BunnyCDN-BO1-1163
tcp/443 tcp/80
BunnyCDN-IL1-718
tcp/443 tcp/80
Caddy
tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522054bcf13
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = http://git.lsj001.com/qingxiang/NewoaksAI.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 34.90.202.51:80 · crewblyai.com
2026-01-07 05:06
HTTP/1.1 308 Permanent Redirect Connection: close Location: https://crewblyai.com/ Server: Caddy Date: Wed, 07 Jan 2026 05:08:00 GMT Content-Length: 0
Open service 34.90.202.51:443 · crewblyai.com
2026-01-07 05:06
HTTP/1.0 400 Bad Request Client sent an HTTP request to an HTTPS server.
Open service 185.93.1.243:80 · crewblyai.com
2026-01-07 05:06
HTTP/1.1 301 Moved Permanently Date: Wed, 07 Jan 2026 05:07:02 GMT Content-Type: text/html Content-Length: 166 Connection: close Server: BunnyCDN-IL1-718 CDN-PullZone: 5107155 CDN-RequestCountryCode: DE Location: https://crewblyai.com/ CDN-RequestId: 0f3e8ba14f095851e619ec3c40a9069f CDN-RequestTime: 0 Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>openresty</center> </body> </html>
Open service 185.93.1.243:443 · crewblyai.com
2026-01-07 05:06
HTTP/1.1 200 OK
Date: Wed, 07 Jan 2026 05:07:02 GMT
Content-Type: text/html
Content-Length: 2614
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-IL1-718
CDN-PullZone: 5107155
CDN-RequestCountryCode: DE
Cache-Control: public, max-age=31919000
ETag: "2de8613fec26c83eb26958c5a181b590"
Last-Modified: Tue, 06 Jan 2026 08:28:47 GMT
Perma-Cache: MISS
x-amz-server-side-encryption: AES256
x-amz-request-id: a2ca2acc7f40c85d
x-amz-id-2: aNAY2PGExNLY5gTCmY/plmTJ+OaYxgTSy
x-amz-version-id: 4_ze4664aa479503c7e82f90114_f1103173eb7921621_d20260106_m082847_c005_v0501035_t0042_u01767688127893
Strict-Transport-Security: max-age=63072000
CDN-ProxyVer: 1.41
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
CDN-CachedAt: 01/06/2026 08:32:47
CDN-EdgeStorageId: 1235
CDN-RequestId: f718fe2e1ed6176f66e185e8a2b570b3
CDN-Cache: HIT
CDN-Status: 200
CDN-RequestTime: 0
Accept-Ranges: bytes
<section id="iujk" class="crm-section section-wrapper">
<div id="irmi" class="crm-bg">
<div id="inbf" class="crm-bg-image"></div>
<div class="crm-bg-color"></div>
</div>
<div id="itgn" class="crm-section-inner">
<div class="crm-section-padding section-padding-draggable"></div>
<div id="i1re" class="crm-container">
<div href="" selfAlign="center" id="i5q9" class="crm-text">
<p id="ia65o">Welcome to Your New Website! </p>
<p id="ia65o-2">Click the "+" on the Top Left to Start Dragging & Dropping</p>
</div>
</div>
<div class="crm-section-padding section-padding-draggable"></div>
</div>
</section>
<script>var props = { "irmi": { "stylePrefix": "crm-" } };
var ids = Object.keys(props).map(function (id) { return '#' + id }).join(',');
var els = document.querySelectorAll(ids);
for (var i = 0, len = els.length; i < len; i++) {
var el = els[i];
(function (e) { var t = e.stylePrefix, n = document.getElementById("".concat(t, "background-style")); if (!n) { var o = "\n .".concat(t, "bg{\n position: absolute;\n top: 0;\n left: 0;\n width: 100%;\n height: 100%;\n z-index:-1;\n }\n .").concat(t, "bg-color{\n position: absolute;\n top: 0;\n left: 0;\n width: 100%;\n height: 100%;\n }\n .").concat(t, "bg-image{\n position: absolute;\n top: 0;\n left: 0;\n width: 100%;\n height: 100%;\n background-repeat: no-repeat;\n background-size: cover;\n }\n .").concat(t, "bg-video{\n position: absolute;\n top: 0;\n left: 0;\n width: 100%;\n height: 100%;\n }\n "); (n = document.createElement("style")).id = "".concat(t, "background-style"), n.type = "text/css", n.styleSheet ? n.styleSheet.cssText = o : n.appendChild(document.createTextNode(o)), document.head.appendChild(n) } }.bind(el))(props[el.id]);
}
var items = document.querySelectorAll('#i5q9');
for (var i = 0, len = items.length; i < len; i++) {
(function () {
}.bind(items[i]))();
}</script>
Open service 2a02:6ea0:f904::1163:1:80 · app.crewblyai.com
2025-12-19 22:03
HTTP/1.1 301 Moved Permanently Date: Fri, 19 Dec 2025 22:03:04 GMT Content-Type: text/html Content-Length: 166 Connection: close Server: BunnyCDN-BO1-1163 CDN-PullZone: 4133220 CDN-RequestCountryCode: US Location: https://app.crewblyai.com/ CDN-RequestId: 4336432d436e738ab02673ee5eb55912 CDN-RequestTime: 0 Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>openresty</center> </body> </html>
