LeakIX - Host cardshow.app

Domain cardshow.app

United States

AMAZON-02

Software information

Vercel

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 216.150.1.1
Domain: cardshow.app
Port: 443
URL: https://cardshow.app

First seen 2025-11-03 12:22
Last seen 2026-01-02 23:42
Open for 60 days

Severity: low
Fingerprint: 5f32cf5d6962f09c3af247253af247259b6c8633cfaa4b28fe840f17525f04ef

Found 9 files trough .DS_Store spidering:

/assets
/basis
/data
/extracted-cards
/extracted-cards/extracted_cards
/images
/lab-screenshots
/sfx
/workers

Found on 2026-01-02 23:42

Severity: low
Fingerprint: 5f32cf5d6962f09cf35cbfb3f35cbfb3e5971d05a62b3aac4512dae32c880878

Found 29 files trough .DS_Store spidering:

/assets
/assets/3denv
/assets/avatars
/assets/backgrounds
/assets/banners
/assets/baseboy
/assets/frames
/assets/images
/assets/images/banners
/assets/images/cards
/assets/images/characters
/assets/images/environments
/assets/images/icons
/assets/images/logos
/assets/images/misc
/assets/images/screenshots
/assets/logos
/assets/og
/assets/pfps
/assets/placeholders
/assets/sample-cards
/basis
/data
/extracted-cards
/extracted-cards/extracted_cards
/images
/lab-screenshots
/sfx
/workers

Found on 2025-12-27 07:51

Severity: low
Fingerprint: 5f32cf5d6962f09c31c2f0b631c2f0b6ccb09992ef4680f5a712b9617d189b62

Found 28 files trough .DS_Store spidering:

/assets
/assets/3denv
/assets/backgrounds
/assets/banners
/assets/baseboy
/assets/frames
/assets/images
/assets/images/banners
/assets/images/cards
/assets/images/characters
/assets/images/environments
/assets/images/icons
/assets/images/logos
/assets/images/misc
/assets/images/screenshots
/assets/logos
/assets/og
/assets/pfps
/assets/placeholders
/assets/sample-cards
/basis
/data
/extracted-cards
/extracted-cards/extracted_cards
/images
/lab-screenshots
/sfx
/workers

Found on 2025-12-25 08:09

Severity: low
Fingerprint: 5f32cf5d6962f09c9e04c3bc9e04c3bcad0419cc8f1f87522a0d6f4a77caad55

Found 22 files trough .DS_Store spidering:

/assets
/assets/backgrounds
/assets/banners
/assets/images
/assets/images/banners
/assets/images/cards
/assets/images/characters
/assets/images/environments
/assets/images/icons
/assets/images/logos
/assets/images/misc
/assets/images/screenshots
/assets/logos
/assets/pfps
/assets/sample-cards
/data
/extracted-cards
/extracted-cards/extracted_cards
/images
/lab-screenshots
/sfx
/workers

Found on 2025-12-16 20:38

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 216.150.1.129
Domain: beta.cardshow.app
Port: 443
URL: https://beta.cardshow.app

First seen 2025-08-23 00:19
- Severity: low
  Fingerprint: 5f32cf5d6962f09c026392ab026392abdc1b177d42837ea45dc3c32fd5f85589
```
Found 7 files trough .DS_Store spidering:

/assets
/assets/shapes
/card_orig
/logos
/lovable-uploads
/sfx
/workers
```
  Found on 2025-08-23 00:19
Create report

Open service 216.150.1.1:443 · cardshow.app

2026-01-10 02:12

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 2
Cache-Control: public, max-age=0, must-revalidate
Content-Disposition: inline
Content-Length: 5946
Content-Type: text/html; charset=utf-8
Date: Sat, 10 Jan 2026 02:12:20 GMT
Etag: "ca9dad46acd708b8e883cb491ca017b8"
Last-Modified: Sat, 10 Jan 2026 02:12:17 GMT
Referrer-Policy: strict-origin-when-cross-origin
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Vercel-Cache: HIT
X-Vercel-Id: fra1::66r6c-1768011139804-da04c7f8e613
X-Xss-Protection: 1; mode=block
Connection: close

