Apache 2.4.10
tcp/443
nginx
tcp/443 tcp/80
sw-cp-server
tcp/8443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652223a886ec
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://git.globalincubator.net/core/compactlink.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 164.132.238.196:443 · compactlink.pactomundial.org
2026-01-09 10:13
HTTP/1.1 200 OK Date: Fri, 09 Jan 2026 10:13:12 GMT Server: Apache/2.4.10 (Debian) Strict-Transport-Security: max-age=31536000; preload Set-Cookie: GiSession=9aaofqu7rben2llqgbnin77740; expires=Sun, 08-Feb-2026 20:42:12 GMT; Max-Age=2629740; path=/; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Script-Type: text/javascript Content-Style-Type: text/css Content-Language: es-es Accept-Ranges: none Set-Cookie: GiSession=9aaofqu7rben2llqgbnin77740; expires=Sun, 08-Feb-2026 20:42:12 GMT; Max-Age=2629740; path=/; secure; HttpOnly Set-Cookie: GiSession=9aaofqu7rben2llqgbnin77740; expires=Sun, 08-Feb-2026 20:42:12 GMT; Max-Age=2629740; path=/; secure; HttpOnly Set-Cookie: GiSession=9aaofqu7rben2llqgbnin77740; expires=Sun, 08-Feb-2026 20:42:12 GMT; Max-Age=2629740; path=/; secure; HttpOnly Set-Cookie: GiSession=9aaofqu7rben2llqgbnin77740; expires=Sun, 08-Feb-2026 20:42:12 GMT; Max-Age=2629740; path=/; secure; HttpOnly Vary: Accept-Encoding X-Robots-Tag: none Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8
Open service 188.93.73.114:8443 · pactomundial.org
2026-01-05 14:26
HTTP/1.1 303 See Other Server: sw-cp-server Date: Mon, 05 Jan 2026 14:26:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Fri, 28 May 1999 00:00:00 GMT Last-Modified: Mon, 05 Jan 2026 14:26:24 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Location: https://pactomundial.org/login.php X-Content-Type-Options: nosniff
Open service 188.93.73.114:80 · pactomundial.org
2026-01-05 14:26
HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 05 Jan 2026 14:26:23 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.pactomundial.org/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 188.93.73.114:443 · pactomundial.org
2026-01-05 14:26
HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 05 Jan 2026 14:26:23 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.pactomundial.org/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 18.208.39.163:80 · academyspainincompany.pactomundial.org
2026-01-03 11:08
HTTP/1.1 301 Moved Permanently Date: Sat, 03 Jan 2026 11:08:25 GMT Content-Type: text/html Content-Length: 134 Connection: close Content-Security-Policy: frame-ancestors 'self' https://unglobalcompact.org www.linkedin.com www.youtube.com https://www.qualtrics.com weps-gapanalysis.org https://*.my.salesforce.com https://*.force.com https://*.visualforce.com https://anubi.docebo.cloud https://*.lightning.force.com https://unglobalcompact--fgcfull.lightning.force.com https://unglobalcompact--fgcfull.my.salesforce.com www.spotify.com https://open.spotify.com https://sciencebasedtargets.org https://www.wickedproblemsolver.com https://*.trello.com https://bhr-navigator.unglobalcompact.org https://sdgacademylibrary.mediaspace.kaltura.com https://sdg.guide https://us02web.zoom.us https://tgtool.unglobalcompact.org ewaw.itcilo.org ungc.docebosaas.com Location: https://academyspainincompany.pactomundial.org/ Set-Cookie: r=use1-ecs; path=/; HttpOnly; Secure; Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> </body> </html>
Open service 100.24.157.224:80 · academyspainincompany.pactomundial.org
2026-01-03 11:08
HTTP/1.1 301 Moved Permanently Date: Sat, 03 Jan 2026 11:08:25 GMT Content-Type: text/html Content-Length: 134 Connection: close Content-Security-Policy: frame-ancestors 'self' https://unglobalcompact.org www.linkedin.com www.youtube.com https://www.qualtrics.com weps-gapanalysis.org https://*.my.salesforce.com https://*.force.com https://*.visualforce.com https://anubi.docebo.cloud https://*.lightning.force.com https://unglobalcompact--fgcfull.lightning.force.com https://unglobalcompact--fgcfull.my.salesforce.com www.spotify.com https://open.spotify.com https://sciencebasedtargets.org https://www.wickedproblemsolver.com https://*.trello.com https://bhr-navigator.unglobalcompact.org https://sdgacademylibrary.mediaspace.kaltura.com https://sdg.guide https://us02web.zoom.us https://tgtool.unglobalcompact.org ewaw.itcilo.org ungc.docebosaas.com Location: https://academyspainincompany.pactomundial.org/ Set-Cookie: r=use1-ecs; path=/; HttpOnly; Secure; Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> </body> </html>
