GET /58pic/showPic.php img_url Parameter SSRF

[attritionorg]

plutus.ias.cs.tu-bs.de (134.169.32.26) - - [09/Aug/2022:19:01:31 -0400] "GET /58pic/showPic.php?img_url=https%3A%2F%2Fdad8708a-c6d7-4aad-a5d1-7d42030a1d75.surf.ias-lab.de HTTP/1.1" 404 741 "surf.ias-lab.de" "scalaj-http/2.4.2"

Nine showPic.php hits in VulnDB but zero SSRF
https://bbs.ftafg.cn/api/58pic/inde.php Qiantu.com api.56lx.cn/api/58pic/showPic.php
Either site-specific (likely) or possible zero-day.

https://github.com/iqiqiya/iqiqiya-API/blob/master/58pic/api.php
iqiqiya/iqiqiya-API#28 Asked for sec contact Aug 9
But: This repository has been archived by the owner on Mar 30, 2024.
And no reply...