LeakIX - Host app.travstack.com

Domain app.travstack.com

United States

GOOGLE

Debian

Software information

Apache Apache 2.4.54

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 142.251.141.115
Domain: app.travstack.com
Port: 443
URL: https://app.travstack.com

First seen 2025-08-28 15:15
Last seen 2026-01-02 23:24
Open for 127 days

Severity: medium
Fingerprint: 5f32cf5d6962f09c4eb8c9f24eb8c9f27c0e4d974f8f2269b8ea9f1ff37eb9d8

Found 114 files trough .DS_Store spidering:

/.git
/.idea
/common
/common/db
/common/libs
/deploy
/deployconfig.php
/dockerfile-apache
/dockerfile-fpm
/dockerfile-nginx
/dump.txt
/README.md
/server_conf
/test
/V2
/V2/admin
/V2/app
/V2/appointments
/V2/archives
/V2/blogger
/V2/blogs
/V2/campaigns
/V2/create-free-blog.php
/V2/create-list.php
/V2/create-photoblog.php
/V2/css
/V2/dashboard.php
/V2/data
/V2/dev
/V2/dev/email
/V2/dev/old
/V2/dev/quotation
/V2/dev/tests
/V2/dev/wikimedia
/V2/emails
/V2/extranet
/V2/fonts
/V2/forcelogout.php
/V2/generators
/V2/getting-started
/V2/images
/V2/includes
/V2/includes/modules
/V2/includes/templates
/V2/index.php
/V2/insights
/V2/integrations
/V2/itineraries
/V2/js
/V2/js/libs
/V2/js/modules
/V2/js/sounds
/V2/js/tinymce
/V2/libs
/V2/libs/admin
/V2/libs/fullcalendar
/V2/libs/popper
/V2/libs/stepprogress
/V2/libs/tooltip
/V2/logout.php
/V2/manage
/V2/manage-vendors.php
/V2/managepassword.php
/V2/managevideos.php
/V2/mins
/V2/modules
/V2/operations
/V2/page.php
/V2/process-category.php
/V2/processitinerary.php
/V2/products
/V2/rates
/V2/reports
/V2/rpc
/V2/rpc/archive
/V2/rpc/brpc.php
/V2/rpc/fbrpc.php
/V2/rpc/graphrpc.php
/V2/rpc/icommon.php
/V2/rpc/imongoclient.php
/V2/rpc/index.php
/V2/rpc/irpc.php
/V2/rpc/preview.php
/V2/rpc/proxyrpc.php
/V2/rpc/rakuten.php
/V2/rpc/thirdrpc.php
/V2/staff
/V2/third-party
/V2/trips
/V2/ts
/V2/user
/V2/V3
/V2/vendor
/V2/vendordashboard.php
/vendor
/vendor/autoload.php
/vendor/composer
/vendor/mongodb
/vendor/stripe
/vendor/stripe/build.php
/vendor/stripe/CHANGELOG.md
/vendor/stripe/CODE_OF_CONDUCT.md
/vendor/stripe/composer.json
/vendor/stripe/data
/vendor/stripe/init.php
/vendor/stripe/lib
/vendor/stripe/LICENSE
/vendor/stripe/Makefile
/vendor/stripe/phpdoc.dist.xml
/vendor/stripe/phpstan-baseline.neon
/vendor/stripe/phpstan.neon.dist
/vendor/stripe/README.md
/vendor/stripe/update_certs.php
/vendor/stripe/VERSION

Found on 2026-01-02 23:24

Severity: medium
Fingerprint: 5f32cf5d6962f09cfb7dc6fdfb7dc6fdf4715436b469ddc88497c9ec274ae0e3

Found 74 files trough .DS_Store spidering:

/.git
/.idea
/common
/common/db
/common/libs
/deploy
/deployconfig.php
/dockerfile-apache
/dockerfile-fpm
/dockerfile-nginx
/dump.txt
/README.md
/server_conf
/test
/V2
/V2/admin
/V2/app
/V2/appointments
/V2/archives
/V2/blogger
/V2/blogs
/V2/campaigns
/V2/create-free-blog.php
/V2/create-list.php
/V2/create-photoblog.php
/V2/css
/V2/dashboard.php
/V2/data
/V2/dev
/V2/dev/email
/V2/dev/old
/V2/dev/quotation
/V2/dev/tests
/V2/dev/wikimedia
/V2/emails
/V2/extranet
/V2/fonts
/V2/forcelogout.php
/V2/generators
/V2/getting-started
/V2/images
/V2/includes
/V2/includes/modules
/V2/includes/templates
/V2/index.php
/V2/insights
/V2/integrations
/V2/itineraries
/V2/js
/V2/libs
/V2/logout.php
/V2/manage
/V2/manage-vendors.php
/V2/managepassword.php
/V2/managevideos.php
/V2/mins
/V2/modules
/V2/operations
/V2/page.php
/V2/process-category.php
/V2/processitinerary.php
/V2/products
/V2/rates
/V2/reports
/V2/rpc
/V2/staff
/V2/third-party
/V2/trips
/V2/ts
/V2/user
/V2/V3
/V2/vendor
/V2/vendordashboard.php
/vendor

Found on 2025-12-27 07:58

Severity: medium
Fingerprint: 5f32cf5d6962f09ce95adb67e95adb67ec80ec60bd31456a6ca4f8b6df520e7e

Found 83 files trough .DS_Store spidering:

/.git
/.idea
/common
/common/db
/common/libs
/deploy
/deployconfig.php
/dockerfile-apache
/dockerfile-fpm
/dockerfile-nginx
/dump.txt
/README.md
/server_conf
/test
/V2
/V2/admin
/V2/app
/V2/appointments
/V2/archives
/V2/blogger
/V2/blogs
/V2/campaigns
/V2/create-free-blog.php
/V2/create-list.php
/V2/create-photoblog.php
/V2/css
/V2/dashboard.php
/V2/data
/V2/dev
/V2/dev/email
/V2/dev/old
/V2/dev/quotation
/V2/dev/tests
/V2/dev/wikimedia
/V2/emails
/V2/extranet
/V2/fonts
/V2/forcelogout.php
/V2/generators
/V2/getting-started
/V2/images
/V2/includes
/V2/includes/modules
/V2/includes/templates
/V2/index.php
/V2/insights
/V2/integrations
/V2/itineraries
/V2/js
/V2/js/libs
/V2/js/modules
/V2/js/sounds
/V2/js/tinymce
/V2/libs
/V2/libs/admin
/V2/libs/fullcalendar
/V2/libs/popper
/V2/libs/stepprogress
/V2/libs/tooltip
/V2/logout.php
/V2/manage
/V2/manage-vendors.php
/V2/managepassword.php
/V2/managevideos.php
/V2/mins
/V2/modules
/V2/operations
/V2/page.php
/V2/process-category.php
/V2/processitinerary.php
/V2/products
/V2/rates
/V2/reports
/V2/rpc
/V2/staff
/V2/third-party
/V2/trips
/V2/ts
/V2/user
/V2/V3
/V2/vendor
/V2/vendordashboard.php
/vendor

Found on 2025-12-21 12:36

Severity: medium
Fingerprint: 5f32cf5d6962f09c20f30ab920f30ab9b7136b4a9b44a0cc9c06acb8fbcccac5

Found 67 files trough .DS_Store spidering:

/.git
/.idea
/common
/common/db
/common/libs
/deploy
/deployconfig.php
/dockerfile-apache
/dockerfile-fpm
/dockerfile-nginx
/dump.txt
/README.md
/server_conf
/test
/V2
/V2/admin
/V2/app
/V2/appointments
/V2/archives
/V2/blogger
/V2/blogs
/V2/campaigns
/V2/create-free-blog.php
/V2/create-list.php
/V2/create-photoblog.php
/V2/css
/V2/dashboard.php
/V2/data
/V2/dev
/V2/emails
/V2/extranet
/V2/fonts
/V2/forcelogout.php
/V2/generators
/V2/getting-started
/V2/images
/V2/includes
/V2/index.php
/V2/insights
/V2/integrations
/V2/itineraries
/V2/js
/V2/libs
/V2/logout.php
/V2/manage
/V2/manage-vendors.php
/V2/managepassword.php
/V2/managevideos.php
/V2/mins
/V2/modules
/V2/operations
/V2/page.php
/V2/process-category.php
/V2/processitinerary.php
/V2/products
/V2/rates
/V2/reports
/V2/rpc
/V2/staff
/V2/third-party
/V2/trips
/V2/ts
/V2/user
/V2/V3
/V2/vendor
/V2/vendordashboard.php
/vendor

