nginx 1.18.0
tcp/443
nginx-reuseport 1.21.1
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229ed89a79
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://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@github.com/sitesweb3/api-admin.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "admin"] remote = origin merge = refs/heads/admin
Open service 45.130.41.84:443 · api.sherlok.su
2026-01-23 10:09
HTTP/1.1 200 OK
Server: nginx-reuseport/1.21.1
Date: Fri, 23 Jan 2026 10:09:59 GMT
Content-Type: text/html
Content-Length: 37526
Connection: close
Vary: Accept-Encoding
Last-Modified: Tue, 24 Jun 2025 13:06:16 GMT
ETag: "9296-63850fe5f8883"
Accept-Ranges: bytes
Page title: Домен не прилинкован ни к одной из директорий на сервере!
<!DOCTYPE html>
<html lang="ru">
<head>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<script src="https://cdnjs.cloudflare.com/ajax/libs/lodash.js/4.17.10/lodash.min.js"></script>
<script src="https://code.jquery.com/jquery-3.3.1.min.js"></script>
<link href="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.3.5/jquery.fancybox.min.css" rel="stylesheet">
<script src="https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.3.5/jquery.fancybox.min.js"></script>
<link href="https://fonts.googleapis.com/css?family=PT+Sans&subset=cyrillic,latin-ext" rel="stylesheet">
<link href="https://fonts.googleapis.com/css?family=PT+Sans+Caption&subset=cyrillic,latin-ext" rel="stylesheet">
<link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.2.0/css/solid.css"
integrity="sha384-wnAC7ln+XN0UKdcPvJvtqIH3jOjs9pnKnq9qX68ImXvOGz2JuFoEiCjT8jyZQX2z" crossorigin="anonymous">
<link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.2.0/css/fontawesome.css"
integrity="sha384-HbmWTHay9psM8qyzEKPc8odH4DsOuzdejtnr+OFtDmOcIVnhgReQ4GZBH7uwcjf6" crossorigin="anonymous">
<meta charset="UTF-8">
<title>Домен не прилинкован ни к одной из директорий на сервере!</title>
<!-- b0a8e2d8ccb04b24683d347076e80d29e451a385:3e6fb410018eac605cd88a63abcb1c147c858d33 -->
<style>
html {
height: 100%;
}
body {
font-family: 'PT Sans', Arial, sans-serif;
font-size: 16px;
height: 100%;
margin: 0;
}
#ru, #en {
display: -webkit-box;
display: -ms-flexbox;
display: flex;
-webkit-box-orient: vertical;
-webkit-box-direction: normal;
-ms-flex-direction: column;
flex-direction: column;
font-family: 'PT Sans', Arial, sans-serif;
font-size: 16px;
height: 100%;
min-height: 768px;
margin: 0;
}
.top, .bottom, hr {
flex-shrink: 0;
}
hr {
height: 2px;
border: 0;
box-shadow: inset 0 12px 12px -12px rgba(0, 0, 0, 0.5);
margin: 0;
}
a {
color: #2fa3e7;
text-decoration: none;
}
a:focus, a:hover {
color: #157ab5;
text-decoration: none;
}
.b-alert {
font-family: 'PT Sans', Arial, sans-serif;
position: relative;
padding: 20px 20px 20px 65px;
min-height: 60px;
box-sizing: border-box;
border: 1px solid #000;
border-radius: 0;
background-color: #fff;
background-repeat: no-repeat;
color: #000;
text-align: left;
font-size: 16px;
line-height: 20px;
-webkit-box-shadow: 0 2px 4px rgba(146,149,163,.5);
box-shadow: 0 2px 4px rgba(146,149,163,.5)
}
.b-alert:before {
background-image: url(https://cp.beget.com/img/icons/new_alert/alert.svg)
}
.b-alert:before {
content: "";
display: block;
position: absolute;
top: 19px;
left: 0;
width: 45px;
height: 20px;
border-radius: 0 4px 4px 0;
background-repeat: no-repeat;
background-position: center right 4px
}
.b-alert.b-alert--info {
border-color: #2fa3e7
}
.b-alert.b-alert--info:before {
background-color: #2fa3e7
}
.b-alert.b-alert--warning {
border-color: #fba700
}
.b-alert.b-alert--warning:before {
background-color: #fba700
}
.b-alert.b-alert--danger {
border-color: #bd2327
}
.b-alert.b-alert--danger:before {
background-color: #bd2327
}
Open service 217.114.3.43:443 · api.sherlok.su
2026-01-23 05:26
HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Fri, 23 Jan 2026 05:26:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close 404