nginx
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc267c072c8e722db79d7d7e5097a15a66
Found 4 files trough .DS_Store spidering: /dashbord /dashbord/dist /dashbord/plugins /payin
Severity: low
Fingerprint: 5f32cf5d6962f09c668fcbec668fcbec5f0159006568ef9cb1eb053f062fe243
Found 17 files trough .DS_Store spidering: /1 /app /artisan /bootstrap /composer.json /composer.lock /config /database /lang /package.json /phpunit.xml /public /README.md /storage /tests /vendor /vite.config.js
Open service 13.37.90.88:443 · bollore-reconciliation.cinetpay.com
2026-01-02 15:55
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Jan 2026 15:55:14 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 2975
Connection: close
X-Powered-By: PHP/8.1.33
Cache-Control: private, must-revalidate
pragma: no-cache
expires: -1
Set-Cookie: XSRF-TOKEN=eyJpdiI6Ino4N2tSZGVYOGdkSFBoQUErMUxWekE9PSIsInZhbHVlIjoicUllUUlNL0xxVmdHdDB2WkcxSjBjbHdKTHJMa2NSajJrOFF1Tm16RzBCWGtlbGRzL3ZyZU8rRkNIUmw3SFEzWHBsamRCMitXbG45cGxxRmE5dDdnUXY2VzJ6azdJaHlhNGJPTE1OaXdHQVhoejY3TGplM2xwM1UvN21aYXVqR00iLCJtYWMiOiI5OTBiYzkzZmY2OTgyMGZlZDIwMjBlZDk1NjAwMzg3OWI2NzJkY2IxZjI4NTllYWE5OTZhNWVmOTk0YjExMTk3IiwidGFnIjoiIn0%3D; expires=Fri, 02 Jan 2026 17:55:14 GMT; Max-Age=7200; path=/; samesite=lax
Set-Cookie: laravel_session=eyJpdiI6Im1lZktVbUt3OXJkQjA2b2N4R09rVkE9PSIsInZhbHVlIjoiUmZwQTF6QUx1emlZa2phWS85WmlnVXJWR0tvdWFrMWZ1S3hSTWRLRld0ekQxUThwNSszYWc4eTZhMnJSREdpLzJYYWFKREduRFo5THpYNTdxTXZveHFEa0habDBtb0hjbDBlUVJNQjNrdHVxWGpjSzNNOWRoSzFpa29WalRDaGMiLCJtYWMiOiI4ZjU4NTAyOGJmNzlmZmFkYWYwZTA5ZTA4YmQ4MjRhYTFiOGY5YmI5YTQzMGFmMGNmMzdlY2FiNzAwOWRhMmY1IiwidGFnIjoiIn0%3D; expires=Fri, 02 Jan 2026 17:55:14 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Vary: Accept-Encoding
X-Powered-By: PleskLin
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<title></title>
<!-- Tell the browser to be responsive to screen width -->
<meta name="viewport" content="width=device-width, initial-scale=1">
<!-- Font Awesome -->
<link rel="stylesheet" href="dashbord/plugins/fontawesome-free/css/all.min.css">
<!-- Ionicons -->
<link rel="stylesheet" href="https://code.ionicframework.com/ionicons/2.0.1/css/ionicons.min.css">
<!-- DataTables -->
<link rel="stylesheet" href="dashbord/plugins/datatables-bs4/css/dataTables.bootstrap4.min.css">
<link rel="stylesheet" href="dashbord/plugins/datatables-responsive/css/responsive.bootstrap4.min.css">
<!-- Theme style -->
<link rel="stylesheet" href="dashbord/dist/css/adminlte.min.css">
<!-- Google Font: Source Sans Pro -->
<link href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,400i,700" rel="stylesheet">
</head>
<body class="hold-transition login-page">
<div class="login-box">
<div class="login-logo">
<a href="../../index2.html"><b>Connexion</b> FTP</a>
</div>
<!-- /.login-logo -->
<div class="card">
<div class="card-body login-card-body">
<p class="login-box-msg">Sign in to start your session</p>
<form action="/connexion" method="post">
<input type="hidden" name="_token" value="eor4aL1Pc7OSN6NLUzTBQdHgn741AgdKsW7ApFpm"> <div class="input-group mb-3">
