nginx
tcp/443 tcp/80
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: medium
Fingerprint: 5f32cf5d6962f09c8051bd0c8051bd0c8abe8f0503bb1b596d8d5dcb5d2214d4
Found 66 files trough .DS_Store spidering: /.htaccess /app /app/controllers /app/controllers/Account.php /app/controllers/AccountDelete.php /app/controllers/AccountLogs.php /app/controllers/AccountPayments.php /app/controllers/AccountPlan.php /app/controllers/ActivateUser.php /app/controllers/admin /app/controllers/admin-api /app/controllers/api /app/controllers/Cron.php /app/controllers/Dashboard.php /app/controllers/Domains.php /app/controllers/Index.php /app/controllers/Invoice.php /app/controllers/l /app/controllers/Link.php /app/controllers/LinkAjax.php /app/controllers/Links.php /app/controllers/Login.php /app/controllers/Logout.php /app/controllers/LostPassword.php /app/controllers/NotFound.php /app/controllers/Page.php /app/controllers/Pages.php /app/controllers/Pay.php /app/controllers/PayThankYou.php /app/controllers/Plan.php /app/controllers/Projects.php /app/controllers/Register.php /app/controllers/ResendActivation.php /app/controllers/ResetPassword.php /app/controllers/Sitemap.php /app/controllers/WebhookPaypal.php /app/controllers/WebhookStripe.php /app/core /app/helpers /app/helpers/payment-gateways /app/helpers/qr-codes /app/includes /app/init.php /app/languages /app/languages/admin /app/models /app/traits /config.php /index.php /install /plugins /plugins/affiliate /plugins/aix /plugins/email-signatures /plugins/image-optimizer /plugins/offload /plugins/payment-blocks /plugins/pro-blocks /plugins/push-notifications /plugins/pwa /plugins/teams /plugins/ultimate-blocks /themes /update /uploads /vendor
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: medium
Fingerprint: 5f32cf5d6962f09cff76d438ff76d4389aa55c51ad450dad1a8595178a6e26da
Found 93 files trough .DS_Store spidering: /.htaccess /app /app/controllers /app/controllers/Account.php /app/controllers/AccountDelete.php /app/controllers/AccountLogs.php /app/controllers/AccountPayments.php /app/controllers/AccountPlan.php /app/controllers/ActivateUser.php /app/controllers/admin /app/controllers/admin-api /app/controllers/api /app/controllers/Cron.php /app/controllers/Dashboard.php /app/controllers/Domains.php /app/controllers/Index.php /app/controllers/Invoice.php /app/controllers/l /app/controllers/Link.php /app/controllers/LinkAjax.php /app/controllers/Links.php /app/controllers/Login.php /app/controllers/Logout.php /app/controllers/LostPassword.php /app/controllers/NotFound.php /app/controllers/Page.php /app/controllers/Pages.php /app/controllers/Pay.php /app/controllers/PayThankYou.php /app/controllers/Plan.php /app/controllers/Projects.php /app/controllers/Register.php /app/controllers/ResendActivation.php /app/controllers/ResetPassword.php /app/controllers/Sitemap.php /app/controllers/WebhookPaypal.php /app/controllers/WebhookStripe.php /app/core /app/helpers /app/helpers/payment-gateways /app/helpers/qr-codes /app/includes /app/init.php /app/languages /app/languages/admin /app/models /app/traits /config.php /index.php /install /plugins /plugins/affiliate /plugins/aix /plugins/email-signatures /plugins/image-optimizer /plugins/offload /plugins/offload/aws /plugins/offload/aws/GuzzleHttp /plugins/offload/aws/GuzzleHttp/Cookie /plugins/offload/aws/GuzzleHttp/Exception /plugins/offload/aws/GuzzleHttp/Handler /plugins/offload/aws/GuzzleHttp/Promise /plugins/offload/aws/GuzzleHttp/Psr7 /plugins/payment-blocks /plugins/payment-blocks/views /plugins/pro-blocks /plugins/pro-blocks/init.php /plugins/push-notifications /plugins/push-notifications/aws /plugins/pwa /plugins/teams /plugins/ultimate-blocks /plugins/ultimate-blocks/views /plugins/ultimate-blocks/views/l /plugins/ultimate-blocks/views/l/biolink_blocks /themes /themes/altum /themes/altum/assets /themes/altum/assets/css /themes/altum/assets/css/custom-bootstrap /themes/altum/assets/css/libraries /themes/altum/assets/images /themes/altum/assets/images/browsers /themes/altum/assets/images/countries /themes/altum/assets/images/email /themes/altum/assets/images/index /themes/altum/assets/images/os /themes/altum/assets/js /themes/altum/assets/scss /themes/altum/views /update /uploads /vendor
