nginx 1.6.2
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522633f7efb
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/fusionpbx/fusionpbx.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "4.2"] remote = origin merge = refs/heads/4.2
Open service 87.224.0.56:443 · mulberry.spitfirevoiceapps.net
2026-01-09 14:48
HTTP/1.1 200 OK
Server: nginx/1.6.2
Date: Fri, 09 Jan 2026 14:48:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: PHPSESSID=5aavmc3m4qou3vni9opopf99ds; path=/; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Page title: Spitfire Hosted PBX
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="/resources/bootstrap/css/bootstrap.min.css">
<link rel="stylesheet" type="text/css" href="/resources/bootstrap/css/bootstrap-datetimepicker.min.css" />
<link rel="stylesheet" type="text/css" href="/resources/bootstrap/css/bootstrap-colorpicker.min.css">
<link rel="stylesheet" type="text/css" href="/themes/default/css.php?login=default">
<link rel='icon' href='/themes/default/favicon.ico'>
<title>Spitfire Hosted PBX</title>
<script language="JavaScript" type="text/javascript" src="/resources/jquery/jquery-1.11.1.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/jquery/jquery.autosize.input.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/momentjs/moment.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/bootstrap/js/bootstrap.min.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/bootstrap/js/bootstrap-datetimepicker.min.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/bootstrap/js/bootstrap-colorpicker.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/bootstrap/js/bootstrap-pwstrength.min.js"></script>
<script language="JavaScript" type="text/javascript">
//display message bar via js
function display_message(msg, mood, delay) {
var mood = (typeof mood !== 'undefined') ? mood : 'default';
var delay = (typeof delay !== 'undefined') ? delay : 1750;
if (msg != '') {
var inner_width = $(window).width();
// add class by mood
$("#message_container").addClass('message_container_mood_'+mood);
$("#message_text").addClass('message_text_mood_'+mood);
// output message
$("#message_text").html(msg);
$("#message_container").css({height: $("#message_text").css("height")});
$("#message_container").css({width: inner_width});
$("#message_text").show().animate({top: '+=80'}, 500).animate({opacity: 1}, 'fast').delay(delay).animate({top: '-=80'}, 1000).animate({opacity: 0});
$("#message_container").show().animate({top: '+=80'}, 500).animate({opacity: 0.9}, "fast").delay(delay).animate({top: '-=80'}, 1000).animate({opacity: 0}, function() {
$("#message_container").removeClass('message_container_mood_'+mood);
});
}
}
$(document).ready(function() {
//set response message, if any
//hide message bar on hover
$("#message_text").mouseover(function() { $(this).hide(); $("#message_container").hide(); });
//link table rows (except the last - the list_control_icons cell) on a table with a class of 'tr_hover', according to the href attribute of the <tr> tag
$('.tr_hover tr').each(function(i,e) {
$(e).children('td:not(.list_control_icon,.list_control_icons,.tr_link_void)').click(function() {
var href = $(this).closest("tr").attr("href");
if (href) { window.location = href; }
});
});
//apply the auto-size jquery script to all text inputs
$("input[type=text].txt,input[type=number].txt,input[type=password].txt,input[type=text].formfld,input[type=number].formfld,input[type=password].formfld").not('.datetimepicker,.datepicker').autosizeInput();
//apply bootstrap-datetime plugin
$(function() {
$('.datetimepicker').datetimepicker({
format: 'YYYY-MM-DD HH:mm',
showTodayButton: true,
showClear: true,
showClose: true,
});
$('.datepicker').datetimepicker({
format: 'YYYY-MM-DD',
showTodayButton: true,
showClear: true,
showClose: true,
});
});
//apply bootstrap-colorpicker plugin
$(function(){
$('.colorpicker').colorpicker({
align: 'left',
customClass: 'colorpicker-2x',
sliders: {
saturation: {
maxLeft: 200,
Open service 87.224.0.56:443 · mulberry.spitfirevoiceapps.net
2026-01-02 12:43
HTTP/1.1 200 OK
Server: nginx/1.6.2
Date: Fri, 02 Jan 2026 12:43:47 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: PHPSESSID=g5bhdi1ocvhmto0fhbgrbsui20; path=/; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Page title: Spitfire Hosted PBX
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="/resources/bootstrap/css/bootstrap.min.css">
<link rel="stylesheet" type="text/css" href="/resources/bootstrap/css/bootstrap-datetimepicker.min.css" />
<link rel="stylesheet" type="text/css" href="/resources/bootstrap/css/bootstrap-colorpicker.min.css">
<link rel="stylesheet" type="text/css" href="/themes/default/css.php?login=default">
<link rel='icon' href='/themes/default/favicon.ico'>
<title>Spitfire Hosted PBX</title>
