Apache
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d657121a
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://kbchoi93@github.com/mindswitch/picks-global.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main [branch "fortuen_20211021"] remote = origin merge = refs/heads/fortuen_20211021 [branch "nocache_20211102"] remote = origin merge = refs/heads/nocache_20211102 [branch "cookie_20211102"] remote = origin merge = refs/heads/cookie_20211102 [branch "dual_cookie_20211104"] remote = origin merge = refs/heads/dual_cookie_20211104 [branch "update_adx.txt_20220512"] remote = origin merge = refs/heads/update_adx.txt_20220512
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d657121a
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://kbchoi93@github.com/mindswitch/picks-global.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main [branch "fortuen_20211021"] remote = origin merge = refs/heads/fortuen_20211021 [branch "nocache_20211102"] remote = origin merge = refs/heads/nocache_20211102 [branch "cookie_20211102"] remote = origin merge = refs/heads/cookie_20211102 [branch "dual_cookie_20211104"] remote = origin merge = refs/heads/dual_cookie_20211104 [branch "update_adx.txt_20220512"] remote = origin merge = refs/heads/update_adx.txt_20220512
Open service 13.224.189.99:443 · www.picks.my
2026-01-23 12:11
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Content-Length: 499
Connection: close
Date: Fri, 23 Jan 2026 12:11:58 GMT
Pragma: public
Server: Apache
Location: /en_v2/list.html
Expires: Fri, 23 Jan 2026 12:21:58 GMT
Cache-Control: max-age=600
X-Cache: Hit from cloudfront
Via: 1.1 fa981996c573bcf9d186c4ea325d4f90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ATH51-P1
X-Amz-Cf-Id: aOErWoRS-c33RXh8lz8XUjW7Y6hMnSDP3zIHfpieevosSDLFNGh_IQ==
Age: 1
<script>
var date = new Date();
var offset = date.getTimezoneOffset();
var url = window.location.href;
var expires = 'expires=';
date.setTime(date.getTime() + 31536000000);
expires += date.toGMTString();
document.cookie = "viewer_user_timezone=" + offset + ";" + expires + "; path = /";
if(url.indexOf("?")>0) {
window.location.href = url + "&" + date.getTime();
} else {
window.location.href = url + "?" + date.getTime();
}
</script>
Open service 13.224.189.108:443 · picks.my
2026-01-23 04:49
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Content-Length: 499
Connection: close
Date: Fri, 23 Jan 2026 04:49:28 GMT
Pragma: public
Server: Apache
Location: /en_v2/list.html
Expires: Fri, 23 Jan 2026 04:59:28 GMT
Cache-Control: max-age=600
X-Cache: Hit from cloudfront
Via: 1.1 711f5d67b09f06a98eb0f7fbc2df30f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ATH51-P1
X-Amz-Cf-Id: 9tCX8kF8QJHmCq5AmcvqgNLPB6yeP1f9Rp2NHweNLid5lrVTC6RCFQ==
Age: 2
<script>
var date = new Date();
var offset = date.getTimezoneOffset();
var url = window.location.href;
var expires = 'expires=';
date.setTime(date.getTime() + 31536000000);
expires += date.toGMTString();
document.cookie = "viewer_user_timezone=" + offset + ";" + expires + "; path = /";
if(url.indexOf("?")>0) {
window.location.href = url + "&" + date.getTime();
} else {
window.location.href = url + "?" + date.getTime();
}
</script>
Open service 13.224.189.108:443 · picks.my
2026-01-09 18:37
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Content-Length: 499
Connection: close
Date: Fri, 09 Jan 2026 18:37:30 GMT
Pragma: public
Server: Apache
Location: /en_v2/list.html
Expires: Fri, 09 Jan 2026 18:47:30 GMT
Cache-Control: max-age=600
X-Cache: Hit from cloudfront
Via: 1.1 565b9bbf12d6cd412b4aa4963530395a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ATH51-P1