Open service 217.154.10.21:443 · app.vrecpros.com
2026-01-08 19:43
HTTP/1.1 303 See Other Server: nginx Date: Thu, 08 Jan 2026 19:43:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Fri, 28 May 1999 00:00:00 GMT Last-Modified: Thu, 08 Jan 2026 19:43:29 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Location: https://app.vrecpros.com:443/login.php X-Content-Type-Options: nosniff
Open service 217.154.10.21:80 · app.vrecpros.com
2026-01-08 19:04
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 08 Jan 2026 19:04:29 GMT
Content-Type: text/html
Content-Length: 1658
Connection: close
Last-Modified: Wed, 15 Jan 2025 16:34:26 GMT
ETag: "67a-62bc140328880"
Accept-Ranges: bytes
Vary: Accept-Encoding
Page title: Web Server's Default Page
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Web Server's Default Page</title>
<meta name="copyright" content="Copyright 1999-2025. WebPros International GmbH. All rights reserved.">
<script src="https://assets.plesk.com/static/default-website-content/public/default-server-index.js"></script>
</head>
<body>
<h2>What is Plesk</h2>
<p>
Plesk is a <a href="https://www.plesk.com">hosting panel</a> with simple and secure web server, website and web apps management tools. It is specially designed to help web professionals manage web, DNS, mail and other services through a comprehensive and user-friendly GUI. Plesk is about intelligently managing servers, apps, websites and hosting businesses, on both traditional and cloud hosting.
</p>
<p>
<a href="https://docs.plesk.com/try-plesk-now/">Try Plesk Now!</a>
</p>
<ul>
<li><a href="https://docs.plesk.com/en-US/obsidian/">Plesk Guides</a></li>
<li><a href="https://support.plesk.com/hc/en-us">Knowledge Base</a></li>
<li><a href="https://talk.plesk.com/">Forum</a></li>
<li><a href="https://www.plesk.com/blog/">Blog</a></li>
<li><a href="https://www.youtube.com/channel/UCeU-_6YHGQFcVSHLbEXLNlA/playlists">Video Guides</a></li>
<li><a href="https://www.facebook.com/Plesk">Facebook</a></li>
</ul>
<p>Do you host WordPress sites outside of Plesk? Try <a href="https://wpguardian.io/">WP Guardian</a> - it provides complete visibility into the health of your WordPress websites in one place and keeps them protected with flexible updates management</p>
</body>
</html>
Open service 217.154.10.21:443 · app.vrecpros.com
2026-01-01 20:14
HTTP/1.1 303 See Other Server: nginx Date: Thu, 01 Jan 2026 20:14:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Fri, 28 May 1999 00:00:00 GMT Last-Modified: Thu, 01 Jan 2026 20:14:44 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Location: https://app.vrecpros.com:443/login.php X-Content-Type-Options: nosniff
Open service 217.154.10.21:80 · app.vrecpros.com
2026-01-01 19:56
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Jan 2026 19:56:40 GMT
Content-Type: text/html
Content-Length: 1658
Connection: close
Last-Modified: Wed, 15 Jan 2025 16:34:26 GMT
ETag: "67a-62bc140328880"
Accept-Ranges: bytes
Vary: Accept-Encoding
Page title: Web Server's Default Page
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Web Server's Default Page</title>
<meta name="copyright" content="Copyright 1999-2025. WebPros International GmbH. All rights reserved.">
<script src="https://assets.plesk.com/static/default-website-content/public/default-server-index.js"></script>
</head>
<body>
<h2>What is Plesk</h2>
<p>
Plesk is a <a href="https://www.plesk.com">hosting panel</a> with simple and secure web server, website and web apps management tools. It is specially designed to help web professionals manage web, DNS, mail and other services through a comprehensive and user-friendly GUI. Plesk is about intelligently managing servers, apps, websites and hosting businesses, on both traditional and cloud hosting.
