AmazonS3
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c89780d63b8b9a80d8efd9b5cd45d9b5cd45d9b5cd45d9b5cd45
[remote "origin"] url = https://bitbucket.org/ipsendigital/application-sv3mvsx9cunwj8up fetch = +refs/heads/*:refs/remotes/origin/*
Open service 65.9.95.23:443 · onetrust-testing.dev.websandbox.ipsen.digital
2026-01-09 18:13
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 18612
Connection: close
Date: Fri, 09 Jan 2026 01:33:19 GMT
Last-Modified: Wed, 27 Dec 2023 16:48:04 GMT
ETag: "733bd71981dc2ebb97518b0b26f144e1"
x-amz-server-side-encryption: AES256
x-amz-version-id: rFnDDQc6Ljf_6XOFZpyCdaH7gyDhXvzH
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 0bb58964819755c192fe9c24c342bd1a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: pPY8VSO0Ra_FRZLhK1WNd16-wrZVCuSu2ApPlmUsmIAASf3OuzBl6A==
Age: 60039
Page title:
onetrust-testing.dev.websandbox.ipsen.digital -
application#sv3mvsx9cunwj8up
<!DOCTYPE html>
<html lang="en">
<head>
<title>
onetrust-testing.dev.websandbox.ipsen.digital -
application#sv3mvsx9cunwj8up
</title>
<meta charset="utf-8" />
<meta
name="viewport"
content="width=device-width, initial-scale=1, user-scalable=no"
/>
<!-- OneTrust Cookies Consent Notice start for onetrust-testing.dev.websandbox.ipsen.digital -->
<script
type="text/javascript"
src="https://cdn.cookielaw.org/consent/b8f1d11c-cf97-4068-8302-3bd1db7cb701/OtAutoBlock.js"
></script>
<script
src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js"
type="text/javascript"
charset="UTF-8"
data-domain-script="b8f1d11c-cf97-4068-8302-3bd1db7cb701"
></script>
<script type="text/javascript">
function OptanonWrapper() {
}
</script>
<!-- OneTrust Cookies Consent Notice end for onetrust-testing.dev.websandbox.ipsen.digital -->
<link rel="stylesheet" href="assets/css/main.css" />
<noscript
><link rel="stylesheet" href="assets/css/noscript.css"
/></noscript>
</head>
<body>
<script type="text/javascript">
(function (window, document, dataLayerName, id) {
(window[dataLayerName] = window[dataLayerName] || []),
window[dataLayerName].push({
start: new Date().getTime(),
event: "stg.start",
});
var scripts = document.getElementsByTagName("script")[0],
tags = document.createElement("script");
function stgCreateCookie(a, b, c) {
var d = "";
if (c) {
var e = new Date();
e.setTime(e.getTime() + 24 * c * 60 * 60 * 1e3),
(d = "; expires=" + e.toUTCString());
f = "; SameSite=Strict";
}
document.cookie = a + "=" + b + d + f + "; path=/";
}
var isStgDebug =
(window.location.href.match("stg_debug") ||
document.cookie.match("stg_debug")) &&
!window.location.href.match("stg_disable_debug");
stgCreateCookie("stg_debug", isStgDebug ? 1 : "", isStgDebug ? 14 : -1);
var qP = [];
dataLayerName !== "dataLayer" &&
qP.push("data_layer_name=" + dataLayerName),
isStgDebug && qP.push("stg_debug");
var qPString = qP.length > 0 ? "?" + qP.join("&") : "";
(tags.async = !0),
(tags.src =
"https://myipsen-test.containers.piwik.pro/" +
id +
".js" +
qPString),
scripts.parentNode.insertBefore(tags, scripts);
!(function (a, n, i) {
a[n] = a[n] || {};
for (var c = 0; c < i.length; c++)
!(function (i) {
(a[n][i] = a[n][i] || {}),
(a[n][i].api =
a[n][i].api ||
function () {
var a = [].slice.call(arguments, 0);
"string" == typeof a[0] &&
window[dataLayerName].push({
event: n + "." + i + ":" + a[0],
parameters: [].slice.call(arguments, 1),
});
});
})(i[c]);
})(window, "ppms", ["tm", "cm"]);
})(window, document, "dataLayer", "c7a1eaf7-99a8-4254-b365-e2b368972706");
</script>
<!-- Wrapper -->
<div id="wrapper">
<!-- Header -->
<header id="header">
<div class="logo">
<span class="icon fa-diamond"></span>
</div>
<div class="content">
<div class="inner">
<h1>Ipsen Test Cookie Consent</h1>
<p>
<!--[-->A fully responsive site template for OneTrust / Piwik
testing<!--]--><br />
</p>
</div>
</div>
<nav>
<ul>
<li><a href="#intro">Intro</a></li>
