nginx 1.18.0
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc51fa561c515fc99fa3018ed7533c67ff
Found 4 files trough .DS_Store spidering: /css /fonts /img /js
Open service 139.59.210.46:443 · smartevinci.deveyesgroup.com
2026-01-23 13:01
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, private
Date: Fri, 23 Jan 2026 13:01:37 GMT
Set-Cookie: XSRF-TOKEN=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%3D; expires=Fri, 23-Jan-2026 15:01:37 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6ImZ1WlFuVERPa1ZuUWU5ZnFPeVRXTmc9PSIsInZhbHVlIjoibG1aclVUaDFieG9oYXFPcnBKRmVldGtJbjJMbVhiSHB2WUlmQUE4M203OXBTSm53Z0lEMVlRTkRTcEFMaXZWdVZJUnVBd3pnVWd4RExFTWczYmJ6eklOcjJmTmhxcWdcL2NrU05pZjZGVUdkdU9zRFg0V2tGelg3K01tbHgxdThaIiwibWFjIjoiMGNiNDA5ZDBiNDA4YzQzZDBlY2E2ZTE2NWQ2YzZjNWNkY2U5ODUwMGM2Mjc4OWQ2ZDE0MWZhY2VmNDU0OGEzYSJ9; expires=Fri, 23-Jan-2026 15:01:37 GMT; Max-Age=7200; path=/; httponly
Page title: Smart e Vinci!
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<!-- CSRF Token -->
<meta name="csrf-token" content="CIYRaJDmi4GDo0jByVK5bVCy3lOWPZ1B8UXh1Md7">
<title>Smart e Vinci!</title>
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="resource-type" content="document" />
<meta name="robots" content="all, index, follow"/>
<meta name="description" content="Dal 20 Giugno al 15 Ottobre 2024, attiva la funzione Phone Pass dall’App Trenord, gioca il codice e scopri subito se hai vinto.">
<meta name="author" content="Smart e Vinci!">
<meta name="theme-color" content="#063">
<meta property="og:title" content="Smart e Vinci!">
<meta property="og:type" content="website">
<meta property="og:url" content="https://smartevinci.trenord.it">
<meta property="og:image" content="https://smartevinci.trenord.it/img/img_share.png">
<meta property="og:image:width" content="1000">
<meta property="og:image:height" content="500">
<meta property="og:image:alt" content="Smart e Vinci!">
<meta property="og:description" content="Dal 20 Giugno al 15 Ottobre 2024, attiva la funzione Phone Pass dall’App Trenord, gioca il codice e scopri subito se hai vinto.">
<meta property="og:locale" content="it_IT">
<meta property="og:site_name" content="Smart e Vinci!">
<meta name="twitter:card" content="summary">
<meta name="twitter:title" content="Smart e Vinci!">
<meta name="twitter:description" content="Dal 20 Giugno al 15 Ottobre 2024, attiva la funzione Phone Pass dall’App Trenord, gioca il codice e scopri subito se hai vinto.">
<meta name="twitter:site" content="https://smartevinci.trenord.it">
<meta name="twitter:image" content="https://smartevinci.trenord.it/img/img_share.png">
<link rel="canonical" href="https://smartevinci.trenord.it">
<link rel="apple-touch-icon" sizes="180x180" href="https://smartevinci.trenord.it/img/icon/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="https://smartevinci.trenord.it/img/icon/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="https://smartevinci.trenord.it/img/icon/favicon-16x16.png">
<link rel="manifest" href="https://smartevinci.trenord.it/img/icon/site.webmanifest">
