The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ba71fa7a
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@bitbucket.org:nesiagamedev/lottousa.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 199.59.243.228:443 · ww25.montana.lottousa.live
2026-01-25 11:48
HTTP/1.1 200 OK
Date: Sun, 25 Jan 2026 11:48:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1078
X-Request-Id: 85853076-6d4b-436f-9c4b-19c24263697c
Cache-Control: no-store, max-age=0
Accept-Ch: sec-ch-prefers-color-scheme
Critical-Ch: sec-ch-prefers-color-scheme
Vary: sec-ch-prefers-color-scheme
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_uiUHEAsWKytkhSMLdn1nDU2miT4ghUXIGywsI6v7G/hmsbIZRplqRetK2mzfOZFXKFKN/I6VgezCbrWc2wkHZQ==
Set-Cookie: parking_session=85853076-6d4b-436f-9c4b-19c24263697c; expires=Sun, 25 Jan 2026 12:03:07 GMT; path=/
Connection: close
<!doctype html>
<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_uiUHEAsWKytkhSMLdn1nDU2miT4ghUXIGywsI6v7G/hmsbIZRplqRetK2mzfOZFXKFKN/I6VgezCbrWc2wkHZQ==" lang="en" style="background: #2B2B2B;">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC">
<link rel="preconnect" href="https://www.google.com" crossorigin>
</head>
<body>
<div id="target" style="opacity: 0"></div>
<script>window.park = "eyJ1dWlkIjoiODU4NTMwNzYtNmQ0Yi00MzZmLTljNGItMTljMjQyNjM2OTdjIiwicGFnZV90aW1lIjoxNzY5MzQxNjg3LCJwYWdlX3VybCI6Imh0dHBzOi8vd3cyNS5tb250YW5hLmxvdHRvdXNhLmxpdmUvIiwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX2hlYWRlcnMiOnt9LCJob3N0Ijoid3cyNS5tb250YW5hLmxvdHRvdXNhLmxpdmUiLCJpcCI6IjE0My4xMTAuMjEzLjcyIn0K";</script>
<script src="/bHqpLtkRJ.js"></script>
</body>
</html>
Open service 199.59.243.228:80 · ww25.montana.lottousa.live
2026-01-25 11:48
HTTP/1.1 200 OK
date: Sun, 25 Jan 2026 11:48:06 GMT
content-type: text/html; charset=utf-8
content-length: 1074
x-request-id: 8a3e99d1-22af-4851-8033-107bd36676fc
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_uiUHEAsWKytkhSMLdn1nDU2miT4ghUXIGywsI6v7G/hmsbIZRplqRetK2mzfOZFXKFKN/I6VgezCbrWc2wkHZQ==
set-cookie: parking_session=8a3e99d1-22af-4851-8033-107bd36676fc; expires=Sun, 25 Jan 2026 12:03:06 GMT; path=/
connection: close
<!doctype html>
<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_uiUHEAsWKytkhSMLdn1nDU2miT4ghUXIGywsI6v7G/hmsbIZRplqRetK2mzfOZFXKFKN/I6VgezCbrWc2wkHZQ==" lang="en" style="background: #2B2B2B;">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC">
<link rel="preconnect" href="https://www.google.com" crossorigin>
</head>
<body>
<div id="target" style="opacity: 0"></div>
<script>window.park = "eyJ1dWlkIjoiOGEzZTk5ZDEtMjJhZi00ODUxLTgwMzMtMTA3YmQzNjY3NmZjIiwicGFnZV90aW1lIjoxNzY5MzQxNjg2LCJwYWdlX3VybCI6Imh0dHA6Ly93dzI1Lm1vbnRhbmEubG90dG91c2EubGl2ZS8iLCJwYWdlX21ldGhvZCI6IkdFVCIsInBhZ2VfcmVxdWVzdCI6e30sInBhZ2VfaGVhZGVycyI6e30sImhvc3QiOiJ3dzI1Lm1vbnRhbmEubG90dG91c2EubGl2ZSIsImlwIjoiMTM4LjY4Ljg2LjMyIn0K";</script>
