The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652247faace8
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true hooksPath = /dev/null [remote "origin"] url = git@gitlab-v3.opstp666.com:game-sports/node/game-sport-loading-pc.git fetch = +refs/heads/*:refs/remotes/origin/*
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652209679e1d
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true hooksPath = /dev/null [remote "origin"] url = git@gitlab-v2.opstp666.com:game-sports/node/game-sport-loading-pc.git fetch = +refs/heads/*:refs/remotes/origin/*
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226bcaf64f
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true hooksPath = /dev/null [remote "origin"] url = git@gitlab-v2.opstp888.com:game-sports/node/game-sport-loading-pc.git fetch = +refs/heads/*:refs/remotes/origin/*
Open service 3.167.227.129:443 · 91qin.com
2026-01-09 22:47
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 11910
Connection: close
Date: Fri, 09 Jan 2026 22:47:33 GMT
Access-Control-Max-Age: 1728000
Last-Modified: Thu, 04 Sep 2025 10:26:01 GMT
ETag: "68b96939-2e86"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: PUT, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,base-url,token
X-Cache: Miss from cloudfront
Via: 1.1 11e96575dfbca7fdaeadce447e13bf86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P11
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: Y94sMIF6TF-DlaVh6KyxGcqQDhgd2GG902tPGkBrA9Lku5sjmExrKQ==
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Expires" content="0" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Cache-Control" content="no-cache" />
<meta http-equiv="Cache" content="no-cache" />
<meta charset="UTF-8" />
<meta name="author" content="2q">
<meta name="description"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<script type="text/javascript" src="./js/libs/flexible.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="preload" href="css/swiper.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/reset.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/liMarquee.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/css1.css?v=1.06" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/loading.css?v=1.05" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<!-- -------------------------------- 自定义字体 -------------------------------- -->
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Alfa+Slab+One&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,400;1,500&family=Roboto:wght@400;500;700&display=swap" rel="stylesheet" />
<meta name="keywords" content="2q">
<script>
document.title = '2Q - LINK TRUY CẬP 2Q MỚI NHẤT NĂM '+new Date().getFullYear();
document.querySelector('meta[name="description"]').setAttribute('content',`2Q nhà cái nổi bật năm ${new Date().getFullYear()}. 2q.com trang trực tiếp bóng đá đường truyền mạnh tải nhanh không giật lag.`)
document.addEventListener('contextmenu', function (e) {
e.preventDefault(); // 阻止默认右键菜单
});
</script>
</head>
<body>
<div>
<main id="main" class="wrapper">
<header>
<div class="swiper-container">
<div class="swiper-wrapper"></div>
<div class="swiper-pagination"></div>
</div>
</header>
<div class="bottomscon">
<img class="fiximg" src="./images/bg-web.webp" alt="2q-4" srcset="">
<div class="boxs">
<main class="content">
<section class="urlContainer">
<img class="titleTxt" src="./images/title.webp" alt="2q-5">
<div class="btnArea">
<img id="videoBtn" src="./images/dashbord/video.gif" alt="">
<img id="appBtn" src="./images/dashbord/download.gif" alt="">
</div>
<ul class="urlList">
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<div class="itemName"></div>
</div>
<span class="btn">
</span>
</li>
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<span class="itemName"></span>
</div>
<span class="btn">
</span>
</li>
Open service 3.167.227.129:443 · 91qin.com
2025-12-30 12:13
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 11910
Connection: close
Date: Tue, 30 Dec 2025 12:13:13 GMT
Access-Control-Max-Age: 1728000
Last-Modified: Thu, 04 Sep 2025 10:26:01 GMT
ETag: "68b96939-2e86"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: PUT, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,base-url,token
X-Cache: Miss from cloudfront
Via: 1.1 1196be8ecd626a7254fd58be18bc943c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P11
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: UYTRNlCNyQcQ0ykgkopLQBmX9CB8mxC-uGHQd4ZP7VeUIFfvRNjU6g==
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Expires" content="0" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Cache-Control" content="no-cache" />
<meta http-equiv="Cache" content="no-cache" />
<meta charset="UTF-8" />
<meta name="author" content="2q">
<meta name="description"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<script type="text/javascript" src="./js/libs/flexible.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="preload" href="css/swiper.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/reset.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/liMarquee.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/css1.css?v=1.06" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/loading.css?v=1.05" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<!-- -------------------------------- 自定义字体 -------------------------------- -->
