The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652289bbbcb8
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/norregaard/hot-stuff fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http "https://github.com/"] extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX1hMc211RWxncXVIdXZCc0I4S0pzbHhna0FNTHdMNTNQa1JITw== [branch "main"] remote = origin merge = refs/heads/main
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522f46ecd4f
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/norregaard/hot-stuff fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http "https://github.com/"] extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX2wwR0w3OUIyMmNIbWNvQmF3UUlwZGZYR0F3OXFyNzJTYnNHeA== [branch "main"] remote = origin merge = refs/heads/main
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652225da0839
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/norregaard/hot-stuff fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http "https://github.com/"] extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzXzRGVFJiZGpHZWlpamZNano1Smg2SG1hUjBFTjQxNTFVRU5NTw== [branch "main"] remote = origin merge = refs/heads/main
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652220791afb
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/norregaard/hot-stuff fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http "https://github.com/"] extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX0pkTE9XNDBKZkdCSUFKdlVnaVlLUzNhMlh6YjE4eDJOSTFhZw== [branch "main"] remote = origin merge = refs/heads/main
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65223a639e8a
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/norregaard/hot-stuff fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http "https://github.com/"] extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX0dGNzBZeHJSZGUxSjY5eW0wVGM5QkY3NGtXN0tudjFEYzRVdg== [branch "main"] remote = origin merge = refs/heads/main
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522205bfe48
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/norregaard/hot-stuff fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http "https://github.com/"] extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX0VWeWsxaWpSSlVSd0l3TmFMaGFUd25EdXVhSDhEZzFJdGFEeQ== [branch "main"] remote = origin merge = refs/heads/main
Open service 51.124.12.35:443 · hotstuff.vi-tips.com
2026-01-09 12:25
HTTP/1.1 200 OK
Content-Length: 11479
Connection: close
Content-Type: text/html
Date: Fri, 09 Jan 2026 12:26:15 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "66164007"
Last-Modified: Tue, 30 Dec 2025 12:21:43 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Hot Stuff — Projects
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title>Hot Stuff — Projects</title>
<meta name="description" content="A simple hub linking to mini web projects." />
<link rel="apple-touch-icon" sizes="180x180" href="/assets/favicons/apple-touch-icon.png" />
<link rel="icon" type="image/png" sizes="32x32" href="/assets/favicons/favicon-32x32.png" />
<link rel="icon" type="image/png" sizes="16x16" href="/assets/favicons/favicon-16x16.png" />
<link rel="manifest" href="/assets/favicons/site.webmanifest" />
<link rel="shortcut icon" href="/assets/favicons/favicon.ico" />
<style>
:root {
color-scheme: light dark;
--bg: #070512;
--fg: #f7f8ff;
--muted: rgba(247, 248, 255, 0.7);
--accent: #ff6f61;
--accent-2: #7a5cff;
--card-bg: rgba(16, 14, 34, 0.78);
--card-border: rgba(255, 255, 255, 0.1);
--shadow: rgba(9, 6, 24, 0.35);
--font: "Inter", "Segoe UI", system-ui, -apple-system, sans-serif;
}
@media (prefers-color-scheme: light) {
:root {
--bg: #f3f5ff;
--fg: #15131f;
--muted: rgba(21, 19, 31, 0.65);
--card-bg: rgba(255, 255, 255, 0.88);
--card-border: rgba(21, 19, 31, 0.08);
--shadow: rgba(31, 28, 62, 0.12);
}
}
* {
box-sizing: border-box;
}
body {
margin: 0;
min-height: 100vh;
font-family: var(--font);
color: var(--fg);
background-color: var(--bg);
line-height: 1.6;
position: relative;
}
body::before {
content: "";
position: fixed;
inset: 0;
