The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c0ccc5e9
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://conceptual:64c1ae6d1b3fa54bb3e7059af6125d190c3201cd0b4d4b38273d30d02ce6c047@bitbucket.org/conceptualpathways/nfcauth_wordpress_site.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [revisr] token = TX2lahV7UJBrokX8 automatic-backups = none notifications = off uninstall-on-delete = off [user] name = nfcauthority.com email = websites@conceptual.ca
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c0ccc5e9
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://conceptual:64c1ae6d1b3fa54bb3e7059af6125d190c3201cd0b4d4b38273d30d02ce6c047@bitbucket.org/conceptualpathways/nfcauth_wordpress_site.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [revisr] token = TX2lahV7UJBrokX8 automatic-backups = none notifications = off uninstall-on-delete = off [user] name = nfcauthority.com email = websites@conceptual.ca
Open service 194.1.147.69:443 · nfcauthority.com
2026-01-23 11:23
HTTP/1.1 200 OK Date: Fri, 23 Jan 2026 11:23:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding X-Powered-By: PHP/7.4.33 Link: <https://nfcauthority.com/wp-json/>; rel="https://api.w.org/" Link: <https://nfcauthority.com/wp-json/wp/v2/pages/7840>; rel="alternate"; title="JSON"; type="application/json" Link: <https://nfcauthority.com/>; rel=shortlink Last-Modified: Fri, 23 Jan 2026 11:23:43 GMT ETag: "bd67a2945a9814f741976319644860dd" Vary: Accept-Encoding,Origin WPX: 1 Referrer-Policy: no-referrer-when-downgrade X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/FF02 cache-control: public,max-age=3600,stale-while-revalidate=21600 alt-svc: h3=":443"; ma=86400 x-quic: h3 Server: WPX CLOUD/FF02 X-Cache-Status: MISS
Open service 194.1.147.10:443 · www.nfcauthority.com
2026-01-23 08:17
HTTP/1.1 301 Moved Permanently Date: Fri, 23 Jan 2026 08:17:01 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 53 Connection: close X-Powered-By: PHP/7.4.33 X-Redirect-By: WordPress Location: https://nfcauthority.com/ Vary: Accept-Encoding,Origin WPX: 1 Referrer-Policy: no-referrer-when-downgrade X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/TOR01 alt-svc: h3=":443"; ma=86400 x-quic: h3 Server: WPX CLOUD/TOR01 X-Cache-Status: MISS <!-- moved 0 assets & minified html in 0 seconds -->
Open service 194.1.147.69:80 · nfcauthority.com
2026-01-23 00:29
HTTP/1.1 200 OK
Date: Fri, 23 Jan 2026 00:29:08 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 61249
Connection: close
Vary: Accept-Encoding
Last-Modified: Thu, 22 Jan 2026 23:58:31 GMT
Etag: "ef41-6972b9a7-0;;;"
Vary: Accept-Encoding,Origin
WPX: 1
Referrer-Policy: no-referrer-when-downgrade
X-turbo-charged-by: LiteSpeed
X-Edge-Location: WPX CLOUD/FF02
cache-control: public,max-age=3600,stale-while-revalidate=21600
Server: WPX CLOUD/FF02
X-Cache-Status: MISS
Accept-Ranges: bytes
Page title: NFC Authority – Everything you want to know is just a tap away.
