Apache 2.4.66
tcp/443
Apache 2.4.65
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652223898b14
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://oauth2:glpat-iL9Yj7SJYNsmw_r7do2s@gitlab.n10.xyz/northstarnetwork/sites-legacy/365alternativ-com.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [user] email = gitlab-sync@example.com name = GitLab Sync Script [credential] helper = store [safe] directory = /mnt/cephfs/365alternativ.com
Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c91343ee
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://oauth2:glpat-qUDPdHxi1Z72QT59YMmL@gitlab.n10.xyz/northstarnetwork/sites-legacy/365alternativ-com.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [user] email = gitlab-sync@example.com name = GitLab Sync Script [credential] helper = store [safe] directory = /mnt/cephfs/365alternativ.com
Open service 91.134.41.152:443 · staging.bet-bonuscode.ca
2026-01-25 21:20
HTTP/1.1 301 Moved Permanently Date: Sun, 25 Jan 2026 21:20:32 GMT Server: Apache/2.4.66 (Debian) X-Powered-By: PHP/7.4.33 X-Visitor: DE-NA X-Redirect-By: WordPress Location: https://365alternativ.com/ Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Open service 91.134.41.152:443 · staging.bet-bonuscode.ca
2026-01-23 21:30
HTTP/1.1 301 Moved Permanently Date: Fri, 23 Jan 2026 21:30:15 GMT Server: Apache/2.4.66 (Debian) X-Powered-By: PHP/7.4.33 X-Visitor: US-NA X-Redirect-By: WordPress Location: https://365alternativ.com/ Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Open service 91.134.41.152:443 · staging.bet-bonuscode.ca
2026-01-22 21:22
HTTP/1.1 301 Moved Permanently Date: Thu, 22 Jan 2026 21:22:08 GMT Server: Apache/2.4.66 (Debian) X-Powered-By: PHP/7.4.33 X-Visitor: SG-NA X-Redirect-By: WordPress Location: https://365alternativ.com/ Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Open service 91.134.41.152:443 · staging.bet-bonuscode.ca
2026-01-21 21:18
HTTP/1.1 301 Moved Permanently Date: Wed, 21 Jan 2026 21:18:44 GMT Server: Apache/2.4.66 (Debian) X-Powered-By: PHP/7.4.33 X-Visitor: NL-NA X-Redirect-By: WordPress Location: https://365alternativ.com/ Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Open service 91.134.41.152:443 · staging.bet-bonuscode.ca
2026-01-12 21:04
HTTP/1.1 301 Moved Permanently Date: Mon, 12 Jan 2026 21:04:18 GMT Server: Apache/2.4.66 (Debian) X-Powered-By: PHP/7.4.33 X-Visitor: NA-NA X-Redirect-By: WordPress Location: https://365alternativ.com/ Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Open service 91.134.41.152:443 · staging.bet-bonuscode.ca
2026-01-11 21:04
HTTP/1.1 301 Moved Permanently Date: Sun, 11 Jan 2026 21:04:16 GMT Server: Apache/2.4.66 (Debian) X-Powered-By: PHP/7.4.33 X-Visitor: GB-NA X-Redirect-By: WordPress Location: https://365alternativ.com/ Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8
Open service 91.134.41.152:443 · staging.bet-bonuscode.ca
2026-01-10 21:03
HTTP/1.1 301 Moved Permanently Date: Sat, 10 Jan 2026 21:03:54 GMT Server: Apache/2.4.65 (Debian) X-Powered-By: PHP/7.4.33 X-Visitor: NA-NA X-Redirect-By: WordPress Location: https://365alternativ.com/ Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8