Heroku
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf17642568103b15e797d105e797d105e797d10
Found 2 files trough .DS_Store spidering: /imgs /imgs/mobile_default.png
Open service 15.197.149.68:443 · revenueservice.com
2026-01-09 05:28
HTTP/1.1 302 Found
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; charset=utf-8
Location: https://shmarty.com
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=fYT%2FVgpX%2BAWZZShdBuvUhV4jUgTSlwgzBrr45Kt39S0%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767936501"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=fYT%2FVgpX%2BAWZZShdBuvUhV4jUgTSlwgzBrr45Kt39S0%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767936501"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: c900d013-1a85-86cd-47bd-3c8630875621
X-Runtime: 0.001835
X-Xss-Protection: 1; mode=block
Date: Fri, 09 Jan 2026 05:28:21 GMT
Connection: close
Open service 15.197.149.68:443 · revenueservice.com
2026-01-02 05:06
HTTP/1.1 302 Found
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; charset=utf-8
Location: https://shmarty.com
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Y%2B53%2B8nKvhQaqW58K11pvW99eAPPMbkT7nQjGpGCsig%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767330413"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Y%2B53%2B8nKvhQaqW58K11pvW99eAPPMbkT7nQjGpGCsig%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767330413"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: b9dfefe5-e3ec-8a82-9cd3-2ead2bad7cc5
X-Runtime: 0.001818
X-Xss-Protection: 1; mode=block
Date: Fri, 02 Jan 2026 05:06:53 GMT
Connection: close
Open service 15.197.149.68:443 · revenueservice.com
2025-12-22 16:34
HTTP/1.1 302 Found
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; charset=utf-8
Location: https://shmarty.com
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=F17c8pAsA7yfVwEzjvtJfkf15EUmGNV1D1FXfXBN2cI%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766421283"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=F17c8pAsA7yfVwEzjvtJfkf15EUmGNV1D1FXfXBN2cI%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766421283"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 0812dfda-fb2b-8840-64bd-854e9247f9c6
X-Runtime: 0.001977
X-Xss-Protection: 1; mode=block
Date: Mon, 22 Dec 2025 16:34:43 GMT
Connection: close
Open service 15.197.149.68:443 · revenueservice.com
2025-12-20 15:39
HTTP/1.1 302 Found
Cache-Control: no-cache
Content-Length: 0
Content-Type: text/html; charset=utf-8
Location: https://shmarty.com
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Csv0q5swrcE%2FDq8sRuWPcD0q4mPDEibjzoLqpTU5NCQ%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766245152"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Csv0q5swrcE%2FDq8sRuWPcD0q4mPDEibjzoLqpTU5NCQ%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766245152"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 9fe5cfc6-d105-5170-abf0-296715452cde
X-Runtime: 0.001972
X-Xss-Protection: 1; mode=block
Date: Sat, 20 Dec 2025 15:39:12 GMT
Connection: close