Found on 2025-11-09 21:43

Severity: low
Fingerprint: 5f32cf5d6962f09c47dfe71947dfe719155d132ac3b8642c24efc618c4790ad6

Found 16 files trough .DS_Store spidering:

/.git
/.idea
/common
/common/db
/common/libs
/deploy
/deployconfig.php
/dockerfile-apache
/dockerfile-fpm
/dockerfile-nginx
/dump.txt
/README.md
/server_conf
/test
/V2
/vendor

Found on 2025-09-26 13:20

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.217.16.211
Domain: app.travstack.com
Port: 80
URL: http://app.travstack.com

First seen 2025-08-28 15:15
Last seen 2025-10-27 14:05
Open for 59 days

Severity: medium
Fingerprint: 5f32cf5d6962f09cee671e0bee671e0b8a2ee52c1b2597a654f6ceaa47b48bb3

Found 72 files trough .DS_Store spidering:

/.git
/.idea
/common
/common/db
/common/libs
/deploy
/deployconfig.php
/dockerfile-apache
/dockerfile-fpm
/dockerfile-nginx
/dump.txt
/README.md
/server_conf
/test
/V2
/V2/admin
/V2/app
/V2/appointments
/V2/archives
/V2/blogger
/V2/blogs
/V2/campaigns
/V2/create-free-blog.php
/V2/create-list.php
/V2/create-photoblog.php
/V2/css
/V2/dashboard.php
/V2/data
/V2/dev
/V2/dev/email
/V2/dev/old
/V2/dev/quotation
/V2/dev/tests
/V2/dev/wikimedia
/V2/emails
/V2/extranet
/V2/fonts
/V2/forcelogout.php
/V2/generators
/V2/getting-started
/V2/images
/V2/includes
/V2/index.php
/V2/insights
/V2/integrations
/V2/itineraries
/V2/js
/V2/libs
/V2/logout.php
/V2/manage
/V2/manage-vendors.php
/V2/managepassword.php
/V2/managevideos.php
/V2/mins
/V2/modules
/V2/operations
/V2/page.php
/V2/process-category.php
/V2/processitinerary.php
/V2/products
/V2/rates
/V2/reports
/V2/rpc
/V2/staff
/V2/third-party
/V2/trips
/V2/ts
/V2/user
/V2/V3
/V2/vendor
/V2/vendordashboard.php
/vendor

Found on 2025-10-27 14:05

Severity: medium
Fingerprint: 5f32cf5d6962f09c20f30ab920f30ab9b7136b4a9b44a0cc9c06acb8fbcccac5

Found 67 files trough .DS_Store spidering:

/.git
/.idea
/common
/common/db
/common/libs
/deploy
/deployconfig.php
/dockerfile-apache
/dockerfile-fpm
/dockerfile-nginx
/dump.txt
/README.md
/server_conf
/test
/V2
/V2/admin
/V2/app
/V2/appointments
/V2/archives
/V2/blogger
/V2/blogs
/V2/campaigns
/V2/create-free-blog.php
/V2/create-list.php
/V2/create-photoblog.php
/V2/css
/V2/dashboard.php
/V2/data
/V2/dev
/V2/emails
/V2/extranet
/V2/fonts
/V2/forcelogout.php
/V2/generators
/V2/getting-started
/V2/images
/V2/includes
/V2/index.php
/V2/insights
/V2/integrations
/V2/itineraries
/V2/js
/V2/libs
/V2/logout.php
/V2/manage
/V2/manage-vendors.php
/V2/managepassword.php
/V2/managevideos.php
/V2/mins
/V2/modules
/V2/operations
/V2/page.php
/V2/process-category.php
/V2/processitinerary.php
/V2/products
/V2/rates
/V2/reports
/V2/rpc
/V2/staff
/V2/third-party
/V2/trips
/V2/ts
/V2/user
/V2/V3
/V2/vendor
/V2/vendordashboard.php
/vendor