X-Amz-Cf-Id: tJgxTmzu7QQZYG3rDkvhPse4G3h94evYbelKivJZ33d2OFFFD7lpZg==
Age: 2
<script>
var date = new Date();
var offset = date.getTimezoneOffset();
var url = window.location.href;
var expires = 'expires=';
date.setTime(date.getTime() + 31536000000);
expires += date.toGMTString();
document.cookie = "viewer_user_timezone=" + offset + ";" + expires + "; path = /";
if(url.indexOf("?")>0) {
window.location.href = url + "&" + date.getTime();
} else {
window.location.href = url + "?" + date.getTime();
}
</script>
Open service 18.239.105.57:443 · picks.my
2026-01-09 16:32
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Content-Length: 499
Connection: close
Date: Fri, 09 Jan 2026 16:27:37 GMT
Pragma: public
Server: Apache
Location: /en_v2/list.html
Expires: Fri, 09 Jan 2026 16:37:37 GMT
Cache-Control: max-age=600
X-Cache: Hit from cloudfront
Via: 1.1 0ce4e0ab92519d33ff3c6cca42806b7e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-P3
X-Amz-Cf-Id: tOA0YYcgI0_NzVvMjd_rSg3mYLdp9dRej66xMU5Pp_fDstjFixpqOQ==
Age: 266
<script>
var date = new Date();
var offset = date.getTimezoneOffset();
var url = window.location.href;
var expires = 'expires=';
date.setTime(date.getTime() + 31536000000);
expires += date.toGMTString();
document.cookie = "viewer_user_timezone=" + offset + ";" + expires + "; path = /";
if(url.indexOf("?")>0) {
window.location.href = url + "&" + date.getTime();
} else {
window.location.href = url + "?" + date.getTime();
}
</script>
Open service 13.224.189.99:443 · www.picks.my
2026-01-09 07:02
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Content-Length: 499
Connection: close
Date: Fri, 09 Jan 2026 07:02:43 GMT
Pragma: public
Server: Apache
Location: /en_v2/list.html
Expires: Fri, 09 Jan 2026 07:12:43 GMT
Cache-Control: max-age=600
X-Cache: Hit from cloudfront
Via: 1.1 71f1b0a7ccc64a6cf3b571841b246ac4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ATH51-P1
X-Amz-Cf-Id: 9wqGr_AiSK3DWyae_Yjf7Pms-lRGV-77bUHdh5lsVV5brD0fxfF_Dw==
Age: 2
<script>
var date = new Date();
var offset = date.getTimezoneOffset();
var url = window.location.href;
var expires = 'expires=';
date.setTime(date.getTime() + 31536000000);
expires += date.toGMTString();
document.cookie = "viewer_user_timezone=" + offset + ";" + expires + "; path = /";
if(url.indexOf("?")>0) {
window.location.href = url + "&" + date.getTime();
} else {
window.location.href = url + "?" + date.getTime();
}
</script>
Open service 13.224.189.108:443 · picks.my
2026-01-02 21:45
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Content-Length: 499
Connection: close
Date: Fri, 02 Jan 2026 21:45:11 GMT
Pragma: public
Server: Apache
Location: /en_v2/list.html
Expires: Fri, 02 Jan 2026 21:55:11 GMT
Cache-Control: max-age=600
X-Cache: Hit from cloudfront
Via: 1.1 7c0627b0e041101a8854f7c2b9f7fe8c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ATH51-P1
X-Amz-Cf-Id: l_qL2IYZtmi5ubXu-fqp4WZEoMmaGp-R8zUL5gct_rNddCEye9YZcg==
<script>
var date = new Date();
var offset = date.getTimezoneOffset();
var url = window.location.href;
var expires = 'expires=';
date.setTime(date.getTime() + 31536000000);
expires += date.toGMTString();
document.cookie = "viewer_user_timezone=" + offset + ";" + expires + "; path = /";
if(url.indexOf("?")>0) {
window.location.href = url + "&" + date.getTime();
} else {
window.location.href = url + "?" + date.getTime();
}
</script>
Open service 13.224.189.99:443 · www.picks.my
2026-01-02 08:07
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Content-Length: 499
Connection: close
Date: Fri, 02 Jan 2026 08:07:28 GMT
