cloudflare
tcp/443 tcp/80
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: high
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d186028152d5242d5ebf8b9025ab43f45
Found 12 files trough .DS_Store spidering: /404.html /422.html /500.html /apple-touch-icon-precomposed.png /apple-touch-icon.png /assets /favicon.ico /packs /robots.txt /sitemap.xml /sitemap.xml.gz /sitemaps
Open service 172.66.166.11:8443 · ecosystem.syncari.com
2026-01-11 16:17
Open service 2606:4700:10::6814:1e81:80 · ecosystem.syncari.com
2026-01-11 16:17
HTTP/1.1 301 Moved Permanently Date: Sun, 11 Jan 2026 16:17:48 GMT Content-Length: 0 Connection: close Location: https://ecosystem.syncari.com/ X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9bc5b9f42c4f0a73-AMS
Open service 2606:4700:10::ac42:a60b:80 · ecosystem.syncari.com
2026-01-11 16:17
HTTP/1.1 301 Moved Permanently Date: Sun, 11 Jan 2026 16:17:48 GMT Content-Length: 0 Connection: close Location: https://ecosystem.syncari.com/ X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9bc5b9f40d8b8c31-LHR
Open service 2606:4700:10::6814:1e81:443 · ecosystem.syncari.com
2026-01-11 16:17
HTTP/1.1 200 OK
Date: Sun, 11 Jan 2026 16:17:49 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: public
Content-Security-Policy:
Last-Modified: Mon, 09 Dec 2024 15:44:40 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=E8bgPWotnxduzQk9%2B7WRejPgMMIHvIk%2BYyeajIaJzsE%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1768148269"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=E8bgPWotnxduzQk9%2B7WRejPgMMIHvIk%2BYyeajIaJzsE%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1768148269"
Server: cloudflare
Set-Cookie: token=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklreFhjWE5xVW1Gb2FUaHZSa041VW1nMVZUZERWRkV4TnpZNE1UUTRNalk1TlRNNElnPT0iLCJleHAiOiIyMDI2LTAxLTExVDE2OjQ3OjQ5LjUzOFoiLCJwdXIiOiJjb29raWUudG9rZW4ifX0%3D--b5abe3323fca679654161f8d29c9ad86b0580a22; path=/; expires=Thu, 11 Jan 2046 16:17:49 GMT; secure; HttpOnly; SameSite=Strict
Set-Cookie: guest_token=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklreFhjWE5xVW1Gb2FUaHZSa041VW1nMVZUZERWRkV4TnpZNE1UUTRNalk1TlRNNElnPT0iLCJleHAiOiIyMDI2LTAxLTExVDE2OjQ3OjQ5LjUzOVoiLCJwdXIiOiJjb29raWUuZ3Vlc3RfdG9rZW4ifX0%3D--04ff0d6bac181c281b8d0b829d6ed570a9db3498; path=/; expires=Thu, 11 Jan 2046 16:17:49 GMT; secure; HttpOnly; SameSite=Strict
Set-Cookie: _pf_session=tXriw%2FW48wtVkzvZR6IvjbvyODe%2FPSW78kQHDbbdP9NLwy4RRzAOj1VpjoAs1Cllf43URurp0cMD9kLVPwJfrcPnp6ugdH9EvL94ugJy1EHSNtvs%2BGgd9oVxw7ovJRgHMW9HmdbrRFc7uoGOdb1Gr2N7ngA0Ud0DCSE3Bp137peIdiX3JTr9FZVRX%2FQqDXXBJHfSh6STS9r3NBl3rYT0KLWcgFXnMPPNvrcQLieAxijJ2rCLFrTXigz2z42%2F36vLwB11ygBbRVVlLQzSpKWPN33nExEHSvC6TqQr4XLEiUYmE5k01IxZbl8%3D--TSZnXUdnhlgsaJtm--IBRMLjH0j2c6d6Mxak%2B9ug%3D%3D; path=/; expires=Sun, 25 Jan 2026 16:17:49 GMT; secure; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=2592000; includeSubDomains
Vary: Origin,Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Rack-Cors: miss; no-origin
X-Request-Id: 91faf194-62e3-b093-51b8-183c9543c126
X-Runtime: 0.421085
X-Xss-Protection: 1; mode=block
cf-cache-status: DYNAMIC
CF-RAY: 9bc5b9fa28fc1f99-FRA
Open service 172.66.166.11:443 · ecosystem.syncari.com
2026-01-11 16:17
HTTP/1.1 200 OK
Date: Sun, 11 Jan 2026 16:17:49 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: public
Content-Security-Policy:
Last-Modified: Mon, 09 Dec 2024 15:44:40 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=E8bgPWotnxduzQk9%2B7WRejPgMMIHvIk%2BYyeajIaJzsE%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1768148269"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=E8bgPWotnxduzQk9%2B7WRejPgMMIHvIk%2BYyeajIaJzsE%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1768148269"
Server: cloudflare
Set-Cookie: token=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkltdzNURlpHVjBSVk9HczFRV00wWjI5TVkzVmFjbmN4TnpZNE1UUTRNalk1TWpjd0lnPT0iLCJleHAiOiIyMDI2LTAxLTExVDE2OjQ3OjQ5LjI3MFoiLCJwdXIiOiJjb29raWUudG9rZW4ifX0%3D--7f90e47c51ca5bfbd0ffdf5454053284bd34cf99; path=/; expires=Thu, 11 Jan 2046 16:17:49 GMT; secure; HttpOnly; SameSite=Strict
Set-Cookie: guest_token=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkltdzNURlpHVjBSVk9HczFRV00wWjI5TVkzVmFjbmN4TnpZNE1UUTRNalk1TWpjd0lnPT0iLCJleHAiOiIyMDI2LTAxLTExVDE2OjQ3OjQ5LjI3MVoiLCJwdXIiOiJjb29raWUuZ3Vlc3RfdG9rZW4ifX0%3D--67f883e2461d3e239ebfae4ba7ec787f07ae6b67; path=/; expires=Thu, 11 Jan 2046 16:17:49 GMT; secure; HttpOnly; SameSite=Strict
Set-Cookie: _pf_session=zWAVosVoTpbIi6S9jRFxDByNdpZq5CBlw7FZ7BmYnoPWupoK90RSVxD3navsgH5UrCpPvAnHZt%2FzKX4mAMGZz0YLzhCq%2BQAN%2BLFoiiXwhSqh4D7Rj%2BylgFatC4Mla5T2ZXFhG83FyIY%2FzmcdxS6WfoDPc6pnN40E1a6kMEHQ3jiHuA8yrQ2HuhLYrbogFoQrz2BN%2BZVsUceCmIj5u%2FaWmsJu2lTMLY4%2Fl%2FU0Qv7T7gQYiJbr77mWh8itAqqKHHHrCqZmQTV%2FXsu%2Ffew0z4bxDDsLymRS5k2Uc1qr1EohjzcQbzyAh0FDCMQ%3D--L2jx8TxOVuUNhXf7--WJjbi0THNIK7OGDv%2BtTxEg%3D%3D; path=/; expires=Sun, 25 Jan 2026 16:17:49 GMT; secure; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=2592000; includeSubDomains
Vary: Origin,Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Rack-Cors: miss; no-origin
X-Request-Id: c9b1582e-7591-da2b-db38-b2930d380d86
X-Runtime: 0.430806
X-Xss-Protection: 1; mode=block
cf-cache-status: DYNAMIC
CF-RAY: 9bc5b9f9fbdebf5d-YYZ
Open service 104.20.30.129:8443 · ecosystem.syncari.com
2026-01-11 16:17
Open service 2606:4700:10::ac42:a60b:8443 · ecosystem.syncari.com
2026-01-11 16:17
Open service 104.20.30.129:443 · ecosystem.syncari.com
2026-01-11 16:17
HTTP/1.1 200 OK
Date: Sun, 11 Jan 2026 16:17:49 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: public
Content-Security-Policy:
Last-Modified: Mon, 09 Dec 2024 15:44:40 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=E8bgPWotnxduzQk9%2B7WRejPgMMIHvIk%2BYyeajIaJzsE%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1768148269"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=E8bgPWotnxduzQk9%2B7WRejPgMMIHvIk%2BYyeajIaJzsE%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1768148269"
Server: cloudflare
Set-Cookie: token=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluaG1UVE14YTFVME9UWlJSVzVKVW1sblNGWlRjM2N4TnpZNE1UUTRNalk1TXpnd0lnPT0iLCJleHAiOiIyMDI2LTAxLTExVDE2OjQ3OjQ5LjM4MFoiLCJwdXIiOiJjb29raWUudG9rZW4ifX0%3D--abd197731224cf527e5f100fc32b21aafea2d59e; path=/; expires=Thu, 11 Jan 2046 16:17:49 GMT; secure; HttpOnly; SameSite=Strict
Set-Cookie: guest_token=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluaG1UVE14YTFVME9UWlJSVzVKVW1sblNGWlRjM2N4TnpZNE1UUTRNalk1TXpnd0lnPT0iLCJleHAiOiIyMDI2LTAxLTExVDE2OjQ3OjQ5LjM4MVoiLCJwdXIiOiJjb29raWUuZ3Vlc3RfdG9rZW4ifX0%3D--d6b62361ff21622130d27f3d3c4dfc1d52b52959; path=/; expires=Thu, 11 Jan 2046 16:17:49 GMT; secure; HttpOnly; SameSite=Strict
