.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc752ba9c049250bfc698bb2c2bf801352
Found 4 files trough .DS_Store spidering: /wordpress /wp-admin /wp-content /wp-includes
Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f8772be6c049aac20312e4d5987fa0ec6624a
Found 11 files trough .DS_Store spidering: /wordpress /wp-admin /wp-admin/css /wp-admin/images /wp-admin/includes /wp-admin/js /wp-admin/maint /wp-admin/network /wp-admin/user /wp-content /wp-includes
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522fdeb4509
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@gitlab.com:gerontologika/gericare-citas.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652209a1829e
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@gitlab.com:gerontologika/gericare-v4.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main [branch "dev"] remote = origin merge = refs/heads/dev
Open service 194.1.147.32:443 · gericare.com.mx
2026-01-22 23:10
HTTP/1.1 200 OK Date: Thu, 22 Jan 2026 23:10:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding X-Powered-By: PHP/8.0.30 Link: <https://gericare.com.mx/wp-json/>; rel="https://api.w.org/" Link: <https://gericare.com.mx/wp-json/wp/v2/pages/340>; rel="alternate"; title="JSON"; type="application/json" Link: <https://gericare.com.mx/>; rel=shortlink Etag: "2694-1769080054;;;" X-LiteSpeed-Cache: hit Vary: Accept-Encoding,Origin WPX: 1 X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/NY01 cache-control: public,max-age=3600,stale-while-revalidate=21600 alt-svc: h3=":443"; ma=86400 x-quic: h3 Server: WPX CLOUD/NY01 X-Cache-Status: MISS
Open service 194.1.147.24:80 · www.gericare.com.mx
2026-01-22 20:17
HTTP/1.1 301 Moved Permanently Date: Thu, 22 Jan 2026 20:17:40 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.0.30 X-Redirect-By: WordPress Location: https://gericare.com.mx/ X-LiteSpeed-Cache: hit Vary: Accept-Encoding,Origin WPX: 1 X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/AMS03 Server: WPX CLOUD/AMS03 X-Cache-Status: MISS
Open service 194.1.147.24:80 · www.gericare.com.mx
2026-01-10 02:51
HTTP/1.1 301 Moved Permanently Date: Sat, 10 Jan 2026 02:51:43 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.0.30 X-Redirect-By: WordPress Location: https://gericare.com.mx/ X-LiteSpeed-Cache: hit Vary: Accept-Encoding,Origin WPX: 1 X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/AMS03 Server: WPX CLOUD/AMS03 X-Cache-Status: MISS