nginx
tcp/443 tcp/80
sw-cp-server
tcp/8443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522da486ec3
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@lab.speicherloft.net:hosts/plesk.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 31.220.92.209:8443 · webmail.fron-design.de
2026-01-09 10:10
HTTP/1.1 303 See Other Server: sw-cp-server Date: Fri, 09 Jan 2026 10:10:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Fri, 28 May 1999 00:00:00 GMT Last-Modified: Fri, 09 Jan 2026 10:10:09 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Location: https://webmail.fron-design.de/login.php X-Content-Type-Options: nosniff
Open service 31.220.92.209:443 · webmail.fron-design.de
2026-01-09 10:10
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Jan 2026 10:10:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/8.3.29
Expires: Fri, 09 Jan 2026 10:10:09 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Frame-Options: sameorigin
Content-Language: en
Set-Cookie: roundcube_sessid=ktg0hpscphjpckokb3k8kp02ug; path=/; secure; HttpOnly
Last-Modified: Fri, 09 Jan 2026 10:10:09 GMT
Vary: Accept-Encoding
X-Robots-Tag: noindex, nofollow
Page title: Roundcube Webmail :: Welcome to Roundcube Webmail
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8"><title>Roundcube Webmail :: Welcome to Roundcube Webmail</title>
<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0"><meta name="theme-color" content="#f4f4f4"><meta name="msapplication-navbutton-color" content="#f4f4f4">
<link rel="shortcut icon" href="skins/elastic/images/favicon.ico?s=1764067062">
<link rel="stylesheet" href="skins/elastic/deps/bootstrap.min.css?s=1764067062">
<link rel="stylesheet" href="skins/elastic/styles/styles.min.css?s=1764067062">
<script>
try {
if (document.cookie.indexOf('colorMode=dark') > -1
|| (document.cookie.indexOf('colorMode=light') === -1 && window.matchMedia('(prefers-color-scheme: dark)').matches)
) {
document.documentElement.className += ' dark-mode';
}
} catch (e) { }
</script>
<link rel="stylesheet" type="text/css" href="plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1764067062"><script src="program/js/jquery.min.js?s=1764067062"></script><script src="program/js/common.min.js?s=1764067062"></script><script src="program/js/app.min.js?s=1764067062"></script><script src="program/js/jstz.min.js?s=1764067062"></script><script>
/*
@licstart The following is the entire license notice for the
JavaScript code in this page.
Copyright (C) The Roundcube Dev Team
The JavaScript code in this page is free software: you can redistribute
it and/or modify it under the terms of the GNU General Public License
as published by the Free Software Foundation, either version 3 of
the License, or (at your option) any later version.
The code is distributed WITHOUT ANY WARRANTY; without even the implied
warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU GPL for more details.
@licend The above is the entire license notice
for the JavaScript code in this page.
*/
var rcmail = new rcube_webmail();
rcmail.set_env({"task":"login","standard_windows":false,"locale":"en_US","devel_mode":null,"rcversion":10611,"cookie_domain":"","cookie_path":"/","cookie_secure":true,"dark_mode_support":true,"skin":"elastic","blankpage":"skins/elastic/watermark.html","refresh_interval":60,"session_lifetime":600,"action":"","comm_path":"/?_task=login","compose_extwin":false,"date_format":"yy-mm-dd","date_format_localized":"YYYY-MM-DD","request_token":"K3ao74eFfZOilzGt9NXA5hChDTqwdN4H"});
rcmail.add_label({"loading":"Loading...","servererror":"Server Error!","connerror":"Connection Error (Failed to reach the server)!","requesttimedout":"Request timed out","refreshing":"Refreshing...","windowopenerror":"The popup window was blocked!","uploadingmany":"Uploading files...","uploading":"Uploading file...","close":"Close","save":"Save","cancel":"Cancel","alerttitle":"Attention","confirmationtitle":"Are you sure...","delete":"Delete","continue":"Continue","ok":"OK","back":"Back","errortitle":"An error occurred!","options":"Options","plaintoggle":"Plain text","htmltoggle":"HTML","previous":"Previous","next":"Next","select":"Select","browse":"Browse","choosefile":"Choose file...","choosefiles":"Choose files..."});
rcmail.gui_container("loginfooter","login-footer");rcmail.gui_object('loginform', 'login-form');
rcmail.gui_object('message', 'messagestack');
</script>
<script src="plugins/jqueryui/js/jquery-ui.min.js?s=1764067062"></script>
</head>
<body class="task-login action-none">
<div id="layout">
