Vercel
tcp/443 tcp/80
cloudflare
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ea4ae48d
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/leduong/nhadat-html.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ea4ae48d
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/leduong/nhadat-html.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d325beceb325beceb325beceb325beceb
Found 1 files trough .DS_Store spidering: /assets
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d325beceb325beceb325beceb325beceb
Found 1 files trough .DS_Store spidering: /assets
Open service 172.67.135.29:443 · nhadat.cc
2026-01-22 20:06
HTTP/1.1 200 OK
Date: Thu, 22 Jan 2026 20:06:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Age: 0
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=WE2Te0EfsRhvAslmogRLAOAz8iOGUU75OaCf3jfzpguNNEbyuxtlYk9oFRsU56r8OjBJS%2FrvSAk3llCvs5Tuje3JpVs4moiIrw%3D%3D"}]}
link: </_next/static/media/83001f47a8fdbd0d-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/a34f9d1faa5f3315-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
Server: cloudflare
strict-transport-security: max-age=63072000
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch
vary: accept-encoding
x-matched-path: /
x-powered-by: Next.js
x-vercel-cache: MISS
x-vercel-id: sin1::sin1::8l2tm-1769112390755-162ca0110481
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9c21ac1a0bb13db9-SIN
alt-svc: h3=":443"; ma=86400
Open service 172.67.135.29:443 · nhadat.cc
2026-01-09 00:41
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 00:41:55 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Age: 0
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fu9G6MIvQXLjvL9GJiH1OuvuSuAnQPbUV48SZkEaXe9l7fpoQ5XSUANancwW5J%2FFuptsXjL3Z%2F1gUh6Z4r1NU%2Bz5NnQ8RvzpVQ%3D%3D"}]}
link: </_next/static/media/83001f47a8fdbd0d-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/a34f9d1faa5f3315-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
Server: cloudflare
strict-transport-security: max-age=63072000
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch
vary: accept-encoding
x-matched-path: /
x-powered-by: Next.js
x-vercel-cache: MISS
x-vercel-id: lhr1::sin1::cr6dw-1767919314862-d7d2eb2fdf2e
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9bafe445cfb7f7f1-LHR
alt-svc: h3=":443"; ma=86400
Open service 216.198.79.1:80 · nhadat.cc
2026-01-07 16:13
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://nhadat.cc/ Refresh: 0;url=https://nhadat.cc/ server: Vercel Redirecting...
Open service 216.198.79.1:443 · nhadat.cc
2026-01-07 16:13
HTTP/1.1 200 OK Age: 0 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Date: Wed, 07 Jan 2026 16:13:44 GMT Link: </_next/static/media/83001f47a8fdbd0d-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/a34f9d1faa5f3315-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2" Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch X-Matched-Path: / X-Powered-By: Next.js X-Vercel-Cache: MISS X-Vercel-Id: sfo1::sin1::mb7dq-1767802424364-b1d0ad017554 Connection: close Transfer-Encoding: chunked
Open service 172.67.135.29:443 · nhadat.cc
2026-01-02 00:50
HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 00:50:08 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Age: 0
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=uvkYRQ8%2FID2FqUKI5NAQRsvCXnR0qW3e7inJ2qOH9y3NFXnqogoUIRtwo1U87gM8TK98Xw2HEUDVxNoy7F7TDNNUw24BpchrRg%3D%3D"}]}
link: </_next/static/media/83001f47a8fdbd0d-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/a34f9d1faa5f3315-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
Server: cloudflare
strict-transport-security: max-age=63072000
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch
vary: accept-encoding
x-matched-path: /
x-powered-by: Next.js
x-vercel-cache: MISS
x-vercel-id: yul1::sin1::sqml4-1767315007930-1b37e484bed9
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b7642af4c7cc730-YYZ
alt-svc: h3=":443"; ma=86400
Open service 172.67.135.29:443 · nhadat.cc
2025-12-22 09:01
HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 09:01:54 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Age: 0
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=GfLRsKi2jsp2Xys%2FjXqSUGIZ711pA%2FdXCHrkzOaerr14GuNwMJxojvvXIrqV30sFz7L%2B1ltGHv6rFWPBedlrukSAH%2BsOLemVgw%3D%3D"}]}
link: </_next/static/media/83001f47a8fdbd0d-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/a34f9d1faa5f3315-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
Server: cloudflare
strict-transport-security: max-age=63072000
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch
vary: accept-encoding
x-matched-path: /
x-powered-by: Next.js
x-vercel-cache: MISS
x-vercel-id: iad1::sin1::jwmql-1766394113896-e33c09795684
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=4,cfOrigin;dur=323
CF-RAY: 9b1e6febcee1b637-EWR
alt-svc: h3=":443"; ma=86400