AmazonS3
tcp/443 tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522cd6216e2
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/OON-SEGUROS/landing fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http "https://github.com/"] extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX2dBbTFibmZGZFdqZWR2cFY4YVRGSXNPV3ZlcG94ZTBoVkQ5Sg== [branch "main"] remote = origin merge = refs/heads/main
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65227ee857b7
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/OON-SEGUROS/landing fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http "https://github.com/"] extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzXzV5clBJbG9EWGFrR0RVeThnRk15VHA0UjBOcFpjVjJ4Y2FMcw== [branch "main"] remote = origin merge = refs/heads/main
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65223326eb9b
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/OON-SEGUROS/landing fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http "https://github.com/"] extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX3ZyWGxYc2NtRmhLRXRJMkRxUWVHeXVPa25kYmJYUzA0Z0g1Vg== [branch "main"] remote = origin merge = refs/heads/main
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b27ad9bc
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/OON-SEGUROS/landing fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http "https://github.com/"] extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzXzlrQ2lCbkJPeHJCUUVRM2J5RTBnU05zd0hnNUZucjFFd1RCaw== [branch "main"] remote = origin merge = refs/heads/main
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522eff67661
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/OON-SEGUROS/landing fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http "https://github.com/"] extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX3hKaFVCeTh3bE42bzZEMmxYblhGZm1RRGFxVXFtYjNNYWREeQ== [branch "main"] remote = origin merge = refs/heads/main
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09cccdd54a0ccdd54a0b77b5f371719addf512798acb1c3a8eb
Found 13 files trough .DS_Store spidering: /contrato /css /Dockerfile /favicon.png /form.html /form.html_2 /form_2.html /img /index.html /invite.html /js /politica.html /scss
Open service 13.227.219.4:80 · oonseguros.com
2026-01-25 19:43
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 961
Connection: close
Date: Sun, 25 Jan 2026 19:43:48 GMT
Last-Modified: Wed, 21 Jan 2026 16:59:56 GMT
ETag: "b2ff494514f775f22209120ebcf8aad6"
x-amz-server-side-encryption: AES256
Cache-Control: no-cache, no-store, must-revalidate
x-amz-meta-etag: sv9JRRT3dfIiCRIOvPiq1g==
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 de31699a6e25448909328bb7c6028f6a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS54-C1
X-Amz-Cf-Id: znnyG3vhb4GtHS9DKPhCCNEjiQf4RIlPDvCDZNvDrlFyTwhwf93FFQ==
<!DOCTYPE html>
<html lang="pt-BR">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="theme-color" content="#000000" />
<meta
name="OON Seguradora"
content="Web site created using create-react-app"
/>
<link rel="manifest" href="./manifest.json" referrerpolicy="no-referrer" />
<!-- <link rel="icon" href="./favicon.ico" type="image/x-icon" /> -->
<link rel="icon" href="./favicon.svg" type="image/svg+xml" />
<!-- <link rel="icon" href="./src/favicon.ico" type="image/x-icon"/> -->
<!-- <link rel="icon" href="./favicon.svg" type="image/svg+xml"> -->
<link
rel="apple-touch-icon"
type="image/png"
sizes="180x180"
href="./favicon.svg"
/>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link
href="https://f
Open service 13.227.219.40:443 · oonseguros.com
2026-01-25 19:43
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 961
Connection: close
Date: Sun, 25 Jan 2026 19:43:48 GMT
Last-Modified: Wed, 21 Jan 2026 16:59:56 GMT
ETag: "b2ff494514f775f22209120ebcf8aad6"
x-amz-server-side-encryption: AES256
Cache-Control: no-cache, no-store, must-revalidate
x-amz-meta-etag: sv9JRRT3dfIiCRIOvPiq1g==
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 b619a16f6f8fe9793bf642d2a8434284.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS54-C1
X-Amz-Cf-Id: MeLjKVozvMJ1B_jPdFutX4MujDyJXCADjz5MG1ER8OW0fKc3BuIXFA==
<!DOCTYPE html>
<html lang="pt-BR">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="theme-color" content="#000000" />
