LeakIX - Host 38.148.240.36

Host 38.148.240.36

United States

FD-298-8796

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 38.247.12.186
Domain: cert.xyyidc.com
Port: 443
URL: https://cert.xyyidc.com

First seen 2025-09-20 05:27
Last seen 2025-10-02 09:10
Open for 12 days

Severity: low
Fingerprint: 5f32cf5d6962f09cf35cbfb3f35cbfb35f3eb0be03f984e5cdf53efa287d73cf

Found 29 files trough .DS_Store spidering:

/.well-known
/.zsign_cache
/6981
/assets
/assets/addons
/assets/addons/epay
/assets/addons/epay/css
/assets/addons/epay/images
/assets/addons/epay/js
/assets/addons/epay/less
/assets/css
/assets/fonts
/assets/img
/assets/index.html
/assets/js
/assets/less
/assets/libs
/cos
/db.config.php
/epay
/index.php
/jiage
/ltpay
/pay
/robots.txt
/router.php
/temp
/template
/uploads

Found on 2025-10-02 09:10

Severity: medium
Fingerprint: 5f32cf5d6962f09c016b87d4016b87d40810961903ff5264bbb32d0d25cc566c

Found 105 files trough .DS_Store spidering:

/.well-known
/.zsign_cache
/6981
/assets
/assets/addons
/assets/addons/epay
/assets/addons/epay/css
/assets/addons/epay/images
/assets/addons/epay/js
/assets/addons/epay/less
/assets/css
/assets/css/backend.css
/assets/css/backend.min.css
/assets/css/bootstrap.css
/assets/css/bootstrap.min.css
/assets/css/dropzone.min.css
/assets/css/fastadmin.css
/assets/css/fastadmin.min.css
/assets/css/frontend-t.css
/assets/css/frontend-t.min.css
/assets/css/frontend.css
/assets/css/frontend.min.css
/assets/css/iconfont.css
/assets/css/index.css
/assets/css/jtoggler.styles.css
/assets/css/lesshat.css
/assets/css/skins
/assets/css/tailwind-o.css
/assets/css/tinycss.css
/assets/css/user.css
/assets/fonts
/assets/fonts/iconfont
/assets/fonts/lato
/assets/img
/assets/index.html
/assets/js
/assets/js/addons.js
/assets/js/adminlte.js
/assets/js/alpinejs-collapse.js
/assets/js/alpinejs-focus.min.js
/assets/js/alpinejs.js
/assets/js/autocomplete.js
/assets/js/backend
/assets/js/backend/addon.js
/assets/js/backend/agentapple.js
/assets/js/backend/appledev.js
/assets/js/backend/auth
/assets/js/backend/category.js
/assets/js/backend/dashboard.js
/assets/js/backend/deviceslist.js
/assets/js/backend/general
/assets/js/backend/index.js
/assets/js/backend/paylist.js
/assets/js/backend/user
/assets/js/backend/whitelist.js
/assets/js/backend-init.js
/assets/js/backend.js
/assets/js/bootstrap-select.min.js
/assets/js/bootstrap-switch.min.js
/assets/js/bootstrap-table-commonsearch.js
/assets/js/bootstrap-table-template.js
/assets/js/bootstrap.bundle.js
/assets/js/dropzone.js
/assets/js/dropzone.min.js
/assets/js/echarts-theme.js
/assets/js/echarts.min.js
/assets/js/fast.js
/assets/js/frontend
/assets/js/frontend-init.js
/assets/js/frontend.js
/assets/js/html5shiv.js
/assets/js/index.min.js
/assets/js/jquery-ui.min.js
/assets/js/jquery.blockUI.min.js
/assets/js/jquery.drag.min.js
/assets/js/jquery.drop.min.js
/assets/js/jquery.min.js
/assets/js/jtoggler.js
/assets/js/require-backend.js
/assets/js/require-backend.min.js
/assets/js/require-css.min.js
/assets/js/require-form.js
/assets/js/require-frontend.js
/assets/js/require-frontend.min.js
/assets/js/require-table.js
/assets/js/require-upload.js
/assets/js/require.js
/assets/js/require.min.js
/assets/js/respond.min.js
/assets/js/sweetalert2.min.js
/assets/js/tagsinput.js
/assets/less
/assets/libs
/cos
/db.config.php
/epay
/index.php
/jiage
/ltpay
/pay
/robots.txt
/router.php
/temp
/template
/uploads

Found on 2025-09-30 19:25

Severity: medium
Fingerprint: 5f32cf5d6962f09c2d9d96002d9d96007583aa6dbf2fbda0619ce0918d06a8b7

