AmazonS3
tcp/443
CloudFront
tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522c9779826
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://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@github.com/lumston/viva-ocr-files.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "prod"] remote = origin merge = refs/heads/prod
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65223b0e6e36
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@bitbucket.org:stchome/stchealth-frontend.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main //# sourceMappingURL=data:application/json;base64,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
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65228b2b23d1
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/lumston/viva-ocr-files.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "prod"] remote = origin merge = refs/heads/prod
Open service 18.173.154.19:443 · vivaexpedientes.com
2026-01-23 03:46
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1726
Connection: close
Last-Modified: Thu, 11 Dec 2025 23:46:03 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 23 Jan 2026 03:46:16 GMT
ETag: "488427edddd49ee3eb0cebf3f79d6fb9"
X-Cache: Hit from cloudfront
Via: 1.1 03d32b94cb61a4fdb1e546e888f089e4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: Fl8EmN7NWMhpbWXKJVmiVCc0142Ays_QnipWrvikooTZDYKNE6jQ7g==
Age: 1
Page title: Viva Expedientes OCR
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Viva Expedientes OCR</title>
<base href="/">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="robots" content="noindex, nofollow">
<!-- Preconnect para performance -->
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<!-- Fuentes -->
<link href="https://fonts.googleapis.com/css?family=Roboto:300,400,500&display=swap" rel="stylesheet">
<link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet">
<link href="https://fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;600;700&display=swap" rel="stylesheet">
<!-- Font Awesome con SRI -->
<link
rel="stylesheet"
href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/css/all.css"
integrity="sha384-+0n0xVW2eSR5OomGNYDnhzAbDsOXKp91b2eQp6Y5S+lG0Uj8i5B3n5u6y92fQ2+T"
crossorigin="anonymous"
referrerpolicy="no-referrer"
>
<link rel="icon" type="image/x-icon" href="favicon.ico">
<link rel="stylesheet" href="styles.58ec8554b56267bc4d59.css"></head>
<body>
<app-root></app-root>
<script src="runtime-es2015.e16c628500c5235d661b.js" type="module"></script><script src="runtime-es5.e16c628500c5235d661b.js" nomodule defer></script><script src="polyfills-es5.0731a93b1c8ee88b2452.js" nomodule defer></script><script src="polyfills-es2015.c25d64dcc478d7db826d.js" type="module"></script><script src="main-es2015.917b041e94c8ad96b7ea.js" type="module"></script><script src="main-es5.917b041e94c8ad96b7ea.js" nomodule defer></script></body>
</html>
Open service 18.173.154.105:443 · vivaexpedientes.com
2026-01-23 03:46
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1726
Connection: close
Last-Modified: Thu, 11 Dec 2025 23:46:03 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 23 Jan 2026 03:46:16 GMT
ETag: "488427edddd49ee3eb0cebf3f79d6fb9"
X-Cache: Hit from cloudfront
Via: 1.1 d32cecfb780f448e04918056be10c37a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: IEvDyygPK9aD3xQr9X_kC9sdRCibmmcqrsSaeINPmNHxm_EPrPczNw==
Age: 1
Page title: Viva Expedientes OCR
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Viva Expedientes OCR</title>
<base href="/">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="robots" content="noindex, nofollow">
<!-- Preconnect para performance -->
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<!-- Fuentes -->
<link href="https://fonts.googleapis.com/css?family=Roboto:300,400,500&display=swap" rel="stylesheet">
<link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet">
<link href="https://fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;600;700&display=swap" rel="stylesheet">
<!-- Font Awesome con SRI -->
<link
rel="stylesheet"
href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/css/all.css"
integrity="sha384-+0n0xVW2eSR5OomGNYDnhzAbDsOXKp91b2eQp6Y5S+lG0Uj8i5B3n5u6y92fQ2+T"
crossorigin="anonymous"
referrerpolicy="no-referrer"
>
<link rel="icon" type="image/x-icon" href="favicon.ico">
<link rel="stylesheet" href="styles.58ec8554b56267bc4d59.css"></head>
<body>
<app-root></app-root>
<script src="runtime-es2015.e16c628500c5235d661b.js" type="module"></script><script src="runtime-es5.e16c628500c5235d661b.js" nomodule defer></script><script src="polyfills-es5.0731a93b1c8ee88b2452.js" nomodule defer></script><script src="polyfills-es2015.c25d64dcc478d7db826d.js" type="module"></script><script src="main-es2015.917b041e94c8ad96b7ea.js" type="module"></script><script src="main-es5.917b041e94c8ad96b7ea.js" nomodule defer></script></body>
</html>
Open service 18.173.154.60:443 · vivaexpedientes.com
2026-01-23 03:46
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1726
Connection: close
Last-Modified: Thu, 11 Dec 2025 23:46:03 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 23 Jan 2026 03:46:16 GMT
ETag: "488427edddd49ee3eb0cebf3f79d6fb9"
X-Cache: Hit from cloudfront
Via: 1.1 3721bbb571fa1179150d81f8194461ae.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: DCpX4v9uPMYJIIR886UTpGOsUFXdGrsqtdCbQsvRsVNzRj6IpZOqJg==