Open service 109.61.86.193:443 · app.crewblyai.com
2025-12-19 22:03
HTTP/1.1 200 OK
Date: Fri, 19 Dec 2025 22:03:05 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 6427
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-BO1-1163
CDN-PullZone: 4133220
CDN-RequestCountryCode: GB
Cache-Control: public, max-age=31919000
ETag: "685d8d6e-191b"
Last-Modified: Thu, 26 Jun 2025 18:11:58 GMT
CDN-StorageServer: NY-753
CDN-RequestPullSuccess: True
CDN-FileServer: 923
Perma-Cache: HIT
CDN-ProxyVer: 1.30
CDN-RequestPullCode: 200
CDN-CachedAt: 06/26/2025 18:11:59
CDN-EdgeStorageId: 1163
CDN-RequestId: 439b426bd08bf328e0fc6d65331eb67d
CDN-Cache: HIT
CDN-Status: 200
CDN-RequestTime: 0
Accept-Ranges: bytes
<!DOCTYPE html>
<html lang="en">
<head>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<script src="https://app.protocdn.com/build/version.js" type="text/javascript"></script>
<meta charset="utf-8" />
<!-- Favicon -->
<!--link rel="apple-touch-icon" sizes="180x180" href="/favicon/apple-touch-icon.png"-->
<!--link rel="icon" type="image/png" sizes="32x32" href="/favicon/favicon-32x32.png"-->
<!--link rel="icon" type="image/png" sizes="16x16" href="/favicon/favicon-16x16.png"-->
<!--<link
rel="shortcut icon"
href="/favicon/favicon.ico"
/>
<link
rel="icon"
href="/favicon/favicon.ico"
/> -->
<meta name="theme-color" content="#000000" />
<link rel="manifest" href="/content/manifest.json?1750961518" />
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
<!-- font-awesome -->
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.7.2/css/all.min.css" crossorigin="anonymous" referrerpolicy="no-referrer" />
<!-- Using Google Font -->
<link rel="preload" href="https://fonts.googleapis.com/css2?family=Public+Sans:wght@400;500;600;700&display=swap" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="https://fonts.googleapis.com/icon?family=Material+Icons" as="style" onload="this.onload=null;this.rel='stylesheet'" />
<!-- Using Local Font -->
<script>
var is_test_server=false;
var r = document.createElement('link');
r.rel = "stylesheet";
r.type = "text/css";
r.href = "/" + version + "/fonts/index.css";
var script = document.getElementsByTagName('script')[0];
script.parentNode.insertBefore(r, script);
</script>
<script>
/*var r = document.createElement('link');
r.rel = "stylesheet";
r.type = "text/css";
r.href = "/" + version + "/umi.css?commitid=" + commit_id;
var script = document.getElementsByTagName('script')[0];
script.parentNode.insertBefore(r, script);*/
</script>
<script>
window.routerBase = "/";
</script>
<script>
window.publicPath =
window.resourceBaseUrl || "/" + version + "/";
window.commit_id = commit_id || "";
</script>
<script>
//! umi version: 3.5.20
</script>
</head>
<body>
<noscript>You need to enable JavaScript to run this app.</noscript>
<div id="root-master">
<div id="wrapper">
<style>
html,
body {
height: 100%;
}
#wrapper {
position: relative;
/*background:#333;*/
height: 100%;
}
.profile-main-loader {
left: 50% !important;
margin-left: -100px;
position: fixed !important;
top: 50% !important;
margin-top: -100px;
width: 45px;
z-index: 9000 !important;
}
.profile-main-loader .loader {
position: relative;
margin: 0px auto;
width: 200px;
height: 200px;
}
.profile-main-loader .loader:before {
content: '';
display: block;
padding-top: 100%;
}
.circular-loader {
-webkit-animation: rotate 2s linear infinite;
animation: rotate 2s linear infinite;
height: 100%;
-webkit-transform-origin: center center;
-ms-transform-origin: center center;
transform-origin: center center;
width: 100%;
position: absolute;
top: 0;
left: 0;
margin: auto;
}
.loader-path {
stroke-dasharray: 150, 200;
stroke-dashoffset: -10;
-webkit-animation: dash 1.5s ease-in-out infinite, color 6s ease-in-out infinite;
animation: dash 1.5s ease-in-out infinite, color 6s ease-in-out infinite;
stroke-linecap: round;
}
@-webkit-keyframes rotate {
100% {
-webkit-transform: rotate(360deg);
transform: rotate(360deg);
}
}
@keyframes rotate
Open service 109.61.86.193:80 · app.crewblyai.com
2025-12-19 22:03
