Apache
tcp/443 tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c815f2c5
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@github.com:Sparx-Publishing-Group/cloudflare-php.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c815f2c5
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@github.com:Sparx-Publishing-Group/cloudflare-php.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 34.214.13.63:443 · ipv4.sparxpg.com
2026-01-04 00:01
HTTP/1.1 200 OK
Date: Sun, 04 Jan 2026 00:01:20 GMT
Server: Apache
X-Powered-By: PHP/7.3.15
X-Frame-Options: SAMEORIGIN
X-Mod-Pagespeed: 1.13.35.2-0
Vary: Accept-Encoding
Cache-Control: max-age=0, no-cache, s-maxage=10
Content-Length: 2477
Connection: close
Content-Type: text/html; charset=UTF-8
Page title: SparxPG IP Whitelist
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="robots" content="noindex">
<link rel="stylesheet" href="./Assets/Styles/main.css">
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
<link href="https://fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap" rel="stylesheet">
<title>SparxPG IP Whitelist</title>
</head>
<body>
<main>
<!-- Success Modal when successful whitelisting of -->
<section id="success__modal__container">
<section id="success__modal">
<p id="success__modal__message"></p>
<button id="success__modal__button">OK</button>
</section>
</section>
<!-- Main Whitelisting FORM -->
<form id="form" method="POST" name="whitelist-form">
<img id="logo" src="./Assets/Images/sparx-logo.png"/>
<p id="form-error"></p>
<label for="name">Network Name</label>
<input type="text" class="name" name="name" id="name" maxlength="30" value="">
<label for="password">Password</label>
<input class="password" type="password" name="password" id="password" maxlength="30">
<label for="ip">IP Address (leave empty for auto collect)</label>
<input class="name" name="ip" id="ip" maxlength="256">
<section class="captcha__container">
<input id="captcha__box" type="checkbox" name="captcha_box" value="1">
<label for="captcha_box">I'm not a Robot</label>
</section>
<section id="captcha__img__container">
<img id="captcha__img" src="./Helpers/captcha.php?rand=969041956" id='captcha_image'>
<p>Can't read the image? <span id="recaptcha__text">click here</span> to refresh</p>
<label for="captcha__input"> Enter Captcha</label>
<input name="captcha__input" type="text" id="captcha__input">
</section>
<input id='formSubmitBtn' type="submit">
</form>
</main>
<script src="./Controllers/main.js" type="module"></script>
</body>
</html>
Open service 34.214.13.63:80 · ipv4.sparxpg.com
2026-01-04 00:01
HTTP/1.1 200 OK
Date: Sun, 04 Jan 2026 00:01:21 GMT
Server: Apache
X-Powered-By: PHP/7.3.15
X-Frame-Options: SAMEORIGIN
X-Mod-Pagespeed: 1.13.35.2-0
Vary: Accept-Encoding
Cache-Control: max-age=0, no-cache, s-maxage=10
Content-Length: 4250
Connection: close
Content-Type: text/html; charset=UTF-8
Page title: SparxPG IP Whitelist
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="robots" content="noindex">
<style>*{padding:0;margin:0;font-family:"Roboto",sans-serif}main{background-color:#413b3b;height:100vh;width:100vw;display:flex;justify-content:center;align-items:center}form{background-color:#fff;display:flex;flex-direction:column;padding:40px 50px;border-radius:5px;max-width:300px}form>img{width:170px;height:auto;margin-bottom:20px;align-self:center}#form .name,#form .password{border:1px solid #a29b9b}label{font-weight:600;margin-bottom:5px}input{box-sizing:border-box;height:30px;width:300px;font-size:20px;padding:3px 5px}input[type="submit"]{margin-top:10px;background:#20acd4;border:0;color:#fff;height:34px}input:disabled{opacity:.7}input:not(:last-child) {margin-bottom:12px}.captcha__container{display:flex;align-items:center;background:#e6dddd;padding:5px;border:1px solid #777272}.captcha__container label{margin-left:10px;font-weight:400}.captcha__container input{margin:0;padding:0;width:30px;height:24px;border:1px solid #3c3a3a}#captcha__img{margin-top:20px;height:80px}#captcha__img__container{display:none}#captcha__img__container label{margin-top:20px}#recaptcha__text{color:#20acd4}#recaptcha__text:hover{cursor:pointer}#form-error,#attempts{display:none;margin:5px 0;color:#ff6347}#formSubmitBtn:hover,#captcha__box:hover{cursor:pointer}#success__modal__container{display:none;width:100%;height:100%;position:absolute;top:0;left:0;justify-content:center;align-items:center;background-color:rgba(0,0,0,.741)}#success__modal{height:120px;width:380px;padding:10px;background:#fff;border-radius:5px;display:flex;flex-direction:column;justify-content:center;align-items:center}#success__modal>button{background:#20acd4;padding:5px 15px;font-size:20px;color:#fff;border:none;cursor:pointer;margin-top:20px}#success__modal__message{text-align:center}</style>
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
<link href="https://fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap" rel="stylesheet">
<title>SparxPG IP Whitelist</title>
</head>
<body>
<main>
<!-- Success Modal when successful whitelisting of -->
<section id="success__modal__container">
<section id="success__modal">
<p id="success__modal__message"></p>
<button id="success__modal__button">OK</button>
</section>
</section>
<!-- Main Whitelisting FORM -->
<form id="form" method="POST" name="whitelist-form">
<img id="logo" src="Assets/Images/xsparx-logo.png.pagespeed.ic.9ivKxa7fwt.png"/>
<p id="form-error"></p>
<label for="name">Network Name</label>
<input type="text" class="name" name="name" id="name" maxlength="30" value="">
<label for="password">Password</label>
<input class="password" type="password" name="password" id="password" maxlength="30">
<label for="ip">IP Address (leave empty for auto collect)</label>
<input class="name" name="ip" id="ip" maxlength="256">
<section class="captcha__container">
<input id="captcha__box" type="checkbox" name="captcha_box" value="1">
<label for="captcha_box">I'm not a Robot</label>
</section>
<section id="captcha__img__container">
<img id="captcha__img" src="./Helpers/captcha.php?rand=1415182121" id='captcha_image'>
<p>Can't read the image? <span id="recaptcha__text">click here</span> to refresh</p>
<label for="captcha__input"> Enter Captcha</label>
<input name="captcha__input" type="text" id="captcha__input">
</section>
<input id='formSubmitBtn