<li><a href="#work">Work</a></li>
<li><a href="#about">About</a></li>
<li><a href="#contact">Contact</a></li>
</ul>
</nav>
</header>
<!-- Ma
Open service 65.9.95.23:443 · onetrust-testing.dev.websandbox.ipsen.digital
2026-01-02 07:05
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 18612
Connection: close
Last-Modified: Wed, 27 Dec 2023 16:48:04 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: rFnDDQc6Ljf_6XOFZpyCdaH7gyDhXvzH
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 02 Jan 2026 02:09:33 GMT
ETag: "733bd71981dc2ebb97518b0b26f144e1"
X-Cache: Hit from cloudfront
Via: 1.1 a60a14dea4b4a9f77d34297a625f2e24.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: c5OJzNr7B9I-iVVZ5cEYVsgubTUnf8xGV9aKb_7T1_Jdo2jVTakx-A==
Age: 17752
Page title:
onetrust-testing.dev.websandbox.ipsen.digital -
application#sv3mvsx9cunwj8up
<!DOCTYPE html>
<html lang="en">
<head>
<title>
onetrust-testing.dev.websandbox.ipsen.digital -
application#sv3mvsx9cunwj8up
</title>
<meta charset="utf-8" />
<meta
name="viewport"
content="width=device-width, initial-scale=1, user-scalable=no"
/>
<!-- OneTrust Cookies Consent Notice start for onetrust-testing.dev.websandbox.ipsen.digital -->
<script
type="text/javascript"
src="https://cdn.cookielaw.org/consent/b8f1d11c-cf97-4068-8302-3bd1db7cb701/OtAutoBlock.js"
></script>
<script
src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js"
type="text/javascript"
charset="UTF-8"
data-domain-script="b8f1d11c-cf97-4068-8302-3bd1db7cb701"
></script>
<script type="text/javascript">
function OptanonWrapper() {
}
</script>
<!-- OneTrust Cookies Consent Notice end for onetrust-testing.dev.websandbox.ipsen.digital -->
<link rel="stylesheet" href="assets/css/main.css" />
<noscript
><link rel="stylesheet" href="assets/css/noscript.css"
/></noscript>
</head>
<body>
<script type="text/javascript">
(function (window, document, dataLayerName, id) {
(window[dataLayerName] = window[dataLayerName] || []),
window[dataLayerName].push({
start: new Date().getTime(),
event: "stg.start",
});
var scripts = document.getElementsByTagName("script")[0],
tags = document.createElement("script");
function stgCreateCookie(a, b, c) {
var d = "";
if (c) {
var e = new Date();
e.setTime(e.getTime() + 24 * c * 60 * 60 * 1e3),
(d = "; expires=" + e.toUTCString());
f = "; SameSite=Strict";
}
document.cookie = a + "=" + b + d + f + "; path=/";
}
var isStgDebug =
(window.location.href.match("stg_debug") ||
document.cookie.match("stg_debug")) &&
!window.location.href.match("stg_disable_debug");
stgCreateCookie("stg_debug", isStgDebug ? 1 : "", isStgDebug ? 14 : -1);
var qP = [];
dataLayerName !== "dataLayer" &&
qP.push("data_layer_name=" + dataLayerName),
isStgDebug && qP.push("stg_debug");
var qPString = qP.length > 0 ? "?" + qP.join("&") : "";
(tags.async = !0),
(tags.src =
"https://myipsen-test.containers.piwik.pro/" +
id +
".js" +
qPString),
scripts.parentNode.insertBefore(tags, scripts);
!(function (a, n, i) {
a[n] = a[n] || {};
for (var c = 0; c < i.length; c++)
!(function (i) {
(a[n][i] = a[n][i] || {}),
(a[n][i].api =
a[n][i].api ||
function () {
var a = [].slice.call(arguments, 0);
"string" == typeof a[0] &&
window[dataLayerName].push({
event: n + "." + i + ":" + a[0],
parameters: [].slice.call(arguments, 1),
});
});
})(i[c]);
})(window, "ppms", ["tm", "cm"]);
})(window, document, "dataLayer", "c7a1eaf7-99a8-4254-b365-e2b368972706");
</script>
<!-- Wrapper -->
<div id="wrapper">
<!-- Header -->
<header id="header">
<div class="logo">
<span class="icon fa-diamond"></span>
</div>
<div class="content">
<div class="inner">
<h1>Ipsen Test Cookie Consent</h1>
<p>
<!--[-->A fully responsive site template for OneTrust / Piwik
testing<!--]--><br />
</p>
</div>
</div>
<nav>
<ul>
<li><a href="#intro">Intro</a></li>
<li><a href="#work">Work</a></li>
<li><a href="#about">About</a></li>
