Caddy
tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652227cc23ab
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/technonyte00/vapor-v4 fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224380740b
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@github-frontend:technonyte00/p-frontend.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
Open service 159.195.59.55:80 · admin.apps.vaporon.top
2026-01-05 04:05
HTTP/1.1 308 Permanent Redirect Connection: close Location: https://admin.apps.vaporon.top/ Server: Caddy Date: Mon, 05 Jan 2026 04:06:00 GMT Content-Length: 0
Open service 159.195.59.55:443 · admin.apps.vaporon.top
2026-01-05 04:05
HTTP/1.1 200 OK
Accept-Ranges: bytes
Alt-Svc: h3=":443"; ma=2592000
Cache-Control: public, max-age=0
Content-Length: 5525
Content-Type: text/html; charset=UTF-8
Date: Mon, 05 Jan 2026 04:05:59 GMT
Etag: W/"1595-19b7c0fc8e8"
Last-Modified: Fri, 02 Jan 2026 00:16:07 GMT
Via: 1.1 Caddy
X-Powered-By: Express
Connection: close
Page title: VAPOR v4
<!DOCTYPE html>
<!-- hello! -->
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>VAPOR v4</title>
<link href="/style/all.css" rel="stylesheet" />
<script src="/script/theme.js"></script>
<!--main stylesheet-->
<link href="style.css" rel="stylesheet" />
<link rel="icon" id="favicon-link" href="/asset/logo-icon.png" />
<!-- Google tag (gtag.js) -->
<script
async
src="https://www.googletagmanager.com/gtag/js?id=G-PPE9RTDYDG"
></script>
<script>
window.dataLayer = window.dataLayer || [];
function gtag() {
dataLayer.push(arguments);
}
gtag("js", new Date());
gtag("config", "G-PPE9RTDYDG");
</script>
</head>
<body>
<div id="loading-overlay">
<img id="loading-logo" src="/asset/logo-icon.png" alt="Loading Logo" />
</div>
<iframe id="content-frame" src="about:blank"></iframe>
<div id="menu-dismiss-overlay"></div>
<div class="nav-container" id="nav-container">
<div class="nav-box" id="nav-box">
<div class="nav-box-content">
<i
class="current-page-icon ri-home-4-line"
id="current-page-icon"
></i>
<ul class="nav-list" id="nav-list"></ul>
</div>
</div>
<div class="side-actions">
<button class="side-action-btn" id="show-whats-new-btn">
<i class="ri-megaphone-line"></i>
</button>
<button class="side-action-btn" id="settings-btn">
<i class="ri-settings-3-line"></i>
</button>
</div>
</div>
<script src="script.js"></script>
<script>
document.addEventListener("DOMContentLoaded", () => {
const CLOAK_TAB_KEY = "tab_cloak_setting";
const AUTO_CLOAK_KEY = "auto_cloak_setting";
const CLOSE_PREVENT_KEY = "close_prevention_enabled";
const FAVICON_LINK = document.getElementById("favicon-link");
const CLOAK_PRESETS = {
vapor: { title: "VAPOR v4", favicon: FAVICON_LINK.href },
google: {
title: "Google",
favicon: "https://www.google.com/favicon.ico",
},
khanacademy: {
title: "Khan Academy | Free Online Courses, Lessons & Practice",
favicon: "https://www.khanacademy.org/favicon.ico",
},
desmos: {
title: "Desmos | Graphing Calculator",
favicon: "https://www.desmos.com/favicon.ico",
},
quizlet: {
title:
"Quizlet: Study Tools & Learning Resources for Students and Teachers | Quizlet",
favicon: "https://quizlet.com/favicon.ico",
},
wikipedia: {
title: "Wikipedia",
favicon: "https://en.wikipedia.org/favicon.ico",
},
classroom: {
title: "Google Classroom",
favicon:
"https://upload.wikimedia.org/wikipedia/commons/1/19/Google_Classroom_Logo.svg",
},
clever: {
title: "Clever",
favicon:
"https://s2.googleusercontent.com/s2/favicons?domain=clever.com&sz=32",
},
canvas: {
title: "Dashboard",
favicon: "https://www.instructure.com/favicon.ico",
},
schoology: {
title: "Schoology",
favicon:
"https://s2.googleusercontent.com/s2/favicons?domain=schoology.com&sz=32",
},
};
function applyTabCloak() {
const setting = localStorage.getItem(CLOAK_TAB_KEY) || "vapor";
const { title, favicon } =
CLOAK_PRESETS[setting] || CLOAK_PRESETS.vapor;
document.title = title;
FAVICON_LINK.href = favicon;
}
function setupClosePrevention() {
const isEnabled = localStorage.getItem(CLOSE_PREVENT_KEY) === "true";
if (isEnabled) {
window.onbeforeunload = () =>
"you cant see this message anyways