The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba918840201160ab0b42d45b3
[init] defaultBranch = none [fetch] recurseSubmodules = false [http "https://git.everymatrix.com"] sslCAInfo = /home/gitlab-runner/builds/VvWsB2oq/0/playmatrix/streaming-demo.tmp/CI_SERVER_TLS_CA_FILE [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:zFg4CCt_uvFkx5oX9PRP@git.everymatrix.com/playmatrix/streaming-demo.git fetch = +refs/heads/*:refs/remotes/origin/*
Open service 2a02:26f0:2780:67::217:e392:80 · playmatrix.com
2026-01-08 13:53
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://playmatrix.com/ Expires: Thu, 08 Jan 2026 13:54:21 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 13:54:21 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1767880461264_34915474_4212435913_8_4754_103_0_-";dur=1
Open service 2a02:26f0:2780:67::217:e38f:443 · playmatrix.com
2026-01-08 13:53
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Link: <https://playmatrix.com/wp-json/>; rel="https://api.w.org/" Link: <https://playmatrix.com/wp-json/wp/v2/pages/20>; rel="alternate"; title="JSON"; type="application/json" Link: <https://playmatrix.com/>; rel=shortlink X-Akamai-Transformed: 9 - 0 pmb=mRUM,1 Expires: Thu, 08 Jan 2026 13:53:41 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 13:53:41 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: PHPSESSID=9q9g5fo7rm6lau99jmqll7drg6; path=/ Server-Timing: edge; dur=1 Server-Timing: origin; dur=723 Server-Timing: cdn-cache; desc=MISS Alt-Svc: h3=":443"; ma=93600 Strict-Transport-Security: max-age=15768000 ; includeSubDomains Server-Timing: ak_p; desc="1767880420753_34915471_3187235227_72242_10507_147_154_-";dur=1
Open service 2.16.204.5:443 · playmatrix.com
2026-01-08 13:53
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Link: <https://playmatrix.com/wp-json/>; rel="https://api.w.org/" Link: <https://playmatrix.com/wp-json/wp/v2/pages/20>; rel="alternate"; title="JSON"; type="application/json" Link: <https://playmatrix.com/>; rel=shortlink X-Akamai-Transformed: 9 - 0 pmb=mRUM,1 Expires: Thu, 08 Jan 2026 13:53:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 13:53:40 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: PHPSESSID=u16b3fn5446ov86fa8hi9klvma; path=/ Server-Timing: edge; dur=2 Server-Timing: origin; dur=732 Server-Timing: cdn-cache; desc=MISS Alt-Svc: h3=":443"; ma=93600 Strict-Transport-Security: max-age=15768000 ; includeSubDomains Server-Timing: ak_p; desc="1767880420233_34610437_2630036230_73418_8034_8_12_-";dur=1
Open service 2a02:26f0:2780:67::217:e38f:80 · playmatrix.com
2026-01-08 13:53
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://playmatrix.com/ Expires: Thu, 08 Jan 2026 13:54:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 13:54:20 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1767880460472_34915471_3187331293_8_4281_12_0_-";dur=1
Open service 2.16.204.5:80 · playmatrix.com
2026-01-08 13:53
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://playmatrix.com/ Expires: Thu, 08 Jan 2026 13:54:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 13:54:20 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1767880460957_34610437_2630104934_12_8608_88_0_-";dur=1
Open service 2a02:26f0:2780:67::217:e392:443 · playmatrix.com
2026-01-08 13:53
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Link: <https://playmatrix.com/wp-json/>; rel="https://api.w.org/" Link: <https://playmatrix.com/wp-json/wp/v2/pages/20>; rel="alternate"; title="JSON"; type="application/json" Link: <https://playmatrix.com/>; rel=shortlink X-Akamai-Transformed: 9 72956 0 pmb=mRUM,1 Expires: Thu, 08 Jan 2026 13:53:41 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 13:53:41 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: PHPSESSID=q38pmeg0of11bq736114a9m2ca; path=/ Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=317 Server-Timing: origin; dur=606 Alt-Svc: h3=":443"; ma=93600 Strict-Transport-Security: max-age=15768000 ; includeSubDomains Server-Timing: ak_p; desc="1767880420310_34915471_3187233980_92124_4339_81_143_-";dur=1
Open service 2.16.204.13:80 · playmatrix.com
2026-01-08 13:53
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://playmatrix.com/ Expires: Thu, 08 Jan 2026 13:54:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 13:54:20 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1767880460564_34610445_3850713470_15_8423_12_0_-";dur=1
Open service 2.16.204.13:443 · playmatrix.com
2026-01-08 13:53
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Link: <https://playmatrix.com/wp-json/>; rel="https://api.w.org/" Link: <https://playmatrix.com/wp-json/wp/v2/pages/20>; rel="alternate"; title="JSON"; type="application/json" Link: <https://playmatrix.com/>; rel=shortlink X-Akamai-Transformed: 9 72956 0 pmb=mRUM,1 Expires: Thu, 08 Jan 2026 13:53:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 13:53:40 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: PHPSESSID=6pq7ba3vdsg3g6eamt3nki036c; path=/ Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=156 Server-Timing: origin; dur=555 Alt-Svc: h3=":443"; ma=93600 Strict-Transport-Security: max-age=15768000 ; includeSubDomains Server-Timing: ak_p; desc="1767880420132_34610437_2630036092_71085_7274_9_14_-";dur=1