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Alfa+Slab+One&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,400;1,500&family=Roboto:wght@400;500;700&display=swap" rel="stylesheet" />
<meta name="keywords" content="2q">
<script>
document.title = '2Q - LINK TRUY CẬP 2Q MỚI NHẤT NĂM '+new Date().getFullYear();
document.querySelector('meta[name="description"]').setAttribute('content',`2Q nhà cái nổi bật năm ${new Date().getFullYear()}. 2q.com trang trực tiếp bóng đá đường truyền mạnh tải nhanh không giật lag.`)
document.addEventListener('contextmenu', function (e) {
e.preventDefault(); // 阻止默认右键菜单
});
</script>
</head>
<body>
<div>
<main id="main" class="wrapper">
<header>
<div class="swiper-container">
<div class="swiper-wrapper"></div>
<div class="swiper-pagination"></div>
</div>
</header>
<div class="bottomscon">
<img class="fiximg" src="./images/bg-web.webp" alt="2q-4" srcset="">
<div class="boxs">
<main class="content">
<section class="urlContainer">
<img class="titleTxt" src="./images/title.webp" alt="2q-5">
<div class="btnArea">
<img id="videoBtn" src="./images/dashbord/video.gif" alt="">
<img id="appBtn" src="./images/dashbord/download.gif" alt="">
</div>
<ul class="urlList">
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<div class="itemName"></div>
</div>
<span class="btn">
</span>
</li>
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<span class="itemName"></span>
</div>
<span class="btn">
</span>
</li>
Open service 3.167.227.129:443 · 91qin.com
2025-12-22 22:16
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 11910
Connection: close
Date: Mon, 22 Dec 2025 22:16:39 GMT
Access-Control-Max-Age: 1728000
Last-Modified: Thu, 04 Sep 2025 10:26:01 GMT
ETag: "68b96939-2e86"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: PUT, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,base-url,token
X-Cache: Miss from cloudfront
Via: 1.1 1196be8ecd626a7254fd58be18bc943c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P11
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: HG4xLYJ9pQl-qUMDZcDEpKcBEI4oSDds59wAYuNA5-PlPrsV-XuPfA==
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Expires" content="0" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Cache-Control" content="no-cache" />
<meta http-equiv="Cache" content="no-cache" />
<meta charset="UTF-8" />
<meta name="author" content="2q">
<meta name="description"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<script type="text/javascript" src="./js/libs/flexible.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="preload" href="css/swiper.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/reset.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/liMarquee.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/css1.css?v=1.06" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/loading.css?v=1.05" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<!-- -------------------------------- 自定义字体 -------------------------------- -->
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Alfa+Slab+One&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,400;1,500&family=Roboto:wght@400;500;700&display=swap" rel="stylesheet" />
<meta name="keywords" content="2q">
<script>
document.title = '2Q - LINK TRUY CẬP 2Q MỚI NHẤT NĂM '+new Date().getFullYear();
document.querySelector('meta[name="description"]').setAttribute('content',`2Q nhà cái nổi bật năm ${new Date().getFullYear()}. 2q.com trang trực tiếp bóng đá đường truyền mạnh tải nhanh không giật lag.`)
document.addEventListener('contextmenu', function (e) {
e.preventDefault(); // 阻止默认右键菜单
});
</script>
</head>
<body>
<div>
<main id="main" class="wrapper">
<header>
<div class="swiper-container">
<div class="swiper-wrapper"></div>
<div class="swiper-pagination"></div>
</div>
</header>
<div class="bottomscon">
<img class="fiximg" src="./images/bg-web.webp" alt="2q-4" srcset="">
<div class="boxs">
<main class="content">
<section class="urlContainer">
<img class="titleTxt" src="./images/title.webp" alt="2q-5">
<div class="btnArea">
<img id="videoBtn" src="./images/dashbord/video.gif" alt="">
<img id="appBtn" src="./images/dashbord/download.gif" alt="">
</div>
<ul class="urlList">
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<div class="itemName"></div>
</div>
<span class="btn">
</span>
</li>
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<span class="itemName"></span>
</div>
<span class="btn">
</span>
</li>
Open service 3.167.227.129:443 · 91qin.com
2025-12-21 03:46
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 11910
Connection: close
Date: Sun, 21 Dec 2025 03:46:17 GMT
Access-Control-Max-Age: 1728000
Last-Modified: Thu, 04 Sep 2025 10:26:01 GMT
ETag: "68b96939-2e86"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: PUT, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,base-url,token
X-Cache: Miss from cloudfront
Via: 1.1 f577a4263b72b008c3015d1c8fa782a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P11
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: jdrwHKwM7zCDZQsZROq_vZAfTt5fLuMHpGWh1TUQqEi5tOkhaBBOkQ==