background:
radial-gradient(110% 110% at 90% -10%, rgba(255, 111, 97, 0.22), transparent 70%),
radial-gradient(120% 120% at 0% 10%, rgba(122, 92, 255, 0.28), transparent 70%),
radial-gradient(140% 140% at 50% 110%, rgba(0, 181, 173, 0.18), transparent 70%);
z-index: -2;
animation: pulse 18s ease-in-out infinite alternate;
}
body::after {
content: "";
position: fixed;
inset: 0;
background: linear-gradient(180deg, rgba(4, 3, 9, 0.5) 0%, transparent 30%), linear-gradient(0deg, rgba(4, 3, 9, 0.35) 0%, transparent 45%);
z-index: -1;
pointer-events: none;
}
@keyframes pulse {
0% {
transform: translate3d(0, -12px, 0) scale(1);
}
100% {
transform: translate3d(0, 12px, 0) scale(1.04);
}
}
main.page {
max-width: 1000px;
margin: 0 auto;
padding: clamp(2.75rem, 5vw, 4.25rem) 1.5rem 4rem;
display: flex;
flex-direction: column;
gap: clamp(2.5rem, 5vw, 3.5rem);
position: relative;
}
.hero {
position: relative;
padding: clamp(2.6rem, 6vw, 4rem);
border-radius: 26px;
background: var(--card-bg);
border: 1px solid var(--card-border);
box-shadow: 0 22px 60px var(--shadow);
overflow: hidden;
}
.hero::after {
content: "";
position: absolute;
inset: -40% 10% 30% -30%;
background: radial-gradient(circle at 25% 25%, rgba(122, 92, 255, 0.28), transparent 65%);
opacity: 0.9;
z-index: -1;
}
.hero .orb {
position: absolute;
width: 260px;
height: 260px;
top: -120px;
right: -70px;
background: radial-gradient(circle, rgba(255, 111, 97, 0.65) 0%, transparent 70%);
filter: blur(0);
opacity: 0.85;
animation: drift 12s ease-in-out infinite alternate;
}
@keyframes drift {
0% {
transform: translate3d(0, 0, 0) rotate(0deg) scale(1);
}
100% {
transform: translate3d(-20px, 18px, 0) rotate(6deg) scale(1.08);
}
}
.badge {
display: inline-flex;
align-items: ce
Open service 51.124.12.35:443 · hotstuff.vi-tips.com
2026-01-02 20:29
HTTP/1.1 200 OK
Content-Length: 11479
Connection: close
Content-Type: text/html
Date: Fri, 02 Jan 2026 20:29:25 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "66164007"
Last-Modified: Tue, 30 Dec 2025 12:21:43 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Hot Stuff — Projects
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title>Hot Stuff — Projects</title>
<meta name="description" content="A simple hub linking to mini web projects." />
<link rel="apple-touch-icon" sizes="180x180" href="/assets/favicons/apple-touch-icon.png" />
<link rel="icon" type="image/png" sizes="32x32" href="/assets/favicons/favicon-32x32.png" />
<link rel="icon" type="image/png" sizes="16x16" href="/assets/favicons/favicon-16x16.png" />
<link rel="manifest" href="/assets/favicons/site.webmanifest" />
<link rel="shortcut icon" href="/assets/favicons/favicon.ico" />
<style>
:root {
color-scheme: light dark;
--bg: #070512;
--fg: #f7f8ff;
--muted: rgba(247, 248, 255, 0.7);
--accent: #ff6f61;
--accent-2: #7a5cff;
--card-bg: rgba(16, 14, 34, 0.78);
--card-border: rgba(255, 255, 255, 0.1);
--shadow: rgba(9, 6, 24, 0.35);
--font: "Inter", "Segoe UI", system-ui, -apple-system, sans-serif;
}
@media (prefers-color-scheme: light) {
:root {
--bg: #f3f5ff;
--fg: #15131f;
--muted: rgba(21, 19, 31, 0.65);
--card-bg: rgba(255, 255, 255, 0.88);
--card-border: rgba(21, 19, 31, 0.08);
--shadow: rgba(31, 28, 62, 0.12);
}
}
* {
box-sizing: border-box;
}
body {
margin: 0;
min-height: 100vh;
font-family: var(--font);
color: var(--fg);
background-color: var(--bg);
line-height: 1.6;
position: relative;
}
body::before {
content: "";
position: fixed;
inset: 0;
background:
radial-gradient(110% 110% at 90% -10%, rgba(255, 111, 97, 0.22), transparent 70%),
radial-gradient(120% 120% at 0% 10%, rgba(122, 92, 255, 0.28), transparent 70%),
radial-gradient(140% 140% at 50% 110%, rgba(0, 181, 173, 0.18), transparent 70%);
z-index: -2;
animation: pulse 18s ease-in-out infinite alternate;
}
body::after {
content: "";
position: fixed;
inset: 0;
background: linear-gradient(180deg, rgba(4, 3, 9, 0.5) 0%, transparent 30%), linear-gradient(0deg, rgba(4, 3, 9, 0.35) 0%, transparent 45%);
z-index: -1;
pointer-events: none;
}
@keyframes pulse {
0% {
