Varnish
tcp/80
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: medium
Fingerprint: 5f32cf5d6962f09c7b6beb587b6beb58c1c940c545da803b05177cededc545b0
Found 57 files trough .DS_Store spidering: /.git /.github /assets /assets/assets /assets/assets/fonts /assets/assets/fonts/gilroy /assets/assets/fonts/jetbrains /assets/assets/images /assets/assets/images/businesstypes /assets/assets/images/car-map.png /assets/assets/images/car-map.svg /assets/assets/images/card_bg.png /assets/assets/images/cook.png /assets/assets/images/courier.png /assets/assets/images/customer-map.png /assets/assets/images/delivery /assets/assets/images/haus.png /assets/assets/images/IMG_2716.jpg /assets/assets/images/izettle-logo.png /assets/assets/images/lieferando.png /assets/assets/images/lieferando_white.png /assets/assets/images/logo /assets/assets/images/logo/2x /assets/assets/images/logo/3x /assets/assets/images/logo/logo.png /assets/assets/images/owner.png /assets/assets/images/phone-order.png /assets/assets/images/plate.png /assets/assets/images/quick.png /assets/assets/images/receipt.svg /assets/assets/images/restaurant.png /assets/assets/images/salad.jpg /assets/assets/images/status /assets/assets/images/sumup-logo.png /assets/assets/images/svg /assets/assets/images/svg/paypal.svg /assets/assets/images/table.png /assets/assets/images/tse.png /assets/assets/images/video_preview.png /assets/assets/images/waiter.png /assets/assets/images/woman.png /assets/assets/sound /assets/assets/sound/delivery /assets/assets/sound/delivery/OneDrive-2023-09-01 /assets/fonts /assets/packages /assets/packages/flex_color_picker /assets/packages/flutter_credit_card /assets/packages/flutter_credit_card/font /assets/packages/flutter_credit_card/icons /assets/packages/flutter_esc_pos_utils /assets/packages/flutter_inappwebview /assets/packages/flutter_payments_stripe_sdk /assets/packages/map_launcher /assets/packages/timezone /canvaskit /icons
Severity: medium
Fingerprint: 5f32cf5d6962f09cef4770e6ef4770e63fc83863aeb3bcd9be2f46c7b852e93d
Found 42 files trough .DS_Store spidering: /.git /.github /assets /assets/assets /assets/assets/fonts /assets/assets/fonts/gilroy /assets/assets/fonts/jetbrains /assets/assets/images /assets/assets/images/businesstypes /assets/assets/images/car-map.png /assets/assets/images/car-map.svg /assets/assets/images/card_bg.png /assets/assets/images/cook.png /assets/assets/images/courier.png /assets/assets/images/customer-map.png /assets/assets/images/delivery /assets/assets/images/haus.png /assets/assets/images/IMG_2716.jpg /assets/assets/images/izettle-logo.png /assets/assets/images/lieferando.png /assets/assets/images/lieferando_white.png /assets/assets/images/logo /assets/assets/images/owner.png /assets/assets/images/phone-order.png /assets/assets/images/plate.png /assets/assets/images/quick.png /assets/assets/images/receipt.svg /assets/assets/images/restaurant.png /assets/assets/images/salad.jpg /assets/assets/images/status /assets/assets/images/sumup-logo.png /assets/assets/images/svg /assets/assets/images/table.png /assets/assets/images/tse.png /assets/assets/images/video_preview.png /assets/assets/images/waiter.png /assets/assets/images/woman.png /assets/assets/sound /assets/fonts /assets/packages /canvaskit /icons
Severity: medium
Fingerprint: 5f32cf5d6962f09c92dfb71592dfb7159851d7eefe9160e85b9ed4b808565917
