cloudflare
tcp/443 tcp/80
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7e65830eac4c49ff0819821983c4adb9d
Found 128 files trough .DS_Store spidering: /.well-known /.well-known/acme-challenge /.well-known/pki-validation /app /bootstrap /bootstrap/cache /build /build/config /build/js /build/npm /build/scss /config /css /database /database/factories /database/migrations /database/seeders /dist /dist/css /dist/img /dist/js /js /node_modules /node_modules/.bin /node_modules/@ampproject /node_modules/@babel /node_modules/@jridgewell /node_modules/@mrmlnc /node_modules/@nodelib /node_modules/@types /node_modules/@vue /node_modules/@webassemblyjs /node_modules/@xtuc /node_modules/accepts /node_modules/acorn /node_modules/adjust-sourcemap-loader /node_modules/aggregate-error /node_modules/ajv /node_modules/ajv-errors /node_modules/ajv-keywords /node_modules/alphanum-sort /node_modules/ansi-colors /node_modules/ansi-html-community /node_modules/ansi-regex /node_modules/ansi-styles /node_modules/anymatch /node_modules/aproba /node_modules/argparse /node_modules/arity-n /node_modules/arr-diff /node_modules/arr-flatten /node_modules/arr-union /node_modules/array-flatten /node_modules/array-union /node_modules/array-uniq /node_modules/array-unique /node_modules/array.prototype.reduce /node_modules/arrify /node_modules/asn1.js /node_modules/assert /node_modules/assign-symbols /node_modules/ast-types /node_modules/async /node_modules/async-each /node_modules/async-limiter /node_modules/atob /node_modules/autoprefixer /node_modules/axios /node_modules/babel-code-frame /node_modules/babel-loader /node_modules/babel-merge /node_modules/babel-plugin-dynamic-import-node /node_modules/babel-plugin-polyfill-corejs2 /node_modules/babel-plugin-polyfill-corejs3 /node_modules/babel-plugin-polyfill-regenerator /node_modules/balanced-match /node_modules/base /node_modules/base64-js /node_modules/batch /node_modules/big.js /node_modules/binary-extensions /node_modules/bluebird /node_modules/bn.js /node_modules/body-parser /node_modules/bonjour /node_modules/boolbase /node_modules/bootstrap /node_modules/brace-expansion /node_modules/braces /node_modules/brorand /node_modules/browserify-aes /node_modules/browserify-cipher /node_modules/browserify-des /node_modules/browserify-rsa /node_modules/browserify-sign /node_modules/browserify-zlib /node_modules/browserslist /node_modules/buffer /node_modules/buffer-from /node_modules/buffer-indexof /node_modules/buffer-xor /node_modules/builtin-status-codes /node_modules/bytes /node_modules/cacache /node_modules/cache-base /node_modules/call-bind /node_modules/call-me-maybe /node_modules/caller-callsite /node_modules/caller-path /node_modules/callsites /node_modules/camel-case /node_modules/camelcase /node_modules/caniuse-api /node_modules/caniuse-lite /node_modules/chalk /node_modules/charenc /node_modules/chokidar /node_modules/chownr /node_modules/chrome-trace-event /node_modules/cipher-base /node_modules/class-utils /node_modules/clean-css /node_modules/clean-stack /node_modules/cliui /node_modules/clone-deep /node_modules/coa /node_modules/collect.js /node_modules/collection-visit
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7e65830eac4c49ff0819821983c4adb9d
