Vercel
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c026392ab026392abec52e11a82c825ffd9993142684c8114
Found 7 files trough .DS_Store spidering: /covers /covers/opt /js-dos /js-dos/types /js-dos/types/src /js-dos/types/v7-services /minesweeper
Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9c792449c89dcad9191dab3bd3e226a6a
Found 5 files trough .DS_Store spidering: /js-dos /js-dos/types /js-dos/types/src /js-dos/types/v7-services /minesweeper
Open service 66.33.60.35:443 · mobile.montypkos.com
2025-12-30 09:24
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 2251074
Cache-Control: public, max-age=0, must-revalidate
Content-Disposition: inline
Content-Length: 4308
Content-Type: text/html; charset=utf-8
Date: Tue, 30 Dec 2025 09:24:43 GMT
Etag: "efb66330763c9b8c82e8ba0eb017c9ef"
Last-Modified: Thu, 04 Dec 2025 08:06:48 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Vercel-Cache: HIT
X-Vercel-Id: lhr1::g8m2f-1767086682900-5263b3226791
Connection: close
Page title: monty.pk.OS
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1.0, user-scalable=no">
<meta name="theme-color" content="#000000" />
<meta name="description" content="" />
<base target="_parent">
<link rel="stylesheet" href="https://use.typekit.net/llo2eru.css" />
<link rel="icon" href="./favicon.ico" type="image/x-icon">
<!--
manifest.json provides metadata used when your web app is installed on a
user's mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/
-->
<link rel="manifest" href="/manifest.json" />
<!-- <link rel="preload" as="font" href="../src/assets/fonts/MSSansSerif.ttf" type="font/woff2" crossorigin="anonymous"> -->
<!--
Notice the use of %PUBLIC_URL% in the tags above.
It will be replaced with the URL of the `public` folder during the build.
Only files inside the `public` folder can be referenced from the HTML.
Unlike "/favicon.ico" or "favicon.ico", "%PUBLIC_URL%/favicon.ico" will
work correctly both with client-side routing and a non-root public URL.
Learn how to configure a non-root public URL by running `npm run build`.
-->
<title>monty.pk.OS</title>
<script>
document.addEventListener('gesturestart', function (e) {
e.preventDefault();
});
document.addEventListener('gesturechange', function (e) {
e.preventDefault();
});
document.addEventListener('gestureend', function (e) {
e.preventDefault();
});
document.addEventListener('touchmove', function (e) {
if (e.touches.length > 1) {
e.preventDefault(); // Prevent multi-touch zoom
}
}, { passive: false });
</script>
<script>
window.onload = () => {
addEventListener('mousemove', (event) => {
window.parent.postMessage({ clientX: event.clientX, clientY: event.clientY, type: 'mousemove' }, '*');
});
addEventListener('mousedown', (event) => {
window.parent.postMessage({ type: 'mousedown' }, '*');
});
addEventListener('mouseup', (event) => {
window.parent.postMessage({ type: 'mouseup' }, '*');
});
addEventListener('keydown', (event) => {
window.parent.postMessage({ type: 'keydown', key: event.key }, '*');
});
addEventListener('keyup', (event) => {
window.parent.postMessage({ type: 'keyup', key: event.key }, '*');
});
};
</script>
<script src="/js-dos/js-dos.js"></script>
<link rel="stylesheet" href="/js-dos/js-dos.css">
<script>
emulators.pathPrefix = "/js-dos/";
</script>
<!-- Shopify Buy Button SDK -->
<script async src="https://sdks.shopifycdn.com/buy-button/latest/buy-button-storefront.min.js"></script>
<!-- Google Model Viewer for 3D GLTF models -->
<script type="module" src="https://ajax.googleapis.com/ajax/libs/model-viewer/3.3.0/model-viewer.min.js"></script>
<script type="module" crossorigin src="/assets/index-CXSr3bjU.js"></script>
<link rel="stylesheet" crossorigin href="/assets/index-C9a-uy0e.css">
</head>
<body>
<noscript>You need to enable JavaScript to run this app.</noscript>
<!-- THIS IS A HACK AND A HALF but I dont care -->
<div class="font_preload" style="opacity: 0; position: absolute; pointer-events: none;">
<span style="font-family: 'MSSerif', Arial, sans-serif;">abcdefghijklmnopqrstuvwxzy</span>
<span style="font-family: 'Millennium', Arial, sans-serif;">abcdefghijklmnopqrstuvwxzy</span>
<span style="font-family: 'MillenniumBold', Arial, sans-serif;">abcdefghijklmnopqrstuvwxzy</span>
<span style="font-family: 'Terminal', Arial, sans-serif;">abcdefghijklmnopqrstuvwxzy</span>
</div>
<!-- <BODY ondragstart="return false;" ondrop="return false;"></BODY> -->
<div id="root"></div>
<!--
This HTML file is a template.