Set-Cookie: _pf_session=OcfiYY8BoN2UO1nqwFHW2gLjKEx2pHEAAc88wHVq6q12M17a3IPQJJ63KXNfh9sOn16rkSCFLu4oRbRkrq3LDuPISB1SMi7fqKcS1mube7Sw0ygMFLDWzEFNO7Y2xs6zD7Ckk%2FTXNE5LM8%2BG7kaqnWFHBUMLBEX7nCdrqGNMTjALo2m6FFgm1aJXtZdZPMJcYeFbAB5FPAdiSlsXoXpa%2BfLksbM%2Fu5cbP0DBsiJv4W%2BLWm1wRQIalowb5x8Z9nk4EedSy9M%2BJUxB8DNkAA%2F7J2O9ua0tVBBGjTjyTAT8npKpvKOeOiPLWg0%3D--D9VnHUgLIrnsWFGN--fgWCtxHQKshM0jvQuIWp%2BQ%3D%3D; path=/; expires=Sun, 25 Jan 2026 16:17:49 GMT; secure; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=2592000; includeSubDomains
Vary: Origin,Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Rack-Cors: miss; no-origin
X-Request-Id: 4192d0e0-37e0-e3a5-d947-1f29f1da130f
X-Runtime: 0.204890
X-Xss-Protection: 1; mode=block
cf-cache-status: DYNAMIC
CF-RAY: 9bc5b9f9cd64a666-SJC
Open service 2606:4700:10::6814:1e81:8443 · ecosystem.syncari.com
2026-01-11 16:17
Open service 172.66.166.11:80 · ecosystem.syncari.com
2026-01-11 16:17
HTTP/1.1 301 Moved Permanently Date: Sun, 11 Jan 2026 16:17:48 GMT Content-Length: 0 Connection: close Location: https://ecosystem.syncari.com/ X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9bc5b9f37faa9765-FRA
Open service 2606:4700:10::ac42:a60b:443 · ecosystem.syncari.com
2026-01-11 16:17
HTTP/1.1 200 OK
Date: Sun, 11 Jan 2026 16:17:49 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: public
Content-Security-Policy:
Last-Modified: Mon, 09 Dec 2024 15:44:40 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=E8bgPWotnxduzQk9%2B7WRejPgMMIHvIk%2BYyeajIaJzsE%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1768148269"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=E8bgPWotnxduzQk9%2B7WRejPgMMIHvIk%2BYyeajIaJzsE%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1768148269"
Server: cloudflare
Set-Cookie: token=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklrMXNkMGc1TUZwNWFqTkZablJsZUdkUGFXZzJZMEV4TnpZNE1UUTRNalk1TkRRNElnPT0iLCJleHAiOiIyMDI2LTAxLTExVDE2OjQ3OjQ5LjQ0OFoiLCJwdXIiOiJjb29raWUudG9rZW4ifX0%3D--71aa60231b28c49058d4927a22b4f71cfe64bb9a; path=/; expires=Thu, 11 Jan 2046 16:17:49 GMT; secure; HttpOnly; SameSite=Strict
Set-Cookie: guest_token=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklrMXNkMGc1TUZwNWFqTkZablJsZUdkUGFXZzJZMEV4TnpZNE1UUTRNalk1TkRRNElnPT0iLCJleHAiOiIyMDI2LTAxLTExVDE2OjQ3OjQ5LjQ0OFoiLCJwdXIiOiJjb29raWUuZ3Vlc3RfdG9rZW4ifX0%3D--c0fef237e5122ade8697f174fdd40c8309440c2c; path=/; expires=Thu, 11 Jan 2046 16:17:49 GMT; secure; HttpOnly; SameSite=Strict
Set-Cookie: _pf_session=vrLeZCU6tt4p%2F%2BWAdomsmrGcwxRvTiigbD9nmQgVdck2zETua%2B8HDfZ9SSOxmZ6%2BfnXjr8urdwFLGgeOxZoLzPgkD4EqC1QMe5kiZclmVsY4ld%2Fncur8pGVZsAsJK9ecfnpbky17L1OS%2Fl1zs35gmvQCx0fkQd6BlHayfgMuNrtKMt59dqelmDpNxnPTtEjomICLn7t1LdqK3M1QHz4MNwDth%2BGEje3wT2ojlce5pTSoyGv5HUnl60cLgletnZOAworN20G9MemTNrLP4Cjn3t3UbItuvAHVrTuv8d2TCY15ra383GOSPPQ%3D--JiSdJrQQ1hJBDcBo--qvcOnV3x1QSoiZHlmIXiZw%3D%3D; path=/; expires=Sun, 25 Jan 2026 16:17:49 GMT; secure; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=2592000; includeSubDomains
Vary: Origin,Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Rack-Cors: miss; no-origin
X-Request-Id: 401c954f-f8fb-9308-3517-de407ed4fb42
X-Runtime: 0.404524
X-Xss-Protection: 1; mode=block
cf-cache-status: DYNAMIC
CF-RAY: 9bc5b9f968339400-LHR
Open service 104.20.30.129:80 · ecosystem.syncari.com
2026-01-11 16:17
HTTP/1.1 301 Moved Permanently Date: Sun, 11 Jan 2026 16:17:47 GMT Content-Length: 0 Connection: close Location: https://ecosystem.syncari.com/ X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9bc5b9f2cee69f21-FRA