Found 109 files trough .DS_Store spidering:

/.well-known
/.zsign_cache
/6981
/assets
/assets/addons
/assets/addons/epay
/assets/addons/epay/css
/assets/addons/epay/images
/assets/addons/epay/js
/assets/addons/epay/less
/assets/css
/assets/css/backend.css
/assets/css/backend.min.css
/assets/css/bootstrap.css
/assets/css/bootstrap.min.css
/assets/css/dropzone.min.css
/assets/css/fastadmin.css
/assets/css/fastadmin.min.css
/assets/css/frontend-t.css
/assets/css/frontend-t.min.css
/assets/css/frontend.css
/assets/css/frontend.min.css
/assets/css/iconfont.css
/assets/css/index.css
/assets/css/jtoggler.styles.css
/assets/css/lesshat.css
/assets/css/skins
/assets/css/tailwind-o.css
/assets/css/tinycss.css
/assets/css/user.css
/assets/fonts
/assets/fonts/iconfont
/assets/fonts/lato
/assets/img
/assets/index.html
/assets/js
/assets/js/addons.js
/assets/js/adminlte.js
/assets/js/alpinejs-collapse.js
/assets/js/alpinejs-focus.min.js
/assets/js/alpinejs.js
/assets/js/autocomplete.js
/assets/js/backend
/assets/js/backend/addon.js
/assets/js/backend/agentapple.js
/assets/js/backend/appledev.js
/assets/js/backend/auth
/assets/js/backend/category.js
/assets/js/backend/dashboard.js
/assets/js/backend/deviceslist.js
/assets/js/backend/general
/assets/js/backend/index.js
/assets/js/backend/paylist.js
/assets/js/backend/user
/assets/js/backend/whitelist.js
/assets/js/backend-init.js
/assets/js/backend.js
/assets/js/bootstrap-select.min.js
/assets/js/bootstrap-switch.min.js
/assets/js/bootstrap-table-commonsearch.js
/assets/js/bootstrap-table-template.js
/assets/js/bootstrap.bundle.js
/assets/js/dropzone.js
/assets/js/dropzone.min.js
/assets/js/echarts-theme.js
/assets/js/echarts.min.js
/assets/js/fast.js
/assets/js/frontend
/assets/js/frontend-init.js
/assets/js/frontend.js
/assets/js/html5shiv.js
/assets/js/index.min.js
/assets/js/jquery-ui.min.js
/assets/js/jquery.blockUI.min.js
/assets/js/jquery.drag.min.js
/assets/js/jquery.drop.min.js
/assets/js/jquery.min.js
/assets/js/jtoggler.js
/assets/js/require-backend.js
/assets/js/require-backend.min.js
/assets/js/require-css.min.js
/assets/js/require-form.js
/assets/js/require-frontend.js
/assets/js/require-frontend.min.js
/assets/js/require-table.js
/assets/js/require-upload.js
/assets/js/require.js
/assets/js/require.min.js
/assets/js/respond.min.js
/assets/js/sweetalert2.min.js
/assets/js/tagsinput.js
/assets/less
/assets/less/bootstrap
/assets/less/bootstrap-less
/assets/less/fastadmin
/assets/less/skins
/assets/libs
/cos
/db.config.php
/epay
/index.php
/jiage
/ltpay
/pay
/robots.txt
/router.php
/temp
/template
/uploads

Found on 2025-09-28 19:08

Severity: medium
Fingerprint: 5f32cf5d6962f09cfdf2c773fdf2c77384732ffe40a35425ce88dcbaceb58543

Found 50 files trough .DS_Store spidering:

/.well-known
/.zsign_cache
/6981
/assets
/assets/addons
/assets/addons/epay
/assets/addons/epay/css
/assets/addons/epay/images
/assets/addons/epay/js
/assets/addons/epay/less
/assets/css
/assets/css/backend.css
/assets/css/backend.min.css
/assets/css/bootstrap.css
/assets/css/bootstrap.min.css
/assets/css/dropzone.min.css
/assets/css/fastadmin.css
/assets/css/fastadmin.min.css
/assets/css/frontend-t.css
/assets/css/frontend-t.min.css
/assets/css/frontend.css
/assets/css/frontend.min.css
/assets/css/iconfont.css
/assets/css/index.css
/assets/css/jtoggler.styles.css
/assets/css/lesshat.css
/assets/css/skins
/assets/css/tailwind-o.css
/assets/css/tinycss.css
/assets/css/user.css
/assets/fonts
/assets/fonts/iconfont
/assets/fonts/lato
/assets/img
/assets/index.html
/assets/js
/assets/less
/assets/libs
/cos
/db.config.php
/epay
/index.php
/jiage
/ltpay
/pay
/robots.txt
/router.php
/temp
/template
/uploads

