nginx
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b8a01666
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://devbluecell@bitbucket.org/bluecellcomunicacion/tykfm.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "new.tyk.fm"] remote = origin merge = refs/heads/new.tyk.fm
Open service 185.136.90.14:443 · new.tyk.fm
2026-01-09 11:03
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Jan 2026 11:03:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=0iem7m0iqlnnn2emo2848j6i31; path=/
X-Powered-By: PleskLin
Page title: new.tyk.fm - IN tyk.fm
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="description" content="We´re a fast and simple url shortener." />
<meta name="keywords" content="url shortener, long url shortener, tyk shortener" />
<meta http-equiv="content-language" content="English" />
<meta name="ROBOTS" content="ALL" />
<title>new.tyk.fm - IN tyk.fm</title>
<link href="css/estilos.css" rel="stylesheet" type="text/css" />
<style>
.linkshort a:link {color: #656565;
font-size: 36px;
height: 73px;
line-height: 73px;
margin: 12px 0;
text-align: center;
max-width: 422px; text-decoration: none}
.linkshort a:visited {color: #656565;
font-size: 36px;
height: 73px;
line-height: 73px;
margin: 12px 0;
text-align: center;
max-width: 422px; text-decoration: none}
.linkshort a:hover {color: #656565;
font-size: 36px;
height: 73px;
line-height: 73px;
margin: 12px 0;
text-align: center;
width: 422px; text-decoration: underline; color: red;}
.linkshort a:active {color: #656565;
font-size: 36px;
height: 73px;
line-height: 73px;
margin: 12px 0;
text-align: center;
max-width: 422px; text-decoration: none}
.spotify { margin-top:10px; width:15px !important; height:15px !important; clear:both; padding:5px !important; display:inline !important; }
.txtspotify { margin-top:10px; margin-left:5px; display: inline; float:left; }
#crearnombreCampana, .txtspotify { cursor:pointer;}
#diverror { background-color:transparent; color:#ff0000; font-weight:bold; font-size:12px; }
</style>
<script type="text/javascript" src='https://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js'></script>
<script type="text/javascript">
jQuery.noConflict();
jQuery(function($) {
positionFooter();
function positionFooter(){
$(".footer").css({position: "absolute",top:($(window).scrollTop()+$(window).height()-$(".footer").height())+"px"})
}
$(window)
.scroll(positionFooter)
.resize(positionFooter)
})
function createXMLHttpRequest() {
var ua;
if(window.XMLHttpRequest) {
try {
ua = new XMLHttpRequest();
} catch(e) {
ua = false;
}
} else if(window.ActiveXObject) {
try {
ua = new ActiveXObject("Microsoft.XMLHTTP");
} catch(e) {
ua = false;
}
}
return ua;
}
var req = createXMLHttpRequest();
function trim(str)
{
return str.replace(/^\s*/,'').replace(/\s*$/,'');
}
function sendRequest()
{
document.getElementById('divresult').innerHTML = '';
var usertxt = trim(document.forms['tykform'].usertxt.value);
var passwdtxt = trim(document.forms['tykform'].passwdtxt.value);
if (usertxt != '')
{
var tykeaction = 'check_login.php?u=' + usertxt + '&p=' + passwdtxt;
req.open('get', tykeaction);
req.onreadystatechange = handleResponse;
req.send(null);
}else{
document.forms['tykform'].usertxt.value = 'Name?';
}
}
function handleResponse(){
if(req.readyState == 4){
var response = req.responseText;
var update = new Array();
if(response.indexOf('||' != -1))
{
update = response.split('||');
if (update[0] == 'ok')
{
top.location.href = 'start.php';
}else{
document.getElementById('divresult').innerHTML = 'Error. Try again';
}
}
}
else
req.readyState;
}
</script>
</head>
<body>
<div id="wraperTop">
<div class="contenido">
<div class="elementos">
<h1>tyk.fm Shorten yor links</h1>
<form name="tykform" id="tykform" method="post" action="" />
<input name="usertxt" id="usertxt" type="text" class="casilla" value="Name" onFocus="javascript: if (document.forms['tykform'].usertxt.value == 'Name'){ document.forms['tykform'].usertxt.value = '';}" onkeypress="javascript: if (event.keyCode == 13) sendRequest();" />