Page title: Cardshow - Create, Share & Discover Trading Cards


<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" type="image/png" href="/assets/logos/C_Star_icon.png" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=5.0, user-scalable=yes, viewport-fit=cover" />
    <title>Cardshow - Create, Share & Discover Trading Cards</title>
    
    <!-- SEO Meta Tags -->
    <meta name="description" content="Create professional trading cards with AI assistance and stunning 3D effects. Join thousands of creators in the ultimate card creation platform." />
    <meta name="keywords" content="trading cards, card maker, AI cards, digital collectibles, card creator, CRD, cardshow" />
    <meta name="author" content="Cardshow" />
    <meta name="robots" content="index, follow" />
    
    <!-- Open Graph Meta Tags -->
    <meta property="og:type" content="website" />
    <meta property="og:site_name" content="Cardshow" />
    <meta property="og:title" content="Cardshow - Create, Share & Discover Trading Cards" />
    <meta property="og:description" content="Create professional trading cards with AI assistance and stunning 3D effects. Join thousands of creators in the ultimate card creation platform." />
    <meta property="og:image" content="https://cardshow.vercel.app/assets/og/default-cardshow.png" />
    <meta property="og:image:width" content="1200" />
    <meta property="og:image:height" content="630" />
    <meta property="og:url" content="https://cardshow.vercel.app" />
    <meta property="og:locale" content="en_US" />
    
    <!-- Twitter Card Meta Tags -->
    <meta name="twitter:card" content="summary_large_image" />
    <meta name="twitter:site" content="@cardshow" />
    <meta name="twitter:title" content="Cardshow - Create, Share & Discover Trading Cards" />
    <meta name="twitter:description" content="Create professional trading cards with AI assistance and stunning 3D effects. Join thousands of creators in the ultimate card creation platform." />
    <meta name="twitter:image" content="https://cardshow.vercel.app/assets/og/default-cardshow.png" />
    
    <!-- Canonical URL -->
    <link rel="canonical" href="https://cardshow.vercel.app" />
    
    <!-- PWA Meta Tags -->
    <meta name="theme-color" content="#FFC300" />
    <meta name="mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
    <meta name="apple-mobile-web-app-title" content="Cardshow" />
    <meta name="application-name" content="Cardshow" />
    <meta name="msapplication-TileColor" content="#FFC300" />
    <meta name="msapplication-tap-highlight" content="no" />
    
    <!-- PWA Links DISABLED - causing blank screen issues -->
    <!-- <link rel="manifest" href="/manifest.json" /> -->
    <link rel="apple-touch-icon" href="/assets/logos/C_Star_icon.png" />
    <!-- <link rel="apple-touch-startup-image" href="/icons/splash-640x1136.png" /> -->
    
    <!-- Resource Hints for Performance -->
    <link rel="dns-prefetch" href="https://fonts.googleapis.com">
    <link rel="dns-prefetch" href="https://fonts.gstatic.com">
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    
    <!-- Critical fonts only - load first for LCP -->
    <link rel="preload" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600&family=Geologica:wght@400;500;700&family=Special+Gothic+Expanded+One&display=swap" as="style">
    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600&family=Geologica:wght@400;500;700&family=Special+Gothic+Expanded+One&display=swap" rel="stylesheet">
    
    <!-- Non-critical fonts - load async after page renders -->
    <link rel="preload" href="https://fonts.googleapis.com/css2?family=Roboto+Mono:wght@400;500;700&family=Caveat:wght@700&family=Orbitron:wght@700&family=Righteous&family=Bungee&display=swap" as="style" onload="this.onload=null;this.rel='stylesheet'">
    <noscript><l

