The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e3163d20
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = ssh://git@github.com/marcfowler/thrivecart.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "production"] remote = origin merge = refs/heads/production
Open service 194.1.147.8:443 · www.webinarcon.com
2026-01-26 04:21
HTTP/1.1 301 Moved Permanently Date: Mon, 26 Jan 2026 04:21:31 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.4.16 Expires: Mon, 26 Jan 2026 05:21:31 GMT Cache-Control: max-age=3600 X-Redirect-By: WordPress Location: https://webinarcon.com/ Vary: Accept-Encoding,Origin WPX: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/SV01 alt-svc: h3=":443"; ma=86400 x-quic: h3 Server: WPX CLOUD/SV01 X-Cache-Status: MISS
Open service 194.1.147.57:443 · www.webinarcon.com
2026-01-26 04:21
HTTP/1.1 301 Moved Permanently Date: Mon, 26 Jan 2026 04:21:31 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.4.16 Expires: Mon, 26 Jan 2026 05:21:31 GMT Cache-Control: max-age=3600 X-Redirect-By: WordPress Location: https://webinarcon.com/ Vary: Accept-Encoding,Origin WPX: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/TOR01 alt-svc: h3=":443"; ma=86400 x-quic: h3 Server: WPX CLOUD/TOR01 X-Cache-Status: MISS
Open service 194.1.147.8:80 · www.webinarcon.com
2026-01-26 04:21
HTTP/1.1 301 Moved Permanently Date: Mon, 26 Jan 2026 04:21:31 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.4.16 Expires: Mon, 26 Jan 2026 05:21:31 GMT Cache-Control: max-age=3600 X-Redirect-By: WordPress Location: https://webinarcon.com/ Vary: Accept-Encoding,Origin WPX: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/SGPR01 Server: WPX CLOUD/SGPR01 X-Cache-Status: MISS
Open service 194.1.147.57:80 · www.webinarcon.com
2026-01-26 04:21
HTTP/1.1 301 Moved Permanently Date: Mon, 26 Jan 2026 04:21:30 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.4.16 Expires: Mon, 26 Jan 2026 05:21:30 GMT Cache-Control: max-age=3600 X-Redirect-By: WordPress Location: https://webinarcon.com/ Vary: Accept-Encoding,Origin WPX: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/FF02 Server: WPX CLOUD/FF02 X-Cache-Status: MISS
Open service 194.1.147.8:80 · webinarcon.com
2026-01-26 04:21
HTTP/1.1 301 Moved Permanently Date: Mon, 26 Jan 2026 04:21:30 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.4.16 Expires: Mon, 26 Jan 2026 05:21:30 GMT Cache-Control: max-age=3600 X-Redirect-By: WordPress Location: https://webinarcon.com/ Vary: Accept-Encoding,Origin WPX: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/AMS03 Server: WPX CLOUD/AMS03 X-Cache-Status: EXPIRED
Open service 194.1.147.8:443 · webinarcon.com
2026-01-26 04:21
HTTP/1.1 200 OK Date: Mon, 26 Jan 2026 04:21:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding X-Powered-By: PHP/8.4.16 Cache-Control: public, max-age=3600 Expires: Mon, 26 Jan 2026 05:21:30 GMT Vary: Accept-Encoding,Origin WPX: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/FF02 alt-svc: h3=":443"; ma=86400 x-quic: h3 Server: WPX CLOUD/FF02 X-Cache-Status: HIT
Open service 194.1.147.57:443 · webinarcon.com
2026-01-26 04:21
HTTP/1.1 200 OK Date: Mon, 26 Jan 2026 04:21:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding X-Powered-By: PHP/8.4.16 Cache-Control: public, max-age=3600 Expires: Mon, 26 Jan 2026 05:21:30 GMT Vary: Accept-Encoding,Origin WPX: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/FF02 alt-svc: h3=":443"; ma=86400 x-quic: h3 Server: WPX CLOUD/FF02 X-Cache-Status: HIT
Open service 194.1.147.57:80 · webinarcon.com
2026-01-26 04:21
HTTP/1.1 301 Moved Permanently Date: Mon, 26 Jan 2026 04:21:30 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.4.16 Expires: Mon, 26 Jan 2026 05:21:30 GMT Cache-Control: max-age=3600 X-Redirect-By: WordPress Location: https://webinarcon.com/ Vary: Accept-Encoding,Origin WPX: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/LON01 Server: WPX CLOUD/LON01 X-Cache-Status: EXPIRED