.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c2eda814e2eda814eae693cfaec557ab0ec9827152e778b6e
Found 6 files trough .DS_Store spidering: /favicon.ico /index.html /logo192.png /logo512.png /manifest.json /robots.txt
Open service 20.101.2.157:443 · internal.slot1.dev.finclusive.com
2026-01-09 23:21
HTTP/1.1 200 OK Content-Length: 647 Connection: close Content-Type: text/html Date: Fri, 09 Jan 2026 23:22:00 GMT Access-Control-Allow-Origin: * Cache-Control: public, must-revalidate, max-age=30 ETag: "45173912" Last-Modified: Thu, 09 Nov 2023 20:47:18 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-src 'none'; object-src 'none'; Page title: Internal Portal <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#FFFFFF"/><meta name="description" content="FinClusive Compliance Analyst Portal"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>Internal Portal</title><script defer="defer" src="/static/js/main.878cf082.js"></script><link href="/static/css/main.a2d43e59.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Open service 20.101.2.157:443 · internal.slot1.dev.finclusive.com
2026-01-02 12:38
HTTP/1.1 200 OK Content-Length: 647 Connection: close Content-Type: text/html Date: Fri, 02 Jan 2026 12:38:17 GMT Access-Control-Allow-Origin: * Cache-Control: public, must-revalidate, max-age=30 ETag: "45173912" Last-Modified: Thu, 09 Nov 2023 20:47:18 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-src 'none'; object-src 'none'; Page title: Internal Portal <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#FFFFFF"/><meta name="description" content="FinClusive Compliance Analyst Portal"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>Internal Portal</title><script defer="defer" src="/static/js/main.878cf082.js"></script><link href="/static/css/main.a2d43e59.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Open service 20.101.2.157:443 · internal.slot1.dev.finclusive.com
2025-12-22 18:03
HTTP/1.1 200 OK Content-Length: 647 Connection: close Content-Type: text/html Date: Mon, 22 Dec 2025 18:03:45 GMT Access-Control-Allow-Origin: * Cache-Control: public, must-revalidate, max-age=30 ETag: "45173912" Last-Modified: Thu, 09 Nov 2023 20:47:18 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-src 'none'; object-src 'none'; Page title: Internal Portal <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#FFFFFF"/><meta name="description" content="FinClusive Compliance Analyst Portal"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>Internal Portal</title><script defer="defer" src="/static/js/main.878cf082.js"></script><link href="/static/css/main.a2d43e59.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Open service 20.101.2.157:443 · internal.slot1.dev.finclusive.com
2025-12-20 20:34
HTTP/1.1 200 OK Content-Length: 647 Connection: close Content-Type: text/html Date: Sat, 20 Dec 2025 20:34:34 GMT Access-Control-Allow-Origin: * Cache-Control: public, must-revalidate, max-age=30 ETag: "45173912" Last-Modified: Thu, 09 Nov 2023 20:47:18 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-src 'none'; object-src 'none'; Page title: Internal Portal <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#FFFFFF"/><meta name="description" content="FinClusive Compliance Analyst Portal"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>Internal Portal</title><script defer="defer" src="/static/js/main.878cf082.js"></script><link href="/static/css/main.a2d43e59.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>