nginx 1.22.1
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652214b7a655
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:glcbt-64_AsKs1xvRuw-r3r61MfoE@gitlab.droidnet.de/droid.ac15/appcreator-cms.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Open service 49.12.43.166:443 · otworld.appcms-lm.droidhosting.de
2026-01-10 21:14
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Jan 2026 21:14:55 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=f46cd096b71f5f661ec5023c51cc40cf; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · otworld.appcms-lm.droidhosting.de
2026-01-09 21:41
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Fri, 09 Jan 2026 21:41:54 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=e840df57f275c9e1fabc37e3a4540c56; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · otworld.appcms-lm.droidhosting.de
2026-01-08 21:26
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Thu, 08 Jan 2026 21:26:51 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=6374114dc6bc1a1a0ec923a0babde746; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · otworld.appcms-lm.droidhosting.de
2026-01-07 21:16
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Wed, 07 Jan 2026 21:16:15 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=39754e748b3e1d1fdab21f8269ca3197; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · otworld.appcms-lm.droidhosting.de
2026-01-06 21:25
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Tue, 06 Jan 2026 21:25:32 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=1f78975976876fcacdf688132ed08a28; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · otworld.appcms-lm.droidhosting.de
2026-01-03 21:29
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sat, 03 Jan 2026 21:29:10 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=d3e63d8bab7467dcd3468a70a896eb26; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · otworld.appcms-lm.droidhosting.de
2026-01-02 21:23
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Fri, 02 Jan 2026 21:23:50 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=da2ac088fee21480aa36186fd65832d9; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · otworld.appcms-lm.droidhosting.de
2026-01-01 21:36
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Thu, 01 Jan 2026 21:36:33 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=cebcd0a469d4872b81ebf4ba4c7eaa7f; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · otworld.appcms-lm.droidhosting.de
2025-12-31 21:43
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Wed, 31 Dec 2025 21:43:36 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=da8beca9e17aec3634ac1695d59f5407; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · otworld.appcms-lm.droidhosting.de
2025-12-30 21:31
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Tue, 30 Dec 2025 21:31:46 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=5a95d4871ba36df73917c8ebbc1f1391; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · otworld.appcms-lm.droidhosting.de
2025-12-22 22:33
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Mon, 22 Dec 2025 22:33:32 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=cf1b01f4ebc81833862e0755603ba11f; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · otworld.appcms-lm.droidhosting.de
2025-12-21 08:47
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sun, 21 Dec 2025 08:47:47 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=ac7161548e41491fc3ba578b55dc66af; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · otworld.appcms-lm.droidhosting.de
2025-12-19 08:46
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Dec 2025 08:46:52 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=d59ef454b54207961b94e08f61ac5bd0; path=/ Connection: close Transfer-Encoding: chunked