CloudFront
tcp/80
nginx 1.22.0
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: medium
Fingerprint: 5f32cf5d6962f09cedefb063edefb0637fd28210b8d08c5eca735a659c5f7be5
Found 119 files trough .DS_Store spidering: /index.php /license.txt /nginx.conf /readme.html /README.md /wp /wp-activate.php /wp-admin /wp-admin/about.php /wp-admin/admin-ajax.php /wp-admin/admin-footer.php /wp-admin/admin-functions.php /wp-admin/admin-header.php /wp-admin/admin-post.php /wp-admin/admin.php /wp-admin/async-upload.php /wp-admin/authorize-application.php /wp-admin/comment.php /wp-admin/credits.php /wp-admin/css /wp-admin/custom-background.php /wp-admin/custom-header.php /wp-admin/customize.php /wp-admin/edit-comments.php /wp-admin/edit-form-advanced.php /wp-admin/edit-form-blocks.php /wp-admin/edit-form-comment.php /wp-admin/edit-link-form.php /wp-admin/edit-tag-form.php /wp-admin/edit-tags.php /wp-admin/edit.php /wp-admin/erase-personal-data.php /wp-admin/export-personal-data.php /wp-admin/export.php /wp-admin/freedoms.php /wp-admin/images /wp-admin/import.php /wp-admin/includes /wp-admin/index.php /wp-admin/install-helper.php /wp-admin/install.php /wp-admin/js /wp-admin/link-add.php /wp-admin/link-manager.php /wp-admin/link-parse-opml.php /wp-admin/link.php /wp-admin/load-scripts.php /wp-admin/load-styles.php /wp-admin/maint /wp-admin/media-new.php /wp-admin/media-upload.php /wp-admin/media.php /wp-admin/menu-header.php /wp-admin/menu.php /wp-admin/moderation.php /wp-admin/ms-admin.php /wp-admin/ms-delete-site.php /wp-admin/ms-edit.php /wp-admin/ms-options.php /wp-admin/ms-sites.php /wp-admin/ms-themes.php /wp-admin/ms-upgrade-network.php /wp-admin/ms-users.php /wp-admin/my-sites.php /wp-admin/nav-menus.php /wp-admin/network /wp-admin/network.php /wp-admin/options-discussion.php /wp-admin/options-general.php /wp-admin/options-head.php /wp-admin/options-media.php /wp-admin/options-permalink.php /wp-admin/options-privacy.php /wp-admin/options-reading.php /wp-admin/options-writing.php /wp-admin/options.php /wp-admin/plugin-editor.php /wp-admin/plugin-install.php /wp-admin/plugins.php /wp-admin/post-new.php /wp-admin/post.php /wp-admin/press-this.php /wp-admin/privacy-policy-guide.php /wp-admin/privacy.php /wp-admin/profile.php /wp-admin/revision.php /wp-admin/setup-config.php /wp-admin/site-health-info.php /wp-admin/site-health.php /wp-admin/term.php /wp-admin/theme-editor.php /wp-admin/theme-install.php /wp-admin/themes.php /wp-admin/tools.php /wp-admin/update-core.php /wp-admin/update.php /wp-admin/upgrade-functions.php /wp-admin/upgrade.php /wp-admin/upload.php /wp-admin/user /wp-admin/user-edit.php /wp-admin/user-new.php /wp-admin/users.php /wp-admin/widgets.php /wp-blog-header.php /wp-comments-post.php /wp-config-sample.php /wp-config.php /wp-content /wp-cron.php /wp-includes /wp-links-opml.php /wp-load.php /wp-login.php /wp-mail.php /wp-settings.php /wp-signup.php /wp-trackback.php /xmlrpc.php
Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b79ca15ebcc657e14aee73a9397611c530
Found 128 files trough .DS_Store spidering: /index.php /license.txt /nginx.conf /readme.html /README.md /wp /wp-activate.php /wp-admin /wp-admin/about.php /wp-admin/admin-ajax.php /wp-admin/admin-footer.php /wp-admin/admin-functions.php /wp-admin/admin-header.php /wp-admin/admin-post.php /wp-admin/admin.php /wp-admin/async-upload.php /wp-admin/authorize-application.php /wp-admin/comment.php /wp-admin/credits.php /wp-admin/css /wp-admin/custom-background.php /wp-admin/custom-header.php /wp-admin/customize.php /wp-admin/edit-comments.php /wp-admin/edit-form-advanced.php /wp-admin/edit-form-blocks.php /wp-admin/edit-form-comment.php /wp-admin/edit-link-form.php /wp-admin/edit-tag-form.php /wp-admin/edit-tags.php /wp-admin/edit.php /wp-admin/erase-personal-data.php /wp-admin/export-personal-data.php /wp-admin/export.php /wp-admin/freedoms.php /wp-admin/images /wp-admin/import.php /wp-admin/includes /wp-admin/index.php /wp-admin/install-helper.php /wp-admin/install.php /wp-admin/js /wp-admin/link-add.php /wp-admin/link-manager.php /wp-admin/link-parse-opml.php /wp-admin/link.php /wp-admin/load-scripts.php /wp-admin/load-styles.php /wp-admin/maint /wp-admin/media-new.php /wp-admin/media-upload.php /wp-admin/media.php /wp-admin/menu-header.php /wp-admin/menu.php /wp-admin/moderation.php /wp-admin/ms-admin.php /wp-admin/ms-delete-site.php /wp-admin/ms-edit.php /wp-admin/ms-options.php /wp-admin/ms-sites.php /wp-admin/ms-themes.php /wp-admin/ms-upgrade-network.php /wp-admin/ms-users.php /wp-admin/my-sites.php /wp-admin/nav-menus.php /wp-admin/network /wp-admin/network/about.php /wp-admin/network/admin.php /wp-admin/network/content.txt /wp-admin/network/credits.php /wp-admin/network/edit.php /wp-admin/network/freedoms.php /wp-admin/network/index.php /wp-admin/network/menu.php /wp-admin/network/plugin-editor.php /wp-admin/network/plugin-install.php /wp-admin/network/plugins.php /wp-admin/network/privacy.php /wp-admin/network/profile.php /wp-admin/network/settings.php /wp-admin/network/setup.php /wp-admin/network/site-info.php /wp-admin/network/site-new.php /wp-admin/network/site-settings.php /wp-admin/network/site-themes.php /wp-admin/network/site-users.php /wp-admin/network/sites.php /wp-admin/network/stats-scripts /wp-admin/network/theme-editor.php /wp-admin/network/theme-install.php /wp-admin/network/themes.php /wp-admin/network/update-core.php /wp-admin/network/update.php /wp-admin/network/upgrade.php /wp-admin/network/user-edit.php /wp-admin/network/user-new.php /wp-admin/network/users.php /wp-admin/network.php /wp-admin/options-discussion.php /wp-admin/options-general.php /wp-admin/options-head.php /wp-admin/options-media.php /wp-admin/options-permalink.php /wp-admin/options-privacy.php /wp-admin/options-reading.php /wp-admin/options-writing.php /wp-admin/options.php /wp-admin/plugin-editor.php /wp-admin/plugin-install.php /wp-admin/plugins.php /wp-admin/post-new.php /wp-admin/post.php /wp-admin/press-this.php /wp-admin/privacy-policy-guide.php /wp-admin/privacy.php /wp-admin/profile.php /wp-admin/revision.php /wp-admin/setup-config.php /wp-admin/site-health-info.php /wp-admin/site-health.php /wp-admin/term.php /wp-admin/theme-editor.php /wp-admin/theme-install.php /wp-admin/themes.php /wp-admin/tools.php /wp-admin/update-core.php /wp-admin/update.php /wp-admin/upgrade-functions.php
Severity: low
Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea96367f45a4a7c70ac2369658b4e222993
Found 23 files trough .DS_Store spidering: /index.php /license.txt /nginx.conf /readme.html /README.md /wp /wp-activate.php /wp-admin /wp-blog-header.php /wp-comments-post.php /wp-config-sample.php /wp-config.php /wp-content /wp-cron.php /wp-includes /wp-links-opml.php /wp-load.php /wp-login.php /wp-mail.php /wp-settings.php /wp-signup.php /wp-trackback.php /xmlrpc.php
Open service 108.138.36.9:443 · asfac.fr
2026-01-09 10:38
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 09 Jan 2026 10:38:30 GMT Cache-Control: public, must-revalidate, proxy-revalidate ETag: "60d74cc08da07bfd78b7c637f35f9a02" Server: nginx/1.22.0 X-W3TC-CDN: cf Link: <https://asfac.fr/wp-json/>; rel="https://api.w.org/" Link: <https://asfac.fr/wp-json/wp/v2/pages/3>; rel="alternate"; title="JSON"; type="application/json" Link: <https://asfac.fr/>; rel=shortlink Last-Modified: Fri, 09 Jan 2026 10:38:30 GMT Expires: Fri, 09 Jan 2026 11:38:30 GMT Pragma: public X-Cache: Miss from cloudfront Via: 1.1 ac1ae217387c42a8268a34d5a89f4b46.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: uvC111Yw36lzqoio_QCnHHk3ri-VCNoR5JPnN99Ej_y9bFICUnCQkw==
Open service 108.138.36.9:80 · asfac.fr
2026-01-09 10:38