Found 128 files trough .DS_Store spidering: /.well-known /.well-known/acme-challenge /.well-known/pki-validation /app /bootstrap /bootstrap/cache /build /build/config /build/js /build/npm /build/scss /config /css /database /database/factories /database/migrations /database/seeders /dist /dist/css /dist/img /dist/js /js /node_modules /node_modules/.bin /node_modules/@ampproject /node_modules/@babel /node_modules/@jridgewell /node_modules/@mrmlnc /node_modules/@nodelib /node_modules/@types /node_modules/@vue /node_modules/@webassemblyjs /node_modules/@xtuc /node_modules/accepts /node_modules/acorn /node_modules/adjust-sourcemap-loader /node_modules/aggregate-error /node_modules/ajv /node_modules/ajv-errors /node_modules/ajv-keywords /node_modules/alphanum-sort /node_modules/ansi-colors /node_modules/ansi-html-community /node_modules/ansi-regex /node_modules/ansi-styles /node_modules/anymatch /node_modules/aproba /node_modules/argparse /node_modules/arity-n /node_modules/arr-diff /node_modules/arr-flatten /node_modules/arr-union /node_modules/array-flatten /node_modules/array-union /node_modules/array-uniq /node_modules/array-unique /node_modules/array.prototype.reduce /node_modules/arrify /node_modules/asn1.js /node_modules/assert /node_modules/assign-symbols /node_modules/ast-types /node_modules/async /node_modules/async-each /node_modules/async-limiter /node_modules/atob /node_modules/autoprefixer /node_modules/axios /node_modules/babel-code-frame /node_modules/babel-loader /node_modules/babel-merge /node_modules/babel-plugin-dynamic-import-node /node_modules/babel-plugin-polyfill-corejs2 /node_modules/babel-plugin-polyfill-corejs3 /node_modules/babel-plugin-polyfill-regenerator /node_modules/balanced-match /node_modules/base /node_modules/base64-js /node_modules/batch /node_modules/big.js /node_modules/binary-extensions /node_modules/bluebird /node_modules/bn.js /node_modules/body-parser /node_modules/bonjour /node_modules/boolbase /node_modules/bootstrap /node_modules/brace-expansion /node_modules/braces /node_modules/brorand /node_modules/browserify-aes /node_modules/browserify-cipher /node_modules/browserify-des /node_modules/browserify-rsa /node_modules/browserify-sign /node_modules/browserify-zlib /node_modules/browserslist /node_modules/buffer /node_modules/buffer-from /node_modules/buffer-indexof /node_modules/buffer-xor /node_modules/builtin-status-codes /node_modules/bytes /node_modules/cacache /node_modules/cache-base /node_modules/call-bind /node_modules/call-me-maybe /node_modules/caller-callsite /node_modules/caller-path /node_modules/callsites /node_modules/camel-case /node_modules/camelcase /node_modules/caniuse-api /node_modules/caniuse-lite /node_modules/chalk /node_modules/charenc /node_modules/chokidar /node_modules/chownr /node_modules/chrome-trace-event /node_modules/cipher-base /node_modules/class-utils /node_modules/clean-css /node_modules/clean-stack /node_modules/cliui /node_modules/clone-deep /node_modules/coa /node_modules/collect.js /node_modules/collection-visit
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7e65830eac4c49ff0819821983c4adb9d