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Expires" content="0" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Cache-Control" content="no-cache" />
<meta http-equiv="Cache" content="no-cache" />
<meta charset="UTF-8" />
<meta name="author" content="2q">
<meta name="description"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<script type="text/javascript" src="./js/libs/flexible.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="preload" href="css/swiper.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/reset.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/liMarquee.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/css1.css?v=1.06" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/loading.css?v=1.05" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<!-- -------------------------------- 自定义字体 -------------------------------- -->
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Alfa+Slab+One&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,400;1,500&family=Roboto:wght@400;500;700&display=swap" rel="stylesheet" />
<meta name="keywords" content="2q">
<script>
document.title = '2Q - LINK TRUY CẬP 2Q MỚI NHẤT NĂM '+new Date().getFullYear();
document.querySelector('meta[name="description"]').setAttribute('content',`2Q nhà cái nổi bật năm ${new Date().getFullYear()}. 2q.com trang trực tiếp bóng đá đường truyền mạnh tải nhanh không giật lag.`)
document.addEventListener('contextmenu', function (e) {
e.preventDefault(); // 阻止默认右键菜单
});
</script>
</head>
<body>
<div>
<main id="main" class="wrapper">
<header>
<div class="swiper-container">
<div class="swiper-wrapper"></div>
<div class="swiper-pagination"></div>
</div>
</header>
<div class="bottomscon">
<img class="fiximg" src="./images/bg-web.webp" alt="2q-4" srcset="">
<div class="boxs">
<main class="content">
<section class="urlContainer">
<img class="titleTxt" src="./images/title.webp" alt="2q-5">
<div class="btnArea">
<img id="videoBtn" src="./images/dashbord/video.gif" alt="">
<img id="appBtn" src="./images/dashbord/download.gif" alt="">
</div>
<ul class="urlList">
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<div class="itemName"></div>
</div>
<span class="btn">
</span>
</li>
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<span class="itemName"></span>
</div>
<span class="btn">
</span>
</li>
Open service 3.167.227.129:443 · 91qin.com
2025-12-19 02:54
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 11910
Connection: close
Date: Fri, 19 Dec 2025 02:54:11 GMT
Access-Control-Max-Age: 1728000
Last-Modified: Thu, 04 Sep 2025 10:26:01 GMT
ETag: "68b96939-2e86"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: PUT, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,base-url,token
X-Cache: Miss from cloudfront
Via: 1.1 112ea1671f1dfc4e484af72377a98408.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P11
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: qYs3dlOTrnMNW7gamvjeM_0Ws4Xz42DgQMqoQbNhzYD7V9JH5y9DqA==
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Expires" content="0" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Cache-Control" content="no-cache" />
<meta http-equiv="Cache" content="no-cache" />
<meta charset="UTF-8" />
<meta name="author" content="2q">
<meta name="description"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<script type="text/javascript" src="./js/libs/flexible.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="preload" href="css/swiper.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/reset.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/liMarquee.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/css1.css?v=1.06" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/loading.css?v=1.05" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<!-- -------------------------------- 自定义字体 -------------------------------- -->
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Alfa+Slab+One&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,400;1,500&family=Roboto:wght@400;500;700&display=swap" rel="stylesheet" />
<meta name="keywords" content="2q">
<script>
document.title = '2Q - LINK TRUY CẬP 2Q MỚI NHẤT NĂM '+new Date().getFullYear();
document.querySelector('meta[name="description"]').setAttribute('content',`2Q nhà cái nổi bật năm ${new Date().getFullYear()}. 2q.com trang trực tiếp bóng đá đường truyền mạnh tải nhanh không giật lag.`)
document.addEventListener('contextmenu', function (e) {
e.preventDefault(); // 阻止默认右键菜单
});
</script>
</head>
<body>
<div>
<main id="main" class="wrapper">
<header>
<div class="swiper-container">
<div class="swiper-wrapper"></div>
<div class="swiper-pagination"></div>
</div>
</header>
<div class="bottomscon">
<img class="fiximg" src="./images/bg-web.webp" alt="2q-4" srcset="">
<div class="boxs">
<main class="content">
<section class="urlContainer">
<img class="titleTxt" src="./images/title.webp" alt="2q-5">
<div class="btnArea">
<img id="videoBtn" src="./images/dashbord/video.gif" alt="">
<img id="appBtn" src="./images/dashbord/download.gif" alt="">
</div>
<ul class="urlList">
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<div class="itemName"></div>
</div>
<span class="btn">
</span>
</li>
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<span class="itemName"></span>
</div>
<span class="btn">
</span>
</li>