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 09 Jan 2026 10:38:17 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://asfac.fr/ X-Cache: Redirect from cloudfront Via: 1.1 75964e4626dd702b8dac2690031df25a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: NfwmmjLJLIBjZ9EtnTE5LnDzFGFrIdM1qOSyuR6hAMcganwpDrH60A== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 108.138.36.93:443 · asfac.fr
2026-01-09 10:38
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 09 Jan 2026 10:38:29 GMT Cache-Control: public, must-revalidate, proxy-revalidate ETag: "78d7d3c01602a810f0d72d1e3c7c078f" Server: nginx/1.22.0 X-W3TC-CDN: cf Link: <https://asfac.fr/wp-json/>; rel="https://api.w.org/" Link: <https://asfac.fr/wp-json/wp/v2/pages/3>; rel="alternate"; title="JSON"; type="application/json" Link: <https://asfac.fr/>; rel=shortlink Last-Modified: Fri, 09 Jan 2026 10:38:29 GMT Expires: Fri, 09 Jan 2026 11:38:29 GMT Pragma: public X-Cache: Miss from cloudfront Via: 1.1 91220e34cbdd95f669dbfd83e711fee6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: A_cO86-Oyk6zGAwKdfYIMXunbLTdudIZM1ZmNO9-X9vKt8bVrfkeUA==
Open service 108.138.36.93:80 · asfac.fr
2026-01-09 10:38
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 09 Jan 2026 10:38:16 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://asfac.fr/ X-Cache: Redirect from cloudfront Via: 1.1 d34e2629ef96cca4a5e6c92c061c82b4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: DS2WXU9TfUpmNMrvhpa66QEzEFJT8KmkOeraAUtDudsna1fVGbCXeQ== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 108.138.36.12:80 · asfac.fr
2026-01-09 10:38
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 09 Jan 2026 10:38:16 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://asfac.fr/ X-Cache: Redirect from cloudfront Via: 1.1 05e8912dc00dd796ed2b040e3237568e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: hsfz46K21dEYLLI9_TTJGByOOS5J2LysUmzBxjtCJgdVU2xvfLjdRQ== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 108.138.36.12:443 · asfac.fr
2026-01-09 10:38
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 09 Jan 2026 10:38:26 GMT Cache-Control: public, must-revalidate, proxy-revalidate ETag: "8184e82f497b7910c3ce88b5badc1b04" Server: nginx/1.22.0 X-W3TC-CDN: cf Link: <https://asfac.fr/wp-json/>; rel="https://api.w.org/" Link: <https://asfac.fr/wp-json/wp/v2/pages/3>; rel="alternate"; title="JSON"; type="application/json" Link: <https://asfac.fr/>; rel=shortlink Last-Modified: Fri, 09 Jan 2026 10:38:26 GMT Expires: Fri, 09 Jan 2026 11:38:26 GMT Pragma: public X-Cache: Miss from cloudfront Via: 1.1 75964e4626dd702b8dac2690031df25a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: NNhHDcD-bYykepYmxp948idb4yGpKaNepwwPTeaXk91LAR-hIL6z3Q==
Open service 108.138.36.100:443 · asfac.fr
2026-01-09 10:38
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 09 Jan 2026 10:38:26 GMT Cache-Control: public, must-revalidate, proxy-revalidate ETag: "6b07759b64e469874d370778a284ea85" Server: nginx/1.22.0 X-W3TC-CDN: cf Link: <https://asfac.fr/wp-json/>; rel="https://api.w.org/" Link: <https://asfac.fr/wp-json/wp/v2/pages/3>; rel="alternate"; title="JSON"; type="application/json" Link: <https://asfac.fr/>; rel=shortlink Last-Modified: Fri, 09 Jan 2026 10:38:25 GMT Expires: Fri, 09 Jan 2026 11:38:25 GMT Pragma: public X-Cache: Miss from cloudfront Via: 1.1 3fbcd51d3039c17ef404823aaeb1f66c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: Nt25CBUyHtAzCytEyUPkPChPhdNoyCcLRs1PvHSyQ4Q6YiUiwVZE8w==
Open service 108.138.36.100:80 · asfac.fr
2026-01-09 10:38
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 09 Jan 2026 10:38:16 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://asfac.fr/ X-Cache: Redirect from cloudfront Via: 1.1 a1d3f4e4f5c5940d2f1eea05f736c3ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: t9R1JxYzbH6p0_SzPLwiqvCyAJk4z79Xxxvz0x1imnQl243Wkkkd_g== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>