23.231.79.155 | http://23.231.79.155/phpinfo.php 54.177.180.250 | https://54.177.180.250/phpinfo.php http://209.188.15.14 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://209.188.15.14/___proxy_subdomain_whm 209.204.150.73 | http://209.204.150.73/.DS_Store 91.242.252.8 | http://91.242.252.8/phpinfo.php 168.235.117.155 | http://168.235.117.155/phpinfo.php 138.68.49.227 | http://138.68.49.227/.git/HEAD 138.68.49.227 | http://138.68.49.227/.git/config 44.223.111.245 | http://44.223.111.245/.git/config 50.2.22.156 | http://50.2.22.156/phpinfo.php 18.189.120.236 | http://18.189.120.236/.env 68.183.102.229 | http://68.183.102.229/.git/HEAD 68.183.102.229 | http://68.183.102.229/.git/config 18.189.120.236 | http://18.189.120.236/.DS_Store 50.3.127.231 | http://50.3.127.231/phpinfo.php 170.130.92.236 | http://170.130.92.236/phpinfo.php 206.217.129.12 | http://206.217.129.12/phpinfo.php 50.2.22.146 | http://50.2.22.146/phpinfo.php 52.8.153.17 | http://52.8.153.17/.htpasswd http://143.95.37.233 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://143.95.37.233/___proxy_subdomain_whm 50.3.94.251 | http://50.3.94.251/phpinfo.php 24.199.70.194 | http://24.199.70.194/phpinfo.php 34.200.126.127 | https://34.200.126.127/.htpasswd 66.154.77.162 | http://66.154.77.162/phpinfo.php 104.206.101.47 | http://104.206.101.47/phpinfo.php 3.214.243.135 | http://3.214.243.135/.DS_Store 50.2.198.180 | http://50.2.198.180/phpinfo.php 104.165.118.176 | http://104.165.118.176/phpinfo.php 104.165.118.97 | http://104.165.118.97/phpinfo.php 104.206.212.3 | http://104.206.212.3/phpinfo.php 192.185.32.64 | http://192.185.32.64/.DS_Store 3.149.137.162 | http://3.149.137.162/.DS_Store 52.53.229.83 | http://52.53.229.83/.git/HEAD 52.53.229.83 | http://52.53.229.83/.git/config 209.204.149.94 | http://209.204.149.94/phpinfo.php 64.181.211.192 | http://64.181.211.192/phpinfo.php 104.206.179.20 | http://104.206.179.20/phpinfo.php 18.223.53.154 | http://18.223.53.154/.htpasswd http://66.49.202.169 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://66.49.202.169/___proxy_subdomain_whm http://72.167.43.211 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://72.167.43.211/___proxy_subdomain_whm 173.232.221.161 | http://173.232.221.161/phpinfo.php 50.3.152.246 | http://50.3.152.246/phpinfo.php 74.2.128.79 | http://74.2.128.79/.DS_Store 52.86.4.204 | https://52.86.4.204/.htpasswd 50.3.94.135 | http://50.3.94.135/phpinfo.php 99.37.180.43 | http://99.37.180.43/.DS_Store 173.232.165.208 | http://173.232.165.208/phpinfo.php 32.194.109.49 | https://32.194.109.49/.htpasswd 50.2.34.146 | http://50.2.34.146/phpinfo.php 69.169.97.134 | https://69.169.97.134/.DS_Store 170.130.238.130 | http://170.130.238.130/phpinfo.php 104.140.159.190 | http://104.140.159.190/phpinfo.php 45.55.55.91 | http://45.55.55.91/.git/HEAD 45.55.55.91 | http://45.55.55.91/.git/config 52.161.1.17 | http://52.161.1.17/.git/HEAD 52.161.1.17 | http://52.161.1.17/.git/config 3.235.108.116 | http://3.235.108.116/.git/HEAD 3.235.108.116 | http://3.235.108.116/.git/config 108.61.224.51 | http://108.61.224.51/phpinfo.php 160.16.132.168 | http://160.16.132.168/phpinfo.php 50.2.82.76 | http://50.2.82.76/phpinfo.php 23.225.196.90 | http://23.225.196.90/phpinfo.php 173.232.49.50 | http://173.232.49.50/phpinfo.php 162.213.166.62 | http://162.213.166.62/.git/HEAD 162.213.166.62 | http://162.213.166.62/.git/config 68.15.199.130 | http://68.15.199.130/.git/HEAD 68.15.199.130 | http://68.15.199.130/.git/config 134.209.212.66 | http://134.209.212.66/phpinfo.php 34.49.253.42 | http://34.49.253.42/.htpasswd 107.158.184.66 | http://107.158.184.66/phpinfo.php 23.231.67.8 | http://23.231.67.8/phpinfo.php http://67.212.191.167 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://67.212.191.167/___proxy_subdomain_whm 100.55.232.117 | https://100.55.232.117/.htpasswd 50.3.16.170 | http://50.3.16.170/phpinfo.php 50.3.202.160 | http://50.3.202.160/phpinfo.php 69.89.21.243 | http://69.89.21.243/phpinfo.php 24.199.75.14 | http://24.199.75.14/.git/config 24.199.75.14 | http://24.199.75.14/.DS_Store 103.61.22.209 | http://103.61.22.209/phpinfo.php 18.191.250.230 | http://18.191.250.230/.DS_Store http://50.87.199.205 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://50.87.199.205/___proxy_subdomain_whm 198.74.55.220 | http://198.74.55.220/.git/HEAD 198.74.55.220 | http://198.74.55.220/.git/config 153.127.13.139 | http://153.127.13.139/phpinfo.php http://132.148.74.140 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://132.148.74.140/___proxy_subdomain_whm 100.22.158.160 | http://100.22.158.160/.htpasswd 54.86.31.66 | http://54.86.31.66/.git/HEAD 54.86.31.66 | http://54.86.31.66/.git/config 199.87.211.150 | http://199.87.211.150/phpinfo.php 23.90.19.129 | http://23.90.19.129/phpinfo.php 54.221.92.175 | http://54.221.92.175/.git/HEAD 54.221.92.175 | http://54.221.92.175/.git/config 50.118.237.51 | http://50.118.237.51/phpinfo.php 108.181.188.134 | http://108.181.188.134/.git/HEAD 108.181.188.134 | http://108.181.188.134/.git/config 209.23.11.22 | http://209.23.11.22/.DS_Store 50.2.59.238 | http://50.2.59.238/phpinfo.php 173.232.72.36 | http://173.232.72.36/phpinfo.php 50.3.141.203 | http://50.3.141.203/phpinfo.php 3.145.213.101 | http://3.145.213.101/.git/HEAD 185.76.40.99 | http://185.76.40.99/.DS_Store 74.2.147.241 | http://74.2.147.241/.DS_Store 104.206.126.160 | http://104.206.126.160/phpinfo.php 61.155.137.34 | http://61.155.137.34/.htpasswd 84.205.255.6 | http://84.205.255.6/server-status 62.113.230.240 | http://62.113.230.240/phpinfo.php 74.2.128.221 | http://74.2.128.221/.DS_Store 104.140.206.109 | http://104.140.206.109/phpinfo.php 213.92.128.10 | http://213.92.128.10/phpinfo.php 104.206.5.83 | http://104.206.5.83/phpinfo.php 104.131.68.115 | http://104.131.68.115/phpinfo.php 5.71.131.74 | http://5.71.131.74/.DS_Store 193.136.6.228 | http://193.136.6.228/.DS_Store 209.182.201.41 | http://209.182.201.41/phpinfo.php 69.50.141.126 | https://69.50.141.126/.git/HEAD 69.50.141.126 | https://69.50.141.126/.git/config 107.158.135.65 | http://107.158.135.65/phpinfo.php 3.0.58.12 | http://3.0.58.12/.git/HEAD 3.0.58.12 | http://3.0.58.12/.git/config 15.157.110.109 | http://15.157.110.109/phpinfo.php 50.2.74.69 | http://50.2.74.69/phpinfo.php 23.254.232.200 | http://23.254.232.200/phpinfo.php 124.146.216.168 | http://124.146.216.168/.DS_Store 104.165.118.19 | http://104.165.118.19/phpinfo.php 173.232.16.18 | http://173.232.16.18/phpinfo.php 13.59.205.79 | http://13.59.205.79/.htpasswd 34.197.59.84 | https://34.197.59.84/.htpasswd http://216.137.188.92 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://216.137.188.92/___proxy_subdomain_whm 50.2.34.94 | http://50.2.34.94/phpinfo.php 198.46.88.191 | http://198.46.88.191/phpinfo.php 23.231.126.121 | http://23.231.126.121/phpinfo.php http://198.46.88.191 