<script language="JavaScript" type="text/javascript" src="/resources/jquery/jquery-1.11.1.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/jquery/jquery.autosize.input.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/momentjs/moment.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/bootstrap/js/bootstrap.min.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/bootstrap/js/bootstrap-datetimepicker.min.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/bootstrap/js/bootstrap-colorpicker.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/bootstrap/js/bootstrap-pwstrength.min.js"></script>
<script language="JavaScript" type="text/javascript">
//display message bar via js
function display_message(msg, mood, delay) {
var mood = (typeof mood !== 'undefined') ? mood : 'default';
var delay = (typeof delay !== 'undefined') ? delay : 1750;
if (msg != '') {
var inner_width = $(window).width();
// add class by mood
$("#message_container").addClass('message_container_mood_'+mood);
$("#message_text").addClass('message_text_mood_'+mood);
// output message
$("#message_text").html(msg);
$("#message_container").css({height: $("#message_text").css("height")});
$("#message_container").css({width: inner_width});
$("#message_text").show().animate({top: '+=80'}, 500).animate({opacity: 1}, 'fast').delay(delay).animate({top: '-=80'}, 1000).animate({opacity: 0});
$("#message_container").show().animate({top: '+=80'}, 500).animate({opacity: 0.9}, "fast").delay(delay).animate({top: '-=80'}, 1000).animate({opacity: 0}, function() {
$("#message_container").removeClass('message_container_mood_'+mood);
});
}
}
$(document).ready(function() {
//set response message, if any
//hide message bar on hover
$("#message_text").mouseover(function() { $(this).hide(); $("#message_container").hide(); });
//link table rows (except the last - the list_control_icons cell) on a table with a class of 'tr_hover', according to the href attribute of the <tr> tag
$('.tr_hover tr').each(function(i,e) {
$(e).children('td:not(.list_control_icon,.list_control_icons,.tr_link_void)').click(function() {
var href = $(this).closest("tr").attr("href");
if (href) { window.location = href; }
});
});
//apply the auto-size jquery script to all text inputs
$("input[type=text].txt,input[type=number].txt,input[type=password].txt,input[type=text].formfld,input[type=number].formfld,input[type=password].formfld").not('.datetimepicker,.datepicker').autosizeInput();
//apply bootstrap-datetime plugin
$(function() {
$('.datetimepicker').datetimepicker({
format: 'YYYY-MM-DD HH:mm',
showTodayButton: true,
showClear: true,
showClose: true,
});
$('.datepicker').datetimepicker({
format: 'YYYY-MM-DD',
showTodayButton: true,
showClear: true,
showClose: true,
});
});
//apply bootstrap-colorpicker plugin
$(function(){
$('.colorpicker').colorpicker({
align: 'left',
customClass: 'colorpicker-2x',
sliders: {
saturation: {
maxLeft: 200,
Open service 87.224.0.56:443 · mulberry.spitfirevoiceapps.net
2025-12-22 09:47
HTTP/1.1 200 OK
Server: nginx/1.6.2
Date: Mon, 22 Dec 2025 09:47:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: PHPSESSID=mki2gkoip7qmoborb9i5msnsn8; path=/; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Page title: Spitfire Hosted PBX
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="/resources/bootstrap/css/bootstrap.min.css">
<link rel="stylesheet" type="text/css" href="/resources/bootstrap/css/bootstrap-datetimepicker.min.css" />
<link rel="stylesheet" type="text/css" href="/resources/bootstrap/css/bootstrap-colorpicker.min.css">
<link rel="stylesheet" type="text/css" href="/themes/default/css.php?login=default">
<link rel='icon' href='/themes/default/favicon.ico'>
<title>Spitfire Hosted PBX</title>
<script language="JavaScript" type="text/javascript" src="/resources/jquery/jquery-1.11.1.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/jquery/jquery.autosize.input.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/momentjs/moment.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/bootstrap/js/bootstrap.min.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/bootstrap/js/bootstrap-datetimepicker.min.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/bootstrap/js/bootstrap-colorpicker.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/bootstrap/js/bootstrap-pwstrength.min.js"></script>
<script language="JavaScript" type="text/javascript">
//display message bar via js
function display_message(msg, mood, delay) {
var mood = (typeof mood !== 'undefined') ? mood : 'default';
var delay = (typeof delay !== 'undefined') ? delay : 1750;
if (msg != '') {
var inner_width = $(window).width();
// add class by mood
$("#message_container").addClass('message_container_mood_'+mood);
$("#message_text").addClass('message_text_mood_'+mood);
// output message
$("#message_text").html(msg);
$("#message_container").css({height: $("#message_text").css("height")});
$("#message_container").css({width: inner_width});
$("#message_text").show().animate({top: '+=80'}, 500).animate({opacity: 1}, 'fast').delay(delay).animate({top: '-=80'}, 1000).animate({opacity: 0});
$("#message_container").show().animate({top: '+=80'}, 500).animate({opacity: 0.9}, "fast").delay(delay).animate({top: '-=80'}, 1000).animate({opacity: 0}, function() {
$("#message_container").removeClass('message_container_mood_'+mood);
