The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652247faace8
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true hooksPath = /dev/null [remote "origin"] url = git@gitlab-v3.opstp666.com:game-sports/node/game-sport-loading-pc.git fetch = +refs/heads/*:refs/remotes/origin/*
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652209679e1d
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true hooksPath = /dev/null [remote "origin"] url = git@gitlab-v2.opstp666.com:game-sports/node/game-sport-loading-pc.git fetch = +refs/heads/*:refs/remotes/origin/*
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226bcaf64f
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true hooksPath = /dev/null [remote "origin"] url = git@gitlab-v2.opstp888.com:game-sports/node/game-sport-loading-pc.git fetch = +refs/heads/*:refs/remotes/origin/*
Open service 18.172.112.38:443 · 75qin.com
2026-01-09 21:30
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 11910
Connection: close
Date: Fri, 09 Jan 2026 21:30:29 GMT
Access-Control-Max-Age: 1728000
Last-Modified: Thu, 04 Sep 2025 10:26:01 GMT
ETag: "68b96939-2e86"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: PUT, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,base-url,token
X-Cache: Miss from cloudfront
Via: 1.1 0e49b385c2bbe9db0820bc1551bde98a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P8
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: DZ5fkWur5eGm5TE2lQEHwX-8W6cVMPkhHXvipIa9z9gO9TTm8HF6kQ==
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Expires" content="0" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Cache-Control" content="no-cache" />
<meta http-equiv="Cache" content="no-cache" />
<meta charset="UTF-8" />
<meta name="author" content="2q">
<meta name="description"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<script type="text/javascript" src="./js/libs/flexible.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="preload" href="css/swiper.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/reset.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/liMarquee.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/css1.css?v=1.06" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/loading.css?v=1.05" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<!-- -------------------------------- 自定义字体 -------------------------------- -->
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Alfa+Slab+One&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,400;1,500&family=Roboto:wght@400;500;700&display=swap" rel="stylesheet" />
<meta name="keywords" content="2q">
<script>
document.title = '2Q - LINK TRUY CẬP 2Q MỚI NHẤT NĂM '+new Date().getFullYear();
document.querySelector('meta[name="description"]').setAttribute('content',`2Q nhà cái nổi bật năm ${new Date().getFullYear()}. 2q.com trang trực tiếp bóng đá đường truyền mạnh tải nhanh không giật lag.`)
document.addEventListener('contextmenu', function (e) {
e.preventDefault(); // 阻止默认右键菜单
});
</script>
</head>
<body>
<div>
<main id="main" class="wrapper">
<header>
<div class="swiper-container">
<div class="swiper-wrapper"></div>
<div class="swiper-pagination"></div>
</div>
</header>
<div class="bottomscon">
<img class="fiximg" src="./images/bg-web.webp" alt="2q-4" srcset="">
<div class="boxs">
<main class="content">
<section class="urlContainer">
<img class="titleTxt" src="./images/title.webp" alt="2q-5">
<div class="btnArea">
<img id="videoBtn" src="./images/dashbord/video.gif" alt="">
<img id="appBtn" src="./images/dashbord/download.gif" alt="">
</div>
<ul class="urlList">
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<div class="itemName"></div>
</div>
<span class="btn">
</span>
</li>
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<span class="itemName"></span>
</div>
<span class="btn">
</span>
</li>
Open service 18.172.112.38:443 · 75qin.com
2026-01-02 13:00
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 11910
Connection: close
Date: Fri, 02 Jan 2026 13:00:43 GMT
Access-Control-Max-Age: 1728000
Last-Modified: Thu, 04 Sep 2025 10:26:01 GMT
ETag: "68b96939-2e86"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: PUT, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,base-url,token
X-Cache: Miss from cloudfront
Via: 1.1 58e9d1f8f21a3575fa58a14f7f39c636.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P8
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: L_oQWq4Xnmya7naqsruwcwDj6gq6SOW3lBsw5AOgxlO9j6lr7CloVA==
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Expires" content="0" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Cache-Control" content="no-cache" />
<meta http-equiv="Cache" content="no-cache" />
<meta charset="UTF-8" />
<meta name="author" content="2q">
<meta name="description"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<script type="text/javascript" src="./js/libs/flexible.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="preload" href="css/swiper.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/reset.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/liMarquee.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/css1.css?v=1.06" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/loading.css?v=1.05" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<!-- -------------------------------- 自定义字体 -------------------------------- -->