Open service 100.24.157.224:443 · academyspainincompany.pactomundial.org
2026-01-03 11:08
HTTP/1.1 301 Moved Permanently Date: Sat, 03 Jan 2026 11:08:25 GMT Content-Type: text/html Content-Length: 134 Connection: close Content-Security-Policy: frame-ancestors 'self' https://unglobalcompact.org www.linkedin.com www.youtube.com https://www.qualtrics.com weps-gapanalysis.org https://*.my.salesforce.com https://*.force.com https://*.visualforce.com https://anubi.docebo.cloud https://*.lightning.force.com https://unglobalcompact--fgcfull.lightning.force.com https://unglobalcompact--fgcfull.my.salesforce.com www.spotify.com https://open.spotify.com https://sciencebasedtargets.org https://www.wickedproblemsolver.com https://*.trello.com https://bhr-navigator.unglobalcompact.org https://sdgacademylibrary.mediaspace.kaltura.com https://sdg.guide https://us02web.zoom.us https://tgtool.unglobalcompact.org ewaw.itcilo.org ungc.docebosaas.com Location: https://academyspainincompany.pactomundial.org/learn Strict-Transport-Security: max-age=31536000; includeSubDomains; X-Content-Type-Options: nosniff Set-Cookie: r=use1-ecs; path=/; HttpOnly; Secure; Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> </body> </html>
Open service 18.208.39.163:443 · academyspainincompany.pactomundial.org
2026-01-03 11:08
HTTP/1.1 301 Moved Permanently Date: Sat, 03 Jan 2026 11:08:25 GMT Content-Type: text/html Content-Length: 134 Connection: close Content-Security-Policy: frame-ancestors 'self' https://unglobalcompact.org www.linkedin.com www.youtube.com https://www.qualtrics.com weps-gapanalysis.org https://*.my.salesforce.com https://*.force.com https://*.visualforce.com https://anubi.docebo.cloud https://*.lightning.force.com https://unglobalcompact--fgcfull.lightning.force.com https://unglobalcompact--fgcfull.my.salesforce.com www.spotify.com https://open.spotify.com https://sciencebasedtargets.org https://www.wickedproblemsolver.com https://*.trello.com https://bhr-navigator.unglobalcompact.org https://sdgacademylibrary.mediaspace.kaltura.com https://sdg.guide https://us02web.zoom.us https://tgtool.unglobalcompact.org ewaw.itcilo.org ungc.docebosaas.com Location: https://academyspainincompany.pactomundial.org/learn Strict-Transport-Security: max-age=31536000; includeSubDomains; X-Content-Type-Options: nosniff Set-Cookie: r=use1-ecs; path=/; HttpOnly; Secure; Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> </body> </html>
Open service 164.132.238.196:443 · compactlink.pactomundial.org
2026-01-02 14:21
HTTP/1.1 200 OK Date: Fri, 02 Jan 2026 14:21:36 GMT Server: Apache/2.4.10 (Debian) Strict-Transport-Security: max-age=31536000; preload Set-Cookie: GiSession=vp9d6184t00pe46adq47mso2k1; expires=Mon, 02-Feb-2026 00:50:36 GMT; Max-Age=2629740; path=/; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Script-Type: text/javascript Content-Style-Type: text/css Content-Language: es-es Accept-Ranges: none Set-Cookie: GiSession=vp9d6184t00pe46adq47mso2k1; expires=Mon, 02-Feb-2026 00:50:36 GMT; Max-Age=2629740; path=/; secure; HttpOnly Set-Cookie: GiSession=vp9d6184t00pe46adq47mso2k1; expires=Mon, 02-Feb-2026 00:50:36 GMT; Max-Age=2629740; path=/; secure; HttpOnly Set-Cookie: GiSession=vp9d6184t00pe46adq47mso2k1; expires=Mon, 02-Feb-2026 00:50:36 GMT; Max-Age=2629740; path=/; secure; HttpOnly Set-Cookie: GiSession=vp9d6184t00pe46adq47mso2k1; expires=Mon, 02-Feb-2026 00:50:36 GMT; Max-Age=2629740; path=/; secure; HttpOnly Vary: Accept-Encoding X-Robots-Tag: none Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8
Open service 188.93.73.114:8443 · pactomundial.org
2025-12-23 18:14
