nginx
tcp/443 tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652227c7a937
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = http://43.154.100.57/1111/officalweb.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "yuenan_online_tuiguang"] remote = origin merge = refs/heads/yuenan_online_tuiguang
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652227c7a937
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = http://43.154.100.57/1111/officalweb.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "yuenan_online_tuiguang"] remote = origin merge = refs/heads/yuenan_online_tuiguang
Open service 43.159.99.102:443 · by88.support
2026-01-23 08:17
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
Content-Length: 7371
Accept-Ranges: bytes
Connection: close
Date: Fri, 23 Jan 2026 08:18:08 GMT
EO-LOG-UUID: 16910458671729535206
EO-Cache-Status: HIT
Page title: BY88
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<title>BY88</title>
<!--http://www.html5rocks.com/en/mobile/mobifying/-->
<meta name="viewport"
content="width=device-width,user-scalable=no,initial-scale=1, minimum-scale=1,maximum-scale=1"/>
<!--https://developer.apple.com/library/safari/documentation/AppleApplications/Reference/SafariHTMLRef/Articles/MetaTags.html-->
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
<meta name="format-detection" content="telephone=no">
<!-- force webkit on 360 -->
<meta name="renderer" content="webkit"/>
<meta name="force-rendering" content="webkit"/>
<!-- force edge on IE -->
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/>
<meta name="msapplication-tap-highlight" content="no">
<!-- force full screen on some browser -->
<!--<meta name="full-screen" content="yes"/>-->
<!--<meta name="x5-fullscreen" content="true"/>-->
<!--<meta name="360-fullscreen" content="true"/>-->
<!-- force screen orientation on some browser -->
<meta name="screen-orientation" content="portrait"/>
<meta name="x5-orientation" content="portrait">
<!--fix fireball/issues/3568 -->
<!--<meta name="browsermode" content="application">-->
<meta name="x5-page-mode" content="app">
<!--<link rel="apple-touch-icon" href=".png" />-->
<!--<link rel="apple-touch-icon-precomposed" href=".png" />-->
<link rel="stylesheet" type="text/css" href="style-mobile.25fc5.css"/>
<!-- 自定义css样式 -->
<link rel="stylesheet" type="text/css" href="web-load.css"/>
<link rel="icon" href="icon.png"/>
</head>
<body>
<canvas id="GameCanvas" oncontextmenu="event.preventDefault()" tabindex="0" style="visibility:hidden"></canvas>
<!-- 自定义内容开始 -->
<div id="zbw-web-logo">
<div style="width: 50%;height: 100%;display: contents;">
<!-- 图片 -->
<img id="zbw-img" src="web-logo.png" alt="">
<!-- 加载中进度 -->
<div class="zbw-progress" >
<div class="zbw-progress-label label" >Đang cố gắng tải...</div>
<div class="zbw-progress-bar">
<span style="width: 0%"></span>
</div>
</div>
</div>
</div>
<!-- 自定义内容结束 -->
<!-- 注释掉官方内容 <div id="splash">
<div class="progress-bar stripes">
<span style="width: 0%"></span>
</div>
</div> -->
<script src="src/settings.2229d.js" charset="utf-8"></script>
<script src="main.941d3.js" charset="utf-8"></script>
<script type="text/javascript">
(function () {
// open web debugger console
if (typeof VConsole !== 'undefined') {
window.vConsole = new VConsole();
}
var debug = window._CCSettings.debug;
// var splash = document.getElementById('splash');
// splash.style.display = 'block';
function loadScript (moduleName, cb) {
function scriptLoaded () {
document.body.removeChild(domScript);
domScript.removeEventListener('load', scriptLoaded, false);
cb && cb();
};
var domScript = document.createElement('script');
domScript.async = true;
domScript.src = moduleName;