<script src="/bnDHfGrrU.js"></script>
</body>
</html>
Open service 199.59.243.228:443 · ww25.colorado.lottousa.live
2026-01-24 07:23
HTTP/1.1 200 OK
Date: Sat, 24 Jan 2026 07:23:35 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1082
X-Request-Id: 5491ef4d-5eb3-4e91-98fe-61d5cffade88
Cache-Control: no-store, max-age=0
Accept-Ch: sec-ch-prefers-color-scheme
Critical-Ch: sec-ch-prefers-color-scheme
Vary: sec-ch-prefers-color-scheme
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_N8BL2TPNIURvdzwzMHNos6SV1jVuka6Y4gv6U5bW1w7jif31Aqo3m5BE7KAg3MfQWlJeQEP1xy1rhqiY6cJK/g==
Set-Cookie: parking_session=5491ef4d-5eb3-4e91-98fe-61d5cffade88; expires=Sat, 24 Jan 2026 07:38:35 GMT; path=/
Connection: close
<!doctype html>
<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_N8BL2TPNIURvdzwzMHNos6SV1jVuka6Y4gv6U5bW1w7jif31Aqo3m5BE7KAg3MfQWlJeQEP1xy1rhqiY6cJK/g==" lang="en" style="background: #2B2B2B;">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC">
<link rel="preconnect" href="https://www.google.com" crossorigin>
</head>
<body>
<div id="target" style="opacity: 0"></div>
<script>window.park = "eyJ1dWlkIjoiNTQ5MWVmNGQtNWViMy00ZTkxLTk4ZmUtNjFkNWNmZmFkZTg4IiwicGFnZV90aW1lIjoxNzY5MjM5NDE1LCJwYWdlX3VybCI6Imh0dHBzOi8vd3cyNS5jb2xvcmFkby5sb3R0b3VzYS5saXZlLyIsInBhZ2VfbWV0aG9kIjoiR0VUIiwicGFnZV9yZXF1ZXN0Ijp7fSwicGFnZV9oZWFkZXJzIjp7fSwiaG9zdCI6Ind3MjUuY29sb3JhZG8ubG90dG91c2EubGl2ZSIsImlwIjoiMTQ2LjE5MC42My4yNDgifQo=";</script>
<script src="/bPacVmRPT.js"></script>
</body>
</html>
Open service 199.59.243.228:80 · ww25.colorado.lottousa.live
2026-01-24 07:23
HTTP/1.1 200 OK
date: Sat, 24 Jan 2026 07:23:35 GMT
content-type: text/html; charset=utf-8
content-length: 1082
x-request-id: b0461ba8-b483-42f8-9110-a898410f83ae
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_N8BL2TPNIURvdzwzMHNos6SV1jVuka6Y4gv6U5bW1w7jif31Aqo3m5BE7KAg3MfQWlJeQEP1xy1rhqiY6cJK/g==
set-cookie: parking_session=b0461ba8-b483-42f8-9110-a898410f83ae; expires=Sat, 24 Jan 2026 07:38:36 GMT; path=/
connection: close
<!doctype html>
<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_N8BL2TPNIURvdzwzMHNos6SV1jVuka6Y4gv6U5bW1w7jif31Aqo3m5BE7KAg3MfQWlJeQEP1xy1rhqiY6cJK/g==" lang="en" style="background: #2B2B2B;">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC">
<link rel="preconnect" href="https://www.google.com" crossorigin>
</head>
<body>
<div id="target" style="opacity: 0"></div>
<script>window.park = "eyJ1dWlkIjoiYjA0NjFiYTgtYjQ4My00MmY4LTkxMTAtYTg5ODQxMGY4M2FlIiwicGFnZV90aW1lIjoxNzY5MjM5NDE2LCJwYWdlX3VybCI6Imh0dHA6Ly93dzI1LmNvbG9yYWRvLmxvdHRvdXNhLmxpdmUvIiwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX2hlYWRlcnMiOnt9LCJob3N0Ijoid3cyNS5jb2xvcmFkby5sb3R0b3VzYS5saXZlIiwiaXAiOiIxNjcuOTkuMTgxLjI0OSJ9Cg==";</script>