</p>
<p>
<a href="https://docs.plesk.com/try-plesk-now/">Try Plesk Now!</a>
</p>
<ul>
<li><a href="https://docs.plesk.com/en-US/obsidian/">Plesk Guides</a></li>
<li><a href="https://support.plesk.com/hc/en-us">Knowledge Base</a></li>
<li><a href="https://talk.plesk.com/">Forum</a></li>
<li><a href="https://www.plesk.com/blog/">Blog</a></li>
<li><a href="https://www.youtube.com/channel/UCeU-_6YHGQFcVSHLbEXLNlA/playlists">Video Guides</a></li>
<li><a href="https://www.facebook.com/Plesk">Facebook</a></li>
</ul>
<p>Do you host WordPress sites outside of Plesk? Try <a href="https://wpguardian.io/">WP Guardian</a> - it provides complete visibility into the health of your WordPress websites in one place and keeps them protected with flexible updates management</p>
</body>
</html>
Open service 217.154.10.21:443 · app.vrecpros.com
2025-12-30 04:22
HTTP/1.1 303 See Other Server: nginx Date: Tue, 30 Dec 2025 04:22:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Fri, 28 May 1999 00:00:00 GMT Last-Modified: Tue, 30 Dec 2025 04:22:42 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Location: https://app.vrecpros.com:443/login.php X-Content-Type-Options: nosniff
Open service 217.154.10.21:80 · app.vrecpros.com
2025-12-30 04:03
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 30 Dec 2025 04:03:14 GMT
Content-Type: text/html
Content-Length: 1658
Connection: close
Last-Modified: Wed, 15 Jan 2025 16:34:26 GMT
ETag: "67a-62bc140328880"
Accept-Ranges: bytes
Vary: Accept-Encoding
Page title: Web Server's Default Page
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Web Server's Default Page</title>
<meta name="copyright" content="Copyright 1999-2025. WebPros International GmbH. All rights reserved.">
<script src="https://assets.plesk.com/static/default-website-content/public/default-server-index.js"></script>
</head>
<body>
<h2>What is Plesk</h2>
<p>
Plesk is a <a href="https://www.plesk.com">hosting panel</a> with simple and secure web server, website and web apps management tools. It is specially designed to help web professionals manage web, DNS, mail and other services through a comprehensive and user-friendly GUI. Plesk is about intelligently managing servers, apps, websites and hosting businesses, on both traditional and cloud hosting.
</p>
<p>
<a href="https://docs.plesk.com/try-plesk-now/">Try Plesk Now!</a>
</p>
<ul>
<li><a href="https://docs.plesk.com/en-US/obsidian/">Plesk Guides</a></li>
<li><a href="https://support.plesk.com/hc/en-us">Knowledge Base</a></li>
<li><a href="https://talk.plesk.com/">Forum</a></li>
<li><a href="https://www.plesk.com/blog/">Blog</a></li>
<li><a href="https://www.youtube.com/channel/UCeU-_6YHGQFcVSHLbEXLNlA/playlists">Video Guides</a></li>
<li><a href="https://www.facebook.com/Plesk">Facebook</a></li>
</ul>
<p>Do you host WordPress sites outside of Plesk? Try <a href="https://wpguardian.io/">WP Guardian</a> - it provides complete visibility into the health of your WordPress websites in one place and keeps them protected with flexible updates management</p>
</body>
</html>
Open service 217.154.10.21:443 · app.vrecpros.com
2025-12-22 05:09
HTTP/1.1 303 See Other Server: nginx Date: Mon, 22 Dec 2025 05:09:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Fri, 28 May 1999 00:00:00 GMT Last-Modified: Mon, 22 Dec 2025 05:09:21 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Location: https://app.vrecpros.com:443/login.php X-Content-Type-Options: nosniff
Open service 217.154.10.21:80 · app.vrecpros.com
2025-12-22 04:47
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 Dec 2025 04:47:30 GMT
Content-Type: text/html
Content-Length: 1658
Connection: close
Last-Modified: Wed, 15 Jan 2025 16:34:26 GMT
ETag: "67a-62bc140328880"
Accept-Ranges: bytes
Vary: Accept-Encoding
Page title: Web Server's Default Page
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Web Server's Default Page</title>
<meta name="copyright" content="Copyright 1999-2025. WebPros International GmbH. All rights reserved.">
<script src="https://assets.plesk.com/static/default-website-content/public/default-server-index.js"></script>
</head>
<body>
<h2>What is Plesk</h2>
<p>
Plesk is a <a href="https://www.plesk.com">hosting panel</a> with simple and secure web server, website and web apps management tools. It is specially designed to help web professionals manage web, DNS, mail and other services through a comprehensive and user-friendly GUI. Plesk is about intelligently managing servers, apps, websites and hosting businesses, on both traditional and cloud hosting.
