LeakIX - Host vanillo.at

Domain vanillo.at

Germany

Hetzner Online GmbH

Software information

cloudflare

tcp/443 tcp/80

nginx nginx

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.225.78.81
Domain: vanillo.at
Port: 443
URL: https://vanillo.at

First seen 2022-09-08 00:49
Last seen 2026-01-02 05:02
Open for 1212 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9506476d16937b198d39e1ecf7bc17ea7
```
Found 5 files trough .DS_Store spidering:

/img
/img/test
/portfolio-agency
/portfolio-agency/img
/vcard
```
  Found on 2026-01-02 05:02
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fb246cfc7dba9598a31f81b3331f81b33
```
Found 3 files trough .DS_Store spidering:

/img
/img/test
/vcard
```
  Found on 2024-05-12 21:32
Create report

Open service 157.90.174.233:443 · studio.vanillo.at

2026-01-10 00:57

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Jan 2026 00:57:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: master-only
Referrer-Policy: same-origin
alt-svc: h3=":443"; ma=86400
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Security-Policy: default-src https:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src 'self'; img-src 'self' 'unsafe-inline' https://secure.gravatar.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; worker-src blob:; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data:;
Permissions-Policy: camera=(), geolocation=(self), microphone=() interest-cohort=()

Page title: Vanillo

<!DOCTYPE html><head><meta charset="utf-8" /><meta name="robots" content="noindex"><title>Vanillo</title></head><body><a href="https://studio.vanillo.at/wp-admin/">Login</a> | Maintanance | Technical break | Przerwa techniczna | Technischer bruch | Pause technique | Pausa tecnica | Descanso técnico | Pausa técnica | Технический перерыв | Teknik mola | 技术突破。</body></html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 157.90.174.233:443 · lodge.vanillo.at

2026-01-09 22:41

HTTP/1.1 500 Internal Server Error
Server: nginx
Date: Fri, 09 Jan 2026 22:41:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding, Cookie
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private

Found 2026-01-09 by HttpPlugin

Create report

Open service 157.90.174.233:443 · tanolara.vanillo.at

2026-01-09 04:45

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Jan 2026 04:45:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Vary: Accept-Encoding
Link: <https://tanolara.vanillo.at/wp-json/>; rel="https://api.w.org/"
Link: <https://tanolara.vanillo.at/wp-json/wp/v2/pages/13>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://tanolara.vanillo.at/>; rel=shortlink
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: master-only
Referrer-Policy: same-origin
alt-svc: h3=":443"; ma=86400
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Permissions-Policy: camera=(), geolocation=(self), microphone=() interest-cohort=()

Found 2026-01-09 by HttpPlugin

Create report

Open service 157.90.174.233:443 · campo.vanillo.at

2026-01-04 13:10

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Jan 2026 13:10:54 GMT
Content-Type: text/html
Content-Length: 24689
Last-Modified: Fri, 13 Jun 2025 11:31:10 GMT
Connection: close
Vary: Accept-Encoding
ETag: "684c0bfe-6071"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: master-only
Referrer-Policy: same-origin
alt-svc: h3=":443"; ma=86400
Accept-Ranges: bytes

Page title: campo BHB GmbH

<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
    <meta name="description" content="" />
    <meta name="author" content="Vanillo GmbH" />
    <title>campo BHB GmbH</title>
    <meta name="description" content="Die Zukunft h&auml;lt viele Herausforderungen bereit, doch mit sicherem Fundament l&auml;sst
    sich jede Situation meistern. Wir nehmen unsere Zukunft selbst in die Hand und investieren in
    langfristige Wertanlagen - denn wer ernten will, muss s&auml;en.">
    <!-- keywords -->
    <meta name="keywords"
        content="campo, bhb, campo bhb, investment, immobilien, erneuerbare Energien, Wasserkraft, new work, erneuerbar">
    <!-- Page Title -->

    <link rel="icon" type="image/x-icon" href="assets/favicon.ico" />
    <!-- Font Awesome icons (free version)-->
    <script src="js/font-all.js"></script>
    <script src="js/cookieconsent.js"></script>
    <script
    async
    defer
    src="https://cdn.jsdelivr.net/gh/altcha-org/altcha@main/dist/altcha.min.js"
    type="module"
    ></script>

    <meta property="og:title" content="campo BHB GmbH">
    <meta property="og:site_name" content="campo BHB GmbH">
    <meta property="og:description" content="Die Zukunft h&auml;lt viele Herausforderungen bereit, doch mit sicherem Fundament l&auml;sst
    sich jede Situation meistern. Wir nehmen unsere Zukunft selbst in die Hand und investieren in
    langfristige Wertanlagen - denn wer ernten will, muss s&auml;en.">
    <meta property="og:image" content="assets/img/og_bg.jpg">


    <!-- Core theme CSS (includes Bootstrap)-->
    <link href="css/styles.css" rel="stylesheet" />
    <script src="https://code.jquery.com/jquery-3.2.1.slim.min.js"
        integrity="sha384-KJ3o2DKtIkvYIK3UENzmM7KCkRr/rE9/Qpg6aAZGJwFDMVNA/GpGFF93hXpG5KkN"
        crossorigin="anonymous"></script>

</head>

<body id="page-top">
    <div id="cookies-eu-banner" class="fixed-bottom py-1 text-center bg-light" style="display: none;"
        data-wait-remove="250">
        <div class="row">
            <div class="col-lg-8 col-sm-12" style="line-height: 3.5rem;">
                Diese Internetseite verwendet Google Analytics
                f&uuml;r die Analyse und
                Statistik.
                <a href="./datenschutz.html" id="cookies-eu-more" class="text-white">Mehr Infos</a>

            </div>
            <div class="col-lg-4 col-sm-12" style=""><button class="btn btn-secondary mx-4"
                    id="cookies-eu-reject">Ablehnen</button>
                <button class="btn btn-secondary" id="cookies-eu-accept">Akzeptieren</button>
            </div>
        </div>


    </div>
    <!-- Navigation-->
    <nav class="navbar navbar-expand-lg navbar-light fixed-top" id="mainNav">
        <div class="container px-4 px-lg-5">
            <a class="navbar-brand" href="index.html"><img src="assets/img/logo.webp" style="max-width: 100%;
                    height: auto;
                    max-height: 35px;" /></a>
            <button class="navbar-toggler navbar-toggler-right" type="button" data-bs-toggle="collapse"
                data-bs-target="#navbarResponsive" aria-controls="navbarResponsive" aria-expanded="false"
                aria-label="Toggle navigation">
                Menu
                <i class="fas fa-bars"></i>
            </button>
            <div class="collapse navbar-collapse" id="navbarResponsive">
                <ul class="navbar-nav ms-auto">

                    <li class="nav-item"><a class="nav-link" href="index.html#about">About</a></li>
                    <li class="nav-item"><a class="nav-link" href="index.html#contact">Kontakt</a></li>
                    <li class="nav-item">
                        <a class="nav-link" href="https://www.linkedin.com/company/campo-bhb/"><i
                                class="fa-brands fa-linkedin"></i></a>
                    </li>
                    <li class="nav-item">
                        <a class="nav-link" href="https://www.xing.com/pag

Found 2026-01-04 by HttpPlugin