cloudflare
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c684e525d684e525dfb28aa85d366783d0e29351d2779c701
Found 27 files trough .DS_Store spidering: /admin /admin/img /admin/js /build /build/admin /build/frontend /bundles /css /flags /frontend /frontend/img /img /media /media/cache /media/cache/casino_list /media/cache/game /media/cache/game/uploads /media/cache/game/uploads/media /media/cache/game/uploads/media/games /media/cache/pb_b_image /nav-icons /pagebuilder /svg /svg/games /svg/socials /uploads /uploads/media
Severity: low
Fingerprint: 5f32cf5d6962f09cdafa5447dafa54477071fe6f16bdf67fb21c206f5cd252aa
Found 18 files trough .DS_Store spidering: /admin /admin/img /admin/js /build /build/admin /build/frontend /bundles /css /flags /frontend /frontend/img /img /media /media/cache /nav-icons /pagebuilder /svg /uploads
Severity: low
Fingerprint: 5f32cf5d6962f09c668fcbec668fcbec66dfde7000fc4d50b4e9070ab682e297
Found 17 files trough .DS_Store spidering: /admin /admin/img /admin/js /build /build/admin /build/frontend /bundles /css /flags /frontend /frontend/img /img /media /nav-icons /pagebuilder /svg /uploads
The application has Symfony profiling enabled.
It enables an attacker to access the following sensitive content :
Fingerprint: 407cf4363b0e62fafca67e077ad6eb587ad6eb587ad6eb587ad6eb587ad6eb58
Symfony profiler enabled: https://bingoal-be.com/_profiler/empty/search/results
Open service 188.114.97.3:443 · bingoal-be.com
2026-01-09 12:53
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 12:53:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=7lEdNU9VoYGeTP%2BvgUnhngG%2Fk06nmw4XCrQ8JWuce7kpFNNXO8a4OodoibB4HH5Xzebu%2BOle3NwX%2BcK%2BG1Lq3PUN5XQeSUj33OoUXDse"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Mon, 09 Feb 2026 12:53:44 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=19,cfOrigin;dur=1336
CF-RAY: 9bb414401a33603e-SIN
Open service 2a06:98c1:3120::3:443 · bingoal-be.com
2026-01-09 00:57
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 00:57:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fjMhoUIpmCeKmZqk3A6812rfqZgCFge5tX5S%2FLmy%2F5jnzga9lntZVxXmjSJaqm2P9c7UW4l4BEROOtz8zVuDzqftdoBc4PjyDY%2FIHo%2Bjpr0RCGOgSP5kfy9W"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Mon, 09 Feb 2026 00:57:22 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9baffae66a0fce7b-LHR
Open service 188.114.97.3:443 · bingoal-be.com
2026-01-02 01:37
HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 01:37:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=DsVGZs1buOAq%2BJOuLFsGJa7bd9bAe0J8IpT0jCW%2BegLvrVOpc096IH7Px7yTNzugWCitZQ6ZIY3sWzAAoZMEJLhmQ0hOj%2B9aISuOYRCE"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Mon, 02 Feb 2026 01:37:59 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b7688c89e209750-FRA
Open service 2a06:98c1:3120::3:443 · bingoal-be.com
2026-01-02 01:02
HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 01:03:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=BL5OPx9KylTEUsvv9KlgeDxNWMgn6ruAZ7KLizYBeauXeJurL5MCyDH3Q2fYY1f2WvGqWEbyXIe8%2BxigHpju6twxoOuEoQeF4qy%2FmdwRed0NrHHiI39dRgYM"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Mon, 02 Feb 2026 01:03:02 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=6,cfOrigin;dur=1483
CF-RAY: 9b76558eeb831397-BOM
Open service 188.114.97.3:443 · bingoal-be.com
2025-12-30 12:34
HTTP/1.1 200 OK
Date: Tue, 30 Dec 2025 12:34:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=tQeLJB%2F4mGU%2Bgy2BkUS66DFbcKOMo6sO95GqgCKZk6t0VqAy4eJ94jHOm4nnhSYaDRXLG00clqYaXySu2GsxIe83l0A06Vj%2BK8qzm2Dl"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Fri, 30 Jan 2026 12:34:05 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b6191bf2a1b6562-AMS
Open service 2a06:98c1:3120::3:443 · bingoal-be.com
2025-12-30 08:42
HTTP/1.1 200 OK
Date: Tue, 30 Dec 2025 08:42:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=IWhptpL4W1YsljkWqKCFWqOCJcDkj820qj%2FrR87unkAy%2FmXREyy4klAgGyvCrYl%2B5JxtmeTBS7zP9k%2FxpEjg6mkdcEqPw%2BnkXVTijjrtrt6KOVoksNMP4gmn"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Fri, 30 Jan 2026 08:42:16 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=10,cfOrigin;dur=843
CF-RAY: 9b603e28bd8e8cb4-EWR
Open service 2a06:98c1:3120::3:443 · bingoal-be.com
2025-12-22 09:14
HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 09:14:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=UxMS0WDuqsA15A1eMRTKFJOPS%2FKz4XMKQpjOUrYriHeEWx4PjiO2Qe1aiVpkOAdn%2BB77QoLga8TPTZhqghQN%2B8owsU%2Bu8mj35T04m3mtflcJp9SkedJd2uth"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Thu, 22 Jan 2026 09:14:07 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=7,cfOrigin;dur=918
CF-RAY: 9b1e81d18c61de9a-EWR
Open service 188.114.97.3:443 · bingoal-be.com
2025-12-22 08:02
HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 08:02:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Jx6vafxMl3S0Xm6L24tXrI5H%2FL6u8Oad1yALmzbPe4Qv7pgvJG2oEFNPK7K5DRXVUU29%2BsTTOAEEVknNWr7OOvufHI1H7%2FZq2mZEjfd%2B"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Thu, 22 Jan 2026 08:02:19 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b1e18a41b1e1afa-AMS
Open service 2a06:98c1:3120::3:443 · bingoal-be.com
2025-12-20 09:54
HTTP/1.1 200 OK
Date: Sat, 20 Dec 2025 09:54:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=XpJc5ALH0Jnb9INj%2Bxth1zKg20OYzrE9FTVhcoTrd5EnkWobpSjeoC40Bfe%2FDS0I8nk5bd%2F087m79KdLKnai0ba1OeX0q%2FxESJRjvgIcA1NePX%2BvDsLiH2ci"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Tue, 20 Jan 2026 09:54:50 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=3,cfOrigin;dur=458
CF-RAY: 9b0e42ba0e4fcbfd-YYZ
Open service 188.114.97.3:443 · bingoal-be.com
2025-12-20 06:51
HTTP/1.1 200 OK
Date: Sat, 20 Dec 2025 06:51:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=W1dRlPP7FWqJah82Jqu9oIv3dQHAsZdF7SfaYo2IMk7wQS%2FzC5btGNqMZnj5PVCs5XFaIUyhtSLehrboYWRDKslHdJrOoWk8DkkxBGCZ"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Tue, 20 Jan 2026 06:51:39 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=7,cfOrigin;dur=496
CF-RAY: 9b0d365e0ca86a58-EWR