LeakIX - Host creamolivia.com

Domain creamolivia.com

Germany

Hetzner Online GmbH

Software information

nginx nginx

tcp/443 tcp/80

sw-cp-server

tcp/8443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 136.243.38.160
Domain: www.creamolivia.com
Port: 443
URL: https://www.creamolivia.com

First seen 2025-03-17 00:31
Last seen 2025-09-05 08:42
Open for 172 days

Severity: low
Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45e7880e7d0abcb3161f0c1dedddd742c1

Found 30 files trough .DS_Store spidering:

/css
/images
/images/asci.jpg
/images/buket.jpeg
/images/cikolatali-pasta.jpg
/images/cikolatali-pasta.webp
/images/cilekli-cupcake.jpg
/images/cileklicupc.jpg
/images/cupcake.jpg
/images/cupcake.webp
/images/cupcakes.png
/images/etiket.jpg
/images/etiket.png
/images/findikli-pasta.jpg
/images/findikli.jpg
/images/frambuazli-pasta.jpg
/images/icon.png
/images/icon.webp
/images/karamelcup.jpg
/images/karamelli-cupcake.jpg
/images/kutulu.jpeg
/images/logo.jpg
/images/logo.png
/images/meyveli-pasta.jpg
/images/meyvelipasta.jpg
/images/oreo-cupcake.jpg
/images/oreocup.webp
/images/vanilyali-cupcake.jpg
/images/vanilyalicup.jpg
/index.html

Found on 2025-09-05 08:42

Severity: medium
Fingerprint: 5f32cf5d6962f09c8f03d7bd8f03d7bdb61d419f92067ed7938d922e975fe2df

Found 38 files trough .DS_Store spidering:

/asci.jpg
/css
/cupcake.webp
/etiket.jpg
/etiket.png
/images
/images/asci.jpg
/images/buket.jpeg
/images/cikolatali-pasta.jpg
/images/cikolatali-pasta.webp
/images/cilekli-cupcake.jpg
/images/cileklicupc.jpg
/images/cupcake.jpg
/images/cupcake.webp
/images/cupcakes.png
/images/etiket.jpg
/images/etiket.png
/images/findikli-pasta.jpg
/images/findikli.jpg
/images/frambuazli-pasta.jpg
/images/icon.png
/images/icon.webp
/images/karamelcup.jpg
/images/karamelli-cupcake.jpg
/images/kutulu.jpeg
/images/logo.jpg
/images/logo.png
/images/meyveli-pasta.jpg
/images/meyvelipasta.jpg
/images/oreo-cupcake.jpg
/images/oreocup.webp
/images/slider1.jpg
/images/vanilyali-cupcake.jpg
/images/vanilyalicup.jpg
/index.html
/logo.jpg
/pasta.jpg
/slider1.jpg

Found on 2025-03-17 00:31

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 136.243.38.160
Domain: meta.creamolivia.com
Port: 443
URL: https://meta.creamolivia.com

First seen 2025-03-17 18:35
Last seen 2025-09-06 11:24
Open for 172 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
```
Found 1 files trough .DS_Store spidering:

/images
```
  Found on 2025-09-06 11:24
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 136.243.38.160
Domain: creamolivia.com
Port: 443
URL: https://creamolivia.com

First seen 2025-05-16 17:59
Last seen 2025-09-05 04:19
Open for 111 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7c3d3e457c3d3e45e7880e7d0abcb3161f0c1dedddd742c1
```
Found 30 files trough .DS_Store spidering:

/css
/images
/images/asci.jpg
/images/buket.jpeg
/images/cikolatali-pasta.jpg
/images/cikolatali-pasta.webp
/images/cilekli-cupcake.jpg
/images/cileklicupc.jpg
/images/cupcake.jpg
/images/cupcake.webp
/images/cupcakes.png
/images/etiket.jpg
/images/etiket.png
/images/findikli-pasta.jpg
/images/findikli.jpg
/images/frambuazli-pasta.jpg
/images/icon.png
/images/icon.webp
/images/karamelcup.jpg
/images/karamelli-cupcake.jpg
/images/kutulu.jpeg
/images/logo.jpg
/images/logo.png
/images/meyveli-pasta.jpg
/images/meyvelipasta.jpg
/images/oreo-cupcake.jpg
/images/oreocup.webp
/images/vanilyali-cupcake.jpg
/images/vanilyalicup.jpg
/index.html
```
  Found on 2025-09-05 04:19
Create report

