5497.avif
/images/features/DSCF5497.jpg
/images/features/DSCF6576-hq.avif
/images/features/DSCF6576-lq.avif
/images/features/DSCF6576.avif
/images/features/DSCF6576.jpg
/images/features/DSCF7859-hq.avif
/images/features/DSCF7859-lq.avif
/images/features/DSCF7859.avif
/images/features/DSCF7859.jpg
/images/features/DSCF8967-hq.avif
/images/features/DSCF8967-lq.avif
/images/features/DSCF8967.avif
/images/features/DSCF8967.jpg
/images/notfound
/images/notfound/avif
/images/notfound/jpg
/images/projects
/images/projects/926-craftsman-museum
/images/projects/alila-wuzhen
/images/projects/alila-wuzhen/DJI_0614-lq.avif
/images/projects/alila-wuzhen/DJI_0614.avif
/images/projects/alila-wuzhen/DJI_0614.jpg
/images/projects/anji-culture-and-art-center
/images/projects/anji-culture-and-art-center/DJI_0351-lq.avif
/images/projects/anji-culture-and-art-center/DJI_0351.avif
/images/projects/anji-culture-and-art-center/DJI_0351.jpg
/images/projects/aranya-art-center
/images/projects/aranya-art-center/avif
/images/projects/aranya-art-center/jpg
/images/projects/aranya-cloud-center
/images/projects/aranya-cloud-center/avif
/images/projects/aranya-cloud-center/jpg
/images/projects/bank-of-china-financial-center
/images/projects/bing-ding-wood-kiln
/images/projects/bing-ding-wood-kiln/avif
/images/projects/bing-ding-wood-kiln/jpg
/images/projects/caa-liangzhu-campus-phase-i
/images/projects/caa-liangzhu-campus-phase-i/avif
/images/projects/caa-liangzhu-campus-phase-i/jpg
/images/projects/change-x-community
/images/projects/change-x-community/avif
/images/projects/change-x-community/jpg
/images/projects/changjiang-art-museum
/images/projects/changzhou-culture-plaza
/images/projects/changzhou-culture-plaza/avif
/images/projects/changzhou-culture-plaza/jpg
/images/projects/chaoyang-park-plaza
/images/projects/chapel-of-music
/images/projects/chow-tai-fook-financial-center
/images/projects/cliff-cafe-and-tower-house
/images/projects/east-china-electric-power-design-institute
/images/projects/expo-riverside-hotel
/images/projects/flying-bird-pavilion
/images/projects/hillside-terrance-complex
/images/projects/huangshan-mountain-village
/images/projects/jiaxing-civic-center
/images/projects/jiming-island-wedding-hall
/images/projects/leeza-soho
/images/projects/louis-vuitton-matsuya-ginza-facade-renewal
/images/projects/magic-square-pavilion
/images/projects/nation-museum-of-western-art
/images/projects/ooeli
/images/projects/pingshan-art-museum
/images/projects/qiantan-media-port
/images/projects/qujiang-museum-of-fine-arts-extension
/images/projects/renovation-of-no1-sinopec-gas-station
/images/projects/rockbund-building-renovation
/images/projects/sky-city-dji-headquarter
/images/projects/sky-mountain
/images/projects/sumida-hokusai-museum
/images/projects/sun-tower
/images/projects/suzhou-museum-of-contemporary-art
/images/projects/tag-art-museum

Found on 2025-12-16 21:10

Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b72f4af8badc2eadb138909a0c9cebc6a6

Found 128 files trough .DS_Store spidering:

/data
/data/backups
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/features/DJI_0007-hq.avif
/images/features/DJI_0007-lq.avif
/images/features/DJI_0007.avif
/images/features/DJI_0007.jpg
/images/features/DJI_0025-hq.avif
/images/features/DJI_0025-lq.avif
/images/features/DJI_0025.avif
/images/features/DJI_0025.jpg
/images/features/DJI_0048-hq.avif
/images/features/DJI_0048-lq.avif
/images/features/DJI_0048.avif
/images/features/DJI_0048.jpg
/images/features/DJI_0130-hq.avif
/images/features/DJI_0130-lq.avif
/images/features/DJI_0130.avif
/images/features/DJI_0130.jpg
/images/features/DJI_0216-hq.avif
/images/features/DJI_0216-lq.avif
/images/features/DJI_0216.avif
/images/features/DJI_0216.jpg
/images/features/DJI_0266-hq.avif
/images/features/DJI_0266-lq.avif
/images/features/DJI_0266.avif
/images/features/DJI_0266.jpg
/images/features/DJI_0638-hq.avif
/images/features/DJI_0638-lq.avif
/images/features/DJI_0638.avif
/images/features/DJI_0638.jpg
/images/features/DSC02846-hq.avif
/images/features/DSC02846-lq.avif
/images/features/DSC02846.avif
/images/features/DSC02846.jpg
/images/features/DSCF0728-hq.avif
/images/features/DSCF0728-lq.avif
/images/features/DSCF0728.avif
/images/features/DSCF0728.jpg
/images/features/DSCF1896-hq.avif
/images/features/DSCF1896-lq.avif
/images/features/DSCF1896.avif
/images/features/DSCF1896.jpg
/images/features/DSCF4138-hq.avif
/images/features/DSCF4138-lq.avif
/images/features/DSCF4138.avif
/images/features/DSCF4138.jpg
/images/features/DSCF5497-hq.avif
/images/features/DSCF5497-lq.avif
/images/features/DSCF5497.avif
/images/features/DSCF5497.jpg
/images/features/DSCF6576-hq.avif
/images/features/DSCF6576-lq.avif
/images/features/DSCF6576.avif
/images/features/DSCF6576.jpg
/images/features/DSCF7859-hq.avif
/images/features/DSCF7859-lq.avif
/images/features/DSCF7859.avif
/images/features/DSCF7859.jpg
/images/features/DSCF8967-hq.avif
/images/features/DSCF8967-lq.avif
/images/features/DSCF8967.avif
/images/features/DSCF8967.jpg
/images/notfound
/images/notfound/avif
/images/notfound/jpg
/images/projects
/images/projects/926-craftsman-museum
/images/projects/alila-wuzhen
/images/projects/alila-wuzhen/DJI_0614-lq.avif
/images/projects/alila-wuzhen/DJI_0614.avif
/images/projects/alila-wuzhen/DJI_0614.jpg
/images/projects/anji-culture-and-art-center
/images/projects/anji-culture-and-art-center/DJI_0351-lq.avif
/images/projects/anji-culture-and-art-center/DJI_0351.avif
/images/projects/anji-culture-and-art-center/DJI_0351.jpg
/images/projects/aranya-art-center
/images/projects/aranya-art-center/avif
/images/projects/aranya-art-center/jpg
/images/projects/aranya-cloud-center
/images/projects/aranya-cloud-center/avif
/images/projects/aranya-cloud-center/jpg
/images/projects/bank-of-china-financial-center
/images/projects/bing-ding-wood-kiln
/images/projects/bing-ding-wood-kiln/avif
/images/projects/bing-ding-wood-kiln/jpg
/images/projects/caa-liangzhu-campus-phase-i
/images/projects/change-x-community
/images/projects/changjiang-art-museum
/images/projects/changzhou-culture-plaza
/images/projects/chaoyang-park-plaza
/images/projects/chapel-of-music
/images/projects/chow-tai-fook-financial-center
/images/projects/cliff-cafe-and-tower-house
/images/projects/east-china-electric-power-design-institute
/images/projects/expo-riverside-hotel
/images/projects/flying-bird-pavilion
/images/projects/hillside-terrance-complex
/images/projects/huangshan-mountain-village
/images/projects/jiaxing-civic-center
/images/projects/jiming-island-wedding-hall
/images/projects/leeza-soho
/images/projects/louis-vuitton-matsuya-ginza-facade-renewal
/images/projects/magic-square-pavilion
/images/projects/nation-museum-of-western-art
/images/projects/ooeli
/images/projects/pingshan-art-museum
/images/projects/qiantan-media-port
/images/projects/qujiang-museum-of-fine-arts-extension
/images/projects/renovation-of-no1-sinopec-gas-station
/images/projects/rockbund-building-renovation
/images/projects/sky-city-dji-headquarter
/images/projects/sky-mountain
/images/projects/sumida-hokusai-museum
/images/projects/sun-tower
/images/projects/suzhou-museum-of-contemporary-art
/images/projects/tag-art-museum
/images/projects/the-breeze-hall
/images/projects/the-full-moon
/images/projects/tokyo-international-forum
/images/projects/untitled-art-museum
/images/projects/water-lock-museum
/images/projects/way-out-of-the-box

Found on 2025-12-14 08:40

Severity: medium
Fingerprint: 5f32cf5d6962f09c2f6ba4dc2f6ba4dcab55910bfc644796a562ab4bfebd0e05

Found 127 files trough .DS_Store spidering:

/data
/data/backups
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/features/DJI_0007-hq.avif
/images/features/DJI_0007-lq.avif
/images/features/DJI_0007.avif
/images/features/DJI_0007.jpg
/images/features/DJI_0025-hq.avif
/images/features/DJI_0025-lq.avif
/images/features/DJI_0025.avif
/images/features/DJI_0025.jpg
/images/features/DJI_0048-hq.avif
/images/features/DJI_0048-lq.avif
/images/features/DJI_0048.avif
/images/features/DJI_0048.jpg
/images/features/DJI_0130-hq.avif
/images/features/DJI_0130-lq.avif
/images/features/DJI_0130.avif
/images/features/DJI_0130.jpg
/images/features/DJI_0216-hq.avif
/images/features/DJI_0216-lq.avif
/images/features/DJI_0216.avif
/images/features/DJI_0216.jpg
/images/features/DJI_0266-hq.avif
/images/features/DJI_0266-lq.avif
/images/features/DJI_0266.avif
/images/features/DJI_0266.jpg
/images/features/DJI_0638-hq.avif
/images/features/DJI_0638-lq.avif
/images/features/DJI_0638.avif
/images/features/DJI_0638.jpg
/images/features/DSC02846-hq.avif
/images/features/DSC02846-lq.avif
/images/features/DSC02846.avif
/images/features/DSC02846.jpg
/images/features/DSCF0728-hq.avif
/images/features/DSCF0728-lq.avif
/images/features/DSCF0728.avif
/images/features/DSCF0728.jpg
/images/features/DSCF1896-hq.avif
/images/features/DSCF1896-lq.avif
/images/features/DSCF1896.avif
/images/features/DSCF1896.jpg
/images/features/DSCF4138-hq.avif
/images/features/DSCF4138-lq.avif
/images/features/DSCF4138.avif
/images/features/DSCF4138.jpg
/images/features/DSCF5497-hq.avif
/images/features/DSCF5497-lq.avif
/images/features/DSCF5497.avif
/images/features/DSCF5497.jpg
/images/features/DSCF6576-hq.avif
/images/features/DSCF6576-lq.avif
/images/features/DSCF6576.avif
/images/features/DSCF6576.jpg
/images/features/DSCF7859-hq.avif
/images/features/DSCF7859-lq.avif
/images/features/DSCF7859.avif
/images/features/DSCF7859.jpg
/images/features/DSCF8967-hq.avif
/images/features/DSCF8967-lq.avif
/images/features/DSCF8967.avif
/images/features/DSCF8967.jpg
/images/notfound
/images/notfound/avif
/images/notfound/jpg
/images/projects
/images/projects/926-craftsman-museum
/images/projects/alila-wuzhen
/images/projects/anji-culture-and-art-center
/images/projects/anji-culture-and-art-center/DJI_0351-lq.avif
/images/projects/anji-culture-and-art-center/DJI_0351.avif
/images/projects/anji-culture-and-art-center/DJI_0351.jpg
/images/projects/aranya-art-center
/images/projects/aranya-art-center/avif
/images/projects/aranya-art-center/jpg
/images/projects/aranya-cloud-center
/images/projects/bank-of-china-financial-center
/images/projects/bing-ding-wood-kiln
/images/projects/caa-liangzhu-campus-phase-i
/images/projects/change-x-community
/images/projects/changjiang-art-museum
/images/projects/changzhou-culture-plaza
/images/projects/chaoyang-park-plaza
/images/projects/chapel-of-music
/images/projects/chow-tai-fook-financial-center
/images/projects/cliff-cafe-and-tower-house
/images/projects/east-china-electric-power-design-institute
/images/projects/expo-riverside-hotel
/images/projects/flying-bird-pavilion
/images/projects/hillside-terrance-complex
/images/projects/huangshan-mountain-village
/images/projects/jiaxing-civic-center
/images/projects/jiming-island-wedding-hall
/images/projects/leeza-soho
/images/projects/louis-vuitton-matsuya-ginza-facade-renewal
/images/projects/magic-square-pavilion
/images/projects/nation-museum-of-western-art
/images/projects/ooeli
/images/projects/pingshan-art-museum
/images/projects/qiantan-media-port
/images/projects/qujiang-museum-of-fine-arts-extension
/images/projects/renovation-of-no1-sinopec-gas-station
/images/projects/rockbund-building-renovation
/images/projects/sky-city-dji-headquarter
/images/projects/sky-mountain
/images/projects/sumida-hokusai-museum
/images/projects/sun-tower
/images/projects/suzhou-museum-of-contemporary-art
/images/projects/tag-art-museum
/images/projects/the-breeze-hall
/images/projects/the-full-moon
/images/projects/tokyo-international-forum
/images/projects/untitled-art-museum
/images/projects/water-lock-museum
/images/projects/way-out-of-the-box
/images/projects/wuxi-icampus-phase-ii
/images/projects/xinhu-hangzhou-prism
/images/projects/zaishui-art-museum
/images/projects/zhangjiang-gate-of-science
/images/projects/zhangjiang-science-hall
/images/projects/zijing-international-conference-camp