Found 128 files trough .DS_Store spidering: /.well-known /.well-known/acme-challenge /.well-known/pki-validation /app /bootstrap /bootstrap/cache /build /build/config /build/js /build/npm /build/scss /config /css /database /database/factories /database/migrations /database/seeders /dist /dist/css /dist/img /dist/js /js /node_modules /node_modules/.bin /node_modules/@ampproject /node_modules/@babel /node_modules/@jridgewell /node_modules/@mrmlnc /node_modules/@nodelib /node_modules/@types /node_modules/@vue /node_modules/@webassemblyjs /node_modules/@xtuc /node_modules/accepts /node_modules/acorn /node_modules/adjust-sourcemap-loader /node_modules/aggregate-error /node_modules/ajv /node_modules/ajv-errors /node_modules/ajv-keywords /node_modules/alphanum-sort /node_modules/ansi-colors /node_modules/ansi-html-community /node_modules/ansi-regex /node_modules/ansi-styles /node_modules/anymatch /node_modules/aproba /node_modules/argparse /node_modules/arity-n /node_modules/arr-diff /node_modules/arr-flatten /node_modules/arr-union /node_modules/array-flatten /node_modules/array-union /node_modules/array-uniq /node_modules/array-unique /node_modules/array.prototype.reduce /node_modules/arrify /node_modules/asn1.js /node_modules/assert /node_modules/assign-symbols /node_modules/ast-types /node_modules/async /node_modules/async-each /node_modules/async-limiter /node_modules/atob /node_modules/autoprefixer /node_modules/axios /node_modules/babel-code-frame /node_modules/babel-loader /node_modules/babel-merge /node_modules/babel-plugin-dynamic-import-node /node_modules/babel-plugin-polyfill-corejs2 /node_modules/babel-plugin-polyfill-corejs3 /node_modules/babel-plugin-polyfill-regenerator /node_modules/balanced-match /node_modules/base /node_modules/base64-js /node_modules/batch /node_modules/big.js /node_modules/binary-extensions /node_modules/bluebird /node_modules/bn.js /node_modules/body-parser /node_modules/bonjour /node_modules/boolbase /node_modules/bootstrap /node_modules/brace-expansion /node_modules/braces /node_modules/brorand /node_modules/browserify-aes /node_modules/browserify-cipher /node_modules/browserify-des /node_modules/browserify-rsa /node_modules/browserify-sign /node_modules/browserify-zlib /node_modules/browserslist /node_modules/buffer /node_modules/buffer-from /node_modules/buffer-indexof /node_modules/buffer-xor /node_modules/builtin-status-codes /node_modules/bytes /node_modules/cacache /node_modules/cache-base /node_modules/call-bind /node_modules/call-me-maybe /node_modules/caller-callsite /node_modules/caller-path /node_modules/callsites /node_modules/camel-case /node_modules/camelcase /node_modules/caniuse-api /node_modules/caniuse-lite /node_modules/chalk /node_modules/charenc /node_modules/chokidar /node_modules/chownr /node_modules/chrome-trace-event /node_modules/cipher-base /node_modules/class-utils /node_modules/clean-css /node_modules/clean-stack /node_modules/cliui /node_modules/clone-deep /node_modules/coa /node_modules/collect.js /node_modules/collection-visit
Open service 104.21.37.195:80 · flex.z-plustools.com
2026-01-23 11:58
HTTP/1.1 302 Found
Date: Fri, 23 Jan 2026 11:58:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CiHw%2Fmz3rfbEH5IBi%2BKU2WaYVVK480E%2Fp%2FP1m6sEigGC%2BsVgKb5wrUKuZ5SXI%2F5wCGpbIvWtQF8h00TDXeNdeNXr7NbkdBOR2wPwhlIvV%2BrN%2FA%3D%3D"}]}
x-powered-by: PHP/8.2.29
cache-control: no-cache, no-store, must-revalidate, max-age=0
location: http://flex.z-plustools.com/login
