.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c2eda814e2eda814eae693cfaec557ab0ec9827152e778b6e
Found 6 files trough .DS_Store spidering: /favicon.ico /index.html /logo192.png /logo512.png /manifest.json /robots.txt
Open service 20.82.12.44:443 · internal.default.qa.finclusive.com
2026-01-09 01:53
HTTP/1.1 200 OK Content-Length: 647 Connection: close Content-Type: text/html Date: Fri, 09 Jan 2026 01:54:49 GMT Access-Control-Allow-Origin: * Cache-Control: public, must-revalidate, max-age=30 ETag: "52451063" Last-Modified: Tue, 18 Jun 2024 22:00:56 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-src 'none'; object-src 'none'; Page title: Internal Portal <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#FFFFFF"/><meta name="description" content="FinClusive Compliance Analyst Portal"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>Internal Portal</title><script defer="defer" src="/static/js/main.e7b609b4.js"></script><link href="/static/css/main.a2d43e59.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Open service 20.82.12.44:443 · internal.default.qa.finclusive.com
2026-01-01 19:44
HTTP/1.1 200 OK Content-Length: 647 Connection: close Content-Type: text/html Date: Thu, 01 Jan 2026 19:44:39 GMT Access-Control-Allow-Origin: * Cache-Control: public, must-revalidate, max-age=30 ETag: "52451063" Last-Modified: Tue, 18 Jun 2024 22:00:56 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-src 'none'; object-src 'none'; Page title: Internal Portal <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#FFFFFF"/><meta name="description" content="FinClusive Compliance Analyst Portal"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>Internal Portal</title><script defer="defer" src="/static/js/main.e7b609b4.js"></script><link href="/static/css/main.a2d43e59.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Open service 20.82.12.44:443 · internal.default.qa.finclusive.com
2025-12-22 20:22
HTTP/1.1 200 OK Content-Length: 647 Connection: close Content-Type: text/html Date: Mon, 22 Dec 2025 20:22:41 GMT Access-Control-Allow-Origin: * Cache-Control: public, must-revalidate, max-age=30 ETag: "52451063" Last-Modified: Tue, 18 Jun 2024 22:00:56 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-src 'none'; object-src 'none'; Page title: Internal Portal <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#FFFFFF"/><meta name="description" content="FinClusive Compliance Analyst Portal"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>Internal Portal</title><script defer="defer" src="/static/js/main.e7b609b4.js"></script><link href="/static/css/main.a2d43e59.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Open service 20.82.12.44:443 · internal.default.qa.finclusive.com
2025-12-21 03:50
HTTP/1.1 200 OK Content-Length: 647 Connection: close Content-Type: text/html Date: Sun, 21 Dec 2025 03:50:02 GMT Access-Control-Allow-Origin: * Cache-Control: public, must-revalidate, max-age=30 ETag: "52451063" Last-Modified: Tue, 18 Jun 2024 22:00:56 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-src 'none'; object-src 'none'; Page title: Internal Portal <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#FFFFFF"/><meta name="description" content="FinClusive Compliance Analyst Portal"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>Internal Portal</title><script defer="defer" src="/static/js/main.e7b609b4.js"></script><link href="/static/css/main.a2d43e59.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Open service 20.82.12.44:443 · internal.default.qa.finclusive.com
2025-12-19 04:58
HTTP/1.1 200 OK Content-Length: 647 Connection: close Content-Type: text/html Date: Fri, 19 Dec 2025 04:58:12 GMT Access-Control-Allow-Origin: * Cache-Control: public, must-revalidate, max-age=30 ETag: "52451063" Last-Modified: Tue, 18 Jun 2024 22:00:56 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-src 'none'; object-src 'none'; Page title: Internal Portal <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#FFFFFF"/><meta name="description" content="FinClusive Compliance Analyst Portal"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>Internal Portal</title><script defer="defer" src="/static/js/main.e7b609b4.js"></script><link href="/static/css/main.a2d43e59.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>