nginx
tcp/443 tcp/80
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d4b0e6f5b4b0e6f5b4b0e6f5b4b0e6f5b
Found 1 files trough .DS_Store spidering: /web_images
Open service 82.64.189.210:443 · drive.fkhl.fr
2025-12-19 03:47
HTTP/1.1 200 OK Server: nginx Date: Fri, 19 Dec 2025 03:47:32 GMT Content-Type: text/html; charset="UTF-8" Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-control: no-store X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Content-Security-Policy: base-uri 'self'; connect-src data: ws: wss: http: https:; default-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://help.synology.cn/; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com https://fonts.gstatic.com; form-action 'self'; frame-ancestors 'self'; frame-src 'self' data: blob: https://*.synology.com https://*.synology.cn https://www.youtube.com http://www.youtube.com http://*.synology.com http://*.synology.cn; img-src 'self' data: blob: https://*.google.com https://*.googleapis.com http://*.googlecode.com https://*.gstatic.com https://global.download.synology.com https://maps.gstatic.com https://*.googleapis.com https://*.google.com https://i.ytimg.com https://*.ggpht.com; media-src 'self' data: about: https://*.synology.com https://help.synology.cn; script-src 'self' 'unsafe-eval' data: blob: https://maps.google.com https://ajax.googleapis.com https://help.synology.com https://help.synology.cn https://maps.google.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://fonts.googleapis.com; Strict-Transport-Security: max-age=15768000; includeSubdomains; preload Page title: NoDrive <!DOCTYPE html> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=11" /> <meta name="msapplication-TileImage" content="resources/images/icon_tile.png?v=4398" /> <meta name="application-name" content="NoDrive" /> <meta name="msapplication-TileColor" content="#246BB3"/> <meta name="description" content="DiskStation provides a full-featured network attached storage (NAS) solution to help you manage, backup and share data among Windows, Mac and Linux easily." /> <meta name="keywords" content="Multitasking,Web Application,Personal Cloud" /> <link rel="apple-touch-icon" href="webman/resources/images/icon_dsm_96.png?v=40438" /> <link rel="mask-icon" href="webman/safari_pin_icon.svg" color="#0086E5" /> <link rel="icon" href="webman/favicon.ico?v=40438" /> <link rel="icon" href="webman/resources/images/icon_dsm_96.png?v=40438" sizes="96x96"/> <link rel="icon" href="webman/resources/images/icon_dsm_64.png?v=40438" sizes="64x64"/> <link rel="icon" href="webman/resources/images/icon_dsm_48.png?v=40438" sizes="48x48"/> <link rel="icon" href="webman/resources/images/icon_dsm_32.png?v=40438" sizes="32x32"/> <link rel="icon" href="webman/resources/images/icon_dsm_16.png?v=40438" sizes="16x16"/> <title>NoDrive</title> <link rel="stylesheet" type="text/css" href="webman/unsupported-browsers/dist/bundle.css?v=1661421011" /> <link rel="stylesheet" type="text/css" href="scripts/ext-3.4/resources/css/ext-all.css?v=1650348555" /> <link rel="stylesheet" type="text/css" href="scripts/syno-vue-components/style/syno-vue-components.css?v=1652869476" /> <link rel="stylesheet" type="text/css" href="scripts/scrollbar/flexcroll.css?v=1650348555" /> <link rel="stylesheet" type="text/css" href="scripts/ext-3/ux/ux-all.css?v=1650348555" /> <link rel="stylesheet" type="text/css" href="synoSDSjslib/sds.css?v=1654081517" /> <link rel="stylesheet" type="text/css" href="webman/desktop/dist/style.css?v=1661421011" /> <link rel="stylesheet" type="text/css" href="webman/taskbar/dist/style.css?v=1661421011" /> <link