Found on 2025-12-13 13:40

Severity: low
Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc6c04092ba84e9bb671b1836bd659685c
```
Found 4 files trough .DS_Store spidering:

/data
/data/backups
/favicon
/images
```
Found on 2025-12-01 15:43

Severity: medium
Fingerprint: 5f32cf5d6962f09cee671e0bee671e0b9e8a1cae9e432725d0c9d9889e9e0027

Found 72 files trough .DS_Store spidering:

/data
/data/backups
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/features/DJI_0007-hq.avif
/images/features/DJI_0007-lq.avif
/images/features/DJI_0007.avif
/images/features/DJI_0007.jpg
/images/features/DJI_0025-hq.avif
/images/features/DJI_0025-lq.avif
/images/features/DJI_0025.avif
/images/features/DJI_0025.jpg
/images/features/DJI_0048-hq.avif
/images/features/DJI_0048-lq.avif
/images/features/DJI_0048.avif
/images/features/DJI_0048.jpg
/images/features/DJI_0130-hq.avif
/images/features/DJI_0130-lq.avif
/images/features/DJI_0130.avif
/images/features/DJI_0130.jpg
/images/features/DJI_0216-hq.avif
/images/features/DJI_0216-lq.avif
/images/features/DJI_0216.avif
/images/features/DJI_0216.jpg
/images/features/DJI_0266-hq.avif
/images/features/DJI_0266-lq.avif
/images/features/DJI_0266.avif
/images/features/DJI_0266.jpg
/images/features/DJI_0638-hq.avif
/images/features/DJI_0638-lq.avif
/images/features/DJI_0638.avif
/images/features/DJI_0638.jpg
/images/features/DSC02846-hq.avif
/images/features/DSC02846-lq.avif
/images/features/DSC02846.avif
/images/features/DSC02846.jpg
/images/features/DSCF0728-hq.avif
/images/features/DSCF0728-lq.avif
/images/features/DSCF0728.avif
/images/features/DSCF0728.jpg
/images/features/DSCF1896-hq.avif
/images/features/DSCF1896-lq.avif
/images/features/DSCF1896.avif
/images/features/DSCF1896.jpg
/images/features/DSCF4138-hq.avif
/images/features/DSCF4138-lq.avif
/images/features/DSCF4138.avif
/images/features/DSCF4138.jpg
/images/features/DSCF5497-hq.avif
/images/features/DSCF5497-lq.avif
/images/features/DSCF5497.avif
/images/features/DSCF5497.jpg
/images/features/DSCF6576-hq.avif
/images/features/DSCF6576-lq.avif
/images/features/DSCF6576.avif
/images/features/DSCF6576.jpg
/images/features/DSCF7859-hq.avif
/images/features/DSCF7859-lq.avif
/images/features/DSCF7859.avif
/images/features/DSCF7859.jpg
/images/features/DSCF8967-hq.avif
/images/features/DSCF8967-lq.avif
/images/features/DSCF8967.avif
/images/features/DSCF8967.jpg
/images/notfound
/images/notfound/avif
/images/notfound/jpg
/images/projects

Found on 2025-12-01 05:20

Severity: low
Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d89ee535c78ee19522f26f763f4a279ea1

Found 8 files trough .DS_Store spidering:

/data
/data/backups
/favicon
/images
/images/about
/images/features
/images/notfound
/images/projects

Found on 2025-11-29 07:35

Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733f8a848302050a54b96ee024948685259f

Found 10 files trough .DS_Store spidering:

/data
/data/backups
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/notfound
/images/projects

Found on 2025-11-26 21:05

Severity: medium
Fingerprint: 5f32cf5d6962f09cd0163910d0163910ffba9bffb6b1edfa6ca1f65724811862

Found 123 files trough .DS_Store spidering:

/data
/data/backups
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/features/DJI_0007-hq.avif
/images/features/DJI_0007-lq.avif
/images/features/DJI_0007.avif
/images/features/DJI_0007.jpg
/images/features/DJI_0025-hq.avif
/images/features/DJI_0025-lq.avif
/images/features/DJI_0025.avif
/images/features/DJI_0025.jpg
/images/features/DJI_0048-hq.avif
/images/features/DJI_0048-lq.avif
/images/features/DJI_0048.avif
/images/features/DJI_0048.jpg
/images/features/DJI_0130-hq.avif
/images/features/DJI_0130-lq.avif
/images/features/DJI_0130.avif
/images/features/DJI_0130.jpg
/images/features/DJI_0216-hq.avif
/images/features/DJI_0216-lq.avif
/images/features/DJI_0216.avif
/images/features/DJI_0216.jpg
/images/features/DJI_0266-hq.avif
/images/features/DJI_0266-lq.avif
/images/features/DJI_0266.avif
/images/features/DJI_0266.jpg
/images/features/DJI_0638-hq.avif
/images/features/DJI_0638-lq.avif
/images/features/DJI_0638.avif
/images/features/DJI_0638.jpg
/images/features/DSC02846-hq.avif
/images/features/DSC02846-lq.avif
/images/features/DSC02846.avif
/images/features/DSC02846.jpg
/images/features/DSCF0728-hq.avif
/images/features/DSCF0728-lq.avif
/images/features/DSCF0728.avif
/images/features/DSCF0728.jpg
/images/features/DSCF1896-hq.avif
/images/features/DSCF1896-lq.avif
/images/features/DSCF1896.avif
/images/features/DSCF1896.jpg
/images/features/DSCF4138-hq.avif
/images/features/DSCF4138-lq.avif
/images/features/DSCF4138.avif
/images/features/DSCF4138.jpg
/images/features/DSCF5497-hq.avif
/images/features/DSCF5497-lq.avif
/images/features/DSCF5497.avif
/images/features/DSCF5497.jpg
/images/features/DSCF6576-hq.avif
/images/features/DSCF6576-lq.avif
/images/features/DSCF6576.avif
/images/features/DSCF6576.jpg
/images/features/DSCF7859-hq.avif
/images/features/DSCF7859-lq.avif
/images/features/DSCF7859.avif
/images/features/DSCF7859.jpg
/images/features/DSCF8967-hq.avif
/images/features/DSCF8967-lq.avif
/images/features/DSCF8967.avif
/images/features/DSCF8967.jpg
/images/notfound
/images/notfound/avif
/images/notfound/jpg
/images/projects
/images/projects/926-craftsman-museum
/images/projects/alila-wuzhen
/images/projects/alila-wuzhen/DJI_0614-lq.avif
/images/projects/alila-wuzhen/DJI_0614.avif
/images/projects/alila-wuzhen/DJI_0614.jpg
/images/projects/anji-culture-and-art-center
/images/projects/aranya-art-center
/images/projects/aranya-cloud-center
/images/projects/bank-of-china-financial-center
/images/projects/bing-ding-wood-kiln
/images/projects/caa-liangzhu-campus-phase-i
/images/projects/change-x-community
/images/projects/changjiang-art-museum
/images/projects/changzhou-culture-plaza
/images/projects/chaoyang-plaza
/images/projects/chapel-of-music
/images/projects/chow-tai-fook-financial-center
/images/projects/cliff-cafe-and-tower-house
/images/projects/expo-riverside-hotel
/images/projects/flying-bird-pavilion
/images/projects/hillside-terrance-complex
/images/projects/huangshan-mountain-village
/images/projects/jiaxing-civic-center
/images/projects/jiming-island-wedding-hall
/images/projects/leeza-soho
/images/projects/louis-vuitton-matsuya-ginza-facade-renewal
/images/projects/magic-square-pavilion
/images/projects/nation-museum-of-western-art
/images/projects/ooeli
/images/projects/pingshan-art-museum
/images/projects/qiantan-media-port
/images/projects/qujiang-museum-of-fine-arts-extension
/images/projects/renovation-of-no1-sinopec-gas-station
/images/projects/rockbund-building-renovation
/images/projects/sky-city-dji-headquarter
/images/projects/sky-mountain
/images/projects/sumida-hokusai-museum
/images/projects/sun-tower
/images/projects/suzhou-museum-of-contemporary-art
/images/projects/tag-art-museum
/images/projects/the-breeze-hall
/images/projects/tokyo-international-forum
/images/projects/untitled-art-museum
/images/projects/water-lock-museum
/images/projects/way-out-of-the-box
/images/projects/wuxi-icampus-phase-ii
/images/projects/xinhu-hangzhou-prism
/images/projects/zaishui-art-museum
/images/projects/zhangjiang-gate-of-science
/images/projects/zhangjiang-science-hall
/images/projects/zijing-international-conference-camp

Found on 2025-11-21 10:47

Severity: medium
Fingerprint: 5f32cf5d6962f09c2a0815492a081549b92b94dc5f9caf7f516d937ace0ce0f8

Found 70 files trough .DS_Store spidering:

/data
/data/backups
/favicon
/images
/images/about
/images/features
/images/features/DJI_0007-hq.avif
/images/features/DJI_0007-lq.avif
/images/features/DJI_0007.avif
/images/features/DJI_0007.jpg
/images/features/DJI_0025-hq.avif
/images/features/DJI_0025-lq.avif
/images/features/DJI_0025.avif
/images/features/DJI_0025.jpg
/images/features/DJI_0048-hq.avif
/images/features/DJI_0048-lq.avif
/images/features/DJI_0048.avif
/images/features/DJI_0048.jpg
/images/features/DJI_0130-hq.avif
/images/features/DJI_0130-lq.avif
/images/features/DJI_0130.avif
/images/features/DJI_0130.jpg
/images/features/DJI_0216-hq.avif
/images/features/DJI_0216-lq.avif
/images/features/DJI_0216.avif
/images/features/DJI_0216.jpg
/images/features/DJI_0266-hq.avif
/images/features/DJI_0266-lq.avif
/images/features/DJI_0266.avif
/images/features/DJI_0266.jpg
/images/features/DJI_0638-hq.avif
/images/features/DJI_0638-lq.avif
/images/features/DJI_0638.avif
/images/features/DJI_0638.jpg
/images/features/DSC02846-hq.avif
/images/features/DSC02846-lq.avif
/images/features/DSC02846.avif
/images/features/DSC02846.jpg
/images/features/DSCF0728-hq.avif
/images/features/DSCF0728-lq.avif
/images/features/DSCF0728.avif
/images/features/DSCF0728.jpg
/images/features/DSCF1896-hq.avif
/images/features/DSCF1896-lq.avif
/images/features/DSCF1896.avif
/images/features/DSCF1896.jpg
/images/features/DSCF4138-hq.avif
/images/features/DSCF4138-lq.avif
/images/features/DSCF4138.avif
/images/features/DSCF4138.jpg
/images/features/DSCF5497-hq.avif
/images/features/DSCF5497-lq.avif
/images/features/DSCF5497.avif
/images/features/DSCF5497.jpg
/images/features/DSCF6576-hq.avif
/images/features/DSCF6576-lq.avif
/images/features/DSCF6576.avif
/images/features/DSCF6576.jpg
/images/features/DSCF7859-hq.avif
/images/features/DSCF7859-lq.avif
/images/features/DSCF7859.avif
/images/features/DSCF7859.jpg
/images/features/DSCF8967-hq.avif
/images/features/DSCF8967-lq.avif
/images/features/DSCF8967.avif
/images/features/DSCF8967.jpg
/images/notfound
/images/notfound/avif
/images/notfound/jpg
/images/projects

Found on 2025-10-21 11:24

Severity: medium
Fingerprint: 5f32cf5d6962f09c2a0815492a081549b92b94dc5f9caf7f516d937a64a98b58

Found 70 files trough .DS_Store spidering:

/data
/data/backups
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/features/DJI_0007-hq.avif
/images/features/DJI_0007-lq.avif
/images/features/DJI_0007.avif
/images/features/DJI_0007.jpg
/images/features/DJI_0025-hq.avif
/images/features/DJI_0025-lq.avif
/images/features/DJI_0025.avif
/images/features/DJI_0025.jpg
/images/features/DJI_0048-hq.avif
/images/features/DJI_0048-lq.avif
/images/features/DJI_0048.avif
/images/features/DJI_0048.jpg
/images/features/DJI_0130-hq.avif
/images/features/DJI_0130-lq.avif
/images/features/DJI_0130.avif
/images/features/DJI_0130.jpg
/images/features/DJI_0216-hq.avif
/images/features/DJI_0216-lq.avif
/images/features/DJI_0216.avif
/images/features/DJI_0216.jpg
/images/features/DJI_0266-hq.avif
/images/features/DJI_0266-lq.avif
/images/features/DJI_0266.avif
/images/features/DJI_0266.jpg
/images/features/DJI_0638-hq.avif
/images/features/DJI_0638-lq.avif
/images/features/DJI_0638.avif
/images/features/DJI_0638.jpg
/images/features/DSC02846-hq.avif
/images/features/DSC02846-lq.avif
/images/features/DSC02846.avif
/images/features/DSC02846.jpg
/images/features/DSCF0728-hq.avif
/images/features/DSCF0728-lq.avif
/images/features/DSCF0728.avif
/images/features/DSCF0728.jpg
/images/features/DSCF1896-hq.avif
/images/features/DSCF1896-lq.avif
/images/features/DSCF1896.avif
/images/features/DSCF1896.jpg
/images/features/DSCF4138-hq.avif
/images/features/DSCF4138-lq.avif
/images/features/DSCF4138.avif
/images/features/DSCF4138.jpg
/images/features/DSCF5497-hq.avif
/images/features/DSCF5497-lq.avif
/images/features/DSCF5497.avif
/images/features/DSCF5497.jpg
/images/features/DSCF6576-hq.avif
/images/features/DSCF6576-lq.avif
/images/features/DSCF6576.avif
/images/features/DSCF6576.jpg
/images/features/DSCF7859-hq.avif
/images/features/DSCF7859-lq.avif
/images/features/DSCF7859.avif
/images/features/DSCF7859.jpg
/images/features/DSCF8967-hq.avif
/images/features/DSCF8967-lq.avif
/images/features/DSCF8967.avif
/images/features/DSCF8967.jpg
/images/notfound
/images/projects

Found on 2025-10-09 11:20

Severity: medium
Fingerprint: 5f32cf5d6962f09c47a1e7ef47a1e7ef410136f22206aa8948007804e03205f2

Found 120 files trough .DS_Store spidering:

/data
/data/backups
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/features/DJI_0007-hq.avif
/images/features/DJI_0007-lq.avif
/images/features/DJI_0007.avif
/images/features/DJI_0007.jpg
/images/features/DJI_0025-hq.avif
/images/features/DJI_0025-lq.avif
/images/features/DJI_0025.avif
/images/features/DJI_0025.jpg
/images/features/DJI_0048-hq.avif
/images/features/DJI_0048-lq.avif
/images/features/DJI_0048.avif
/images/features/DJI_0048.jpg
/images/features/DJI_0130-hq.avif
/images/features/DJI_0130-lq.avif
/images/features/DJI_0130.avif
/images/features/DJI_0130.jpg
/images/features/DJI_0216-hq.avif
/images/features/DJI_0216-lq.avif
/images/features/DJI_0216.avif
/images/features/DJI_0216.jpg
/images/features/DJI_0266-hq.avif
/images/features/DJI_0266-lq.avif
/images/features/DJI_0266.avif
/images/features/DJI_0266.jpg
/images/features/DJI_0638-hq.avif
/images/features/DJI_0638-lq.avif
/images/features/DJI_0638.avif
/images/features/DJI_0638.jpg
/images/features/DSC02846-hq.avif
/images/features/DSC02846-lq.avif
/images/features/DSC02846.avif
/images/features/DSC02846.jpg
/images/features/DSCF0728-hq.avif
/images/features/DSCF0728-lq.avif
/images/features/DSCF0728.avif
/images/features/DSCF0728.jpg
/images/features/DSCF1896-hq.avif
/images/features/DSCF1896-lq.avif
/images/features/DSCF1896.avif
/images/features/DSCF1896.jpg
/images/features/DSCF4138-hq.avif
/images/features/DSCF4138-lq.avif
/images/features/DSCF4138.avif
/images/features/DSCF4138.jpg
/images/features/DSCF5497-hq.avif
/images/features/DSCF5497-lq.avif
/images/features/DSCF5497.avif
/images/features/DSCF5497.jpg
/images/features/DSCF6576-hq.avif
/images/features/DSCF6576-lq.avif
/images/features/DSCF6576.avif
/images/features/DSCF6576.jpg
/images/features/DSCF7859-hq.avif
/images/features/DSCF7859-lq.avif
/images/features/DSCF7859.avif
/images/features/DSCF7859.jpg
/images/features/DSCF8967-hq.avif
/images/features/DSCF8967-lq.avif
/images/features/DSCF8967.avif
/images/features/DSCF8967.jpg
/images/notfound
/images/notfound/avif
/images/notfound/jpg
/images/projects
/images/projects/926-craftsman-museum
/images/projects/alila-wuzhen
/images/projects/anji-culture-and-art-center
/images/projects/aranya-art-center
/images/projects/aranya-cloud-center
/images/projects/bank-of-china-financial-center
/images/projects/bing-ding-wood-kiln
/images/projects/caa-liangzhu-campus-phase-i
/images/projects/change-x-community
/images/projects/changjiang-art-museum
/images/projects/changzhou-culture-plaza
/images/projects/chaoyang-plaza
/images/projects/chapel-of-music
/images/projects/chow-tai-fook-financial-center
/images/projects/cliff-cafe-and-tower-house
/images/projects/expo-riverside-hotel
/images/projects/flying-bird-pavilion
/images/projects/hillside-terrance-complex
/images/projects/huangshan-mountain-village
/images/projects/jiaxing-civic-center
/images/projects/jiming-island-wedding-hall
/images/projects/leeza-soho
/images/projects/louis-vuitton-matsuya-ginza-facade-renewal
/images/projects/magic-square-pavilion
/images/projects/nation-museum-of-western-art
/images/projects/ooeli
/images/projects/pingshan-art-museum
/images/projects/qiantan-media-port
/images/projects/qujiang-museum-of-fine-arts-extension
/images/projects/renovation-of-no1-sinopec-gas-station
/images/projects/rockbund-building-renovation
/images/projects/sky-city-dji-headquarter
/images/projects/sky-mountain
/images/projects/sumida-hokusai-museum
/images/projects/sun-tower
/images/projects/suzhou-museum-of-contemporary-art
/images/projects/tag-art-museum
/images/projects/the-breeze-hall
/images/projects/tokyo-international-forum
/images/projects/untitled-art-museum
/images/projects/water-lock-museum
/images/projects/way-out-of-the-box
/images/projects/wuxi-icampus-phase-ii
/images/projects/xinhu-hangzhou-prism
/images/projects/zaishui-art-museum
/images/projects/zhangjiang-gate-of-science
/images/projects/zhangjiang-science-hall
/images/projects/zijing-international-conference-camp

Found on 2025-10-06 23:52

Severity: medium
Fingerprint: 5f32cf5d6962f09c449f2b2d449f2b2d4e7251d0c94fca439ec1e126b0e2c03f

Found 108 files trough .DS_Store spidering:

/data
/data/backups
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/features/DJI_0007-hq.avif
/images/features/DJI_0007-lq.avif
/images/features/DJI_0007.avif
/images/features/DJI_0007.jpg
/images/features/DJI_0025-hq.avif
/images/features/DJI_0025-lq.avif
/images/features/DJI_0025.avif
/images/features/DJI_0025.jpg
/images/features/DJI_0048-hq.avif
/images/features/DJI_0048-lq.avif
/images/features/DJI_0048.avif
/images/features/DJI_0048.jpg
/images/features/DJI_0130-hq.avif
/images/features/DJI_0130-lq.avif
/images/features/DJI_0130.avif
/images/features/DJI_0130.jpg
/images/features/DJI_0216-hq.avif
/images/features/DJI_0216-lq.avif
/images/features/DJI_0216.avif
/images/features/DJI_0216.jpg
/images/features/DJI_0266-hq.avif
/images/features/DJI_0266-lq.avif
/images/features/DJI_0266.avif
/images/features/DJI_0266.jpg
/images/features/DJI_0638-hq.avif
/images/features/DJI_0638-lq.avif
/images/features/DJI_0638.avif
/images/features/DJI_0638.jpg
/images/features/DSC02846-hq.avif
/images/features/DSC02846-lq.avif
/images/features/DSC02846.avif
/images/features/DSC02846.jpg
/images/features/DSCF0728-hq.avif
/images/features/DSCF0728-lq.avif
/images/features/DSCF0728.avif
/images/features/DSCF0728.jpg
/images/features/DSCF1896-hq.avif
/images/features/DSCF1896-lq.avif
/images/features/DSCF1896.avif
/images/features/DSCF1896.jpg
/images/features/DSCF4138-hq.avif
/images/features/DSCF4138-lq.avif
/images/features/DSCF4138.avif
/images/features/DSCF4138.jpg
/images/features/DSCF5497-hq.avif
/images/features/DSCF5497-lq.avif
/images/features/DSCF5497.avif
/images/features/DSCF5497.jpg
/images/features/DSCF6576-hq.avif
/images/features/DSCF6576-lq.avif
/images/features/DSCF6576.avif
/images/features/DSCF6576.jpg
/images/features/DSCF7859-hq.avif
/images/features/DSCF7859-lq.avif
/images/features/DSCF7859.avif
/images/features/DSCF7859.jpg
/images/features/DSCF8967-hq.avif
/images/features/DSCF8967-lq.avif
/images/features/DSCF8967.avif
/images/features/DSCF8967.jpg
/images/notfound
/images/notfound/avif
/images/notfound/jpg
/images/projects
/images/projects/alila-wuzhen
/images/projects/aranya-art-center
/images/projects/aranya-cloud-center
/images/projects/bank-of-china-financial-center
/images/projects/bing-ding-wood-kiln
/images/projects/caa-liangzhu-campus-phase-i
/images/projects/change-x-community
/images/projects/changzhou-culture-plaza
/images/projects/chaoyang-plaza
/images/projects/chapel-of-music
/images/projects/chow-tai-fook-financial-center
/images/projects/cliff-cafe-and-tower-house
/images/projects/expo-riverside-hotel
/images/projects/hillside-terrance-complex
/images/projects/huangshan-mountain-village
/images/projects/jiaxing-civic-center
/images/projects/jiming-island-wedding-hall
/images/projects/leeza-soho
/images/projects/magic-square-pavilion
/images/projects/nation-museum-of-western-art
/images/projects/ooeli
/images/projects/pingshan-art-museum
/images/projects/qujiang-museum-of-fine-arts-extension
/images/projects/rockbund-building-renovation
/images/projects/sky-city-dji-headquarter
/images/projects/sky-mountain
/images/projects/sumida-hokusai-museum
/images/projects/suzhou-museum-of-contemporary-art
/images/projects/the-breeze-hall
/images/projects/tokyo-international-forum
/images/projects/untitled-art-museum
/images/projects/water-lock-museum
/images/projects/way-out-of-the-box
/images/projects/wuxi-icampus-phase-ii
/images/projects/zhangjiang-science-hall
/images/projects/zijing-international-conference-camp

Found on 2025-08-24 22:35

Severity: medium
Fingerprint: 5f32cf5d6962f09c51be605a51be605ae7773419246f7840e2856cb541143956

Found 103 files trough .DS_Store spidering:

/data
/data/backups
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/features/DJI_0007-hq.avif
/images/features/DJI_0007-lq.avif
/images/features/DJI_0007.avif
/images/features/DJI_0007.jpg
/images/features/DJI_0025-hq.avif
/images/features/DJI_0025-lq.avif
/images/features/DJI_0025.avif
/images/features/DJI_0025.jpg
/images/features/DJI_0048-hq.avif
/images/features/DJI_0048-lq.avif
/images/features/DJI_0048.avif
/images/features/DJI_0048.jpg
/images/features/DJI_0130-hq.avif
/images/features/DJI_0130-lq.avif
/images/features/DJI_0130.avif
/images/features/DJI_0130.jpg
/images/features/DJI_0216-hq.avif
/images/features/DJI_0216-lq.avif
/images/features/DJI_0216.avif
/images/features/DJI_0216.jpg
/images/features/DJI_0266-hq.avif
/images/features/DJI_0266-lq.avif
/images/features/DJI_0266.avif
/images/features/DJI_0266.jpg
/images/features/DJI_0638-hq.avif
/images/features/DJI_0638-lq.avif
/images/features/DJI_0638.avif
/images/features/DJI_0638.jpg
/images/features/DSC02846-hq.avif
/images/features/DSC02846-lq.avif
/images/features/DSC02846.avif
/images/features/DSC02846.jpg
/images/features/DSCF0728-hq.avif
/images/features/DSCF0728-lq.avif
/images/features/DSCF0728.avif
/images/features/DSCF0728.jpg
/images/features/DSCF1896-hq.avif
/images/features/DSCF1896-lq.avif
/images/features/DSCF1896.avif
/images/features/DSCF1896.jpg
/images/features/DSCF4138-hq.avif
/images/features/DSCF4138-lq.avif
/images/features/DSCF4138.avif
/images/features/DSCF4138.jpg
/images/features/DSCF5497-hq.avif
/images/features/DSCF5497-lq.avif
/images/features/DSCF5497.avif
/images/features/DSCF5497.jpg
/images/features/DSCF6576-hq.avif
/images/features/DSCF6576-lq.avif
/images/features/DSCF6576.avif
/images/features/DSCF6576.jpg
/images/features/DSCF7859-hq.avif
/images/features/DSCF7859-lq.avif
/images/features/DSCF7859.avif
/images/features/DSCF7859.jpg
/images/features/DSCF8967-hq.avif
/images/features/DSCF8967-lq.avif
/images/features/DSCF8967.avif
/images/features/DSCF8967.jpg
/images/notfound
/images/notfound/avif
/images/notfound/jpg
/images/projects
/images/projects/aranya-art-center
/images/projects/aranya-cloud-center
/images/projects/bing-ding-wood-kiln
/images/projects/caa-liangzhu-campus-phase-i
/images/projects/change-x-community
/images/projects/changzhou-culture-plaza
/images/projects/chaoyang-plaza
/images/projects/chapel-of-music
/images/projects/chow-tai-fook-financial-center
/images/projects/cliff-cafe-and-tower-house
/images/projects/expo-riverside-hotel
/images/projects/huangshan-mountain-village
/images/projects/jiaxing-civic-center
/images/projects/jiming-island-wedding-hall
/images/projects/leeza-soho
/images/projects/magic-square-pavilion
/images/projects/nation-museum-of-western-art
/images/projects/ooeli
/images/projects/pingshan-art-museum
/images/projects/qujiang-museum-of-fine-arts-extension
/images/projects/sky-city-dji-headquarter
/images/projects/sky-mountain
/images/projects/suzhou-museum-of-contemporary-art
/images/projects/the-breeze-hall
/images/projects/tokyo-international-forum
/images/projects/untitled-art-museum
/images/projects/water-lock-museum
/images/projects/way-out-of-the-box
/images/projects/wuxi-icampus-phase-ii
/images/projects/zhangjiang-science-hall
/images/projects/zijing-international-conference-camp

Found on 2025-08-23 01:56

Severity: medium
Fingerprint: 5f32cf5d6962f09c016b87d4016b87d4d5f1a9830c05104e4dd5d6036138540b

Found 105 files trough .DS_Store spidering:

/data
/data/backups
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/features/DJI_0007-hq.avif
/images/features/DJI_0007-lq.avif
/images/features/DJI_0007.avif
/images/features/DJI_0007.jpg
/images/features/DJI_0025-hq.avif
/images/features/DJI_0025-lq.avif
/images/features/DJI_0025.avif
/images/features/DJI_0025.jpg
/images/features/DJI_0048-hq.avif
/images/features/DJI_0048-lq.avif
/images/features/DJI_0048.avif
/images/features/DJI_0048.jpg
/images/features/DJI_0130-hq.avif
/images/features/DJI_0130-lq.avif
/images/features/DJI_0130.avif
/images/features/DJI_0130.jpg
/images/features/DJI_0216-hq.avif
/images/features/DJI_0216-lq.avif
/images/features/DJI_0216.avif
/images/features/DJI_0216.jpg
/images/features/DJI_0266-hq.avif
/images/features/DJI_0266-lq.avif
/images/features/DJI_0266.avif
/images/features/DJI_0266.jpg
/images/features/DJI_0638-hq.avif
/images/features/DJI_0638-lq.avif
/images/features/DJI_0638.avif
/images/features/DJI_0638.jpg
/images/features/DSC02846-hq.avif
/images/features/DSC02846-lq.avif
/images/features/DSC02846.avif
/images/features/DSC02846.jpg
/images/features/DSCF0728-hq.avif
/images/features/DSCF0728-lq.avif
/images/features/DSCF0728.avif
/images/features/DSCF0728.jpg
/images/features/DSCF1896-hq.avif
/images/features/DSCF1896-lq.avif
/images/features/DSCF1896.avif
/images/features/DSCF1896.jpg
/images/features/DSCF4138-hq.avif
/images/features/DSCF4138-lq.avif
/images/features/DSCF4138.avif
/images/features/DSCF4138.jpg
/images/features/DSCF5497-hq.avif
/images/features/DSCF5497-lq.avif
/images/features/DSCF5497.avif
/images/features/DSCF5497.jpg
/images/features/DSCF6576-hq.avif
/images/features/DSCF6576-lq.avif
/images/features/DSCF6576.avif
/images/features/DSCF6576.jpg
/images/features/DSCF7859-hq.avif
/images/features/DSCF7859-lq.avif
/images/features/DSCF7859.avif
/images/features/DSCF7859.jpg
/images/features/DSCF8967-hq.avif
/images/features/DSCF8967-lq.avif
/images/features/DSCF8967.avif
/images/features/DSCF8967.jpg
/images/notfound
/images/notfound/avif
/images/notfound/jpg
/images/projects
/images/projects/aranya-art-center
/images/projects/aranya-art-center/avif
/images/projects/aranya-art-center/jpg
/images/projects/aranya-cloud-center
/images/projects/bing-ding-wood-kiln
/images/projects/caa-liangzhu-campus-phase-i
/images/projects/change-x-community
/images/projects/changzhou-culture-plaza
/images/projects/chaoyang-plaza
/images/projects/chapel-of-music
/images/projects/chow-tai-fook-financial-center
/images/projects/cliff-cafe-and-tower-house
/images/projects/expo-riverside-hotel
/images/projects/huangshan-mountain-village
/images/projects/jiaxing-civic-center
/images/projects/jiming-island-wedding-hall
/images/projects/leeza-soho
/images/projects/magic-square-pavilion
/images/projects/nation-museum-of-western-art
/images/projects/ooeli
/images/projects/pingshan-art-museum
/images/projects/qujiang-museum-of-fine-arts-extension
/images/projects/sky-city-dji-headquarter
/images/projects/sky-mountain
/images/projects/suzhou-museum-of-contemporary-art
/images/projects/the-breeze-hall
/images/projects/tokyo-international-forum
/images/projects/untitled-art-museum
/images/projects/water-lock-museum
/images/projects/way-out-of-the-box
/images/projects/wuxi-icampus-phase-ii
/images/projects/zhangjiang-science-hall
/images/projects/zijing-international-conference-camp

Found on 2025-08-12 17:02

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772cd3cc85117e62cacc0c539954274349a

Found 11 files trough .DS_Store spidering:

/data
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/features/avif
/images/features/jpg
/images/notfound
/images/projects

Found on 2025-08-11 10:34

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b0589a4febf6d3c93a5658064e47830d7

Found 14 files trough .DS_Store spidering:

/data
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/features/avif
/images/features/jpg
/images/notfound
/images/notfound/avif
/images/notfound/jpg
/images/notfound/notfound
/images/projects

Found on 2025-08-08 23:47

Severity: low
Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0ff3e41d92996b674f636af788636af788
```
Found 3 files trough .DS_Store spidering:

/data
/favicon
/images
```
Found on 2025-08-07 01:31

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af24725520d59881b0df35de6f916766b231ae4

Found 9 files trough .DS_Store spidering:

/data
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/notfound
/images/projects

Found on 2025-08-05 13:30

Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733f8a848302030f781f147cd7d8c511f3f0

Found 10 files trough .DS_Store spidering:

/data
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/features/avif
/images/features/jpg
/images/projects

Found on 2025-08-03 06:58

Severity: low
Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d89ee535c707648682bee273634f2fa9b8

Found 8 files trough .DS_Store spidering:

/data
/favicon
/images
/images/about
/images/about/avif
/images/about/jpg
/images/features
/images/projects

Found on 2025-08-02 03:15

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: fahejia.com
Port: 443
URL: https://fahejia.com

First seen 2026-01-04 13:34
Last seen 2026-01-23 14:32
Open for 19 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-01-23 14:32
- Severity: info
  Fingerprint: 5733ddf49ff49cd18553ecf7057dff41057dff41057dff41057dff41057dff41
```
Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
POST /a/login
```
  Found on 2026-01-16 20:58
- Severity: info
  Fingerprint: 5733ddf49ff49cd110a331ec33c7032c33c7032c33c7032c33c7032c33c7032c
```
Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
POST /a/login
```
  Found on 2026-01-04 13:34
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: cs.tourloves.com
Port: 443
URL: https://cs.tourloves.com

First seen 2025-10-17 03:29
Last seen 2026-01-23 13:00
Open for 98 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-23 13:00
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: apps.zqwl123.com
Port: 443
URL: https://apps.zqwl123.com

First seen 2025-10-24 06:06
Last seen 2026-01-23 11:04
Open for 91 days

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ece9678ace20b5d044506c8afd6680bc25dab7256b

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /ZqContent/getList
GET /admin/ZqContent/getList
GET /admin/contactUs/selectZqContactUsInfo
GET /admin/contactUs/updateZqContactUsInfo
GET /admin/coop/brand/delete
GET /admin/coop/brand/select
GET /admin/dict/deleteZqDict
GET /admin/dict/deleteZqDictDetail
GET /admin/dict/getZqDictDetail
GET /admin/dict/getZqDictVoList
GET /admin/nav/selectAll
GET /admin/page/selectZqPageList
GET /admin/website/settings/get
GET /admin/zqAdSettings/delete
GET /admin/zqAdSettings/select
GET /admin/zqlabel/getList
GET /coop/brand/select
GET /dict/getZqDictDetail
GET /error
GET /nav/selectAll
GET /oss/getZqOssList
GET /page/selectZqPageList
GET /pageBase/getPageBaseAboutUsVo
GET /pageBase/getPageBaseBottomVo
GET /project/file/deleteZqProjectFile
GET /project/file/getZqProjectFile
GET /project/info/getProjectInfoVoList
GET /user/getCode
GET /user/getUserInfo
GET /version/getSystemVersion
GET /website/settings/get
GET /zqAdSettings/select
GET /zqlabel/getList
POST /admin/ZqContent/add
POST /admin/ZqContent/update
POST /admin/contactUs/addZqContactUsInfo
POST /admin/contactUs/getZqContactUsSet
POST /admin/contactUs/saveZqContactUsSet
POST /admin/coop/brand/add
POST /admin/dict/saveDict
POST /admin/dict/saveZqDictDetail
POST /admin/nav/add
POST /admin/nav/deleteZqNav
POST /admin/nav/update
POST /admin/page/addZqPageList
POST /admin/pageBase/save
POST /admin/pageBase/select
POST /admin/recruit/saveZqRecruit
POST /admin/recruit/selectZqRecruit
POST /admin/website/settings/save
POST /admin/zqAdSettings/add
POST /admin/zqAdSettings/update
POST /admin/zqlabel/saveOrUpdate
POST /contactUs/addZqContactUsInfo
POST /contactUs/getZqContactUsSet
POST /file/uploadFile
POST /pageBase/select
POST /project/file/saveZqProjectFileQo
POST /project/info/saveProjectInfo
POST /project/info/uploadApp
POST /recruit/selectZqRecruit
POST /user/login

Found on 2026-01-23 11:04

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 180.163.146.112
Domain: www.u-bx.com
Port: 80
URL: http://www.u-bx.com

First seen 2025-09-05 01:44
Last seen 2026-01-23 09:58
Open for 140 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e94a7e0559075c565a94f88adbdfd5aab4
```
Found 5 files trough .DS_Store spidering:

/css
/fonts
/images
/investor
/js
```
  Found on 2026-01-23 09:58
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 180.163.146.112
Domain: cdn.liiistem.cn
Port: 443
URL: https://cdn.liiistem.cn

First seen 2025-11-30 16:06
Last seen 2026-01-23 08:48
Open for 53 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225b56e3cf
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/LiiiLabs/liiistem.cn.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2026-01-23 08:48
  
  264 Bytes
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 180.163.146.112
Domain: gitlab.hnyztcl.com
Port: 443
URL: https://gitlab.hnyztcl.com

First seen 2025-11-18 07:46
Last seen 2026-01-23 08:47
Open for 66 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d603073f8703073f8703073f8703073f8703073f87
```
GraphQL introspection enabled at /api/graphql
Detected: GitLab
```
  Found on 2026-01-23 08:47
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
  Found on 2025-12-05 04:23
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 180.163.146.112
Domain: wjzx.aix101.com
Port: 443
URL: https://wjzx.aix101.com

First seen 2025-12-14 15:30
Last seen 2026-01-23 08:46
Open for 39 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b804e72a6fdbbd9b17b7f6f47fd90ba44
```
Found 14 files trough .DS_Store spidering:

/android-chrome-192x192.png
/android-chrome-512x512.png
/apple-touch-icon.png
/favicon-16x16.png
/favicon-32x32.png
/favicon.ico
/icons
/img
/logo.png
/manifest.json
/service-worker.js
/student.glb
/video
/video/digital-human-bg.mp4
```
  Found on 2026-01-23 08:46
- Severity: low
  Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0ecc7f66f803dc1da986187d27d75f44b
```
Found 13 files trough .DS_Store spidering:

/android-chrome-192x192.png
/android-chrome-512x512.png
/apple-touch-icon.png
/favicon-16x16.png
/favicon-32x32.png
/favicon.ico
/icons
/img
/logo.png
/manifest.json
/service-worker.js
/student.glb
/video
```
  Found on 2025-12-24 16:18
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: comment.zhengzl.cn
Port: 443
URL: https://comment.zhengzl.cn

