Apache
tcp/443 tcp/80
nginx
tcp/443
openresty
tcp/443
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: medium
Fingerprint: 5f32cf5d6962f09c248e4f81248e4f814f96c4abe90bd9dd9f22def8e37751c1
Found 41 files trough .DS_Store spidering: /wp-admin /wp-admin/css /wp-admin/images /wp-admin/includes /wp-admin/js /wp-admin/maint /wp-admin/network /wp-admin/user /wp-content /wp-content/backups-dup-lite /wp-content/backups-dup-pro /wp-content/cache /wp-content/languages /wp-content/languages/plugins /wp-content/languages/themes /wp-content/languages/wpml /wp-content/mu-plugins /wp-content/plugins /wp-content/plugins/all-in-one-wp-migration /wp-content/plugins/bunnycdn /wp-content/plugins/duplicator /wp-content/plugins/duplicator-pro /wp-content/plugins/elementor /wp-content/plugins/elementor-pro /wp-content/plugins/seo-by-rank-math /wp-content/plugins/sitepress-multilingual-cms /wp-content/plugins/wordpress-importer /wp-content/plugins/wp-mail-smtp /wp-content/plugins/wp-optimize /wp-content/plugins/wpforms-lite /wp-content/plugins/wpml-cms-nav /wp-content/plugins/wpml-media-translation /wp-content/plugins/wpml-sticky-links /wp-content/plugins/wpml-string-translation /wp-content/plugins/wpml-translation-management /wp-content/themes /wp-content/upgrade /wp-content/uploads /wp-content/w3tc-config /wp-content/wpo-cache /wp-includes
Severity: medium
Fingerprint: 5f32cf5d6962f09c2f72f5fb2f72f5fb3a6b00d50c64743f8d6f45626368cafe
Found 65 files trough .DS_Store spidering: /wp-admin /wp-admin/css /wp-admin/images /wp-admin/includes /wp-admin/js /wp-admin/maint /wp-admin/network /wp-admin/user /wp-content /wp-content/backups-dup-lite /wp-content/backups-dup-pro /wp-content/cache /wp-content/languages /wp-content/languages/plugins /wp-content/languages/themes /wp-content/languages/wpml /wp-content/mu-plugins /wp-content/plugins /wp-content/plugins/all-in-one-wp-migration /wp-content/plugins/bunnycdn /wp-content/plugins/duplicator /wp-content/plugins/duplicator-pro /wp-content/plugins/elementor /wp-content/plugins/elementor-pro /wp-content/plugins/seo-by-rank-math /wp-content/plugins/sitepress-multilingual-cms /wp-content/plugins/wordpress-importer /wp-content/plugins/wp-mail-smtp /wp-content/plugins/wp-optimize /wp-content/plugins/wpforms-lite /wp-content/plugins/wpml-cms-nav /wp-content/plugins/wpml-media-translation /wp-content/plugins/wpml-sticky-links /wp-content/plugins/wpml-string-translation /wp-content/plugins/wpml-translation-management /wp-content/themes /wp-content/themes/hello-elementor /wp-content/themes/oceanwp /wp-content/upgrade /wp-content/uploads /wp-content/uploads/2018 /wp-content/uploads/2018/03 /wp-content/uploads/2018/04 /wp-content/uploads/2018/05 /wp-content/uploads/2018/06 /wp-content/uploads/2018/07 /wp-content/uploads/2018/08 /wp-content/uploads/2018/09 /wp-content/uploads/2018/10 /wp-content/uploads/2018/11 /wp-content/uploads/2018/12 /wp-content/uploads/2019 /wp-content/uploads/2020 /wp-content/uploads/2021 /wp-content/uploads/analytify-logs /wp-content/uploads/backwpup-198377-logs /wp-content/uploads/cache /wp-content/uploads/elementor /wp-content/uploads/elements /wp-content/uploads/oceanwp /wp-content/uploads/rank-math /wp-content/uploads/wpforms /wp-content/w3tc-config /wp-content/wpo-cache /wp-includes
Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733fa5ef89115c42547b87a1024e8bc37eb5
Found 10 files trough .DS_Store spidering: /wp-admin /wp-admin/css /wp-admin/images /wp-admin/includes /wp-admin/js /wp-admin/maint /wp-admin/network /wp-admin/user /wp-content /wp-includes
Severity: low
Fingerprint: 5f32cf5d6962f09c0f8dcf020f8dcf02ae8e60f6a143d7b20c5e3e4f88983900