Found 45 files trough .DS_Store spidering: /.git /.github /assets /assets/assets /assets/assets/fonts /assets/assets/fonts/gilroy /assets/assets/fonts/jetbrains /assets/assets/images /assets/assets/images/businesstypes /assets/assets/images/car-map.png /assets/assets/images/car-map.svg /assets/assets/images/card_bg.png /assets/assets/images/cook.png /assets/assets/images/courier.png /assets/assets/images/customer-map.png /assets/assets/images/delivery /assets/assets/images/haus.png /assets/assets/images/IMG_2716.jpg /assets/assets/images/izettle-logo.png /assets/assets/images/lieferando.png /assets/assets/images/lieferando_white.png /assets/assets/images/logo /assets/assets/images/logo/2x /assets/assets/images/logo/3x /assets/assets/images/logo/logo.png /assets/assets/images/owner.png /assets/assets/images/phone-order.png /assets/assets/images/plate.png /assets/assets/images/quick.png /assets/assets/images/receipt.svg /assets/assets/images/restaurant.png /assets/assets/images/salad.jpg /assets/assets/images/status /assets/assets/images/sumup-logo.png /assets/assets/images/svg /assets/assets/images/table.png /assets/assets/images/tse.png /assets/assets/images/video_preview.png /assets/assets/images/waiter.png /assets/assets/images/woman.png /assets/assets/sound /assets/fonts /assets/packages /canvaskit /icons
Severity: medium
Fingerprint: 5f32cf5d6962f09c93a25c3a93a25c3aacc96c7fc2e5b9cd74d0df3b42511fc4
Found 46 files trough .DS_Store spidering: /.git /.github /assets /assets/assets /assets/assets/fonts /assets/assets/fonts/gilroy /assets/assets/fonts/jetbrains /assets/assets/images /assets/assets/images/businesstypes /assets/assets/images/car-map.png /assets/assets/images/car-map.svg /assets/assets/images/card_bg.png /assets/assets/images/cook.png /assets/assets/images/courier.png /assets/assets/images/customer-map.png /assets/assets/images/delivery /assets/assets/images/haus.png /assets/assets/images/IMG_2716.jpg /assets/assets/images/izettle-logo.png /assets/assets/images/lieferando.png /assets/assets/images/lieferando_white.png /assets/assets/images/logo /assets/assets/images/logo/2x /assets/assets/images/logo/3x /assets/assets/images/logo/logo.png /assets/assets/images/owner.png /assets/assets/images/phone-order.png /assets/assets/images/plate.png /assets/assets/images/quick.png /assets/assets/images/receipt.svg /assets/assets/images/restaurant.png /assets/assets/images/salad.jpg /assets/assets/images/status /assets/assets/images/sumup-logo.png /assets/assets/images/svg /assets/assets/images/svg/paypal.svg /assets/assets/images/table.png /assets/assets/images/tse.png /assets/assets/images/video_preview.png /assets/assets/images/waiter.png /assets/assets/images/woman.png /assets/assets/sound /assets/fonts /assets/packages /canvaskit /icons
Severity: medium
Fingerprint: 5f32cf5d6962f09c114fbe07114fbe07629f81806dd361aa0ff1e8a688c806e4
Found 47 files trough .DS_Store spidering: /.git /.github /assets /assets/assets /assets/assets/fonts /assets/assets/fonts/gilroy /assets/assets/fonts/jetbrains /assets/assets/images /assets/assets/images/businesstypes /assets/assets/images/car-map.png /assets/assets/images/car-map.svg /assets/assets/images/card_bg.png /assets/assets/images/cook.png /assets/assets/images/courier.png /assets/assets/images/customer-map.png /assets/assets/images/delivery /assets/assets/images/haus.png /assets/assets/images/IMG_2716.jpg /assets/assets/images/izettle-logo.png /assets/assets/images/lieferando.png /assets/assets/images/lieferando_white.png /assets/assets/images/logo /assets/assets/images/logo/2x /assets/assets/images/logo/3x /assets/assets/images/logo/logo.png /assets/assets/images/owner.png /assets/assets/images/phone-order.png /assets/assets/images/plate.png /assets/assets/images/quick.png /assets/assets/images/receipt.svg /assets/assets/images/restaurant.png /assets/assets/images/salad.jpg /assets/assets/images/status /assets/assets/images/sumup-logo.png /assets/assets/images/svg /assets/assets/images/svg/paypal.svg /assets/assets/images/table.png /assets/assets/images/tse.png /assets/assets/images/video_preview.png /assets/assets/images/waiter.png /assets/assets/images/woman.png /assets/assets/sound /assets/assets/sound/delivery /assets/fonts /assets/packages /canvaskit /icons
Severity: medium
Fingerprint: 5f32cf5d6962f09c910c508a910c508a86ac5dcfc319d09d0e66bdeb07cecc3f
