openresty
tcp/443 tcp/80
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: high
Fingerprint: 5f32cf5d6962f09c684e525d684e525de1a89b57bf7e4f18763df92a4ecb5923
Found 27 files trough .DS_Store spidering: /administrator /backup /bin /cache /cli /components /configuration.php /htaccess.txt /images /includes /index.php /language /layouts /libraries /LICENSE.txt /log /media /modules /plugins /README.txt /robots.txt /robots.txt.dist /t3-assets /templates /tmp /tx_gen_quickstart /web.config.txt
Open service 2a00:f48:2000:affe:fe00::26:443 · lummenfelsen.de
2026-01-29 02:27
HTTP/1.1 302 Found Server: openresty Date: Thu, 29 Jan 2026 02:27:05 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Lima-Id: gaG5tFwc19vCcSa4jG Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly x-powered-by: PHP/8.4.11 strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block referrer-policy: no-referrer location: https://www.fotocommunity.de/calendar/Workshop/Helgoland-2026-05-03-68600 Content-Security-Policy: upgrade-insecure-requests
Open service 2a00:f48:2000:affe:fe00::26:443 · www.robocup.toboxos.de
2026-01-29 01:53
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 29 Jan 2026 01:53:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Lima-Id: gadHJPXwj9u7NM2lIy
Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly
accept-ranges: bytes
vary: Accept-Encoding
Page title: Robocup Maze Entry Score Evaluator
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>Robocup Maze Entry Score Evaluator</title>
<script type="module" crossorigin src="/assets/index-7d7e8a19.js"></script>
<link rel="stylesheet" href="/assets/index-2f1fc16a.css">
</head>
<body>
<div id="app"></div>
<script type="text/javascript">window.setTimeout(function() { document.cookie = "_lcp3=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax" }, 1000);</script></body>
</html>
Open service 2a00:f48:2000:affe:fe00::26:80 · www.cloud.fairmetall.de
2026-01-26 14:29
HTTP/1.1 301 Moved Permanently Server: openresty Date: Mon, 26 Jan 2026 14:29:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Lima-Id: gastDnk9hulK4RJ6ZJ Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly Location: https://www.cloud.fairmetall.de/ Content-Security-Policy: upgrade-insecure-requests Strict-Transport-Security: max-age=31536000; includeSubDomains; preload This website has moved to https://www.cloud.fairmetall.de/
Open service 2a00:f48:2000:affe:fe00::26:443 · www.cloud.fairmetall.de
2026-01-26 14:29
HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 26 Jan 2026 14:29:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Lima-Id: ga3rDQGPYATWt7nTp0 Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly x-powered-by: PHP/7.4.33 expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache content-security-policy: default-src 'self'; script-src 'self' 'nonce-WVdpQjhkNTFURmFaL3dOVUF6NzlTTVMrRWx0RU5qbnNNeE5CMUxWd2kyUT06VUNEMnFaUk1IeEN0dEN3bVdnNjRESktOVXowcUFYeUVWRGdubWNRZjVSST0='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self'; set-cookie: oc_sessionPassphrase=ycw3Qcm68yNioJxo6D8c07mb3DTgDkwDY6NYfqwIENQSv27jtCY%2BAFDIHsDt12PryKNDHytAJJeMXWWcQlWkWLsf%2FUHaGIsTQjFX26xO%2BtOjo2kyBchxgsS48l4RN5ju; path=/; secure; HttpOnly; SameSite=Lax set-cookie: ocju42gbzc1w=0f996167cc08113af6f50e365a3c1fe7; path=/; secure; HttpOnly; SameSite=Lax set-cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax set-cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict referrer-policy: no-referrer x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-robots-tag: none x-xss-protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Page title: Nextcloud <!DOCTYPE html> <html class="ng-csp" data-placeholder-focus="false" lang="en" data-locale="en" > <head data-requesttoken="YWiB8d51TFaZ/wNUAz79SMS+EltENjnsMxNB1LVwi2Q=:UCD2qZRMHxCttCwmWg64DJKNUz0qAXyEVDgnmcQf5RI="> <meta charset="utf-8"> <title> Nextcloud </title> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0"> <meta name="apple-itunes-app" content="app-id=1125420102"> <meta name="theme-color" content="#0082c9"> <link rel="icon" href="/core/img/favicon.ico"> <link