nginx
tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652235a444cf
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = ssh://git@git.sr.ht/~wq/x8.gg fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65220c8520c5
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = ssh://git@git.sr.ht/~cucumber-zoom/x8.gg fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652235a444cf
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = ssh://git@git.sr.ht/~wq/x8.gg fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65220c8520c5
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = ssh://git@git.sr.ht/~cucumber-zoom/x8.gg fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
Open service 46.23.81.157:443 · www.x8.gg
2026-01-23 00:52
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Request-Methods: GET, HEAD, OPTIONS
Content-Length: 944
Content-Security-Policy: default-src 'self' data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; worker-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-src https:; img-src data: https:; media-src https:; object-src 'none'; sandbox allow-downloads allow-forms allow-modals allow-pointer-lock allow-popups allow-presentation allow-same-origin allow-scripts;
Content-Type: text/html; charset=utf-8
Last-Modified: Fri, 12 Dec 2025 08:12:29 GMT
Vary: Accept-Encoding
Date: Fri, 23 Jan 2026 00:52:40 GMT
Connection: close
Page title: x8.gg
<!DOCTYPE html>
<html lang="en">
<head>
<title>x8.gg</title>
<meta name="description" content="x8.gg index page" />
<meta charset="UTF-8" />
<meta name="robots" content="noindex" />
<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, minimum-scale=1.0" />
<link rel="icon" href="data:," />
<link rel="preload" href="style.css" as="style" />
<link rel="stylesheet" href="style.css">
</head>
<body>
<div class="center">
redlib: <a href="https://r.x8.gg">r.x8.gg</a><br>
tor: <a
href="https://metrics.torproject.org/rs.html#details/794EC73948391F07AE1B592AABF89F248698F9E5">GauzeConsular</a><br>
<h2>Privacy Policy</h2>
<ul>
<li>No logs are retained</li>
<li>No attempts are made to identify users</li>
</ul>
<h2>Contact</h2>
<p>Reachable via email at admin at x8.gg</p>
<p><a href="admin.asc">PGP Key</a></p>
</div>
</body>
</html>
Open service 46.23.81.157:443 · x8.gg
2026-01-22 06:12
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Request-Methods: GET, HEAD, OPTIONS
Content-Length: 944
Content-Security-Policy: default-src 'self' data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; worker-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-src https:; img-src data: https:; media-src https:; object-src 'none'; sandbox allow-downloads allow-forms allow-modals allow-pointer-lock allow-popups allow-presentation allow-same-origin allow-scripts;
Content-Type: text/html; charset=utf-8
Last-Modified: Fri, 12 Dec 2025 08:12:28 GMT
Vary: Accept-Encoding
Date: Thu, 22 Jan 2026 06:12:48 GMT
Connection: close
Page title: x8.gg
<!DOCTYPE html>
<html lang="en">
<head>
<title>x8.gg</title>
<meta name="description" content="x8.gg index page" />
<meta charset="UTF-8" />
<meta name="robots" content="noindex" />
<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, minimum-scale=1.0" />
<link rel="icon" href="data:," />
<link rel="preload" href="style.css" as="style" />
<link rel="stylesheet" href="style.css">
</head>
<body>
<div class="center">
redlib: <a href="https://r.x8.gg">r.x8.gg</a><br>
tor: <a
href="https://metrics.torproject.org/rs.html#details/794EC73948391F07AE1B592AABF89F248698F9E5">GauzeConsular</a><br>
<h2>Privacy Policy</h2>
<ul>
<li>No logs are retained</li>
<li>No attempts are made to identify users</li>
</ul>
<h2>Contact</h2>
<p>Reachable via email at admin at x8.gg</p>
<p><a href="admin.asc">PGP Key</a></p>
</div>
</body>
</html>
Open service 46.23.81.157:80 · x8.gg
2026-01-22 06:12
HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 22 Jan 2026 06:12:47 GMT Content-Type: text/html Content-Length: 138 Connection: close Location: https://x8.gg/ Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>nginx</center> </body> </html>
Open service 2a03:6000:1813:1337::157:80 · x8.gg
2026-01-22 06:12
HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 22 Jan 2026 06:12:47 GMT Content-Type: text/html Content-Length: 138 Connection: close Location: https://x8.gg/ Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>nginx</center> </body> </html>
Open service 2a03:6000:1813:1337::157:443 · x8.gg
2026-01-22 06:12
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Request-Methods: GET, HEAD, OPTIONS
Content-Length: 944
Content-Security-Policy: default-src 'self' data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; worker-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-src https:; img-src data: https:; media-src https:; object-src 'none'; sandbox allow-downloads allow-forms allow-modals allow-pointer-lock allow-popups allow-presentation allow-same-origin allow-scripts;