});
}
}
$(document).ready(function() {
//set response message, if any
//hide message bar on hover
$("#message_text").mouseover(function() { $(this).hide(); $("#message_container").hide(); });
//link table rows (except the last - the list_control_icons cell) on a table with a class of 'tr_hover', according to the href attribute of the <tr> tag
$('.tr_hover tr').each(function(i,e) {
$(e).children('td:not(.list_control_icon,.list_control_icons,.tr_link_void)').click(function() {
var href = $(this).closest("tr").attr("href");
if (href) { window.location = href; }
});
});
//apply the auto-size jquery script to all text inputs
$("input[type=text].txt,input[type=number].txt,input[type=password].txt,input[type=text].formfld,input[type=number].formfld,input[type=password].formfld").not('.datetimepicker,.datepicker').autosizeInput();
//apply bootstrap-datetime plugin
$(function() {
$('.datetimepicker').datetimepicker({
format: 'YYYY-MM-DD HH:mm',
showTodayButton: true,
showClear: true,
showClose: true,
});
$('.datepicker').datetimepicker({
format: 'YYYY-MM-DD',
showTodayButton: true,
showClear: true,
showClose: true,
});
});
//apply bootstrap-colorpicker plugin
$(function(){
$('.colorpicker').colorpicker({
align: 'left',
customClass: 'colorpicker-2x',
sliders: {
saturation: {
maxLeft: 200,
Open service 87.224.0.56:443 · mulberry.spitfirevoiceapps.net
2025-12-20 08:25
HTTP/1.1 200 OK
Server: nginx/1.6.2
Date: Sat, 20 Dec 2025 08:25:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: PHPSESSID=7va7dqtuaq78p4v8ue4k549jbq; path=/; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Page title: Spitfire Hosted PBX
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="/resources/bootstrap/css/bootstrap.min.css">
<link rel="stylesheet" type="text/css" href="/resources/bootstrap/css/bootstrap-datetimepicker.min.css" />
<link rel="stylesheet" type="text/css" href="/resources/bootstrap/css/bootstrap-colorpicker.min.css">
<link rel="stylesheet" type="text/css" href="/themes/default/css.php?login=default">
<link rel='icon' href='/themes/default/favicon.ico'>
<title>Spitfire Hosted PBX</title>
<script language="JavaScript" type="text/javascript" src="/resources/jquery/jquery-1.11.1.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/jquery/jquery.autosize.input.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/momentjs/moment.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/bootstrap/js/bootstrap.min.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/bootstrap/js/bootstrap-datetimepicker.min.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/bootstrap/js/bootstrap-colorpicker.js"></script>
<script language="JavaScript" type="text/javascript" src="/resources/bootstrap/js/bootstrap-pwstrength.min.js"></script>
<script language="JavaScript" type="text/javascript">
//display message bar via js
function display_message(msg, mood, delay) {
var mood = (typeof mood !== 'undefined') ? mood : 'default';
var delay = (typeof delay !== 'undefined') ? delay : 1750;
if (msg != '') {
var inner_width = $(window).width();
// add class by mood
$("#message_container").addClass('message_container_mood_'+mood);
$("#message_text").addClass('message_text_mood_'+mood);
// output message
$("#message_text").html(msg);
$("#message_container").css({height: $("#message_text").css("height")});
$("#message_container").css({width: inner_width});
$("#message_text").show().animate({top: '+=80'}, 500).animate({opacity: 1}, 'fast').delay(delay).animate({top: '-=80'}, 1000).animate({opacity: 0});
$("#message_container").show().animate({top: '+=80'}, 500).animate({opacity: 0.9}, "fast").delay(delay).animate({top: '-=80'}, 1000).animate({opacity: 0}, function() {
$("#message_container").removeClass('message_container_mood_'+mood);
});
}
}
$(document).ready(function() {
//set response message, if any
//hide message bar on hover
$("#message_text").mouseover(function() { $(this).hide(); $("#message_container").hide(); });
//link table rows (except the last - the list_control_icons cell) on a table with a class of 'tr_hover', according to the href attribute of the <tr> tag
$('.tr_hover tr').each(function(i,e) {
$(e).children('td:not(.list_control_icon,.list_control_icons,.tr_link_void)').click(function() {
var href = $(this).closest("tr").attr("href");
if (href) { window.location = href; }
});
});
//apply the auto-size jquery script to all text inputs
$("input[type=text].txt,input[type=number].txt,input[type=password].txt,input[type=text].formfld,input[type=number].formfld,input[type=password].formfld").not('.datetimepicker,.datepicker').autosizeInput();
//apply bootstrap-datetime plugin
$(function() {
$('.datetimepicker').datetimepicker({
format: 'YYYY-MM-DD HH:mm',
showTodayButton: true,
showClear: true,
showClose: true,
});
$('.datepicker').datetimepicker({
format: 'YYYY-MM-DD',
showTodayButton: true,
showClear: true,
showClose: true,
});
});
//apply bootstrap-colorpicker plugin
$(function(){
$('.colorpicker').colorpicker({
align: 'left',
customClass: 'colorpicker-2x',
sliders: {
saturation: {
maxLeft: 200,