LeakIX - Host pa33.qltech.it

Domain pa33.qltech.it

Germany

Hetzner Online GmbH

Ubuntu

Software information

Apache Apache 2.4.58

tcp/443

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 168.119.232.162
Domain: pa33.qltech.it
Port: 443
URL: https://pa33.qltech.it

First seen 2024-01-08 15:21
Last seen 2025-10-08 12:21
Open for 638 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e0121b9c
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = git@bitbucket.org:qltechteam/learning-objects.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "feature/home_net_bck"]
	remote = origin
	merge = refs/heads/feature/home_net_bck
```
  Found on 2025-10-08 12:21
  
  364 Bytes
Create report

Open service 167.235.23.111:443 · pa33.qltech.it

2026-01-10 18:53

HTTP/1.1 200 OK
Date: Sat, 10 Jan 2026 18:53:27 GMT
Server: Apache/2.4.58 (Ubuntu)
Strict-Transport-Security: max-age=31536000
X-Frame-Options: SAMEORIGIN
Set-Cookie: LearningObjectsSESSID=k2f5ogh6i6b9keijiqg16vun5a; path=/; domain=pa33.qltech.it; secure; HttpOnly; SameSite=Strict
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Page title: Learning Objects

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
        "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="it">
<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Learning Objects</title>
    <link href="//cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css" rel="stylesheet"
          integrity="sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC" crossorigin="anonymous">
    <link href="/node_modules/font-awesome/css/font-awesome.min.css" rel="stylesheet">
    <link href="/css/login.css" rel="stylesheet">
    <link rel="apple-touch-icon" sizes="57x57" href="/img/favicon/apple-icon-57x57.png">
    <link rel="apple-touch-icon" sizes="60x60" href="/img/favicon/apple-icon-60x60.png">
    <link rel="apple-touch-icon" sizes="72x72" href="/img/favicon/apple-icon-72x72.png">
    <link rel="apple-touch-icon" sizes="76x76" href="/img/favicon/apple-icon-76x76.png">
    <link rel="apple-touch-icon" sizes="114x114" href="/img/favicon/apple-icon-114x114.png">
    <link rel="apple-touch-icon" sizes="120x120" href="/img/favicon/apple-icon-120x120.png">
    <link rel="apple-touch-icon" sizes="144x144" href="/img/favicon/apple-icon-144x144.png">
    <link rel="apple-touch-icon" sizes="152x152" href="/img/favicon/apple-icon-152x152.png">
    <link rel="apple-touch-icon" sizes="180x180" href="/img/favicon/apple-icon-180x180.png">
    <link rel="icon" type="image/png" sizes="192x192" href="/img/favicon/android-icon-192x192.png">
    <link rel="icon" type="image/png" sizes="32x32" href="/img/favicon/favicon-32x32.png">
    <link rel="icon" type="image/png" sizes="96x96" href="/img/favicon/favicon-96x96.png">
    <link rel="icon" type="image/png" sizes="16x16" href="/img/favicon/favicon-16x16.png">
    <link rel="manifest" href="/img/favicon/manifest.json">
    <meta name="msapplication-TileColor" content="#ffffff">
    <meta name="msapplication-TileImage" content="/img/favicon/ms-icon-144x144.png">
    <meta name="theme-color" content="#ffffff">

    <script type="text/javascript" src="/node_modules/jquery/dist/jquery.min.js"></script>
    <script type="text/javascript" src="/node_modules/jquery-lang-js/js/jquery-lang.js"
            charset="utf-8"></script>
    <script type="text/javascript" src="/node_modules/jquery-lang-js/js/js.cookie.js"
            charset="utf-8"></script>
    <script type="text/javascript">
        function language() {
            const lang = new Lang();

            lang.dynamic('it', '/js/langpack/it.json');
            lang.init({
                defaultLang: 'it',
                currentLang: 'it',
                /*cookie: {
                    name: 'langCookie',
                    expiry: 365,
                    path: '/'
                },
                allowCookieOverride: true*/
            });
            if (lang.afterUpdate()) {
                setTimeout(function () {
                    $('html').css('visibility', 'visible');
                }, 500)
            }
        }
    </script>
</head>
<body>
<div id="site_login" class="login">
    <div class="card card_login">
        <div class="card_login_logo">
            <img src="/resources/cf17e15b-21ef-4d61-b3de-dfce93144d4e/logo/62448252784bc.png" alt="Pa33" style="max-width: 250px">
        </div>

        <div class="card_login_body">
            <form name="frmLogin" action="" method="post">
                <input type="hidden" name="login" value="cf17e15b-21ef-4d61-b3de-dfce93144d4e"/>
                <input type="hidden" name="stato"/>

                                    <div class="form_group">
                        <div class="input_group">
                            <div class="input_group_prepend">
                                <i class="fa fa-user" style="margin-top: 11px;"></i></div>
                            <input class="input_group_input" id="username_field" type="email" name="email"
                                   placeholder="Email" required value

Found 2 days ago by HttpPlugin

Create report

*.qltech.itqltech.it

Fingerprint:

625921e3c8a42e34e7d35efb8ba5937374d06838780f0bbd4e7fc6d008174182

CN:

*.qltech.it

Key:

RSA-2048

Issuer:

Go Daddy Secure Certificate Authority - G2

Not before:

2024-12-22 08:10

Not after:

2026-01-23 08:10

Domain summary

pa33.qltech.it 1

1 recorded

IP summary

167.235.23.111 1 168.119.232.162 1

2 recorded