AmazonS3
tcp/443
Caddy
tcp/80
Cowboy
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf176428b8bb33b93c40c8e93c40c8e93c40c8e
Found 2 files trough .DS_Store spidering: /static /static/demo_web.mp4
Open service 108.156.60.47:443 · bardy.io
2026-01-23 05:00
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 8470
Connection: close
Last-Modified: Sun, 02 Nov 2025 23:53:09 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 23 Jan 2026 05:00:22 GMT
ETag: "1f12562c3d0334e873bb9958cf86f5f0"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8662e3c152f0b241b5d273e9b0c8f9fc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P2
X-Amz-Cf-Id: YBXo4MHxkd7OhL0aHilXSRgtAS9NzYGciVk1kAC1xj5OAIZ9juTrpw==
Age: 1
<!DOCTYPE html><html lang="en" itemscope="" itemType="https://schema.org/WebSite"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><meta name="description" content="Revolutionary visual feedback tool with live HTML editing, multi-format support (images, videos, PDFs), and rich text comments. Edit websites directly, collaborate in real-time. Start free."/><meta itemProp="name" content="Bardy - Visual Feedback Tool"/><meta itemProp="url" content="https://bardy.io"/><script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-M5TLVV7Q');</script><script>
!function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.crossOrigin="anonymous",p.async=!0,p.src=s.api_host.replace(".i.posthog.com","-assets.i.posthog.com")+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="init Re Os As Pe Ms Fs capture Ve calculateEventProperties js register register_once register_for_session unregister unregister_for_session qs getFeatureFlag getFeatureFlagPayload isFeatureEnabled reloadFeatureFlags updateEarlyAccessFeatureEnrollment getEarlyAccessFeatures on onFeatureFlags onSurveysLoaded onSessionId getSurveys getActiveMatchingSurveys renderSurvey canRenderSurvey canRenderSurveyAsync identify setPersonProperties group resetGroups setPersonPropertiesForFlags resetPersonPropertiesForFlags setGroupPropertiesForFlags resetGroupPropertiesForFlags reset get_distinct_id getGroups get_session_id get_session_replay_url alias set_config startSessionRecording stopSessionRecording sessionRecordingStarted captureException loadToolbar get_property getSessionProperty zs Ls createPersonProfile Us Rs Bs opt_in_capturing opt_out_capturing has_opted_in_capturing has_opted_out_capturing clear_opt_in_out_capturing Ds debug I Ns getPageViewId captureTraceFeedback captureTraceMetric".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[]);
posthog.init('phc_au8yuueFLSMMiWQMKUUvdgdQhBWWve9IYuO0hFenhH6', {
api_host: 'https://us.i.posthog.com',
defaults: '2025-05-24',
person_profiles: 'identified_only', // or 'always' to create profiles for anonymous users as well
})
</script><script async="" src="https://www.googletagmanager.com/gtag/js?id=G-ZEH9ZRLKSS"></script><script>
window.dataLayer = window.dataLayer || [];
function gtag(){dataLayer.push(arguments);}
gtag('js', new Date());
gtag('config', 'G-ZEH9ZRLKSS');
</script><script>
window.intercomSettings = {
api_base: "https://api-iam.intercom.io",
app_id: "ofpnm94k",
};
</script><script>
(function(){var w=window;var ic=w.Intercom;if(typeof ic==="function"){ic('reattach_activator');ic('update',w.intercomSettings);}else{var d=document;var i=function(){i.c(arguments);};i.q=[];i.c=function(args){i.q.push(args);};w.Intercom=i;var l=function(){var s=d.createElement('script');s.type='text/javascript';s.async=true;s.src='https://widget.intercom.io/widget/ofpnm94k';var x=d.getElementsByTagName('script')[0];x.parentNode.insertBefore(s,x);};if(document.readyState==='complete'){l();}else if(w.attachEvent){
Open service 49.13.219.73:80 · p.bardy.io
2026-01-22 01:21
HTTP/1.1 308 Permanent Redirect Connection: close Location: https://p.bardy.io/ Server: Caddy Date: Thu, 22 Jan 2026 01:22:13 GMT Content-Length: 0
