cloudflare
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c684e525d684e525dfb28aa85d366783d0e29351d2779c701
Found 27 files trough .DS_Store spidering: /admin /admin/img /admin/js /build /build/admin /build/frontend /bundles /css /flags /frontend /frontend/img /img /media /media/cache /media/cache/casino_list /media/cache/game /media/cache/game/uploads /media/cache/game/uploads/media /media/cache/game/uploads/media/games /media/cache/pb_b_image /nav-icons /pagebuilder /svg /svg/games /svg/socials /uploads /uploads/media
Severity: low
Fingerprint: 5f32cf5d6962f09c87f05b7087f05b705914feb4f2c9d16ce4658c76e0ca8168
Found 26 files trough .DS_Store spidering: /admin /admin/img /admin/js /build /build/admin /build/frontend /bundles /css /flags /frontend /frontend/img /img /media /media/cache /media/cache/casino_list /media/cache/game /media/cache/game/uploads /media/cache/game/uploads/media /media/cache/game/uploads/media/games /media/cache/pb_b_image /nav-icons /pagebuilder /svg /svg/games /svg/socials /uploads
The application has Symfony profiling enabled.
It enables an attacker to access the following sensitive content :
Fingerprint: 407cf4363b0e62fafca67e077556864975568649755686497556864975568649
Symfony profiler enabled: https://bizzo-es.com/_profiler/empty/search/results
Open service 188.114.97.3:443 · bizzo-es.com
2026-01-09 02:00
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 02:00:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=6bCJyz%2BGX0lpiBjjBgmtEdvbr9XjlqPQbkm3IDu1iqqwPuNnKuD4ih8mXatbKr0KdkLi3m0jwbtZkJgqbaCQ%2BYHo6ngrdskUD5ahbQ%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Mon, 09 Feb 2026 02:00:44 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9bb057b87c812bad-FRA
Open service 2a06:98c1:3121::3:443 · bizzo-es.com
2026-01-08 19:52
HTTP/1.1 200 OK
Date: Thu, 08 Jan 2026 19:53:00 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=xMzl1VM3WHYs7uh7nNjEHOD6KuPpQHZvv7yLN5bZuxv%2BT6J744YinjV2Zbra66QRBgSVycoHT4CMVju22v7mglqQjfAjx%2FJQIuPC9Osf94a0VSkFvIJziA%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Sun, 08 Feb 2026 19:53:00 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=8,cfOrigin;dur=1140
CF-RAY: 9bae3d09396bc8bd-SJC
Open service 2a06:98c1:3121::3:443 · bizzo-es.com
2026-01-01 20:22
HTTP/1.1 200 OK
Date: Thu, 01 Jan 2026 20:22:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1kBg1fBUauHmHqOpglU1nLmVy5cf22xtG0gxKOEobKU8Ge8s5ltKMW43HSP6in059RVpso966%2B8edWeVXHO%2FF8WQG0XHUYFZNju8y3T6wNPxVZHIwwluOw%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Sun, 01 Feb 2026 20:22:50 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b74bb215bae7068-LHR
Open service 188.114.97.3:443 · bizzo-es.com
2026-01-01 19:38
HTTP/1.1 200 OK
Date: Thu, 01 Jan 2026 19:38:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ZL6AfYp8F2I7jLRGAhHcEmfr4dw0l2K9BxqKlVZ44FB5jVv%2FJ4aUiXtqao5JQim%2BqitBGIrB%2BvmKoAB1dj9f%2FQncl7NAcgz1VkKxgQ%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Sun, 01 Feb 2026 19:38:12 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=18,cfOrigin;dur=895
CF-RAY: 9b7479bd0ad5c425-EWR
Open service 2a06:98c1:3121::3:443 · bizzo-es.com
2025-12-30 04:31
HTTP/1.1 200 OK
Date: Tue, 30 Dec 2025 04:31:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=uJxZu38FXV9b5S2y9wHNf56mqzOeFkTn1%2Be0WeyfP69F%2BI5yytUPxqsn5SPd5E6lWDbbonshNNgGbq3Z0gLwyaSHN5eW3nIofzxpgL44FW7nyPpU%2FvKUzw%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Fri, 30 Jan 2026 04:31:42 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=14,cfOrigin;dur=1107
CF-RAY: 9b5ecf1bfee5ce3a-SIN
Open service 188.114.97.3:443 · bizzo-es.com
2025-12-22 22:02
HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 22:02:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=RYjTyIHkhTLf4jtKcy6dcc6v35pQ%2BShyFFQpwdB0vuYKyvxvGnw%2F%2F2q1dQ4zDHBR12rZchy1pkoiRPziUiHFVDQYB41TG%2FmL3UEMMQ%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Thu, 22 Jan 2026 22:02:57 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b22e80c2d349783-LHR
Open service 2a06:98c1:3121::3:443 · bizzo-es.com
2025-12-22 05:20
HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 05:20:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CLn7IF8SnbsNMNO5KwFRnrhoZFgEZcB%2BUZfd54RSczj1hHLKj6BmyEYY8xEz8Lg0Co%2FxAQx%2F%2BNRWgs6W88sfovHkBuug5lSYFlmiACYf3r54lpWSi2KMsg%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Thu, 22 Jan 2026 05:20:28 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=4,cfOrigin;dur=491
CF-RAY: 9b1d2b905d831a24-YYZ
Open service 188.114.97.3:443 · bizzo-es.com
2025-12-21 09:49
HTTP/1.1 200 OK
Date: Sun, 21 Dec 2025 09:49:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Dh4LC%2FcJIc56rh7swro%2BqCs3znfN%2FaeBRmrHfKAVnxs822b%2Bi431mrRJBWB1REHzDC8FKEuA11uy9uf%2F9VvWHwXNoVX5NKgjWj386A%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Wed, 21 Jan 2026 09:49:19 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=5,cfOrigin;dur=558
CF-RAY: 9b1677ff78e54aad-SJC
Open service 2a06:98c1:3121::3:443 · bizzo-es.com
2025-12-20 05:23
HTTP/1.1 200 OK
Date: Sat, 20 Dec 2025 05:23:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CRnE0i%2BlrmlGG2PoOY9LEZvvM8mS9e7F2JMnjzMEXsZ6lT%2BEhMsTeEE8a1UVqHoPWXfcliStkfnV88wo1qKCV%2F6sCib1LGKZeEg70djPWpeYch9XdxUWrQ%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Tue, 20 Jan 2026 05:23:54 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b0cb5d77fdcd2b7-FRA
Open service 188.114.97.3:443 · bizzo-es.com
2025-12-19 11:01
HTTP/1.1 200 OK
Date: Fri, 19 Dec 2025 11:01:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rXh1iwwpfCfN7PiGWcD8TEpNlTWckbfVgbxx0TZzmgg75DcYxwW0LdrojIUyx7ixh79evt9bxGvMjPAw1XOU9bnQ4ZoIJY1RtGsu5g%3D%3D"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Mon, 19 Jan 2026 11:01:18 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.27
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b0666b0f8e76533-LHR