domScript.addEventListener('load', scriptLoaded, false);
document.body.appendChild(domScript);
}
loadScript(debug ? 'cocos2d-js.js' : 'cocos2d-js-min.281ad.js', function () {
if (CC_PHYSICS_BUILTIN || CC_PHYSICS_CANNON) {
loadScript(debug ? 'physics.js' : 'physics-min.js', window.boot);
}
else {
window.boot();
}
cc.view.enableAutoFullScreen(false);
});
})();
</script>
<script src="super.min.js"></script>
<script type="text/javascr
Open service 43.159.99.100:80 · by88.support
2026-01-23 06:55
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
Content-Length: 7371
Accept-Ranges: bytes
Connection: close
Date: Fri, 23 Jan 2026 06:56:14 GMT
EO-LOG-UUID: 8434801004467070776
EO-Cache-Status: HIT
Page title: BY88
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<title>BY88</title>
<!--http://www.html5rocks.com/en/mobile/mobifying/-->
<meta name="viewport"
content="width=device-width,user-scalable=no,initial-scale=1, minimum-scale=1,maximum-scale=1"/>
<!--https://developer.apple.com/library/safari/documentation/AppleApplications/Reference/SafariHTMLRef/Articles/MetaTags.html-->
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
<meta name="format-detection" content="telephone=no">
<!-- force webkit on 360 -->
<meta name="renderer" content="webkit"/>
<meta name="force-rendering" content="webkit"/>
<!-- force edge on IE -->
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/>
<meta name="msapplication-tap-highlight" content="no">
<!-- force full screen on some browser -->
<!--<meta name="full-screen" content="yes"/>-->
<!--<meta name="x5-fullscreen" content="true"/>-->
<!--<meta name="360-fullscreen" content="true"/>-->
<!-- force screen orientation on some browser -->
<meta name="screen-orientation" content="portrait"/>
<meta name="x5-orientation" content="portrait">
<!--fix fireball/issues/3568 -->
<!--<meta name="browsermode" content="application">-->
<meta name="x5-page-mode" content="app">
<!--<link rel="apple-touch-icon" href=".png" />-->
<!--<link rel="apple-touch-icon-precomposed" href=".png" />-->
<link rel="stylesheet" type="text/css" href="style-mobile.25fc5.css"/>
<!-- 自定义css样式 -->
<link rel="stylesheet" type="text/css" href="web-load.css"/>
<link rel="icon" href="icon.png"/>
</head>
<body>
<canvas id="GameCanvas" oncontextmenu="event.preventDefault()" tabindex="0" style="visibility:hidden"></canvas>
<!-- 自定义内容开始 -->
<div id="zbw-web-logo">
<div style="width: 50%;height: 100%;display: contents;">
<!-- 图片 -->
<img id="zbw-img" src="web-logo.png" alt="">
<!-- 加载中进度 -->
<div class="zbw-progress" >
<div class="zbw-progress-label label" >Đang cố gắng tải...</div>
<div class="zbw-progress-bar">
<span style="width: 0%"></span>
</div>
</div>
</div>
</div>
<!-- 自定义内容结束 -->
<!-- 注释掉官方内容 <div id="splash">
<div class="progress-bar stripes">
<span style="width: 0%"></span>
</div>
</div> -->
<script src="src/settings.2229d.js" charset="utf-8"></script>
<script src="main.941d3.js" charset="utf-8"></script>
<script type="text/javascript">
(function () {
// open web debugger console
if (typeof VConsole !== 'undefined') {
window.vConsole = new VConsole();
}
var debug = window._CCSettings.debug;
// var splash = document.getElementById('splash');
// splash.style.display = 'block';
function loadScript (moduleName, cb) {
function scriptLoaded () {
document.body.removeChild(domScript);
domScript.removeEventListener('load', scriptLoaded, false);
cb && cb();
};
var domScript = document.createElement('script');
domScript.async = true;
domScript.src = moduleName;
domScript.addEventListener('load', scriptLoaded, false);
document.body.appendChild(domScript);
}
loadScript(debug ? 'cocos2d-js.js' : 'cocos2d-js-min.281ad.js', function () {