Open service 49.13.219.73:443 · p.bardy.io
2026-01-22 01:21
HTTP/1.1 500 Internal Server Error
Alt-Svc: h3=":443"; ma=2592000
Cache-Control: max-age=0, private, must-revalidate
Content-Length: 45
Content-Type: application/json; charset=utf-8
Date: Thu, 22 Jan 2026 01:21:42 GMT
Server: Cowboy
Via: 1.1 Caddy
X-Request-Id: GIzo94U5cikRJd0DO5aB
Connection: close
{"errors":{"detail":"Internal Server Error"}}
Open service 49.13.219.73:443 · api.bardy.io
2026-01-22 01:21
HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: max-age=0, private, must-revalidate Content-Length: 0 Date: Thu, 22 Jan 2026 01:21:11 GMT Server: Cowboy Vary: accept-encoding Via: 1.1 Caddy X-Request-Id: GIzo8BdcJqFNWjYAFRcB Connection: close
Open service 49.13.219.73:80 · api.bardy.io
2026-01-22 01:21
HTTP/1.1 308 Permanent Redirect Connection: close Location: https://api.bardy.io/ Server: Caddy Date: Thu, 22 Jan 2026 01:21:40 GMT Content-Length: 0
Open service 108.156.60.47:443 · bardy.io
2026-01-09 17:45
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 8470
Connection: close
Last-Modified: Sun, 02 Nov 2025 23:53:09 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 09 Jan 2026 17:45:19 GMT
ETag: "1f12562c3d0334e873bb9958cf86f5f0"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c24bf4c03d36f2d43fb38710581fa0e6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P2
X-Amz-Cf-Id: hCQ6ng2bqthHqS-Jm7s1QvFEONYdASeqZ-iuuMhtDYRVomF4ruMTdg==
Age: 4662
<!DOCTYPE html><html lang="en" itemscope="" itemType="https://schema.org/WebSite"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><meta name="description" content="Revolutionary visual feedback tool with live HTML editing, multi-format support (images, videos, PDFs), and rich text comments. Edit websites directly, collaborate in real-time. Start free."/><meta itemProp="name" content="Bardy - Visual Feedback Tool"/><meta itemProp="url" content="https://bardy.io"/><script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-M5TLVV7Q');</script><script>
!function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.crossOrigin="anonymous",p.async=!0,p.src=s.api_host.replace(".i.posthog.com","-assets.i.posthog.com")+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="init Re Os As Pe Ms Fs capture Ve calculateEventProperties js register register_once register_for_session unregister unregister_for_session qs getFeatureFlag getFeatureFlagPayload isFeatureEnabled reloadFeatureFlags updateEarlyAccessFeatureEnrollment getEarlyAccessFeatures on onFeatureFlags onSurveysLoaded onSessionId getSurveys getActiveMatchingSurveys renderSurvey canRenderSurvey canRenderSurveyAsync identify setPersonProperties group resetGroups setPersonPropertiesForFlags resetPersonPropertiesForFlags setGroupPropertiesForFlags resetGroupPropertiesForFlags reset get_distinct_id getGroups get_session_id get_session_replay_url alias set_config startSessionRecording stopSessionRecording sessionRecordingStarted captureException loadToolbar get_property getSessionProperty zs Ls createPersonProfile Us Rs Bs opt_in_capturing opt_out_capturing has_opted_in_capturing has_opted_out_capturing clear_opt_in_out_capturing Ds debug I Ns getPageViewId captureTraceFeedback captureTraceMetric".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[]);
posthog.init('phc_au8yuueFLSMMiWQMKUUvdgdQhBWWve9IYuO0hFenhH6', {
api_host: 'https://us.i.posthog.com',
defaults: '2025-05-24',
person_profiles: 'identified_only', // or 'always' to create profiles for anonymous users as well
})
</script><script async="" src="https://www.googletagmanager.com/gtag/js?id=G-ZEH9ZRLKSS"></script><script>
window.dataLayer = window.dataLayer || [];
function gtag(){dataLayer.push(arguments);}
gtag('js', new Date());