First seen 2025-11-25 03:40
Last seen 2026-01-23 05:20
Open for 59 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-23 05:20
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: cs.tourloves.com
Port: 80
URL: http://cs.tourloves.com

First seen 2025-10-17 03:29
Last seen 2026-01-23 01:20
Open for 97 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-23 01:20
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 180.163.146.112
Domain: www.u-bx.com
Port: 443
URL: https://www.u-bx.com

First seen 2025-09-05 01:44
Last seen 2026-01-23 00:21
Open for 139 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e94a7e0559075c565a94f88adbdfd5aab4
```
Found 5 files trough .DS_Store spidering:

/css
/fonts
/images
/investor
/js
```
  Found on 2026-01-23 00:21
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: m.nocexpo.com
Port: 443
URL: https://m.nocexpo.com

First seen 2026-01-08 00:33
Last seen 2026-01-22 23:10
Open for 14 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-01-22 23:10
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: lingzhixing.cn
Port: 443
URL: https://lingzhixing.cn

First seen 2025-12-04 23:16
Last seen 2026-01-22 22:54
Open for 48 days

Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e50def96f0a60360438c4cf1779b3f5095cb093312

Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
DELETE /cmsApi/sys/maillog
DELETE /cmsApi/sys/smslog
GET /api/ai/chat/conversation/get
GET /api/ai/chat/conversation/list
GET /api/ai/chat/message/list
GET /api/contactform/page
GET /api/contactform/{id}
GET /api/logo/preview
GET /api/news/list
GET /api/news/page
GET /api/news/{id}
GET /api/notToken
GET /api/userId
GET /api/userInfo
GET /api/video/export
GET /api/video/page
GET /api/video/{id}
GET /cmsApi/ai/chat/conversation/list
GET /cmsApi/ai/chat/message/list
GET /cmsApi/ai/model/list
GET /cmsApi/ai/model/page
GET /cmsApi/ai/model/{id}
GET /cmsApi/captcha
GET /cmsApi/demo/excel/export
GET /cmsApi/demo/excel/page
GET /cmsApi/demo/excel/{id}
GET /cmsApi/demo/news/page
GET /cmsApi/demo/news/{id}
GET /cmsApi/demo/product/page
GET /cmsApi/demo/product/{id}
GET /cmsApi/devtools/baseclass/list
GET /cmsApi/devtools/baseclass/page
GET /cmsApi/devtools/baseclass/{id}
GET /cmsApi/devtools/datasource/list
GET /cmsApi/devtools/datasource/page
GET /cmsApi/devtools/datasource/table/list/{id}
GET /cmsApi/devtools/datasource/test/{id}
GET /cmsApi/devtools/datasource/{id}
GET /cmsApi/devtools/dict
GET /cmsApi/devtools/fieldtype/list
GET /cmsApi/devtools/fieldtype/page
GET /cmsApi/devtools/fieldtype/{id}
GET /cmsApi/devtools/param/info
GET /cmsApi/devtools/project
GET /cmsApi/devtools/table/page
GET /cmsApi/devtools/table/{id}
GET /cmsApi/mp/account/page
GET /cmsApi/mp/account/{id}
GET /cmsApi/mp/material/get
GET /cmsApi/mp/material/page
GET /cmsApi/mp/menu/{appId}
GET /cmsApi/mp/portal/{appId}
GET /cmsApi/pay/alipay/webPay
GET /cmsApi/pay/alipayNotifyLog/page
GET /cmsApi/pay/order/page
GET /cmsApi/pay/wechat/nativePay
GET /cmsApi/pay/wechatNotifyLog/page
GET /cmsApi/sys/dept/list
GET /cmsApi/sys/dept/{id}
GET /cmsApi/sys/dict/data/page
GET /cmsApi/sys/dict/data/{id}
GET /cmsApi/sys/dict/type/all
GET /cmsApi/sys/dict/type/page
GET /cmsApi/sys/dict/type/{id}
GET /cmsApi/sys/info
GET /cmsApi/sys/log/error/export
GET /cmsApi/sys/log/error/page
GET /cmsApi/sys/log/login/export
GET /cmsApi/sys/log/login/page
GET /cmsApi/sys/log/operation/export
GET /cmsApi/sys/log/operation/page
GET /cmsApi/sys/maillog/page
GET /cmsApi/sys/mailtemplate/config
GET /cmsApi/sys/mailtemplate/page
GET /cmsApi/sys/mailtemplate/{id}
GET /cmsApi/sys/menu/list
GET /cmsApi/sys/menu/nav
GET /cmsApi/sys/menu/permissions
GET /cmsApi/sys/menu/select
GET /cmsApi/sys/menu/{id}
GET /cmsApi/sys/notice/mynotice/page
GET /cmsApi/sys/notice/mynotice/unread
GET /cmsApi/sys/notice/page
GET /cmsApi/sys/notice/user/page
GET /cmsApi/sys/notice/{id}
GET /cmsApi/sys/online/page
GET /cmsApi/sys/oss/info
GET /cmsApi/sys/oss/page
GET /cmsApi/sys/params/export
GET /cmsApi/sys/params/page
GET /cmsApi/sys/params/{id}
GET /cmsApi/sys/post/list
GET /cmsApi/sys/post/page
GET /cmsApi/sys/post/{id}
GET /cmsApi/sys/region/list
GET /cmsApi/sys/region/region
GET /cmsApi/sys/region/tree
GET /cmsApi/sys/region/{id}
GET /cmsApi/sys/role/list
GET /cmsApi/sys/role/page
GET /cmsApi/sys/role/{id}
GET /cmsApi/sys/schedule/page
GET /cmsApi/sys/schedule/{id}
GET /cmsApi/sys/scheduleLog/page
GET /cmsApi/sys/scheduleLog/{id}
GET /cmsApi/sys/sms/page
GET /cmsApi/sys/sms/{id}
GET /cmsApi/sys/smslog/page
GET /cmsApi/sys/user/export
GET /cmsApi/sys/user/info
GET /cmsApi/sys/user/page
GET /cmsApi/sys/user/{id}
GET /cmsApi/video/videosbasic/export
GET /cmsApi/video/videosbasic/page
GET /cmsApi/video/videosbasic/{id}
POST /api/ai/chat/conversation
POST /api/ai/chat/message
POST /api/cms/ai/analyzeImage
POST /api/cms/ai/analyzeReport
POST /api/cms/ai/chat
POST /api/cms/ai/diagnose
POST /api/cms/ai/upload
POST /api/contactform
POST /api/login
POST /api/logo/download/png
POST /api/logo/download/svg
POST /api/logo/generate
POST /api/logout
POST /api/news
POST /api/oss/tinymce/upload
POST /api/oss/upload
POST /api/register
POST /api/video
POST /cmsApi/ai/chat/conversation
POST /cmsApi/ai/chat/message
POST /cmsApi/ai/model
POST /cmsApi/demo/excel
POST /cmsApi/demo/excel/import
POST /cmsApi/demo/news
POST /cmsApi/demo/product
POST /cmsApi/devtools/baseclass
POST /cmsApi/devtools/datasource
POST /cmsApi/devtools/datasource/table
POST /cmsApi/devtools/fieldtype
POST /cmsApi/devtools/generator
POST /cmsApi/devtools/menu
POST /cmsApi/devtools/param
POST /cmsApi/login
POST /cmsApi/logout
POST /cmsApi/mp/account
POST /cmsApi/pay/alipay/notify_url
POST /cmsApi/pay/order
POST /cmsApi/pay/wechat/notify_url
POST /cmsApi/registByMobile
POST /cmsApi/sendSms
POST /cmsApi/sys/dept
POST /cmsApi/sys/dict/data
POST /cmsApi/sys/dict/type
POST /cmsApi/sys/mailtemplate
POST /cmsApi/sys/mailtemplate/saveConfig
POST /cmsApi/sys/mailtemplate/send
POST /cmsApi/sys/menu
POST /cmsApi/sys/notice
POST /cmsApi/sys/online/logout
POST /cmsApi/sys/oss
POST /cmsApi/sys/oss/tinymce/upload
POST /cmsApi/sys/oss/upload
POST /cmsApi/sys/params
POST /cmsApi/sys/post
POST /cmsApi/sys/region
POST /cmsApi/sys/role
POST /cmsApi/sys/schedule
POST /cmsApi/sys/sms
POST /cmsApi/sys/sms/send
POST /cmsApi/sys/user
POST /cmsApi/video/videosbasic
PUT /api/saveAvatar
PUT /api/updateProfile
PUT /cmsApi/devtools/table
PUT /cmsApi/devtools/table/field/{tableId}
PUT /cmsApi/sys/notice/mynotice/read/{noticeId}
PUT /cmsApi/sys/schedule/pause
PUT /cmsApi/sys/schedule/resume
PUT /cmsApi/sys/schedule/run
PUT /cmsApi/sys/user/app
PUT /cmsApi/sys/user/password

Found on 2026-01-22 22:54

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 180.163.146.112
Domain: lwt.i72b.com
Port: 443
URL: https://lwt.i72b.com