HTTP/1.1 301 Moved Permanently Date: Fri, 19 Dec 2025 22:03:05 GMT Content-Type: text/html Content-Length: 166 Connection: close Server: BunnyCDN-BO1-1163 CDN-PullZone: 4133220 CDN-RequestCountryCode: DE Location: https://app.crewblyai.com/ CDN-RequestId: 4e693de11c720bb2205ec5069918dda2 CDN-RequestTime: 0 Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>openresty</center> </body> </html>
Open service 2a02:6ea0:f904::1163:1:443 · app.crewblyai.com
2025-12-19 22:03
HTTP/1.1 200 OK
Date: Fri, 19 Dec 2025 22:03:05 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 6427
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-BO1-1163
CDN-PullZone: 4133220
CDN-RequestCountryCode: DE
Cache-Control: public, max-age=31919000
ETag: "685d8d6e-191b"
Last-Modified: Thu, 26 Jun 2025 18:11:58 GMT
CDN-StorageServer: NY-753
CDN-RequestPullSuccess: True
CDN-FileServer: 923
Perma-Cache: HIT
CDN-ProxyVer: 1.30
CDN-RequestPullCode: 200
CDN-CachedAt: 06/26/2025 18:11:59
CDN-EdgeStorageId: 1163
CDN-RequestId: 185ba270659f401dbb3a42d0e408dd4f
CDN-Cache: HIT
CDN-Status: 200
CDN-RequestTime: 0
Accept-Ranges: bytes
<!DOCTYPE html>
<html lang="en">
<head>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<script src="https://app.protocdn.com/build/version.js" type="text/javascript"></script>
<meta charset="utf-8" />
<!-- Favicon -->
<!--link rel="apple-touch-icon" sizes="180x180" href="/favicon/apple-touch-icon.png"-->
<!--link rel="icon" type="image/png" sizes="32x32" href="/favicon/favicon-32x32.png"-->
<!--link rel="icon" type="image/png" sizes="16x16" href="/favicon/favicon-16x16.png"-->
<!--<link
rel="shortcut icon"
href="/favicon/favicon.ico"
/>
<link
rel="icon"
href="/favicon/favicon.ico"
/> -->
<meta name="theme-color" content="#000000" />
<link rel="manifest" href="/content/manifest.json?1750961518" />
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
<!-- font-awesome -->
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.7.2/css/all.min.css" crossorigin="anonymous" referrerpolicy="no-referrer" />
<!-- Using Google Font -->
<link rel="preload" href="https://fonts.googleapis.com/css2?family=Public+Sans:wght@400;500;600;700&display=swap" as="style" onload="this.onload=null;this.rel='stylesheet'">
<link rel="preload" href="https://fonts.googleapis.com/icon?family=Material+Icons" as="style" onload="this.onload=null;this.rel='stylesheet'" />
<!-- Using Local Font -->
<script>
var is_test_server=false;
var r = document.createElement('link');
r.rel = "stylesheet";
r.type = "text/css";
r.href = "/" + version + "/fonts/index.css";
var script = document.getElementsByTagName('script')[0];
script.parentNode.insertBefore(r, script);
</script>
<script>
/*var r = document.createElement('link');
r.rel = "stylesheet";
r.type = "text/css";
r.href = "/" + version + "/umi.css?commitid=" + commit_id;
var script = document.getElementsByTagName('script')[0];
script.parentNode.insertBefore(r, script);*/
</script>
<script>
window.routerBase = "/";
</script>
<script>
window.publicPath =
window.resourceBaseUrl || "/" + version + "/";
window.commit_id = commit_id || "";
</script>
<script>
//! umi version: 3.5.20
</script>
</head>
<body>
<noscript>You need to enable JavaScript to run this app.</noscript>
<div id="root-master">
<div id="wrapper">
<style>
html,
body {
height: 100%;
}
#wrapper {
position: relative;
/*background:#333;*/
height: 100%;
}
.profile-main-loader {
left: 50% !important;
margin-left: -100px;
position: fixed !important;
top: 50% !important;
margin-top: -100px;
width: 45px;
z-index: 9000 !important;
}
.profile-main-loader .loader {
position: relative;
margin: 0px auto;
width: 200px;
height: 200px;
}
.profile-main-loader .loader:before {
content: '';
display: block;
padding-top: 100%;
}
.circular-loader {
-webkit-animation: rotate 2s linear infinite;
animation: rotate 2s linear infinite;
height: 100%;
-webkit-transform-origin: center center;
-ms-transform-origin: center center;
transform-origin: center center;
width: 100%;
position: absolute;
top: 0;
left: 0;
margin: auto;
}
.loader-path {
stroke-dasharray: 150, 200;
stroke-dashoffset: -10;
-webkit-animation: dash 1.5s ease-in-out infinite, color 6s ease-in-out infinite;
animation: dash 1.5s ease-in-out infinite, color 6s ease-in-out infinite;
stroke-linecap: round;
}
@-webkit-keyframes rotate {
100% {
-webkit-transform: rotate(360deg);
transform: rotate(360deg);
}
}
@keyframes rotate