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Alfa+Slab+One&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,400;1,500&family=Roboto:wght@400;500;700&display=swap" rel="stylesheet" />
<meta name="keywords" content="2q">
<script>
document.title = '2Q - LINK TRUY CẬP 2Q MỚI NHẤT NĂM '+new Date().getFullYear();
document.querySelector('meta[name="description"]').setAttribute('content',`2Q nhà cái nổi bật năm ${new Date().getFullYear()}. 2q.com trang trực tiếp bóng đá đường truyền mạnh tải nhanh không giật lag.`)
document.addEventListener('contextmenu', function (e) {
e.preventDefault(); // 阻止默认右键菜单
});
</script>
</head>
<body>
<div>
<main id="main" class="wrapper">
<header>
<div class="swiper-container">
<div class="swiper-wrapper"></div>
<div class="swiper-pagination"></div>
</div>
</header>
<div class="bottomscon">
<img class="fiximg" src="./images/bg-web.webp" alt="2q-4" srcset="">
<div class="boxs">
<main class="content">
<section class="urlContainer">
<img class="titleTxt" src="./images/title.webp" alt="2q-5">
<div class="btnArea">
<img id="videoBtn" src="./images/dashbord/video.gif" alt="">
<img id="appBtn" src="./images/dashbord/download.gif" alt="">
</div>
<ul class="urlList">
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<div class="itemName"></div>
</div>
<span class="btn">
</span>
</li>
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<span class="itemName"></span>
</div>
<span class="btn">
</span>
</li>
Open service 18.172.112.38:443 · 75qin.com
2025-12-22 16:44
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 11910
Connection: close
Date: Mon, 22 Dec 2025 16:44:36 GMT
Access-Control-Max-Age: 1728000
Last-Modified: Thu, 04 Sep 2025 10:26:01 GMT
ETag: "68b96939-2e86"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: PUT, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,base-url,token
X-Cache: Miss from cloudfront
Via: 1.1 efb576f3260fb935bd57cce721b78428.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P8
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: b4NL_zacVetuBVKolAxQvQDHrc6Et-DSXeFHCoR9M8kv-sEK5nkd1g==
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Expires" content="0" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Cache-Control" content="no-cache" />
<meta http-equiv="Cache" content="no-cache" />
<meta charset="UTF-8" />
<meta name="author" content="2q">
<meta name="description"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<script type="text/javascript" src="./js/libs/flexible.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="preload" href="css/swiper.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/reset.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/liMarquee.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/css1.css?v=1.06" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/loading.css?v=1.05" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<!-- -------------------------------- 自定义字体 -------------------------------- -->
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Alfa+Slab+One&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,400;1,500&family=Roboto:wght@400;500;700&display=swap" rel="stylesheet" />
<meta name="keywords" content="2q">
<script>
document.title = '2Q - LINK TRUY CẬP 2Q MỚI NHẤT NĂM '+new Date().getFullYear();
document.querySelector('meta[name="description"]').setAttribute('content',`2Q nhà cái nổi bật năm ${new Date().getFullYear()}. 2q.com trang trực tiếp bóng đá đường truyền mạnh tải nhanh không giật lag.`)
document.addEventListener('contextmenu', function (e) {
e.preventDefault(); // 阻止默认右键菜单
});
</script>
</head>
<body>
<div>
<main id="main" class="wrapper">
<header>
<div class="swiper-container">
<div class="swiper-wrapper"></div>
<div class="swiper-pagination"></div>
</div>
</header>
<div class="bottomscon">
<img class="fiximg" src="./images/bg-web.webp" alt="2q-4" srcset="">
<div class="boxs">
<main class="content">
<section class="urlContainer">
<img class="titleTxt" src="./images/title.webp" alt="2q-5">
<div class="btnArea">
<img id="videoBtn" src="./images/dashbord/video.gif" alt="">
<img id="appBtn" src="./images/dashbord/download.gif" alt="">
</div>
<ul class="urlList">
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<div class="itemName"></div>
</div>
<span class="btn">
</span>
</li>
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<span class="itemName"></span>
</div>
<span class="btn">
</span>
</li>
Open service 18.172.112.38:443 · 75qin.com
2025-12-20 17:54
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 11910
Connection: close
Date: Sat, 20 Dec 2025 17:54:18 GMT
Access-Control-Max-Age: 1728000
Last-Modified: Thu, 04 Sep 2025 10:26:01 GMT
ETag: "68b96939-2e86"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: PUT, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,base-url,token
X-Cache: Miss from cloudfront
Via: 1.1 0e49b385c2bbe9db0820bc1551bde98a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P8
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: YmBrbIj_8HWyuLSxkCSBbWqHx6mzBB0H94Py1_fQbmLwchQN8r4X8Q==