Found on 2025-09-26 04:57

Severity: medium
Fingerprint: 5f32cf5d6962f09c3e8b9cac3e8b9cac82a0d1818713480cd9ea4d35414c07fa

Found 48 files trough .DS_Store spidering:

/.well-known
/.zsign_cache
/6981
/assets
/assets/addons
/assets/addons/epay
/assets/addons/epay/css
/assets/addons/epay/images
/assets/addons/epay/js
/assets/addons/epay/less
/assets/css
/assets/css/backend.css
/assets/css/backend.min.css
/assets/css/bootstrap.css
/assets/css/bootstrap.min.css
/assets/css/dropzone.min.css
/assets/css/fastadmin.css
/assets/css/fastadmin.min.css
/assets/css/frontend-t.css
/assets/css/frontend-t.min.css
/assets/css/frontend.css
/assets/css/frontend.min.css
/assets/css/iconfont.css
/assets/css/index.css
/assets/css/jtoggler.styles.css
/assets/css/lesshat.css
/assets/css/skins
/assets/css/tailwind-o.css
/assets/css/tinycss.css
/assets/css/user.css
/assets/fonts
/assets/img
/assets/index.html
/assets/js
/assets/less
/assets/libs
/cos
/db.config.php
/epay
/index.php
/jiage
/ltpay
/pay
/robots.txt
/router.php
/temp
/template
/uploads

Found on 2025-09-20 05:27

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 38.247.12.186
Domain: cert.xyyidc.com
Port: 80
URL: http://cert.xyyidc.com

First seen 2025-09-20 05:27
Last seen 2025-10-01 04:35
Open for 10 days

Severity: medium
Fingerprint: 5f32cf5d6962f09cff76d438ff76d4382269537510336e4863c5b679cc5885a6

Found 93 files trough .DS_Store spidering:

/.well-known
/.zsign_cache
/6981
/assets
/assets/addons
/assets/addons/epay
/assets/addons/epay/css
/assets/addons/epay/images
/assets/addons/epay/js
/assets/addons/epay/less
/assets/css
/assets/css/backend.css
/assets/css/backend.min.css
/assets/css/bootstrap.css
/assets/css/bootstrap.min.css
/assets/css/dropzone.min.css
/assets/css/fastadmin.css
/assets/css/fastadmin.min.css
/assets/css/frontend-t.css
/assets/css/frontend-t.min.css
/assets/css/frontend.css
/assets/css/frontend.min.css
/assets/css/iconfont.css
/assets/css/index.css
/assets/css/jtoggler.styles.css
/assets/css/lesshat.css
/assets/css/skins
/assets/css/tailwind-o.css
/assets/css/tinycss.css
/assets/css/user.css
/assets/fonts
/assets/fonts/iconfont
/assets/fonts/lato
/assets/img
/assets/index.html
/assets/js
/assets/js/addons.js
/assets/js/adminlte.js
/assets/js/alpinejs-collapse.js
/assets/js/alpinejs-focus.min.js
/assets/js/alpinejs.js
/assets/js/autocomplete.js
/assets/js/backend
/assets/js/backend-init.js
/assets/js/backend.js
/assets/js/bootstrap-select.min.js
/assets/js/bootstrap-switch.min.js
/assets/js/bootstrap-table-commonsearch.js
/assets/js/bootstrap-table-template.js
/assets/js/bootstrap.bundle.js
/assets/js/dropzone.js
/assets/js/dropzone.min.js
/assets/js/echarts-theme.js
/assets/js/echarts.min.js
/assets/js/fast.js
/assets/js/frontend
/assets/js/frontend-init.js
/assets/js/frontend.js
/assets/js/html5shiv.js
/assets/js/index.min.js
/assets/js/jquery-ui.min.js
/assets/js/jquery.blockUI.min.js
/assets/js/jquery.drag.min.js
/assets/js/jquery.drop.min.js
/assets/js/jquery.min.js
/assets/js/jtoggler.js
/assets/js/require-backend.js
/assets/js/require-backend.min.js
/assets/js/require-css.min.js
/assets/js/require-form.js
/assets/js/require-frontend.js
/assets/js/require-frontend.min.js
/assets/js/require-table.js
/assets/js/require-upload.js
/assets/js/require.js
/assets/js/require.min.js
/assets/js/respond.min.js
/assets/js/sweetalert2.min.js
/assets/js/tagsinput.js
/assets/less
/assets/libs
/cos
/db.config.php
/epay
/index.php
/jiage
/ltpay
/pay
/robots.txt
/router.php
/temp
/template
/uploads