Pragma: public
Server: Apache
Location: /en_v2/list.html
Expires: Fri, 02 Jan 2026 08:17:28 GMT
Cache-Control: max-age=600
X-Cache: Hit from cloudfront
Via: 1.1 8226fa36e023dcecea88d7632228559c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ATH51-P1
X-Amz-Cf-Id: wP4fD_2TFgaLvGiygUKBkaV1JjO-IdsdmumAK2U35KeMN1hLxuf3Mg==
<script>
var date = new Date();
var offset = date.getTimezoneOffset();
var url = window.location.href;
var expires = 'expires=';
date.setTime(date.getTime() + 31536000000);
expires += date.toGMTString();
document.cookie = "viewer_user_timezone=" + offset + ";" + expires + "; path = /";
if(url.indexOf("?")>0) {
window.location.href = url + "&" + date.getTime();
} else {
window.location.href = url + "?" + date.getTime();
}
</script>
Open service 13.224.189.108:443 · picks.my
2025-12-23 04:34
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Content-Length: 499
Connection: close
Date: Tue, 23 Dec 2025 04:34:40 GMT
Pragma: public
Server: Apache
Location: /en_v2/list.html
Expires: Tue, 23 Dec 2025 04:44:40 GMT
Cache-Control: max-age=600
X-Cache: Hit from cloudfront
Via: 1.1 a18a2e9b5b87821d11a48e0cd5d3b578.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ATH51-P1
X-Amz-Cf-Id: ekPBi-GElptjAdBq5Iqnua5W8uRkofAOHXsKxtaG_YekCtUXvgAVZA==
<script>
var date = new Date();
var offset = date.getTimezoneOffset();
var url = window.location.href;
var expires = 'expires=';
date.setTime(date.getTime() + 31536000000);
expires += date.toGMTString();
document.cookie = "viewer_user_timezone=" + offset + ";" + expires + "; path = /";
if(url.indexOf("?")>0) {
window.location.href = url + "&" + date.getTime();
} else {
window.location.href = url + "?" + date.getTime();
}
</script>
Open service 52.84.174.115:443 · picks.my
2025-12-22 20:13
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Content-Length: 499
Connection: close
Date: Mon, 22 Dec 2025 20:13:39 GMT
Pragma: public
Server: Apache
Location: /en_v2/list.html
Expires: Mon, 22 Dec 2025 20:23:39 GMT
Cache-Control: max-age=600
X-Cache: Hit from cloudfront
Via: 1.1 7279057aafa9070c677136c3d9c68912.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: CDG50-P1
X-Amz-Cf-Id: wny-8ocP72nNfr4UkrFWax8fob8-0Z9EmNLjVIZCMX286tNTaoY29g==
<script>
var date = new Date();
var offset = date.getTimezoneOffset();
var url = window.location.href;
var expires = 'expires=';
date.setTime(date.getTime() + 31536000000);
expires += date.toGMTString();
document.cookie = "viewer_user_timezone=" + offset + ";" + expires + "; path = /";
if(url.indexOf("?")>0) {
window.location.href = url + "&" + date.getTime();
} else {
window.location.href = url + "?" + date.getTime();
}
</script>
Open service 13.224.189.99:443 · www.picks.my
2025-12-22 13:05
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Content-Length: 499
Connection: close
Date: Mon, 22 Dec 2025 13:05:57 GMT
Pragma: public
Server: Apache
Location: /en_v2/list.html
Expires: Mon, 22 Dec 2025 13:15:57 GMT
Cache-Control: max-age=600
X-Cache: Hit from cloudfront
Via: 1.1 060cfd00abc7495be34a0b02f47da9ae.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ATH51-P1
X-Amz-Cf-Id: 9zM84YuU8V5XyAeEG1qPvcnuLHxQsGtskskQp7SVg7FOY8d6Ii0Sow==
<script>
var date = new Date();
var offset = date.getTimezoneOffset();
var url = window.location.href;
var expires = 'expires=';
date.setTime(date.getTime() + 31536000000);
expires += date.toGMTString();
document.cookie = "viewer_user_timezone=" + offset + ";" + expires + "; path = /";
if(url.indexOf("?")>0) {
window.location.href = url + "&" + date.getTime();
} else {
window.location.href = url + "?" + date.getTime();
}
</script>