Found 55 files trough .DS_Store spidering: /.git /.github /assets /assets/assets /assets/assets/fonts /assets/assets/fonts/gilroy /assets/assets/fonts/jetbrains /assets/assets/images /assets/assets/images/businesstypes /assets/assets/images/car-map.png /assets/assets/images/car-map.svg /assets/assets/images/card_bg.png /assets/assets/images/cook.png /assets/assets/images/courier.png /assets/assets/images/customer-map.png /assets/assets/images/delivery /assets/assets/images/haus.png /assets/assets/images/IMG_2716.jpg /assets/assets/images/izettle-logo.png /assets/assets/images/lieferando.png /assets/assets/images/lieferando_white.png /assets/assets/images/logo /assets/assets/images/logo/2x /assets/assets/images/logo/3x /assets/assets/images/logo/logo.png /assets/assets/images/owner.png /assets/assets/images/phone-order.png /assets/assets/images/plate.png /assets/assets/images/quick.png /assets/assets/images/receipt.svg /assets/assets/images/restaurant.png /assets/assets/images/salad.jpg /assets/assets/images/status /assets/assets/images/sumup-logo.png /assets/assets/images/svg /assets/assets/images/svg/paypal.svg /assets/assets/images/table.png /assets/assets/images/tse.png /assets/assets/images/video_preview.png /assets/assets/images/waiter.png /assets/assets/images/woman.png /assets/assets/sound /assets/assets/sound/delivery /assets/assets/sound/delivery/OneDrive-2023-09-01 /assets/fonts /assets/packages /assets/packages/flex_color_picker /assets/packages/flutter_credit_card /assets/packages/flutter_esc_pos_utils /assets/packages/flutter_inappwebview /assets/packages/flutter_payments_stripe_sdk /assets/packages/map_launcher /assets/packages/timezone /canvaskit /icons
Severity: medium
Fingerprint: 5f32cf5d6962f09cecc85b04ecc85b04ef23a1f947327157222cd4d9dda05ce1
Found 53 files trough .DS_Store spidering: /.git /.github /assets /assets/assets /assets/assets/fonts /assets/assets/images /assets/assets/images/businesstypes /assets/assets/images/car-map.png /assets/assets/images/car-map.svg /assets/assets/images/card_bg.png /assets/assets/images/cook.png /assets/assets/images/courier.png /assets/assets/images/customer-map.png /assets/assets/images/delivery /assets/assets/images/haus.png /assets/assets/images/IMG_2716.jpg /assets/assets/images/izettle-logo.png /assets/assets/images/lieferando.png /assets/assets/images/lieferando_white.png /assets/assets/images/logo /assets/assets/images/logo/2x /assets/assets/images/logo/3x /assets/assets/images/logo/logo.png /assets/assets/images/owner.png /assets/assets/images/phone-order.png /assets/assets/images/plate.png /assets/assets/images/quick.png /assets/assets/images/receipt.svg /assets/assets/images/restaurant.png /assets/assets/images/salad.jpg /assets/assets/images/status /assets/assets/images/sumup-logo.png /assets/assets/images/svg /assets/assets/images/svg/paypal.svg /assets/assets/images/table.png /assets/assets/images/tse.png /assets/assets/images/video_preview.png /assets/assets/images/waiter.png /assets/assets/images/woman.png /assets/assets/sound /assets/assets/sound/delivery /assets/assets/sound/delivery/OneDrive-2023-09-01 /assets/fonts /assets/packages /assets/packages/flex_color_picker /assets/packages/flutter_credit_card /assets/packages/flutter_esc_pos_utils /assets/packages/flutter_inappwebview /assets/packages/flutter_payments_stripe_sdk /assets/packages/map_launcher /assets/packages/timezone /canvaskit /icons
Severity: low
Fingerprint: 5f32cf5d6962f09c7cf176427cf17642b9618ce7e0ea9e35e0ea9e35e0ea9e35
Found 2 files trough .DS_Store spidering: /.git /.github
Severity: low
Fingerprint: 5f32cf5d6962f09c11d3744d11d3744d9930cc4639ff91e08a7d6e70d396a408
Found 12 files trough .DS_Store spidering: /.git /.github /assets /canvaskit /favicon.png /flutter.js /flutter_service_worker.js /icons /index.html /main.dart.js /manifest.json /version.json
Open service 2620:0:890::100:80 · app.orderstracker.com
