Caddy
tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652227cc23ab
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/technonyte00/vapor-v4 fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224380740b
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@github-frontend:technonyte00/p-frontend.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
Open service 159.195.59.55:443 · dev.www.https.lola.vapor.my
2026-01-08 20:24
HTTP/1.1 200 OK
Accept-Ranges: bytes
Alt-Svc: h3=":443"; ma=2592000
Cache-Control: public, max-age=0
Content-Length: 5525
Content-Type: text/html; charset=UTF-8
Date: Thu, 08 Jan 2026 20:24:57 GMT
Etag: W/"1595-19b7c0fc8e8"
Last-Modified: Fri, 02 Jan 2026 00:16:07 GMT
Via: 1.1 Caddy
X-Powered-By: Express
Connection: close
Page title: VAPOR v4
<!DOCTYPE html>
<!-- hello! -->
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>VAPOR v4</title>
<link href="/style/all.css" rel="stylesheet" />
<script src="/script/theme.js"></script>
<!--main stylesheet-->
<link href="style.css" rel="stylesheet" />
<link rel="icon" id="favicon-link" href="/asset/logo-icon.png" />
<!-- Google tag (gtag.js) -->
<script
async
src="https://www.googletagmanager.com/gtag/js?id=G-PPE9RTDYDG"
></script>
<script>
window.dataLayer = window.dataLayer || [];
function gtag() {
dataLayer.push(arguments);
}
gtag("js", new Date());
gtag("config", "G-PPE9RTDYDG");
</script>
</head>
<body>
<div id="loading-overlay">
<img id="loading-logo" src="/asset/logo-icon.png" alt="Loading Logo" />
</div>
<iframe id="content-frame" src="about:blank"></iframe>
<div id="menu-dismiss-overlay"></div>
<div class="nav-container" id="nav-container">
<div class="nav-box" id="nav-box">
<div class="nav-box-content">
<i
class="current-page-icon ri-home-4-line"
id="current-page-icon"
></i>
<ul class="nav-list" id="nav-list"></ul>
</div>
</div>
<div class="side-actions">
<button class="side-action-btn" id="show-whats-new-btn">
<i class="ri-megaphone-line"></i>
</button>
<button class="side-action-btn" id="settings-btn">
<i class="ri-settings-3-line"></i>
</button>
</div>
</div>
<script src="script.js"></script>
<script>
document.addEventListener("DOMContentLoaded", () => {
const CLOAK_TAB_KEY = "tab_cloak_setting";
const AUTO_CLOAK_KEY = "auto_cloak_setting";
const CLOSE_PREVENT_KEY = "close_prevention_enabled";
const FAVICON_LINK = document.getElementById("favicon-link");
const CLOAK_PRESETS = {
vapor: { title: "VAPOR v4", favicon: FAVICON_LINK.href },
google: {
title: "Google",
favicon: "https://www.google.com/favicon.ico",
},
khanacademy: {
title: "Khan Academy | Free Online Courses, Lessons & Practice",
favicon: "https://www.khanacademy.org/favicon.ico",
},
desmos: {
title: "Desmos | Graphing Calculator",
favicon: "https://www.desmos.com/favicon.ico",
},
quizlet: {
title:
"Quizlet: Study Tools & Learning Resources for Students and Teachers | Quizlet",
favicon: "https://quizlet.com/favicon.ico",
},
wikipedia: {
title: "Wikipedia",
favicon: "https://en.wikipedia.org/favicon.ico",
},
classroom: {
title: "Google Classroom",
favicon:
"https://upload.wikimedia.org/wikipedia/commons/1/19/Google_Classroom_Logo.svg",
},
clever: {
title: "Clever",
favicon:
"https://s2.googleusercontent.com/s2/favicons?domain=clever.com&sz=32",
},
canvas: {
title: "Dashboard",
favicon: "https://www.instructure.com/favicon.ico",
},
schoology: {
title: "Schoology",
favicon:
"https://s2.googleusercontent.com/s2/favicons?domain=schoology.com&sz=32",
},
};
function applyTabCloak() {
const setting = localStorage.getItem(CLOAK_TAB_KEY) || "vapor";
const { title, favicon } =
CLOAK_PRESETS[setting] || CLOAK_PRESETS.vapor;
document.title = title;
FAVICON_LINK.href = favicon;
}
function setupClosePrevention() {
const isEnabled = localStorage.getItem(CLOSE_PREVENT_KEY) === "true";
if (isEnabled) {
window.onbeforeunload = () =>