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://198.46.88.191/___proxy_subdomain_whm 3.91.23.15 | http://3.91.23.15/.DS_Store 54.157.117.236 | https://54.157.117.236/.htpasswd http://69.16.197.53 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://69.16.197.53/___proxy_subdomain_whm 107.158.31.139 | http://107.158.31.139/phpinfo.php 94.177.160.31 | http://94.177.160.31/server-status 198.23.177.103 | http://198.23.177.103/phpinfo.php 104.243.18.19 | https://104.243.18.19/.DS_Store 92.107.59.41 | https://92.107.59.41/phpinfo.php 23.23.118.137 | http://23.23.118.137/.git/HEAD 23.23.118.137 | http://23.23.118.137/.git/config http://110.173.133.171 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://110.173.133.171/___proxy_subdomain_whm 74.2.153.220 | http://74.2.153.220/.DS_Store 173.232.222.144 | http://173.232.222.144/phpinfo.php 44.240.175.169 | http://44.240.175.169/phpinfo.php 103.68.159.207 | http://103.68.159.207/.git/HEAD 103.68.159.207 | http://103.68.159.207/.git/config http://49.13.2.231 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://49.13.2.231/___proxy_subdomain_whm http://172.105.192.145 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://172.105.192.145/___proxy_subdomain_whm 50.3.94.139 | http://50.3.94.139/phpinfo.php 45.166.101.184 | http://45.166.101.184/.git/HEAD 45.166.101.184 | http://45.166.101.184/.git/config 45.166.101.184 | http://45.166.101.184/.env 52.24.221.154 | https://52.24.221.154/.htpasswd 173.232.252.231 | http://173.232.252.231/phpinfo.php 170.130.19.247 | http://170.130.19.247/phpinfo.php 170.130.251.95 | http://170.130.251.95/phpinfo.php 147.78.90.97 | http://147.78.90.97/.env 147.78.90.97 | http://147.78.90.97/.env.local 167.71.32.67 | http://167.71.32.67/.git/HEAD 167.71.32.67 | http://167.71.32.67/.git/config 138.201.123.53 | http://138.201.123.53/.DS_Store 167.71.32.67 | http://167.71.32.67/phpinfo.php 61.216.104.249 | http://61.216.104.249/.git/HEAD 61.216.104.249 | http://61.216.104.249/.git/config 159.89.190.5 | http://159.89.190.5/phpinfo.php 88.208.252.228 | http://88.208.252.228/phpinfo.php 170.130.181.41 | http://170.130.181.41/phpinfo.php 104.131.84.129 | http://104.131.84.129/phpinfo.php 50.3.217.38 | http://50.3.217.38/phpinfo.php 3.230.32.236 | http://3.230.32.236/.htpasswd http://143.95.255.13 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://143.95.255.13/___proxy_subdomain_whm 46.62.250.164 | http://46.62.250.164/.DS_Store 87.98.137.235 | http://87.98.137.235/phpinfo.php 83.147.37.89 | http://83.147.37.89/.git/HEAD 83.147.37.89 | http://83.147.37.89/.git/config 44.212.159.87 | http://44.212.159.87:8080/.htpasswd 195.55.40.250 | http://195.55.40.250/phpinfo.php http://89.46.224.206 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://89.46.224.206/___proxy_subdomain_whm 98.95.188.21 | http://98.95.188.21/.git/HEAD 98.95.188.21 | http://98.95.188.21/.git/config 96.8.116.186 | http://96.8.116.186/phpinfo.php 165.232.110.186 | http://165.232.110.186/.DS_Store 45.62.118.249 | https://45.62.118.249/.git/HEAD 45.62.118.249 | https://45.62.118.249/.git/config http://172.81.116.88 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://172.81.116.88/___proxy_subdomain_whm 104.140.10.205 | http://104.140.10.205/phpinfo.php 8.211.33.195 | https://8.211.33.195/.DS_Store 164.92.141.199 | http://164.92.141.199/phpinfo.php 72.77.4.131 | http://72.77.4.131/server-status 23.90.19.61 | http://23.90.19.61/phpinfo.php 173.44.212.242 | http://173.44.212.242/phpinfo.php http://72.167.55.81 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://72.167.55.81/___proxy_subdomain_whm http://162.240.173.151 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://162.240.173.151/___proxy_subdomain_whm 64.81.237.47 | http://64.81.237.47/.DS_Store 146.190.171.92 | http://146.190.171.92/.git/HEAD 146.190.171.92 | http://146.190.171.92/.git/config 23.231.127.226 | http://23.231.127.226/phpinfo.php 50.194.123.146 | https://50.194.123.146/.DS_Store 32.192.12.158 | https://32.192.12.158/.htpasswd 143.198.161.9 | http://143.198.161.9/.DS_Store 67.205.151.209 | http://67.205.151.209/.DS_Store 50.2.53.149 | http://50.2.53.149/phpinfo.php 79.214.143.141 | https://79.214.143.141/server-status 50.2.240.34 | http://50.2.240.34/phpinfo.php 194.195.214.211 | http://194.195.214.211/phpinfo.php 54.246.2.52 | http://54.246.2.52/.env http://51.79.42.159 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://51.79.42.159/___proxy_subdomain_whm 23.90.19.34 | http://23.90.19.34/phpinfo.php 104.140.92.26 | http://104.140.92.26/phpinfo.php 64.81.236.177 | http://64.81.236.177/.DS_Store 45.120.207.137 | http://45.120.207.137/phpinfo.php 54.224.39.177 | http://54.224.39.177/.DS_Store 104.140.159.126 | http://104.140.159.126/phpinfo.php 50.2.199.213 | http://50.2.199.213/phpinfo.php 161.132.40.100 | http://161.132.40.100/.DS_Store 85.229.135.13 | http://85.229.135.13/.DS_Store 104.206.200.190 | http://104.206.200.190/phpinfo.php 211.118.238.180 | http://211.118.238.180/.DS_Store 170.130.13.163 | http://170.130.13.163/phpinfo.php 45.92.111.102 | http://45.92.111.102/server-status http://45.158.28.95 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://45.158.28.95/___proxy_subdomain_whm 52.2.254.82 | http://52.2.254.82/phpinfo.php 107.158.71.239 | http://107.158.71.239/phpinfo.php 173.232.252.131 | http://173.232.252.131/phpinfo.php 98.89.52.206 | https://98.89.52.206/.htpasswd 153.246.205.119 | http://153.246.205.119/server-status 35.190.11.127 | http://35.190.11.127/.git/HEAD 35.190.11.127 | http://35.190.11.127/.git/config 38.91.58.84 | http://38.91.58.84/.git/HEAD 38.91.58.84 | http://38.91.58.84/.git/config 209.73.135.138 | http://209.73.135.138/phpinfo.php 100.55.142.33 | http://100.55.142.33/.git/HEAD 100.55.142.33 | http://100.55.142.33/.git/config 107.158.167.22 | http://107.158.167.22/phpinfo.php 52.203.4.123 | http://52.203.4.123/server-status 52.203.4.123 | http://52.203.4.123/.DS_Store 188.245.249.213 | https://188.245.249.213/.git/HEAD 188.245.249.213 | https://188.245.249.213/.git/config 34.226.26.16 | https://34.226.26.16/.htpasswd 91.238.73.214 | http://91.238.73.214/phpinfo.php http://173.231.207.11 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://173.231.207.11/___proxy_subdomain_whm http://20.204.131.148 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://20.204.131.148/___proxy_subdomain_whm 62.109.15.248 | http://62.109.15.248/phpinfo.php 50.2.199.217 | http://50.2.199.217/phpinfo.php 84.247.160.195 | http://84.247.160.195/config.php 18.118.47.9 | http://18.118.47.9/phpinfo.php 173.232.11.231 | http://173.232.11.231/phpinfo.php 104.206.69.147 | http://104.206.69.147/phpinfo.php 45.76.111.186 | https://45.76.111.186/.git/HEAD 45.76.111.186 | https://45.76.111.186/.git/config 50.3.75.18 | http://50.3.75.18/phpinfo.php 65.182.101.75 | http://65.182.101.75/phpinfo.php 