.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d7da9d3d114ca2f8ae4b791e869a847f9
Found 12 files trough .DS_Store spidering: /app /app/icons /azure-static-web-apps-wonderful-bush-06b521510.yml /createUser.html /css /done.html /images /index.html /manifest.json /README.md /README~.md /style2.css
Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772692eda2af7e4b50884441d837726bdd9
Found 11 files trough .DS_Store spidering: /app /azure-static-web-apps-wonderful-bush-06b521510.yml /createUser.html /css /done.html /images /index.html /manifest.json /README.md /README~.md /style2.css
Open service 20.82.12.44:443 · esg.ih4.org
2026-01-09 16:22
HTTP/1.1 200 OK
Content-Length: 6383
Connection: close
Content-Type: text/html
Date: Fri, 09 Jan 2026 16:23:29 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "70925606"
Last-Modified: Fri, 12 May 2023 19:00:46 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: ESG VR
<!DOCTYPE HTML>
<html lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
<meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1, maximum-scale=1, viewport-fit=cover" />
<title>ESG VR</title>
<link rel="stylesheet" type="text/css" href="css/bootstrap.min.css">
<link rel="stylesheet" type="text/css" href="css/style.css">
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900&display=swap" rel="stylesheet">
<link rel="manifest" href="manifest.json" data-pwa-version="2.0">
<link rel="apple-touch-icon" sizes="180x180" href="app/icons/icon-192x192.png">
<script type="text/javascript" src="https://unpkg.com/axios@0.24.0/dist/axios.min.js"></script>
</head>
<body>
<div class="pt-4">
</div>
<div class="wrapper m-auto pt-5 vh-100">
<div class="loading d-flex justify-content-center d-none align-items-center">
<img src="images/loading.gif" alt="loading">
</div>
<div class="content">
<!--Header-->
<header>
<div class="secondary-logo" style="max-width: 85px">
<img src="images/pwcLogo.png" alt="logowhite">
</div>
<div class="main-logo">
<img src="images/esgLogo.png" alt="logo">
</div>
</header>
<!--Main-->
<main>
<div class="inputs-container">
<form id="main-form" class="form-inline">
<div class="title_select">
<label>Room</label>
</div>
<div class="select_box w-100">
<select class="form-select" aria-label="Default select example" id="room">
<option selected value="internalRoomA">Internal Room A</option>
<option value="internalRoomB">Internal Room B</option>
<option value="client1">Client 1</option>
</select>
</div>
<div class="txt_field w-100 mt-5">
<input type="email" id="email" placeholder=" " required>
<span></span>
<label>Email</label>
</div>
<div class="txt_field w-100">
<input type="text" id="code" placeholder=" " required>
<span></span>
<label>Activation code</label>
</div>
<button id="post-btn" type="submit" class="btn btn-primary mb-2">Login</button>
<div class="signup w-100">
<p class="text-center">Not a member? <a id="theLink" href="createUser.html#email=">Sign up</a></p>
</div>
</form>
</div>
</main>
<!--Footer-->
<footer>
<div class="mt-3">
<img src="images/bottomStripes.png" alt="bottom">
</div>
</footer>
</div>
</div>
</body>
<script type="text/javascript">
document.getElementById("theLink").onclick = function() {
var email = document.getElementById("email").value;
var code = document.getElementById("code").value;
document.getElementById("theLink").href="createUser.html#email=" + encodeURIComponent(email) + "&code=" + encodeURIComponent(code);
};
window.addEventListener("load", () => {
const form = document.querySelector("form");
form.addEventListener("submit", (e) => {
e.preventDefault();
var activationCode = document.getElementById("code").value;
var email = document.getElementById("email").value;
var room = document.getElementById("room").value;
var data = '{"email": "'+ email +'", "roomName": "'+ room +'"}';
var localUrl = 'http://localhost:7071/api/challenge/' + activationCode;
var remoteUrl = 'https://vrtransactions.azurewebsites.net/
Open service 20.82.12.44:443 · esg.ih4.org
2026-01-02 21:45
HTTP/1.1 200 OK
Content-Length: 6383
Connection: close
Content-Type: text/html
Date: Fri, 02 Jan 2026 21:45:36 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "70925606"
Last-Modified: Fri, 12 May 2023 19:00:46 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: ESG VR
<!DOCTYPE HTML>
<html lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
<meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1, maximum-scale=1, viewport-fit=cover" />
<title>ESG VR</title>
<link rel="stylesheet" type="text/css" href="css/bootstrap.min.css">
<link rel="stylesheet" type="text/css" href="css/style.css">
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900&display=swap" rel="stylesheet">
<link rel="manifest" href="manifest.json" data-pwa-version="2.0">
<link rel="apple-touch-icon" sizes="180x180" href="app/icons/icon-192x192.png">
<script type="text/javascript" src="https://unpkg.com/axios@0.24.0/dist/axios.min.js"></script>
</head>
<body>
<div class="pt-4">
</div>
<div class="wrapper m-auto pt-5 vh-100">
<div class="loading d-flex justify-content-center d-none align-items-center">
<img src="images/loading.gif" alt="loading">
</div>
<div class="content">
<!--Header-->
<header>
<div class="secondary-logo" style="max-width: 85px">
<img src="images/pwcLogo.png" alt="logowhite">
</div>
<div class="main-logo">
<img src="images/esgLogo.png" alt="logo">
</div>
</header>
<!--Main-->
<main>
<div class="inputs-container">
<form id="main-form" class="form-inline">
<div class="title_select">
<label>Room</label>
</div>
<div class="select_box w-100">
<select class="form-select" aria-label="Default select example" id="room">
<option selected value="internalRoomA">Internal Room A</option>
<option value="internalRoomB">Internal Room B</option>
<option value="client1">Client 1</option>
</select>
</div>
<div class="txt_field w-100 mt-5">
<input type="email" id="email" placeholder=" " required>
<span></span>
<label>Email</label>
</div>
<div class="txt_field w-100">
<input type="text" id="code" placeholder=" " required>
<span></span>
<label>Activation code</label>
</div>
<button id="post-btn" type="submit" class="btn btn-primary mb-2">Login</button>
<div class="signup w-100">
<p class="text-center">Not a member? <a id="theLink" href="createUser.html#email=">Sign up</a></p>
</div>
</form>
</div>
</main>
<!--Footer-->
<footer>
<div class="mt-3">
<img src="images/bottomStripes.png" alt="bottom">
</div>
</footer>
</div>
</div>
</body>
<script type="text/javascript">
document.getElementById("theLink").onclick = function() {
var email = document.getElementById("email").value;
var code = document.getElementById("code").value;
document.getElementById("theLink").href="createUser.html#email=" + encodeURIComponent(email) + "&code=" + encodeURIComponent(code);
};
window.addEventListener("load", () => {
const form = document.querySelector("form");
form.addEventListener("submit", (e) => {
e.preventDefault();
var activationCode = document.getElementById("code").value;
var email = document.getElementById("email").value;
var room = document.getElementById("room").value;
var data = '{"email": "'+ email +'", "roomName": "'+ room +'"}';
var localUrl = 'http://localhost:7071/api/challenge/' + activationCode;
var remoteUrl = 'https://vrtransactions.azurewebsites.net/
Open service 20.82.12.44:443 · esg.ih4.org
2025-12-27 02:56
HTTP/1.1 200 OK
Content-Length: 6383
Connection: close
Content-Type: text/html
Date: Sat, 27 Dec 2025 02:56:53 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "70925606"
Last-Modified: Fri, 12 May 2023 19:00:46 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: ESG VR
<!DOCTYPE HTML>
<html lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
<meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1, maximum-scale=1, viewport-fit=cover" />
<title>ESG VR</title>
<link rel="stylesheet" type="text/css" href="css/bootstrap.min.css">
<link rel="stylesheet" type="text/css" href="css/style.css">
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900&display=swap" rel="stylesheet">
<link rel="manifest" href="manifest.json" data-pwa-version="2.0">
<link rel="apple-touch-icon" sizes="180x180" href="app/icons/icon-192x192.png">
<script type="text/javascript" src="https://unpkg.com/axios@0.24.0/dist/axios.min.js"></script>
</head>
<body>
<div class="pt-4">
</div>
<div class="wrapper m-auto pt-5 vh-100">
<div class="loading d-flex justify-content-center d-none align-items-center">
<img src="images/loading.gif" alt="loading">
</div>
<div class="content">
<!--Header-->
<header>
<div class="secondary-logo" style="max-width: 85px">
<img src="images/pwcLogo.png" alt="logowhite">
</div>
<div class="main-logo">