2026-01-02 17:35
HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://app.orderstracker.com/ Accept-Ranges: bytes Date: Fri, 02 Jan 2026 17:35:29 GMT X-Served-By: cache-sin-wsss1830025-SIN X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1767375329.139598,VS0,VE0 alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Open service 199.36.158.100:443 · app.orderstracker.com
2026-01-02 17:35
HTTP/1.1 200 OK
Connection: close
Content-Length: 3404
Cache-Control: max-age=3600
Content-Type: text/html; charset=utf-8
Cross-Origin-Embedder-Policy: credentialless
Cross-Origin-Opener-Policy: same-origin
Etag: "b623e894ef6b91c7e4736e06e52b2cac7766e8841ac79bfcc50dc7f99390da46"
Last-Modified: Fri, 03 Oct 2025 12:28:29 GMT
Strict-Transport-Security: max-age=31556926
Accept-Ranges: bytes
Date: Fri, 02 Jan 2026 17:35:29 GMT
X-Served-By: cache-lga21942-LGA
X-Cache: HIT
X-Cache-Hits: 2
X-Timer: S1767375329.012379,VS0,VE0
Vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Page title: OrdersTracker
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta content="IE=Edge" http-equiv="X-UA-Compatible">
<meta name="description" content="OrdersTracker Das ideale Kassensystem für Ihr Unternehmen">
<!-- iOS meta tags & icons -->
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="black">
<meta name="apple-mobile-web-app-title" content="OrdersTracker">
<meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" name="viewport">
<link rel="apple-touch-icon" href="icons/Icon-192.png">
<!-- Favicon -->
<link rel="shortcut icon" type="image/png" href="favicon.png">
<title>OrdersTracker</title>
<link rel="manifest" href="manifest.json">
<style id="splash-screen-style">
html {
height: 100%
}
body {
margin: 0;
min-height: 100%;
background-color: #ffffff;
background-size: 100% 100%;
}
.center {
margin: 0;
position: absolute;
top: 50%;
left: 50%;
-ms-transform: translate(-50%, -50%);
transform: translate(-50%, -50%);
}
.contain {
display: block;
width: 100%;
height: 100%;
object-fit: contain;
}
.stretch {
display: block;
width: 100%;
height: 100%;
}
.cover {
display: block;
width: 100%;
height: 100%;
object-fit: cover;
}
.bottom {
position: absolute;
bottom: 0;
left: 50%;
-ms-transform: translate(-50%, 0);
transform: translate(-50%, 0);
}
.bottomLeft {
position: absolute;
bottom: 0;
left: 0;
}
.bottomRight {
position: absolute;
bottom: 0;
right: 0;
}
</style>
<script id="splash-screen-script">
function removeSplashFromWeb() {
document.getElementById("splash")?.remove();
document.getElementById("splash-branding")?.remove();
document.body.style.background = "transparent";
}
</script>
</head>
<body>
<picture id="splash">
<source
srcset="splash/img/light-1x.png 1x, splash/img/light-2x.png 2x, splash/img/light-3x.png 3x, splash/img/light-4x.png 4x"
media="(prefers-color-scheme: light)">
<source
srcset="splash/img/dark-1x.png 1x, splash/img/dark-2x.png 2x, splash/img/dark-3x.png 3x, splash/img/dark-4x.png 4x"
media="(prefers-color-scheme: dark)">
<img class="center" aria-hidden="true" src="splash/img/light-1x.png" alt="">
</picture>
<script src="https://cdn.jsdelivr.net/npm/pdfjs-dist@2.12.313/build/pdf.js" type="text/javascript"></script>
<script type="text/javascript">
pdfjsLib.GlobalWorkerOptions.workerSrc = "https://cdn.jsdelivr.net/npm/pdfjs-dist@2.12.313/build/pdf.worker.min.js";
pdfRenderOptions = {
cMapUrl: 'https://cdn.jsdelivr.net/npm/pdfjs-dist@2.12.313/cmaps/',
cMapPacked: true,
}
</script>
<script>
if ('serviceWorker' in navigator) {
window.addEventListener('load', function () {
navigator.serviceWorker.register('flutter_service_worker.js?v=2.2.6.196');
});
}
</script>
<script type="application/javascript" src="/assets/packages/flutter_charset_detector_web/assets/web/jschardet.min.js"
defer=""></script>
<script src="main.dart.js?v=2.2.6.196" type="application/javascript"></script>
</body>
</html>
Open service 2620:0:890::100:443 · app.orderstracker.com