34.136.141.47 | http://34.136.141.47/.git/HEAD 34.136.141.47 | http://34.136.141.47/.git/config 157.245.150.151 | http://157.245.150.151/.git/HEAD http://205.134.253.72 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://205.134.253.72/___proxy_subdomain_whm 191.13.225.81 | http://191.13.225.81/server-status https://64.20.46.58 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://64.20.46.58/___proxy_subdomain_whm 8.133.200.231 | https://8.133.200.231/.htpasswd 31.222.98.45 | http://31.222.98.45/.DS_Store 192.119.108.102 | http://192.119.108.102/phpinfo.php http://192.119.108.102 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://192.119.108.102/___proxy_subdomain_whm 170.130.145.6 | http://170.130.145.6/phpinfo.php 173.44.253.191 | http://173.44.253.191/phpinfo.php 154.9.33.90 | http://154.9.33.90/server-status 206.214.85.109 | http://206.214.85.109/phpinfo.php 34.84.194.188 | http://34.84.194.188/phpinfo.php 85.235.139.53 | https://85.235.139.53/.git/HEAD 85.235.139.53 | https://85.235.139.53/.git/config 104.140.206.132 | http://104.140.206.132/phpinfo.php 50.3.247.119 | http://50.3.247.119/phpinfo.php 35.203.59.17 | http://35.203.59.17/phpinfo.php 148.135.19.79 | https://148.135.19.79/.git/HEAD 148.135.19.79 | https://148.135.19.79/.git/config 213.81.168.38 | http://213.81.168.38/.git/HEAD 213.81.168.38 | http://213.81.168.38/.git/config 139.59.91.80 | http://139.59.91.80/.DS_Store 134.119.214.182 | http://134.119.214.182/.git/HEAD http://104.247.73.54 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://104.247.73.54/___proxy_subdomain_whm 40.74.53.220 | http://40.74.53.220/server-status 50.3.66.157 | http://50.3.66.157/phpinfo.php 104.206.101.68 | http://104.206.101.68/phpinfo.php 37.113.128.122 | http://37.113.128.122/.DS_Store 35.185.14.248 | http://35.185.14.248/.git/HEAD 166.1.190.114 | http://166.1.190.114/.DS_Store http://203.161.48.228 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://203.161.48.228/___proxy_subdomain_whm 47.103.10.124 | https://47.103.10.124/.htpasswd 34.27.48.124 | http://34.27.48.124/.htpasswd http://129.121.22.65 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://129.121.22.65/___proxy_subdomain_whm 175.41.30.150 | http://175.41.30.150/phpinfo.php 188.245.52.120 | http://188.245.52.120:8080/.htpasswd 185.183.182.56 | http://185.183.182.56/.DS_Store 109.68.213.136 | http://109.68.213.136/.env 104.252.29.40 | http://104.252.29.40/phpinfo.php 104.206.64.3 | http://104.206.64.3/phpinfo.php http://144.217.241.66 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://144.217.241.66/___proxy_subdomain_whm 217.216.32.190 | http://217.216.32.190/.htpasswd 122.51.12.27 | http://122.51.12.27/.git/config 50.116.46.119 | http://50.116.46.119/phpinfo.php 207.154.227.20 | http://207.154.227.20/wp-config.php 23.231.66.19 | http://23.231.66.19/phpinfo.php 170.130.232.2 | http://170.130.232.2/phpinfo.php 46.244.202.32 | http://46.244.202.32/.DS_Store 159.65.78.18 | http://159.65.78.18/.htpasswd 109.169.61.136 | http://109.169.61.136/.git/HEAD 109.169.61.136 | http://109.169.61.136/.git/config 116.62.27.80 | https://116.62.27.80/.git/HEAD 201.158.38.250 | http://201.158.38.250/phpinfo.php 74.2.135.46 | http://74.2.135.46/.DS_Store 160.16.107.53 | http://160.16.107.53/phpinfo.php 107.174.100.204 | http://107.174.100.204/phpinfo.php 167.235.111.87 | https://167.235.111.87/.htpasswd http://199.91.65.85 