Found on 2025-10-01 04:35

Severity: medium
Fingerprint: 5f32cf5d6962f09cfdf2c773fdf2c77384732ffe40a35425ce88dcbaceb58543

Found 50 files trough .DS_Store spidering:

/.well-known
/.zsign_cache
/6981
/assets
/assets/addons
/assets/addons/epay
/assets/addons/epay/css
/assets/addons/epay/images
/assets/addons/epay/js
/assets/addons/epay/less
/assets/css
/assets/css/backend.css
/assets/css/backend.min.css
/assets/css/bootstrap.css
/assets/css/bootstrap.min.css
/assets/css/dropzone.min.css
/assets/css/fastadmin.css
/assets/css/fastadmin.min.css
/assets/css/frontend-t.css
/assets/css/frontend-t.min.css
/assets/css/frontend.css
/assets/css/frontend.min.css
/assets/css/iconfont.css
/assets/css/index.css
/assets/css/jtoggler.styles.css
/assets/css/lesshat.css
/assets/css/skins
/assets/css/tailwind-o.css
/assets/css/tinycss.css
/assets/css/user.css
/assets/fonts
/assets/fonts/iconfont
/assets/fonts/lato
/assets/img
/assets/index.html
/assets/js
/assets/less
/assets/libs
/cos
/db.config.php
/epay
/index.php
/jiage
/ltpay
/pay
/robots.txt
/router.php
/temp
/template
/uploads

Found on 2025-09-29 02:10

Severity: medium
Fingerprint: 5f32cf5d6962f09c016b87d4016b87d40810961903ff5264bbb32d0d25cc566c

Found 105 files trough .DS_Store spidering:

/.well-known
/.zsign_cache
/6981
/assets
/assets/addons
/assets/addons/epay
/assets/addons/epay/css
/assets/addons/epay/images
/assets/addons/epay/js
/assets/addons/epay/less
/assets/css
/assets/css/backend.css
/assets/css/backend.min.css
/assets/css/bootstrap.css
/assets/css/bootstrap.min.css
/assets/css/dropzone.min.css
/assets/css/fastadmin.css
/assets/css/fastadmin.min.css
/assets/css/frontend-t.css
/assets/css/frontend-t.min.css
/assets/css/frontend.css
/assets/css/frontend.min.css
/assets/css/iconfont.css
/assets/css/index.css
/assets/css/jtoggler.styles.css
/assets/css/lesshat.css
/assets/css/skins
/assets/css/tailwind-o.css
/assets/css/tinycss.css
/assets/css/user.css
/assets/fonts
/assets/fonts/iconfont
/assets/fonts/lato
/assets/img
/assets/index.html
/assets/js
/assets/js/addons.js
/assets/js/adminlte.js
/assets/js/alpinejs-collapse.js
/assets/js/alpinejs-focus.min.js
/assets/js/alpinejs.js
/assets/js/autocomplete.js
/assets/js/backend
/assets/js/backend/addon.js
/assets/js/backend/agentapple.js
/assets/js/backend/appledev.js
/assets/js/backend/auth
/assets/js/backend/category.js
/assets/js/backend/dashboard.js
/assets/js/backend/deviceslist.js
/assets/js/backend/general
/assets/js/backend/index.js
/assets/js/backend/paylist.js
/assets/js/backend/user
/assets/js/backend/whitelist.js
/assets/js/backend-init.js
/assets/js/backend.js
/assets/js/bootstrap-select.min.js
/assets/js/bootstrap-switch.min.js
/assets/js/bootstrap-table-commonsearch.js
/assets/js/bootstrap-table-template.js
/assets/js/bootstrap.bundle.js
/assets/js/dropzone.js
/assets/js/dropzone.min.js
/assets/js/echarts-theme.js
/assets/js/echarts.min.js
/assets/js/fast.js
/assets/js/frontend
/assets/js/frontend-init.js
/assets/js/frontend.js
/assets/js/html5shiv.js
/assets/js/index.min.js
/assets/js/jquery-ui.min.js
/assets/js/jquery.blockUI.min.js
/assets/js/jquery.drag.min.js
/assets/js/jquery.drop.min.js
/assets/js/jquery.min.js
/assets/js/jtoggler.js
/assets/js/require-backend.js
/assets/js/require-backend.min.js
/assets/js/require-css.min.js
/assets/js/require-form.js
/assets/js/require-frontend.js
/assets/js/require-frontend.min.js
/assets/js/require-table.js
/assets/js/require-upload.js
/assets/js/require.js
/assets/js/require.min.js
/assets/js/respond.min.js
/assets/js/sweetalert2.min.js
/assets/js/tagsinput.js
/assets/less
/assets/libs
/cos
/db.config.php
/epay
/index.php
/jiage
/ltpay
/pay
/robots.txt
/router.php
/temp
/template
/uploads

