LeakIX - Host vanessasales.com

Domain vanessasales.com

Brazil

ORACLE-BMC-31898

Software information

Microsoft-IIS 10.0

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 3.136.101.224
Domain: vanessasales.com
Port: 443
URL: https://vanessasales.com

First seen 2022-10-01 03:50
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3af247253af247259b6c8633f00cb043408e62f0d0348cb8
```
Found 9 files trough .DS_Store spidering:

/assets
/css
/index.php
/input.css
/js
/lower-and-domains.php
/package-lock.json
/package.json
/tailwind.config.js
```
  Found on 2022-10-01 03:50
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 3.136.101.224
Domain: www.vanessasales.com
Port: 443
URL: https://www.vanessasales.com

First seen 2022-07-02 15:42
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65228b34dfbc
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:MyNameOrg/lander_namedibs.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2022-07-02 15:42
  
  265 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 3.136.101.224
Domain: www.vanessasales.com
Port: 443
URL: https://www.vanessasales.com

First seen 2022-10-01 03:51
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3af247253af247259b6c8633f00cb043408e62f0d0348cb8
```
Found 9 files trough .DS_Store spidering:

/assets
/css
/index.php
/input.css
/js
/lower-and-domains.php
/package-lock.json
/package.json
/tailwind.config.js
```
  Found on 2022-10-01 03:51
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 3.136.101.224
Domain: vanessasales.com
Port: 80
URL: http://vanessasales.com

First seen 2022-07-02 15:42
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65228b34dfbc
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:MyNameOrg/lander_namedibs.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2022-07-02 15:42
  
  265 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 3.136.101.224
Domain: www.vanessasales.com
Port: 80
URL: http://www.vanessasales.com

First seen 2022-07-02 15:42
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65228b34dfbc
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:MyNameOrg/lander_namedibs.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2022-07-02 15:42
  
  265 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 3.136.101.224
Domain: vanessasales.com
Port: 443
URL: https://vanessasales.com

First seen 2022-07-02 15:42
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65228b34dfbc
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@github.com:MyNameOrg/lander_namedibs.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2022-07-02 15:42
  
  265 Bytes
Create report

Open service 167.234.235.22:80 · growher.vanessasales.com

2025-12-22 03:09

HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Location: https://growher.vanessasales.com/
Server: Microsoft-IIS/10.0
Access-Control-Max-Age: 1728000
Set-Cookie: ASP.NET_SessionId=z3dyg34lxtgmvx4o3hdaw1x5; path=/; HttpOnly; SameSite=Lax
X-AspNetMvc-Version: 5.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Mon, 22 Dec 2025 03:09:15 GMT
Connection: close
Content-Length: 150

Page title: Object moved

<html><head><title>Object moved</title></head><body>
<h2>Object moved to <a href="https://growher.vanessasales.com/">here</a>.</h2>
</body></html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 167.234.235.22:443 · growher.vanessasales.com

2025-12-22 03:09

HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/10.0
Access-Control-Max-Age: 1728000
Set-Cookie: ASP.NET_SessionId=czjukz1wwpxppjqbyres5ej2; path=/; HttpOnly; SameSite=Lax
X-AspNetMvc-Version: 5.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, HEAD, POST, DEBUG, PUT, DELETE, PATCH, OPTIONS
Date: Mon, 22 Dec 2025 03:09:14 GMT
Connection: close
Content-Length: 163651





<!-- html page -->
<html><head><meta property="og:locale" content="pt_BR"><meta property="og:type" content="website"><meta property="og:site_name" content="Vendas GrowHer"><meta name="application-name" content="Vendas GrowHer"><title></title><meta charset="UTF-8"><meta name="viewport" content="width=device-width"><link href="https://fonts.googleapis.com/css2?family=Roboto:wght@300;500;700&amp;displat=swap" rel="stylesheet" type="text/css"><style>.bee-row,
		.bee-row-content {
			position: relative
		}

		.bee-page-container,
		.bee-row-1,
		.bee-row-2 {
			background-size: auto;
			background-repeat: no-repeat
		}

		body {
			background-color: #FFFFFF;
			color: #000000;
			font-family: Arial, Helvetica Neue, Helvetica, sans-serif
		}

		.bee-page-container {
			background-image: none;
			background-position: top left
		}

