The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652247faace8
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true hooksPath = /dev/null [remote "origin"] url = git@gitlab-v3.opstp666.com:game-sports/node/game-sport-loading-pc.git fetch = +refs/heads/*:refs/remotes/origin/*
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652209679e1d
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true hooksPath = /dev/null [remote "origin"] url = git@gitlab-v2.opstp666.com:game-sports/node/game-sport-loading-pc.git fetch = +refs/heads/*:refs/remotes/origin/*
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226bcaf64f
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true hooksPath = /dev/null [remote "origin"] url = git@gitlab-v2.opstp888.com:game-sports/node/game-sport-loading-pc.git fetch = +refs/heads/*:refs/remotes/origin/*
Open service 18.66.192.87:443 · biz2q11.com
2026-01-09 18:28
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 11910
Connection: close
Date: Fri, 09 Jan 2026 18:28:32 GMT
Access-Control-Max-Age: 1728000
Last-Modified: Thu, 04 Sep 2025 10:26:01 GMT
ETag: "68b96939-2e86"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: PUT, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,base-url,token
X-Cache: Miss from cloudfront
Via: 1.1 28e56b9ddced4ed414e75f87cbd0d976.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: o47GDwlKWezVmF_UJ6qzGINpLoE9IPCvz5mRhCfuBzi7-nFaVBXqNw==
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Expires" content="0" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Cache-Control" content="no-cache" />
<meta http-equiv="Cache" content="no-cache" />
<meta charset="UTF-8" />
<meta name="author" content="2q">
<meta name="description"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<script type="text/javascript" src="./js/libs/flexible.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="preload" href="css/swiper.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/reset.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/liMarquee.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/css1.css?v=1.06" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/loading.css?v=1.05" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<!-- -------------------------------- 自定义字体 -------------------------------- -->
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Alfa+Slab+One&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,400;1,500&family=Roboto:wght@400;500;700&display=swap" rel="stylesheet" />
<meta name="keywords" content="2q">
<script>
document.title = '2Q - LINK TRUY CẬP 2Q MỚI NHẤT NĂM '+new Date().getFullYear();
document.querySelector('meta[name="description"]').setAttribute('content',`2Q nhà cái nổi bật năm ${new Date().getFullYear()}. 2q.com trang trực tiếp bóng đá đường truyền mạnh tải nhanh không giật lag.`)
document.addEventListener('contextmenu', function (e) {
e.preventDefault(); // 阻止默认右键菜单
});
</script>
</head>
<body>
<div>
<main id="main" class="wrapper">
<header>
<div class="swiper-container">
<div class="swiper-wrapper"></div>
<div class="swiper-pagination"></div>
</div>
</header>
<div class="bottomscon">
<img class="fiximg" src="./images/bg-web.webp" alt="2q-4" srcset="">
<div class="boxs">
<main class="content">
<section class="urlContainer">
<img class="titleTxt" src="./images/title.webp" alt="2q-5">
<div class="btnArea">
<img id="videoBtn" src="./images/dashbord/video.gif" alt="">
<img id="appBtn" src="./images/dashbord/download.gif" alt="">
</div>
<ul class="urlList">
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<div class="itemName"></div>
</div>
<span class="btn">
</span>
</li>
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<span class="itemName"></span>
</div>
<span class="btn">
</span>
</li>
Open service 18.66.192.87:443 · biz2q11.com
2026-01-02 21:58
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 11910
Connection: close
Date: Fri, 02 Jan 2026 21:58:25 GMT
Access-Control-Max-Age: 1728000
Last-Modified: Thu, 04 Sep 2025 10:26:01 GMT
ETag: "68b96939-2e86"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: PUT, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,base-url,token
X-Cache: Miss from cloudfront
Via: 1.1 28e56b9ddced4ed414e75f87cbd0d976.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: akUdNgKhJnpu-dvAX6q-QPSAnGXYL4u-iPxr_QzKy8Ei5aV_NT16WA==
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Expires" content="0" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Cache-Control" content="no-cache" />
<meta http-equiv="Cache" content="no-cache" />
<meta charset="UTF-8" />
<meta name="author" content="2q">
<meta name="description"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<script type="text/javascript" src="./js/libs/flexible.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="preload" href="css/swiper.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/reset.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/liMarquee.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/css1.css?v=1.06" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/loading.css?v=1.05" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<!-- -------------------------------- 自定义字体 -------------------------------- -->
