AmazonS3
tcp/443
CloudFront
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba918840231b487339ef6e9ec
[init] defaultBranch = none [fetch] recurseSubmodules = false [credential] interactive = never [gc] autoDetach = false [http] extraHeader = X-Gitaly-Correlation-ID: 3d527e8305b95d9f2dfc57aa8bbfbb01 [transfer] bundleURI = true [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:glcbt-69_NNLEiEJvaj22PZPNvZYF@gitlab.com/yelkko/mavipol.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884022e566c8100a29937
[init] defaultBranch = none [fetch] recurseSubmodules = false [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:8Gi9J9L4zzFQqKPE8d1m@gitlab.com/yelkko/mavipol.git fetch = +refs/heads/*:refs/remotes/origin/*
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884022e566c8100a29937
[init] defaultBranch = none [fetch] recurseSubmodules = false [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:8Gi9J9L4zzFQqKPE8d1m@gitlab.com/yelkko/mavipol.git fetch = +refs/heads/*:refs/remotes/origin/*
Open service 18.173.154.98:443 · tecnicasmavipol.com
2026-01-25 21:16
HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 25 Jan 2026 21:16:30 GMT Content-Type: text/html Content-Length: 986 Connection: close X-Cache: Error from cloudfront Via: 1.1 5951b29f5460c0b6d21eb11bce7b8168.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P3 X-Amz-Cf-Id: Gx7JVJ0YD7TlTp4BBT3-YpdCWC2spKxGFrvCfsSLmw17KrE5fWoFPw== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> The Amazon CloudFront distribution is configured to block access from your country. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: Gx7JVJ0YD7TlTp4BBT3-YpdCWC2spKxGFrvCfsSLmw17KrE5fWoFPw== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Open service 18.173.154.98:443 · tecnicasmavipol.com
2026-01-23 21:27
HTTP/1.1 403 Forbidden Server: CloudFront Date: Fri, 23 Jan 2026 21:27:05 GMT Content-Type: text/html Content-Length: 986 Connection: close X-Cache: Error from cloudfront Via: 1.1 106a2e3801afa4dfd5bd4bfaeb93d526.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P3 X-Amz-Cf-Id: eXoiCEoiGvZtD-zTkNDP7w9GjaPbFA9z-VQjrEO-Ct4YiTjm1wKEuQ== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> The Amazon CloudFront distribution is configured to block access from your country. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: eXoiCEoiGvZtD-zTkNDP7w9GjaPbFA9z-VQjrEO-Ct4YiTjm1wKEuQ== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Open service 18.173.154.98:443 · tecnicasmavipol.com
2026-01-22 21:18
HTTP/1.1 403 Forbidden Server: CloudFront Date: Thu, 22 Jan 2026 21:19:00 GMT Content-Type: text/html Content-Length: 986 Connection: close X-Cache: Error from cloudfront Via: 1.1 94313a5530517e71f4769858ce013d58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P3 X-Amz-Cf-Id: YRHMHD_6k1iG26eU4EDocobcv70OUlthTYpwOqrJ5KsabE5Br204lg== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> The Amazon CloudFront distribution is configured to block access from your country. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: YRHMHD_6k1iG26eU4EDocobcv70OUlthTYpwOqrJ5KsabE5Br204lg== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Open service 18.173.154.98:443 · tecnicasmavipol.com
2026-01-21 21:17
HTTP/1.1 403 Forbidden Server: CloudFront Date: Wed, 21 Jan 2026 21:17:37 GMT Content-Type: text/html Content-Length: 986 Connection: close X-Cache: Error from cloudfront Via: 1.1 2d22bd8fe92380401bbc1d8cc010e5a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P3 X-Amz-Cf-Id: tQHnC4T78Hwlk8aDYFvyWRyc5OnYIzsLAyH4JhXf9hfuzxSLf92xsQ== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> The Amazon CloudFront distribution is configured to block access from your country. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: tQHnC4T78Hwlk8aDYFvyWRyc5OnYIzsLAyH4JhXf9hfuzxSLf92xsQ== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Open service 18.173.154.98:443 · tecnicasmavipol.com
2026-01-12 21:11
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 25806
Connection: close
Date: Mon, 12 Jan 2026 21:12:00 GMT
Last-Modified: Tue, 19 Aug 2025 15:40:16 GMT
ETag: "20987847166baf5b5b2ba21179833541"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 106a2e3801afa4dfd5bd4bfaeb93d526.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: UmYrcU6ESqSnS-1VpXafk53CDYOp_NsJmnLoRBWProlmVqEGbaovew==
