LeakIX - Host app.nubepass.com

Domain app.nubepass.com

CLOUDFLARENET

Software information

cloudflare

tcp/443

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 172.67.207.171
Domain: app.nubepass.com
Port: 443
URL: https://app.nubepass.com

First seen 2024-10-01 00:12
Last seen 2026-01-23 11:30
Open for 479 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522f866307e

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	sshCommand = ssh -i /root/.ssh/id_rsa -o IdentitiesOnly=yes
[remote "origin"]
	url = git@bitbucket.org:nyvlekgroup/nube-pass.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2026-01-23 11:30

329 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652290739b22

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:nyvlekgroup/nube-pass.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2025-09-26 03:22

268 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 104.21.77.122
Domain: app.nubepass.com
Port: 80
URL: http://app.nubepass.com

First seen 2024-10-01 00:12
Last seen 2024-10-01 00:12
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652290739b22
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:nyvlekgroup/nube-pass.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-10-01 00:12
  
  268 Bytes
Create report

Open service 172.67.207.171:443 · app.nubepass.com

2026-01-23 11:30

HTTP/1.1 200 OK
Date: Fri, 23 Jan 2026 11:30:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
set-cookie: PHPSESSID=0boi50n644dsnj1o6h421s9e1i; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=yLt654nT2VoC8SvhygVt9TXhiVHmJNPUXeBWZazOfd8F28qtydJh8vulZGhgDXatygc%2BMSQbhqiCQ8M%2BD%2ByqwciT%2FvZCdpmMHd8Dzw%3D%3D"}]}
vary: Accept-Encoding
server: cloudflare
x-turbo-charged-by: LiteSpeed
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=11,cfOrigin;dur=4
CF-RAY: 9c26f4eccb140fa8-EWR
alt-svc: h3=":443"; ma=86400

Page title: NubePass / Iniciar sesión

<!DOCTYPE html>
<html lang="es">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>NubePass / Iniciar sesión</title>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css" rel="stylesheet">
    <link href="https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined" rel="stylesheet">
    <link href="/assets/css/main.css?ver=1.35" rel="stylesheet">

    <script src="https://www.google.com/recaptcha/api.js" async defer></script>
    <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/croppie/2.6.5/croppie.min.css" />
    <script src="https://cdnjs.cloudflare.com/ajax/libs/croppie/2.6.5/croppie.min.js"></script>
</head>

<body>
    <div class="login-container">
    <!-- Left column: Login form -->
    <div class="login-form">

        <div class="mb-4">
            <a href="https://nubepass.com/">
                <img width="200" src="/assets/imgs/logo-nubepass.svg" alt="Logo de NubePass">
            </a>
        </div>

        <h2>Iniciar sesión en tu cuenta</h2>

        

        <form action="" method="POST">
            <div class="form-group">
                <input type="email" name="correo" class="form-control" placeholder="Correo electrónico" required>
            </div>
            <div class="form-group">
                <input type="password" name="contrasena" class="form-control" placeholder="Contraseña" required>
            </div>
            <!-- <div class="form-check mb-3">
                    <input type="checkbox" class="form-check-input" id="rememberMe">
                    <label class="form-check-label" for="rememberMe">Recordarme</label>
                </div> -->

            <input type="hidden" name="login" value="005b899ec4cee4443a0d31f23b81deaa" />
            <input type="hidden" name="token" value="1769167802" />

            <div class="mb-3">
            <div class="g-recaptcha" data-sitekey="6LfAxVUqAAAAALQIDafLEbi4BNuqRsIuTM0XeeTA"></div>
            </div>
            <button type="submit" class="btn btn-primary w-100">Iniciar sesión</button>

        </form>
        <div class="mt-3 text-end">
            <small>
                <a target="_blank" href="https://nubepass.com/contactanos/">¿Olvidaste tu contraseña?</a>
            </small>
        </div>
    </div>

    <!-- Right column: Slideshow -->
    <div class="right-section">
        <div id="carouselLoginSlidesOnly" class="carousel slide h-100" data-bs-ride="carousel">
            <div class="carousel-inner h-100">
                <div class="carousel-item active">
                    <img src="/assets/imgs/icons/carnets.png" class="d-block w-100" alt="Accesos Físicos">
                    <div class="carousel-caption d-none d-md-block">
                        <h5><strong>Gestiona tus accesos</strong> de manera eficiente</h5>
                        <p>Organiza eventos excepcionales con acreditaciones personalizadas para cada asistente.</p>
                    </div>
                </div>
                <div class="carousel-item">
                    <img src="/assets/imgs/icons/seguro.png" class="d-block w-100" alt="Acceso seguro">
                    <div class="carousel-caption d-none d-md-block">
                        <h5><strong>Acceso seguro</strong> y desde cualquier dispositivo</h5>
                        <p>Permite a tus asistentes registrarse y recibir acreditaciones rápidamente, sin importar el dispositivo.</p>
                    </div>
                </div>
                <div class="carousel-item">
                    <img src="/assets/imgs/icons/control.png" class="d-block w-100" alt="Control Total">
                    <div class="carousel-caption d-none d-md-block">
                        <h5><strong>Control total</strong> del acceso y asistencia</h5>
                        <p>Registra la asistencia, controla el flujo de invitados y genera reportes detallados con NubePa

Found 2026-01-23 by HttpPlugin

Create report

nubepass.com*.nubepass.com

Fingerprint:

163973ffff0f74cd2590a9a85a0d0043173530191538734bbe5334e21c8511e5

CN:

nubepass.com

Key:

ECDSA-256

Issuer:

WE1

Not before:

2026-01-09 20:39

Not after:

2026-04-09 21:37

Domain summary

app.nubepass.com 3

1 recorded

IP summary

172.67.207.171 2 104.21.77.122 1

2 recorded