transform: translate3d(0, -12px, 0) scale(1);
}
100% {
transform: translate3d(0, 12px, 0) scale(1.04);
}
}
main.page {
max-width: 1000px;
margin: 0 auto;
padding: clamp(2.75rem, 5vw, 4.25rem) 1.5rem 4rem;
display: flex;
flex-direction: column;
gap: clamp(2.5rem, 5vw, 3.5rem);
position: relative;
}
.hero {
position: relative;
padding: clamp(2.6rem, 6vw, 4rem);
border-radius: 26px;
background: var(--card-bg);
border: 1px solid var(--card-border);
box-shadow: 0 22px 60px var(--shadow);
overflow: hidden;
}
.hero::after {
content: "";
position: absolute;
inset: -40% 10% 30% -30%;
background: radial-gradient(circle at 25% 25%, rgba(122, 92, 255, 0.28), transparent 65%);
opacity: 0.9;
z-index: -1;
}
.hero .orb {
position: absolute;
width: 260px;
height: 260px;
top: -120px;
right: -70px;
background: radial-gradient(circle, rgba(255, 111, 97, 0.65) 0%, transparent 70%);
filter: blur(0);
opacity: 0.85;
animation: drift 12s ease-in-out infinite alternate;
}
@keyframes drift {
0% {
transform: translate3d(0, 0, 0) rotate(0deg) scale(1);
}
100% {
transform: translate3d(-20px, 18px, 0) rotate(6deg) scale(1.08);
}
}
.badge {
display: inline-flex;
align-items: ce
Open service 51.124.12.35:443 · hotstuff.vi-tips.com
2025-12-22 19:27
HTTP/1.1 200 OK
Content-Length: 10671
Connection: close
Content-Type: text/html
Date: Mon, 22 Dec 2025 19:27:49 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "29323658"
Last-Modified: Sun, 05 Oct 2025 10:28:12 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Hot Stuff — Projects
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title>Hot Stuff — Projects</title>
<meta name="description" content="A simple hub linking to mini web projects." />
<link rel="apple-touch-icon" sizes="180x180" href="/assets/favicons/apple-touch-icon.png" />
<link rel="icon" type="image/png" sizes="32x32" href="/assets/favicons/favicon-32x32.png" />
<link rel="icon" type="image/png" sizes="16x16" href="/assets/favicons/favicon-16x16.png" />
<link rel="manifest" href="/assets/favicons/site.webmanifest" />
<link rel="shortcut icon" href="/assets/favicons/favicon.ico" />
<style>
:root {
color-scheme: light dark;
--bg: #070512;
--fg: #f7f8ff;
--muted: rgba(247, 248, 255, 0.7);
--accent: #ff6f61;
--accent-2: #7a5cff;
--card-bg: rgba(16, 14, 34, 0.78);
--card-border: rgba(255, 255, 255, 0.1);
--shadow: rgba(9, 6, 24, 0.35);
--font: "Inter", "Segoe UI", system-ui, -apple-system, sans-serif;
}
@media (prefers-color-scheme: light) {
:root {
--bg: #f3f5ff;
--fg: #15131f;
--muted: rgba(21, 19, 31, 0.65);
--card-bg: rgba(255, 255, 255, 0.88);
--card-border: rgba(21, 19, 31, 0.08);
--shadow: rgba(31, 28, 62, 0.12);
}
}
* {
box-sizing: border-box;
}
body {
margin: 0;
min-height: 100vh;
font-family: var(--font);
color: var(--fg);
background-color: var(--bg);
line-height: 1.6;
position: relative;
}
body::before {
content: "";
position: fixed;
inset: 0;
background:
radial-gradient(110% 110% at 90% -10%, rgba(255, 111, 97, 0.22), transparent 70%),
radial-gradient(120% 120% at 0% 10%, rgba(122, 92, 255, 0.28), transparent 70%),
radial-gradient(140% 140% at 50% 110%, rgba(0, 181, 173, 0.18), transparent 70%);
z-index: -2;
animation: pulse 18s ease-in-out infinite alternate;
}
body::after {
content: "";
position: fixed;
inset: 0;
background: linear-gradient(180deg, rgba(4, 3, 9, 0.5) 0%, transparent 30%), linear-gradient(0deg, rgba(4, 3, 9, 0.35) 0%, transparent 45%);
z-index: -1;
pointer-events: none;
}
@keyframes pulse {
0% {
transform: translate3d(0, -12px, 0) scale(1);
}
100% {
transform: translate3d(0, 12px, 0) scale(1.04);
}
}
main.page {
max-width: 1000px;
margin: 0 auto;
padding: clamp(2.75rem, 5vw, 4.25rem) 1.5rem 4rem;
display: flex;
flex-direction: column;
gap: clamp(2.5rem, 5vw, 3.5rem);
position: relative;
}
.hero {
position: relative;
padding: clamp(2.6rem, 6vw, 4rem);
border-radius: 26px;
background: var(--card-bg);
border: 1px solid var(--card-border);
box-shadow: 0 22px 60px var(--shadow);
overflow: hidden;
}
.hero::after {
content: "";
position: absolute;
inset: -40% 10% 30% -30%;
