Apache 2.4.41
tcp/443 tcp/80
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c668fcbec668fcbecc8987cfb339ad24d243d0f36b7767d59
Found 17 files trough .DS_Store spidering: /abc.json /abc1.json /abc2.json /addons /assets /css /csvFile /favicon_io /feeds /images /images/tournaments /index.php /js /mix-manifest.json /robots.txt /version.xml /web.config
Open service 18.169.236.39:80 · stage09.instamatch.testingserverwm.com
2025-12-19 12:50
HTTP/1.1 301 Moved Permanently Date: Fri, 19 Dec 2025 12:50:45 GMT Server: Apache/2.4.41 (Ubuntu) Location: https://stage09.instamatch.testingserverwm.com/ Content-Length: 359 Connection: close Content-Type: text/html; charset=iso-8859-1 Page title: 301 Moved Permanently <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="https://stage09.instamatch.testingserverwm.com/">here</a>.</p> <hr> <address>Apache/2.4.41 (Ubuntu) Server at stage09.instamatch.testingserverwm.com Port 80</address> </body></html>
Open service 18.169.236.39:443 · stage09.instamatch.testingserverwm.com
2025-12-19 12:50
HTTP/1.1 302 Found
Date: Fri, 19 Dec 2025 12:50:46 GMT
Server: Apache/2.4.41 (Ubuntu)
Cache-Control: no-cache, private
Location: https://stage09.instamatch.testingserverwm.com/isAuthorized
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkJ1SEV2dlJpZXpnVFEwbHFJL2kwL0E9PSIsInZhbHVlIjoiTEdtRnJVNWFWa0dtNCtpbFhkNjF3U0Rad05TVTU4cS9IaWQvaEVwRU5Lc25MYWE0T2lKanNTNlEzNEs2aktiTkQvejZXeGlrU01oaGFHUzRSTi9oeDgvbzVFaDFXNlFwa2p2T0w1cjI0NkI1WUk4bm5tQTNZKzA0c0FFU2pRZkkiLCJtYWMiOiIwMTAwMDFhOGFmODYxOTJkYjNkN2E2M2JhNGY2NDFmZjUxYjUxMGUzYjM2Y2JjODMwZmY3ZWRlYzY4YzYxZjk5IiwidGFnIjoiIn0%3D; expires=Fri, 19-Dec-2025 14:50:46 GMT; Max-Age=7200; path=/; samesite=lax
Set-Cookie: laravel_session=Xuhas6gp8wVk4yghRxDeGCGUjXvz5FQQp6ZSpX8l; expires=Fri, 19-Dec-2025 14:50:46 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
Page title: Redirecting to https://stage09.instamatch.testingserverwm.com/isAuthorized
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8" />
<meta http-equiv="refresh" content="0;url='https://stage09.instamatch.testingserverwm.com/isAuthorized'" />
<title>Redirecting to https://stage09.instamatch.testingserverwm.com/isAuthorized</title>
</head>
<body>
Redirecting to <a href="https://stage09.instamatch.testingserverwm.com/isAuthorized">https://stage09.instamatch.testingserverwm.com/isAuthorized</a>.
</body>
</html>