"you cant see this message anyways
Open service 159.195.59.55:443 · dev.www.https.lola.vapor.my
2026-01-04 22:42
HTTP/1.1 200 OK
Accept-Ranges: bytes
Alt-Svc: h3=":443"; ma=2592000
Cache-Control: public, max-age=0
Content-Length: 5525
Content-Type: text/html; charset=UTF-8
Date: Sun, 04 Jan 2026 22:42:48 GMT
Etag: W/"1595-19b7c0fc8e8"
Last-Modified: Fri, 02 Jan 2026 00:16:07 GMT
Via: 1.1 Caddy
X-Powered-By: Express
Connection: close
Page title: VAPOR v4
<!DOCTYPE html>
<!-- hello! -->
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>VAPOR v4</title>
<link href="/style/all.css" rel="stylesheet" />
<script src="/script/theme.js"></script>
<!--main stylesheet-->
<link href="style.css" rel="stylesheet" />
<link rel="icon" id="favicon-link" href="/asset/logo-icon.png" />
<!-- Google tag (gtag.js) -->
<script
async
src="https://www.googletagmanager.com/gtag/js?id=G-PPE9RTDYDG"
></script>
<script>
window.dataLayer = window.dataLayer || [];
function gtag() {
dataLayer.push(arguments);
}
gtag("js", new Date());
gtag("config", "G-PPE9RTDYDG");
</script>
</head>
<body>
<div id="loading-overlay">
<img id="loading-logo" src="/asset/logo-icon.png" alt="Loading Logo" />
</div>
<iframe id="content-frame" src="about:blank"></iframe>
<div id="menu-dismiss-overlay"></div>
<div class="nav-container" id="nav-container">
<div class="nav-box" id="nav-box">
<div class="nav-box-content">
<i
class="current-page-icon ri-home-4-line"
id="current-page-icon"
></i>
<ul class="nav-list" id="nav-list"></ul>
</div>
</div>
<div class="side-actions">
<button class="side-action-btn" id="show-whats-new-btn">
<i class="ri-megaphone-line"></i>
</button>
<button class="side-action-btn" id="settings-btn">
<i class="ri-settings-3-line"></i>
</button>
</div>
</div>
<script src="script.js"></script>
<script>
document.addEventListener("DOMContentLoaded", () => {
const CLOAK_TAB_KEY = "tab_cloak_setting";
const AUTO_CLOAK_KEY = "auto_cloak_setting";
const CLOSE_PREVENT_KEY = "close_prevention_enabled";
const FAVICON_LINK = document.getElementById("favicon-link");
const CLOAK_PRESETS = {
vapor: { title: "VAPOR v4", favicon: FAVICON_LINK.href },
google: {
title: "Google",
favicon: "https://www.google.com/favicon.ico",
},
khanacademy: {
title: "Khan Academy | Free Online Courses, Lessons & Practice",
favicon: "https://www.khanacademy.org/favicon.ico",
},
desmos: {
title: "Desmos | Graphing Calculator",
favicon: "https://www.desmos.com/favicon.ico",
},
quizlet: {
title:
"Quizlet: Study Tools & Learning Resources for Students and Teachers | Quizlet",
favicon: "https://quizlet.com/favicon.ico",
},
wikipedia: {
title: "Wikipedia",
favicon: "https://en.wikipedia.org/favicon.ico",
},
classroom: {
title: "Google Classroom",
favicon:
"https://upload.wikimedia.org/wikipedia/commons/1/19/Google_Classroom_Logo.svg",
},
clever: {
title: "Clever",
favicon:
"https://s2.googleusercontent.com/s2/favicons?domain=clever.com&sz=32",
},
canvas: {
title: "Dashboard",
favicon: "https://www.instructure.com/favicon.ico",
},
schoology: {
title: "Schoology",
favicon:
"https://s2.googleusercontent.com/s2/favicons?domain=schoology.com&sz=32",
},
};
function applyTabCloak() {
const setting = localStorage.getItem(CLOAK_TAB_KEY) || "vapor";
const { title, favicon } =
CLOAK_PRESETS[setting] || CLOAK_PRESETS.vapor;
document.title = title;
FAVICON_LINK.href = favicon;
}
function setupClosePrevention() {
const isEnabled = localStorage.getItem(CLOSE_PREVENT_KEY) === "true";
if (isEnabled) {
window.onbeforeunload = () =>
"you cant see this message anyways
Open service 159.195.59.55:80 · dev.www.https.lola.vapor.my
2026-01-04 22:42
HTTP/1.1 308 Permanent Redirect Connection: close Location: https://dev.www.https.lola.vapor.my/ Server: Caddy Date: Sun, 04 Jan 2026 22:42:48 GMT Content-Length: 0
Open service 104.36.84.18:443 · dev.www.https.lola.vapor.my
