Netlify
tcp/443 tcp/80
pages-server
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e57b76f8
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = ssh://git@git.sr.ht/~aei/design fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522468236ea
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://git.sr.ht/~aei/paper.css fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
Open service 63.176.8.218:80 · naw.aei.sh
2026-01-26 13:12
HTTP/1.1 301 Moved Permanently Content-Type: text/plain; charset=utf-8 Date: Mon, 26 Jan 2026 13:12:33 GMT Location: https://naw.aei.sh/ Server: Netlify X-Nf-Request-Id: 01KFX6YFW2RKM79XSJ4KX7D5KK Content-Length: 34 Connection: close Redirecting to https://naw.aei.sh/
Open service 35.157.26.135:443 · naw.aei.sh
2026-01-26 13:12
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2
Cache-Control: public,max-age=0,must-revalidate
Cache-Status: "Netlify Edge"; hit
Content-Length: 485
Content-Type: text/html; charset=UTF-8
Date: Mon, 26 Jan 2026 13:12:29 GMT
Etag: "ad6916c4759a50967c0744192a65dc9e-ssl"
Server: Netlify
Strict-Transport-Security: max-age=31536000
X-Nf-Request-Id: 01KFX6YBKHGVV88W25ZZXAB021
Connection: close
Page title:
naw
<!DOCTYPE html>
<html lang="en">
<title>
naw
</title>
<meta charset="utf-8">
<meta property="og:type" content="website">
<meta name="viewport" content="width=device-width">
<style>
body {
background-color: black;
color: white;
}
main {
text-align: center;
padding-top: 5em;
}
</style>
<body>
<main>
<h1>naw</h1>
</main>
</body>
</html>
Open service 2a05:d014:58f:6200::258:80 · naw.aei.sh
2026-01-26 13:12
HTTP/1.1 301 Moved Permanently Content-Type: text/plain; charset=utf-8 Date: Mon, 26 Jan 2026 13:12:33 GMT Location: https://naw.aei.sh/ Server: Netlify X-Nf-Request-Id: 01KFX6YFTR3947GVYV9C4EWN8Y Content-Length: 34 Connection: close Redirecting to https://naw.aei.sh/
Open service 63.176.8.218:443 · naw.aei.sh
2026-01-26 13:12
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3
Cache-Control: public,max-age=0,must-revalidate
Cache-Status: "Netlify Edge"; hit
Content-Length: 485
Content-Type: text/html; charset=UTF-8
Date: Mon, 26 Jan 2026 13:12:29 GMT
Etag: "ad6916c4759a50967c0744192a65dc9e-ssl"
Server: Netlify
Strict-Transport-Security: max-age=31536000
X-Nf-Request-Id: 01KFX6YBWMYDH6HCSGPVHN8WG9
Connection: close
Page title:
naw
<!DOCTYPE html>
<html lang="en">
<title>
naw
</title>
<meta charset="utf-8">
<meta property="og:type" content="website">
<meta name="viewport" content="width=device-width">
<style>
body {
background-color: black;
color: white;
}
main {
text-align: center;
padding-top: 5em;
}
</style>
<body>
<main>
<h1>naw</h1>
</main>
</body>
</html>
Open service 2a05:d014:58f:6200::259:80 · naw.aei.sh
2026-01-26 13:12
HTTP/1.1 301 Moved Permanently Content-Type: text/plain; charset=utf-8 Date: Mon, 26 Jan 2026 13:12:32 GMT Location: https://naw.aei.sh/ Server: Netlify X-Nf-Request-Id: 01KFX6YF6JW8XQBX0Q4ARTKWA4 Content-Length: 34 Connection: close Redirecting to https://naw.aei.sh/
Open service 2a05:d014:58f:6200::259:443 · naw.aei.sh
2026-01-26 13:12
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: public,max-age=0,must-revalidate
Cache-Status: "Netlify Edge"; fwd=miss
Content-Length: 485
Content-Type: text/html; charset=UTF-8
Date: Mon, 26 Jan 2026 13:12:29 GMT
Etag: "ad6916c4759a50967c0744192a65dc9e-ssl"
Server: Netlify
Strict-Transport-Security: max-age=31536000
X-Nf-Request-Id: 01KFX6YBNV5HDBAV5Z03S51Q5E
Connection: close
Page title:
naw
<!DOCTYPE html>
<html lang="en">
<title>