Found on 2025-10-19 11:14

Create report

Open service 142.251.141.115:443 · app.travstack.com

2026-01-10 02:23

HTTP/1.1 200 OK
Date: Sat, 10 Jan 2026 02:23:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
Server: Apache/2.4.54 (Debian)
X-Powered-By: PHP/7.4.33
Set-Cookie: PHPSESSID=6452c314f71a3a81e03a56f78713ece1; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Via: 1.1 google
Connection: close

Found 2 days ago by HttpPlugin

Create report

Open service 142.251.141.115:443 · app.travstack.com

2026-01-02 23:24

HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 23:24:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
Server: Apache/2.4.54 (Debian)
X-Powered-By: PHP/7.4.33
Set-Cookie: PHPSESSID=7873d43e307e93fa82b5928b1932c52f; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Via: 1.1 google
Connection: close

Found 2026-01-02 by HttpPlugin

Create report

Open service 142.251.141.115:443 · app.travstack.com

2025-12-23 10:02

HTTP/1.1 200 OK
Date: Tue, 23 Dec 2025 10:02:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
Server: Apache/2.4.54 (Debian)
X-Powered-By: PHP/7.4.33
Set-Cookie: PHPSESSID=fcf0e8998675727cf06a5d20fbd802ff; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Via: 1.1 google
Connection: close

Found 2025-12-23 by HttpPlugin

Create report

Open service 142.251.141.115:443 · app.travstack.com

2025-12-21 12:36

HTTP/1.1 200 OK
Date: Sun, 21 Dec 2025 12:36:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
Server: Apache/2.4.54 (Debian)
X-Powered-By: PHP/7.4.33
Set-Cookie: PHPSESSID=8008285f4407fff1dd275809db206315; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Via: 1.1 google
Connection: close

Found 2025-12-21 by HttpPlugin

Create report

Open service 2a00:1450:4001:807::2013:443 · app.travstack.com

2025-12-21 12:36

HTTP/1.1 200 OK
Date: Sun, 21 Dec 2025 12:36:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
Server: Apache/2.4.54 (Debian)
X-Powered-By: PHP/7.4.33
Set-Cookie: PHPSESSID=2736c48539be0e3181e68b9036ab239d; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Via: 1.1 google
Connection: close

Found 2025-12-21 by HttpPlugin

Create report

Open service 2a00:1450:4001:807::2013:80 · app.travstack.com

2025-12-21 12:36

HTTP/1.1 200 OK
Date: Sun, 21 Dec 2025 12:36:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
Server: Apache/2.4.54 (Debian)
X-Powered-By: PHP/7.4.33
Set-Cookie: PHPSESSID=b76bfab5d1abbad7c764b58c04d9f3de; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Via: 1.1 google
Connection: close

Found 2025-12-21 by HttpPlugin

Create report

app.travstack.com

Fingerprint:

f6d236864c4f81a31c0c01a6ee42337f007273237983292318068e34aeac373b

CN:

app.travstack.com

Key:

RSA-2048

Issuer:

WR3

Not before:

2025-12-21 11:36

Not after:

2026-03-21 12:26

app.travstack.com

Fingerprint:

48de09ea968ce38381542c8f70ee9193c87fdacb149f035332b503fb90f77c9d

CN:

app.travstack.com

Key:

RSA-2048

Issuer:

WR3

Not before:

2025-10-27 13:03

Not after:

2026-01-25 13:52

Domain summary

app.travstack.com 12

1 recorded

IP summary

142.251.141.115 2 2a00:1450:4001:807::2013 1 172.217.16.211 1

3 recorded