The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb0fe44b7f
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true [remote "origin"] url = https://github.com/apu-hub/aura-web.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main [branch "deploy"] remote = origin merge = refs/heads/deploy [branch "production"] remote = origin merge = refs/heads/production
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb0fe44b7f
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true [remote "origin"] url = https://github.com/apu-hub/aura-web.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main [branch "deploy"] remote = origin merge = refs/heads/deploy [branch "production"] remote = origin merge = refs/heads/production
Open service 199.59.243.228:443 · auraai.in
2026-01-22 01:44
HTTP/1.1 200 OK
Date: Thu, 22 Jan 2026 01:44:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1034
X-Request-Id: a223ef87-b73f-4c0c-b961-19e97535c5b3
Cache-Control: no-store, max-age=0
Accept-Ch: sec-ch-prefers-color-scheme
Critical-Ch: sec-ch-prefers-color-scheme
Vary: sec-ch-prefers-color-scheme
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_ZlRtsvjVceROmd/sK0v0MO3pfIi37vEKvLqHtwHqdEnsMrROzWAdTlujjlaQH9E6XLgYLWtgHzHEoTbskPOY8A==
Set-Cookie: parking_session=a223ef87-b73f-4c0c-b961-19e97535c5b3; expires=Thu, 22 Jan 2026 01:59:20 GMT; path=/
Connection: close
<!doctype html>
<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_ZlRtsvjVceROmd/sK0v0MO3pfIi37vEKvLqHtwHqdEnsMrROzWAdTlujjlaQH9E6XLgYLWtgHzHEoTbskPOY8A==" lang="en" style="background: #2B2B2B;">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC">
<link rel="preconnect" href="https://www.google.com" crossorigin>
</head>
<body>
<div id="target" style="opacity: 0"></div>
<script>window.park = "eyJ1dWlkIjoiYTIyM2VmODctYjczZi00YzBjLWI5NjEtMTllOTc1MzVjNWIzIiwicGFnZV90aW1lIjoxNzY5MDQ2MjYwLCJwYWdlX3VybCI6Imh0dHBzOi8vYXVyYWFpLmluLyIsInBhZ2VfbWV0aG9kIjoiR0VUIiwicGFnZV9yZXF1ZXN0Ijp7fSwicGFnZV9oZWFkZXJzIjp7fSwiaG9zdCI6ImF1cmFhaS5pbiIsImlwIjoiMTY0LjkwLjIyOC43OSJ9Cg==";</script>
<script src="/bWjqsKSDO.js"></script>
</body>
</html>
Open service 199.59.243.228:80 · auraai.in
2026-01-22 01:44
HTTP/1.1 200 OK
date: Thu, 22 Jan 2026 01:44:19 GMT
content-type: text/html; charset=utf-8
content-length: 1030
x-request-id: d5dac05c-c937-4f94-8bf3-2b7332cf1c25
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_ZlRtsvjVceROmd/sK0v0MO3pfIi37vEKvLqHtwHqdEnsMrROzWAdTlujjlaQH9E6XLgYLWtgHzHEoTbskPOY8A==
set-cookie: parking_session=d5dac05c-c937-4f94-8bf3-2b7332cf1c25; expires=Thu, 22 Jan 2026 01:59:20 GMT; path=/
connection: close
<!doctype html>
<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_ZlRtsvjVceROmd/sK0v0MO3pfIi37vEKvLqHtwHqdEnsMrROzWAdTlujjlaQH9E6XLgYLWtgHzHEoTbskPOY8A==" lang="en" style="background: #2B2B2B;">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC">
<link rel="preconnect" href="https://www.google.com" crossorigin>
</head>
<body>
<div id="target" style="opacity: 0"></div>
<script>window.park = "eyJ1dWlkIjoiZDVkYWMwNWMtYzkzNy00Zjk0LThiZjMtMmI3MzMyY2YxYzI1IiwicGFnZV90aW1lIjoxNzY5MDQ2MjYwLCJwYWdlX3VybCI6Imh0dHA6Ly9hdXJhYWkuaW4vIiwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX2hlYWRlcnMiOnt9LCJob3N0IjoiYXVyYWFpLmluIiwiaXAiOiIxMzguNjguODYuMzIifQo=";</script>
<script src="/bsJiiTEPn.js"></script>
</body>
</html>