HTTP/1.1 303 See Other Server: sw-cp-server Date: Tue, 23 Dec 2025 18:15:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Fri, 28 May 1999 00:00:00 GMT Last-Modified: Tue, 23 Dec 2025 18:15:00 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Location: https://pactomundial.org/login.php X-Content-Type-Options: nosniff
Open service 188.93.73.114:443 · pactomundial.org
2025-12-23 18:14
HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 23 Dec 2025 18:15:00 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.pactomundial.org/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 188.93.73.114:80 · pactomundial.org
2025-12-23 18:14
HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 23 Dec 2025 18:15:00 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.pactomundial.org/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 164.132.238.196:443 · compactlink.pactomundial.org
2025-12-23 03:04
HTTP/1.1 200 OK Date: Tue, 23 Dec 2025 03:04:33 GMT Server: Apache/2.4.10 (Debian) Strict-Transport-Security: max-age=31536000; preload Set-Cookie: GiSession=3g2i89bg13s0rt7pg49mvc2j03; expires=Thu, 22-Jan-2026 13:33:33 GMT; Max-Age=2629740; path=/; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Script-Type: text/javascript Content-Style-Type: text/css Content-Language: es-es Accept-Ranges: none Set-Cookie: GiSession=3g2i89bg13s0rt7pg49mvc2j03; expires=Thu, 22-Jan-2026 13:33:33 GMT; Max-Age=2629740; path=/; secure; HttpOnly Set-Cookie: GiSession=3g2i89bg13s0rt7pg49mvc2j03; expires=Thu, 22-Jan-2026 13:33:33 GMT; Max-Age=2629740; path=/; secure; HttpOnly Set-Cookie: GiSession=3g2i89bg13s0rt7pg49mvc2j03; expires=Thu, 22-Jan-2026 13:33:33 GMT; Max-Age=2629740; path=/; secure; HttpOnly Set-Cookie: GiSession=3g2i89bg13s0rt7pg49mvc2j03; expires=Thu, 22-Jan-2026 13:33:33 GMT; Max-Age=2629740; path=/; secure; HttpOnly Vary: Accept-Encoding X-Robots-Tag: none Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8
Open service 188.93.73.114:443 · openacademyspain.pactomundial.org
2025-12-20 19:54
HTTP/1.1 301 Moved Permanently Server: nginx Date: Sat, 20 Dec 2025 19:54:31 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 244 Connection: close Location: https://academy.unglobalcompact.org/ X-Powered-By: PleskLin Page title: 301 Moved Permanently <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="https://academy.unglobalcompact.org/">here</a>.</p> </body></html>
Open service 188.93.73.114:8443 · openacademyspain.pactomundial.org
2025-12-20 19:54
HTTP/1.1 303 See Other Server: sw-cp-server Date: Sat, 20 Dec 2025 19:54:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Fri, 28 May 1999 00:00:00 GMT Last-Modified: Sat, 20 Dec 2025 19:54:30 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Location: https://openacademyspain.pactomundial.org/login.php X-Content-Type-Options: nosniff
Open service 188.93.73.114:80 · openacademyspain.pactomundial.org
2025-12-20 19:54
HTTP/1.1 301 Moved Permanently Server: nginx Date: Sat, 20 Dec 2025 19:54:30 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://openacademyspain.pactomundial.org/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 164.132.238.196:443 · compactlink.pactomundial.org
2025-12-20 12:42
HTTP/1.1 200 OK Date: Sat, 20 Dec 2025 12:42:34 GMT Server: Apache/2.4.10 (Debian) Strict-Transport-Security: max-age=31536000; preload Set-Cookie: GiSession=4lbm733jmp4p0kdaid8av67rp1; expires=Mon, 19-Jan-2026 23:11:34 GMT; Max-Age=2629740; path=/; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Script-Type: text/javascript Content-Style-Type: text/css Content-Language: es-es Accept-Ranges: none Set-Cookie: GiSession=4lbm733jmp4p0kdaid8av67rp1; expires=Mon, 19-Jan-2026 23:11:34 GMT; Max-Age=2629740; path=/; secure; HttpOnly Set-Cookie: GiSession=4lbm733jmp4p0kdaid8av67rp1; expires=Mon, 19-Jan-2026 23:11:34 GMT; Max-Age=2629740; path=/; secure; HttpOnly Set-Cookie: GiSession=4lbm733jmp4p0kdaid8av67rp1; expires=Mon, 19-Jan-2026 23:11:34 GMT; Max-Age=2629740; path=/; secure; HttpOnly Set-Cookie: GiSession=4lbm733jmp4p0kdaid8av67rp1; expires=Mon, 19-Jan-2026 23:11:34 GMT; Max-Age=2629740; path=/; secure; HttpOnly Vary: Accept-Encoding X-Robots-Tag: none Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8