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Alfa+Slab+One&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,400;1,500&family=Roboto:wght@400;500;700&display=swap" rel="stylesheet" />
<meta name="keywords" content="2q">
<script>
document.title = '2Q - LINK TRUY CẬP 2Q MỚI NHẤT NĂM '+new Date().getFullYear();
document.querySelector('meta[name="description"]').setAttribute('content',`2Q nhà cái nổi bật năm ${new Date().getFullYear()}. 2q.com trang trực tiếp bóng đá đường truyền mạnh tải nhanh không giật lag.`)
document.addEventListener('contextmenu', function (e) {
e.preventDefault(); // 阻止默认右键菜单
});
</script>
</head>
<body>
<div>
<main id="main" class="wrapper">
<header>
<div class="swiper-container">
<div class="swiper-wrapper"></div>
<div class="swiper-pagination"></div>
</div>
</header>
<div class="bottomscon">
<img class="fiximg" src="./images/bg-web.webp" alt="2q-4" srcset="">
<div class="boxs">
<main class="content">
<section class="urlContainer">
<img class="titleTxt" src="./images/title.webp" alt="2q-5">
<div class="btnArea">
<img id="videoBtn" src="./images/dashbord/video.gif" alt="">
<img id="appBtn" src="./images/dashbord/download.gif" alt="">
</div>
<ul class="urlList">
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<div class="itemName"></div>
</div>
<span class="btn">
</span>
</li>
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<span class="itemName"></span>
</div>
<span class="btn">
</span>
</li>
Open service 18.66.192.87:443 · biz2q11.com
2025-12-23 04:16
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 11910
Connection: close
Date: Tue, 23 Dec 2025 04:16:10 GMT
Access-Control-Max-Age: 1728000
Last-Modified: Thu, 04 Sep 2025 10:26:01 GMT
ETag: "68b96939-2e86"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: PUT, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,base-url,token
X-Cache: Miss from cloudfront
Via: 1.1 cabdd49d8331afa937d15ebb470ea716.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: TBkvzCHhQXkGjxW2x87R5iZ6PBkkX-PcXl8duRr-8wHZDfFfe4hCVw==
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Expires" content="0" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Cache-Control" content="no-cache" />
<meta http-equiv="Cache" content="no-cache" />
<meta charset="UTF-8" />
<meta name="author" content="2q">
<meta name="description"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<script type="text/javascript" src="./js/libs/flexible.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="preload" href="css/swiper.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/reset.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/liMarquee.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/css1.css?v=1.06" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/loading.css?v=1.05" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<!-- -------------------------------- 自定义字体 -------------------------------- -->
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Alfa+Slab+One&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,400;1,500&family=Roboto:wght@400;500;700&display=swap" rel="stylesheet" />
<meta name="keywords" content="2q">
<script>
document.title = '2Q - LINK TRUY CẬP 2Q MỚI NHẤT NĂM '+new Date().getFullYear();
document.querySelector('meta[name="description"]').setAttribute('content',`2Q nhà cái nổi bật năm ${new Date().getFullYear()}. 2q.com trang trực tiếp bóng đá đường truyền mạnh tải nhanh không giật lag.`)
document.addEventListener('contextmenu', function (e) {
e.preventDefault(); // 阻止默认右键菜单
});
</script>
</head>
<body>
<div>
<main id="main" class="wrapper">
<header>
<div class="swiper-container">
<div class="swiper-wrapper"></div>
<div class="swiper-pagination"></div>
</div>
</header>
<div class="bottomscon">
<img class="fiximg" src="./images/bg-web.webp" alt="2q-4" srcset="">
<div class="boxs">
<main class="content">
<section class="urlContainer">
<img class="titleTxt" src="./images/title.webp" alt="2q-5">
<div class="btnArea">
<img id="videoBtn" src="./images/dashbord/video.gif" alt="">
<img id="appBtn" src="./images/dashbord/download.gif" alt="">
</div>
<ul class="urlList">
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<div class="itemName"></div>
</div>
<span class="btn">
</span>
</li>
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<span class="itemName"></span>
</div>
<span class="btn">
</span>
</li>
Open service 18.66.192.87:443 · biz2q11.com
2025-12-21 10:12
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 11910
Connection: close
Date: Sun, 21 Dec 2025 10:12:03 GMT
Access-Control-Max-Age: 1728000
Last-Modified: Thu, 04 Sep 2025 10:26:01 GMT
ETag: "68b96939-2e86"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: PUT, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,base-url,token
X-Cache: Miss from cloudfront
Via: 1.1 2551fa016e0e39646c40c584001d7b4e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: AhtyG5bU1FlozVlnnIfIHAvidgPQdpAITu5AervyoQHKORBK1H05mg==
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Expires" content="0" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Cache-Control" content="no-cache" />