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://199.91.65.85/___proxy_subdomain_whm 107.158.11.112 | http://107.158.11.112/phpinfo.php 153.122.104.240 | http://153.122.104.240/phpinfo.php 23.231.42.172 | http://23.231.42.172/phpinfo.php 50.3.16.191 | http://50.3.16.191/phpinfo.php 170.130.93.28 | http://170.130.93.28/phpinfo.php 159.75.102.239 | https://159.75.102.239/.htpasswd 101.100.240.42 | http://101.100.240.42/phpinfo.php 121.41.35.72 | http://121.41.35.72/.DS_Store 170.130.230.101 | http://170.130.230.101/phpinfo.php 50.2.249.24 | http://50.2.249.24/phpinfo.php 99.33.57.180 | https://99.33.57.180/.git/config 82.146.36.22 | http://82.146.36.22/.git/HEAD 107.158.50.85 | http://107.158.50.85/phpinfo.php 173.232.142.102 | http://173.232.142.102/phpinfo.php 64.81.235.65 | http://64.81.235.65/.DS_Store 61.205.226.188 | http://61.205.226.188/server-status 69.42.50.22 | http://69.42.50.22/phpinfo.php 93.99.174.63 | http://93.99.174.63/.DS_Store 167.17.134.160 | http://167.17.134.160/.htpasswd 50.2.198.125 | http://50.2.198.125/phpinfo.php 133.18.31.247 | http://133.18.31.247/phpinfo.php http://46.250.246.228 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://46.250.246.228/___proxy_subdomain_whm 43.239.249.134 | http://43.239.249.134/phpinfo.php 117.102.213.44 | http://117.102.213.44/server-status 34.117.157.247 | http://34.117.157.247/.htpasswd 50.3.27.149 | http://50.3.27.149/phpinfo.php 23.231.74.99 | http://23.231.74.99/phpinfo.php 173.44.252.72 | http://173.44.252.72/phpinfo.php 160.16.232.192 | http://160.16.232.192/.env 173.232.236.191 | http://173.232.236.191/phpinfo.php 199.115.218.91 | http://199.115.218.91/.DS_Store 192.241.204.210 | http://192.241.204.210/.git/HEAD 192.241.204.210 | http://192.241.204.210/.git/config 39.107.234.187 | http://39.107.234.187/wp-config.php 59.124.221.137 | http://59.124.221.137/phpinfo.php 160.7.50.30 | http://160.7.50.30/.DS_Store 77.83.143.24 | http://77.83.143.24/.git/HEAD 77.83.143.24 | http://77.83.143.24/.git/config 103.58.149.14 | http://103.58.149.14/.htpasswd 51.158.72.253 | http://51.158.72.253/.env 147.45.108.129 | https://147.45.108.129/.DS_Store 173.232.88.25 | http://173.232.88.25/phpinfo.php 20.83.42.23 | https://20.83.42.23/.htpasswd 104.254.191.204 | http://104.254.191.204/.DS_Store 173.232.135.150 | http://173.232.135.150/phpinfo.php 104.206.114.47 | http://104.206.114.47/phpinfo.php 47.181.201.236 | http://47.181.201.236/.DS_Store 172.233.185.77 | http://172.233.185.77/.git/HEAD 172.233.185.77 | http://172.233.185.77/.git/config 172.233.185.77 | http://172.233.185.77/.DS_Store 172.81.180.179 | http://172.81.180.179/phpinfo.php 23.231.57.212 | http://23.231.57.212/phpinfo.php 23.231.82.24 | http://23.231.82.24/phpinfo.php 104.206.126.91 | http://104.206.126.91/phpinfo.php 91.98.120.113 | http://91.98.120.113/.git/HEAD 91.98.120.113 | http://91.98.120.113/.git/config 64.250.32.195 | http://64.250.32.195/.git/HEAD 83.144.164.45 | http://83.144.164.45/.env 107.158.88.186 | http://107.158.88.186/phpinfo.php http://191.252.143.251 | CVE-2026-41940 [PROBABLE] | cPanel/WHM CRLF inject (token:cpsess9999999999 [static(nuclei)], payload:nuclei) — stage4 inconclus | https://191.252.143.251/___proxy_subdomain_whm 202.138.248.38 | http://202.138.248.38/.git/config 104.140.236.190 | http://104.140.236.190/phpinfo.php 168.119.50.46 | http://168.119.50.46/phpinfo.php 185.187.157.38 | http://185.187.157.38/.htpasswd