rel="apple-touch-icon" href="/core/img/favicon-touch.png"> <link rel="mask-icon" sizes="any" href="/core/img/favicon-mask.svg" color="#0082c9"> <link rel="manifest" href="/core/img/manifest.json"> <link rel="stylesheet" href="/core/css/guest.css?v=a44f73df-0"> <script nonce="WVdpQjhkNTFURmFaL3dOVUF6NzlTTVMrRWx0RU5qbnNNeE5CMUxWd2kyUT06VUNEMnFaUk1IeEN0dEN3bVdnNjRESktOVXowcUFYeUVWRGdubWNRZjVSST0=" defer src="/index.php/core/js/oc.js?v=a44f73df"></script> <script nonce="WVdpQjhkNTFURmFaL3dOVUF6NzlTTVMrRWx0RU5qbnNNeE5CMUxWd2kyUT06VUNEMnFaUk1IeEN0dEN3bVdnNjRESktOVXowcUFYeUVWRGdubWNRZjVSST0=" defer src="/core/js/dist/main.js?v=a44f73df-0"></script> <script nonce="WVdpQjhkNTFURmFaL3dOVUF6NzlTTVMrRWx0RU5qbnNNeE5CMUxWd2kyUT06VUNEMnFaUk1IeEN0dEN3bVdnNjRESktOVXowcUFYeUVWRGdubWNRZjVSST0=" defer src="/core/js/dist/files_fileinfo.js?v=a44f73df-0"></script> <script nonce="WVdpQjhkNTFURmFaL3dOVUF6NzlTTVMrRWx0RU5qbnNNeE5CMUxWd2kyUT06VUNEMnFaUk1IeEN0dEN3bVdnNjRESktOVXowcUFYeUVWRGdubWNRZjVSST0=" defer src="/core/js/dist/files_client.js?v=a44f73df-0"></script> <script nonce="WVdpQjhkNTFURmFaL3dOVUF6NzlTTVMrRWx0RU5qbnNNeE5CMUxWd2kyUT06VUNEMnFaUk1IeEN0dEN3bVdnNjRESktOVXowcUFYeUVWRGdubWNRZjVSST0=" defer src="/index.php/js/core/merged-template-prepend.js?v=a44f73df-0"></script> <script nonce="WVdpQjhkNTFURmFaL3dOVUF6NzlTTVMrRWx0RU5qbnNNeE5CMUxWd2kyUT06VUNEMnFaUk1IeEN0dEN3bVdnNjRESktOVXowcUFYeUVWRGdubWNRZjVSST0=" defer src="/core/js/backgroundjobs.js?v=a44f73df-0"></script> </head> <body id="body-login"> <noscript> <div id="nojavascript"> <div> This application requires JavaScript for correct operation. Please <a href="https://www.enable-javascript.com/" target="_blank" rel="noreferrer noopener">enable JavaScript</a> and reload the page. </div> </div> </noscript> <input type="hidden" id="initial-state-core-config" value="eyJzZXNzaW9uX2xpZmV0aW1lIjoxNDQwLCJzZXNzaW9uX2tlZXBhbGl2ZSI6dHJ1ZSwiYXV0b19sb2dvdXQiOmZhbHNlLCJ2ZXJzaW9uIjoiMjMuMC4yLjEiLCJ2ZXJzaW9uc3RyaW5nIjoiMjMuMC4yIiwiZW5hYmxlX2F2YXRhcnMiOnRydWUsImxvc3RfcGFzc3dvcmRfbGluayI6bnVsbCwibW9kUmV3cml0ZVdvcmtpbmciOmZhbHNlLCJzaGFyaW5nLm1heEF1dG9jb21wbGV0ZVJlc3VsdHMiOjI1LCJzaGFyaW5nLm1pblNlYXJjaFN0cmluZ0xlbmd0aCI6MCwiYmxhY2tsaXN0X2ZpbGVzX3JlZ2V4IjoiXFwuKHBhcnR8ZmlsZXBhcnQpJCJ9"> <input type="hidden" id="initial-state-core-capabilities" value="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
Open service 2a00:f48:2000:affe:fe00::26:80 · www.pornhub.com-official.toboxos.de
2026-01-26 02:50
HTTP/1.1 302 Moved Temporarily Server: openresty Date: Mon, 26 Jan 2026 02:50:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Lima-Id: gasFC6Q5CvmP9pvnWm Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly Location: https://www.youtube.com/watch?v=wSCX9YV7lyQ This website has moved to https://www.youtube.com/watch?v=wSCX9YV7lyQ
Open service 2a00:f48:2000:affe:fe00::26:443 · www.pornhub.com-official.toboxos.de
2026-01-26 02:50
HTTP/1.1 302 Moved Temporarily Server: openresty Date: Mon, 26 Jan 2026 02:50:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Lima-Id: gazsaG4N4yoGbWWLdj Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly Location: https://www.youtube.com/watch?v=wSCX9YV7lyQ This website has moved to https://www.youtube.com/watch?v=wSCX9YV7lyQ
Open service 2a00:f48:2000:affe:fe00::26:443 · robocup2.toboxos.de
2026-01-22 23:04
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 22 Jan 2026 23:04:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Lima-Id: gaNuM1jIvqqhdxt4kY
Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly
accept-ranges: bytes
vary: Accept-Encoding
Content-Security-Policy: upgrade-insecure-requests
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Page title: Vite + Vue
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<link rel="icon" type="image/svg+xml" href="/vite.svg" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>Vite + Vue</title>
<script type="module" crossorigin src="/assets/index-b757d87d.js"></script>
<link rel="stylesheet" href="/assets/index-bb011ef0.css">
</head>
<body>
<div id="app"></div>