<h1 class="voice">Roundcube Webmail Login</h1>
<div id="layout-content" class="selected no-navbar" role="main">
<img src="skins/elastic/images/logo.svg?s=1764067062" id="logo" alt="Logo">
<form id="login-form" name="login-form" method="post" class="propform" action="/?_task=login">
<input type="hidden" name="_token" value="K3ao74eFfZOilzGt9NXA5hChDTqwdN4H">
<input type="hidden" name="_task" value="login"><input type="hidden" name="_action" value="login"><input type="hidden" name="_timezone" id="rcmlogin
Open service 31.220.92.209:80 · webmail.fron-design.de
2026-01-09 10:10
HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 09 Jan 2026 10:10:09 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://webmail.fron-design.de/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 185.158.212.154:8443 · webmail.fron-design.de
2026-01-09 02:43
HTTP/1.1 200 OK
Server: sw-cp-server
Date: Fri, 09 Jan 2026 02:42:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Fri, 09 Jan 2026 02:42:16 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
Page title: NORDSERVER
<html><head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
<meta name="plesk-build" content="1708180301.19">
<title>NORDSERVER</title>
<script language="javascript" type="text/javascript" src="/javascript/common.js?1519907528"/></script>
<script language="javascript" type="text/javascript" src="/javascript/externals/prototype.js?1519907528"/></script>
</head><body onLoad=";top.location='/login.php?success_redirect_url=https%3A%2F%2Fwebmail.fron-design.de%2F';"></body><noscript>Sie werden in 15 Sekunden an die neue Adresse weitergeleitet... Wenn Sie nicht automatisch weitergeleitet werden, aktivieren Sie bitte Javascript oder klicken Sie auf den Hyperlink <a href="/login.php?success_redirect_url=https%3A%2F%2Fwebmail.fron-design.de%2F" target="top">/login.php?success_redirect_url=https%3A%2F%2Fwebmail.fron-design.de%2F</a>.</noscript></html><!--______________________________________________________________________________________________________________________________________________________________________________________________________________________________________________IE error page size limitation______________________________________________________________________________________________________________________________________________________________________________________________________________________________________________-->
Open service 185.158.212.154:8443 · webmail.fron-design.de
2026-01-02 00:24
HTTP/1.1 200 OK
Server: sw-cp-server
Date: Fri, 02 Jan 2026 00:24:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Fri, 02 Jan 2026 00:24:23 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
Page title: NORDSERVER
<html><head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
<meta name="plesk-build" content="1708180301.19">
<title>NORDSERVER</title>
<script language="javascript" type="text/javascript" src="/javascript/common.js?1519907528"/></script>
<script language="javascript" type="text/javascript" src="/javascript/externals/prototype.js?1519907528"/></script>
</head><body onLoad=";top.location='/login.php?success_redirect_url=https%3A%2F%2Fwebmail.fron-design.de%2F';"></body><noscript>Sie werden in 15 Sekunden an die neue Adresse weitergeleitet... Wenn Sie nicht automatisch weitergeleitet werden, aktivieren Sie bitte Javascript oder klicken Sie auf den Hyperlink <a href="/login.php?success_redirect_url=https%3A%2F%2Fwebmail.fron-design.de%2F" target="top">/login.php?success_redirect_url=https%3A%2F%2Fwebmail.fron-design.de%2F</a>.</noscript></html><!--______________________________________________________________________________________________________________________________________________________________________________________________________________________________________________IE error page size limitation______________________________________________________________________________________________________________________________________________________________________________________________________________________________________________-->
Open service 185.158.212.154:8443 · webmail.fron-design.de
2025-12-30 08:25
HTTP/1.1 200 OK
Server: sw-cp-server
Date: Tue, 30 Dec 2025 08:24:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Tue, 30 Dec 2025 08:24:36 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
Page title: NORDSERVER
<html><head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
<meta name="plesk-build" content="1708180301.19">
<title>NORDSERVER</title>
