Heroku
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733f93b77d9b240ac757bb18cb8317310bd8
Found 10 files trough .DS_Store spidering: /404.html /422.html /blank.png /confirmation.html /favicon.ico /packs /portraits /pulse.svg /spinner.svg /tangrams
Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772159855a0eb5bbe5662f82d32553b6d83
Found 11 files trough .DS_Store spidering: /404.html /422.html /assets /blank.png /confirmation.html /favicon.ico /packs /portraits /pulse.svg /spinner.svg /tangrams
Severity: low
Fingerprint: 5f32cf5d6962f09cc169dbbec169dbbecc9a916cd8c9f71acf8ba7e20494e8c1
Found 15 files trough .DS_Store spidering: /404.html /422.html /blank.png /confirmation.html /default_user_photos /favicon.ico /loading.svg /packs /portraits /pulse.svg /robot.png /robot_party.png /spinner.svg /tangrams /users.png
Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b92705af73eecf6fb46614f27bdec08ce
Found 14 files trough .DS_Store spidering: /404.html /422.html /blank.png /confirmation.html /default_user_photos /favicon.ico /loading.svg /packs /portraits /pulse.svg /robot.png /robot_party.png /spinner.svg /users.png
Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772159855a0eb5bbe56c4dd573e1faf1b33
Found 11 files trough .DS_Store spidering: /404.html /422.html /blank.png /confirmation.html /default_user_photos /favicon.ico /loading.svg /packs /pulse.svg /spinner.svg /users.png
Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d186028152d5242d54a8f504345e165e2
Found 12 files trough .DS_Store spidering: /404.html /422.html /assets /blank.png /confirmation.html /default_user_photos /favicon.ico /loading.svg /packs /pulse.svg /spinner.svg /users.png
Open service 54.204.238.15:443 · app.videonow.io
2026-01-09 20:57
HTTP/1.1 302 Found
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; charset=utf-8
Feature-Policy: geolocation 'self'; camera 'none'; microphone 'none'; usb 'none'; fullscreen 'self'; payment 'self'
Location: https://app.videonow.io/organizations/videonow/deactivated
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=GihiagPS%2FQgLG6uLfPx1Gedylc%2BaOYd%2BB47CbrNgHOk%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767992274"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=GihiagPS%2FQgLG6uLfPx1Gedylc%2BaOYd%2BB47CbrNgHOk%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767992274"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: c1077c70-11a1-5a70-bb27-0c1dd2cb08bc
X-Runtime: 0.010417
X-Xss-Protection: 0
Date: Fri, 09 Jan 2026 20:57:54 GMT
Connection: close
Open service 54.204.238.15:443 · app.videonow.io
2026-01-02 16:32
HTTP/1.1 302 Found
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; charset=utf-8
Feature-Policy: geolocation 'self'; camera 'none'; microphone 'none'; usb 'none'; fullscreen 'self'; payment 'self'
Location: https://app.videonow.io/organizations/videonow/deactivated
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=BzJSEKhUJWXdoljtyQ2y9rNZZVzzC%2FdHMih%2Bz78O1n8%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767371521"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=BzJSEKhUJWXdoljtyQ2y9rNZZVzzC%2FdHMih%2Bz78O1n8%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767371521"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: b740f622-a9eb-c360-f805-9e3911dc99ec
X-Runtime: 0.008596
X-Xss-Protection: 0
Date: Fri, 02 Jan 2026 16:32:01 GMT
Connection: close
Open service 54.204.238.15:443 · app.videonow.io
2025-12-23 06:13
HTTP/1.1 302 Found
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; charset=utf-8
Feature-Policy: geolocation 'self'; camera 'none'; microphone 'none'; usb 'none'; fullscreen 'self'; payment 'self'
Location: https://app.videonow.io/organizations/videonow/deactivated
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=7oDPLQ83MpAeg7XkobS1BbALsaP7kIT74mYmmzT2tNM%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766470403"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=7oDPLQ83MpAeg7XkobS1BbALsaP7kIT74mYmmzT2tNM%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766470403"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 93b4e4b9-b92e-ff51-c51c-9f875b230f98
X-Runtime: 0.016019
X-Xss-Protection: 0
Date: Tue, 23 Dec 2025 06:13:23 GMT
Connection: close
Open service 54.204.238.15:443 · app.videonow.io
2025-12-20 23:31
HTTP/1.1 302 Found
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; charset=utf-8
Feature-Policy: geolocation 'self'; camera 'none'; microphone 'none'; usb 'none'; fullscreen 'self'; payment 'self'
Location: https://app.videonow.io/organizations/videonow/deactivated
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2FUEF1gEHjIPG8NMJBIdkiwia2krRDoJ55M%2FFyH2Rm78%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766273482"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2FUEF1gEHjIPG8NMJBIdkiwia2krRDoJ55M%2FFyH2Rm78%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766273482"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: ecc2fbae-b134-16cd-9e5e-ffdaf942feec
X-Runtime: 0.051143
X-Xss-Protection: 0
Date: Sat, 20 Dec 2025 23:31:22 GMT
Connection: close
Open service 54.204.238.15:443 · app.videonow.io
2025-12-19 01:02
HTTP/1.1 302 Found
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; charset=utf-8
Feature-Policy: geolocation 'self'; camera 'none'; microphone 'none'; usb 'none'; fullscreen 'self'; payment 'self'
Location: https://app.videonow.io/organizations/videonow/deactivated
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=rvVoV4XJtwlUT9KjY%2FOxZtdYVzdLY%2FwScU42dNGfZ%2Bc%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766106136"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=rvVoV4XJtwlUT9KjY%2FOxZtdYVzdLY%2FwScU42dNGfZ%2Bc%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766106136"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 16a4fd30-0a10-1dd2-5b72-b15d71c8667d
X-Runtime: 0.011178
X-Xss-Protection: 0
Date: Fri, 19 Dec 2025 01:02:16 GMT
Connection: close