<script type="text/javascript">window.setTimeout(function() { document.cookie = "_lcp3=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax" }, 1000);</script></body>
</html>
Open service 2a00:f48:2000:affe:fe00::26:80 · robocup2.toboxos.de
2026-01-22 23:04
HTTP/1.1 301 Moved Permanently Server: openresty Date: Thu, 22 Jan 2026 23:04:59 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Lima-Id: gaT5sS3lGYrUmWflr5 Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly Location: https://robocup2.toboxos.de/ Content-Security-Policy: upgrade-insecure-requests Strict-Transport-Security: max-age=31536000; includeSubDomains; preload This website has moved to https://robocup2.toboxos.de/
Open service 2a00:f48:2000:affe:fe00::26:80 · lummenfelsen.de
2025-12-31 19:51
HTTP/1.1 301 Moved Permanently Server: openresty Date: Wed, 31 Dec 2025 19:51:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Lima-Id: gaayvRJYVJpzkBOPA2 Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly Location: https://lummenfelsen.de/ Content-Security-Policy: upgrade-insecure-requests Strict-Transport-Security: max-age=31536000; includeSubDomains; preload This website has moved to https://lummenfelsen.de/
Open service 2a00:f48:2000:affe:fe00::26:443 · lummenfelsen.de
2025-12-31 19:51
HTTP/1.1 302 Found Server: openresty Date: Wed, 31 Dec 2025 19:51:12 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Lima-Id: gaFkR0CI7LjHxBAAlC Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly x-powered-by: PHP/8.4.11 strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block referrer-policy: no-referrer location: https://www.fotocommunity.de/calendar/Workshop/Helgoland-2026-05-03-68600 Content-Security-Policy: upgrade-insecure-requests
Open service 2a00:f48:2000:affe:fe00::26:443 · gruppe.app
2025-12-23 10:09
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 23 Dec 2025 10:09:47 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Lima-Id: gaMQmGdbH3W0BoOBhT
Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly
x-powered-by: PHP/8.3.23
vary: Accept-Encoding
access-control-allow-origin: *
Content-Security-Policy: upgrade-insecure-requests
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
<!DOCTYPE html>
<html>
<head>
<title></title>
</head>
<body>
<h1>It works!</h1>
<script type="text/javascript">window.setTimeout(function() { document.cookie = "_lcp3=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax" }, 1000);</script></body>
</html>
Open service 2a00:f48:2000:affe:fe00::26:80 · gruppe.app
2025-12-23 10:09
HTTP/1.1 301 Moved Permanently Server: openresty Date: Tue, 23 Dec 2025 10:09:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Lima-Id: gaiBwWvZJQUEYpafa9 Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly Location: https://gruppe.app/ Content-Security-Policy: upgrade-insecure-requests Strict-Transport-Security: max-age=31536000; includeSubDomains; preload This website has moved to https://gruppe.app/
Open service 2a00:f48:2000:affe:fe00::26:443 · nurpuurbio.de
2025-12-23 08:42
HTTP/1.1 200 OK Server: openresty Date: Tue, 23 Dec 2025 08:42:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Lima-Id: gaF6ugU73AePsw6VoM Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly x-powered-by: PHP/8.2.29 x-ua-compatible: IE=edge link: <https://www.nurpuurbio.de/wp-json/>; rel="https://api.w.org/", <https://www.nurpuurbio.de/wp-json/wp/v2/pages/2>; rel="alternate"; title="JSON"; type="application/json", <https://www.nurpuurbio.de/>; rel=shortlink vary: Accept-Encoding Content-Security-Policy: upgrade-insecure-requests Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Open service 2a00:f48:2000:affe:fe00::26:80 · nurpuurbio.de
2025-12-23 08:42
HTTP/1.1 301 Moved Permanently Server: openresty Date: Tue, 23 Dec 2025 08:42:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-Lima-Id: gatiuPL70YZh2hkOHL Set-Cookie: _lcp=a; Path=/; expires=Mon Mar 20 2034 13:02:58; SameSite=Lax; HttpOnly Location: https://nurpuurbio.de/ Content-Security-Policy: upgrade-insecure-requests Strict-Transport-Security: max-age=31536000; includeSubDomains; preload This website has moved to https://nurpuurbio.de/