gtag('config', 'G-ZEH9ZRLKSS');
</script><script>
window.intercomSettings = {
api_base: "https://api-iam.intercom.io",
app_id: "ofpnm94k",
};
</script><script>
(function(){var w=window;var ic=w.Intercom;if(typeof ic==="function"){ic('reattach_activator');ic('update',w.intercomSettings);}else{var d=document;var i=function(){i.c(arguments);};i.q=[];i.c=function(args){i.q.push(args);};w.Intercom=i;var l=function(){var s=d.createElement('script');s.type='text/javascript';s.async=true;s.src='https://widget.intercom.io/widget/ofpnm94k';var x=d.getElementsByTagName('script')[0];x.parentNode.insertBefore(s,x);};if(document.readyState==='complete'){l();}else if(w.attachEvent){
Open service 108.156.60.47:443 · bardy.io
2026-01-02 15:54
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 8470
Connection: close
Last-Modified: Sun, 02 Nov 2025 23:53:09 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 01 Jan 2026 20:37:07 GMT
ETag: "1f12562c3d0334e873bb9958cf86f5f0"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 3bdef981159de9c713020c64476ba0e4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P2
X-Amz-Cf-Id: 1m2Rc8XzarHN21l6EcxkYsi5vRqsQJLhYUYWxif4KqaH_qH_F4AaLg==
Age: 69460
<!DOCTYPE html><html lang="en" itemscope="" itemType="https://schema.org/WebSite"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><meta name="description" content="Revolutionary visual feedback tool with live HTML editing, multi-format support (images, videos, PDFs), and rich text comments. Edit websites directly, collaborate in real-time. Start free."/><meta itemProp="name" content="Bardy - Visual Feedback Tool"/><meta itemProp="url" content="https://bardy.io"/><script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-M5TLVV7Q');</script><script>
!function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.crossOrigin="anonymous",p.async=!0,p.src=s.api_host.replace(".i.posthog.com","-assets.i.posthog.com")+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="init Re Os As Pe Ms Fs capture Ve calculateEventProperties js register register_once register_for_session unregister unregister_for_session qs getFeatureFlag getFeatureFlagPayload isFeatureEnabled reloadFeatureFlags updateEarlyAccessFeatureEnrollment getEarlyAccessFeatures on onFeatureFlags onSurveysLoaded onSessionId getSurveys getActiveMatchingSurveys renderSurvey canRenderSurvey canRenderSurveyAsync identify setPersonProperties group resetGroups setPersonPropertiesForFlags resetPersonPropertiesForFlags setGroupPropertiesForFlags resetGroupPropertiesForFlags reset get_distinct_id getGroups get_session_id get_session_replay_url alias set_config startSessionRecording stopSessionRecording sessionRecordingStarted captureException loadToolbar get_property getSessionProperty zs Ls createPersonProfile Us Rs Bs opt_in_capturing opt_out_capturing has_opted_in_capturing has_opted_out_capturing clear_opt_in_out_capturing Ds debug I Ns getPageViewId captureTraceFeedback captureTraceMetric".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[]);
posthog.init('phc_au8yuueFLSMMiWQMKUUvdgdQhBWWve9IYuO0hFenhH6', {
api_host: 'https://us.i.posthog.com',
defaults: '2025-05-24',
person_profiles: 'identified_only', // or 'always' to create profiles for anonymous users as well
})
</script><script async="" src="https://www.googletagmanager.com/gtag/js?id=G-ZEH9ZRLKSS"></script><script>
window.dataLayer = window.dataLayer || [];
function gtag(){dataLayer.push(arguments);}
gtag('js', new Date());
gtag('config', 'G-ZEH9ZRLKSS');
</script><script>
window.intercomSettings = {
api_base: "https://api-iam.intercom.io",
app_id: "ofpnm94k",
};
</script><script>