<img src="images/esgLogo.png" alt="logo">
</div>
</header>
<!--Main-->
<main>
<div class="inputs-container">
<form id="main-form" class="form-inline">
<div class="title_select">
<label>Room</label>
</div>
<div class="select_box w-100">
<select class="form-select" aria-label="Default select example" id="room">
<option selected value="internalRoomA">Internal Room A</option>
<option value="internalRoomB">Internal Room B</option>
<option value="client1">Client 1</option>
</select>
</div>
<div class="txt_field w-100 mt-5">
<input type="email" id="email" placeholder=" " required>
<span></span>
<label>Email</label>
</div>
<div class="txt_field w-100">
<input type="text" id="code" placeholder=" " required>
<span></span>
<label>Activation code</label>
</div>
<button id="post-btn" type="submit" class="btn btn-primary mb-2">Login</button>
<div class="signup w-100">
<p class="text-center">Not a member? <a id="theLink" href="createUser.html#email=">Sign up</a></p>
</div>
</form>
</div>
</main>
<!--Footer-->
<footer>
<div class="mt-3">
<img src="images/bottomStripes.png" alt="bottom">
</div>
</footer>
</div>
</div>
</body>
<script type="text/javascript">
document.getElementById("theLink").onclick = function() {
var email = document.getElementById("email").value;
var code = document.getElementById("code").value;
document.getElementById("theLink").href="createUser.html#email=" + encodeURIComponent(email) + "&code=" + encodeURIComponent(code);
};
window.addEventListener("load", () => {
const form = document.querySelector("form");
form.addEventListener("submit", (e) => {
e.preventDefault();
var activationCode = document.getElementById("code").value;
var email = document.getElementById("email").value;
var room = document.getElementById("room").value;
var data = '{"email": "'+ email +'", "roomName": "'+ room +'"}';
var localUrl = 'http://localhost:7071/api/challenge/' + activationCode;
var remoteUrl = 'https://vrtransactions.azurewebsites.net/
Open service 20.82.12.44:443 · esg.ih4.org
2025-12-22 22:37
HTTP/1.1 200 OK
Content-Length: 6383
Connection: close
Content-Type: text/html
Date: Mon, 22 Dec 2025 22:37:05 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "70925606"
Last-Modified: Fri, 12 May 2023 19:00:46 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: ESG VR
<!DOCTYPE HTML>
<html lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
<meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1, maximum-scale=1, viewport-fit=cover" />
<title>ESG VR</title>
<link rel="stylesheet" type="text/css" href="css/bootstrap.min.css">
<link rel="stylesheet" type="text/css" href="css/style.css">
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900&display=swap" rel="stylesheet">
<link rel="manifest" href="manifest.json" data-pwa-version="2.0">
<link rel="apple-touch-icon" sizes="180x180" href="app/icons/icon-192x192.png">
<script type="text/javascript" src="https://unpkg.com/axios@0.24.0/dist/axios.min.js"></script>
</head>
<body>
<div class="pt-4">
</div>
<div class="wrapper m-auto pt-5 vh-100">
<div class="loading d-flex justify-content-center d-none align-items-center">
<img src="images/loading.gif" alt="loading">
</div>
<div class="content">
<!--Header-->
<header>
<div class="secondary-logo" style="max-width: 85px">
<img src="images/pwcLogo.png" alt="logowhite">
</div>
<div class="main-logo">
<img src="images/esgLogo.png" alt="logo">
</div>
</header>
<!--Main-->
<main>
<div class="inputs-container">
<form id="main-form" class="form-inline">
<div class="title_select">
<label>Room</label>
</div>
<div class="select_box w-100">
<select class="form-select" aria-label="Default select example" id="room">
<option selected value="internalRoomA">Internal Room A</option>
<option value="internalRoomB">Internal Room B</option>
<option value="client1">Client 1</option>
</select>
</div>
<div class="txt_field w-100 mt-5">
<input type="email" id="email" placeholder=" " required>
<span></span>
<label>Email</label>
</div>
<div class="txt_field w-100">
<input type="text" id="code" placeholder=" " required>
<span></span>
<label>Activation code</label>
</div>
<button id="post-btn" type="submit" class="btn btn-primary mb-2">Login</button>
<div class="signup w-100">
<p class="text-center">Not a member? <a id="theLink" href="createUser.html#email=">Sign up</a></p>
</div>