<link rel="mask-icon" href="https://smartevinci.trenord.it/img/icon/safari-pinned-tab.svg" color="#5bbad5">
<link rel="shortcut icon" href="https://smartevinci.trenord.it/favicon.ico">
<meta name="msapplication-TileColor" content="#063">
<meta name="msapplication-config" content="https://smartevinci.trenord.it/img/icon/browserconfig.xml">
<meta name="theme-color" content="#ffffff">
<!-- Scripts -->
<script src="/js/script.js?version=1.2" defer></script>
<!-- Fonts -->
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css">
<!-- Styles -->
<link href="/css/app.css?version=1.2" rel="stylesheet">
<style type="text/css">
html {
scroll-behavior: smooth;
}
.switch-language {
position: absolute;
right: 0;
top: 0;
padding: 1rem;
}
.switch-language a {
color: #fff;
font-size: 1rem;
}
</style>
<!-- Xandr Universal Pixel - Initialization (include only once per page) -->
<script>
!function(e,i){if(!e.pixie){var n=e.pixie=function(e,i,a){n.actionQueue.push({action:e,actionValue:i,params:a})};n.actionQueue=[];var a=i.createElement("script");a.async=!0,a.src="//acdn.adnxs.com/dmp/up/pixie.js";var t=i.getElementsByTagName("head")[0];t.insertBefore(a,t.firstChild)}}(window,document);
pixie('init', '1ad5d9a6-25d8-47a3-8986-771ccba21443');
</script>
<!-- Xandr Universal Pixel - PageView Event -->
<script>
pixie('event', 'PageView');
</script>
<noscript><img src="https://ib.adnxs.com/pixie?pi=1ad5d9a6-25d8-47a3-8986-771ccba21443&e=PageView&script=0" width="1" height="1" style="display:none"/></noscript>
</head>
<body>
<div id="app">
<div class="conta
Open service 139.59.210.46:443 · smartevinci.deveyesgroup.com
2026-01-10 01:38
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, private
Date: Sat, 10 Jan 2026 01:38:11 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkZ4bjl2bmVZOUpjK0JWc3VJRGVcL25nPT0iLCJ2YWx1ZSI6Im9Pbk5rdkdOZ0lVZWgzR3Z1YVpoc3ZkNnFobW5OUDRxWTY0NXRHZzJjWUloZ2RzdUpTeU1SSTcyNTU5dW5JNThmaHU0ZUU4TVA0ZnhaZ2ttdDVDZU9weG85N2Zydk1sSSttWDkraGVVTGtndVA1YmY2S3VaQlwvK1ZMMTNSZFJ0SVJVSEk1R3ZMQUFsRG1PR0RSbWt1WnU3QWhiVU9oTndvMVJoUVNka0xxRVZkRzl1WXFQbUJrYzdDelRpNFdDU3B2dWJwNEp5a0xkOXJuUnk0Y0FMUU9iYzRsdW1LWUR1d1pGVFRKY0RETTdJZEhCMUt1cVRzV2YwSVQweVwvVVZ3Mm55MjNXZjczWllUK3RWYnAzRXpEZG1CZzFYd2l2T0Q5VkRvaW5WSGxkcTRFTzRXTVwvNXpXVDhLaHA4QWU3bWpmK05ZbllhTUtoZzl0amI5Z0x1OTZUMmY5dWRmU2lpVGRCb3duTkQ3N2R1Z2lIb3ptTXNGclp5QnJIeWVmTFwvZEtVOXVJNTNXSFBNNzV6UUpGbG1FU0REa1BtMjFuVDZScjNxY1Y5alwvYjNQc1JPOFRUd3RMNHhLMWFSUUxUMHI5ZFVxbXJBWmtZTm4yRlFzME45WTBrenNkT0lnTmZ4Y1dnUVwvT0YzVkg4THRLaVdpTlZuSGJBdUZpTm1nVm5Ld244IiwibWFjIjoiODVmMDk1ZGY1ZDkzYjgyMTk5NWIwOGU0YzNmZTczYmZmMjkxNWU4ZmQ0ZmZkNDc3YzFiYmRkNmFiOTM5MzNlMyJ9; expires=Sat, 10-Jan-2026 03:38:11 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=eyJpdiI6Ilh1Q2ZqRkNmQ3kyaUptR2VQRzR2Tmc9PSIsInZhbHVlIjoic0Z1aUd6QXZTUklOa1J3cVBrYXNYTnRkZmxNWUpiV3FRN1l1cklBRjlsdHNHeXVZK2NTdjVUcisyYWJaXC9VbXFZWURibE9zN1l0Mlk4RTFyMXJ5eUEzaWhVbWxzWTA0TzNlUWlBVW1xb2tLXC9saFAyWkdaa04rM0FWSUZDM01uZiIsIm1hYyI6IjYxNTdmMDM5ZWFiMGM1YmQxZWUxZTRhYTMwZmI0ZTU4ZjJhZTUzYWEwZjA5ZGU5MjY1YTZlODRkYTk4NGQ1OGIifQ%3D%3D; expires=Sat, 10-Jan-2026 03:38:11 GMT; Max-Age=7200; path=/; httponly
Page title: Smart e Vinci!