<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0"/><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/><meta name="format-detection" content="telephone=no"><title>NFC Authority – Everything you want to know is just a tap away.</title><meta name='robots' content='max-image-preview:large'/><style id="critical-path-css" type='text/css'>body,html{width:100%;height:100%;margin:0;padding:0}.page-preloader{top:0;left:0;z-index:999;position:fixed;height:100%;width:100%;text-align:center}.preloader-logo,.preloader-preview-area{top:50%;max-height:calc(50% - 20px);opacity:1}.preloader-preview-area{-webkit-animation-delay:-.2s;animation-delay:-.2s;-webkit-transform:translateY(100%);-ms-transform:translateY(100%);transform:translateY(100%);margin-top:10px;width:100%;text-align:center;position:absolute}.preloader-logo{max-width:90%;-webkit-transform:translateY(-100%);-ms-transform:translateY(-100%);transform:translateY(-100%);margin:-10px auto 0;position:relative}.ball-pulse>div,.ball-scale>div,.line-scale>div{margin:2px;display:inline-block}.ball-pulse>div{width:15px;height:15px;border-radius:100%;-webkit-animation-fill-mode:both;animation-fill-mode:both;-webkit-animation:ball-pulse .75s infinite cubic-bezier(.2,.68,.18,1.08);animation:ball-pulse .75s infinite cubic-bezier(.2,.68,.18,1.08)}.ball-pulse>div:nth-child(1){-webkit-animation-delay:-.36s;animation-delay:-.36s}.ball-pulse>div:nth-child(2){-webkit-animation-delay:-.24s;animation-delay:-.24s}.ball-pulse>div:nth-child(3){-webkit-animation-delay:-.12s;animation-delay:-.12s}@-webkit-keyframes ball-pulse{0%,80%{-webkit-transform:scale(1);transform:scale(1);opacity:1}45%{-webkit-transform:scale(.1);transform:scale(.1);opacity:.7}}@keyframes ball-pulse{0%,80%{-webkit-transform:scale(1);transform:scale(1);opacity:1}45%{-webkit-transform:scale(.1);transform:scale(.1);opacity:.7}}.ball-clip-rotate-pulse{position:relative;-webkit-transform:translateY(-15px) translateX(-10px);-ms-transform:translateY(-15px) translateX(-10px);transform:translateY(-15px) translateX(-10px);display:inline-block}.ball-clip-rotate-pulse>div{-webkit-animation-fill-mode:both;animation-fill-mode:both;position:absolute;top:0;left:0;border-radius:100%}.ball-clip-rotate-pulse>div:first-child{height:36px;width:36px;top:7px;left:-7px;-webkit-animation:ball-clip-rotate-pulse-scale 1s 0s cubic-bezier(.09,.57,.49,.9) infinite;animation:ball-clip-rotate-pulse-scale 1s 0s cubic-bezier(.09,.57,.49,.9) infinite}.ball-clip-rotate-pulse>div:last-child{position:absolute;width:50px;height:50px;left:-16px;top:-2px;background:0 0;border:2px solid;-webkit-animation:ball-clip-rotate-pulse-rotate 1s 0s cubic-bezier(.09,.57,.49,.9) infinite;animation:ball-clip-rotate-pulse-rotate 1s 0s cubic-bezier(.09,.57,.49,.9) infinite;-webkit-animation-duration:1s;animation-duration:1s}@-webkit-keyframes ball-clip-rotate-pulse-rotate{0%{-webkit-transform:rotate(0) scale(1);transform:rotate(0) scale(1)}50%{-webkit-transform:rotate(180deg) scale(.6);transform:rotate(180deg) scale(.6)}100%{-webkit-transform:rotate(360deg) scale(1);transform:rotate(360deg) scale(1)}}@keyframes ball-clip-rotate-pulse-rotate{0%{-webkit-transform:rotate(0) scale(1);transform:rotate(0) scale(1)}50%{-webkit-transform:rotate(180deg) scale(.6);transform:rotate(180deg) scale(.6)}100%{-webkit-transform:rotate(360deg) scale(1);transform:rotate(360deg) scale(1)}}@-webkit-keyframes ball-clip-rotate-pulse-scale{30%{-webkit-transform:scale(.3);transform:scale(.3)}100%{-webkit-transform:scale(1);transform:scale(1)}}@keyframes ball-clip-rotate-pulse-scale{30%{-webkit-transform:scale(.3);transform:scale(.3)}100%{-webkit-transform:scale(1);transform:scale(1)}}@-webkit-keyframes square-spin{25%{-webkit-transform:perspective(100px) rotateX(180deg) rotateY(0);transform:perspective(100px) rotateX(180deg) rotateY(0)}50%{-webkit-transform:perspective(100px) rotateX(180deg) rotateY(180deg);transform:perspective(100px) rotateX(180deg) rotat