naw
</title>
<meta charset="utf-8">
<meta property="og:type" content="website">
<meta name="viewport" content="width=device-width">
<style>
body {
background-color: black;
color: white;
}
main {
text-align: center;
padding-top: 5em;
}
</style>
<body>
<main>
<h1>naw</h1>
</main>
</body>
</html>
Open service 35.157.26.135:80 · naw.aei.sh
2026-01-26 13:12
HTTP/1.1 301 Moved Permanently Content-Type: text/plain; charset=utf-8 Date: Mon, 26 Jan 2026 13:12:33 GMT Location: https://naw.aei.sh/ Server: Netlify X-Nf-Request-Id: 01KFX6YFRR5TW4B692ZMVW3EWB Content-Length: 34 Connection: close Redirecting to https://naw.aei.sh/
Open service 2a05:d014:58f:6200::258:443 · naw.aei.sh
2026-01-26 13:12
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: public,max-age=0,must-revalidate
Cache-Status: "Netlify Edge"; fwd=miss
Content-Length: 485
Content-Type: text/html; charset=UTF-8
Date: Mon, 26 Jan 2026 13:12:29 GMT
Etag: "ad6916c4759a50967c0744192a65dc9e-ssl"
Server: Netlify
Strict-Transport-Security: max-age=31536000
X-Nf-Request-Id: 01KFX6YBP005DC88GB6VCNXMX4
Connection: close
Page title:
naw
<!DOCTYPE html>
<html lang="en">
<title>
naw
</title>
<meta charset="utf-8">
<meta property="og:type" content="website">
<meta name="viewport" content="width=device-width">
<style>
body {
background-color: black;
color: white;
}
main {
text-align: center;
padding-top: 5em;
}
</style>
<body>
<main>
<h1>naw</h1>
</main>
</body>
</html>
Open service 2a0a:4580:103f:c0de::2:443 · aei.sh
2026-01-25 12:59
HTTP/1.1 200 OK
Allow: GET, HEAD, OPTIONS
Cache-Control: public, max-age=600
Content-Length: 8121
Content-Type: text/html; charset=utf-8
Etag: "7cff9cafd6c6dc9e2c91039a7ea1d51ca6116ef6"
Last-Modified: Sun, 12 Oct 2025 18:18:59 GMT
Referrer-Policy: strict-origin-when-cross-origin
Server: pages-server
X-Pages-Cache: true
Date: Sun, 25 Jan 2026 13:00:00 GMT
Connection: close
Page title: aei.sh/
<!DOCTYPE html>
<html lang="en">
<head>
<title>aei.sh/</title>
<meta charset="UTF-8">
<meta name="title" content="aei.sh/">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="stylesheet" href="main.css">
<link rel="apple-touch-icon" sizes="180x180" href="apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="favicon-16x16.png">
<link rel="manifest" href="site.webmanifest">
<link rel="me" href="https://tilde.zone/@mym">
<link rel="me" href="https://pleroma.envs.net/aei">
<link rel="me" href="https://libre.fm/user/0x02590130">
<noscript>
<style>
.noscript {display: none;}
</style>
</noscript>
</head>
<body>
<span id="scan-line"></span>
<div id="bar">
<nav>
<a href="frame/main.html" target="content"></a> /
<ul>
<li><a href="frame/about.html" target="content"> about</a></li>
<li><a href="frame/changelog.html" target="content"> changelog</a></li>
<li><a href="frame/attributions.html" target="content"> attributions</a></li>
<li><a href="https://aei.atabook.org" target="_blank"> guestbook</a></li>
<li><a href="https://aei.omg.lol" target="_blank"> links</a></li>
<li><a href="https://aei.some.pics" target="_blank"> piclog</a></li>
</ul>
</nav>
<div id="links">
<span class="buttons">
<a href="https://aei.sh/">
<img src="button.gif" alt="aei's site">
</a>
<a href="https://aei.sh/">
<img src="button-dark.gif" alt="aei's site but dark (evil)">
</a>
<a href="http://creativecommons.org/licenses/by-sa/4.0/">
<img src="image/buttons/ccbysa.png" alt="Creative Commons ShareALike License">
</a>
<a href="//web1.0hosting.net" title="Web1.0 Hosting" target="_blank">
<img src="//web1.0hosting.net/b.gif" alt="Web1.0 Hosting">
