.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c47dfe71947dfe71930a90c592eae7cb0585967db70f5a4f0
Found 16 files trough .DS_Store spidering: /errors /media /media/wysiwyg /media/wysiwyg/.thumbs /media/wysiwyg/infortis /media/wysiwyg/infortis/slideshow /media/wysiwyg/infortis/slideshow-test /media/wysiwyg/infortis/ultimo /media/wysiwyg/infortis/ultimo/custom /media/wysiwyg/infortis/ultimo/menu /media/wysiwyg/labels-and-ribbons /media/wysiwyg/myfxground /media/wysiwyg/peak-ryzex /media/wysiwyg/smartwave /pagebuilder /static
Severity: low
Fingerprint: 5f32cf5d6962f09c39aac35b39aac35b90e0c63fee395df236cebaeda1aa893c
Found 14 files trough .DS_Store spidering: /errors /media /media/wysiwyg /media/wysiwyg/.thumbs /media/wysiwyg/infortis /media/wysiwyg/infortis/slideshow /media/wysiwyg/infortis/slideshow-test /media/wysiwyg/infortis/ultimo /media/wysiwyg/labels-and-ribbons /media/wysiwyg/myfxground /media/wysiwyg/peak-ryzex /media/wysiwyg/smartwave /pagebuilder /static
Severity: low
Fingerprint: 5f32cf5d6962f09c0215adfc0215adfce790ffd6f75c525330d04c3477a2fdc5
Found 4 files trough .DS_Store spidering: /errors /media /pagebuilder /static
Open service 13.107.246.64:443 · myfxground.peaktech.com
2026-01-23 02:26
HTTP/1.1 302 Found Date: Fri, 23 Jan 2026 02:26:20 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Pragma: no-cache Cache-Control: max-age=0, must-revalidate, no-cache, no-store Expires: Thu, 23 Jan 2025 02:26:20 GMT tag.cardinalcommerce.com landofcoder.com 'self' 'unsafe-inline' 'unsafe-eval' *.cardinalcommerce.com *.googleadservices.com *.sandbox.paypal.com *.paypalobjects.com *.braintreegateway.com *.sandbox.braintreegateway.com *.ytimg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline' *.google.com *.typekit.net 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.adobe.io performance.typekit.net *.sentry.io *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com https://developer.adobe.com https://elements.sandbox.fortis.tech https://elements.fortis.tech https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com landofcoder.com 'self' *.adobe.com *.braintreegateway.com *.sandbox.braintreegateway.com stats.g.doubleclick.net et.peaktech.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval' 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Set-Cookie: PHPSESSID=jl8k6l85hre622mpls23br3ttq; expires=Thu, 28 May 2026 02:26:20 GMT; Max-Age=10800000; path=/; domain=.peaktech.com; secure; HttpOnly; SameSite=Lax X-VHost-Which: myfxground-https-vhost.conf X-Recv-Host: i=99 X-XFwd-Host: i=99 X-Proto: i=99 X-Client-IP: i=99 Location: https://myfxground.peaktech.com/customer/account/login/referer/aHR0cHM6Ly9teWZ4Z3JvdW5kLnBlYWt0ZWNoLmNvbS8~/ X-UA-Compatible: IE=edge X-Frame-Options: SAMEORIGIN x-azure-ref: 20260123T022620Z-r17955489d52644whC1FRA1g9000000009g0000000007mnr X-Cache: CONFIG_NOCACHE