nginx 1.18.0
tcp/443 tcp/80
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0ff409caf14ba0527170ea6cb970ea6cb9
Found 3 files trough .DS_Store spidering: /assets /css /js
Open service 34.170.178.64:443 · mantenedor-dev3.tsgenviro.com
2026-01-23 05:18
HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 23 Jan 2026 05:18:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rl8r7fptcp33f1afcuir8qc8b5; path=/; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN <script language="javascript">document.location.href='login.php';</script>
Open service 34.170.178.64:443 · mantenedor-dev.tsgenviro.com
2026-01-05 05:15
HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Mon, 05 Jan 2026 05:15:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9vqpnegaqga6diorfpeu0amnf0; path=/; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN <script language="javascript">document.location.href='login.php';</script>
Open service 34.170.178.64:80 · mantenedor-dev.tsgenviro.com
2026-01-05 05:15
HTTP/1.1 301 Moved Permanently Server: nginx/1.18.0 Date: Mon, 05 Jan 2026 05:15:19 GMT Content-Type: text/html Content-Length: 169 Connection: close Location: https://mantenedor-dev.tsgenviro.com/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx/1.18.0</center> </body> </html>
Open service 34.170.178.64:443 · dashboard-dev.tsgenviro.com
2026-01-05 05:15
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Mon, 05 Jan 2026 05:15:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Page title: Login Clientes
<html>
<head>
<title>Login Clientes</title>
<!-- <META http-equiv="refresh" content="0;URL=./login.php"> -->
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no, user-scalable=0">
<script type="text/javascript">
fetch('https://ipinfo.io/json')
.then(response => response.json())
.then(data => {
const country = data.country;
const subdomain = window.location.hostname; // Obtiene el subdominio actual
if (screen.width<800) {
if (country == "BR" || country == "BRA" || country == "BRAZIL" || country == "Brazil") {
window.location.href="https://dashboardm.tsgenviro.com/";
}
else{
window.location.href="https://" + subdomain + "/webmovil/app.php";
}
}
else{
window.location.href="https://" + subdomain + "/login.php";
}
})
.catch(error => {
if (screen.width<800) {
window.location.href="https://" + subdomain + "/webmovil/app.php";
}
else{
window.location.href="https://" + subdomain + "/login.php";
}
});
</script>
</head>
<body bgcolor="#ffffff">
</body>
</html>
Open service 34.170.178.64:80 · dashboard-dev.tsgenviro.com
2026-01-05 05:15
HTTP/1.1 301 Moved Permanently Server: nginx/1.18.0 Date: Mon, 05 Jan 2026 05:15:06 GMT Content-Type: text/html Content-Length: 169 Connection: close Location: https://dashboard-dev.tsgenviro.com/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx/1.18.0</center> </body> </html>