Found 3 days ago by HttpPlugin

Create report

Open service 216.150.1.1:443 · cardshow.app

2026-01-02 23:42

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 4514
Cache-Control: public, max-age=0, must-revalidate
Content-Disposition: inline
Content-Length: 5946
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 23:42:22 GMT
Etag: "53a389208d22381a63170fcbc1b599b3"
Last-Modified: Fri, 02 Jan 2026 22:27:08 GMT
Referrer-Policy: strict-origin-when-cross-origin
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Vercel-Cache: HIT
X-Vercel-Id: sin1::frnr8-1767397342864-b28c85f8a1a7
X-Xss-Protection: 1; mode=block
Connection: close

Page title: Cardshow - Create, Share & Discover Trading Cards


<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" type="image/png" href="/assets/logos/C_Star_icon.png" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=5.0, user-scalable=yes, viewport-fit=cover" />
    <title>Cardshow - Create, Share & Discover Trading Cards</title>
    
    <!-- SEO Meta Tags -->
    <meta name="description" content="Create professional trading cards with AI assistance and stunning 3D effects. Join thousands of creators in the ultimate card creation platform." />
    <meta name="keywords" content="trading cards, card maker, AI cards, digital collectibles, card creator, CRD, cardshow" />
    <meta name="author" content="Cardshow" />
    <meta name="robots" content="index, follow" />
    
    <!-- Open Graph Meta Tags -->
    <meta property="og:type" content="website" />
    <meta property="og:site_name" content="Cardshow" />
    <meta property="og:title" content="Cardshow - Create, Share & Discover Trading Cards" />
    <meta property="og:description" content="Create professional trading cards with AI assistance and stunning 3D effects. Join thousands of creators in the ultimate card creation platform." />
    <meta property="og:image" content="https://cardshow.vercel.app/assets/og/default-cardshow.png" />
    <meta property="og:image:width" content="1200" />
    <meta property="og:image:height" content="630" />
    <meta property="og:url" content="https://cardshow.vercel.app" />
    <meta property="og:locale" content="en_US" />
    
    <!-- Twitter Card Meta Tags -->
    <meta name="twitter:card" content="summary_large_image" />
    <meta name="twitter:site" content="@cardshow" />
    <meta name="twitter:title" content="Cardshow - Create, Share & Discover Trading Cards" />
    <meta name="twitter:description" content="Create professional trading cards with AI assistance and stunning 3D effects. Join thousands of creators in the ultimate card creation platform." />
    <meta name="twitter:image" content="https://cardshow.vercel.app/assets/og/default-cardshow.png" />
    
    <!-- Canonical URL -->
    <link rel="canonical" href="https://cardshow.vercel.app" />
    
    <!-- PWA Meta Tags -->
    <meta name="theme-color" content="#FFC300" />
    <meta name="mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
    <meta name="apple-mobile-web-app-title" content="Cardshow" />
    <meta name="application-name" content="Cardshow" />
    <meta name="msapplication-TileColor" content="#FFC300" />
    <meta name="msapplication-tap-highlight" content="no" />
    
    <!-- PWA Links DISABLED - causing blank screen issues -->
    <!-- <link rel="manifest" href="/manifest.json" /> -->
    <link rel="apple-touch-icon" href="/assets/logos/C_Star_icon.png" />
    <!-- <link rel="apple-touch-startup-image" href="/icons/splash-640x1136.png" /> -->
    
    <!-- Resource Hints for Performance -->
    <link rel="dns-prefetch" href="https://fonts.googleapis.com">
    <link rel="dns-prefetch" href="https://fonts.gstatic.com">
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    
    <!-- Critical fonts only - load first for LCP -->
    <link rel="preload" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600&family=Geologica:wght@400;500;700&family=Special+Gothic+Expanded+One&display=swap" as="style">
    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600&family=Geologica:wght@400;500;700&family=Special+Gothic+Expanded+One&display=swap" rel="stylesheet">
    
    <!-- Non-critical fonts - load async after page renders -->
    <link rel="preload" href="https://fonts.googleapis.com/css2?family=Roboto+Mono:wght@400;500;700&family=Caveat:wght@700&family=Orbitron:wght@700&family=Righteous&family=Bungee&display=swap" as="style" onload="this.onload=null;this.rel='stylesheet'">
    <noscript><l

Found 2026-01-02 by HttpPlugin