<meta
name="OON Seguradora"
content="Web site created using create-react-app"
/>
<link rel="manifest" href="./manifest.json" referrerpolicy="no-referrer" />
<!-- <link rel="icon" href="./favicon.ico" type="image/x-icon" /> -->
<link rel="icon" href="./favicon.svg" type="image/svg+xml" />
<!-- <link rel="icon" href="./src/favicon.ico" type="image/x-icon"/> -->
<!-- <link rel="icon" href="./favicon.svg" type="image/svg+xml"> -->
<link
rel="apple-touch-icon"
type="image/png"
sizes="180x180"
href="./favicon.svg"
/>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link
href="https://f
Open service 13.227.219.10:80 · oonseguros.com
2026-01-25 19:43
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 961
Connection: close
Date: Sun, 25 Jan 2026 19:43:48 GMT
Last-Modified: Wed, 21 Jan 2026 16:59:56 GMT
ETag: "b2ff494514f775f22209120ebcf8aad6"
x-amz-server-side-encryption: AES256
Cache-Control: no-cache, no-store, must-revalidate
x-amz-meta-etag: sv9JRRT3dfIiCRIOvPiq1g==
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 fe106b75368b4a44b0461d7e712cd360.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS54-C1
X-Amz-Cf-Id: 054O1zyA2ycO3E1B-33KTbBe0g34TGnJBie_HIiIXlem3LwbEajcNw==
<!DOCTYPE html>
<html lang="pt-BR">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="theme-color" content="#000000" />
<meta
name="OON Seguradora"
content="Web site created using create-react-app"
/>
<link rel="manifest" href="./manifest.json" referrerpolicy="no-referrer" />
<!-- <link rel="icon" href="./favicon.ico" type="image/x-icon" /> -->
<link rel="icon" href="./favicon.svg" type="image/svg+xml" />
<!-- <link rel="icon" href="./src/favicon.ico" type="image/x-icon"/> -->
<!-- <link rel="icon" href="./favicon.svg" type="image/svg+xml"> -->
<link
rel="apple-touch-icon"
type="image/png"
sizes="180x180"
href="./favicon.svg"
/>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link
href="https://f
Open service 13.227.219.10:443 · oonseguros.com
2026-01-25 19:43
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 961
Connection: close
Date: Sun, 25 Jan 2026 19:43:48 GMT
Last-Modified: Wed, 21 Jan 2026 16:59:56 GMT
ETag: "b2ff494514f775f22209120ebcf8aad6"
x-amz-server-side-encryption: AES256
Cache-Control: no-cache, no-store, must-revalidate
x-amz-meta-etag: sv9JRRT3dfIiCRIOvPiq1g==
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 46293c8f7848e2378b777a1f48183614.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS54-C1
X-Amz-Cf-Id: kME8BNRBqVScg_qyHbLOzVe-SIy1BRNYYH_owFy63Lui8BWdzz_CiQ==
<!DOCTYPE html>
<html lang="pt-BR">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="theme-color" content="#000000" />
<meta
name="OON Seguradora"
content="Web site created using create-react-app"
/>
<link rel="manifest" href="./manifest.json" referrerpolicy="no-referrer" />
<!-- <link rel="icon" href="./favicon.ico" type="image/x-icon" /> -->
<link rel="icon" href="./favicon.svg" type="image/svg+xml" />
<!-- <link rel="icon" href="./src/favicon.ico" type="image/x-icon"/> -->
<!-- <link rel="icon" href="./favicon.svg" type="image/svg+xml"> -->
<link
rel="apple-touch-icon"
type="image/png"
sizes="180x180"
href="./favicon.svg"
/>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link
href="https://f
Open service 13.227.219.40:80 · oonseguros.com
2026-01-25 19:43
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 961
Connection: close
Date: Sun, 25 Jan 2026 19:43:48 GMT
Last-Modified: Wed, 21 Jan 2026 16:59:56 GMT
ETag: "b2ff494514f775f22209120ebcf8aad6"
x-amz-server-side-encryption: AES256
Cache-Control: no-cache, no-store, must-revalidate
x-amz-meta-etag: sv9JRRT3dfIiCRIOvPiq1g==
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 4445c4223f8c2460ef5d29a08d1cc6ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS54-C1
X-Amz-Cf-Id: S5G7E50O3LC0UTd0Gj90Xev9eyZBsTbcL8HtWQNCZb8uXZqdALHjag==
<!DOCTYPE html>
<html lang="pt-BR">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="theme-color" content="#000000" />
<meta
name="OON Seguradora"
content="Web site created using create-react-app"
/>
<link rel="manifest" href="./manifest.json" referrerpolicy="no-referrer" />
<!-- <link rel="icon" href="./favicon.ico" type="image/x-icon" /> -->
<link rel="icon" href="./favicon.svg" type="image/svg+xml" />