If you open it directly in the browser, you will see an empty page.
You can add webfonts, meta tags, or analytics to this file.
The build step will
Open service 66.33.60.35:443 · mobile.montypkos.com
2025-12-22 10:08
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 1620273
Cache-Control: public, max-age=0, must-revalidate
Content-Disposition: inline
Content-Length: 4308
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 10:08:56 GMT
Etag: "efb66330763c9b8c82e8ba0eb017c9ef"
Last-Modified: Wed, 03 Dec 2025 16:04:23 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Vercel-Cache: HIT
X-Vercel-Id: fra1::j24v9-1766398136429-6375e737d2b2
Connection: close
Page title: monty.pk.OS
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1.0, user-scalable=no">
<meta name="theme-color" content="#000000" />
<meta name="description" content="" />
<base target="_parent">
<link rel="stylesheet" href="https://use.typekit.net/llo2eru.css" />
<link rel="icon" href="./favicon.ico" type="image/x-icon">
<!--
manifest.json provides metadata used when your web app is installed on a
user's mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/
-->
<link rel="manifest" href="/manifest.json" />
<!-- <link rel="preload" as="font" href="../src/assets/fonts/MSSansSerif.ttf" type="font/woff2" crossorigin="anonymous"> -->
<!--
Notice the use of %PUBLIC_URL% in the tags above.
It will be replaced with the URL of the `public` folder during the build.
Only files inside the `public` folder can be referenced from the HTML.
Unlike "/favicon.ico" or "favicon.ico", "%PUBLIC_URL%/favicon.ico" will
work correctly both with client-side routing and a non-root public URL.
Learn how to configure a non-root public URL by running `npm run build`.
-->
<title>monty.pk.OS</title>
<script>
document.addEventListener('gesturestart', function (e) {
e.preventDefault();
});
document.addEventListener('gesturechange', function (e) {
e.preventDefault();
});
document.addEventListener('gestureend', function (e) {
e.preventDefault();
});
document.addEventListener('touchmove', function (e) {
if (e.touches.length > 1) {
e.preventDefault(); // Prevent multi-touch zoom
}
}, { passive: false });
</script>
<script>
window.onload = () => {
addEventListener('mousemove', (event) => {
window.parent.postMessage({ clientX: event.clientX, clientY: event.clientY, type: 'mousemove' }, '*');
});
addEventListener('mousedown', (event) => {
window.parent.postMessage({ type: 'mousedown' }, '*');
});
addEventListener('mouseup', (event) => {
window.parent.postMessage({ type: 'mouseup' }, '*');
});
addEventListener('keydown', (event) => {
window.parent.postMessage({ type: 'keydown', key: event.key }, '*');
});
addEventListener('keyup', (event) => {
window.parent.postMessage({ type: 'keyup', key: event.key }, '*');
});
};
</script>
<script src="/js-dos/js-dos.js"></script>
<link rel="stylesheet" href="/js-dos/js-dos.css">
<script>
emulators.pathPrefix = "/js-dos/";
</script>
<!-- Shopify Buy Button SDK -->
<script async src="https://sdks.shopifycdn.com/buy-button/latest/buy-button-storefront.min.js"></script>
<!-- Google Model Viewer for 3D GLTF models -->
<script type="module" src="https://ajax.googleapis.com/ajax/libs/model-viewer/3.3.0/model-viewer.min.js"></script>
<script type="module" crossorigin src="/assets/index-CXSr3bjU.js"></script>
<link rel="stylesheet" crossorigin href="/assets/index-C9a-uy0e.css">
</head>
<body>
<noscript>You need to enable JavaScript to run this app.</noscript>
<!-- THIS IS A HACK AND A HALF but I dont care -->
<div class="font_preload" style="opacity: 0; position: absolute; pointer-events: none;">
<span style="font-family: 'MSSerif', Arial, sans-serif;">abcdefghijklmnopqrstuvwxzy</span>
<span style="font-family: 'Millennium', Arial, sans-serif;">abcdefghijklmnopqrstuvwxzy</span>
<span style="font-family: 'MillenniumBold', Arial, sans-serif;">abcdefghijklmnopqrstuvwxzy</span>
<span style="font-family: 'Terminal', Arial, sans-serif;">abcdefghijklmnopqrstuvwxzy</span>
</div>
<!-- <BODY ondragstart="return false;" ondrop="return false;"></BODY> -->
<div id="root"></div>
<!--
This HTML file is a template.