<span class="separador"></span>
<span class="separador"></span>
<input name="passwdtxt" id="passwdtxt" type="password" class="casilla" value="Password" onFocus="jav
Open service 185.136.90.14:443 · new.tyk.fm
2026-01-02 03:59
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Jan 2026 03:59:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=mm1pbjfvkplcnckm3iqbjug3bo; path=/
X-Powered-By: PleskLin
Page title: new.tyk.fm - IN tyk.fm
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="description" content="We´re a fast and simple url shortener." />
<meta name="keywords" content="url shortener, long url shortener, tyk shortener" />
<meta http-equiv="content-language" content="English" />
<meta name="ROBOTS" content="ALL" />
<title>new.tyk.fm - IN tyk.fm</title>
<link href="css/estilos.css" rel="stylesheet" type="text/css" />
<style>
.linkshort a:link {color: #656565;
font-size: 36px;
height: 73px;
line-height: 73px;
margin: 12px 0;
text-align: center;
max-width: 422px; text-decoration: none}
.linkshort a:visited {color: #656565;
font-size: 36px;
height: 73px;
line-height: 73px;
margin: 12px 0;
text-align: center;
max-width: 422px; text-decoration: none}
.linkshort a:hover {color: #656565;
font-size: 36px;
height: 73px;
line-height: 73px;
margin: 12px 0;
text-align: center;
width: 422px; text-decoration: underline; color: red;}
.linkshort a:active {color: #656565;
font-size: 36px;
height: 73px;
line-height: 73px;
margin: 12px 0;
text-align: center;
max-width: 422px; text-decoration: none}
.spotify { margin-top:10px; width:15px !important; height:15px !important; clear:both; padding:5px !important; display:inline !important; }
.txtspotify { margin-top:10px; margin-left:5px; display: inline; float:left; }
#crearnombreCampana, .txtspotify { cursor:pointer;}
#diverror { background-color:transparent; color:#ff0000; font-weight:bold; font-size:12px; }
</style>
<script type="text/javascript" src='https://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js'></script>
<script type="text/javascript">
jQuery.noConflict();
jQuery(function($) {
positionFooter();
function positionFooter(){
$(".footer").css({position: "absolute",top:($(window).scrollTop()+$(window).height()-$(".footer").height())+"px"})
}
$(window)
.scroll(positionFooter)
.resize(positionFooter)
})
function createXMLHttpRequest() {
var ua;
if(window.XMLHttpRequest) {
try {
ua = new XMLHttpRequest();
} catch(e) {
ua = false;
}
} else if(window.ActiveXObject) {
try {
ua = new ActiveXObject("Microsoft.XMLHTTP");
} catch(e) {
ua = false;
}
}
return ua;
}
var req = createXMLHttpRequest();
function trim(str)
{
return str.replace(/^\s*/,'').replace(/\s*$/,'');
}
function sendRequest()
{
document.getElementById('divresult').innerHTML = '';
var usertxt = trim(document.forms['tykform'].usertxt.value);
var passwdtxt = trim(document.forms['tykform'].passwdtxt.value);
if (usertxt != '')
{
var tykeaction = 'check_login.php?u=' + usertxt + '&p=' + passwdtxt;
req.open('get', tykeaction);
req.onreadystatechange = handleResponse;
req.send(null);
}else{
document.forms['tykform'].usertxt.value = 'Name?';
}
}
function handleResponse(){
if(req.readyState == 4){
var response = req.responseText;
var update = new Array();
if(response.indexOf('||' != -1))
{
update = response.split('||');
if (update[0] == 'ok')
{
top.location.href = 'start.php';
}else{
document.getElementById('divresult').innerHTML = 'Error. Try again';
}
}
}
else
req.readyState;
}
</script>
</head>
<body>
<div id="wraperTop">
<div class="contenido">
<div class="elementos">
<h1>tyk.fm Shorten yor links</h1>
<form name="tykform" id="tykform" method="post" action="" />
<input name="usertxt" id="usertxt" type="text" class="casilla" value="Name" onFocus="javascript: if (document.forms['tykform'].usertxt.value == 'Name'){ document.forms['tykform'].usertxt.value = '';}" onkeypress="javascript: if (event.keyCode == 13) sendRequest();" />
<span class="separador"></span>
