LeakIX - Host rtmq.cc

Domain rtmq.cc

United States

GOOGLE-CLOUD-PLATFORM

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 35.185.44.232
Domain: rtmq.cc
Port: 443
URL: https://rtmq.cc

First seen 2025-02-13 03:32
Last seen 2026-01-04 03:42
Open for 325 days

Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba918840231b48733d82c3e39

[init]
	defaultBranch = none
[fetch]
	recurseSubmodules = false
[credential]
	interactive = never
[gc]
	autoDetach = false
[http]
	extraHeader = X-Gitaly-Correlation-ID: 2e7f8abca6c7431d822010d6a2857367
[transfer]
	bundleURI = true
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab-ci-token:glcbt-6b_YPJhq_FFiPcMehvaszmy@gitlab.com/rtmq/rtmq.gitlab.io.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[lfs]
	repositoryformatversion = 0

Found on 2026-01-04 03:42

518 Bytes

Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba918840231b48733d1500e39

[init]
	defaultBranch = none
[fetch]
	recurseSubmodules = false
[credential]
	interactive = never
[gc]
	autoDetach = false
[http]
	extraHeader = X-Gitaly-Correlation-ID: 57e1c61574bab536e6914621250a3f34
[transfer]
	bundleURI = true
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab-ci-token:glcbt-6a_wmr6sxyyZ79K3nh7cg_9@gitlab.com/rtmq/rtmq.gitlab.io.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[lfs]
	repositoryformatversion = 0

Found on 2025-11-08 17:13

518 Bytes

Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba918840231b4873337c3dd81

[init]
	defaultBranch = none
[fetch]
	recurseSubmodules = false
[credential]
	interactive = never
[gc]
	autoDetach = false
[http]
	extraHeader = X-Gitaly-Correlation-ID: 43d850963b71e6ebc1aede5ef1181a19
[transfer]
	bundleURI = true
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab-ci-token:glcbt-6a_2ERRc67noR5dspjorBED@gitlab.com/rtmq/rtmq.gitlab.io.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[lfs]
	repositoryformatversion = 0

Found on 2025-09-07 01:15

518 Bytes

Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba918840231b48733ffb8ed4e

[init]
	defaultBranch = none
[fetch]
	recurseSubmodules = false
[credential]
	interactive = never
[transfer]
	bundleURI = true
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab-ci-token:glcbt-66_Nj5iCTzyECEFcZ34nn17@gitlab.com/rtmq/rtmq.gitlab.io.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[lfs]
	repositoryformatversion = 0

Found on 2025-09-05 11:43

413 Bytes

Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884029ffc42c10034a437

[init]
	defaultBranch = none
[fetch]
	recurseSubmodules = false
[transfer]
	bundleURI = true
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab-ci-token:glcbt-66_yGyXoPKKtttiD4AajMdQ@gitlab.com/rtmq/rtmq.gitlab.io.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[lfs]
	repositoryformatversion = 0

Found on 2025-04-20 12:56

379 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 35.185.44.232
Domain: rtmq.cc
Port: 80
URL: http://rtmq.cc

First seen 2025-09-06 05:14

Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba918840231b4873337c3dd81

[init]
	defaultBranch = none
[fetch]
	recurseSubmodules = false
[credential]
	interactive = never
[gc]
	autoDetach = false
[http]
	extraHeader = X-Gitaly-Correlation-ID: 43d850963b71e6ebc1aede5ef1181a19
[transfer]
	bundleURI = true
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab-ci-token:glcbt-6a_2ERRc67noR5dspjorBED@gitlab.com/rtmq/rtmq.gitlab.io.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[lfs]
	repositoryformatversion = 0

Found on 2025-09-06 05:14

518 Bytes

Create report

Open service 35.185.44.232:443 · rtmq.cc

2026-01-12 21:11

HTTP/1.1 200 OK
Cache-Control: max-age=600
Content-Length: 102698
Content-Type: text/html; charset=utf-8
Etag: "69115c229ed172153718d2837af7fc27f50bda5747b5716d5d918305b00be891"
Expires: Mon, 12 Jan 2026 21:21:47 UTC
Last-Modified: Sun, 09 Nov 2025 17:04:19 GMT
Permissions-Policy: interest-cohort=()
Vary: Origin
X-Request-Id: 01KET0SXRWXVPRGETPDB4MQ7J2
Date: Mon, 12 Jan 2026 21:11:47 GMT
Connection: close