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<!-- CSRF Token -->
<meta name="csrf-token" content="9NGcvNynVLGOMxc3McavXX7iSfR0Wu5tTfHHoVXM">
<title>Smart e Vinci!</title>
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="resource-type" content="document" />
<meta name="robots" content="all, index, follow"/>
<meta name="description" content="Dal 20 Giugno al 15 Ottobre 2024, attiva la funzione Phone Pass dall’App Trenord, gioca il codice e scopri subito se hai vinto.">
<meta name="author" content="Smart e Vinci!">
<meta name="theme-color" content="#063">
<meta property="og:title" content="Smart e Vinci!">
<meta property="og:type" content="website">
<meta property="og:url" content="https://smartevinci.trenord.it">
<meta property="og:image" content="https://smartevinci.trenord.it/img/img_share.png">
<meta property="og:image:width" content="1000">
<meta property="og:image:height" content="500">
<meta property="og:image:alt" content="Smart e Vinci!">
<meta property="og:description" content="Dal 20 Giugno al 15 Ottobre 2024, attiva la funzione Phone Pass dall’App Trenord, gioca il codice e scopri subito se hai vinto.">
<meta property="og:locale" content="it_IT">
<meta property="og:site_name" content="Smart e Vinci!">
<meta name="twitter:card" content="summary">
<meta name="twitter:title" content="Smart e Vinci!">
<meta name="twitter:description" content="Dal 20 Giugno al 15 Ottobre 2024, attiva la funzione Phone Pass dall’App Trenord, gioca il codice e scopri subito se hai vinto.">
<meta name="twitter:site" content="https://smartevinci.trenord.it">
<meta name="twitter:image" content="https://smartevinci.trenord.it/img/img_share.png">
<link rel="canonical" href="https://smartevinci.trenord.it">
<link rel="apple-touch-icon" sizes="180x180" href="https://smartevinci.trenord.it/img/icon/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="https://smartevinci.trenord.it/img/icon/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="https://smartevinci.trenord.it/img/icon/favicon-16x16.png">
<link rel="manifest" href="https://smartevinci.trenord.it/img/icon/site.webmanifest">
<link rel="mask-icon" href="https://smartevinci.trenord.it/img/icon/safari-pinned-tab.svg" color="#5bbad5">
<link rel="shortcut icon" href="https://smartevinci.trenord.it/favicon.ico">
<meta name="msapplication-TileColor" content="#063">
<meta name="msapplication-config" content="https://smartevinci.trenord.it/img/icon/browserconfig.xml">
<meta name="theme-color" content="#ffffff">
<!-- Scripts -->
<script src="/js/script.js?version=1.2" defer></script>
<!-- Fonts -->
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css">
<!-- Styles -->
<link href="/css/app.css?version=1.2" rel="stylesheet">
<style type="text/css">
html {
scroll-behavior: smooth;
}
.switch-language {
position: absolute;
right: 0;
top: 0;
padding: 1rem;
}
.switch-language a {
color: #fff;
font-size: 1rem;
}
</style>
<!-- Xandr Universal Pixel - Initialization (include only once per page) -->
<script>
!function(e,i){if(!e.pixie){var n=e.pixie=function(e,i,a){n.actionQueue.push({action:e,actionValue:i,params:a})};n.actionQueue=[];var a=i.createElement("script");a.async=!0,a.src="//acdn.adnxs.com/dmp/up/pixie.js";var t=i.getElementsByTagName("head")[0];t.insertBefore(a,t.firstChild)}}(window,document);
pixie('init', '1ad5d9a6-25d8-47a3-8986-771ccba21443');
</script>
<!-- Xandr Universal Pixel - PageView Event -->
<script>
pixie('event', 'PageView');
</script>
<noscript><img src="https://ib.adnxs.com/pixie?pi=1ad5d9a6-25d8-47a3-8986-771ccba21443&e=PageView&script=0" width="1" height="1" style="display:none"/></noscript>
</head>
<body>
<div id="app">
<div class="conta