Heroku
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733f93b77d9b240ac757bb18cb8317310bd8
Found 10 files trough .DS_Store spidering: /404.html /422.html /blank.png /confirmation.html /favicon.ico /packs /portraits /pulse.svg /spinner.svg /tangrams
Open service 3.33.241.96:443 · development.seneri.net
2026-01-09 23:23
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; charset=utf-8
Feature-Policy: geolocation 'self'; camera 'none'; microphone 'none'; usb 'none'; fullscreen 'self'; payment 'self'
Location: https://seneri.net/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=jCWOE6XjnODfBFrSNye61cByRGtgy40tInEyzoKqJAY%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1768001022"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=jCWOE6XjnODfBFrSNye61cByRGtgy40tInEyzoKqJAY%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1768001022"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: bb75557a-e1a3-6eb5-29bb-9bbd9ee98bf0
X-Runtime: 0.011260
X-Xss-Protection: 0
Date: Fri, 09 Jan 2026 23:23:42 GMT
Connection: close
Open service 3.33.241.96:443 · development.seneri.net
2025-12-30 10:41
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; charset=utf-8
Feature-Policy: geolocation 'self'; camera 'none'; microphone 'none'; usb 'none'; fullscreen 'self'; payment 'self'
Location: https://seneri.net/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=87mnCGV7t2%2F55SrcaE1eWHj5wit%2BxWsisI7S%2B%2BgIuxs%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767091273"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=87mnCGV7t2%2F55SrcaE1eWHj5wit%2BxWsisI7S%2B%2BgIuxs%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767091273"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 97a5d449-b7f6-c90f-c7e3-df133be5c334
X-Runtime: 0.020199
X-Xss-Protection: 0
Date: Tue, 30 Dec 2025 10:41:13 GMT
Connection: close
Open service 3.33.241.96:443 · development.seneri.net
2025-12-23 08:09
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; charset=utf-8
Feature-Policy: geolocation 'self'; camera 'none'; microphone 'none'; usb 'none'; fullscreen 'self'; payment 'self'
Location: https://seneri.net/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=C5G3WYq7wFElVMC6h0BbQ%2FKsqZiq%2BN29cbNsfgSPuTc%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766477343"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=C5G3WYq7wFElVMC6h0BbQ%2FKsqZiq%2BN29cbNsfgSPuTc%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766477343"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: a1dca929-e780-ea0c-051a-f9c604f598fd
X-Runtime: 0.011424
X-Xss-Protection: 0
Date: Tue, 23 Dec 2025 08:09:03 GMT
Connection: close
Open service 3.33.241.96:443 · development.seneri.net
2025-12-21 02:54
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; charset=utf-8
Feature-Policy: geolocation 'self'; camera 'none'; microphone 'none'; usb 'none'; fullscreen 'self'; payment 'self'
Location: https://seneri.net/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=h5hwRe3Mx8ZehgY2yw8ZOIJQq27HldSOASm%2BHjDXA8M%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766285675"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=h5hwRe3Mx8ZehgY2yw8ZOIJQq27HldSOASm%2BHjDXA8M%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766285675"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 099d42d3-1386-7e89-b26e-697b992c6ac0
X-Runtime: 0.013047
X-Xss-Protection: 0
Date: Sun, 21 Dec 2025 02:54:35 GMT
Connection: close
Open service 3.33.241.96:443 · development.seneri.net
2025-12-19 03:23
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; charset=utf-8
Feature-Policy: geolocation 'self'; camera 'none'; microphone 'none'; usb 'none'; fullscreen 'self'; payment 'self'
Location: https://seneri.net/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=LgJUI257d1B%2BfHh5EtW6W6YQ0bbhTThlQ5XyBlEVY1w%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766114635"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=LgJUI257d1B%2BfHh5EtW6W6YQ0bbhTThlQ5XyBlEVY1w%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766114635"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 2c0a39ae-de6d-073c-23b1-3c9c0036a656
X-Runtime: 0.011212
X-Xss-Protection: 0
Date: Fri, 19 Dec 2025 03:23:55 GMT
Connection: close