If you open it directly in the browser, you will see an empty page.
You can add webfonts, meta tags, or analytics to this file.
The build step will
Open service 66.33.60.35:443 · mobile.montypkos.com
2025-12-20 10:46
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Disposition: inline
Content-Length: 4308
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 10:46:30 GMT
Etag: "efb66330763c9b8c82e8ba0eb017c9ef"
Last-Modified: Sat, 20 Dec 2025 10:46:30 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Vercel-Cache: HIT
X-Vercel-Id: fra1::qtgmx-1766227590599-087389548401
Connection: close
Page title: monty.pk.OS
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1.0, user-scalable=no">
<meta name="theme-color" content="#000000" />
<meta name="description" content="" />
<base target="_parent">
<link rel="stylesheet" href="https://use.typekit.net/llo2eru.css" />
<link rel="icon" href="./favicon.ico" type="image/x-icon">
<!--
manifest.json provides metadata used when your web app is installed on a
user's mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/
-->
<link rel="manifest" href="/manifest.json" />
<!-- <link rel="preload" as="font" href="../src/assets/fonts/MSSansSerif.ttf" type="font/woff2" crossorigin="anonymous"> -->
<!--
Notice the use of %PUBLIC_URL% in the tags above.
It will be replaced with the URL of the `public` folder during the build.
Only files inside the `public` folder can be referenced from the HTML.
Unlike "/favicon.ico" or "favicon.ico", "%PUBLIC_URL%/favicon.ico" will
work correctly both with client-side routing and a non-root public URL.
Learn how to configure a non-root public URL by running `npm run build`.
-->
<title>monty.pk.OS</title>
<script>
document.addEventListener('gesturestart', function (e) {
e.preventDefault();
});
document.addEventListener('gesturechange', function (e) {
e.preventDefault();
});
document.addEventListener('gestureend', function (e) {
e.preventDefault();
});
document.addEventListener('touchmove', function (e) {
if (e.touches.length > 1) {
e.preventDefault(); // Prevent multi-touch zoom
}
}, { passive: false });
</script>
<script>
window.onload = () => {
addEventListener('mousemove', (event) => {
window.parent.postMessage({ clientX: event.clientX, clientY: event.clientY, type: 'mousemove' }, '*');
});
addEventListener('mousedown', (event) => {
window.parent.postMessage({ type: 'mousedown' }, '*');
});
addEventListener('mouseup', (event) => {
window.parent.postMessage({ type: 'mouseup' }, '*');
});
addEventListener('keydown', (event) => {
window.parent.postMessage({ type: 'keydown', key: event.key }, '*');
});
addEventListener('keyup', (event) => {
window.parent.postMessage({ type: 'keyup', key: event.key }, '*');
});
};
</script>
<script src="/js-dos/js-dos.js"></script>
<link rel="stylesheet" href="/js-dos/js-dos.css">
<script>
emulators.pathPrefix = "/js-dos/";
</script>
<!-- Shopify Buy Button SDK -->
<script async src="https://sdks.shopifycdn.com/buy-button/latest/buy-button-storefront.min.js"></script>
<!-- Google Model Viewer for 3D GLTF models -->
<script type="module" src="https://ajax.googleapis.com/ajax/libs/model-viewer/3.3.0/model-viewer.min.js"></script>
<script type="module" crossorigin src="/assets/index-CXSr3bjU.js"></script>
<link rel="stylesheet" crossorigin href="/assets/index-C9a-uy0e.css">
</head>
<body>
<noscript>You need to enable JavaScript to run this app.</noscript>
<!-- THIS IS A HACK AND A HALF but I dont care -->
<div class="font_preload" style="opacity: 0; position: absolute; pointer-events: none;">
<span style="font-family: 'MSSerif', Arial, sans-serif;">abcdefghijklmnopqrstuvwxzy</span>
<span style="font-family: 'Millennium', Arial, sans-serif;">abcdefghijklmnopqrstuvwxzy</span>
<span style="font-family: 'MillenniumBold', Arial, sans-serif;">abcdefghijklmnopqrstuvwxzy</span>
<span style="font-family: 'Terminal', Arial, sans-serif;">abcdefghijklmnopqrstuvwxzy</span>
</div>
<!-- <BODY ondragstart="return false;" ondrop="return false;"></BODY> -->
<div id="root"></div>
<!--
This HTML file is a template.
If you open it directly in the browser, you will see an empty page.
You can add webfonts, meta tags, or analytics to this file.
The build step will