.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf17642babc5aa13669b0d13669b0d13669b0d1
Found 2 files trough .DS_Store spidering: /fonts /vendors
Open service 20.101.2.157:443 · stageplatform.we.care
2026-01-09 06:41
HTTP/1.1 200 OK
Content-Length: 957
Connection: close
Content-Type: text/html
Date: Fri, 09 Jan 2026 06:42:13 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "25411406"
Last-Modified: Mon, 05 Jan 2026 19:36:48 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: we.care Platform
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" href="/favicon.ico" />
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no, maximum-scale=1" />
<title>we.care Platform</title>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link rel="preload" as="style" onload="this.rel='stylesheet'" href="/vendors/font-awesome.css" />
<script src="//js.stripe.com/v3/"></script>
<script
id="CookieConsent"
src="https://policy.app.cookieinformation.com/uc.js"
data-culture="DA"
type="text/javascript"
></script>
<script type="module" crossorigin src="/assets/index.4cb3accf.js"></script>
<link rel="stylesheet" href="/assets/index.b03cbf02.css">
</head>
<body>
<div id="alert-area"></div>
<div id="app"></div>
</body>
</html>
Open service 20.101.2.157:443 · stageplatform.we.care
2026-01-02 07:17
HTTP/1.1 200 OK
Content-Length: 957
Connection: close
Content-Type: text/html
Date: Fri, 02 Jan 2026 07:17:41 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "40583307"
Last-Modified: Thu, 18 Dec 2025 13:05:17 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: we.care Platform
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" href="/favicon.ico" />
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no, maximum-scale=1" />
<title>we.care Platform</title>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link rel="preload" as="style" onload="this.rel='stylesheet'" href="/vendors/font-awesome.css" />
<script src="//js.stripe.com/v3/"></script>
<script
id="CookieConsent"
src="https://policy.app.cookieinformation.com/uc.js"
data-culture="DA"
type="text/javascript"
></script>
<script type="module" crossorigin src="/assets/index.a576ed06.js"></script>
<link rel="stylesheet" href="/assets/index.b03cbf02.css">
</head>
<body>
<div id="alert-area"></div>
<div id="app"></div>
</body>
</html>
Open service 20.101.2.157:443 · stageplatform.we.care
2025-12-23 04:22
HTTP/1.1 200 OK
Content-Length: 957
Connection: close
Content-Type: text/html
Date: Tue, 23 Dec 2025 04:22:47 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "40583307"
Last-Modified: Thu, 18 Dec 2025 13:05:17 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: we.care Platform
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" href="/favicon.ico" />
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no, maximum-scale=1" />
<title>we.care Platform</title>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link rel="preload" as="style" onload="this.rel='stylesheet'" href="/vendors/font-awesome.css" />
<script src="//js.stripe.com/v3/"></script>
<script
id="CookieConsent"
src="https://policy.app.cookieinformation.com/uc.js"
data-culture="DA"
type="text/javascript"
></script>
<script type="module" crossorigin src="/assets/index.a576ed06.js"></script>
<link rel="stylesheet" href="/assets/index.b03cbf02.css">
</head>
<body>
<div id="alert-area"></div>
<div id="app"></div>
</body>
</html>
Open service 20.101.2.157:443 · stageplatform.we.care
2025-12-21 04:02
HTTP/1.1 200 OK
Content-Length: 957
Connection: close
Content-Type: text/html
Date: Sun, 21 Dec 2025 04:02:53 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "40583307"
Last-Modified: Thu, 18 Dec 2025 13:05:17 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: we.care Platform
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" href="/favicon.ico" />
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no, maximum-scale=1" />
<title>we.care Platform</title>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link rel="preload" as="style" onload="this.rel='stylesheet'" href="/vendors/font-awesome.css" />
<script src="//js.stripe.com/v3/"></script>
<script
id="CookieConsent"
src="https://policy.app.cookieinformation.com/uc.js"
data-culture="DA"
type="text/javascript"
></script>
<script type="module" crossorigin src="/assets/index.a576ed06.js"></script>
<link rel="stylesheet" href="/assets/index.b03cbf02.css">
</head>
<body>
<div id="alert-area"></div>
<div id="app"></div>
</body>
</html>
Open service 20.101.2.157:80 · stageplatform.we.care
2025-12-19 20:47
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Fri, 19 Dec 2025 20:47:14 GMT Location: https://stageplatform.we.care/
Open service 20.101.2.157:443 · stageplatform.we.care
2025-12-19 20:47
HTTP/1.1 200 OK
Content-Length: 957
Connection: close
Content-Type: text/html
Date: Fri, 19 Dec 2025 20:47:14 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "40583307"
Last-Modified: Thu, 18 Dec 2025 13:05:17 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: we.care Platform
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" href="/favicon.ico" />
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no, maximum-scale=1" />
<title>we.care Platform</title>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link rel="preload" as="style" onload="this.rel='stylesheet'" href="/vendors/font-awesome.css" />
<script src="//js.stripe.com/v3/"></script>
<script
id="CookieConsent"
src="https://policy.app.cookieinformation.com/uc.js"
data-culture="DA"
type="text/javascript"
></script>
<script type="module" crossorigin src="/assets/index.a576ed06.js"></script>
<link rel="stylesheet" href="/assets/index.b03cbf02.css">
</head>
<body>
<div id="alert-area"></div>
<div id="app"></div>
</body>
</html>