<meta http-equiv="Cache" content="no-cache" />
<meta charset="UTF-8" />
<meta name="author" content="2q">
<meta name="description"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<script type="text/javascript" src="./js/libs/flexible.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="preload" href="css/swiper.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/reset.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/liMarquee.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/css1.css?v=1.06" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/loading.css?v=1.05" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<!-- -------------------------------- 自定义字体 -------------------------------- -->
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Alfa+Slab+One&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,400;1,500&family=Roboto:wght@400;500;700&display=swap" rel="stylesheet" />
<meta name="keywords" content="2q">
<script>
document.title = '2Q - LINK TRUY CẬP 2Q MỚI NHẤT NĂM '+new Date().getFullYear();
document.querySelector('meta[name="description"]').setAttribute('content',`2Q nhà cái nổi bật năm ${new Date().getFullYear()}. 2q.com trang trực tiếp bóng đá đường truyền mạnh tải nhanh không giật lag.`)
document.addEventListener('contextmenu', function (e) {
e.preventDefault(); // 阻止默认右键菜单
});
</script>
</head>
<body>
<div>
<main id="main" class="wrapper">
<header>
<div class="swiper-container">
<div class="swiper-wrapper"></div>
<div class="swiper-pagination"></div>
</div>
</header>
<div class="bottomscon">
<img class="fiximg" src="./images/bg-web.webp" alt="2q-4" srcset="">
<div class="boxs">
<main class="content">
<section class="urlContainer">
<img class="titleTxt" src="./images/title.webp" alt="2q-5">
<div class="btnArea">
<img id="videoBtn" src="./images/dashbord/video.gif" alt="">
<img id="appBtn" src="./images/dashbord/download.gif" alt="">
</div>
<ul class="urlList">
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<div class="itemName"></div>
</div>
<span class="btn">
</span>
</li>
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<span class="itemName"></span>
</div>
<span class="btn">
</span>
</li>
Open service 18.66.192.87:443 · biz2q11.com
2025-12-19 00:04
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 11910
Connection: close
Date: Fri, 19 Dec 2025 00:04:23 GMT
Access-Control-Max-Age: 1728000
Last-Modified: Thu, 04 Sep 2025 10:26:01 GMT
ETag: "68b96939-2e86"
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: PUT, GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,base-url,token
X-Cache: Miss from cloudfront
Via: 1.1 355f72364b4c8f8829ae95f886a03f56.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 4Ry_Y6JTZCMjQEVekPRfiNkEtenhkp4CS95c0emDeRJrDRrQzt7N-A==
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Expires" content="0" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Cache-Control" content="no-cache" />
<meta http-equiv="Cache" content="no-cache" />
<meta charset="UTF-8" />
<meta name="author" content="2q">
<meta name="description"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<script type="text/javascript" src="./js/libs/flexible.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="preload" href="css/swiper.min.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/reset.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/liMarquee.css" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/css1.css?v=1.06" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="css/loading.css?v=1.05" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
<!-- -------------------------------- 自定义字体 -------------------------------- -->
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Alfa+Slab+One&family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,400;1,500&family=Roboto:wght@400;500;700&display=swap" rel="stylesheet" />
<meta name="keywords" content="2q">
<script>
document.title = '2Q - LINK TRUY CẬP 2Q MỚI NHẤT NĂM '+new Date().getFullYear();
document.querySelector('meta[name="description"]').setAttribute('content',`2Q nhà cái nổi bật năm ${new Date().getFullYear()}. 2q.com trang trực tiếp bóng đá đường truyền mạnh tải nhanh không giật lag.`)
document.addEventListener('contextmenu', function (e) {
e.preventDefault(); // 阻止默认右键菜单
});
</script>
</head>
<body>
<div>
<main id="main" class="wrapper">
<header>
<div class="swiper-container">
<div class="swiper-wrapper"></div>
<div class="swiper-pagination"></div>
</div>
</header>
<div class="bottomscon">
<img class="fiximg" src="./images/bg-web.webp" alt="2q-4" srcset="">
<div class="boxs">
<main class="content">
<section class="urlContainer">
<img class="titleTxt" src="./images/title.webp" alt="2q-5">
<div class="btnArea">
<img id="videoBtn" src="./images/dashbord/video.gif" alt="">
<img id="appBtn" src="./images/dashbord/download.gif" alt="">
</div>
<ul class="urlList">
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<div class="itemName"></div>
</div>
<span class="btn">
</span>
</li>
<li class="urlItem">
<div class="speedCon">
<div class="speedItem"></div>
<span class="itemName"></span>
</div>
<span class="btn">
</span>
</li>