Apache
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d657121a
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://kbchoi93@github.com/mindswitch/picks-global.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main [branch "fortuen_20211021"] remote = origin merge = refs/heads/fortuen_20211021 [branch "nocache_20211102"] remote = origin merge = refs/heads/nocache_20211102 [branch "cookie_20211102"] remote = origin merge = refs/heads/cookie_20211102 [branch "dual_cookie_20211104"] remote = origin merge = refs/heads/dual_cookie_20211104 [branch "update_adx.txt_20220512"] remote = origin merge = refs/heads/update_adx.txt_20220512
Open service 13.224.189.99:443 ยท www.picks.my
2026-01-23 12:11
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Content-Length: 499
Connection: close
Date: Fri, 23 Jan 2026 12:11:58 GMT
Pragma: public
Server: Apache
Location: /en_v2/list.html
Expires: Fri, 23 Jan 2026 12:21:58 GMT
Cache-Control: max-age=600
X-Cache: Hit from cloudfront
Via: 1.1 fa981996c573bcf9d186c4ea325d4f90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ATH51-P1
X-Amz-Cf-Id: aOErWoRS-c33RXh8lz8XUjW7Y6hMnSDP3zIHfpieevosSDLFNGh_IQ==
Age: 1
<script>
var date = new Date();
var offset = date.getTimezoneOffset();
var url = window.location.href;
var expires = 'expires=';
date.setTime(date.getTime() + 31536000000);
expires += date.toGMTString();
document.cookie = "viewer_user_timezone=" + offset + ";" + expires + "; path = /";
if(url.indexOf("?")>0) {
window.location.href = url + "&" + date.getTime();
} else {
window.location.href = url + "?" + date.getTime();
}
</script>