Age: 3
Page title: Técnicas Mavipol
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="title" content="Técnicas Mavipol">
<meta name="description" content="Expertos en revestimiento de fibra de vidrio para piscinas, terrazas y vehículos">
<meta name="keywords" content="revestimiento, fibra de vidrio, poliéster, piscina de obra, piscinas carballiño">
<meta name="robots" content="index, follow">
<meta name="language" content="Spanish">
<title>Técnicas Mavipol</title>
<link rel="icon" type="image/png" href="favicon.png">
<!-- Google font -->
<link rel="dns-prefetch" href="//fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com/" crossorigin>
<link href="https://fonts.googleapis.com/css?family=Montserrat:400,700%7CVarela+Round" rel="stylesheet">
<!-- Bootstrap -->
<link type="text/css" rel="stylesheet" href="css/bootstrap.min.css" />
<!-- Owl Carousel -->
<link type="text/css" rel="stylesheet" href="css/owl.carousel.css" />
<link type="text/css" rel="stylesheet" href="css/owl.theme.default.css" />
<!-- Magnific Popup -->
<link type="text/css" rel="stylesheet" href="css/magnific-popup.css" />
<!-- Font Awesome Icon -->
<link rel="stylesheet" href="css/all.min.css">
<!-- Custom stlylesheet -->
<link type="text/css" rel="stylesheet" href="css/style.min.css" />
<!-- HTML5 shim and Respond.js for IE8 support of HTML5 elements and media queries -->
<!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
<!--[if lt IE 9]>
<script src="https://oss.maxcdn.com/html5shiv/3.7.3/html5shiv.min.js"></script>
<script src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script>
<![endif]-->
</head>
<!-- Google tag (gtag.js) -->
<script async src="https://www.googletagmanager.com/gtag/js?id=G-PLQM4B0KP2"></script>
<script>
window.dataLayer = window.dataLayer || [];
function gtag(){dataLayer.push(arguments);}
gtag('js', new Date());
gtag('config', 'G-PLQM4B0KP2');
</script>
<body>
<!-- Header -->
<header id="home">
<!-- Background Image
<div class="bg-img" style="background-image: url('./img/background1.jpg');">
<div class="overlay"></div>
</div>
/Background Image -->
<div class="bg-img">
<video class="lazy" autoplay muted loop playsinline poster="./img/pool-bg-full-low.jpg">
<source data-src="./video/pool-bg-full-low.mp4" type="video/mp4" />
</video>
<div class="overlay"></div>
</div>
<!-- Nav -->
<nav id="nav" class="navbar nav-transparent">
<div class="container">
<div class="navbar-header">
<!-- Logo -->
<div class="navbar-brand">
<a href="index.html">
<!--<span class="brand-title">Mavipol</span>-->
<img class="logo" src="img/logo.png" alt="logo">
<img class="logo-alt" src="img/logo-alt.png" alt="logo">
</a>
</div>
<!-- /Logo -->
<!-- Collapse nav button -->
<div class="nav-collapse">
<span></span>
</div>
<!-- /Collapse nav button -->
</div>
<!-- Main navigation -->
<ul class="main-nav nav navbar-nav navbar-right">
<li><a href="#home">Home</a></li>
<li><a href="#portfolio">Portfolio</a></li>
<li><a href="#service">Servicios</a></li>
<li><a href="#maintenance">Mantenimiento</a></li>
<li><a href="#contact">Contacto</a></li>
</ul>
<!-- /Main navigation -->
</div>
</nav>
<!-- /Nav -->
<!-- home wrapper -->
<div class="home-wrapper">
<div class="container">
<div class="row">
<!-- home content -->
<div class="col-md-10 col-md-offset-1">
<div class="home-content">
<h1 class="white-text">La piscina de tus sueños</h1>
<p class="white-text">En Mavipol somos expertos en revestimiento de fibra de vidrio para piscinas de obra, terrazas y vehículos.</p>
<a id="home-action" href="#service" class="white-btn">Sabe
Open service 18.173.154.98:443 · tecnicasmavipol.com
2026-01-11 21:12
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 25806
Connection: close
Last-Modified: Tue, 19 Aug 2025 15:40:16 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 11 Jan 2026 21:12:21 GMT
ETag: "20987847166baf5b5b2ba21179833541"
X-Cache: Hit from cloudfront
Via: 1.1 ac174bd7948c4e669be0382ce2c052e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: pY_dk9BzOsgkWRYrAYwX5PKMys_JxnQZVSu5CKj5hWP-x7uN_2PzUg==
Age: 3
Page title: Técnicas Mavipol