set-cookie: XSRF-TOKEN=eyJpdiI6InZQVEE2eElwWGVmVXl1VHJYVUV6ZWc9PSIsInZhbHVlIjoiZVRXMDFLRG5rMzdsNUo3UEdBQ3llajRGbUJQZjM3K0NRYThmblNheGRVd0Z4aUJZZGlES3JkQXhtYWpIZVBkS25NUlgwS1lRblZXV25DNm1GR1dvaTJaMjN5Si9FN2NweDdUUlZ5Ri93UUhaV2ZKdmJ2VHhpVG5wYWJkZUNFSFoiLCJtYWMiOiI0ZTY4OTk2NDNkZDRjYmI5MjkzZGMzODA3YjU1NDZlMWZmM2Q0N2U2N2ZmMDYyMDllNmY2YmIwYmExYWJjNjY2IiwidGFnIjoiIn0%3D; expires=Fri, 23-Jan-2026 13:58:08 GMT; Max-Age=7200; path=/; samesite=lax
set-cookie: metricmaster_session=eyJpdiI6IkVjS2piWXB0THVOU2FUOGFkaU95Rmc9PSIsInZhbHVlIjoiOG04bktESFJXVUhMRGRsTEVkNkFpRFRjSTlKZ0lOcjh4ay82dXBxVTJmMjd1UTFmRlcySXg0TGFQaktjZldGQ0FWb2Y4VDZFM3RyZkM3c0NHUENwRzQxR3dhMmN0YTAxWEd3blBzTG50cmFQUUEyY3YzTEorWkIzTDJCUGxVOWsiLCJtYWMiOiI2MjhlMGYwNWNiYTU1NDlhMDBkYTU5MjU2MjE4YzhmMzY1OGZhNWM4MmNjMjk2Zjk1YWYxNGM5Zjc3MWY0OTdlIiwidGFnIjoiIn0%3D; expires=Fri, 23-Jan-2026 13:58:08 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=18,cfOrigin;dur=219
cf-cache-status: DYNAMIC
Server: cloudflare
CF-RAY: 9c271e139da00f41-EWR
alt-svc: h3=":443"; ma=86400
Page title: Redirecting to http://flex.z-plustools.com/login
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='http://flex.z-plustools.com/login'" />
<title>Redirecting to http://flex.z-plustools.com/login</title>
</head>
<body>
Redirecting to <a href="http://flex.z-plustools.com/login">http://flex.z-plustools.com/login</a>.
<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"593f7ae2953b4d89a8ece76b1fd42387","r":1,"server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>
</body>
</html>
Open service 172.67.212.174:443 · flex.z-plustools.com
2026-01-23 02:22
HTTP/1.1 302 Found
Date: Fri, 23 Jan 2026 02:22:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rvc%2B5h%2BySBaWGiKVHZ%2BJ9iOmHc7Qs2IisPNfJ2jaXwYQAfG3v97HoWjnNDQJZVXjhANal5t4KzKfLnJYb3iO7WNWQN%2FlYZoD3rhoV8%2FMZ6vIsyTD"}]}
x-powered-by: PHP/8.2.29
cache-control: no-cache, no-store, must-revalidate, max-age=0
location: https://flex.z-plustools.com/login
set-cookie: XSRF-TOKEN=eyJpdiI6ImxZMXlHTStNRkZEZXo3aVVwbTRMaFE9PSIsInZhbHVlIjoiOTM4L1U3RWN2VVVXU0hLNTJMK2hnZElxWjkwRHdrTWJhcFUzMUI4aWxWMjB0OFh0TlhSTllYdlhzYVpFWElHcGZGdjA3cEIrUSt3b3dNL3hnUlNkYW8vOE0wU1AvaFJiT29GMjZwSnl5NGkvellkRVZyRWlPYzJ2Z01IM0Vsa3QiLCJtYWMiOiIxNmE5YTNjNzlhMmMxMjJkOWU4ZGIxOGVlMmE4ZWFhZDdlZWNlZWMxZjAxY2ZkMGNkOGJhNTYwZTZkN2U5MGI2IiwidGFnIjoiIn0%3D; expires=Fri, 23-Jan-2026 04:22:10 GMT; Max-Age=7200; path=/; samesite=lax; secure
set-cookie: metricmaster_session=eyJpdiI6ImErMFNOdW8yUW9KNlFwS0ZDczZHWEE9PSIsInZhbHVlIjoiWGJtVS9LUEtZUFlObGp5N2xJb0V2elowaDRpREt3R2wwMUVMNGlHdmthYUFGL3U5QWlTdmxJcVhsTW4yQTNRUzg3OEFhRWQ1QnJXOVlYUDJIV0h3MU5JVmJuZTlwa0JTZTlmUUltV0Z4REJmcjJURE4yRWxiN0ZxRWFCS2dJWGkiLCJtYWMiOiJkMjA3YmVhNzY2OGU5ZjNjNDg4N2ZjZmIyNDhmNjA0ZThhMDcxNmVlNzFmMDcxZmVlNzAxNzY2NGQyOWFmYmE0IiwidGFnIjoiIn0%3D; expires=Fri, 23-Jan-2026 04:22:10 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure
vary: Accept-Encoding
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=23,cfOrigin;dur=201
cf-cache-status: DYNAMIC
Server: cloudflare
CF-RAY: 9c23d2600f2c41a3-EWR
alt-svc: h3=":443"; ma=86400
Page title: Redirecting to https://flex.z-plustools.com/login
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='https://flex.z-plustools.com/login'" />
<title>Redirecting to https://flex.z-plustools.com/login</title>
</head>
<body>
Redirecting to <a href="https://flex.z-plustools.com/login">https://flex.z-plustools.com/login</a>.