2026-01-01 21:18
HTTP/1.1 200 OK
Accept-Ranges: bytes
Alt-Svc: h3=":443"; ma=2592000
Cache-Control: public, max-age=0
Content-Length: 26457
Content-Type: text/html; charset=UTF-8
Date: Thu, 01 Jan 2026 21:18:48 GMT
Etag: W/"6759-19b2e2c7c1d"
Last-Modified: Wed, 17 Dec 2025 21:17:05 GMT
Via: 1.1 Caddy
X-Powered-By: Express
Connection: close
Page title: Prism
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>Prism</title>
<link href="/css/all.css" rel="stylesheet" />
<script src="/js/init.js"></script>
<meta name="title" content="📐 Prism" />
<meta name="description" content="A paradigm of unbl๐cking possibilities." />
<link rel="icon" type="image/svg+xml" href="/assets/logo/icon.svg" />
<meta property="og:type" content="website" />
<meta property="og:title" content="📐 Prism" />
<meta property="og:description" content="A paradigm of unbl๐cking possibilities." />
<meta name="theme-color" content="#b065ff" />
<meta name="twitter:card" content="summary_large_image" />
<meta name="twitter:title" content="📐 Prism" />
<meta name="twitter:description" content="A paradigm of unbl๐cking possibilities." />
<meta name="robots" content="index, follow" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<!-- Google tag (gtag.js) -->
<script async src="https://www.googletagmanager.com/gtag/js?id=G-P1GKL19WMP"></script>
<script>
window.dataLayer = window.dataLayer || [];
function gtag(){dataLayer.push(arguments);}
gtag('js', new Date());
gtag('config', 'G-P1GKL19WMP');
</script>
<script data-goatcounter="https://prismonl.goatcounter.com/count"
async src="//gc.zgo.at/count.js"></script>
<script>
const CLOAK_PRESETS = {
prism: { title: "Prism", favicon: "/assets/logo/icon.svg" },
google: { title: "Google", favicon: "https://www.google.com/favicon.ico" },
gmail: {
title: "Gmail",
favicon: "https://ssl.gstatic.com/ui/v1/icons/mail/rfr/gmail.ico",
},
"google-docs": {
title: "Google Docs",
favicon: "https://ssl.gstatic.com/docs/documents/images/kix-favicon7.ico",
},
"google-sheets": {
title: "Google Sheets",
favicon: "https://ssl.gstatic.com/docs/spreadsheets/favicon_jfk2.png",
},
"google-slides": {
title: "Google Slides",
favicon: "https://ssl.gstatic.com/docs/presentations/images/favicon5.ico",
},
"google-drive": {
title: "My Drive - Google Drive",
favicon:
"https://ssl.gstatic.com/docs/doclist/images/drive_2022q3_32dp.png",
},
"google-classroom": {
title: "Google Classroom",
favicon: "https://ssl.gstatic.com/classroom/favicon.png",
},
youtube: { title: "YouTube", favicon: "https://www.youtube.com/favicon.ico" },
schoology: {
title: "Schoology",
favicon:
"https://asset-cdn.schoology.com/sites/all/themes/schoology_theme/favicon.ico",
},
canvas: {
title: "Canvas",
favicon:
"https://du11hjcvx0uqb.cloudfront.net/dist/images/favicon-e10d657a73.ico",
},
canva: {
title: "Canva",
favicon: "https://static.canva.com/static/images/favicon.ico",
},
clever: {
title: "Clever | Select your School",
favicon:
"https://www.clever.com/wp-content/uploads/2023/06/cropped-Favicon-512px-192x192.png",
},
"khan-academy": {
title: "Khan Academy",
favicon: "https://www.khanacademy.org/favicon.ico",
},
kahoot: {
title: "Enter Game PIN - Kahoot!",
favicon: "https://assets-cdn.kahoot.it/controller/v2/favicon.ico",
},
gimkit: {
title: "Play Gimkit! - Enter game code here | Gimkit",
favicon: "https://www.gimkit.com/favicon.33200140.png",
},
blooket: {
title: "Play Blooket | Blooket",
favicon: "https://play.blooket.com/favicon.ico",
},
github: { title: "GitHub", favicon: "https://github.com/favicon.ico" },
wikipedia: {
title: "Wikipedia",
favicon: "https://www.wikipedia.org/favicon.ico",
},
"stack-overflow": {
title: "Stack Overflow",
favicon: "https://stackoverflow.com/favicon.ico",
},
microsoft: {
title: "Microsoft",
favicon: "https://www.microsoft.com/favicon.ico",
},
};
let isClosingPreventionEnabled = false