<input type="text" name="login" class="form-control" placeholder="Email">
<div class="input-group-append">
<div class="input-group-text">
<span class="fas fa-envelope"></span>
</div>
</div>
</div>
<div class="input-group mb-3">
<input type="password" name="password" class="form-control" placeholder="Password">
<div class="input-group-append">
<div class="input-group-text">
<span class="fas fa-lock"></span>
</div>
</div>
</div>
<div class="row">
<div class="col-6">
<div class="icheck-primary">
</div>
</div>
<!-- /.col -->
<div class="col-6">
<button type="submit" class="btn btn-primary btn-block">Connexion</button>
</div>
<!-- /.col -->
</div>
</form>
<div class="social-auth-links text-center mb-3">
</div>
<!-- /.social-auth-links -->
<p class="mb-1">
<a href="forgot-password.html"></a>
</p>
<p class="mb-0">
</p>
</div>
<!-- /.login-card-body -->
</div>
</div>
<!-- /.login-box -->
<!-- jQuery -->
<script src="../../plugins/jquery/jquery.min.js"></script>
<!-- Bootstrap 4 -->
<script src="../../plugins/bootstrap/js/bootstrap.bundle.min.js"></script>
<!-- AdminLTE App -->
<script src="../../dist/js/adminlte.min.js"></script>
</body>
</html>
Open service 13.37.90.88:443 · bollore-reconciliation.cinetpay.com
2025-12-23 09:28
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Dec 2025 09:28:39 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 2975
Connection: close
X-Powered-By: PHP/8.1.33
Cache-Control: private, must-revalidate
pragma: no-cache
expires: -1
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkFiSG9acWZtYXVkYVFlbElFRkVLTlE9PSIsInZhbHVlIjoiUjVnZjlVVXRlUFk3K2lYcFEwVUNwTVpqcjZDbjVxUUhpWnF0emprenE4bjNjbXlaS3V2dzlmdkxUS01RNTA2Y2cwQktvWWZuUjhNRUhjN0h1WktyN1VlbFlPZ1dMbVFtSG1PdDllTy9NKzV2aXN5eUc4aDYxOUV6NGZsejgvY1kiLCJtYWMiOiIxZGU0NzVlYmFlOWJiOTMwN2Y3OTQ1ZGE2ZGRlZjRkN2M2ODE2YjhiNjk3YWMxODFjMGRhMTBlNjFhNDZjM2M2IiwidGFnIjoiIn0%3D; expires=Tue, 23 Dec 2025 11:28:39 GMT; Max-Age=7200; path=/; samesite=lax
Set-Cookie: laravel_session=eyJpdiI6InNHNW5ydWxGKzgzT0JmVXhBZmZ2elE9PSIsInZhbHVlIjoiTk1KN1VMRWlWeUEyRzEwS3JzNjcrOUxCU3dOSkJ2Wm5SQzJNcGZ5blB3RVhDNEtYbFdYVHlIbmhmeCtLTW0xTE1TZWErbEZ6N3RqcVVwcE1GdGJTb2QzbklxbXlrVi9lcVZ6UmNTOGg5WmIyR1lBcThLMUZYclZFVjRiQit5VE4iLCJtYWMiOiI2ZmZmMWEyZTAwMzY0ZWZiMWJhYTU5YzdhMzYzMWM1MWEyY2MyOWUzMjFjOWUwMDk0ZmViMTczODg5MTEyMjY0IiwidGFnIjoiIn0%3D; expires=Tue, 23 Dec 2025 11:28:39 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Vary: Accept-Encoding
X-Powered-By: PleskLin
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<title></title>
<!-- Tell the browser to be responsive to screen width -->
<meta name="viewport" content="width=device-width, initial-scale=1">
<!-- Font Awesome -->
<link rel="stylesheet" href="dashbord/plugins/fontawesome-free/css/all.min.css">
<!-- Ionicons -->
<link rel="stylesheet" href="https://code.ionicframework.com/ionicons/2.0.1/css/ionicons.min.css">
<!-- DataTables -->
<link rel="stylesheet" href="dashbord/plugins/datatables-bs4/css/dataTables.bootstrap4.min.css">
<link rel="stylesheet" href="dashbord/plugins/datatables-responsive/css/responsive.bootstrap4.min.css">
<!-- Theme style -->