Found 24 files trough .DS_Store spidering: /wp-admin /wp-admin/css /wp-admin/images /wp-admin/includes /wp-admin/js /wp-admin/maint /wp-admin/network /wp-admin/user /wp-content /wp-content/backups-dup-lite /wp-content/backups-dup-pro /wp-content/cache /wp-content/languages /wp-content/languages/plugins /wp-content/languages/themes /wp-content/languages/wpml /wp-content/mu-plugins /wp-content/plugins /wp-content/themes /wp-content/upgrade /wp-content/uploads /wp-content/w3tc-config /wp-content/wpo-cache /wp-includes
Severity: low
Fingerprint: 5f32cf5d6962f09cab28146bab28146b35ab3c650021fa6feea43c329cee5dfe
Found 21 files trough .DS_Store spidering: /wp-admin /wp-admin/css /wp-admin/images /wp-admin/includes /wp-admin/js /wp-admin/maint /wp-admin/network /wp-admin/user /wp-content /wp-content/backups-dup-lite /wp-content/backups-dup-pro /wp-content/cache /wp-content/languages /wp-content/mu-plugins /wp-content/plugins /wp-content/themes /wp-content/upgrade /wp-content/uploads /wp-content/w3tc-config /wp-content/wpo-cache /wp-includes
Severity: low
Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0f12bc2b81ea6646a963d4b45963d4b459
Found 3 files trough .DS_Store spidering: /wp-admin /wp-content /wp-includes
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c0f8dcf020f8dcf02ae8e60f6a143d7b20c5e3e4f88983900
Found 24 files trough .DS_Store spidering: /wp-admin /wp-admin/css /wp-admin/images /wp-admin/includes /wp-admin/js /wp-admin/maint /wp-admin/network /wp-admin/user /wp-content /wp-content/backups-dup-lite /wp-content/backups-dup-pro /wp-content/cache /wp-content/languages /wp-content/languages/plugins /wp-content/languages/themes /wp-content/languages/wpml /wp-content/mu-plugins /wp-content/plugins /wp-content/themes /wp-content/upgrade /wp-content/uploads /wp-content/w3tc-config /wp-content/wpo-cache /wp-includes
Severity: medium
Fingerprint: 5f32cf5d6962f09c248e4f81248e4f814f96c4abe90bd9dd9f22def8e37751c1
Found 41 files trough .DS_Store spidering: /wp-admin /wp-admin/css /wp-admin/images /wp-admin/includes /wp-admin/js /wp-admin/maint /wp-admin/network /wp-admin/user /wp-content /wp-content/backups-dup-lite /wp-content/backups-dup-pro /wp-content/cache /wp-content/languages /wp-content/languages/plugins /wp-content/languages/themes /wp-content/languages/wpml /wp-content/mu-plugins /wp-content/plugins /wp-content/plugins/all-in-one-wp-migration /wp-content/plugins/bunnycdn /wp-content/plugins/duplicator /wp-content/plugins/duplicator-pro /wp-content/plugins/elementor /wp-content/plugins/elementor-pro /wp-content/plugins/seo-by-rank-math /wp-content/plugins/sitepress-multilingual-cms /wp-content/plugins/wordpress-importer /wp-content/plugins/wp-mail-smtp /wp-content/plugins/wp-optimize /wp-content/plugins/wpforms-lite /wp-content/plugins/wpml-cms-nav /wp-content/plugins/wpml-media-translation /wp-content/plugins/wpml-sticky-links /wp-content/plugins/wpml-string-translation /wp-content/plugins/wpml-translation-management /wp-content/themes /wp-content/upgrade /wp-content/uploads /wp-content/w3tc-config /wp-content/wpo-cache /wp-includes
Severity: low
Fingerprint: 5f32cf5d6962f09c8329733f8329733fa5ef89115c42547b87a1024e8bc37eb5
Found 10 files trough .DS_Store spidering: /wp-admin /wp-admin/css /wp-admin/images /wp-admin/includes /wp-admin/js /wp-admin/maint /wp-admin/network /wp-admin/user /wp-content /wp-includes
Severity: low
Fingerprint: 5f32cf5d6962f09cab28146bab28146b35ab3c650021fa6feea43c329cee5dfe
Found 21 files trough .DS_Store spidering: /wp-admin /wp-admin/css /wp-admin/images /wp-admin/includes /wp-admin/js /wp-admin/maint /wp-admin/network /wp-admin/user /wp-content /wp-content/backups-dup-lite /wp-content/backups-dup-pro /wp-content/cache /wp-content/languages /wp-content/mu-plugins /wp-content/plugins /wp-content/themes /wp-content/upgrade /wp-content/uploads /wp-content/w3tc-config /wp-content/wpo-cache /wp-includes
