Caddy
tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65222f6356a6
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://git.tt-rss.org/fox/tt-rss fetch = +refs/heads/master:refs/remotes/origin/master [branch "master"] remote = origin merge = refs/heads/master
Open service 47.237.94.176:443 · k.cat.ms
2026-02-01 21:35
HTTP/1.1 307 Temporary Redirect Alt-Svc: h3=":443"; ma=2592000 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Date: Sun, 01 Feb 2026 21:35:11 GMT Link: </_next/static/media/e4af272ccee01ff0-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2" Location: /signin Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Accept-Encoding Via: 1.1 Caddy X-Powered-By: Next.js Connection: close Transfer-Encoding: chunked
Open service 47.237.94.176:443 · deco.cat.ms
2026-01-25 08:50
HTTP/1.1 307 Temporary Redirect Alt-Svc: h3=":443"; ma=2592000 Date: Sun, 25 Jan 2026 08:50:27 GMT Location: /login?redirect=%2F Via: 1.1 Caddy Connection: close Transfer-Encoding: chunked /login?redirect=%2F
Open service 47.237.94.176:80 · deco.cat.ms
2026-01-25 08:50
HTTP/1.1 308 Permanent Redirect Connection: close Location: https://deco.cat.ms/ Server: Caddy Date: Sun, 25 Jan 2026 08:50:56 GMT Content-Length: 0
Open service 47.85.180.138:443 · cat.ms
2026-01-09 14:18
HTTP/1.1 200 OK Alt-Svc: h3=":443"; ma=2592000 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Date: Fri, 09 Jan 2026 14:18:17 GMT Link: </>; rel=preconnect; crossorigin="" Set-Cookie: NEXT_LOCALE=en; Path=/; Expires=Sat, 09 Jan 2027 14:18:17 GMT; Max-Age=31536000; SameSite=lax Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding Via: 1.1 Caddy X-Middleware-Rewrite: /en/site/artin X-Powered-By: Next.js X-Xlog-Handle: artin X-Xlog-Pathname: / Connection: close Transfer-Encoding: chunked