2026-01-02 17:35
HTTP/1.1 200 OK
Connection: close
Content-Length: 3404
Cache-Control: max-age=3600
Content-Type: text/html; charset=utf-8
Cross-Origin-Embedder-Policy: credentialless
Cross-Origin-Opener-Policy: same-origin
Etag: "b623e894ef6b91c7e4736e06e52b2cac7766e8841ac79bfcc50dc7f99390da46"
Last-Modified: Fri, 03 Oct 2025 12:28:29 GMT
Strict-Transport-Security: max-age=31556926
Accept-Ranges: bytes
Date: Fri, 02 Jan 2026 17:35:28 GMT
X-Served-By: cache-lga21939-LGA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1767375329.939120,VS0,VE1
Vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Page title: OrdersTracker
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta content="IE=Edge" http-equiv="X-UA-Compatible">
<meta name="description" content="OrdersTracker Das ideale Kassensystem für Ihr Unternehmen">
<!-- iOS meta tags & icons -->
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="black">
<meta name="apple-mobile-web-app-title" content="OrdersTracker">
<meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" name="viewport">
<link rel="apple-touch-icon" href="icons/Icon-192.png">
<!-- Favicon -->
<link rel="shortcut icon" type="image/png" href="favicon.png">
<title>OrdersTracker</title>
<link rel="manifest" href="manifest.json">
<style id="splash-screen-style">
html {
height: 100%
}
body {
margin: 0;
min-height: 100%;
background-color: #ffffff;
background-size: 100% 100%;
}
.center {
margin: 0;
position: absolute;
top: 50%;
left: 50%;
-ms-transform: translate(-50%, -50%);
transform: translate(-50%, -50%);
}
.contain {
display: block;
width: 100%;
height: 100%;
object-fit: contain;
}
.stretch {
display: block;
width: 100%;
height: 100%;
}
.cover {
display: block;
width: 100%;
height: 100%;
object-fit: cover;
}
.bottom {
position: absolute;
bottom: 0;
left: 50%;
-ms-transform: translate(-50%, 0);
transform: translate(-50%, 0);
}
.bottomLeft {
position: absolute;
bottom: 0;
left: 0;
}
.bottomRight {
position: absolute;
bottom: 0;
right: 0;
}
</style>
<script id="splash-screen-script">
function removeSplashFromWeb() {
document.getElementById("splash")?.remove();
document.getElementById("splash-branding")?.remove();
document.body.style.background = "transparent";
}
</script>
</head>
<body>
<picture id="splash">
<source
srcset="splash/img/light-1x.png 1x, splash/img/light-2x.png 2x, splash/img/light-3x.png 3x, splash/img/light-4x.png 4x"
media="(prefers-color-scheme: light)">
<source
srcset="splash/img/dark-1x.png 1x, splash/img/dark-2x.png 2x, splash/img/dark-3x.png 3x, splash/img/dark-4x.png 4x"
media="(prefers-color-scheme: dark)">
<img class="center" aria-hidden="true" src="splash/img/light-1x.png" alt="">
</picture>
<script src="https://cdn.jsdelivr.net/npm/pdfjs-dist@2.12.313/build/pdf.js" type="text/javascript"></script>
<script type="text/javascript">
pdfjsLib.GlobalWorkerOptions.workerSrc = "https://cdn.jsdelivr.net/npm/pdfjs-dist@2.12.313/build/pdf.worker.min.js";
pdfRenderOptions = {
cMapUrl: 'https://cdn.jsdelivr.net/npm/pdfjs-dist@2.12.313/cmaps/',
cMapPacked: true,
}
</script>
<script>
if ('serviceWorker' in navigator) {
window.addEventListener('load', function () {
navigator.serviceWorker.register('flutter_service_worker.js?v=2.2.6.196');
});
}
</script>
<script type="application/javascript" src="/assets/packages/flutter_charset_detector_web/assets/web/jschardet.min.js"
defer=""></script>
<script src="main.dart.js?v=2.2.6.196" type="application/javascript"></script>
</body>
</html>
Open service 199.36.158.100:80 · app.orderstracker.com
2026-01-02 17:35
HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://app.orderstracker.com/ Accept-Ranges: bytes Date: Fri, 02 Jan 2026 17:35:28 GMT X-Served-By: cache-pao-kpao1770058-PAO X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1767375329.890098,VS0,VE0 alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400