Apache 2.4.41
tcp/443 tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e1b15bda
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/Pacellico/spotquote.git fetch = +refs/heads/*:refs/remotes/origin/*
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522801062c4
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@bitbucket.org:kgcubed/spotquote.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "SPOT-227-recovery"] remote = origin merge = refs/heads/SPOT-227-recovery [branch "dev"] remote = origin merge = refs/heads/dev [branch "KG-830"] remote = origin merge = refs/heads/KG-830
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522026287c0
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@bitbucket.org:kgcubed/spotquote.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "SPOT-227-recovery"] remote = origin merge = refs/heads/SPOT-227-recovery
Open service 13.53.86.161:443 · testing.spot.pacellico.com
2026-01-09 07:15
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 07:15:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Page title: kg³
<!DOCTYPE html>
<html>
<head>
<title>kg³</title>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<script type="text/javascript">const cssVersion = 1767942942;</script>
<script type="text/javascript">
window.apiUrl =
'https://testing.kg3.pacellico.com/';
</script>
<script type="text/javascript" src="js/kgcubed.js?v=1767942942"></script>
</head>
<body class="kgcubed custom" onload="if(kgcubed.show()){kgcubed.request('spot/login.php');}">
</body>
</html>
Open service 2a05:d016:b29:6800:269d:b81b:42be:beed:80 · testing.spot.pacellico.com
2026-01-07 06:15
HTTP/1.1 301 Moved Permanently Date: Wed, 07 Jan 2026 06:16:18 GMT Server: Apache/2.4.41 (Ubuntu) Location: https://testing.spot.pacellico.com/ Content-Length: 335 Connection: close Content-Type: text/html; charset=iso-8859-1 Page title: 301 Moved Permanently <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="https://testing.spot.pacellico.com/">here</a>.</p> <hr> <address>Apache/2.4.41 (Ubuntu) Server at testing.spot.pacellico.com Port 80</address> </body></html>
Open service 2a05:d016:b29:6800:269d:b81b:42be:beed:443 · testing.spot.pacellico.com
2026-01-07 06:15
HTTP/1.1 200 OK
Date: Wed, 07 Jan 2026 06:15:40 GMT
Server: Apache/2.4.41 (Ubuntu)
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Page title: kg³
<!DOCTYPE html>
<html>
<head>
<title>kg³</title>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<script type="text/javascript">const cssVersion = 1767766540;</script>
<script type="text/javascript">
window.apiUrl =
'https://testing.kg3.pacellico.com/';
</script>
<script type="text/javascript" src="js/kgcubed.js?v=1767766540"></script>
</head>
<body class="kgcubed custom" onload="if(kgcubed.show()){kgcubed.request('spot/login.php');}">
</body>
</html>
Open service 13.53.86.161:443 · testing.spot.pacellico.com
2026-01-02 07:55
HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 07:55:25 GMT
Server: Apache/2.4.41 (Ubuntu)
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Page title: kg³
<!DOCTYPE html>
<html>
<head>
<title>kg³</title>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<script type="text/javascript">const cssVersion = 1767340525;</script>
<script type="text/javascript">
window.apiUrl =
'https://testing.kg3.pacellico.com/';
</script>
<script type="text/javascript" src="js/kgcubed.js?v=1767340525"></script>
</head>
<body class="kgcubed custom" onload="if(kgcubed.show()){kgcubed.request('spot/login.php');}">
</body>
</html>
Open service 13.53.86.161:443 · testing.spot.pacellico.com
2025-12-21 10:57
HTTP/1.1 200 OK
Date: Sun, 21 Dec 2025 10:57:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Page title: kg³
<!DOCTYPE html>
<html>
<head>
<title>kg³</title>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<script type="text/javascript">const cssVersion = 1766314635;</script>
<script type="text/javascript">
window.apiUrl =
'https://testing.kg3.pacellico.com/';
</script>
<script type="text/javascript" src="js/kgcubed.js?v=1766314635"></script>
</head>
<body class="kgcubed custom" onload="if(kgcubed.show()){kgcubed.request('spot/login.php');}">
</body>
</html>
Open service 13.53.86.161:443 · testing.spot.pacellico.com
2025-12-19 08:18
HTTP/1.1 200 OK
Date: Fri, 19 Dec 2025 08:18:41 GMT
Server: Apache/2.4.41 (Ubuntu)
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Page title: kg³
<!DOCTYPE html>
<html>
<head>
<title>kg³</title>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<script type="text/javascript">const cssVersion = 1766132321;</script>
<script type="text/javascript">
window.apiUrl =
'https://testing.kg3.pacellico.com/';
</script>
<script type="text/javascript" src="js/kgcubed.js?v=1766132321"></script>
</head>
<body class="kgcubed custom" onload="if(kgcubed.show()){kgcubed.request('spot/login.php');}">
</body>
</html>