Microsoft-IIS 8.5
tcp/443 tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true ignorecase = true [remote "origin"] url = https://github.com/azureappserviceoss/wordpress-azure fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "linux-appservice"] remote = origin merge = refs/heads/linux-appservice
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb3ad39a5a
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true ignorecase = true [remote "origin"] url = https://github.com/azureappserviceoss/wordpress-azure fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "linux-appservice"] remote = origin merge = refs/heads/linux-appservice
Open service 52.168.161.16:443 · apps.tuskegeeairmen.org
2026-01-25 16:35
HTTP/1.1 302 Object moved Cache-Control: private Content-Type: text/html Location: https://apps.tuskegeeairmen.org/admin Server: Microsoft-IIS/8.5 Set-Cookie: ASPSESSIONIDQWDDCTSA=DMOHNNBDEOPEIIJDLJBIKMHC; secure; path=/ X-Powered-By: ASP.NET Date: Sun, 25 Jan 2026 16:35:02 GMT Connection: close Content-Length: 158 Page title: Object moved <head><title>Object moved</title></head> <body><h1>Object Moved</h1>This object may be found <a HREF="https://apps.tuskegeeairmen.org/admin">here</a>.</body>
Open service 52.168.161.16:80 · apps.tuskegeeairmen.org
2026-01-25 16:34
HTTP/1.1 302 Object moved Cache-Control: private Content-Type: text/html Location: https://apps.tuskegeeairmen.org/admin Server: Microsoft-IIS/8.5 Set-Cookie: ASPSESSIONIDQSDDCTSA=AMOHNNBDOIFIMGCAFDIKEGEK; path=/ X-Powered-By: ASP.NET Date: Sun, 25 Jan 2026 16:35:01 GMT Connection: close Content-Length: 158 Page title: Object moved <head><title>Object moved</title></head> <body><h1>Object Moved</h1>This object may be found <a HREF="https://apps.tuskegeeairmen.org/admin">here</a>.</body>
Open service 100.49.0.246:80 · pay.tuskegeeairmen.org
2026-01-25 16:31
HTTP/1.1 301 Moved Permanently content-length: 0 location: https://pay.tuskegeeairmen.org/ connection: close
Open service 100.49.0.246:443 · pay.tuskegeeairmen.org
2026-01-25 16:31
HTTP/1.1 404 Not Found
date: Sun, 25 Jan 2026 16:31:34 GMT
content-type: text/html; charset=utf-8
content-length: 1009
connection: close
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
access-control-expose-headers: X-Trace-Id
x-trace-id: 205bcaee0e423c3fa6b3a0d43443af5d
content-security-policy: frame-ancestors 'self' https:
etag: W/"3f1-v4sfu2WXzixr/Od2lnCHt04YYak"
Page title: Pay Link Not Found
<!DOCTYPE html>
<html>
<head>
<!-- TODO: replace with variable/translation for this -->
<title>Pay Link Not Found</title>
<!-- TODO: replace this with stylesheet from this repo -->
<link rel="stylesheet" href="https://web-static-gd-payments.godaddy.com/release/css/paylinks-error.9c59c737.css">
</head>
<body class="paylink-not-found-page">
<div class="content">
<div class="content-body">
<img class="warning-logo" src="https://d85ecz8votkqa.cloudfront.net/payments-hub/warning-icon.svg" />
<!-- TODO: replace with variable/translation for this -->
<h2 class="error-message">Pay Link Not Found</h2>
</div>
</div>
<footer class="footer">
<!-- TODO: replace with variable/translation for this -->
<p class="footer-text">Websites and Payments powered by</p>
<img src="https://d85ecz8votkqa.cloudfront.net/payments-hub/godaddy-paleblue.png" alt="GoDaddy logo" />
</footer>
</body>
</html>