UploadServer
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65227b4e0f94
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true ignorecase = true precomposeunicode = true [remote "origin"] url = git@github.com:aira/explorer-ui.git fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0
Open service 34.107.248.43:80 · explorer.aira.io
2026-01-05 02:52
HTTP/1.1 301 Moved Permanently Cache-Control: private Location: https://explorer.aira.io:443/ Content-Length: 0 Date: Mon, 05 Jan 2026 02:52:31 GMT Content-Type: text/html; charset=UTF-8 Connection: close
Open service 34.107.248.43:443 · explorer.aira.io
2026-01-05 02:52
HTTP/1.1 200 OK
x-guploader-uploadid: AHVrFxNe_BfLeZXoULPb85wnryjIRJE6sHOzLLNGVkkoZ7D39BRqPdlH9B7vGmdfHplTUgw5cTMBBfU
x-goog-generation: 1766102685282053
x-goog-metageneration: 3
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3773
x-goog-meta-goog-reserved-file-mtime: 1766102620
x-goog-hash: crc32c=jyNtoA==
x-goog-hash: md5=bsAX1WZSuekZ+gPBr3LKEQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
Content-Length: 3773
server: UploadServer
via: 1.1 google
date: Mon, 05 Jan 2026 02:52:31 GMT
Last-Modified: Fri, 19 Dec 2025 00:04:45 GMT
ETag: "6ec017d56652b9e919fa03c1af72ca11"
Content-Type: text/html
Age: 0
Cache-Control: public,no-cache,must-revalidate
Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; object-src 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Connection: close
Page title: Loading - Aira Explorer
<!DOCTYPE html>
<html>
<head>
<!--
If you are serving your web app in a path other than the root, change the
href value below to reflect the base path you are serving from.
The path provided below has to start and end with a slash "/" in order for
it to work correctly.
For more details:
* https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base
This is a placeholder for base href that will be replaced by the value of
the `--base-href` argument provided to `flutter build`.
-->
<base href="/">
<meta charset="UTF-8">
<meta content="IE=Edge" http-equiv="X-UA-Compatible">
<meta name="description" content="Visual Information On Demand">
<!-- iOS meta tags & icons -->
<meta name="mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="black">
<meta name="apple-mobile-web-app-title" content="Aira Explorer">
<link rel="apple-touch-icon" sizes="57x57" href="icons/apple-icon-57x57.png?v=v4.10.5_4887">
<link rel="apple-touch-icon" sizes="60x60" href="icons/apple-icon-60x60.png?v=v4.10.5_4887">
<link rel="apple-touch-icon" sizes="72x72" href="icons/apple-icon-72x72.png?v=v4.10.5_4887">
<link rel="apple-touch-icon" sizes="76x76" href="icons/apple-icon-76x76.png?v=v4.10.5_4887">
<link rel="apple-touch-icon" sizes="114x114" href="icons/apple-icon-114x114.png?v=v4.10.5_4887">
<link rel="apple-touch-icon" sizes="120x120" href="icons/apple-icon-120x120.png?v=v4.10.5_4887">
<link rel="apple-touch-icon" sizes="144x144" href="icons/apple-icon-144x144.png?v=v4.10.5_4887">
<link rel="apple-touch-icon" sizes="152x152" href="icons/apple-icon-152x152.png?v=v4.10.5_4887">
<link rel="apple-touch-icon" sizes="180x180" href="icons/apple-icon-180x180.png?v=v4.10.5_4887">
<!-- Favicon -->
<link rel="icon" type="image/png" sizes="16x16" href="icons/favicon-16x16.png?v=v4.10.5_4887">
<link rel="icon" type="image/png" sizes="32x32" href="icons/favicon-32x32.png?v=v4.10.5_4887">
<link rel="icon" type="image/png" sizes="96x96" href="icons/favicon-96x96.png?v=v4.10.5_4887">
<link rel="icon" type="image/png" sizes="192x192" href="icons/android-icon-192x192.png?v=v4.10.5_4887">
<title>Loading - Aira Explorer</title>
<link rel="manifest" href="manifest.json?v=v4.10.5_4887">
<!-- This script is used by the library flutter_inappwebview -->
<script type="application/javascript" src="/assets/packages/flutter_inappwebview_web/assets/web/web_support.js?v=v4.10.5_4887" defer></script>
<!-- This script is used by the library flutter_image_compress -->
<script src="https://cdn.jsdelivr.net/npm/pica@9.0.1/dist/pica.min.js"
integrity="sha384-erKD4aAW95PJjutWX+eFrsIh9Kl6k9mLJ89rDrWhF2/EvCdxqe2aR5tDaI4SIFl/"
crossorigin="anonymous">
</script>
</head>
<body>
<script>
(function(b,r,a,n,c,h,_,s,d,k){if(!b[n]||!b[n]._q){for(;s<_.length;)c(h,_[s++]);d=r.createElement(a);d.async=1;d.src="https://cdn.branch.io/branch-latest.min.js";k=r.getElementsByTagName(a)[0];k.parentNode.insertBefore(d,k);b[n]=h}})(window,document,"script","branch",function(b,r){b[r]=function(){b._q.push([r,arguments])}},{_q:[],_v:1},"addListener applyCode autoAppIndex banner closeBanner closeJourney creditHistory credits data deepview deepviewCta first getCode init link logout redeem referrals removeListener sendSMS setBranchViewData setIdentity track validateCode trackCommerceEvent logEvent disableTracking".split(" "), 0);
// Branch.io key is injected by scripts/inject-branch-key.sh during build
// Default key below is for development - will be replaced based on flavor
branch.init('key_live_miqSyR1Y4JbGERy6boff9ifpzqdIKv9D');
</script>
<script src="flutter_bootstrap.v4.10.5_4887.js" async></script>
</body>
</html>