Open service 2a02:26f0:3500:14::1724:a247:443 · playmatrix.com
2026-01-05 07:42
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Link: <https://playmatrix.com/wp-json/>; rel="https://api.w.org/" Link: <https://playmatrix.com/wp-json/wp/v2/pages/20>; rel="alternate"; title="JSON"; type="application/json" Link: <https://playmatrix.com/>; rel=shortlink X-Akamai-Transformed: 9 72956 0 pmb=mRUM,1 Expires: Mon, 05 Jan 2026 07:42:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 05 Jan 2026 07:42:59 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: PHPSESSID=b0fj97stsato9q6j8q2fbn5ajj; path=/ Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=90 Server-Timing: origin; dur=635 Alt-Svc: h3=":443"; ma=93600 Strict-Transport-Security: max-age=15768000 ; includeSubDomains Server-Timing: ak_p; desc="1767598979063_388276240_2581519590_72438_9212_159_172_-";dur=1
Open service 2.16.204.69:80 · playmatrix.com
2026-01-05 07:42
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://playmatrix.com/ Expires: Mon, 05 Jan 2026 07:43:00 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 05 Jan 2026 07:43:00 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1767598980569_34610501_3876202392_14_10467_17_0_-";dur=1
Open service 2a02:26f0:3500:14::1724:a250:80 · playmatrix.com
2026-01-05 07:42
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://playmatrix.com/ Expires: Mon, 05 Jan 2026 07:43:00 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 05 Jan 2026 07:43:00 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1767598980490_388276240_2581521976_11_8057_1_0_-";dur=1
Open service 2a02:26f0:3500:14::1724:a250:443 · playmatrix.com
2026-01-05 07:42
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Link: <https://playmatrix.com/wp-json/>; rel="https://api.w.org/" Link: <https://playmatrix.com/wp-json/wp/v2/pages/20>; rel="alternate"; title="JSON"; type="application/json" Link: <https://playmatrix.com/>; rel=shortlink X-Akamai-Transformed: 9 - 0 pmb=mRUM,1 Expires: Mon, 05 Jan 2026 07:42:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 05 Jan 2026 07:42:59 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: PHPSESSID=v3h5hsgubo5vh9rvru6rh6l404; path=/ Server-Timing: edge; dur=1 Server-Timing: origin; dur=850 Server-Timing: cdn-cache; desc=MISS Alt-Svc: h3=":443"; ma=93600 Strict-Transport-Security: max-age=15768000 ; includeSubDomains Server-Timing: ak_p; desc="1767598978908_388276240_2581519163_85164_7540_100_104_-";dur=1
Open service 2a02:26f0:3500:14::1724:a247:80 · playmatrix.com
2026-01-05 07:42
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://playmatrix.com/ Expires: Mon, 05 Jan 2026 07:43:00 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 05 Jan 2026 07:43:00 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1767598980529_388276231_2472340742_12_8033_1_0_-";dur=1
Open service 2.16.204.91:443 · playmatrix.com
2026-01-05 07:42
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Link: <https://playmatrix.com/wp-json/>; rel="https://api.w.org/" Link: <https://playmatrix.com/wp-json/wp/v2/pages/20>; rel="alternate"; title="JSON"; type="application/json" Link: <https://playmatrix.com/>; rel=shortlink X-Akamai-Transformed: 9 - 0 pmb=mRUM,1 Expires: Mon, 05 Jan 2026 07:42:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 05 Jan 2026 07:42:59 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: PHPSESSID=6b3knmetbsmd5kurlah89b3imp; path=/ Server-Timing: edge; dur=22 Server-Timing: origin; dur=710 Server-Timing: cdn-cache; desc=MISS Alt-Svc: h3=":443"; ma=93600 Strict-Transport-Security: max-age=15768000 ; includeSubDomains Server-Timing: ak_p; desc="1767598978531_34610501_3876194953_73200_8728_8_11_-";dur=1
Open service 2.16.204.91:80 · playmatrix.com
2026-01-05 07:42
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://playmatrix.com/ Expires: Mon, 05 Jan 2026 07:43:00 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 05 Jan 2026 07:43:00 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1767598980452_34610523_103313536_11_7554_18_0_-";dur=1
Open service 2.16.204.69:443 · playmatrix.com
2026-01-05 07:42
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Link: <https://playmatrix.com/wp-json/>; rel="https://api.w.org/" Link: <https://playmatrix.com/wp-json/wp/v2/pages/20>; rel="alternate"; title="JSON"; type="application/json" Link: <https://playmatrix.com/>; rel=shortlink X-Akamai-Transformed: 9 - 0 pmb=mRUM,1 Expires: Mon, 05 Jan 2026 07:42:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 05 Jan 2026 07:42:59 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: PHPSESSID=8s4ps1t4ebte3kfb5sfr5hlo7c; path=/ Server-Timing: edge; dur=32 Server-Timing: origin; dur=728 Server-Timing: cdn-cache; desc=MISS Alt-Svc: h3=":443"; ma=93600 Strict-Transport-Security: max-age=15768000 ; includeSubDomains Server-Timing: ak_p; desc="1767598978520_34610501_3876194950_76003_9993_17_21_-";dur=1