</a>
<a href="https://volpeon.ink/emojis/neofox/">
<img src="image/buttons/neofox.png" alt="neofox now!">
</a>
<a href="https://github.com/SymTrkl/emoji/releases/tag/neobot">
<img src="image/buttons/beep.gif" alt="beep beep!">
</a>
<a href="https://jack.cab">
<img src="image/buttons/jackcab.png" alt="jack.cab">
</a>
<a href="https://split.pet/">
<img src="image/buttons/split.png" alt="split">
</a>
<a href="https://liminal.photos">
<img src="https://liminal.photos/liminalbanner.jpg" alt="liminal photos">
</a>
<a href="https://velvetblue.neocities.org/">
<img src="image/buttons/vltthb.png" alt="Velvet Blue">
</a>
<a href="https://wrender.neocities.org/">
<img src="image/buttons/wrender.gif" alt="wrendering! visit now!!!">
</a>
<a href="https://silicon14.neocities.org">
<img src="image/buttons/si14button.png" alt="silicon14">
</a>
<a href="https://neighborsroom.neocities.org/">
<img src="image/buttons/neighborsroom.png" alt="Neighbor's Room">
</a>
<a href="h
Open service 217.197.84.141:443 · aei.sh
2026-01-25 12:59
HTTP/1.1 200 OK
Allow: GET, HEAD, OPTIONS
Cache-Control: public, max-age=600
Content-Length: 8121
Content-Type: text/html; charset=utf-8
Etag: "7cff9cafd6c6dc9e2c91039a7ea1d51ca6116ef6"
Last-Modified: Sun, 12 Oct 2025 18:18:59 GMT
Referrer-Policy: strict-origin-when-cross-origin
Server: pages-server
X-Pages-Cache: true
Date: Sun, 25 Jan 2026 12:59:59 GMT
Connection: close
Page title: aei.sh/
<!DOCTYPE html>
<html lang="en">
<head>
<title>aei.sh/</title>
<meta charset="UTF-8">
<meta name="title" content="aei.sh/">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="stylesheet" href="main.css">
<link rel="apple-touch-icon" sizes="180x180" href="apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="favicon-16x16.png">
<link rel="manifest" href="site.webmanifest">
<link rel="me" href="https://tilde.zone/@mym">
<link rel="me" href="https://pleroma.envs.net/aei">
<link rel="me" href="https://libre.fm/user/0x02590130">
<noscript>
<style>
.noscript {display: none;}
</style>
</noscript>
</head>
<body>
<span id="scan-line"></span>
<div id="bar">
<nav>
<a href="frame/main.html" target="content"></a> /
<ul>
<li><a href="frame/about.html" target="content"> about</a></li>
<li><a href="frame/changelog.html" target="content"> changelog</a></li>
<li><a href="frame/attributions.html" target="content"> attributions</a></li>
<li><a href="https://aei.atabook.org" target="_blank"> guestbook</a></li>
<li><a href="https://aei.omg.lol" target="_blank"> links</a></li>
<li><a href="https://aei.some.pics" target="_blank"> piclog</a></li>
</ul>
</nav>
<div id="links">
<span class="buttons">
<a href="https://aei.sh/">
<img src="button.gif" alt="aei's site">
</a>
<a href="https://aei.sh/">
<img src="button-dark.gif" alt="aei's site but dark (evil)">
</a>
<a href="http://creativecommons.org/licenses/by-sa/4.0/">
<img src="image/buttons/ccbysa.png" alt="Creative Commons ShareALike License">
</a>
<a href="//web1.0hosting.net" title="Web1.0 Hosting" target="_blank">
<img src="//web1.0hosting.net/b.gif" alt="Web1.0 Hosting">
</a>
<a href="https://volpeon.ink/emojis/neofox/">
<img src="image/buttons/neofox.png" alt="neofox now!">
</a>
<a href="https://github.com/SymTrkl/emoji/releases/tag/neobot">
<img src="image/buttons/beep.gif" alt="beep beep!">
</a>
<a href="https://jack.cab">
<img src="image/buttons/jackcab.png" alt="jack.cab">
</a>
<a href="https://split.pet/">
<img src="image/buttons/split.png" alt="split">
</a>
<a href="https://liminal.photos">