First seen 2025-12-04 06:10
Last seen 2026-01-22 19:44
Open for 49 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522f54cd22f
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = https://github.com/qmProgram/company-site.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
	vscode-merge-base = origin/main
```
  Found on 2026-01-22 19:44
  
  344 Bytes
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: json.myanmar.820.hk
Port: 443
URL: https://json.myanmar.820.hk

First seen 2026-01-10 03:16
Last seen 2026-01-17 00:07
Open for 6 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-17 00:07
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: duofriend.com
Port: 443
URL: https://duofriend.com

First seen 2025-11-03 20:42
Last seen 2026-01-16 22:12
Open for 74 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-01-16 22:12
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 180.163.146.112
Domain: www.gabohip.com
Port: 80
URL: http://www.gabohip.com

First seen 2025-11-07 12:19
Last seen 2026-01-16 18:09
Open for 70 days

Severity: medium
Fingerprint: 5f32cf5d6962f09ce9dbcc92e9dbcc9254bf4bd0cd93112710a40b8ab2bf5985

Found 60 files trough .DS_Store spidering:

/about_us.html
/after_sales.html
/ChPaging-gh-pages
/css
/default_refuned_detail.html
/details_appointment.html
/details_seckill.html
/details_tuan.html
/goods_confirm.html
/goods_list.html
/group_after_sales.html
/group_order_detail.html
/group_order_list.html
/group_pay.html
/group_pingjia.html
/group_refuned_detail.html
/images
/index.html
/jifen.html
/jifen_detail.html
/js
/laydate
/layer
/list_appointment.html
/list_seckill.html
/list_tuan.html
/list_video.html
/miaosha_after_sales.html
/miaosha_order_detail.html
/miaosha_order_list.html
/miaosha_pay.html
/miaosha_pingjia.html
/miaosha_refuned_detail.html
/miaosha_sales_send.html
/my_cart_volume.html
/my_coupons.html
/my_order.html
/now_pay.html
/order_detail.html
/other_publick_header.html
/personal_center.html
/pingjia.html
/project_detail.html
/project_list.html
/publick_aside.html
/publick_footer.html
/publick_header.html
/recharge.html
/sales_send.html
/search_goods.html
/service_center.html
/shipping_address.html
/shop_details.html
/shop_list.html
/shoppDetilas.html
/shopping_cart.html
/tuan_details.html
/videojs
/voucher.html
/wx_login.html

Found on 2026-01-16 18:09

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 180.163.146.112
Domain: m.orcastudy.cn
Port: 443
URL: https://m.orcastudy.cn

First seen 2022-11-17 14:44
Last seen 2026-01-16 09:48
Open for 1155 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c2f72f5fb2f72f5fbd63ea72fd032dc7026653139e52bd24f

Found 65 files trough .DS_Store spidering:

/baidu_verify_m5gNPm7lze.html
/bootstrap-3.3.7
/bootstrap-datetimepicker
/city-picker
/css
/favicon.ico
/hui
/images
/imgs
/imgs/audio.png
/imgs/banner-m.jpg
/imgs/banner-m.png
/imgs/banner2.jpg
/imgs/banner2.png
/imgs/bg.png
/imgs/board.png
/imgs/code.jpg
/imgs/code10010.png
/imgs/coope3.png
/imgs/fm.png
/imgs/Group1.png
/imgs/Group2.png
/imgs/icon1.png
/imgs/icon2.png
/imgs/icon3.png
/imgs/icon4.png
/imgs/icons.png
/imgs/image.png
/imgs/index.png
/imgs/logo-pc.png
/imgs/pause.png
/imgs/play.png
/imgs/protect.png
/imgs/qrcode.jpg
/imgs/role1.png
/imgs/role2.png
/imgs/role3.png
/imgs/simple1.png
/imgs/smarter2.png
/imgs/title.png
/imgs/title1.png
/imgs/title2.png
/imgs/title3.png
/imgs/title4.png
/imgs/video.png
/imgs/WechatIMG2.png
/imgs/WechatIMG4.png
/index.php
/jquery.dialogbox.css
/jquery.dialogBox.js
/js
/kindeditor
/layer
/layui
/manage
/mix-manifest.json
/MP_verify_dhjBhFogsDfel4JP.txt
/MP_verify_KvxlrMV3uGH31Ovn.txt
/MP_verify_Xl9wWx3LrMFTyDB4.txt
/MP_verify_zSt1JuDZfDl9Nbgr.txt
/multiple-select
/qrcode
/robots.txt
/web.config
/XSq0eyoTd7.txt

Found on 2026-01-16 09:48

Severity: low
Fingerprint: 5f32cf5d6962f09c684e525d684e525d1dfc759d3b17d8c2f13576830ed56fb0

Found 27 files trough .DS_Store spidering:

/baidu_verify_m5gNPm7lze.html
/bootstrap-3.3.7
/bootstrap-datetimepicker
/city-picker
/css
/favicon.ico
/hui
/images
/imgs
/index.php
/jquery.dialogbox.css
/jquery.dialogBox.js
/js
/kindeditor
/layer
/layui
/manage
/mix-manifest.json
/MP_verify_dhjBhFogsDfel4JP.txt
/MP_verify_KvxlrMV3uGH31Ovn.txt
/MP_verify_Xl9wWx3LrMFTyDB4.txt
/MP_verify_zSt1JuDZfDl9Nbgr.txt
/multiple-select
/qrcode
/robots.txt
/web.config
/XSq0eyoTd7.txt

Found on 2025-11-30 16:50

Severity: medium
Fingerprint: 5f32cf5d6962f09c09f5afde09f5afde5196334430a1f92bf41961086e701999

Found 64 files trough .DS_Store spidering:

/baidu_verify_m5gNPm7lze.html
/bootstrap-3.3.7
/bootstrap-datetimepicker
/city-picker
/css
/favicon.ico
/hui
/images
/imgs
/imgs/audio.png
/imgs/banner-m.jpg
/imgs/banner-m.png
/imgs/banner2.jpg
/imgs/banner2.png
/imgs/bg.png
/imgs/board.png
/imgs/code.jpg
/imgs/code10010.png
/imgs/coope3.png
/imgs/fm.png
/imgs/Group1.png
/imgs/Group2.png
/imgs/icon1.png
/imgs/icon2.png
/imgs/icon3.png
/imgs/icon4.png
/imgs/icons.png
/imgs/image.png
/imgs/index.png
/imgs/logo-pc.png
/imgs/pause.png
/imgs/play.png
/imgs/protect.png
/imgs/qrcode.jpg
/imgs/role1.png
/imgs/role2.png
/imgs/role3.png
/imgs/simple1.png
/imgs/smarter2.png
/imgs/title.png
/imgs/title1.png
/imgs/title2.png
/imgs/title3.png
/imgs/title4.png
/imgs/video.png
/imgs/WechatIMG2.png
/imgs/WechatIMG4.png
/index.php
/jquery.dialogbox.css
/jquery.dialogBox.js
/js
/kindeditor
/layer
/layui
/manage
/mix-manifest.json
/MP_verify_dhjBhFogsDfel4JP.txt
/MP_verify_KvxlrMV3uGH31Ovn.txt
/MP_verify_Xl9wWx3LrMFTyDB4.txt
/MP_verify_zSt1JuDZfDl9Nbgr.txt
/multiple-select
/robots.txt
/web.config
/XSq0eyoTd7.txt

Found on 2024-12-30 16:26

Severity: low
Fingerprint: 5f32cf5d6962f09c87f05b7087f05b7057836162425ea305872effc2a4e94466

Found 26 files trough .DS_Store spidering:

/baidu_verify_m5gNPm7lze.html
/bootstrap-3.3.7
/bootstrap-datetimepicker
/city-picker
/css
/favicon.ico
/hui
/images
/imgs
/index.php
/jquery.dialogbox.css
/jquery.dialogBox.js
/js
/kindeditor
/layer
/layui
/manage
/mix-manifest.json
/MP_verify_dhjBhFogsDfel4JP.txt
/MP_verify_KvxlrMV3uGH31Ovn.txt
/MP_verify_Xl9wWx3LrMFTyDB4.txt
/MP_verify_zSt1JuDZfDl9Nbgr.txt
/multiple-select
/robots.txt
/web.config
/XSq0eyoTd7.txt

Found on 2024-10-30 14:02

Severity: medium
Fingerprint: 5f32cf5d6962f09c2acf29aa2acf29aa76333a8d561c028dfa006a32d4531165

Found 33 files trough .DS_Store spidering:

/audio.mp3
/baidu_verify_m5gNPm7lze.html
/bootstrap-3.3.7
/bootstrap-datetimepicker
/city-picker
/css
/cut-banner.png
/favicon.ico
/hui
/images
/imgs
/index.php
/jquery.dialogbox.css
/jquery.dialogBox.js
/js
/kindeditor
/lapiao.png
/layer
/layui
/location.png
/manage
/match_invite.png
/mix-manifest.json
/MP_verify_dhjBhFogsDfel4JP.txt
/MP_verify_KvxlrMV3uGH31Ovn.txt
/MP_verify_Xl9wWx3LrMFTyDB4.txt
/MP_verify_zSt1JuDZfDl9Nbgr.txt
/multiple-select
/pay.log
/phone.png
/robots.txt
/web.config
/XSq0eyoTd7.txt

Found on 2022-11-17 14:44

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 180.163.146.112
Domain: qique.com.cn
Port: 80
URL: http://qique.com.cn

First seen 2025-09-14 18:00
Last seen 2026-01-16 08:50
Open for 123 days

Severity: low
Fingerprint: 5f32cf5d6962f09c2a439cf82a439cf87ec9e0e8bb3532b089e159af2b7f0632

Found 31 files trough .DS_Store spidering:

/assets
/css
/doc
/doc/plugins
/doc/renderers
/doc/static
/doc/static/img
/doc/views
/js
/minapp
/minapp/bootstrap
/minapp/css
/minapp/img
/minapp/js
/ronglianqimo
/ronglianqimo/.idea
/ronglianqimo/css
/ronglianqimo/hojo
/ronglianqimo/hojo/_firebug
/ronglianqimo/hojo/io
/ronglianqimo/imgs
/ronglianqimo/js
/ronglianqimo/js/icallcenter
/ronglianqimo/js/icallcenter/callProcessor.js
/ronglianqimo/js/icallcenter/global.js
/ronglianqimo/js/icallcenter/hojotools.js
/ronglianqimo/js/icallcenter/logon.js
/ronglianqimo/js/icallcenter/Phone.js
/ronglianqimo/js/icallcenter/SoftphoneBar.js
/ronglianqimo/js/icallcenter/stateElement
/ronglianqimo/phoneBar

Found on 2026-01-16 08:50

Severity: low
Fingerprint: 5f32cf5d6962f09c87f05b7087f05b706e7a276032eb6a78525ebdf7ea3835ca

Found 26 files trough .DS_Store spidering:

/assets
/css
/doc
/js
/minapp
/minapp/bootstrap
/minapp/css
/minapp/img
/minapp/js
/ronglianqimo
/ronglianqimo/.idea
/ronglianqimo/css
/ronglianqimo/hojo
/ronglianqimo/hojo/_firebug
/ronglianqimo/hojo/io
/ronglianqimo/imgs
/ronglianqimo/js
/ronglianqimo/js/icallcenter
/ronglianqimo/js/icallcenter/callProcessor.js
/ronglianqimo/js/icallcenter/global.js
/ronglianqimo/js/icallcenter/hojotools.js
/ronglianqimo/js/icallcenter/logon.js
/ronglianqimo/js/icallcenter/Phone.js
/ronglianqimo/js/icallcenter/SoftphoneBar.js
/ronglianqimo/js/icallcenter/stateElement
/ronglianqimo/phoneBar

Found on 2026-01-02 03:06

Severity: low
Fingerprint: 5f32cf5d6962f09cdafa5447dafa5447b671e3e9c754035937e19c26cfc15277

Found 18 files trough .DS_Store spidering:

/assets
/css
/doc
/js
/minapp
/minapp/bootstrap
/minapp/css
/minapp/img
/minapp/js
/ronglianqimo
/ronglianqimo/.idea
/ronglianqimo/css
/ronglianqimo/hojo
/ronglianqimo/hojo/_firebug
/ronglianqimo/hojo/io
/ronglianqimo/imgs
/ronglianqimo/js
/ronglianqimo/phoneBar

Found on 2025-12-10 14:04

Severity: low
Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bcad0419ccfedaad6c0a415503c2f065f5

Found 22 files trough .DS_Store spidering:

/assets
/css
/doc
/js
/minapp
/ronglianqimo
/ronglianqimo/.idea
/ronglianqimo/css
/ronglianqimo/hojo
/ronglianqimo/hojo/_firebug
/ronglianqimo/hojo/io
/ronglianqimo/imgs
/ronglianqimo/js
/ronglianqimo/js/icallcenter
/ronglianqimo/js/icallcenter/callProcessor.js
/ronglianqimo/js/icallcenter/global.js
/ronglianqimo/js/icallcenter/hojotools.js
/ronglianqimo/js/icallcenter/logon.js
/ronglianqimo/js/icallcenter/Phone.js
/ronglianqimo/js/icallcenter/SoftphoneBar.js
/ronglianqimo/js/icallcenter/stateElement
/ronglianqimo/phoneBar

Found on 2025-12-06 22:33

Severity: low
Fingerprint: 5f32cf5d6962f09cab28146bab28146bd60b51bdda3146852888adaa56cde058

Found 21 files trough .DS_Store spidering:

/assets
/css
/doc
/doc/plugins
/doc/renderers
/doc/static
/doc/static/img
/doc/views
/js
/minapp
/minapp/bootstrap
/minapp/css
/minapp/img
/minapp/js
/ronglianqimo
/ronglianqimo/.idea
/ronglianqimo/css
/ronglianqimo/hojo
/ronglianqimo/imgs
/ronglianqimo/js
/ronglianqimo/phoneBar

Found on 2025-10-08 12:58

Severity: low
Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea97dac2af7c8b9731fa48d6028200849fd

Found 23 files trough .DS_Store spidering:

/assets
/css
/doc
/doc/plugins
/doc/renderers
/doc/static
/doc/static/img
/doc/views
/js
/minapp
/minapp/bootstrap
/minapp/css
/minapp/img
/minapp/js
/ronglianqimo
/ronglianqimo/.idea
/ronglianqimo/css
/ronglianqimo/hojo
/ronglianqimo/hojo/_firebug
/ronglianqimo/hojo/io
/ronglianqimo/imgs
/ronglianqimo/js
/ronglianqimo/phoneBar

Found on 2025-09-18 09:26

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 180.163.146.112
Domain: cdn.liiistem.cn
Port: 80
URL: http://cdn.liiistem.cn

First seen 2025-11-30 16:06
Last seen 2026-01-16 07:23
Open for 46 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225b56e3cf
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/LiiiLabs/liiistem.cn.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2026-01-16 07:23
  
  264 Bytes
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: www.xuanmiss.space
Port: 443
URL: https://www.xuanmiss.space

First seen 2025-11-19 02:48
Last seen 2026-01-16 06:28
Open for 58 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-16 06:28
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 180.163.146.112
Domain: ams.hgsuper.cn
Port: 443
URL: https://ams.hgsuper.cn

First seen 2025-10-10 06:18
Last seen 2026-01-16 03:02
Open for 97 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652278cdcc27
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@gitee.com:hgsuper_cn/html-ams.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-01-16 03:02
  
  262 Bytes
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: apps.zqwl123.com
Port: 80
URL: http://apps.zqwl123.com

First seen 2025-10-24 06:06
Last seen 2026-01-16 01:57
Open for 83 days

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ece9678ace20b5d044506c8afd6680bc25dab7256b

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /ZqContent/getList
GET /admin/ZqContent/getList
GET /admin/contactUs/selectZqContactUsInfo
GET /admin/contactUs/updateZqContactUsInfo
GET /admin/coop/brand/delete
GET /admin/coop/brand/select
GET /admin/dict/deleteZqDict
GET /admin/dict/deleteZqDictDetail
GET /admin/dict/getZqDictDetail
GET /admin/dict/getZqDictVoList
GET /admin/nav/selectAll
GET /admin/page/selectZqPageList
GET /admin/website/settings/get
GET /admin/zqAdSettings/delete
GET /admin/zqAdSettings/select
GET /admin/zqlabel/getList
GET /coop/brand/select
GET /dict/getZqDictDetail
GET /error
GET /nav/selectAll
GET /oss/getZqOssList
GET /page/selectZqPageList
GET /pageBase/getPageBaseAboutUsVo
GET /pageBase/getPageBaseBottomVo
GET /project/file/deleteZqProjectFile
GET /project/file/getZqProjectFile
GET /project/info/getProjectInfoVoList
GET /user/getCode
GET /user/getUserInfo
GET /version/getSystemVersion
GET /website/settings/get
GET /zqAdSettings/select
GET /zqlabel/getList
POST /admin/ZqContent/add
POST /admin/ZqContent/update
POST /admin/contactUs/addZqContactUsInfo
POST /admin/contactUs/getZqContactUsSet
POST /admin/contactUs/saveZqContactUsSet
POST /admin/coop/brand/add
POST /admin/dict/saveDict
POST /admin/dict/saveZqDictDetail
POST /admin/nav/add
POST /admin/nav/deleteZqNav
POST /admin/nav/update
POST /admin/page/addZqPageList
POST /admin/pageBase/save
POST /admin/pageBase/select
POST /admin/recruit/saveZqRecruit
POST /admin/recruit/selectZqRecruit
POST /admin/website/settings/save
POST /admin/zqAdSettings/add
POST /admin/zqAdSettings/update
POST /admin/zqlabel/saveOrUpdate
POST /contactUs/addZqContactUsInfo
POST /contactUs/getZqContactUsSet
POST /file/uploadFile
POST /pageBase/select
POST /project/file/saveZqProjectFileQo
POST /project/info/saveProjectInfo
POST /project/info/uploadApp
POST /recruit/selectZqRecruit
POST /user/login

Found on 2026-01-16 01:57

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: admin.hbcarai.cn
Port: 443
URL: https://admin.hbcarai.cn

First seen 2025-12-08 17:57
Last seen 2026-01-15 23:05
Open for 38 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-01-15 23:05
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: www.fahejia.com
Port: 443
URL: https://www.fahejia.com

First seen 2026-01-04 13:34
Last seen 2026-01-15 20:10
Open for 11 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd18553ecf7057dff41057dff41057dff41057dff41057dff41
```
Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
POST /a/login
```
  Found on 2026-01-15 20:10
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-01-04 13:34
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: json.myanmar.820.hk
Port: 80
URL: http://json.myanmar.820.hk

First seen 2026-01-10 03:16
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-10 03:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 180.163.146.112
Domain: xyhd.hyxinyun.top
Port: 80
URL: http://xyhd.hyxinyun.top

First seen 2025-12-08 11:56
Last seen 2026-01-09 18:58
Open for 32 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-01-09 18:58
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 180.163.146.112
Domain: crm.qingdao.stem.cn
Port: 443
URL: https://crm.qingdao.stem.cn

First seen 2026-01-04 22:36
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176428b8bb33b151ae53e151ae53e151ae53e
```
Found 2 files trough .DS_Store spidering:

/static
/static/js
```
  Found on 2026-01-04 22:36
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 180.163.146.112
Domain: crm.qingdao.stem.cn
Port: 80
URL: http://crm.qingdao.stem.cn

First seen 2026-01-04 22:36
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176428b8bb33b151ae53e151ae53e151ae53e
```
Found 2 files trough .DS_Store spidering:

/static
/static/js
```
  Found on 2026-01-04 22:36
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 117.21.178.220
Domain: refer.eyejiajia.com
Port: 443
URL: https://refer.eyejiajia.com

First seen 2023-09-08 08:15
Last seen 2025-12-26 17:56
Open for 840 days

Severity: low
Fingerprint: 5f32cf5d6962f09c2a439cf82a439cf871cef35330eeb1ce2776cf319f2d7750

Found 31 files trough .DS_Store spidering:

/dist
/dist/common
/dist/exam
/dist/exam/static
/dist/exam/static/css
/dist/exam/static/Icons
/dist/exam/static/images
/dist/exam/static/img
/dist/exam/static/js
/dist/exam/static/libs
/dist/exam/static/libs/gamePads
/dist/exam/static/libs/jquery
/dist/exam/static/Thumbs
/dist/Sdx
/static
/static/audio
/static/audio/bgm
/static/audio/sounds
/static/audio/sounds/collision
/static/audio/sounds/explosion
/static/audio/sounds/other
/static/examine
/static/examine/css
/static/examine/fonts
/static/examine/img
/static/examine/js
/static/examine/svg
/static/images
/static/libs
/static/scripts
/static/templates

Found on 2025-12-26 17:56

Severity: low
Fingerprint: 5f32cf5d6962f09c87f05b7087f05b70babbc17bc8e9c316c23deda9b6964337

Found 26 files trough .DS_Store spidering:

/dist
/dist/common
/dist/exam
/dist/exam/static
/dist/exam/static/css
/dist/exam/static/Icons
/dist/exam/static/images
/dist/exam/static/img
/dist/exam/static/js
/dist/exam/static/libs
/dist/exam/static/libs/gamePads
/dist/exam/static/libs/jquery
/dist/exam/static/Thumbs
/dist/Sdx
/static
/static/audio
/static/audio/bgm
/static/audio/sounds
/static/audio/sounds/collision
/static/audio/sounds/explosion
/static/audio/sounds/other
/static/examine
/static/images
/static/libs
/static/scripts
/static/templates

Found on 2025-12-24 16:49

Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e07949ba5ac7a7d32b52ad9fc7c5b0c0f

Found 20 files trough .DS_Store spidering:

/dist
/static
/static/audio
/static/audio/bgm
/static/audio/sounds
/static/audio/sounds/collision
/static/audio/sounds/explosion
/static/audio/sounds/other
/static/examine
/static/examine/css
/static/examine/fonts
/static/examine/img
/static/examine/js
/static/examine/svg
/static/images
/static/libs
/static/scripts
/static/scripts/Country
/static/scripts/Research
/static/templates

Found on 2025-12-24 16:49

Severity: medium
Fingerprint: 5f32cf5d6962f09c248e4f81248e4f811bf87accf2ab7945d6efdc2e6926da63

Found 41 files trough .DS_Store spidering:

/dist
/dist/common
/dist/exam
/dist/exam/static
/dist/exam/static/css
/dist/exam/static/Icons
/dist/exam/static/images
/dist/exam/static/img
/dist/exam/static/js
/dist/exam/static/libs
/dist/exam/static/libs/gamePads
/dist/exam/static/libs/jquery
/dist/exam/static/Thumbs
/dist/Sdx
/static
/static/audio
/static/audio/bgm
/static/audio/sounds
/static/audio/sounds/collision
/static/audio/sounds/explosion
/static/audio/sounds/other
/static/examine
/static/examine/css
/static/examine/fonts
/static/examine/img
/static/examine/js
/static/examine/svg
/static/images
/static/images/common
/static/images/common/button
/static/images/common/selectCheckPoint
/static/images/Country
/static/images/Examine
/static/images/Festival
/static/images/Game
/static/images/Kids
/static/images/Sdx
/static/images/Space
/static/libs
/static/scripts
/static/templates

Found on 2025-12-22 18:05

Severity: medium
Fingerprint: 5f32cf5d6962f09cecc85b04ecc85b04323508efa1d09002a025445595429b44

Found 53 files trough .DS_Store spidering:

/dist
/dist/common
/dist/exam
/dist/exam/static
/dist/exam/static/css
/dist/exam/static/Icons
/dist/exam/static/images
/dist/exam/static/img
/dist/exam/static/js
/dist/exam/static/libs
/dist/exam/static/libs/gamePads
/dist/exam/static/libs/jquery
/dist/exam/static/Thumbs
/dist/Sdx
/static
/static/audio
/static/audio/bgm
/static/audio/sounds
/static/audio/sounds/collision
/static/audio/sounds/explosion
/static/audio/sounds/other
/static/examine
/static/examine/css
/static/examine/fonts
/static/examine/img
/static/examine/js
/static/examine/svg
/static/images
/static/images/common
/static/images/common/button
/static/images/common/selectCheckPoint
/static/images/Country
/static/images/Country/an-flappy-bird
/static/images/Country/an43308
/static/images/Country/ex1115
/static/images/Country/ex1116
/static/images/Country/ex1123
/static/images/Country/ex1132
/static/images/Country/ex1133
/static/images/Country/ex1278
/static/images/Country/fu204
/static/images/Country/fu206
/static/images/Country/fu926
/static/images/Country/sv1114
/static/images/Examine
/static/images/Festival
/static/images/Game
/static/images/Kids
/static/images/Sdx
/static/images/Space
/static/libs
/static/scripts
/static/templates

Found on 2025-12-20 19:18

Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbe5bd50d35908ebe64fbb5e16bdc846da0

Found 15 files trough .DS_Store spidering:

/dist
/dist/common
/dist/exam
/dist/exam/static
/dist/exam/static/css
/dist/exam/static/Icons
/dist/exam/static/images
/dist/exam/static/img
/dist/exam/static/js
/dist/exam/static/libs
/dist/exam/static/libs/gamePads
/dist/exam/static/libs/jquery
/dist/exam/static/Thumbs
/dist/Sdx
/static

Found on 2025-12-18 15:02

Severity: medium
Fingerprint: 5f32cf5d6962f09cd4047824d40478242db4bc0f608a381c98fb7236c3cbbf31

Found 35 files trough .DS_Store spidering:

/dist
/static
/static/audio
/static/audio/bgm
/static/audio/sounds
/static/audio/sounds/collision
/static/audio/sounds/explosion
/static/audio/sounds/other
/static/examine
/static/images
/static/images/common
/static/images/common/button
/static/images/common/selectCheckPoint
/static/images/Country
/static/images/Country/an-flappy-bird
/static/images/Country/an43308
/static/images/Country/ex1115
/static/images/Country/ex1116
/static/images/Country/ex1123
/static/images/Country/ex1132
/static/images/Country/ex1133
/static/images/Country/ex1278
/static/images/Country/fu204
/static/images/Country/fu206
/static/images/Country/fu926
/static/images/Country/sv1114
/static/images/Examine
/static/images/Festival
/static/images/Game
/static/images/Kids
/static/images/Sdx
/static/images/Space
/static/libs
/static/scripts
/static/templates

Found on 2025-12-16 12:47

Severity: low
Fingerprint: 5f32cf5d6962f09cf35cbfb3f35cbfb3667df392d33acf0fcc066e94bbc12a3d

Found 29 files trough .DS_Store spidering:

/dist
/dist/common
/dist/exam
/dist/exam/static
/dist/exam/static/css
/dist/exam/static/Icons
/dist/exam/static/images
/dist/exam/static/img
/dist/exam/static/js
/dist/exam/static/libs
/dist/exam/static/Thumbs
/dist/Sdx
/static
/static/audio
/static/audio/bgm
/static/audio/sounds
/static/audio/sounds/collision
/static/audio/sounds/explosion
/static/audio/sounds/other
/static/examine
/static/examine/css
/static/examine/fonts
/static/examine/img
/static/examine/js
/static/examine/svg
/static/images
/static/libs
/static/scripts
/static/templates

Found on 2025-12-12 19:49

Severity: medium
Fingerprint: 5f32cf5d6962f09c6cdae1676cdae167e73d14f6adcd2d7bc03f87c073592776

Found 69 files trough .DS_Store spidering:

/dist
/dist/common
/dist/exam
/dist/exam/static
/dist/exam/static/css
/dist/exam/static/Icons
/dist/exam/static/images
/dist/exam/static/img
/dist/exam/static/js
/dist/exam/static/libs
/dist/exam/static/libs/gamePads
/dist/exam/static/libs/jquery
/dist/exam/static/Thumbs
/dist/Sdx
/static
/static/audio
/static/audio/bgm
/static/audio/sounds
/static/audio/sounds/collision
/static/audio/sounds/explosion
/static/audio/sounds/other
/static/examine
/static/examine/css
/static/examine/fonts
/static/examine/img
/static/examine/js
/static/examine/svg
/static/images
/static/images/common
/static/images/common/button
/static/images/common/selectCheckPoint
/static/images/Country
/static/images/Country/an-flappy-bird
/static/images/Country/an43308
/static/images/Country/ex1115
/static/images/Country/ex1116
/static/images/Country/ex1123
/static/images/Country/ex1132
/static/images/Country/ex1132/src
/static/images/Country/ex1132/src/[HI-FI]
/static/images/Country/ex1132/src/BG
/static/images/Country/ex1132/src/Btn
/static/images/Country/ex1132/src/Hero
/static/images/Country/ex1132/src/TXT
/static/images/Country/ex1133
/static/images/Country/ex1278
/static/images/Country/fu204
/static/images/Country/fu206
/static/images/Country/fu926
/static/images/Country/sv1114
/static/images/Examine
/static/images/Examine/CommonCRB
/static/images/Examine/jc962
/static/images/Examine/version-pl
/static/images/Examine/version1
/static/images/Festival
/static/images/Festival/christmas-kangming
/static/images/Festival/ex763
/static/images/Festival/other
/static/images/Game
/static/images/Game/ex1012
/static/images/Game/ex1021
/static/images/Game/ex1042
/static/images/Kids
/static/images/Sdx
/static/images/Space
/static/libs
/static/scripts
/static/templates

Found on 2025-12-12 19:49

Severity: low
Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0f147ea8b8afbb9e6a45435599d45fb30

Found 13 files trough .DS_Store spidering:

/dist
/dist/common
/dist/exam
/dist/exam/static
/dist/exam/static/css
/dist/exam/static/Icons
/dist/exam/static/images
/dist/exam/static/img
/dist/exam/static/js
/dist/exam/static/libs
/dist/exam/static/Thumbs
/dist/Sdx
/static

Found on 2025-12-01 08:41

Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf17642e2b3eac97a1d48867a1d48867a1d4886
```
Found 2 files trough .DS_Store spidering:

/dist
/static
```
Found on 2025-10-13 06:19

Severity: low
Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea9aede0f046e780b5da011b1f6cf666183

Found 23 files trough .DS_Store spidering:

/dist
/dist/common
/dist/exam
/dist/exam/static
/dist/exam/static/css
/dist/exam/static/Icons
/dist/exam/static/images
/dist/exam/static/img
/dist/exam/static/js
/dist/exam/static/libs
/dist/exam/static/libs/gamePads
/dist/exam/static/libs/jquery
/dist/exam/static/Thumbs
/dist/Sdx
/static
/static/audio
/static/audio/bgm
/static/audio/sounds
/static/examine
/static/images
/static/libs
/static/scripts
/static/templates

Found on 2025-09-17 11:27

Severity: low
Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0f147ea8b89de7f78e12543a231d199c1

Found 13 files trough .DS_Store spidering:

/dist
/static
/static/audio
/static/audio/bgm
/static/audio/sounds
/static/audio/sounds/collision
/static/audio/sounds/explosion
/static/audio/sounds/other
/static/examine
/static/images
/static/libs
/static/scripts
/static/templates

Found on 2025-09-12 15:57

Severity: low
Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0f147ea8b8afbb9e6a4543559d740e005

Found 13 files trough .DS_Store spidering:

/dist
/dist/common
/dist/exam
/dist/Sdx
/static
/static/audio
/static/audio/bgm
/static/audio/sounds
/static/examine
/static/images
/static/libs
/static/scripts
/static/templates

Found on 2025-08-10 21:27

Severity: low
Fingerprint: 5f32cf5d6962f09c2eda814e2eda814e38bb1c6582d16694de366ebb1ea29d37
```
Found 6 files trough .DS_Store spidering:

/dist
/dist/common
/dist/exam
/dist/exam/static
/dist/Sdx
/static
```
Found on 2025-07-12 17:29

Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b1276312a580c33677e81449c7dbdefda

Found 14 files trough .DS_Store spidering:

/dist
/dist/common
/dist/exam
/dist/exam/static
/dist/Sdx
/static
/static/audio
/static/audio/bgm
/static/audio/sounds
/static/examine
/static/images
/static/libs
/static/scripts
/static/templates

Found on 2025-05-18 17:03

Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e993268ac4fcc83e1d60c131b6a60c0474
```
Found 5 files trough .DS_Store spidering:

/dist
/dist/common
/dist/exam
/dist/Sdx
/static
```
Found on 2024-12-24 23:24

Severity: low
Fingerprint: 5f32cf5d6962f09cab28146bab28146b6a0b5eda7138a2d7d2f5f1ac36655b7f

Found 21 files trough .DS_Store spidering:

/dist
/dist/common
/dist/exam
/dist/exam/static
/dist/exam/static/css
/dist/exam/static/Icons
/dist/exam/static/images
/dist/exam/static/img
/dist/exam/static/js
/dist/exam/static/libs
/dist/exam/static/libs/gamePads
/dist/exam/static/libs/jquery
/dist/exam/static/Thumbs
/dist/Sdx
/static
/static/audio
/static/examine
/static/images
/static/libs
/static/scripts
/static/templates

Found on 2024-12-21 00:41

Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744df1bd62d8bbe099893fbd3e92e4c70d94

Found 12 files trough .DS_Store spidering:

/dist
/dist/common
/dist/exam
/dist/exam/static
/dist/Sdx
/static
/static/audio
/static/examine
/static/images
/static/libs
/static/scripts
/static/templates

Found on 2024-12-16 09:43

Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733f9f982c5ea712e227a260389f7a1f4b3d

Found 10 files trough .DS_Store spidering:

/dist
/static
/static/audio
/static/audio/bgm
/static/audio/sounds
/static/examine
/static/images
/static/libs
/static/scripts
/static/templates

Found on 2024-11-14 13:49

Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772e42964d9125897b032bc3df747e0e4f1

Found 11 files trough .DS_Store spidering:

/dist
/dist/common
/dist/exam
/dist/Sdx
/static
/static/audio
/static/examine
/static/images
/static/libs
/static/scripts
/static/templates

Found on 2023-09-08 08:15

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 180.163.146.112
Domain: m.orcastudy.cn
Port: 80
URL: http://m.orcastudy.cn

First seen 2022-11-17 14:44
Last seen 2025-10-15 02:04
Open for 1062 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c2f72f5fb2f72f5fbd63ea72fd032dc7026653139e52bd24f

Found 65 files trough .DS_Store spidering:

/baidu_verify_m5gNPm7lze.html
/bootstrap-3.3.7
/bootstrap-datetimepicker
/city-picker
/css
/favicon.ico
/hui
/images
/imgs
/imgs/audio.png
/imgs/banner-m.jpg
/imgs/banner-m.png
/imgs/banner2.jpg
/imgs/banner2.png
/imgs/bg.png
/imgs/board.png
/imgs/code.jpg
/imgs/code10010.png
/imgs/coope3.png
/imgs/fm.png
/imgs/Group1.png
/imgs/Group2.png
/imgs/icon1.png
/imgs/icon2.png
/imgs/icon3.png
/imgs/icon4.png
/imgs/icons.png
/imgs/image.png
/imgs/index.png
/imgs/logo-pc.png
/imgs/pause.png
/imgs/play.png
/imgs/protect.png
/imgs/qrcode.jpg
/imgs/role1.png
/imgs/role2.png
/imgs/role3.png
/imgs/simple1.png
/imgs/smarter2.png
/imgs/title.png
/imgs/title1.png
/imgs/title2.png
/imgs/title3.png
/imgs/title4.png
/imgs/video.png
/imgs/WechatIMG2.png
/imgs/WechatIMG4.png
/index.php
/jquery.dialogbox.css
/jquery.dialogBox.js
/js
/kindeditor
/layer
/layui
/manage
/mix-manifest.json
/MP_verify_dhjBhFogsDfel4JP.txt
/MP_verify_KvxlrMV3uGH31Ovn.txt
/MP_verify_Xl9wWx3LrMFTyDB4.txt
/MP_verify_zSt1JuDZfDl9Nbgr.txt
/multiple-select
/qrcode
/robots.txt
/web.config
/XSq0eyoTd7.txt

Found on 2025-10-15 02:04

Severity: medium
Fingerprint: 5f32cf5d6962f09c09f5afde09f5afde5196334430a1f92bf41961086e701999

Found 64 files trough .DS_Store spidering:

/baidu_verify_m5gNPm7lze.html
/bootstrap-3.3.7
/bootstrap-datetimepicker
/city-picker
/css
/favicon.ico
/hui
/images
/imgs
/imgs/audio.png
/imgs/banner-m.jpg
/imgs/banner-m.png
/imgs/banner2.jpg
/imgs/banner2.png
/imgs/bg.png
/imgs/board.png
/imgs/code.jpg
/imgs/code10010.png
/imgs/coope3.png
/imgs/fm.png
/imgs/Group1.png
/imgs/Group2.png
/imgs/icon1.png
/imgs/icon2.png
/imgs/icon3.png
/imgs/icon4.png
/imgs/icons.png
/imgs/image.png
/imgs/index.png
/imgs/logo-pc.png
/imgs/pause.png
/imgs/play.png
/imgs/protect.png
/imgs/qrcode.jpg
/imgs/role1.png
/imgs/role2.png
/imgs/role3.png
/imgs/simple1.png
/imgs/smarter2.png
/imgs/title.png
/imgs/title1.png
/imgs/title2.png
/imgs/title3.png
/imgs/title4.png
/imgs/video.png
/imgs/WechatIMG2.png
/imgs/WechatIMG4.png
/index.php
/jquery.dialogbox.css
/jquery.dialogBox.js
/js
/kindeditor
/layer
/layui
/manage
/mix-manifest.json
/MP_verify_dhjBhFogsDfel4JP.txt
/MP_verify_KvxlrMV3uGH31Ovn.txt
/MP_verify_Xl9wWx3LrMFTyDB4.txt
/MP_verify_zSt1JuDZfDl9Nbgr.txt
/multiple-select
/robots.txt
/web.config
/XSq0eyoTd7.txt

Found on 2024-06-30 11:14

Severity: low
Fingerprint: 5f32cf5d6962f09c87f05b7087f05b7057836162425ea305872effc2a4e94466

Found 26 files trough .DS_Store spidering:

/baidu_verify_m5gNPm7lze.html
/bootstrap-3.3.7
/bootstrap-datetimepicker
/city-picker
/css
/favicon.ico
/hui
/images
/imgs
/index.php
/jquery.dialogbox.css
/jquery.dialogBox.js
/js
/kindeditor
/layer
/layui
/manage
/mix-manifest.json
/MP_verify_dhjBhFogsDfel4JP.txt
/MP_verify_KvxlrMV3uGH31Ovn.txt
/MP_verify_Xl9wWx3LrMFTyDB4.txt
/MP_verify_zSt1JuDZfDl9Nbgr.txt
/multiple-select
/robots.txt
/web.config
/XSq0eyoTd7.txt

Found on 2024-06-16 07:25

Severity: medium
Fingerprint: 5f32cf5d6962f09c8ef2655c8ef2655ce088ab5f8841882ba72287e48c525440

Found 71 files trough .DS_Store spidering:

/audio.mp3
/baidu_verify_m5gNPm7lze.html
/bootstrap-3.3.7
/bootstrap-datetimepicker
/city-picker
/css
/cut-banner.png
/favicon.ico
/hui
/images
/imgs
/imgs/audio.png
/imgs/banner-m.jpg
/imgs/banner-m.png
/imgs/banner2.jpg
/imgs/banner2.png
/imgs/bg.png
/imgs/board.png
/imgs/code.jpg
/imgs/code10010.png
/imgs/coope3.png
/imgs/fm.png
/imgs/Group1.png
/imgs/Group2.png
/imgs/icon1.png
/imgs/icon2.png
/imgs/icon3.png
/imgs/icon4.png
/imgs/icons.png
/imgs/image.png
/imgs/index.png
/imgs/logo-pc.png
/imgs/pause.png
/imgs/play.png
/imgs/protect.png
/imgs/qrcode.jpg
/imgs/role1.png
/imgs/role2.png
/imgs/role3.png
/imgs/simple1.png
/imgs/smarter2.png
/imgs/title.png
/imgs/title1.png
/imgs/title2.png
/imgs/title3.png
/imgs/title4.png
/imgs/video.png
/imgs/WechatIMG2.png
/imgs/WechatIMG4.png
/index.php
/jquery.dialogbox.css
/jquery.dialogBox.js
/js
/kindeditor
/lapiao.png
/layer
/layui
/location.png
/manage
/match_invite.png
/mix-manifest.json
/MP_verify_dhjBhFogsDfel4JP.txt
/MP_verify_KvxlrMV3uGH31Ovn.txt
/MP_verify_Xl9wWx3LrMFTyDB4.txt
/MP_verify_zSt1JuDZfDl9Nbgr.txt
/multiple-select
/pay.log
/phone.png
/robots.txt
/web.config
/XSq0eyoTd7.txt

Found on 2022-11-17 14:44

Create report

Open service 180.163.146.112:443 · qeei.cn

2026-01-28 15:53

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html; charset=utf-8
Content-Length: 84
Connection: close
Date: Wed, 28 Jan 2026 15:53:59 GMT
Via: cache79.l2cn8813[83,83,200-0,M], cache79.l2cn8813[84,0], kunlun3.cn7174[147,146,200-0,M], kunlun1.cn7174[151,0]
Ali-Swift-Global-Savetime: 1769615639
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Wed, 28 Jan 2026 15:53:59 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: b4a3921517696156389008813e


<!DOCTYPE html><html><boby><center>链接已删除或不存在<center></body></html>

Found 2026-01-28 by HttpPlugin

Host 180.163.146.112

China

Software information

Swagger API description is publicly available

Swagger API description is publicly available

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Git configuration and history exposed

MacOS file listing through .DS_Store file

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

MacOS file listing through .DS_Store file

Git configuration and history exposed

GraphQL introspection is enabled.

MacOS file listing through .DS_Store file

Swagger API description is publicly available

Swagger API description is publicly available

MacOS file listing through .DS_Store file

Swagger API description is publicly available

Swagger API description is publicly available

Git configuration and history exposed

Swagger API description is publicly available

Swagger API description is publicly available

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Git configuration and history exposed

Swagger API description is publicly available

Git configuration and history exposed

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file