<script language="javascript" type="text/javascript" src="/javascript/common.js?1519907528"/></script>
<script language="javascript" type="text/javascript" src="/javascript/externals/prototype.js?1519907528"/></script>
</head><body onLoad=";top.location='/login.php?success_redirect_url=https%3A%2F%2Fwebmail.fron-design.de%2F';"></body><noscript>Sie werden in 15 Sekunden an die neue Adresse weitergeleitet... Wenn Sie nicht automatisch weitergeleitet werden, aktivieren Sie bitte Javascript oder klicken Sie auf den Hyperlink <a href="/login.php?success_redirect_url=https%3A%2F%2Fwebmail.fron-design.de%2F" target="top">/login.php?success_redirect_url=https%3A%2F%2Fwebmail.fron-design.de%2F</a>.</noscript></html><!--______________________________________________________________________________________________________________________________________________________________________________________________________________________________________________IE error page size limitation______________________________________________________________________________________________________________________________________________________________________________________________________________________________________________-->
Open service 185.158.212.154:8443 · webmail.fron-design.de
2025-12-22 14:42
HTTP/1.1 200 OK
Server: sw-cp-server
Date: Mon, 22 Dec 2025 14:42:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Mon, 22 Dec 2025 14:42:37 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
Page title: NORDSERVER
<html><head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
<meta name="plesk-build" content="1708180301.19">
<title>NORDSERVER</title>
<script language="javascript" type="text/javascript" src="/javascript/common.js?1519907528"/></script>
<script language="javascript" type="text/javascript" src="/javascript/externals/prototype.js?1519907528"/></script>
</head><body onLoad=";top.location='/login.php?success_redirect_url=https%3A%2F%2Fwebmail.fron-design.de%2F';"></body><noscript>Sie werden in 15 Sekunden an die neue Adresse weitergeleitet... Wenn Sie nicht automatisch weitergeleitet werden, aktivieren Sie bitte Javascript oder klicken Sie auf den Hyperlink <a href="/login.php?success_redirect_url=https%3A%2F%2Fwebmail.fron-design.de%2F" target="top">/login.php?success_redirect_url=https%3A%2F%2Fwebmail.fron-design.de%2F</a>.</noscript></html><!--______________________________________________________________________________________________________________________________________________________________________________________________________________________________________________IE error page size limitation______________________________________________________________________________________________________________________________________________________________________________________________________________________________________________-->
Open service 185.158.212.154:8443 · webmail.fron-design.de
2025-12-20 13:07
HTTP/1.1 200 OK
Server: sw-cp-server
Date: Sat, 20 Dec 2025 13:04:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Sat, 20 Dec 2025 13:04:13 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
Page title: NORDSERVER
<html><head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
<meta name="plesk-build" content="1708180301.19">
<title>NORDSERVER</title>
<script language="javascript" type="text/javascript" src="/javascript/common.js?1519907528"/></script>
<script language="javascript" type="text/javascript" src="/javascript/externals/prototype.js?1519907528"/></script>
</head><body onLoad=";top.location='/login.php?success_redirect_url=https%3A%2F%2Fwebmail.fron-design.de%2F';"></body><noscript>Sie werden in 15 Sekunden an die neue Adresse weitergeleitet... Wenn Sie nicht automatisch weitergeleitet werden, aktivieren Sie bitte Javascript oder klicken Sie auf den Hyperlink <a href="/login.php?success_redirect_url=https%3A%2F%2Fwebmail.fron-design.de%2F" target="top">/login.php?success_redirect_url=https%3A%2F%2Fwebmail.fron-design.de%2F</a>.</noscript></html><!--______________________________________________________________________________________________________________________________________________________________________________________________________________________________________________IE error page size limitation______________________________________________________________________________________________________________________________________________________________________________________________________________________________________________-->