<img src="https://liminal.photos/liminalbanner.jpg" alt="liminal photos">
</a>
<a href="https://velvetblue.neocities.org/">
<img src="image/buttons/vltthb.png" alt="Velvet Blue">
</a>
<a href="https://wrender.neocities.org/">
<img src="image/buttons/wrender.gif" alt="wrendering! visit now!!!">
</a>
<a href="https://silicon14.neocities.org">
<img src="image/buttons/si14button.png" alt="silicon14">
</a>
<a href="https://neighborsroom.neocities.org/">
<img src="image/buttons/neighborsroom.png" alt="Neighbor's Room">
</a>
<a href="h
Open service 2a0a:4580:103f:c0de::2:80 · aei.sh
2026-01-25 12:59
HTTP/1.1 302 Found content-length: 0 location: https://aei.sh/ cache-control: no-cache connection: close
Open service 217.197.84.141:80 · aei.sh
2026-01-25 12:59
HTTP/1.1 302 Found content-length: 0 location: https://aei.sh/ cache-control: no-cache connection: close
Open service 2a01:4ff:1f2:58a2::1:443 · stanley-was-fat-and-ugly.and-really-really-stupid.he-probably-only-got-the-job.because-of-a-family-connection.thats-how-stupid-he-is.that-or-with-drug-money.also-stanley-is-addicted-to-drugs-and-hookers.aei.sh
2026-01-23 12:21
HTTP/1.1 302 Found Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Fri, 23 Jan 2026 12:22:00 GMT Edge: usw-web-lorxu Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: https://youtu.be/ZtyrxfhfPFg Omg: lol Permission-Policy: interest-cohort=(),browsing-topics=() Pragma: no-cache Set-Cookie: PHPSESSID=10f324832253dc39d2988f49e48d32e5; path=/ Set-Cookie: __Secure-neatnik=SJECzkm6etE3%2BhG3Iz72qA2VQ5rjI9kMXj%2BRb%2Ft4PYDXrE3m3ZYwIXg%3D; expires=Sat, 23 Jan 2027 12:22:00 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000 Via: 1.1 Caddy X-Content-Type-Options: nosniff Connection: close Transfer-Encoding: chunked
Open service 2a01:4ff:1f2:58a2::1:80 · stanley-was-fat-and-ugly.and-really-really-stupid.he-probably-only-got-the-job.because-of-a-family-connection.thats-how-stupid-he-is.that-or-with-drug-money.also-stanley-is-addicted-to-drugs-and-hookers.aei.sh
2026-01-23 12:21
HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: https://stanley-was-fat-and-ugly.and-really-really-stupid.he-probably-only-got-the-job.because-of-a-family-connection.thats-how-stupid-he-is.that-or-with-drug-money.also-stanley-is-addicted-to-drugs-and-hookers.aei.sh Omg: lol Status: 302 Found Via: 0.0 Caddy Date: Fri, 23 Jan 2026 12:22:28 GMT Content-Length: 0 Connection: close
Open service 2a01:4ff:1f2:58a2::1:443 · stanley-was-fat-and-ugly.and-really-really-stupid.he-probably-only-got-the-job.because-of-a-family-connection.thats-how-stupid-he-is.that-or-with-drug-money.also-stanley-is-addicted-to-drugs-and-hookers.aei.sh
2026-01-12 13:38
HTTP/1.1 302 Found Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Mon, 12 Jan 2026 13:38:52 GMT Edge: usw-web-mlatu Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: https://youtu.be/ZtyrxfhfPFg Omg: lol Permission-Policy: interest-cohort=(),browsing-topics=() Pragma: no-cache Set-Cookie: PHPSESSID=aa3ab26adb894d3fde659011ccc9aa1d; path=/ Set-Cookie: __Secure-neatnik=vhPrjc6wk42B%2BJUoBggJBMOV9OiKUvzrymL%2BR%2BI5j1AH6hAIxmABwmk%3D; expires=Tue, 12 Jan 2027 13:38:52 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000 Via: 1.1 Caddy X-Content-Type-Options: nosniff Connection: close Transfer-Encoding: chunked
Open service 2a01:4ff:1f2:58a2::1:80 · stanley-was-fat-and-ugly.and-really-really-stupid.he-probably-only-got-the-job.because-of-a-family-connection.thats-how-stupid-he-is.that-or-with-drug-money.also-stanley-is-addicted-to-drugs-and-hookers.aei.sh
