.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: medium
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b70033d2390d12a3f4d3b8fe6213dae0dc
Found 128 files trough .DS_Store spidering: /assets /basewhite.php /consultaralarma.php /consultaralarma_forecast.php /consultarcliente.php /consultarcomunidad.php /consultardashboard.php /consultarequipo.php /consultarplanta.php /consultarregla.php /consultarreglacloud.php /consultarreglas_factorizacion.php /consultarubicacion.php /consultarusuariodashboard.php /css /css/styles.css /dashboard-control.php /dashboard-grafico.php /dashboard-grafico_old.php /dashboard_control_monitoreo.php /datalink /datalink/datalink.php /datalink/logs_alarmas.php /datalink/logs_dashboard.php /datalink/logs_dashboard_post.php /dataset /dataset/config.php /dataset/datalink.php /dataset/errorlog.php /dataset/purple.php /dataview /descarga_app.php /dm_calculo_producto.php /dm_calculo_producto2.php /dm_clientes.php /dm_datos.php /dm_graficador.php /dm_graficador_post_chartjs.php /dm_graficador_post_hc.php /errorlogs.php /ext_last_activity.php /ext_last_mejoras.php /ext_last_mejoras2.php /ext_last_users.php /footer.php /graficar_feeds.php /idiomas.php /index.php /informes.php /insertaralarma.php /insertaralarma_forecast.php /insertarcliente.php /insertarcomunidad.php /insertardashboard.php /insertarequipo.php /insertarfactorizacion.php /insertarfeed.php /insertarfeed_consulta.php /insertarformula-sf.php /insertarformula-sf_consulta.php /insertarformula-ssw.php /insertarformula-ssw_consulta.php /insertarformula.php /insertarformula_consulta.php /insertarmejora.php /insertarplanta.php /insertarregla.php /insertarreglacloud.php /insertarreglas_factorizacion.php /insertarsensor.php /insertarubicacion.php /insertarumbrales.php /insertarumbrales_consulta.php /insertarumbralesppl.php /insertarumbralesppl_consulta.php /insertarumbralessf.php /insertarumbralessf_consulta.php /insertarusuario.php /insertarusuariodashboard.php /js /light_dark.php /list-alertas.php /list-usuarios.php /list_sensores.php /login-old.php /login-utils /login.php /login_old.php /loginm.php /logout.php /logs.php /logs_reglas_ssw.php /logusuariodashboard.php /manifest.json /mantenedor2 /mantenedor2/consultarformula.php /mantenedor2/consultarplanta.php /mantenedor2/consultarregla.php /mantenedor2/consultarreglacloud.php /mantenedor2/consultarubicacion.php /mantenedor2/consultausuariodashboard.php /mantenedor2/css /mantenedor2/dashboard-grafico.php /mantenedor2/dashboardcontrol.php /mantenedor2/datalink /mantenedor2/dataset /mantenedor2/dataview /mantenedor2/errorlogs.php /mantenedor2/fonts /mantenedor2/graficar_feeds.php /mantenedor2/idiomas.php /mantenedor2/img /mantenedor2/index.php /mantenedor2/informes.php /mantenedor2/insertaralarma.php /mantenedor2/insertaralarma_forecast.php /mantenedor2/insertarcliente.php /mantenedor2/insertarcomunidad.php /mantenedor2/insertardashboard.php /mantenedor2/insertarequipo.php /mantenedor2/insertarfeed.php /mantenedor2/insertarformula-sf.php /mantenedor2/insertarformula-ssw.php /mantenedor2/insertarformula.php /mantenedor2/insertarplanta.php /mantenedor2/insertarregla.php /mantenedor2/insertarreglacloud.php /mantenedor2/insertarreglas_factorizacion.php
Open service 34.102.151.216:80 · mantenedor.tsgenviro.com
2026-01-26 07:56
HTTP/1.1 301 Moved Permanently Cache-Control: private Location: https://mantenedor.tsgenviro.com:443/ Content-Length: 0 Date: Mon, 26 Jan 2026 07:56:30 GMT Content-Type: text/html; charset=UTF-8 Connection: close
Open service 34.102.151.216:443 · mantenedor.tsgenviro.com
2026-01-26 07:56
HTTP/1.1 200 OK set-cookie: PHPSESSID=mc05so05raii5hehcphfk1es4p; path=/; HttpOnly expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache strict-transport-security: max-age=31536000; includeSubDomains x-frame-options: SAMEORIGIN vary: Accept-Encoding content-type: text/html; charset=UTF-8 x-cloud-trace-context: 46e2cfa83d20eea68df2a38137573978 date: Mon, 26 Jan 2026 07:56:01 GMT server: Google Frontend Content-Length: 74 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close <script language="javascript">document.location.href='login.php';</script>
Open service 34.102.151.216:443 · dashboard8.tsgenviro.com
2026-01-24 12:26
HTTP/1.1 200 OK
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
x-cloud-trace-context: 6d63e62734b1ae99514bfba4ba1e5a2e
date: Sat, 24 Jan 2026 12:26:48 GMT
server: Google Frontend
Content-Length: 1365
via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Connection: close
Page title: Login Clientes
<html>
<head>
<title>Login Clientes</title>
<!-- <META http-equiv="refresh" content="0;URL=./login.php"> -->
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no, user-scalable=0">
<script type="text/javascript">
fetch('https://ipinfo.io/json')
.then(response => response.json())
.then(data => {
const country = data.country;
const subdomain = window.location.hostname; // Obtiene el subdominio actual
if (screen.width<800) {
if (country == "BR" || country == "BRA" || country == "BRAZIL" || country == "Brazil") {
window.location.href="https://dashboardm.tsgenviro.com/";
}
else{
window.location.href="https://" + subdomain + "/webmovil/app.php";
}
}
else{
window.location.href="https://" + subdomain + "/login.php";
}
})
.catch(error => {
if (screen.width<800) {
window.location.href="https://" + subdomain + "/webmovil/app.php";
}
else{
window.location.href="https://" + subdomain + "/login.php";
}
});
</script>
</head>
<body bgcolor="#ffffff">
</body>
</html>
Open service 34.102.151.216:80 · dashboard8.tsgenviro.com
2026-01-24 12:26
HTTP/1.1 301 Moved Permanently Cache-Control: private Location: https://dashboard8.tsgenviro.com:443/ Content-Length: 0 Date: Sat, 24 Jan 2026 12:27:17 GMT Content-Type: text/html; charset=UTF-8 Connection: close
Open service 34.102.151.216:80 · api-client.tsgenviro.com
2026-01-10 11:10
HTTP/1.1 301 Moved Permanently Cache-Control: private Location: https://api-client.tsgenviro.com:443/ Content-Length: 0 Date: Sat, 10 Jan 2026 11:11:48 GMT Content-Type: text/html; charset=UTF-8 Connection: close
Open service 34.102.151.216:443 · api-client.tsgenviro.com
2026-01-10 11:10
HTTP/1.1 405 Method Not Allowed content-type: text/html; charset=utf-8 allow: OPTIONS, POST access-control-allow-origin: * x-cloud-trace-context: c021b9ebe4ab94b9cfe77715fdefb5d9 date: Sat, 10 Jan 2026 11:10:50 GMT server: Google Frontend Content-Length: 153 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Page title: 405 Method Not Allowed <!doctype html> <html lang=en> <title>405 Method Not Allowed</title> <h1>Method Not Allowed</h1> <p>The method is not allowed for the requested URL.</p>