</form>
</div>
</main>
<!--Footer-->
<footer>
<div class="mt-3">
<img src="images/bottomStripes.png" alt="bottom">
</div>
</footer>
</div>
</div>
</body>
<script type="text/javascript">
document.getElementById("theLink").onclick = function() {
var email = document.getElementById("email").value;
var code = document.getElementById("code").value;
document.getElementById("theLink").href="createUser.html#email=" + encodeURIComponent(email) + "&code=" + encodeURIComponent(code);
};
window.addEventListener("load", () => {
const form = document.querySelector("form");
form.addEventListener("submit", (e) => {
e.preventDefault();
var activationCode = document.getElementById("code").value;
var email = document.getElementById("email").value;
var room = document.getElementById("room").value;
var data = '{"email": "'+ email +'", "roomName": "'+ room +'"}';
var localUrl = 'http://localhost:7071/api/challenge/' + activationCode;
var remoteUrl = 'https://vrtransactions.azurewebsites.net/
Open service 20.82.12.44:443 · esg.ih4.org
2025-12-21 04:45
HTTP/1.1 200 OK
Content-Length: 6383
Connection: close
Content-Type: text/html
Date: Sun, 21 Dec 2025 04:45:58 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "70925606"
Last-Modified: Fri, 12 May 2023 19:00:46 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: ESG VR
<!DOCTYPE HTML>
<html lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
<meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1, maximum-scale=1, viewport-fit=cover" />
<title>ESG VR</title>
<link rel="stylesheet" type="text/css" href="css/bootstrap.min.css">
<link rel="stylesheet" type="text/css" href="css/style.css">
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900&display=swap" rel="stylesheet">
<link rel="manifest" href="manifest.json" data-pwa-version="2.0">
<link rel="apple-touch-icon" sizes="180x180" href="app/icons/icon-192x192.png">
<script type="text/javascript" src="https://unpkg.com/axios@0.24.0/dist/axios.min.js"></script>
</head>
<body>
<div class="pt-4">
</div>
<div class="wrapper m-auto pt-5 vh-100">
<div class="loading d-flex justify-content-center d-none align-items-center">
<img src="images/loading.gif" alt="loading">
</div>
<div class="content">
<!--Header-->
<header>
<div class="secondary-logo" style="max-width: 85px">
<img src="images/pwcLogo.png" alt="logowhite">
</div>
<div class="main-logo">
<img src="images/esgLogo.png" alt="logo">
</div>
</header>
<!--Main-->
<main>
<div class="inputs-container">
<form id="main-form" class="form-inline">
<div class="title_select">
<label>Room</label>
</div>
<div class="select_box w-100">
<select class="form-select" aria-label="Default select example" id="room">
<option selected value="internalRoomA">Internal Room A</option>
<option value="internalRoomB">Internal Room B</option>
<option value="client1">Client 1</option>
</select>
</div>
<div class="txt_field w-100 mt-5">
<input type="email" id="email" placeholder=" " required>
<span></span>
<label>Email</label>
</div>
<div class="txt_field w-100">
<input type="text" id="code" placeholder=" " required>
<span></span>
<label>Activation code</label>
</div>
<button id="post-btn" type="submit" class="btn btn-primary mb-2">Login</button>
<div class="signup w-100">
<p class="text-center">Not a member? <a id="theLink" href="createUser.html#email=">Sign up</a></p>
</div>
</form>
</div>
</main>
<!--Footer-->
<footer>
<div class="mt-3">
<img src="images/bottomStripes.png" alt="bottom">
</div>
</footer>
</div>
</div>
</body>
<script type="text/javascript">
document.getElementById("theLink").onclick = function() {
var email = document.getElementById("email").value;
var code = document.getElementById("code").value;
document.getElementById("theLink").href="createUser.html#email=" + encodeURIComponent(email) + "&code=" + encodeURIComponent(code);
};
window.addEventListener("load", () => {
const form = document.querySelector("form");
form.addEventListener("submit", (e) => {
e.preventDefault();
var activationCode = document.getElementById("code").value;
var email = document.getElementById("email").value;
var room = document.getElementById("room").value;
var data = '{"email": "'+ email +'", "roomName": "'+ room +'"}';
var localUrl = 'http://localhost:7071/api/challenge/' + activationCode;
var remoteUrl = 'https://vrtransactions.azurewebsites.net/