cloudflare
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09cae99eea9ae99eea96ba46591629a2ee1cbb56ea163e836bb
Found 23 files trough .DS_Store spidering: /admin /admin/img /admin/js /build /build/admin /build/frontend /bundles /css /flags /frontend /frontend/img /img /media /media/cache /media/cache/pb_block_image /media/cache/pb_image /nav-icons /pagebuilder /svg /svg/games /svg/socials /uploads /uploads/media
Severity: low
Fingerprint: 5f32cf5d6962f09c3838040e3838040e5e6a8b7a70bcfd92ae23e35cca3b362b
Found 20 files trough .DS_Store spidering: /admin /admin/img /admin/js /build /build/admin /build/frontend /bundles /css /flags /frontend /frontend/img /img /media /media/cache /media/cache/pb_block_image /media/cache/pb_image /nav-icons /pagebuilder /svg /uploads
The application has Symfony profiling enabled.
It enables an attacker to access the following sensitive content :
Fingerprint: 407cf4363b0e62fafca67e076489e9756489e9756489e9756489e9756489e975
Symfony profiler enabled: https://uniclub-fr.com/_profiler/empty/search/results
Open service 188.114.97.3:443 · uniclub-fr.com
2026-01-09 12:56
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 12:56:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=MP3cXUaq9dAJ5SQl2LvQOwmAOGVdOIi9o8b4q%2BlL2fBbNdUhWF0c1AiCmQx9BOtT6swZUevz0bl7PsA19OrcLwNpQl0bN03OrYTFQAop"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Mon, 09 Feb 2026 12:56:27 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=6,cfOrigin;dur=1079
CF-RAY: 9bb4183e0f436798-SJC
Open service 2a06:98c1:3121::3:443 · uniclub-fr.com
2026-01-09 00:51
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 00:52:00 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=HlHGLY3n6walfQ7Zf70MG%2BKZAlZxa2gsR%2F0LLemyJyQwOfPU%2Bj%2FMcfhvskoyQBHa7R1w5MhUnWT2neAU1mXwKfFv2R4zezFw32aRw2cAMij%2FEUJ0FZoKMhLL"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Mon, 09 Feb 2026 00:52:00 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9baff30b3de29707-AMS
Open service 188.114.97.3:443 · uniclub-fr.com
2026-01-02 07:55
HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 07:55:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Ypq76aDIa0p03GHWq6SmzS7YRgu2PktMD9qbxdSY%2FEKaC%2Bw7ZHfoECa2hDoe%2BlWZqiQzpnDSBHiKevgEEsBGZ5cEbZUYQd0dmrhA6o8X"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Mon, 02 Feb 2026 07:55:50 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b78b2454e800014-LHR
Open service 2a06:98c1:3121::3:443 · uniclub-fr.com
2026-01-02 03:23
HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 03:23:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=sVYJf2MMF6hrdT827StgQCjS5QkNOBnktW9790%2Fa9NIENbTh3Nf04%2FUbAJXTwET28C%2BMIPm0Zby7LMNPn3uiqxk3dzDMinOav8y1ynsvNNYyeWlhJ442LSwz"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Mon, 02 Feb 2026 03:23:42 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b7723a2aa5fd22e-FRA
Open service 2a06:98c1:3121::3:443 · uniclub-fr.com
2025-12-30 10:35
HTTP/1.1 200 OK
Date: Tue, 30 Dec 2025 10:35:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=2bkrsMIhiuS5AK1gAFLStO56ajNREMAYx7TXZrmi7zKIAConiKbyEOXfG4fPp3gFbRo7P3zfQsa%2BAUlAfz9Y0xaVZ7tDusxBLU8iKhgVI3FqIvyv3l1igmdE"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Fri, 30 Jan 2026 10:35:46 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=10,cfOrigin;dur=1063
CF-RAY: 9b60e46a9faf44a1-SIN
Open service 188.114.97.3:443 · uniclub-fr.com
2025-12-23 06:18
HTTP/1.1 200 OK
Date: Tue, 23 Dec 2025 06:18:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=OqxXUEAluHYo5Y4Q4kool90et6mNIWpUkaM6UraTksLyNt%2Bqxib3a%2BQ8pnucEBfQgJ1rJKx8AeN8%2BF%2FDYQIuU2T9vMUcuKd1ovoOAmi8"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Fri, 23 Jan 2026 06:18:13 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b25bd884aaf66c2-AMS
Open service 2a06:98c1:3121::3:443 · uniclub-fr.com
2025-12-22 15:57
HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 15:57:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qJV8H4v%2FcIVQssRx6bixGOM%2FlAimQSoKT4%2BRHuIivC%2FfoEvcTwua7%2BaC1WQrW0kWLL%2FDV33EUYuxa85tCMhCcC1rcYxhnWmikr9eyOkVUZiQu9ziBQsR1kr%2B"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Thu, 22 Jan 2026 15:57:48 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=9,cfOrigin;dur=1720
CF-RAY: 9b20d121aa5ecb6e-BOM
Open service 188.114.97.3:443 · uniclub-fr.com
2025-12-21 02:55
HTTP/1.1 200 OK
Date: Sun, 21 Dec 2025 02:55:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fhqRWs0cHu00TwlpxbJjX8NxAa7Rl9Pl%2B6F3WELCd7yxiA8qOjgC0D0jG3%2BeFt56uPah2f3V%2BgtrcXdlsijEf6M0hWafduZihj0agMBb"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Wed, 21 Jan 2026 02:55:58 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=10,cfOrigin;dur=805
CF-RAY: 9b141a820edb2caf-EWR
Open service 2a06:98c1:3121::3:443 · uniclub-fr.com
2025-12-20 16:25
HTTP/1.1 200 OK
Date: Sat, 20 Dec 2025 16:25:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Xrg9AbROx9LlVLcAWzNb%2BBWTe1QJ279dkCDatx7vLiWDmAkRw1Yl%2FcSzzyqud72YvHEbZBCoN%2BfjNOHQXOJzZE%2FjlgkBKA8Y1my8xhSNHHYPHmzR4UKY89uW"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Tue, 20 Jan 2026 16:25:03 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b107e4fe9674d43-FRA
Open service 188.114.97.3:443 · uniclub-fr.com
2025-12-19 05:35
HTTP/1.1 200 OK
Date: Fri, 19 Dec 2025 05:35:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
alt-svc: h3=":443"; ma=86400
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kM1TiA5%2F0rbNlJUlfco%2FnYyb14hiN5%2FwYD%2Bs0sGgnDq7EpSpfARrZDL9UKAaVfV4u0rVryNDqrzldgsUzbfPcp0i4DvArxUkBI056nxs"}]}
Server: cloudflare
Set-Cookie: geo_country=us; expires=Mon, 19 Jan 2026 05:35:23 GMT; Max-Age=2678400; path=/; samesite=lax
vary: Accept-Encoding
x-powered-by: PHP/8.3.28
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b04894bac95d259-FRA