Content-Type: text/html; charset=utf-8
Last-Modified: Fri, 12 Dec 2025 08:12:28 GMT
Vary: Accept-Encoding
Date: Thu, 22 Jan 2026 06:12:47 GMT
Connection: close
Page title: x8.gg
<!DOCTYPE html>
<html lang="en">
<head>
<title>x8.gg</title>
<meta name="description" content="x8.gg index page" />
<meta charset="UTF-8" />
<meta name="robots" content="noindex" />
<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, minimum-scale=1.0" />
<link rel="icon" href="data:," />
<link rel="preload" href="style.css" as="style" />
<link rel="stylesheet" href="style.css">
</head>
<body>
<div class="center">
redlib: <a href="https://r.x8.gg">r.x8.gg</a><br>
tor: <a
href="https://metrics.torproject.org/rs.html#details/794EC73948391F07AE1B592AABF89F248698F9E5">GauzeConsular</a><br>
<h2>Privacy Policy</h2>
<ul>
<li>No logs are retained</li>
<li>No attempts are made to identify users</li>
</ul>
<h2>Contact</h2>
<p>Reachable via email at admin at x8.gg</p>
<p><a href="admin.asc">PGP Key</a></p>
</div>
</body>
</html>
Open service 46.23.81.157:80 · www.x8.gg
2026-01-11 10:12
HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 11 Jan 2026 10:12:47 GMT Content-Type: text/html Content-Length: 138 Connection: close Location: https://www.x8.gg/ Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>nginx</center> </body> </html>
Open service 2a03:6000:1813:1337::157:80 · www.x8.gg
2026-01-11 10:12
HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 11 Jan 2026 10:12:46 GMT Content-Type: text/html Content-Length: 138 Connection: close Location: https://www.x8.gg/ Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>nginx</center> </body> </html>
Open service 2a03:6000:1813:1337::157:443 · www.x8.gg
2026-01-11 10:12
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Request-Methods: GET, HEAD, OPTIONS
Content-Length: 944
Content-Security-Policy: default-src 'self' data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; worker-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-src https:; img-src data: https:; media-src https:; object-src 'none'; sandbox allow-downloads allow-forms allow-modals allow-pointer-lock allow-popups allow-presentation allow-same-origin allow-scripts;
Content-Type: text/html; charset=utf-8
Last-Modified: Fri, 12 Dec 2025 08:12:29 GMT
Vary: Accept-Encoding
Date: Sun, 11 Jan 2026 10:12:49 GMT
Connection: close
Page title: x8.gg
<!DOCTYPE html>
<html lang="en">
<head>
<title>x8.gg</title>
<meta name="description" content="x8.gg index page" />
<meta charset="UTF-8" />
<meta name="robots" content="noindex" />
<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, minimum-scale=1.0" />
<link rel="icon" href="data:," />
<link rel="preload" href="style.css" as="style" />
<link rel="stylesheet" href="style.css">
</head>
<body>
<div class="center">
redlib: <a href="https://r.x8.gg">r.x8.gg</a><br>
tor: <a
href="https://metrics.torproject.org/rs.html#details/794EC73948391F07AE1B592AABF89F248698F9E5">GauzeConsular</a><br>
<h2>Privacy Policy</h2>
<ul>
<li>No logs are retained</li>
<li>No attempts are made to identify users</li>
</ul>
<h2>Contact</h2>
<p>Reachable via email at admin at x8.gg</p>
<p><a href="admin.asc">PGP Key</a></p>
</div>
</body>
</html>
Open service 46.23.81.157:443 · www.x8.gg
2026-01-11 10:12
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Request-Methods: GET, HEAD, OPTIONS
Content-Length: 944
Content-Security-Policy: default-src 'self' data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; worker-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-src https:; img-src data: https:; media-src https:; object-src 'none'; sandbox allow-downloads allow-forms allow-modals allow-pointer-lock allow-popups allow-presentation allow-same-origin allow-scripts;
Content-Type: text/html; charset=utf-8
Last-Modified: Fri, 12 Dec 2025 08:12:29 GMT
Vary: Accept-Encoding
Date: Sun, 11 Jan 2026 10:12:46 GMT
Connection: close
Page title: x8.gg
<!DOCTYPE html>
<html lang="en">
<head>
<title>x8.gg</title>
<meta name="description" content="x8.gg index page" />
<meta charset="UTF-8" />
<meta name="robots" content="noindex" />
<meta name="viewport" content="width=device-width, initial-scale=1.0, shrink-to-fit=no, minimum-scale=1.0" />
<link rel="icon" href="data:," />
<link rel="preload" href="style.css" as="style" />
<link rel="stylesheet" href="style.css">
</head>
<body>
<div class="center">
redlib: <a href="https://r.x8.gg">r.x8.gg</a><br>
tor: <a
href="https://metrics.torproject.org/rs.html#details/794EC73948391F07AE1B592AABF89F248698F9E5">GauzeConsular</a><br>
<h2>Privacy Policy</h2>
<ul>
<li>No logs are retained</li>
<li>No attempts are made to identify users</li>
</ul>
<h2>Contact</h2>
<p>Reachable via email at admin at x8.gg</p>
<p><a href="admin.asc">PGP Key</a></p>
</div>
</body>
</html>