<span class="separador"></span>
<input name="passwdtxt" id="passwdtxt" type="password" class="casilla" value="Password" onFocus="jav
Open service 185.136.90.14:443 · new.tyk.fm
2025-12-22 12:14
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 Dec 2025 12:14:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=j1lbfvvoasf6flqbn4l2n1teeu; path=/
X-Powered-By: PleskLin
Page title: new.tyk.fm - IN tyk.fm
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="description" content="We´re a fast and simple url shortener." />
<meta name="keywords" content="url shortener, long url shortener, tyk shortener" />
<meta http-equiv="content-language" content="English" />
<meta name="ROBOTS" content="ALL" />
<title>new.tyk.fm - IN tyk.fm</title>
<link href="css/estilos.css" rel="stylesheet" type="text/css" />
<style>
.linkshort a:link {color: #656565;
font-size: 36px;
height: 73px;
line-height: 73px;
margin: 12px 0;
text-align: center;
max-width: 422px; text-decoration: none}
.linkshort a:visited {color: #656565;
font-size: 36px;
height: 73px;
line-height: 73px;
margin: 12px 0;
text-align: center;
max-width: 422px; text-decoration: none}
.linkshort a:hover {color: #656565;
font-size: 36px;
height: 73px;
line-height: 73px;
margin: 12px 0;
text-align: center;
width: 422px; text-decoration: underline; color: red;}
.linkshort a:active {color: #656565;
font-size: 36px;
height: 73px;
line-height: 73px;
margin: 12px 0;
text-align: center;
max-width: 422px; text-decoration: none}
.spotify { margin-top:10px; width:15px !important; height:15px !important; clear:both; padding:5px !important; display:inline !important; }
.txtspotify { margin-top:10px; margin-left:5px; display: inline; float:left; }
#crearnombreCampana, .txtspotify { cursor:pointer;}
#diverror { background-color:transparent; color:#ff0000; font-weight:bold; font-size:12px; }
</style>
<script type="text/javascript" src='https://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js'></script>
<script type="text/javascript">
jQuery.noConflict();
jQuery(function($) {
positionFooter();
function positionFooter(){
$(".footer").css({position: "absolute",top:($(window).scrollTop()+$(window).height()-$(".footer").height())+"px"})
}
$(window)
.scroll(positionFooter)
.resize(positionFooter)
})
function createXMLHttpRequest() {
var ua;
if(window.XMLHttpRequest) {
try {
ua = new XMLHttpRequest();
} catch(e) {
ua = false;
}
} else if(window.ActiveXObject) {
try {
ua = new ActiveXObject("Microsoft.XMLHTTP");
} catch(e) {
ua = false;
}
}
return ua;
}
var req = createXMLHttpRequest();
function trim(str)
{
return str.replace(/^\s*/,'').replace(/\s*$/,'');
}
function sendRequest()
{
document.getElementById('divresult').innerHTML = '';
var usertxt = trim(document.forms['tykform'].usertxt.value);
var passwdtxt = trim(document.forms['tykform'].passwdtxt.value);
if (usertxt != '')
{
var tykeaction = 'check_login.php?u=' + usertxt + '&p=' + passwdtxt;
req.open('get', tykeaction);
req.onreadystatechange = handleResponse;
req.send(null);
}else{
document.forms['tykform'].usertxt.value = 'Name?';
}
}
function handleResponse(){
if(req.readyState == 4){
var response = req.responseText;
var update = new Array();
if(response.indexOf('||' != -1))
{
update = response.split('||');
if (update[0] == 'ok')
{
top.location.href = 'start.php';
}else{
document.getElementById('divresult').innerHTML = 'Error. Try again';
}
}
}
else
req.readyState;
}
</script>
</head>
<body>
<div id="wraperTop">
<div class="contenido">
<div class="elementos">
<h1>tyk.fm Shorten yor links</h1>
<form name="tykform" id="tykform" method="post" action="" />
<input name="usertxt" id="usertxt" type="text" class="casilla" value="Name" onFocus="javascript: if (document.forms['tykform'].usertxt.value == 'Name'){ document.forms['tykform'].usertxt.value = '';}" onkeypress="javascript: if (event.keyCode == 13) sendRequest();" />
<span class="separador"></span>
<span class="separador"></span>
