nginx
tcp/443 tcp/80
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c668fcbec668fcbec66dfde701f1481242baccc7eb38f9e03
Found 17 files trough .DS_Store spidering: /admin /admin/css /admin/js /admin/js/sortable /admin/vendor /admin/vendor/bootstrap-treeview /admin/vendor/ckeditor /admin/vendor/ckeditor/adapters /admin/vendor/ckeditor/samples /admin/vendor/ckeditor/samples/js /admin/vendor/ckeditor/samples/old /admin/vendor/ckeditor/samples/toolbarconfigurator /admin/vendor/dropzone /admin/vendor/jquery-confirm /admin/vendor/magnific-popup /admin/vendor/sweetalert /upload
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c668fcbec668fcbec66dfde701f1481242baccc7eb38f9e03
Found 17 files trough .DS_Store spidering: /admin /admin/css /admin/js /admin/js/sortable /admin/vendor /admin/vendor/bootstrap-treeview /admin/vendor/ckeditor /admin/vendor/ckeditor/adapters /admin/vendor/ckeditor/samples /admin/vendor/ckeditor/samples/js /admin/vendor/ckeditor/samples/old /admin/vendor/ckeditor/samples/toolbarconfigurator /admin/vendor/dropzone /admin/vendor/jquery-confirm /admin/vendor/magnific-popup /admin/vendor/sweetalert /upload
Open service 20.50.2.19:80 · coxabengoa.com
2026-01-09 17:29
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 Date: Fri, 09 Jan 2026 17:30:02 GMT Server: nginx Cache-Control: max-age=3600 Expires: Fri, 09 Jan 2026 18:30:02 GMT Location: https://coxabengoa.com/ Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Powered-By: PHP/8.3.26 X-Redirect-By: WordPress X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self)
Open service 20.50.2.19:443 · coxabengoa.com
2026-01-09 15:28
HTTP/1.1 200 OK Connection: close Content-Type: text/html; charset=UTF-8 Date: Fri, 09 Jan 2026 15:29:33 GMT Server: nginx Transfer-Encoding: chunked Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Powered-By: PHP/8.3.26 Link: <https://coxabengoa.com/wp-json/>; rel="https://api.w.org/" Link: <https://coxabengoa.com/wp-json/wp/v2/pages/9>; rel="alternate"; type="application/json" Link: <https://coxabengoa.com/>; rel=shortlink X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self)
Open service 20.50.2.19:80 · coxabengoa.com
2026-01-02 23:11
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 Date: Fri, 02 Jan 2026 23:11:56 GMT Server: nginx Cache-Control: max-age=3600 Expires: Sat, 03 Jan 2026 00:11:56 GMT Location: https://coxabengoa.com/ Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Powered-By: PHP/8.3.26 X-Redirect-By: WordPress X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self)
Open service 20.50.2.19:443 · coxabengoa.com
2026-01-02 12:15
HTTP/1.1 200 OK Connection: close Content-Type: text/html; charset=UTF-8 Date: Fri, 02 Jan 2026 12:15:26 GMT Server: nginx Transfer-Encoding: chunked Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Powered-By: PHP/8.3.26 Link: <https://coxabengoa.com/wp-json/>; rel="https://api.w.org/" Link: <https://coxabengoa.com/wp-json/wp/v2/pages/9>; rel="alternate"; type="application/json" Link: <https://coxabengoa.com/>; rel=shortlink X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self)
Open service 20.50.2.19:80 · coxabengoa.com
2025-12-30 10:05
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 Date: Tue, 30 Dec 2025 10:05:08 GMT Server: nginx Cache-Control: max-age=3600 Expires: Tue, 30 Dec 2025 11:05:08 GMT Location: https://coxabengoa.com/ Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Powered-By: PHP/8.3.26 X-Redirect-By: WordPress X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self)
Open service 20.50.2.19:80 · coxabengoa.com
2025-12-22 22:20
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 Date: Mon, 22 Dec 2025 22:20:07 GMT Server: nginx Cache-Control: max-age=3600 Expires: Mon, 22 Dec 2025 23:20:07 GMT Location: https://coxabengoa.com/ Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Powered-By: PHP/8.3.26 X-Redirect-By: WordPress X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self)
Open service 20.50.2.19:443 · coxabengoa.com
2025-12-22 18:37
HTTP/1.1 200 OK Connection: close Content-Type: text/html; charset=UTF-8 Date: Mon, 22 Dec 2025 18:37:35 GMT Server: nginx Transfer-Encoding: chunked Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Powered-By: PHP/8.3.26 Link: <https://coxabengoa.com/wp-json/>; rel="https://api.w.org/" Link: <https://coxabengoa.com/wp-json/wp/v2/pages/9>; rel="alternate"; type="application/json" Link: <https://coxabengoa.com/>; rel=shortlink X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self)
Open service 20.50.2.19:80 · coxabengoa.com
2025-12-21 03:38
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 Date: Sun, 21 Dec 2025 03:38:48 GMT Server: nginx Cache-Control: max-age=3600 Expires: Sun, 21 Dec 2025 04:38:48 GMT Location: https://coxabengoa.com/ Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Powered-By: PHP/8.3.26 X-Redirect-By: WordPress X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self)
Open service 20.50.2.19:443 · coxabengoa.com
2025-12-20 18:08
HTTP/1.1 200 OK Connection: close Content-Type: text/html; charset=UTF-8 Date: Sat, 20 Dec 2025 18:08:01 GMT Server: nginx Transfer-Encoding: chunked Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Powered-By: PHP/8.3.26 Link: <https://coxabengoa.com/wp-json/>; rel="https://api.w.org/" Link: <https://coxabengoa.com/wp-json/wp/v2/pages/9>; rel="alternate"; type="application/json" Link: <https://coxabengoa.com/>; rel=shortlink X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self)
Open service 20.50.2.19:80 · coxabengoa.com
2025-12-19 02:58
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Dec 2025 02:58:45 GMT Server: nginx Cache-Control: max-age=3600 Expires: Fri, 19 Dec 2025 03:58:45 GMT Location: https://coxabengoa.com/ Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Powered-By: PHP/8.3.26 X-Redirect-By: WordPress X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self)