<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"593f7ae2953b4d89a8ece76b1fd42387","r":1,"server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>
</body>
</html>
Open service 104.21.37.195:80 · www.flex.z-plustools.com
2026-01-23 02:22
HTTP/1.1 302 Found
Date: Fri, 23 Jan 2026 02:22:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=a9xAXF0tT3eTaXTk%2FM3uwwOx4CqsmPGmlFW5rn3%2BPcN4plL2A5b%2B0IDx5blDC476IoJqYuEhAlf0ZNRXpzDRL7jV6AziIJr0IEoiHXr0ih6sLSY30O%2Bb4g%3D%3D"}]}
x-powered-by: PHP/8.2.29
cache-control: no-cache, no-store, must-revalidate, max-age=0
location: http://www.flex.z-plustools.com/login
set-cookie: XSRF-TOKEN=eyJpdiI6IjZZcURNbmI1VVF1SUhNVC8yQjBOUEE9PSIsInZhbHVlIjoiOXo1OFdkZFB5OGc3eGhzRXkvelZYVHU2QTVRODVxR1JsRnF0dXIvcjAvMytYdi8ySk8wS0hkUjRhVTRNcmZqSGNTanpYRTZtUXVKOG9OYWdubGVXNU1EZ2NIRDhvVVFDdkh6VnZ6YVFBUjc4TStDZzNxOUtOa0xrbExWaU9pUEEiLCJtYWMiOiI4MDU2YjZjNGVhNWRjYjE5MWEwYzE0NjgyMzE1MmM1NzI3MWYxMTlhNmUzMmE0N2EwN2RkMDMzOGVhOWU1ZDJhIiwidGFnIjoiIn0%3D; expires=Fri, 23-Jan-2026 04:22:09 GMT; Max-Age=7200; path=/; samesite=lax
set-cookie: metricmaster_session=eyJpdiI6InVpb2NIaEpGUnIvdHJaNzVZUklEaXc9PSIsInZhbHVlIjoiR2lSZmdsT2NJTUVhKzZ1bGJocnNhaFBzTEFhdElhdFZnR0lWMUQ2VGpaajlXRndpVlkrdmVxM3pDdGhPMVNSSHphMDhUTDUvYWNvaXh0U0E5SlVhUS8rUnBIOWp0aUU1OHR3UlpNcDdLUEZpYmxBaE1XS0VGOFZRS2FLWkJtYXYiLCJtYWMiOiIzOTA3ODZkOWU3YTZkMGZlOTk1ODFiZWY2ZTEwOGUxYzllN2U5MzQzYzNlOWNjODQ0NDIzNjYyOTU5YTIxYzg4IiwidGFnIjoiIn0%3D; expires=Fri, 23-Jan-2026 04:22:09 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
Server: cloudflare
CF-RAY: 9c23d25e6ba019b3-FRA
alt-svc: h3=":443"; ma=86400
Page title: Redirecting to http://www.flex.z-plustools.com/login
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='http://www.flex.z-plustools.com/login'" />
<title>Redirecting to http://www.flex.z-plustools.com/login</title>
</head>
<body>
Redirecting to <a href="http://www.flex.z-plustools.com/login">http://www.flex.z-plustools.com/login</a>.
</body>
</html>