<input name="passwdtxt" id="passwdtxt" type="password" class="casilla" value="Password" onFocus="jav
Open service 185.136.90.14:443 · new.tyk.fm
2025-12-20 10:50
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 20 Dec 2025 10:50:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=hfq9s9oudagp7367hd4gbq6mcb; path=/
X-Powered-By: PleskLin
Page title: new.tyk.fm - IN tyk.fm
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="description" content="We´re a fast and simple url shortener." />
<meta name="keywords" content="url shortener, long url shortener, tyk shortener" />
<meta http-equiv="content-language" content="English" />
<meta name="ROBOTS" content="ALL" />
<title>new.tyk.fm - IN tyk.fm</title>
<link href="css/estilos.css" rel="stylesheet" type="text/css" />
<style>
.linkshort a:link {color: #656565;
font-size: 36px;
height: 73px;
line-height: 73px;
margin: 12px 0;
text-align: center;
max-width: 422px; text-decoration: none}
.linkshort a:visited {color: #656565;
font-size: 36px;
height: 73px;
line-height: 73px;
margin: 12px 0;
text-align: center;
max-width: 422px; text-decoration: none}
.linkshort a:hover {color: #656565;
font-size: 36px;
height: 73px;
line-height: 73px;
margin: 12px 0;
text-align: center;
width: 422px; text-decoration: underline; color: red;}
.linkshort a:active {color: #656565;
font-size: 36px;
height: 73px;
line-height: 73px;
margin: 12px 0;
text-align: center;
max-width: 422px; text-decoration: none}
.spotify { margin-top:10px; width:15px !important; height:15px !important; clear:both; padding:5px !important; display:inline !important; }
.txtspotify { margin-top:10px; margin-left:5px; display: inline; float:left; }
#crearnombreCampana, .txtspotify { cursor:pointer;}
#diverror { background-color:transparent; color:#ff0000; font-weight:bold; font-size:12px; }
</style>
<script type="text/javascript" src='https://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js'></script>
<script type="text/javascript">
jQuery.noConflict();
jQuery(function($) {
positionFooter();
function positionFooter(){
$(".footer").css({position: "absolute",top:($(window).scrollTop()+$(window).height()-$(".footer").height())+"px"})
}
$(window)
.scroll(positionFooter)
.resize(positionFooter)
})
function createXMLHttpRequest() {
var ua;
if(window.XMLHttpRequest) {
try {
ua = new XMLHttpRequest();
} catch(e) {
ua = false;
}
} else if(window.ActiveXObject) {
try {
ua = new ActiveXObject("Microsoft.XMLHTTP");
} catch(e) {
ua = false;
}
}
return ua;
}
var req = createXMLHttpRequest();
function trim(str)
{
return str.replace(/^\s*/,'').replace(/\s*$/,'');
}
function sendRequest()
{
document.getElementById('divresult').innerHTML = '';
var usertxt = trim(document.forms['tykform'].usertxt.value);
var passwdtxt = trim(document.forms['tykform'].passwdtxt.value);
if (usertxt != '')
{
var tykeaction = 'check_login.php?u=' + usertxt + '&p=' + passwdtxt;
req.open('get', tykeaction);
req.onreadystatechange = handleResponse;
req.send(null);
}else{
document.forms['tykform'].usertxt.value = 'Name?';
}
}
function handleResponse(){
if(req.readyState == 4){
var response = req.responseText;
var update = new Array();
if(response.indexOf('||' != -1))
{
update = response.split('||');
if (update[0] == 'ok')
{
top.location.href = 'start.php';
}else{
document.getElementById('divresult').innerHTML = 'Error. Try again';
}
}
}
else
req.readyState;
}
</script>
</head>
<body>
<div id="wraperTop">
<div class="contenido">
<div class="elementos">
<h1>tyk.fm Shorten yor links</h1>
<form name="tykform" id="tykform" method="post" action="" />
<input name="usertxt" id="usertxt" type="text" class="casilla" value="Name" onFocus="javascript: if (document.forms['tykform'].usertxt.value == 'Name'){ document.forms['tykform'].usertxt.value = '';}" onkeypress="javascript: if (event.keyCode == 13) sendRequest();" />
<span class="separador"></span>
<span class="separador"></span>
<input name="passwdtxt" id="passwdtxt" type="password" class="casilla" value="Password" onFocus="jav