<link rel="stylesheet" href="dashbord/dist/css/adminlte.min.css">
<!-- Google Font: Source Sans Pro -->
<link href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,400i,700" rel="stylesheet">
</head>
<body class="hold-transition login-page">
<div class="login-box">
<div class="login-logo">
<a href="../../index2.html"><b>Connexion</b> FTP</a>
</div>
<!-- /.login-logo -->
<div class="card">
<div class="card-body login-card-body">
<p class="login-box-msg">Sign in to start your session</p>
<form action="/connexion" method="post">
<input type="hidden" name="_token" value="p1hXzCsN8OyXni95vcUSnywgidAjkScmHIUEzvgH"> <div class="input-group mb-3">
<input type="text" name="login" class="form-control" placeholder="Email">
<div class="input-group-append">
<div class="input-group-text">
<span class="fas fa-envelope"></span>
</div>
</div>
</div>
<div class="input-group mb-3">
<input type="password" name="password" class="form-control" placeholder="Password">
<div class="input-group-append">
<div class="input-group-text">
<span class="fas fa-lock"></span>
</div>
</div>
</div>
<div class="row">
<div class="col-6">
<div class="icheck-primary">
</div>
</div>
<!-- /.col -->
<div class="col-6">
<button type="submit" class="btn btn-primary btn-block">Connexion</button>
</div>
<!-- /.col -->
</div>
</form>
<div class="social-auth-links text-center mb-3">
</div>
<!-- /.social-auth-links -->
<p class="mb-1">
<a href="forgot-password.html"></a>
</p>
<p class="mb-0">
</p>
</div>
<!-- /.login-card-body -->
</div>
</div>
<!-- /.login-box -->
<!-- jQuery -->
<script src="../../plugins/jquery/jquery.min.js"></script>
<!-- Bootstrap 4 -->
<script src="../../plugins/bootstrap/js/bootstrap.bundle.min.js"></script>
<!-- AdminLTE App -->
<script src="../../dist/js/adminlte.min.js"></script>
</body>
</html>
Open service 13.37.90.88:443 · bollore-reconciliation.cinetpay.com
2025-12-21 11:36
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 Dec 2025 11:36:13 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 2975
Connection: close
X-Powered-By: PHP/8.1.33
Cache-Control: private, must-revalidate
pragma: no-cache
expires: -1
Set-Cookie: XSRF-TOKEN=eyJpdiI6IlNxN2VMVm1MY2MvcE1kOXhtWFZlSEE9PSIsInZhbHVlIjoiTlRObTc2UnptUFgrZnErcW1CK2tWUW96YVdNRVRKdzExNCtLNXhpdUZ5bXUrcFd1QmtrZmJlajdIT24xVXRyYUdtL0ZJcE4yRWFvVTQrOHFJK3pnZG92SmJ6Ny9rbzU2OUxLTTlNZElWY2I1amtoM0tCK0tUWHFNbGtiMm15MWEiLCJtYWMiOiIxNTM5NjYxMDI5OTY4ZGRiMzNmOGZmOGIyMjM0YjE4NDdmMGEwZTM1MWNkOGE1ZTViZGI4OGZjNDJiMjQwNmU4IiwidGFnIjoiIn0%3D; expires=Sun, 21 Dec 2025 13:36:13 GMT; Max-Age=7200; path=/; samesite=lax
Set-Cookie: laravel_session=eyJpdiI6Ilg2MDBwREZpbG9JWkJzWkpUWllZQWc9PSIsInZhbHVlIjoiRDhVR0JVQ0xrbnRSb28zTzVXcHlSWk94b2JxSWxzY1RXWk5BdVNjT2dWKytrcDlweEx3MkF4YVBWcDc1MnV3Vm9YUTdvTU9QOU11d0U3WlJmaHVZc1lDWk5GSzZyV2VxVzFHWWR4L1NNUS9wMk1rNmFLREk3V0gwV0tTL3J3U0giLCJtYWMiOiJkNDhjMDY4Y2Y4ZTJiN2NkZGRmMjVkNzQxNmNkZWE3ZTJmMDI3MzJkYzBkMmVmYmUwYmRkMzg5OThkZDAxZWM3IiwidGFnIjoiIn0%3D; expires=Sun, 21 Dec 2025 13:36:13 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Vary: Accept-Encoding
X-Powered-By: PleskLin