Age: 1
Page title: Viva Expedientes OCR
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Viva Expedientes OCR</title>
<base href="/">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="robots" content="noindex, nofollow">
<!-- Preconnect para performance -->
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<!-- Fuentes -->
<link href="https://fonts.googleapis.com/css?family=Roboto:300,400,500&display=swap" rel="stylesheet">
<link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet">
<link href="https://fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;600;700&display=swap" rel="stylesheet">
<!-- Font Awesome con SRI -->
<link
rel="stylesheet"
href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/css/all.css"
integrity="sha384-+0n0xVW2eSR5OomGNYDnhzAbDsOXKp91b2eQp6Y5S+lG0Uj8i5B3n5u6y92fQ2+T"
crossorigin="anonymous"
referrerpolicy="no-referrer"
>
<link rel="icon" type="image/x-icon" href="favicon.ico">
<link rel="stylesheet" href="styles.58ec8554b56267bc4d59.css"></head>
<body>
<app-root></app-root>
<script src="runtime-es2015.e16c628500c5235d661b.js" type="module"></script><script src="runtime-es5.e16c628500c5235d661b.js" nomodule defer></script><script src="polyfills-es5.0731a93b1c8ee88b2452.js" nomodule defer></script><script src="polyfills-es2015.c25d64dcc478d7db826d.js" type="module"></script><script src="main-es2015.917b041e94c8ad96b7ea.js" type="module"></script><script src="main-es5.917b041e94c8ad96b7ea.js" nomodule defer></script></body>
</html>
Open service 18.173.154.60:80 · vivaexpedientes.com
2026-01-23 03:46
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 23 Jan 2026 03:46:15 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://vivaexpedientes.com/ X-Cache: Redirect from cloudfront Via: 1.1 9564791ed47030dad53c797ee814c66e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P3 X-Amz-Cf-Id: VDSkTn9fUFTZE-KLt9g0LPaXawkX61oCbKweCbacuScl1C8VLkcKxQ== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 18.173.154.105:80 · vivaexpedientes.com
2026-01-23 03:46
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 23 Jan 2026 03:46:15 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://vivaexpedientes.com/ X-Cache: Redirect from cloudfront Via: 1.1 50cfe0dc07dec77718bfa8346e608936.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P3 X-Amz-Cf-Id: D5q5TGOjZ4VWWrfcZ90rA254MkXibpswDCNcl4EhVI1T0Bgt4RpVrg== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 18.173.154.57:443 · vivaexpedientes.com
2026-01-23 03:46
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1726
Connection: close
Last-Modified: Thu, 11 Dec 2025 23:46:03 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 23 Jan 2026 03:46:16 GMT
ETag: "488427edddd49ee3eb0cebf3f79d6fb9"
X-Cache: Hit from cloudfront
Via: 1.1 3f7bbc22c659b2b7470c819d073f58b6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: cDLogfyxFf4AQLBMksbucolqO6nT2tgGG0aVa-wLCpObVcC6_dKIqg==
Age: 1
Page title: Viva Expedientes OCR
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Viva Expedientes OCR</title>
<base href="/">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="robots" content="noindex, nofollow">
<!-- Preconnect para performance -->
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<!-- Fuentes -->
<link href="https://fonts.googleapis.com/css?family=Roboto:300,400,500&display=swap" rel="stylesheet">
<link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet">
<link href="https://fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;600;700&display=swap" rel="stylesheet">
<!-- Font Awesome con SRI -->
<link
rel="stylesheet"
href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/css/all.css"
integrity="sha384-+0n0xVW2eSR5OomGNYDnhzAbDsOXKp91b2eQp6Y5S+lG0Uj8i5B3n5u6y92fQ2+T"
crossorigin="anonymous"
referrerpolicy="no-referrer"
>
<link rel="icon" type="image/x-icon" href="favicon.ico">
<link rel="stylesheet" href="styles.58ec8554b56267bc4d59.css"></head>
<body>
<app-root></app-root>
<script src="runtime-es2015.e16c628500c5235d661b.js" type="module"></script><script src="runtime-es5.e16c628500c5235d661b.js" nomodule defer></script><script src="polyfills-es5.0731a93b1c8ee88b2452.js" nomodule defer></script><script src="polyfills-es2015.c25d64dcc478d7db826d.js" type="module"></script><script src="main-es2015.917b041e94c8ad96b7ea.js" type="module"></script><script src="main-es5.917b041e94c8ad96b7ea.js" nomodule defer></script></body>
</html>
Open service 18.173.154.19:80 · vivaexpedientes.com
2026-01-23 03:46
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 23 Jan 2026 03:46:15 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://vivaexpedientes.com/ X-Cache: Redirect from cloudfront Via: 1.1 3346ad1679ff01fe81e117084323b814.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P3 X-Amz-Cf-Id: 6yTJm16NTKaVOElX3RIpGulsgugAUeszJDZq_65RF2c4gcaLnFrkIg== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 18.173.154.57:80 · vivaexpedientes.com
2026-01-23 03:46
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 23 Jan 2026 03:46:15 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://vivaexpedientes.com/ X-Cache: Redirect from cloudfront Via: 1.1 2dd902cd86ee8f22d66046533880d3e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P3 X-Amz-Cf-Id: HiYZQLpSMSgEe4jfWLOMpdEpX2wdEtwJv7tSl8fxaj_FDZX4lYXeCQ== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>