if (CC_PHYSICS_BUILTIN || CC_PHYSICS_CANNON) {
loadScript(debug ? 'physics.js' : 'physics-min.js', window.boot);
}
else {
window.boot();
}
cc.view.enableAutoFullScreen(false);
});
})();
</script>
<script src="super.min.js"></script>
<script type="text/javascr
Open service 43.169.12.10:8443 · by88.support
2026-01-13 00:43
Open service 43.169.12.10:80 · by88.support
2026-01-13 00:43
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
Content-Length: 7371
Accept-Ranges: bytes
Connection: close
Date: Tue, 13 Jan 2026 00:43:51 GMT
EO-LOG-UUID: 1803461943302994781
EO-Cache-Status: HIT
Page title: BY88
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<title>BY88</title>
<!--http://www.html5rocks.com/en/mobile/mobifying/-->
<meta name="viewport"
content="width=device-width,user-scalable=no,initial-scale=1, minimum-scale=1,maximum-scale=1"/>
<!--https://developer.apple.com/library/safari/documentation/AppleApplications/Reference/SafariHTMLRef/Articles/MetaTags.html-->
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
<meta name="format-detection" content="telephone=no">
<!-- force webkit on 360 -->
<meta name="renderer" content="webkit"/>
<meta name="force-rendering" content="webkit"/>
<!-- force edge on IE -->
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/>
<meta name="msapplication-tap-highlight" content="no">
<!-- force full screen on some browser -->
<!--<meta name="full-screen" content="yes"/>-->
<!--<meta name="x5-fullscreen" content="true"/>-->
<!--<meta name="360-fullscreen" content="true"/>-->
<!-- force screen orientation on some browser -->
<meta name="screen-orientation" content="portrait"/>
<meta name="x5-orientation" content="portrait">
<!--fix fireball/issues/3568 -->
<!--<meta name="browsermode" content="application">-->
<meta name="x5-page-mode" content="app">
<!--<link rel="apple-touch-icon" href=".png" />-->
<!--<link rel="apple-touch-icon-precomposed" href=".png" />-->
<link rel="stylesheet" type="text/css" href="style-mobile.25fc5.css"/>
<!-- 自定义css样式 -->
<link rel="stylesheet" type="text/css" href="web-load.css"/>
<link rel="icon" href="icon.png"/>
</head>
<body>
<canvas id="GameCanvas" oncontextmenu="event.preventDefault()" tabindex="0" style="visibility:hidden"></canvas>
<!-- 自定义内容开始 -->
<div id="zbw-web-logo">
<div style="width: 50%;height: 100%;display: contents;">
<!-- 图片 -->
<img id="zbw-img" src="web-logo.png" alt="">
<!-- 加载中进度 -->
<div class="zbw-progress" >
<div class="zbw-progress-label label" >Đang cố gắng tải...</div>
<div class="zbw-progress-bar">
<span style="width: 0%"></span>
</div>
</div>
</div>
</div>
<!-- 自定义内容结束 -->
<!-- 注释掉官方内容 <div id="splash">
<div class="progress-bar stripes">
<span style="width: 0%"></span>
</div>
</div> -->
<script src="src/settings.2229d.js" charset="utf-8"></script>
<script src="main.941d3.js" charset="utf-8"></script>
<script type="text/javascript">
(function () {
// open web debugger console
if (typeof VConsole !== 'undefined') {
window.vConsole = new VConsole();
}
var debug = window._CCSettings.debug;
// var splash = document.getElementById('splash');
// splash.style.display = 'block';
function loadScript (moduleName, cb) {
function scriptLoaded () {
document.body.removeChild(domScript);
domScript.removeEventListener('load', scriptLoaded, false);
cb && cb();
};
var domScript = document.createElement('script');
domScript.async = true;
domScript.src = moduleName;
domScript.addEventListener('load', scriptLoaded, false);
document.body.appendChild(domScript);
}
loadScript(debug ? 'cocos2d-js.js' : 'cocos2d-js-min.281ad.js', function () {
if (CC_PHYSICS_BUILTIN || CC_PHYSICS_CANNON) {
loadScript(debug ? 'physics.js' : 'physics-min.js', window.boot);