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Expires" content="0" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Cache-Control" content="no-cache" />
<meta http-equiv="Cache" content="no-cache" />
<meta charset="UTF-8" />
<meta name="author" content="2q">
<meta name="description"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<script type="text/javascript" src="./js/libs/flexible.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="preload" href="css/swiper.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/reset.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/liMarquee.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/css1.css?v=1.06" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/loading.css?v=1.05" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<!-- -------------------------------- 自定义字体 -------------------------------- -->
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Alfa+Slab+One&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,400;1,500&family=Roboto:wght@400;500;700&display=swap" rel="stylesheet" />
<meta name="keywords" content="2q">
<script>
document.title = '2Q - LINK TRUY CẬP 2Q MỚI NHẤT NĂM '+new Date().getFullYear();
document.querySelector('meta[name="description"]').setAttribute('content',`2Q nhà cái nổi bật năm ${new Date().getFullYear()}. 2q.com trang trực tiếp bóng đá đường truyền mạnh tải nhanh không giật lag.`)
document.addEventListener('contextmenu', function (e) {
e.preventDefault(); // 阻止默认右键菜单
});
</script>
</head>
<body>
<div>
<main id="main" class="wrapper">
<header>
<div class="swiper-container">
<div class="swiper-wrapper"></div>
<div class="swiper-pagination"></div>
</div>
</header>
<div class="bottomscon">
<img class="fiximg" src="./images/bg-web.webp" alt="2q-4" srcset="">
<div class="boxs">
<main class="content">
<section class="urlContainer">
<img class="titleTxt" src="./images/title.webp" alt="2q-5">
<div class="btnArea">
<img id="videoBtn" src="./images/dashbord/video.gif" alt="">
<img id="appBtn" src="./images/dashbord/download.gif" alt="">
</div>
<ul class="urlList">
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<div class="itemName"></div>
</div>
<span class="btn">
</span>
</li>
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<span class="itemName"></span>
</div>
<span class="btn">
</span>
</li>
Open service 18.172.112.38:443 · 75qin.com
2025-12-19 06:24
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 11910
Connection: close
Date: Fri, 19 Dec 2025 06:24:52 GMT
Access-Control-Max-Age: 1728000
Last-Modified: Thu, 04 Sep 2025 10:26:01 GMT
ETag: "68b96939-2e86"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: PUT, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,base-url,token
X-Cache: Miss from cloudfront
Via: 1.1 07ddb29e6fb6e0d7584320febca423a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P8
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: HSOWGAopOV8LGGCmPDXjkjaHNw7Bt-8-_48cSLsrEYV6vKGRCgpScA==
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Expires" content="0" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Cache-Control" content="no-cache" />
<meta http-equiv="Cache" content="no-cache" />
<meta charset="UTF-8" />
<meta name="author" content="2q">
<meta name="description"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<script type="text/javascript" src="./js/libs/flexible.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="preload" href="css/swiper.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/reset.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/liMarquee.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/css1.css?v=1.06" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/loading.css?v=1.05" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<!-- -------------------------------- 自定义字体 -------------------------------- -->
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Alfa+Slab+One&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,400;1,500&family=Roboto:wght@400;500;700&display=swap" rel="stylesheet" />
<meta name="keywords" content="2q">
<script>
document.title = '2Q - LINK TRUY CẬP 2Q MỚI NHẤT NĂM '+new Date().getFullYear();
document.querySelector('meta[name="description"]').setAttribute('content',`2Q nhà cái nổi bật năm ${new Date().getFullYear()}. 2q.com trang trực tiếp bóng đá đường truyền mạnh tải nhanh không giật lag.`)
document.addEventListener('contextmenu', function (e) {
e.preventDefault(); // 阻止默认右键菜单
});
</script>
</head>
<body>
<div>
<main id="main" class="wrapper">
<header>
<div class="swiper-container">
<div class="swiper-wrapper"></div>
<div class="swiper-pagination"></div>
</div>
</header>
<div class="bottomscon">
<img class="fiximg" src="./images/bg-web.webp" alt="2q-4" srcset="">
<div class="boxs">
<main class="content">
<section class="urlContainer">
<img class="titleTxt" src="./images/title.webp" alt="2q-5">
<div class="btnArea">
<img id="videoBtn" src="./images/dashbord/video.gif" alt="">
<img id="appBtn" src="./images/dashbord/download.gif" alt="">
</div>
<ul class="urlList">
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<div class="itemName"></div>
</div>
<span class="btn">
</span>
</li>
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<span class="itemName"></span>
</div>
<span class="btn">
</span>
</li>