</p>
<p>
<a href="https://docs.plesk.com/try-plesk-now/">Try Plesk Now!</a>
</p>
<ul>
<li><a href="https://docs.plesk.com/en-US/obsidian/">Plesk Guides</a></li>
<li><a href="https://support.plesk.com/hc/en-us">Knowledge Base</a></li>
<li><a href="https://talk.plesk.com/">Forum</a></li>
<li><a href="https://www.plesk.com/blog/">Blog</a></li>
<li><a href="https://www.youtube.com/channel/UCeU-_6YHGQFcVSHLbEXLNlA/playlists">Video Guides</a></li>
<li><a href="https://www.facebook.com/Plesk">Facebook</a></li>
</ul>
<p>Do you host WordPress sites outside of Plesk? Try <a href="https://wpguardian.io/">WP Guardian</a> - it provides complete visibility into the health of your WordPress websites in one place and keeps them protected with flexible updates management</p>
</body>
</html>
Open service 217.154.10.21:443 · app.vrecpros.com
2025-12-20 05:09
HTTP/1.1 303 See Other Server: nginx Date: Sat, 20 Dec 2025 05:09:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Fri, 28 May 1999 00:00:00 GMT Last-Modified: Sat, 20 Dec 2025 05:09:28 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Location: https://app.vrecpros.com:443/login.php X-Content-Type-Options: nosniff
Open service 217.154.10.21:80 · app.vrecpros.com
2025-12-20 04:44
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 20 Dec 2025 04:44:58 GMT
Content-Type: text/html
Content-Length: 1658
Connection: close
Last-Modified: Wed, 15 Jan 2025 16:34:26 GMT
ETag: "67a-62bc140328880"
Accept-Ranges: bytes
Vary: Accept-Encoding
Page title: Web Server's Default Page
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Web Server's Default Page</title>
<meta name="copyright" content="Copyright 1999-2025. WebPros International GmbH. All rights reserved.">
<script src="https://assets.plesk.com/static/default-website-content/public/default-server-index.js"></script>
</head>
<body>
<h2>What is Plesk</h2>
<p>
Plesk is a <a href="https://www.plesk.com">hosting panel</a> with simple and secure web server, website and web apps management tools. It is specially designed to help web professionals manage web, DNS, mail and other services through a comprehensive and user-friendly GUI. Plesk is about intelligently managing servers, apps, websites and hosting businesses, on both traditional and cloud hosting.
</p>
<p>
<a href="https://docs.plesk.com/try-plesk-now/">Try Plesk Now!</a>
</p>
<ul>
<li><a href="https://docs.plesk.com/en-US/obsidian/">Plesk Guides</a></li>
<li><a href="https://support.plesk.com/hc/en-us">Knowledge Base</a></li>
<li><a href="https://talk.plesk.com/">Forum</a></li>
<li><a href="https://www.plesk.com/blog/">Blog</a></li>
<li><a href="https://www.youtube.com/channel/UCeU-_6YHGQFcVSHLbEXLNlA/playlists">Video Guides</a></li>
<li><a href="https://www.facebook.com/Plesk">Facebook</a></li>
</ul>
<p>Do you host WordPress sites outside of Plesk? Try <a href="https://wpguardian.io/">WP Guardian</a> - it provides complete visibility into the health of your WordPress websites in one place and keeps them protected with flexible updates management</p>
</body>
</html>