The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884022e566c817d764363
[init] defaultBranch = none [fetch] recurseSubmodules = false [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:64_nZWyUimqWyYZMkXyzqms@gitlab.com/obirusta/obirusta-frontend-landing.git fetch = +refs/heads/*:refs/remotes/origin/*
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884022e566c8174f3ad67
[init] defaultBranch = none [fetch] recurseSubmodules = false [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:64_WskwSBpnYuwqE8UfuxLy@gitlab.com/obirusta/obirusta-frontend-landing.git fetch = +refs/heads/*:refs/remotes/origin/*
Open service 199.59.243.228:443 · ww25.5g.obirusta.com
2026-01-26 09:47
HTTP/1.1 200 OK
Date: Mon, 26 Jan 2026 09:47:38 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1062
X-Request-Id: 7c8a85d2-7765-4fa4-8201-8f598a46a52a
Cache-Control: no-store, max-age=0
Accept-Ch: sec-ch-prefers-color-scheme
Critical-Ch: sec-ch-prefers-color-scheme
Vary: sec-ch-prefers-color-scheme
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_vQChvJS7Qt5hP2KfDWoNEAj9/p7YtZ8vJIKDNjacHJMW1cZoxITnVkA4hZTrucmepJGgGeKbzskBXZlyXCK0fw==
Set-Cookie: parking_session=7c8a85d2-7765-4fa4-8201-8f598a46a52a; expires=Mon, 26 Jan 2026 10:02:38 GMT; path=/
Connection: close
<!doctype html>
<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_vQChvJS7Qt5hP2KfDWoNEAj9/p7YtZ8vJIKDNjacHJMW1cZoxITnVkA4hZTrucmepJGgGeKbzskBXZlyXCK0fw==" lang="en" style="background: #2B2B2B;">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC">
<link rel="preconnect" href="https://www.google.com" crossorigin>
</head>
<body>
<div id="target" style="opacity: 0"></div>
<script>window.park = "eyJ1dWlkIjoiN2M4YTg1ZDItNzc2NS00ZmE0LTgyMDEtOGY1OThhNDZhNTJhIiwicGFnZV90aW1lIjoxNzY5NDIwODU4LCJwYWdlX3VybCI6Imh0dHBzOi8vd3cyNS41Zy5vYmlydXN0YS5jb20vIiwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX2hlYWRlcnMiOnt9LCJob3N0Ijoid3cyNS41Zy5vYmlydXN0YS5jb20iLCJpcCI6IjE0Mi45My4xNDMuOCJ9Cg==";</script>
<script src="/baezYWBEG.js"></script>
</body>
</html>
Open service 199.59.243.228:80 · ww25.5g.obirusta.com
2026-01-26 09:47
HTTP/1.1 200 OK
date: Mon, 26 Jan 2026 09:47:37 GMT
content-type: text/html; charset=utf-8
content-length: 1062
x-request-id: 0452354d-fdfe-4172-a7b5-fa1232666aac
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_vQChvJS7Qt5hP2KfDWoNEAj9/p7YtZ8vJIKDNjacHJMW1cZoxITnVkA4hZTrucmepJGgGeKbzskBXZlyXCK0fw==
set-cookie: parking_session=0452354d-fdfe-4172-a7b5-fa1232666aac; expires=Mon, 26 Jan 2026 10:02:38 GMT; path=/
connection: close
<!doctype html>
<html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_vQChvJS7Qt5hP2KfDWoNEAj9/p7YtZ8vJIKDNjacHJMW1cZoxITnVkA4hZTrucmepJGgGeKbzskBXZlyXCK0fw==" lang="en" style="background: #2B2B2B;">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC">
<link rel="preconnect" href="https://www.google.com" crossorigin>
</head>
<body>
<div id="target" style="opacity: 0"></div>
<script>window.park = "eyJ1dWlkIjoiMDQ1MjM1NGQtZmRmZS00MTcyLWE3YjUtZmExMjMyNjY2YWFjIiwicGFnZV90aW1lIjoxNzY5NDIwODU4LCJwYWdlX3VybCI6Imh0dHA6Ly93dzI1LjVnLm9iaXJ1c3RhLmNvbS8iLCJwYWdlX21ldGhvZCI6IkdFVCIsInBhZ2VfcmVxdWVzdCI6e30sInBhZ2VfaGVhZGVycyI6e30sImhvc3QiOiJ3dzI1LjVnLm9iaXJ1c3RhLmNvbSIsImlwIjoiMTY0LjkwLjIyOC43OSJ9Cg==";</script>
<script src="/bEzIwcDwY.js"></script>
</body>
</html>