nginx 1.23.4
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c668fcbec668fcbecbebd11f0c447e11b1f5eb630f5769956
Found 17 files trough .DS_Store spidering: /app /app/Http /app/Http/Controllers /bootstrap /config /controllers /database /lang /middlewares /node_modules /public /resources /routes /sessions /storage /tests /vendor
Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbeb528917e748c93f119252f160a87e254
Found 15 files trough .DS_Store spidering: /app /bootstrap /config /controllers /database /lang /middlewares /node_modules /public /resources /routes /sessions /storage /tests /vendor
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c668fcbec668fcbecbebd11f0c447e11b1f5eb630f5769956
Found 17 files trough .DS_Store spidering: /app /app/Http /app/Http/Controllers /bootstrap /config /controllers /database /lang /middlewares /node_modules /public /resources /routes /sessions /storage /tests /vendor
Open service 45.113.122.95:443 · app.protemplatebase.com
2026-01-23 16:18
HTTP/1.1 200 OK Date: Fri, 23 Jan 2026 16:18:45 GMT Server: nginx/1.23.4 Content-Type: text/html; charset=UTF-8 Cache-Control: no-cache, private Vary: Accept-Encoding X-Server-Cache: true X-Proxy-Cache: MISS Set-Cookie: XSRF-TOKEN=eyJpdiI6IjlJcllxZGI3dTNNOXB1bk5JYmhHZWc9PSIsInZhbHVlIjoiYldaMWxIOVp0eUVBZzNZcVdMTjA5TjlxNXBKSUZ1SkxUdWRFU0RGZkF4S1NwTHVrMlBhNGxrY1hoaGNOQ202dXo5VlJscDhvbUVCQXNPZnZWYTZiOFEyQ1BwRHY2K0hNUEtneHJNbjZVQ01MZDZLUHpLLy9HdkRUSVYwNHdPSjIiLCJtYWMiOiIwNGM3ODU4M2FiNjczNjdlZTFiYzJhNDY0N2FiM2NmNTk1MGEwOWQ1ZmYxNDc2ZDQ5YTVkYjg0NWIzYTFlZDEyIiwidGFnIjoiIn0%3D; expires=Fri, 23 Jan 2026 18:18:45 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: protemplatebase_session=eyJpdiI6InZOYkxOdk5EakRtZEg4V2VhaTZucWc9PSIsInZhbHVlIjoicUNQSVpLdUtBZld2dE9LWlhrekI1QkRrTWxrdVlxNU80QjNXTWJ0R2dmYzVEWGJuSzA3cXdWMFJPc1pDZXRRaEVlNGFSYzhZMmQvMjE3WkFpOWk3Z1Nwb0swajlXK0RyQWNyclRFS3lGQTFqRjRQQzc1UjJjVm0xV0J0TjJTWGkiLCJtYWMiOiIxMzBiNDMwYjE4ZDM4YjY3ZWFkZjk5YmZhZDI0NjA4MWYzYzlkY2Y2NzNiN2RjZTRkMWU2NjNlNWQ3YTYwMjQxIiwidGFnIjoiIn0%3D; expires=Fri, 23 Jan 2026 18:18:45 GMT; Max-Age=7200; path=/; httponly; samesite=lax Transfer-Encoding: chunked
Open service 45.113.122.95:443 · www.app.protemplatebase.com
2026-01-23 01:42
HTTP/1.1 200 OK Date: Fri, 23 Jan 2026 01:42:37 GMT Server: nginx/1.23.4 Content-Type: text/html; charset=UTF-8 Cache-Control: no-cache, private Vary: Accept-Encoding X-Server-Cache: true X-Proxy-Cache: MISS Set-Cookie: XSRF-TOKEN=eyJpdiI6ImUrU0JpeTJoV2lQNm10Qis2M1B4NVE9PSIsInZhbHVlIjoiVWxkUkFQY0F1YXp5ek9iRUkrUjNUZDliYjJjTHkyZEpIT2hobXZVRmQyR1M1djVhS1dOcGtsTFA1cDd3eHg4TEZrczlBMlAzRjdkSlVHZHN0cm0xMHBrNzNvNFBQaks2WjJ2WDZadnpjbng5MXRBRXVyWVAvb1VmZEJqb3lRNEoiLCJtYWMiOiI3MGYxMGRjNDA3MWIzZmNmYTZlZDBjYjZlNGVhYmM1ZTJmODY5ZjI0MTMzNDY2ZjE2ZTk5ZDgwOWUwZTE4NjU1IiwidGFnIjoiIn0%3D; expires=Fri, 23 Jan 2026 03:42:37 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: protemplatebase_session=eyJpdiI6IkgvU2Fodk4ranlvMzhJK3ZVUC9RSlE9PSIsInZhbHVlIjoiVmo5SzdwZnhRa3FkTzNDelQyNjQxU3dIdk83eTQ2L3NDNlJ2a2JTR2w2Tm4vWG1YdnZVNk10ckc1bUxaTWtHTmROWjRsRTRDOFROWUNCQ2FKbUxrdTZManFzV3FWK2pqYTkwc2hNRDgwdEppUGxkcjlqa3F5YlprOHUvcHpDRlgiLCJtYWMiOiIyZGRhMzcwYzgxNjFiZWJlNGUwMTBjZTg3YTRjNThjYzk4MGZlNWViZWQ2MWU3ZjIxOTAzNjMxYTA4ZDMwYzZiIiwidGFnIjoiIn0%3D; expires=Fri, 23 Jan 2026 03:42:37 GMT; Max-Age=7200; path=/; httponly; samesite=lax Transfer-Encoding: chunked