<!DOCTYPE html><html lang="en">
<head><meta charset="utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><meta http-equiv="content-type" content="text/html; charset=UTF-8" /></head>
<body><div></div><script>
function register(path){var name=(path.endsWith('/')?path.slice(0,-1):path).split('/').pop();if(name&&!Vue.options.components[name])VueLoader.register(Vue,(path.startsWith('/')||path.startsWith('.')?'':'vue/')+(path.endsWith('.vue')||path.endsWith('/')?path:(path+'.vue')));return name}
function request(url,data,cb){var xhr=new XMLHttpRequest();if(cb===undefined){if(data!==undefined){xhr.open('POST',url,true);xhr.send(data);return xhr}else{xhr.open('GET',url,false);xhr.send();return xhr.status==200?xhr.responseText:undefined}}xhr.onreadystatechange=function(){if(xhr.readyState==4)(cb||console.log)(xhr)};xhr.open(data!==undefined?'POST':'GET',url,true);xhr.send(data);return xhr}
args={};for(let [k,v] of new URLSearchParams(location.search.split('&').slice(1).join('&')))args[k]=v
try{config=JSON.parse(localStorage.config)}catch{config={}};config.ajax=config.ajax||'cdn/';config.npm=config.npm||'cdn/'
function cdn(url){if(url.startsWith('ajax'))return config.ajax+url;else if(url.startsWith('npm'))return config.npm+url;else return url}
function javascript(url,cb){url=cdn(url);if(cb===undefined)return (function(define,exports){return eval(request(url))})();var script=document.createElement('script');script.src=url;script.type='text/javascript';script.onload=cb;document.body.appendChild(script);document.body.removeChild(script)}
function stylesheet(url){url=cdn(url);if(!url.startsWith('http'))url=(location.origin.startsWith('file')?location.href.split('index.html')[0]:location.href.split('#')[0].split('?')[0])+url;for(var link of document.body.getElementsByTagName('link'))if(link.href==url)return;var link=document.createElement('link');link.rel='stylesheet';link.href=url;document.body.appendChild(link)}
window.onload=function(){
Vue.use(VueLoader)
window.$vue=new Vue({el:document.body.firstChild,template:'<component style="position:relative;height:100vh" ref="$" is="'+register(location.search.slice(1).split('&')[0]||(location.origin.startsWith('file')?prompt():'md'))+'"></component>'})
}</script>
<script>
/*!
 * Vue.js v2.6.14
 * (c) 2014-2021 Evan You
 * Released under the MIT License.
 */
!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e=e||self).Vue=t()}(this,function(){"use strict";var e=Object.freeze({});function t(e){return null==e}function n(e){return null!=e}function r(e){return!0===e}function i(e){return"string"==typeof e||"number"==typeof e||"symbol"==typeof e||"boolean"==typeof e}function o(e){return null!==e&&"object"==typeof e}var a=Object.prototype.toString;function s(e){return"[object Object]"===a.call(e)}function c(e){var t=parseFloat(String(e));return t>=0&&Math.floor(t)===t&&isFinite(e)}function u(e){return n(e)&&"function"==typeof e.then&&"function"==typeof e.catch}function l(e){return null==e?"":Array.isArray(e)||s(e)&&e.toString===a?JSON.stringify(e,null,2):String(e)}function f(e){var t=parseFloat(e);return isNaN(t)?e:t}function p(e,t){for(var n=Object.create(null),r=e.split(","),i=0;i<r.length;i++)n[r[i]]=!0;return t?function(e){return n[e.toLowerCase()]}:function(e){return n[e]}}var d=p("slot,component",!0),v=p("key,ref,slot,slot-scope,is");function h(e,t){if(e.length){var n=e.indexOf(t);if(n>-1)return e.splice(n,1)}}var m=Object.prototype.hasOwnProperty;function y(e,t){return m.call(e,t)}function g(e){var t=Object.create(null);return function(n){return t[n]||(t[n]=e(n))}}var _=/-(\w)/g,b=g(function(e){return e.replace(_,function(e,t){return t?t.toUpperCase():""})}),$=g(function(e){return e.charAt(0).toUpperCase()+e.slice(1)}),w=/\B([A-Z])/g,C=g(function(e){return e.replace(w,"-$1").toLowerCase()});var x=Function.prototype.bind?function(e,t){return e.bind(t)}:function(e,t){function n(n){var r=arguments.length;return r?r>1?e.apply(t,arguments):e.call(t,n):e.call(t)}return

Found 7 hours ago by HttpPlugin