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<title></title>
<!-- Tell the browser to be responsive to screen width -->
<meta name="viewport" content="width=device-width, initial-scale=1">
<!-- Font Awesome -->
<link rel="stylesheet" href="dashbord/plugins/fontawesome-free/css/all.min.css">
<!-- Ionicons -->
<link rel="stylesheet" href="https://code.ionicframework.com/ionicons/2.0.1/css/ionicons.min.css">
<!-- DataTables -->
<link rel="stylesheet" href="dashbord/plugins/datatables-bs4/css/dataTables.bootstrap4.min.css">
<link rel="stylesheet" href="dashbord/plugins/datatables-responsive/css/responsive.bootstrap4.min.css">
<!-- Theme style -->
<link rel="stylesheet" href="dashbord/dist/css/adminlte.min.css">
<!-- Google Font: Source Sans Pro -->
<link href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,400i,700" rel="stylesheet">
</head>
<body class="hold-transition login-page">
<div class="login-box">
<div class="login-logo">
<a href="../../index2.html"><b>Connexion</b> FTP</a>
</div>
<!-- /.login-logo -->
<div class="card">
<div class="card-body login-card-body">
<p class="login-box-msg">Sign in to start your session</p>
<form action="/connexion" method="post">
<input type="hidden" name="_token" value="YyyKjXVHJl209HrB4nof9L77bsZ024k920iBRRDx"> <div class="input-group mb-3">
<input type="text" name="login" class="form-control" placeholder="Email">
<div class="input-group-append">
<div class="input-group-text">
<span class="fas fa-envelope"></span>
</div>
</div>
</div>
<div class="input-group mb-3">
<input type="password" name="password" class="form-control" placeholder="Password">
<div class="input-group-append">
<div class="input-group-text">
<span class="fas fa-lock"></span>
</div>
</div>
</div>
<div class="row">
<div class="col-6">
<div class="icheck-primary">
</div>
</div>
<!-- /.col -->
<div class="col-6">
<button type="submit" class="btn btn-primary btn-block">Connexion</button>
</div>
<!-- /.col -->
</div>
</form>
<div class="social-auth-links text-center mb-3">
</div>
<!-- /.social-auth-links -->
<p class="mb-1">
<a href="forgot-password.html"></a>
</p>
<p class="mb-0">
</p>
</div>
<!-- /.login-card-body -->
</div>
</div>
<!-- /.login-box -->
<!-- jQuery -->
<script src="../../plugins/jquery/jquery.min.js"></script>
<!-- Bootstrap 4 -->
<script src="../../plugins/bootstrap/js/bootstrap.bundle.min.js"></script>
<!-- AdminLTE App -->
<script src="../../dist/js/adminlte.min.js"></script>
</body>
</html>
Open service 13.37.90.88:443 · bollore-reconciliation.cinetpay.com
2025-12-19 09:39
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Dec 2025 09:39:07 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 2975
Connection: close
X-Powered-By: PHP/8.1.33
Cache-Control: private, must-revalidate
pragma: no-cache
expires: -1
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkIzZTFIOWNKM0RvV2ZDaVZuOWVOOFE9PSIsInZhbHVlIjoiZjI2WjEwN05kSEd0TXd3SzdmenRyeFdIMUpHb2hDUmpLMGh0UDBEanh2eVJuRWpxUjd3dVZoeW95Vk5GQVprMktxdytZTXpkTU1saUp4RDBCcFN6eWN3YitXL2NrcXQzampXVGswR2krWngvYjg3VTJaSEhER3lYL2pudzZ1blEiLCJtYWMiOiIyNDJiOTgxZGQzOTAwNzExZWJkZjcyOTU2ZDk5YjQxZWJkMzViNDJhMjRiYmVmNzIxOTEyYmJjYThmOTA5ZTkwIiwidGFnIjoiIn0%3D; expires=Fri, 19 Dec 2025 11:39:07 GMT; Max-Age=7200; path=/; samesite=lax