}
else {
window.boot();
}
cc.view.enableAutoFullScreen(false);
});
})();
</script>
<script src="super.min.js"></script>
<script type="text/javascr
Open service 43.169.12.10:443 · by88.support
2026-01-13 00:43
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
Content-Length: 7371
Accept-Ranges: bytes
Connection: close
Date: Tue, 13 Jan 2026 00:43:48 GMT
EO-LOG-UUID: 15829180860456575975
EO-Cache-Status: HIT
Page title: BY88
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<title>BY88</title>
<!--http://www.html5rocks.com/en/mobile/mobifying/-->
<meta name="viewport"
content="width=device-width,user-scalable=no,initial-scale=1, minimum-scale=1,maximum-scale=1"/>
<!--https://developer.apple.com/library/safari/documentation/AppleApplications/Reference/SafariHTMLRef/Articles/MetaTags.html-->
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
<meta name="format-detection" content="telephone=no">
<!-- force webkit on 360 -->
<meta name="renderer" content="webkit"/>
<meta name="force-rendering" content="webkit"/>
<!-- force edge on IE -->
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/>
<meta name="msapplication-tap-highlight" content="no">
<!-- force full screen on some browser -->
<!--<meta name="full-screen" content="yes"/>-->
<!--<meta name="x5-fullscreen" content="true"/>-->
<!--<meta name="360-fullscreen" content="true"/>-->
<!-- force screen orientation on some browser -->
<meta name="screen-orientation" content="portrait"/>
<meta name="x5-orientation" content="portrait">
<!--fix fireball/issues/3568 -->
<!--<meta name="browsermode" content="application">-->
<meta name="x5-page-mode" content="app">
<!--<link rel="apple-touch-icon" href=".png" />-->
<!--<link rel="apple-touch-icon-precomposed" href=".png" />-->
<link rel="stylesheet" type="text/css" href="style-mobile.25fc5.css"/>
<!-- 自定义css样式 -->
<link rel="stylesheet" type="text/css" href="web-load.css"/>
<link rel="icon" href="icon.png"/>
</head>
<body>
<canvas id="GameCanvas" oncontextmenu="event.preventDefault()" tabindex="0" style="visibility:hidden"></canvas>
<!-- 自定义内容开始 -->
<div id="zbw-web-logo">
<div style="width: 50%;height: 100%;display: contents;">
<!-- 图片 -->
<img id="zbw-img" src="web-logo.png" alt="">
<!-- 加载中进度 -->
<div class="zbw-progress" >
<div class="zbw-progress-label label" >Đang cố gắng tải...</div>
<div class="zbw-progress-bar">
<span style="width: 0%"></span>
</div>
</div>
</div>
</div>
<!-- 自定义内容结束 -->
<!-- 注释掉官方内容 <div id="splash">
<div class="progress-bar stripes">
<span style="width: 0%"></span>
</div>
</div> -->
<script src="src/settings.2229d.js" charset="utf-8"></script>
<script src="main.941d3.js" charset="utf-8"></script>
<script type="text/javascript">
(function () {
// open web debugger console
if (typeof VConsole !== 'undefined') {
window.vConsole = new VConsole();
}
var debug = window._CCSettings.debug;
// var splash = document.getElementById('splash');
// splash.style.display = 'block';
function loadScript (moduleName, cb) {
function scriptLoaded () {
document.body.removeChild(domScript);
domScript.removeEventListener('load', scriptLoaded, false);
cb && cb();
};
var domScript = document.createElement('script');
domScript.async = true;
domScript.src = moduleName;
domScript.addEventListener('load', scriptLoaded, false);
document.body.appendChild(domScript);
}
loadScript(debug ? 'cocos2d-js.js' : 'cocos2d-js-min.281ad.js', function () {
if (CC_PHYSICS_BUILTIN || CC_PHYSICS_CANNON) {
loadScript(debug ? 'physics.js' : 'physics-min.js', window.boot);
}
else {
window.boot();
}
cc.view.enableAutoFullScreen(false);
});
})();
</script>
<script src="super.min.js"></script>
<script type="text/javascr