<li><a href="#contact">Contact</a></li>
</ul>
</nav>
</header>
<!-- Ma
Open service 65.9.95.23:443 · onetrust-testing.dev.websandbox.ipsen.digital
2025-12-22 10:36
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 18612
Connection: close
Date: Mon, 22 Dec 2025 07:37:35 GMT
Last-Modified: Wed, 27 Dec 2023 16:48:04 GMT
ETag: "733bd71981dc2ebb97518b0b26f144e1"
x-amz-server-side-encryption: AES256
x-amz-version-id: rFnDDQc6Ljf_6XOFZpyCdaH7gyDhXvzH
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 8197d89da72990bb606996d5e7c73ab6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
X-Amz-Cf-Id: VyNC_3CTFtEl3Iip9pMZ-bWh3vN9aiunbyRHHNzPwR2wPiE06dUxiQ==
Age: 10728
Page title:
onetrust-testing.dev.websandbox.ipsen.digital -
application#sv3mvsx9cunwj8up
<!DOCTYPE html>
<html lang="en">
<head>
<title>
onetrust-testing.dev.websandbox.ipsen.digital -
application#sv3mvsx9cunwj8up
</title>
<meta charset="utf-8" />
<meta
name="viewport"
content="width=device-width, initial-scale=1, user-scalable=no"
/>
<!-- OneTrust Cookies Consent Notice start for onetrust-testing.dev.websandbox.ipsen.digital -->
<script
type="text/javascript"
src="https://cdn.cookielaw.org/consent/b8f1d11c-cf97-4068-8302-3bd1db7cb701/OtAutoBlock.js"
></script>
<script
src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js"
type="text/javascript"
charset="UTF-8"
data-domain-script="b8f1d11c-cf97-4068-8302-3bd1db7cb701"
></script>
<script type="text/javascript">
function OptanonWrapper() {
}
</script>
<!-- OneTrust Cookies Consent Notice end for onetrust-testing.dev.websandbox.ipsen.digital -->
<link rel="stylesheet" href="assets/css/main.css" />
<noscript
><link rel="stylesheet" href="assets/css/noscript.css"
/></noscript>
</head>
<body>
<script type="text/javascript">
(function (window, document, dataLayerName, id) {
(window[dataLayerName] = window[dataLayerName] || []),
window[dataLayerName].push({
start: new Date().getTime(),
event: "stg.start",
});
var scripts = document.getElementsByTagName("script")[0],
tags = document.createElement("script");
function stgCreateCookie(a, b, c) {
var d = "";
if (c) {
var e = new Date();
e.setTime(e.getTime() + 24 * c * 60 * 60 * 1e3),
(d = "; expires=" + e.toUTCString());
f = "; SameSite=Strict";
}
document.cookie = a + "=" + b + d + f + "; path=/";
}
var isStgDebug =
(window.location.href.match("stg_debug") ||
document.cookie.match("stg_debug")) &&
!window.location.href.match("stg_disable_debug");
stgCreateCookie("stg_debug", isStgDebug ? 1 : "", isStgDebug ? 14 : -1);
var qP = [];
dataLayerName !== "dataLayer" &&
qP.push("data_layer_name=" + dataLayerName),
isStgDebug && qP.push("stg_debug");
var qPString = qP.length > 0 ? "?" + qP.join("&") : "";
(tags.async = !0),
(tags.src =
"https://myipsen-test.containers.piwik.pro/" +
id +
".js" +
qPString),
scripts.parentNode.insertBefore(tags, scripts);
!(function (a, n, i) {
a[n] = a[n] || {};
for (var c = 0; c < i.length; c++)
!(function (i) {
(a[n][i] = a[n][i] || {}),
(a[n][i].api =
a[n][i].api ||
function () {
var a = [].slice.call(arguments, 0);
"string" == typeof a[0] &&
window[dataLayerName].push({
event: n + "." + i + ":" + a[0],
parameters: [].slice.call(arguments, 1),
});
});
})(i[c]);
})(window, "ppms", ["tm", "cm"]);
})(window, document, "dataLayer", "c7a1eaf7-99a8-4254-b365-e2b368972706");
</script>
<!-- Wrapper -->
<div id="wrapper">
<!-- Header -->
<header id="header">
<div class="logo">
<span class="icon fa-diamond"></span>
</div>
<div class="content">
<div class="inner">
<h1>Ipsen Test Cookie Consent</h1>
<p>
<!--[-->A fully responsive site template for OneTrust / Piwik
testing<!--]--><br />
</p>
</div>
</div>
<nav>
<ul>
<li><a href="#intro">Intro</a></li>
<li><a href="#work">Work</a></li>
<li><a href="#about">About</a></li>
<li><a href="#contact">Contact</a></li>
</ul>
</nav>
</header>
<!-- Ma