Set-Cookie: laravel_session=eyJpdiI6IjkrVnJlVGZDbHExaVJ6R2ViN1JlY2c9PSIsInZhbHVlIjoibmY3YWlDNXROa2Z0VDIrQ3FFRWZaSFNZencvOXRFWllMN1g4cXRiSEVMU0VRYWxGNDgyTFlZYm1LOVdvcE9uUTVrV2p0bFNHSCtMU29jTU5FeHJRRTdvb1dGcjJJQzYyell5UUZGQzVJdlExQy91cHJIQlliQkREMW13dkZRR1kiLCJtYWMiOiIwMjVhMTg5OTgwOTI2MWQ2ODhmOTFlMGY3MDkzNzA1M2ZjMzBmNWZiZDQ0N2Y1M2I4NWI5ZDU3ODFlMzY0ZWIwIiwidGFnIjoiIn0%3D; expires=Fri, 19 Dec 2025 11:39:07 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Vary: Accept-Encoding
X-Powered-By: PleskLin
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<title></title>
<!-- Tell the browser to be responsive to screen width -->
<meta name="viewport" content="width=device-width, initial-scale=1">
<!-- Font Awesome -->
<link rel="stylesheet" href="dashbord/plugins/fontawesome-free/css/all.min.css">
<!-- Ionicons -->
<link rel="stylesheet" href="https://code.ionicframework.com/ionicons/2.0.1/css/ionicons.min.css">
<!-- DataTables -->
<link rel="stylesheet" href="dashbord/plugins/datatables-bs4/css/dataTables.bootstrap4.min.css">
<link rel="stylesheet" href="dashbord/plugins/datatables-responsive/css/responsive.bootstrap4.min.css">
<!-- Theme style -->
<link rel="stylesheet" href="dashbord/dist/css/adminlte.min.css">
<!-- Google Font: Source Sans Pro -->
<link href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,400i,700" rel="stylesheet">
</head>
<body class="hold-transition login-page">
<div class="login-box">
<div class="login-logo">
<a href="../../index2.html"><b>Connexion</b> FTP</a>
</div>
<!-- /.login-logo -->
<div class="card">
<div class="card-body login-card-body">
<p class="login-box-msg">Sign in to start your session</p>
<form action="/connexion" method="post">
<input type="hidden" name="_token" value="6qBxhbtC4Aa5h4AaopLsVTmVGXvV7WMAIsCAtpHS"> <div class="input-group mb-3">
<input type="text" name="login" class="form-control" placeholder="Email">
<div class="input-group-append">
<div class="input-group-text">
<span class="fas fa-envelope"></span>
</div>
</div>
</div>
<div class="input-group mb-3">
<input type="password" name="password" class="form-control" placeholder="Password">
<div class="input-group-append">
<div class="input-group-text">
<span class="fas fa-lock"></span>
</div>
</div>
</div>
<div class="row">
<div class="col-6">
<div class="icheck-primary">
</div>
</div>
<!-- /.col -->
<div class="col-6">
<button type="submit" class="btn btn-primary btn-block">Connexion</button>
</div>
<!-- /.col -->
</div>
</form>
<div class="social-auth-links text-center mb-3">
</div>
<!-- /.social-auth-links -->
<p class="mb-1">
<a href="forgot-password.html"></a>
</p>
<p class="mb-0">
</p>
</div>
<!-- /.login-card-body -->
</div>
</div>
<!-- /.login-box -->
<!-- jQuery -->
<script src="../../plugins/jquery/jquery.min.js"></script>
<!-- Bootstrap 4 -->
<script src="../../plugins/bootstrap/js/bootstrap.bundle.min.js"></script>
<!-- AdminLTE App -->
<script src="../../dist/js/adminlte.min.js"></script>
</body>
</html>