<!-- <link rel="icon" href="./src/favicon.ico" type="image/x-icon"/> -->
<!-- <link rel="icon" href="./favicon.svg" type="image/svg+xml"> -->
<link
rel="apple-touch-icon"
type="image/png"
sizes="180x180"
href="./favicon.svg"
/>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link
href="https://f
Open service 13.227.219.4:443 · oonseguros.com
2026-01-25 19:43
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 961
Connection: close
Date: Sun, 25 Jan 2026 19:43:48 GMT
Last-Modified: Wed, 21 Jan 2026 16:59:56 GMT
ETag: "b2ff494514f775f22209120ebcf8aad6"
x-amz-server-side-encryption: AES256
Cache-Control: no-cache, no-store, must-revalidate
x-amz-meta-etag: sv9JRRT3dfIiCRIOvPiq1g==
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 80826ca6c4fd6005aeacf5a03c8d42e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS54-C1
X-Amz-Cf-Id: zexGqOGdHchsIv-BdGcCK5wyaCZTKObmHNmk8HzuaWiotsGLxkADuw==
<!DOCTYPE html>
<html lang="pt-BR">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="theme-color" content="#000000" />
<meta
name="OON Seguradora"
content="Web site created using create-react-app"
/>
<link rel="manifest" href="./manifest.json" referrerpolicy="no-referrer" />
<!-- <link rel="icon" href="./favicon.ico" type="image/x-icon" /> -->
<link rel="icon" href="./favicon.svg" type="image/svg+xml" />
<!-- <link rel="icon" href="./src/favicon.ico" type="image/x-icon"/> -->
<!-- <link rel="icon" href="./favicon.svg" type="image/svg+xml"> -->
<link
rel="apple-touch-icon"
type="image/png"
sizes="180x180"
href="./favicon.svg"
/>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link
href="https://f
Open service 13.227.219.43:80 · oonseguros.com
2026-01-25 19:43
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 961
Connection: close
Date: Sun, 25 Jan 2026 19:43:48 GMT
Last-Modified: Wed, 21 Jan 2026 16:59:56 GMT
ETag: "b2ff494514f775f22209120ebcf8aad6"
x-amz-server-side-encryption: AES256
Cache-Control: no-cache, no-store, must-revalidate
x-amz-meta-etag: sv9JRRT3dfIiCRIOvPiq1g==
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 80826ca6c4fd6005aeacf5a03c8d42e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS54-C1
X-Amz-Cf-Id: wN2DeTVuJF0IRoN8kHVQ-My1H9QDjfo_jGb3XRE7C1ppaSQ0ejx1hQ==
<!DOCTYPE html>
<html lang="pt-BR">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="theme-color" content="#000000" />
<meta
name="OON Seguradora"
content="Web site created using create-react-app"
/>
<link rel="manifest" href="./manifest.json" referrerpolicy="no-referrer" />
<!-- <link rel="icon" href="./favicon.ico" type="image/x-icon" /> -->
<link rel="icon" href="./favicon.svg" type="image/svg+xml" />
<!-- <link rel="icon" href="./src/favicon.ico" type="image/x-icon"/> -->
<!-- <link rel="icon" href="./favicon.svg" type="image/svg+xml"> -->
<link
rel="apple-touch-icon"
type="image/png"
sizes="180x180"
href="./favicon.svg"
/>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link
href="https://f
Open service 13.227.219.43:443 · oonseguros.com
2026-01-25 19:43
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 961
Connection: close
Date: Sun, 25 Jan 2026 19:43:48 GMT
Last-Modified: Wed, 21 Jan 2026 16:59:56 GMT
ETag: "b2ff494514f775f22209120ebcf8aad6"
x-amz-server-side-encryption: AES256
Cache-Control: no-cache, no-store, must-revalidate
x-amz-meta-etag: sv9JRRT3dfIiCRIOvPiq1g==
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 630336d6cdf08cf266841fd503dc03d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS54-C1
X-Amz-Cf-Id: VRMwpml1aklgdMBXntvm9qqn2FS3yJpqPmTmA_3uvQi19XzaT8WIfA==
<!DOCTYPE html>
<html lang="pt-BR">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="theme-color" content="#000000" />
<meta
name="OON Seguradora"
content="Web site created using create-react-app"
/>
<link rel="manifest" href="./manifest.json" referrerpolicy="no-referrer" />
<!-- <link rel="icon" href="./favicon.ico" type="image/x-icon" /> -->
<link rel="icon" href="./favicon.svg" type="image/svg+xml" />
<!-- <link rel="icon" href="./src/favicon.ico" type="image/x-icon"/> -->
<!-- <link rel="icon" href="./favicon.svg" type="image/svg+xml"> -->
<link
rel="apple-touch-icon"
type="image/png"
sizes="180x180"
href="./favicon.svg"
/>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link
href="https://f