rel="stylesheet" type="text/css" href="webman/login/dist/style.css?v=1661421011" /> <link rel="stylesheet" type="text/css" href="webman/resources/css/desktop.css?v=1661421011" /> <link rel="stylesheet" type="text/css" href="webman/modules/Utils/style.css?v=1661757678" /> <link rel="stylesheet" type="text/css" href="webman/modules/ClipBoardJS/style.css?v=1661757678" /> <link rel="stylesheet" type="text/css" href="webman/modules/FileChooser/style.css?v=1661757678" /> <link rel="stylesheet" type="text/css" href="webman/modules/FileChooserV6/style.css?v=1661757678" /> <link rel="stylesheet" type="text/css" href="webman/3rdparty/SynologyDrive-Drive/style.css?v=1731304858" /> <link rel="stylesheet" type="text/css" href="webman/3rdparty/SynologyApplicationService/style.css?v=1675505560" /> </head> <body role="application"> <div id="sds-wallpaper"></div> <!-- Don't contain any text node to avoid IE insertBefore bug --> <div id="sds-login-vue"></div> <div id="framework-attach"></div> <script type="text/javascript" src="webapi/entry.cgi?api=SYNO.Core.Desktop.SessionData&version=1&method=getjs&launchApp=SYNO.SDS.SheetStation.Application&SynoToken=&v=1656670912"></script> <script type="text/javascript" src="scripts/babel-polyfill/polyfill.js?v=1650348555"></script> <script type="text/javascript" src="scripts/synowebapi.js/synowebapi.min.js?v=1653287912"></script> <script type="text/javascript" src="scripts/synocredential.js/synocredential.min.js?v=1661507553"></script> <script type="text/javascript" src="webapi/entry.cgi?api=SYNO.Core.Desktop.Defs&version=1&method=getjs&launchApp=SYNO.SDS.SheetStation.Application&v=1663841737"></script> <script type="text/javascript" src="webapi/entry.cgi?api=SYNO.Core.Desktop.JSUIString&version=1&method=getjs&lang=enu&v=1666534317"></script> <script type="text/javascript" src="webapi/entry.cgi?api=SYNO.Core.Desktop.UIString&version=1&method=getjs&lang=enu&v=1738901725"></script> <script type="text/javascript" src="webman/unsupported-browsers/dist/b
Open service 82.64.189.210:80 · drive.fkhl.fr
2025-12-19 03:47
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Dec 2025 03:47:32 GMT
Content-Type: text/html
Content-Length: 1474
Connection: close
Vary: Accept-Encoding
Last-Modified: Fri, 15 Mar 2019 21:19:02 GMT
ETag: "5c8c16c6-5c2"
Accept-Ranges: bytes
Page title: Hello! Welcome to Synology Web Station!
<!DOCTYPE html>
<html class="img-no-display"><head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>Hello! Welcome to Synology Web Station!</title>
<style>
html {
height: 100%;
overflow: hidden;
}
body {
background: url(web_images/bg.png) no-repeat center center fixed;
-webkit-background-size: cover;
-moz-background-size: cover;
-o-background-size: cover;
background-size: cover;
height: 100%;
}
div#outer {
display: table;
height: 100%;
width: 100%;
}
div#container {
display: table-cell;
text-align: center;
vertical-align: middle;
}
#paragraph {
padding: 20px 0 30px 40px;
margin: 0 auto;
text-align: left;
width: 560px;
color: #146b9d;
font-size: 11pt;
font-weight: bold;
font-family: Verdana;
}
</style>
<link href="../help.css" type="text/css" rel="stylesheet" />
<link href="../scrollbar/flexcroll.css" type="text/css" rel="stylesheet" />
<script type="text/javascript" src="../scrollbar/flexcroll.js"></script>
<script type="text/javascript" src="../scrollbar/initFlexcroll.js"></script>
</head>
<body>
<div id="outer">
<div id="container">
<img src="web_images/icon.png" />
<p id="paragraph">Web Station has been enabled. To finish setting up your website, please see the "Web Service" section of DSM Help.</p>
</div>
</div>
</body></html>