Open service 94.113.246.51:443 · eshop.volcanocomplex.cz
2026-01-26 14:04
HTTP/1.1 200 OK Date: Mon, 26 Jan 2026 14:04:08 GMT Server: Apache X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With,Accept-Encoding Set-Cookie: _nss=1; path=/; secure; HttpOnly; SameSite=Strict Set-Cookie: PHPSESSID=todtoi8blubuo6pp6402g67ci7; expires=Wed, 25-Feb-2026 14:04:08 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8
Open service 94.113.246.51:80 · eshop.volcanocomplex.cz
2026-01-26 14:04
HTTP/1.1 302 Found Date: Mon, 26 Jan 2026 14:04:26 GMT Server: Apache Location: https://eshop.volcanocomplex.cz/ Content-Length: 289 Connection: close Content-Type: text/html; charset=iso-8859-1 Page title: 302 Found <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="https://eshop.volcanocomplex.cz/">here</a>.</p> <hr> <address>Apache Server at eshop.volcanocomplex.cz Port 80</address> </body></html>
Open service 31.15.10.127:443 · volcanocomplex.cz
2026-01-23 15:46
HTTP/1.1 200 OK Server: nginx Date: Fri, 23 Jan 2026 15:46:41 GMT Content-Type: text/html Content-Length: 311 Connection: close Accept-Ranges: bytes Vary: Accept-Encoding <!DOCTYPE html> <html> <head> </head> <frameset cols="100%,*" border="0" framespacing="0"> <frame src="https://page.active24.cz/unknown.hosting.cz/"></frameset> <body> <noframes> <a href="https://page.active24.cz/unknown.hosting.cz/">https://page.active24.cz/unknown.hosting.cz/</a> </noframes> </body> </html>
Open service 31.15.10.127:443 · volcanocomplex.cz
2026-01-23 03:03
HTTP/1.1 200 OK Server: nginx Date: Fri, 23 Jan 2026 03:03:54 GMT Content-Type: text/html Content-Length: 311 Connection: close Accept-Ranges: bytes Vary: Accept-Encoding <!DOCTYPE html> <html> <head> </head> <frameset cols="100%,*" border="0" framespacing="0"> <frame src="https://page.active24.cz/unknown.hosting.cz/"></frameset> <body> <noframes> <a href="https://page.active24.cz/unknown.hosting.cz/">https://page.active24.cz/unknown.hosting.cz/</a> </noframes> </body> </html>
Open service 37.9.175.164:443 · www.volcanocomplex.cz
2026-01-22 22:23
HTTP/1.1 301 Moved Permanently Server: openresty Date: Thu, 22 Jan 2026 22:23:07 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close content-security-policy: upgrade-insecure-requests X-Redirect-By: WordPress Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), microphone=(), camera=() Location: https://volcanocomplex.cz/ alt-svc: h3=":443"; ma=86400
Open service 31.15.10.127:443 · www.volcanocomplex.cz
2026-01-22 21:10
HTTP/1.1 200 OK Server: nginx Date: Thu, 22 Jan 2026 21:10:31 GMT Content-Type: text/html Content-Length: 311 Connection: close Accept-Ranges: bytes Vary: Accept-Encoding <!DOCTYPE html> <html> <head> </head> <frameset cols="100%,*" border="0" framespacing="0"> <frame src="https://page.active24.cz/unknown.hosting.cz/"></frameset> <body> <noframes> <a href="https://page.active24.cz/unknown.hosting.cz/">https://page.active24.cz/unknown.hosting.cz/</a> </noframes> </body> </html>
Open service 37.9.175.164:443 · volcanocomplex.cz
2026-01-22 21:07
HTTP/1.1 200 OK Server: openresty Date: Thu, 22 Jan 2026 21:07:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding content-security-policy: upgrade-insecure-requests Link: <https://volcanocomplex.cz/wp-json/>; rel="https://api.w.org/", <https://volcanocomplex.cz/wp-json/wp/v2/pages/9>; rel="alternate"; title="JSON"; type="application/json", <https://volcanocomplex.cz/>; rel=shortlink X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), microphone=(), camera=() alt-svc: h3=":443"; ma=86400