background: radial-gradient(circle at 25% 25%, rgba(122, 92, 255, 0.28), transparent 65%);
opacity: 0.9;
z-index: -1;
}
.hero .orb {
position: absolute;
width: 260px;
height: 260px;
top: -120px;
right: -70px;
background: radial-gradient(circle, rgba(255, 111, 97, 0.65) 0%, transparent 70%);
filter: blur(0);
opacity: 0.85;
animation: drift 12s ease-in-out infinite alternate;
}
@keyframes drift {
0% {
transform: translate3d(0, 0, 0) rotate(0deg) scale(1);
}
100% {
transform: translate3d(-20px, 18px, 0) rotate(6deg) scale(1.08);
}
}
.badge {
display: inline-flex;
align-items: ce
Open service 51.124.12.35:443 · hotstuff.vi-tips.com
2025-12-20 20:13
HTTP/1.1 200 OK
Content-Length: 10671
Connection: close
Content-Type: text/html
Date: Sat, 20 Dec 2025 20:13:15 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "29323658"
Last-Modified: Sun, 05 Oct 2025 10:28:12 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Hot Stuff — Projects
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title>Hot Stuff — Projects</title>
<meta name="description" content="A simple hub linking to mini web projects." />
<link rel="apple-touch-icon" sizes="180x180" href="/assets/favicons/apple-touch-icon.png" />
<link rel="icon" type="image/png" sizes="32x32" href="/assets/favicons/favicon-32x32.png" />
<link rel="icon" type="image/png" sizes="16x16" href="/assets/favicons/favicon-16x16.png" />
<link rel="manifest" href="/assets/favicons/site.webmanifest" />
<link rel="shortcut icon" href="/assets/favicons/favicon.ico" />
<style>
:root {
color-scheme: light dark;
--bg: #070512;
--fg: #f7f8ff;
--muted: rgba(247, 248, 255, 0.7);
--accent: #ff6f61;
--accent-2: #7a5cff;
--card-bg: rgba(16, 14, 34, 0.78);
--card-border: rgba(255, 255, 255, 0.1);
--shadow: rgba(9, 6, 24, 0.35);
--font: "Inter", "Segoe UI", system-ui, -apple-system, sans-serif;
}
@media (prefers-color-scheme: light) {
:root {
--bg: #f3f5ff;
--fg: #15131f;
--muted: rgba(21, 19, 31, 0.65);
--card-bg: rgba(255, 255, 255, 0.88);
--card-border: rgba(21, 19, 31, 0.08);
--shadow: rgba(31, 28, 62, 0.12);
}
}
* {
box-sizing: border-box;
}
body {
margin: 0;
min-height: 100vh;
font-family: var(--font);
color: var(--fg);
background-color: var(--bg);
line-height: 1.6;
position: relative;
}
body::before {
content: "";
position: fixed;
inset: 0;
background:
radial-gradient(110% 110% at 90% -10%, rgba(255, 111, 97, 0.22), transparent 70%),
radial-gradient(120% 120% at 0% 10%, rgba(122, 92, 255, 0.28), transparent 70%),
radial-gradient(140% 140% at 50% 110%, rgba(0, 181, 173, 0.18), transparent 70%);
z-index: -2;
animation: pulse 18s ease-in-out infinite alternate;
}
body::after {
content: "";
position: fixed;
inset: 0;
background: linear-gradient(180deg, rgba(4, 3, 9, 0.5) 0%, transparent 30%), linear-gradient(0deg, rgba(4, 3, 9, 0.35) 0%, transparent 45%);
z-index: -1;
pointer-events: none;
}
@keyframes pulse {
0% {
transform: translate3d(0, -12px, 0) scale(1);
}
100% {
transform: translate3d(0, 12px, 0) scale(1.04);
}
}
main.page {
max-width: 1000px;
margin: 0 auto;
padding: clamp(2.75rem, 5vw, 4.25rem) 1.5rem 4rem;
display: flex;
flex-direction: column;
gap: clamp(2.5rem, 5vw, 3.5rem);
position: relative;
}
.hero {
position: relative;
padding: clamp(2.6rem, 6vw, 4rem);
border-radius: 26px;
background: var(--card-bg);
border: 1px solid var(--card-border);
box-shadow: 0 22px 60px var(--shadow);
overflow: hidden;
}
.hero::after {
content: "";
position: absolute;
inset: -40% 10% 30% -30%;
background: radial-gradient(circle at 25% 25%, rgba(122, 92, 255, 0.28), transparent 65%);
opacity: 0.9;
z-index: -1;
}
.hero .orb {
position: absolute;
width: 260px;
height: 260px;
top: -120px;
right: -70px;
background: radial-gradient(circle, rgba(255, 111, 97, 0.65) 0%, transparent 70%);
filter: blur(0);
opacity: 0.85;
animation: drift 12s ease-in-out infinite alternate;
}
@keyframes drift {
0% {
transform: translate3d(0, 0, 0) rotate(0deg) scale(1);
}
100% {
transform: translate3d(-20px, 18px, 0) rotate(6deg) scale(1.08);
}
}
.badge {
display: inline-flex;
align-items: ce