Found on 2025-09-22 03:48

Severity: medium
Fingerprint: 5f32cf5d6962f09c2d9d96002d9d96007583aa6dbf2fbda0619ce0918d06a8b7

Found 109 files trough .DS_Store spidering:

/.well-known
/.zsign_cache
/6981
/assets
/assets/addons
/assets/addons/epay
/assets/addons/epay/css
/assets/addons/epay/images
/assets/addons/epay/js
/assets/addons/epay/less
/assets/css
/assets/css/backend.css
/assets/css/backend.min.css
/assets/css/bootstrap.css
/assets/css/bootstrap.min.css
/assets/css/dropzone.min.css
/assets/css/fastadmin.css
/assets/css/fastadmin.min.css
/assets/css/frontend-t.css
/assets/css/frontend-t.min.css
/assets/css/frontend.css
/assets/css/frontend.min.css
/assets/css/iconfont.css
/assets/css/index.css
/assets/css/jtoggler.styles.css
/assets/css/lesshat.css
/assets/css/skins
/assets/css/tailwind-o.css
/assets/css/tinycss.css
/assets/css/user.css
/assets/fonts
/assets/fonts/iconfont
/assets/fonts/lato
/assets/img
/assets/index.html
/assets/js
/assets/js/addons.js
/assets/js/adminlte.js
/assets/js/alpinejs-collapse.js
/assets/js/alpinejs-focus.min.js
/assets/js/alpinejs.js
/assets/js/autocomplete.js
/assets/js/backend
/assets/js/backend/addon.js
/assets/js/backend/agentapple.js
/assets/js/backend/appledev.js
/assets/js/backend/auth
/assets/js/backend/category.js
/assets/js/backend/dashboard.js
/assets/js/backend/deviceslist.js
/assets/js/backend/general
/assets/js/backend/index.js
/assets/js/backend/paylist.js
/assets/js/backend/user
/assets/js/backend/whitelist.js
/assets/js/backend-init.js
/assets/js/backend.js
/assets/js/bootstrap-select.min.js
/assets/js/bootstrap-switch.min.js
/assets/js/bootstrap-table-commonsearch.js
/assets/js/bootstrap-table-template.js
/assets/js/bootstrap.bundle.js
/assets/js/dropzone.js
/assets/js/dropzone.min.js
/assets/js/echarts-theme.js
/assets/js/echarts.min.js
/assets/js/fast.js
/assets/js/frontend
/assets/js/frontend-init.js
/assets/js/frontend.js
/assets/js/html5shiv.js
/assets/js/index.min.js
/assets/js/jquery-ui.min.js
/assets/js/jquery.blockUI.min.js
/assets/js/jquery.drag.min.js
/assets/js/jquery.drop.min.js
/assets/js/jquery.min.js
/assets/js/jtoggler.js
/assets/js/require-backend.js
/assets/js/require-backend.min.js
/assets/js/require-css.min.js
/assets/js/require-form.js
/assets/js/require-frontend.js
/assets/js/require-frontend.min.js
/assets/js/require-table.js
/assets/js/require-upload.js
/assets/js/require.js
/assets/js/require.min.js
/assets/js/respond.min.js
/assets/js/sweetalert2.min.js
/assets/js/tagsinput.js
/assets/less
/assets/less/bootstrap
/assets/less/bootstrap-less
/assets/less/fastadmin
/assets/less/skins
/assets/libs
/cos
/db.config.php
/epay
/index.php
/jiage
/ltpay
/pay
/robots.txt
/router.php
/temp
/template
/uploads

Found on 2025-09-20 05:27

Create report

SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 38.148.240.36
Port: 22

First seen 2025-05-23 11:52
Last seen 2025-09-07 23:59
Open for 107 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb53ea6237e8f56bf578f56bf578f56bf578f56bf57
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.13
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2025-09-07 23:59
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb5a7d696c8bb8c345dbb8c345dbb8c345dbb8c345d
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_9.2p1 Debian-2
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2025-05-23 11:52
Create report

Domain summary

cert.xyyidc.com 9

1 recorded

Host 38.148.240.36

United States

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

SSH is potenitally vulnerable

Domain summary