2026-01-12 13:38
HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: https://stanley-was-fat-and-ugly.and-really-really-stupid.he-probably-only-got-the-job.because-of-a-family-connection.thats-how-stupid-he-is.that-or-with-drug-money.also-stanley-is-addicted-to-drugs-and-hookers.aei.sh Omg: lol Status: 302 Found Via: 0.0 Caddy Date: Mon, 12 Jan 2026 13:39:50 GMT Content-Length: 0 Connection: close
Open service 5.78.24.5:80 · stanley-was-fat-and-ugly.and-really-really-stupid.he-probably-only-got-the-job.because-of-a-family-connection.thats-how-stupid-he-is.that-or-with-drug-money.also-stanley-is-addicted-to-drugs-and-hookers.aei.sh
2026-01-05 15:51
HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: https://stanley-was-fat-and-ugly.and-really-really-stupid.he-probably-only-got-the-job.because-of-a-family-connection.thats-how-stupid-he-is.that-or-with-drug-money.also-stanley-is-addicted-to-drugs-and-hookers.aei.sh Omg: lol Status: 302 Found Via: 0.0 Caddy Date: Mon, 05 Jan 2026 15:51:59 GMT Content-Length: 0 Connection: close
Open service 2a01:4ff:1f2:58a2::1:443 · stanley-was-fat-and-ugly.and-really-really-stupid.he-probably-only-got-the-job.because-of-a-family-connection.thats-how-stupid-he-is.that-or-with-drug-money.also-stanley-is-addicted-to-drugs-and-hookers.aei.sh
2026-01-05 15:51
HTTP/1.1 302 Found Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Mon, 05 Jan 2026 15:51:59 GMT Edge: usw-web-lorxu Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: https://youtu.be/ZtyrxfhfPFg Omg: lol Permission-Policy: interest-cohort=(),browsing-topics=() Pragma: no-cache Set-Cookie: PHPSESSID=d127acc9d24bda7c52f43b534195d77b; path=/ Set-Cookie: __Secure-neatnik=VkdDYuATQTeuaDmBBflEtiLr%2BNlIdX44zEVBQ6Fsyi77UxG%2BwC7VE4A%3D; expires=Tue, 05 Jan 2027 15:51:59 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000 Via: 1.1 Caddy X-Content-Type-Options: nosniff Connection: close Transfer-Encoding: chunked
Open service 5.78.24.5:443 · stanley-was-fat-and-ugly.and-really-really-stupid.he-probably-only-got-the-job.because-of-a-family-connection.thats-how-stupid-he-is.that-or-with-drug-money.also-stanley-is-addicted-to-drugs-and-hookers.aei.sh
2026-01-05 15:51
HTTP/1.1 302 Found Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Mon, 05 Jan 2026 15:51:59 GMT Edge: usw-web-cipni Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: https://youtu.be/ZtyrxfhfPFg Omg: lol Permission-Policy: interest-cohort=(),browsing-topics=() Pragma: no-cache Set-Cookie: PHPSESSID=e223f89afb0f9b8ffffdc70c2d3d42ee; path=/ Set-Cookie: __Secure-neatnik=Um%2BaqhUKULpPcz1xjHdpmgF6KqYnr5tcFThoVHclzBw9n%2FUYg2ceoLU%3D; expires=Tue, 05 Jan 2027 15:51:59 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=Lax; Secure Strict-Transport-Security: max-age=31536000 Via: 1.1 Caddy X-Content-Type-Options: nosniff Connection: close Transfer-Encoding: chunked
Open service 2a01:4ff:1f2:58a2::1:80 · stanley-was-fat-and-ugly.and-really-really-stupid.he-probably-only-got-the-job.because-of-a-family-connection.thats-how-stupid-he-is.that-or-with-drug-money.also-stanley-is-addicted-to-drugs-and-hookers.aei.sh
2026-01-05 15:51
HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: https://stanley-was-fat-and-ugly.and-really-really-stupid.he-probably-only-got-the-job.because-of-a-family-connection.thats-how-stupid-he-is.that-or-with-drug-money.also-stanley-is-addicted-to-drugs-and-hookers.aei.sh Omg: lol Status: 302 Found Via: 0.0 Caddy Date: Mon, 05 Jan 2026 15:51:59 GMT Content-Length: 0 Connection: close