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="title" content="Técnicas Mavipol">
<meta name="description" content="Expertos en revestimiento de fibra de vidrio para piscinas, terrazas y vehículos">
<meta name="keywords" content="revestimiento, fibra de vidrio, poliéster, piscina de obra, piscinas carballiño">
<meta name="robots" content="index, follow">
<meta name="language" content="Spanish">
<title>Técnicas Mavipol</title>
<link rel="icon" type="image/png" href="favicon.png">
<!-- Google font -->
<link rel="dns-prefetch" href="//fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com/" crossorigin>
<link href="https://fonts.googleapis.com/css?family=Montserrat:400,700%7CVarela+Round" rel="stylesheet">
<!-- Bootstrap -->
<link type="text/css" rel="stylesheet" href="css/bootstrap.min.css" />
<!-- Owl Carousel -->
<link type="text/css" rel="stylesheet" href="css/owl.carousel.css" />
<link type="text/css" rel="stylesheet" href="css/owl.theme.default.css" />
<!-- Magnific Popup -->
<link type="text/css" rel="stylesheet" href="css/magnific-popup.css" />
<!-- Font Awesome Icon -->
<link rel="stylesheet" href="css/all.min.css">
<!-- Custom stlylesheet -->
<link type="text/css" rel="stylesheet" href="css/style.min.css" />
<!-- HTML5 shim and Respond.js for IE8 support of HTML5 elements and media queries -->
<!-- WARNING: Respond.js doesn't work if you view the page via file:// -->
<!--[if lt IE 9]>
<script src="https://oss.maxcdn.com/html5shiv/3.7.3/html5shiv.min.js"></script>
<script src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script>
<![endif]-->
</head>
<!-- Google tag (gtag.js) -->
<script async src="https://www.googletagmanager.com/gtag/js?id=G-PLQM4B0KP2"></script>
<script>
window.dataLayer = window.dataLayer || [];
function gtag(){dataLayer.push(arguments);}
gtag('js', new Date());
gtag('config', 'G-PLQM4B0KP2');
</script>
<body>
<!-- Header -->
<header id="home">
<!-- Background Image
<div class="bg-img" style="background-image: url('./img/background1.jpg');">
<div class="overlay"></div>
</div>
/Background Image -->
<div class="bg-img">
<video class="lazy" autoplay muted loop playsinline poster="./img/pool-bg-full-low.jpg">
<source data-src="./video/pool-bg-full-low.mp4" type="video/mp4" />
</video>
<div class="overlay"></div>
</div>
<!-- Nav -->
<nav id="nav" class="navbar nav-transparent">
<div class="container">
<div class="navbar-header">
<!-- Logo -->
<div class="navbar-brand">
<a href="index.html">
<!--<span class="brand-title">Mavipol</span>-->
<img class="logo" src="img/logo.png" alt="logo">
<img class="logo-alt" src="img/logo-alt.png" alt="logo">
</a>
</div>
<!-- /Logo -->
<!-- Collapse nav button -->
<div class="nav-collapse">
<span></span>
</div>
<!-- /Collapse nav button -->
</div>
<!-- Main navigation -->
<ul class="main-nav nav navbar-nav navbar-right">
<li><a href="#home">Home</a></li>
<li><a href="#portfolio">Portfolio</a></li>
<li><a href="#service">Servicios</a></li>
<li><a href="#maintenance">Mantenimiento</a></li>
<li><a href="#contact">Contacto</a></li>
</ul>
<!-- /Main navigation -->
</div>
</nav>
<!-- /Nav -->
<!-- home wrapper -->
<div class="home-wrapper">
<div class="container">
<div class="row">
<!-- home content -->
<div class="col-md-10 col-md-offset-1">
<div class="home-content">
<h1 class="white-text">La piscina de tus sueños</h1>
<p class="white-text">En Mavipol somos expertos en revestimiento de fibra de vidrio para piscinas de obra, terrazas y vehículos.</p>
<a id="home-action" href="#service" class="white-btn">Sabe
Open service 18.173.154.98:443 · tecnicasmavipol.com
2026-01-10 21:15
HTTP/1.1 403 Forbidden Server: CloudFront Date: Sat, 10 Jan 2026 21:15:13 GMT Content-Type: text/html Content-Length: 986 Connection: close X-Cache: Error from cloudfront Via: 1.1 918459d66ab0cca4258acacb6d3f6edc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P3 X-Amz-Cf-Id: MZifvrP_2yQzcL1fZxb73f46g3QdW473OsN3DN4NlqP6pM249FpmsQ== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> The Amazon CloudFront distribution is configured to block access from your country. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: MZifvrP_2yQzcL1fZxb73f46g3QdW473OsN3DN4NlqP6pM249FpmsQ== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>