Apache
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226ae3d73c
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/kevins-cis/ccc.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 35.179.41.77:443 ยท fcc.fluidfillmatic.nl
2026-01-08 19:00
HTTP/1.1 200 OK
Date: Thu, 08 Jan 2026 19:00:23 GMT
Server: Apache
X-Powered-By: PHP/7.3.15
X-Frame-Options: SAMEORIGIN
X-Mod-Pagespeed: 1.13.35.2-0
Vary: Accept-Encoding
X-Frame-Options: ALLOW-FROM https://www.my-act.co.uk/
Content-Security-Policy: frame-ancestors https://www.my-act.co.uk/ 'self';
Cache-Control: max-age=0, no-cache, s-maxage=10
Content-Length: 4318
Connection: close
Content-Type: text/html; charset=UTF-8
Page title: Fluid Care Companion
<!DOCTYPE html>
<html>
<head>
<title>Fluid Care Companion</title>
<meta name="viewport" content="width=device-width, initial-scale=1">
<!--Made with love by Mutiullah Samim -->
<!--Bootsrap 4 CDN-->
<link rel="stylesheet" href="css/bootstrap.css">
<link rel="apple-touch-icon" sizes="180x180" href="image/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="image/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="image/favicon-16x16.png">
<link rel="mask-icon" href="image/safari-pinned-tab.svg" color="#5bbad5">
<meta name="msapplication-TileColor" content="#00aba9">
<link rel="manifest" href="manifest.json">
<!--Fontawesome CDN-->
<link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.3.1/css/all.css" integrity="sha384-mzrmE5qonljUremFsqc01SB46JvROS7bZs3IO2EmfFsd15uHvIt+Y8vEf7N7fWAU" crossorigin="anonymous">
<!--Custom styles-->
<link rel="stylesheet" type="text/css" href="css/styles.css">
<script src="//cdnjs.cloudflare.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script>
<script src="https://code.jquery.com/ui/1.11.4/jquery-ui.js" integrity="sha256-DI6NdAhhFRnO2k51mumYeDShet3I8AKCQf/tf7ARNhI=" crossorigin="anonymous"></script>
<!--Bootstrap CDN-->
<link href="//maxcdn.bootstrapcdn.com/bootstrap/4.1.1/css/bootstrap.min.css" rel="stylesheet" id="bootstrap-css">
</head>
<body class="login-page">
<div class="container">
<div class="d-flex justify-content-center h-100">
<div class="card">
<div class="card-header">
<div class="row">
<div class="col-2">
<img style="height:50px" src="image/android-chrome-192x192.png">
</div>
<div class="col-10 my-auto">
<h4 class="links"><b>Fluid Control Companion</b></h4>
</div>
</div>
</div>
<div id="login_card" class="card-body">
<div class="input-group mt-3 form-group">
<div class="input-group-prepend">
<span class="input-group-text"><i class="fas fa-at"></i></span>
</div>
<input type="text" id="email" class="form-control" placeholder="email">
</div>
<div class="input-group form-group">
<div class="input-group-prepend">
<span class="input-group-text">
<i class="fas fa-key"></i>
</span>
</div>
<input type="password" id="password" class="form-control" placeholder="password">
</div>
<div class="form-group">
<button id="login" class="btn btn-block login_btn">Login</button>
</div>
</div>
<div class="card-footer">
<div class="d-flex justify-content-center links">
Don't know your login?
</div>
<div class="d-flex justify-content-center links">
Email:
<a href="mailto:aftersales@rhenuslub.nl"><b>aftersales@rhenuslub.nl</b></a>
</div>
</div>
</div>
</div>
<!-- Footer -->
<footer class="page-footer">
<!-- Copyright -->
<div class="footer-copyright text-center py-3">
<strong>Fluid Fill Systems B.V.</strong> +31 318-596184
</div>
</footer>
</body>
<script>
function check_password(e) {
var email = $("#email").val().toLowerCase();
var datastring = "email="+email+"&password="+$("#password").val();
console.log(datastring)
$.ajax({
type: "POST",
url: "config/verify.php",
data: datastring,
cache: false,
success: function (response) {
console.log(response);
result = JSON.parse(response);
//console.log(result);
if (result['check'] == true) {
console.log(e);
if (e == 'pop') {
'use strict';
let params = `scrollbars=yes,resizable=no,status=no,location=no,toolbar=no,menubar=no,
width=375,height=667,left=100,top=100`;
open('start.php', 'test', params);
} else {
window.location = "start.php";
}
} else {
$( "#login_card" ).effect( "shake" );
}
}
});
};
$("#password").keydown(function(e) {
if (e.which == 13) {
check_password();
}
});
$("#login").click(function() {
check_password("");
});
$("#login_pop").click(function() {
check_password("");
});
// CODELAB: Register service worker.
if ('serviceWor