		.bee-row-10 .bee-col-1 .bee-block-4 a,
		.bee-row-11 .bee-col-1 .bee-block-4 a,
		.bee-row-12 .bee-col-1 .bee-block-4 a,
		.bee-row-13 .bee-col-1 .bee-block-3 a,
		.bee-row-24 .bee-col-2 .bee-block-3 a,
		.bee-row-25 .bee-col-2 .bee-block-3 a,
		.bee-row-29 .bee-col-2 .bee-block-3 a,
		.bee-row-3 .bee-col-1 .bee-block-2 a,
		.bee-row-30 .bee-col-2 .bee-block-3 a,
		.bee-row-33 .bee-col-1 .bee-block-1 a,
		.bee-row-34 .bee-col-1 .bee-block-1 a,
		.bee-row-35 .bee-col-1 .bee-block-10 a,
		.bee-row-35 .bee-col-1 .bee-block-4 a,
		.bee-row-35 .bee-col-1 .bee-block-6 a,
		.bee-row-35 .bee-col-1 .bee-block-8 a,
		.bee-row-36 .bee-col-1 .bee-block-10 a,
		.bee-row-36 .bee-col-1 .bee-block-4 a,
		.bee-row-36 .bee-col-1 .bee-block-6 a,
		.bee-row-36 .bee-col-1 .bee-block-8 a,
		.bee-row-4 .bee-col-1 .bee-block-2 a,
		.bee-row-41 .bee-col-2 .bee-block-3 a,
		.bee-row-42 .bee-col-2 .bee-block-2 a,
		.bee-row-44 .bee-col-1 .bee-block-2 a,
		.bee-row-45 .bee-col-1 .bee-block-2 a,
		.bee-row-46 .bee-col-1 .bee-block-2 a,
		.bee-row-47 .bee-col-1 .bee-block-2 a,
		.bee-row-5 .bee-col-2 .bee-block-3 a,
		.bee-row-5 .bee-col-2 .bee-block-5 a,
		a {
			color: #7c4b96
		}

		* {
			box-sizing: border-box
		}

		body,
		h1,
		p {
			margin: 0
		}

		.bee-desktop_hide {
			display: none
		}

		.bee-row-content {
			max-width: 695px;
			margin: 0 auto;
			display: flex
		}

		.bee-row-content .bee-col-w1 {
			flex-basis: 8.3333333333%
		}

		.bee-row-content .bee-col-w4 {
			flex-basis: 33.3333333333%
		}

		.bee-row-content .bee-col-w6 {
			flex-basis: 50%
		}

		.bee-row-content .bee-col-w8 {
			flex-basis: 66.6666666667%
		}

		.bee-row-content .bee-col-w10 {
			flex-basis: 83.3333333333%
		}

		.bee-row-1 .bee-col-2 .bee-block-6 div.label:not(.inline),
		.bee-row-1 .bee-col-2 .bee-block-6 label:not(.inline),
		.bee-row-content .bee-col-w12 {
			flex-basis: 100%
		}

		.bee-button a,
		.bee-icon .bee-icon-label-right a {
			text-decoration: none
		}

		.bee-button-content,
		.bee-row-1 .bee-col-2 .bee-block-6,
		.bee-row-1 .bee-col-2 .bee-block-6 .bee-button-container {
			text-align: center
		}

		.bee-divider,
		.bee-image {
			overflow: auto
		}

		.bee-divider .center,
		.bee-image .bee-center {
			margin: 0 auto
		}

		.bee-row-1 .bee-col-1 .bee-block-1,
		.bee-row-1 .bee-col-2 .bee-block-2,
		.bee-row-1 .bee-col-2 .bee-block-6 .bee-form-row:not(.bee-sidelabel) input:not([type=checkbox]):not([type=radio]),
		.bee-row-14 .bee-col-1 .bee-block-1,
		.bee-row-14 .bee-col-1 .bee-block-2,
		.bee-row-14 .bee-col-2 .bee-block-1,
		.bee-row-14 .bee-col-2 .bee-block-4,
		.bee-row-15 .bee-col-1 .bee-block-1,
		.bee-row-15 .bee-col-1 .bee-block-4,
		.bee-row-15 .bee-col-1 .bee-block-8,
		.bee-row-15 .bee-col-2 .bee-block-2,
		.bee-row-16 .bee-col-1 .bee-block-1,
		.bee-row-16 .bee-col-1 .bee-block-4,
		.bee-row-18 .bee-col-1 .bee-block-1,
		.bee-row-19 .bee-col-1 .bee-block-1,
		.bee-row-2 .bee-col-2 .bee-block-2,
		.bee-row-21 .bee-col-2 .bee-block-1,
		.bee-row-22 .bee-col-1 .bee-block-2,
		.bee-row-24 .bee-col-1 .bee-block-1,
		.bee-row-25 .bee-col-1 .bee-block-2,
		.bee-row-29 .bee-col-1 .bee-block-2,
		.bee-row-30 .bee-col-1 .bee-block-2,
		.bee-row-5 .bee-col-2 .bee-block-6 {
			width: 100%
		}

		.bee-form .bee

Found 2025-12-22 by HttpPlugin

Create report

growher.vanessasales.com

Fingerprint:

dfcd1f2f19c74b5c7881100e1984346215e8086732b3f9750ee875be9ef8adb6

CN:

growher.vanessasales.com

Key:

ECDSA-256

Issuer:

Not before:

2025-10-24 02:14

Not after:

2026-01-22 02:14

Domain summary

vanessasales.com 3 www.vanessasales.com 3 growher.vanessasales.com 1

3 recorded

IP summary

167.234.235.22 2 3.136.101.224 2

2 recorded

Domain vanessasales.com

Brazil

Software information

MacOS file listing through .DS_Store file

Git configuration and history exposed

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Create report

Create report

growher.vanessasales.com

Domain summary

IP summary