<script src="/bVLOckqZX.js"></script>
</body>
</html>
Open service 199.59.243.228:443 · ww25.virginia.lottousa.live
2026-01-12 15:20
HTTP/1.1 200 OK
Date: Mon, 12 Jan 2026 15:20:58 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1078
X-Request-Id: 22bf87da-eeb3-430a-be23-7ee7ba8bf9e7
Cache-Control: no-store, max-age=0
Accept-Ch: sec-ch-prefers-color-scheme
Critical-Ch: sec-ch-prefers-color-scheme
Vary: sec-ch-prefers-color-scheme
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_CSF+/2QffoWdv2Fh7ARPAs4ft4KRJN259LWlesWAq5WL3vh8/5QLhBgm/fiNmKMI+9A4IMNsO91HZVTZmM9kGA==
Set-Cookie: parking_session=22bf87da-eeb3-430a-be23-7ee7ba8bf9e7; expires=Mon, 12 Jan 2026 15:35:59 GMT; path=/
Connection: close
<!doctype html>
<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_CSF+/2QffoWdv2Fh7ARPAs4ft4KRJN259LWlesWAq5WL3vh8/5QLhBgm/fiNmKMI+9A4IMNsO91HZVTZmM9kGA==" lang="en" style="background: #2B2B2B;">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC">
<link rel="preconnect" href="https://www.google.com" crossorigin>
</head>
<body>
<div id="target" style="opacity: 0"></div>
<script>window.park = "eyJ1dWlkIjoiMjJiZjg3ZGEtZWViMy00MzBhLWJlMjMtN2VlN2JhOGJmOWU3IiwicGFnZV90aW1lIjoxNzY4MjMxMjU5LCJwYWdlX3VybCI6Imh0dHBzOi8vd3cyNS52aXJnaW5pYS5sb3R0b3VzYS5saXZlLyIsInBhZ2VfbWV0aG9kIjoiR0VUIiwicGFnZV9yZXF1ZXN0Ijp7fSwicGFnZV9oZWFkZXJzIjp7fSwiaG9zdCI6Ind3MjUudmlyZ2luaWEubG90dG91c2EubGl2ZSIsImlwIjoiMTQyLjkzLjAuNjYifQo=";</script>
<script src="/bXvfgkoUg.js"></script>
</body>
</html>
Open service 199.59.243.228:80 · ww25.virginia.lottousa.live
2026-01-12 15:20
HTTP/1.1 200 OK
date: Mon, 12 Jan 2026 15:20:58 GMT
content-type: text/html; charset=utf-8
content-length: 1082
x-request-id: 8b87fb59-da14-4a3e-acd5-2751ef7e7cc7
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_CSF+/2QffoWdv2Fh7ARPAs4ft4KRJN259LWlesWAq5WL3vh8/5QLhBgm/fiNmKMI+9A4IMNsO91HZVTZmM9kGA==
set-cookie: parking_session=8b87fb59-da14-4a3e-acd5-2751ef7e7cc7; expires=Mon, 12 Jan 2026 15:35:59 GMT; path=/
connection: close
<!doctype html>
<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_CSF+/2QffoWdv2Fh7ARPAs4ft4KRJN259LWlesWAq5WL3vh8/5QLhBgm/fiNmKMI+9A4IMNsO91HZVTZmM9kGA==" lang="en" style="background: #2B2B2B;">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC">
<link rel="preconnect" href="https://www.google.com" crossorigin>
</head>
<body>
<div id="target" style="opacity: 0"></div>
<script>window.park = "eyJ1dWlkIjoiOGI4N2ZiNTktZGExNC00YTNlLWFjZDUtMjc1MWVmN2U3Y2M3IiwicGFnZV90aW1lIjoxNzY4MjMxMjU5LCJwYWdlX3VybCI6Imh0dHA6Ly93dzI1LnZpcmdpbmlhLmxvdHRvdXNhLmxpdmUvIiwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX2hlYWRlcnMiOnt9LCJob3N0Ijoid3cyNS52aXJnaW5pYS5sb3R0b3VzYS5saXZlIiwiaXAiOiIxMzguMTk3LjE5MS44NyJ9Cg==";</script>
<script src="/bFXIpugxv.js"></script>
</body>
</html>