Open service 136.243.38.160:443 · webmail.creamolivia.com

2026-01-11 17:59

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Jan 2026 17:59:37 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5326
Connection: close
X-Powered-By: PHP/8.3.29
Expires: Sun, 11 Jan 2026 17:59:37 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Frame-Options: sameorigin
Content-Language: en
Set-Cookie: roundcube_sessid=fv0qo7fclf6357ifnu5mdc8bss; path=/; secure; HttpOnly
Last-Modified: Sun, 11 Jan 2026 17:59:37 GMT
Vary: Accept-Encoding
X-Robots-Tag: noindex, nofollow

Page title: Roundcube Webmail :: Welcome to Roundcube Webmail

<!DOCTYPE html>

<html lang="en">

<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8"><title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>
	<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0"><meta name="theme-color" content="#f4f4f4"><meta name="msapplication-navbutton-color" content="#f4f4f4">
	<link rel="shortcut icon" href="skins/elastic/images/favicon.ico?s=1761843134">
	<link rel="stylesheet" href="skins/elastic/deps/bootstrap.min.css?s=1761843134">
	
		<link rel="stylesheet" href="skins/elastic/styles/styles.min.css?s=1761843134">
		
	
	
		<script>
		try {
			if (document.cookie.indexOf('colorMode=dark') > -1
				|| (document.cookie.indexOf('colorMode=light') === -1 && window.matchMedia('(prefers-color-scheme: dark)').matches)
			) {
				document.documentElement.className += ' dark-mode';
			}
		} catch (e) { }
		</script>
	
<link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1761843134"><script src="program/js/jquery.min.js?s=1761843134"></script><script src="program/js/common.min.js?s=1761843134"></script><script src="program/js/app.min.js?s=1761843134"></script><script src="program/js/jstz.min.js?s=1761843134"></script><script>
/*
        @licstart  The following is the entire license notice for the 
        JavaScript code in this page.

        Copyright (C) The Roundcube Dev Team

        The JavaScript code in this page is free software: you can redistribute
        it and/or modify it under the terms of the GNU General Public License
        as published by the Free Software Foundation, either version 3 of
        the License, or (at your option) any later version.

        The code is distributed WITHOUT ANY WARRANTY; without even the implied
        warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
        See the GNU GPL for more details.

        @licend  The above is the entire license notice
        for the JavaScript code in this page.
*/
var rcmail = new rcube_webmail();
rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10611,"cookie_domain":"","cookie_path":"/","cookie_secure":true,"dark_mode_support":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":600,"action":"","comm_path":"/?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"uTnJ52WutCbyUMkPn3rlUFYG13fd337I"});
rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
rcmail.gui_object('message', 'messagestack');
</script>

<script src="plugins/jqueryui/js/jquery-ui.min.js?s=1761843134"></script>
</head>
<body class="task-login action-none">
	
		<div id="layout">
	


<h1 class="voice">Roundcube Webmail Login</h1>

<div id="layout-content" class="selected no-navbar" role="main">
	<img src="skins/elastic/images/logo.svg?s=1761843134" id="logo" alt="Logo">
	<form id="login-form" name="login-form" method="post" class="propform" action="/?_task=login">
<input type="hidden" name="_token" value="uTnJ52WutCbyUMkPn3rlUFYG13fd337I">
	<input type="hidden" name="_task" value="login"><input type="hidden" name="_action" value="login"><input type="hidden" name="_timezone" id="rcmlogin