(function(){var w=window;var ic=w.Intercom;if(typeof ic==="function"){ic('reattach_activator');ic('update',w.intercomSettings);}else{var d=document;var i=function(){i.c(arguments);};i.q=[];i.c=function(args){i.q.push(args);};w.Intercom=i;var l=function(){var s=d.createElement('script');s.type='text/javascript';s.async=true;s.src='https://widget.intercom.io/widget/ofpnm94k';var x=d.getElementsByTagName('script')[0];x.parentNode.insertBefore(s,x);};if(document.readyState==='complete'){l();}else if(w.attachEvent){
Open service 108.156.60.47:443 · bardy.io
2025-12-22 22:39
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 8470
Connection: close
Last-Modified: Sun, 02 Nov 2025 23:53:09 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 22:39:19 GMT
ETag: "1f12562c3d0334e873bb9958cf86f5f0"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 3bdef981159de9c713020c64476ba0e4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P2
X-Amz-Cf-Id: SNYWIcj1PyWYgmOqFZyRlH5OJIBcZiaj8tHg9mXxk3qWGsTMNBZOew==
Age: 29337
<!DOCTYPE html><html lang="en" itemscope="" itemType="https://schema.org/WebSite"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><meta name="description" content="Revolutionary visual feedback tool with live HTML editing, multi-format support (images, videos, PDFs), and rich text comments. Edit websites directly, collaborate in real-time. Start free."/><meta itemProp="name" content="Bardy - Visual Feedback Tool"/><meta itemProp="url" content="https://bardy.io"/><script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-M5TLVV7Q');</script><script>
!function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.crossOrigin="anonymous",p.async=!0,p.src=s.api_host.replace(".i.posthog.com","-assets.i.posthog.com")+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="init Re Os As Pe Ms Fs capture Ve calculateEventProperties js register register_once register_for_session unregister unregister_for_session qs getFeatureFlag getFeatureFlagPayload isFeatureEnabled reloadFeatureFlags updateEarlyAccessFeatureEnrollment getEarlyAccessFeatures on onFeatureFlags onSurveysLoaded onSessionId getSurveys getActiveMatchingSurveys renderSurvey canRenderSurvey canRenderSurveyAsync identify setPersonProperties group resetGroups setPersonPropertiesForFlags resetPersonPropertiesForFlags setGroupPropertiesForFlags resetGroupPropertiesForFlags reset get_distinct_id getGroups get_session_id get_session_replay_url alias set_config startSessionRecording stopSessionRecording sessionRecordingStarted captureException loadToolbar get_property getSessionProperty zs Ls createPersonProfile Us Rs Bs opt_in_capturing opt_out_capturing has_opted_in_capturing has_opted_out_capturing clear_opt_in_out_capturing Ds debug I Ns getPageViewId captureTraceFeedback captureTraceMetric".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[]);
posthog.init('phc_au8yuueFLSMMiWQMKUUvdgdQhBWWve9IYuO0hFenhH6', {
api_host: 'https://us.i.posthog.com',
defaults: '2025-05-24',
person_profiles: 'identified_only', // or 'always' to create profiles for anonymous users as well
})
</script><script async="" src="https://www.googletagmanager.com/gtag/js?id=G-ZEH9ZRLKSS"></script><script>
window.dataLayer = window.dataLayer || [];
function gtag(){dataLayer.push(arguments);}
gtag('js', new Date());
gtag('config', 'G-ZEH9ZRLKSS');
</script><script>
window.intercomSettings = {
api_base: "https://api-iam.intercom.io",
app_id: "ofpnm94k",
};
</script><script>
(function(){var w=window;var ic=w.Intercom;if(typeof ic==="function"){ic('reattach_activator');ic('update',w.intercomSettings);}else{var d=document;var i=function(){i.c(arguments);};i.q=[];i.c=function(args){i.q.push(args);};w.Intercom=i;var l=function(){var s=d.createElement('script');s.type='text/javascript';s.async=true;s.src='https://widget.intercom.io/widget/ofpnm94k';var x=d.getElementsByTagName('script')[0];x.parentNode.insertBefore(s,x);};if(document.readyState==='complete'){l();}else if(w.attachEvent){