nginx 1.24.0
tcp/443 tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652257dc338f
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@github.com:nolteb/xombo.com.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522cc83ee96
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@github.com:xombo/xombo.com.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09cdafa5447dafa5447c106d19911f985ec281ff2be4f216b68
Found 18 files trough .DS_Store spidering: /403 /404 /about /canada.php /doctors /elders /emergency /employers /families /favicon.ico /gyms /index.html /military /other /patients /schools /sports /static
Open service 45.61.141.42:80 · www.xombo.com
2026-01-23 22:57
HTTP/1.1 301 Moved Permanently Server: nginx/1.24.0 (Ubuntu) Date: Fri, 23 Jan 2026 22:57:05 GMT Content-Type: text/html Content-Length: 178 Connection: close Location: https://www.xombo.com/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx/1.24.0 (Ubuntu)</center> </body> </html>
Open service 45.61.141.42:443 · xombo.com
2026-01-23 22:57
HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Fri, 23 Jan 2026 22:57:05 GMT Content-Type: text/html Content-Length: 11121 Last-Modified: Sat, 30 Nov 2024 04:13:34 GMT Connection: close ETag: "674a90ee-2b71" Accept-Ranges: bytes Page title: Hardware, software, and sportswear to keep you moving. | XOMBO <html> <head> <meta name="google-site-verification" content="Ujh6bWidAtku1m5zZkI7DFYgKG0DlKgfuDHzQtNzC3w" /> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name="description" content="Hardware, software, and sportswear to keep you moving." /> <meta name="author" content="XOMBO" /> <link rel="icon" type="image/png" sizes="192x192" href="./static/192.png" /> <link rel="shortcut icon" type="image/png" sizes="48x48" href="./static/48.png" /> <title>Hardware, software, and sportswear to keep you moving. | XOMBO</title> <link href="https://fonts.googleapis.com/css?family=Lato:300,400,700" rel="stylesheet" /> <link rel="stylesheet" type="text/css" href="./static/site.css" /> </head> <body> <article class="announcement"> <div> <p> <strong> Get early access with <img src="./static/exclaim.png" alt="XO" style="vertical-align:-0.6em" height="50"> <i>Move!</i> </strong> </p> <a href="./emailform/index.html" class="button delete">Join Now!</a> <hr /> </div> </article> <figure class="right"> <div> <img src="./static/deadlift3.jpg" /> <aside> <img src="./static/socks1.png" /> </aside> <h1><span class="nowrap">Lifting Socks</span></h1> <h1><span class="nowrap">with Traction</span></h1> </div> </figure> <figure> <div> <ul> <li><a href="https://liftingsocks.com/" class="button">Order Now</a></li> </ul> </div> </figure> <hr id="video" class="anchor" /> <figure> <div> <iframe width="100%" height="395" src="https://www.youtube-nocookie.com/embed/93y4Sm2EJbI?rel=0&showinfo=0" frameborder="0" allow="autoplay; encrypted-media" allowfullscreen></iframe> </div> </figure> <figure> <div> <img src="./static/illustration1.jpg" /> <aside> <img src="./static/character1f.png" /> </aside> <h1><span class="nowrap">Artificial Intelligence</span> for</h1> <h1><span class="nowrap">Personal Trainers</span></h1> </div> </figure> <figure> <div> <ul> <li><a href="./trainers/index.html" class="button">Learn More</a></li> <li><a href="./trainers/index.html#register" class="button">Request Demo</a></li> </ul> </div> </figure> <footer> <div> <ul> <li><strong>Solutions for</strong></li> <li> <a href="./trainers/index.html">Personal Trainers</a> </li> <li> <a href="./gyms/index.html">Gyms</a> </li> <li> <a href="./doctors/index.html">Doctors</a> </li> <li> <a href="./employers/index.html">Employers</a> </li> <li> <a href="./schools/index.html">Schools</a> </li> <li> <a href="./sports/index.html">Sports Teams</a> </li> </ul> <ul> <li><strong></strong></li> <li> <a href="./military/index.html">Military</a> </li> <li> <a href="./emergency/index.html">First Responders</a> </li> <li> <a href="./families/index.html">Families</a> </li> <li> <a href="./elders/index.html">Elders</a> </li> <li> <a href="./patients/index.html">Patients/Clients</a> </li> <li> <a href="./other/index.html">Other</a> </li> </ul> <ul> <li><strong>Social Media</strong></li> <li> <a href="https://twitter.com/xomboinc">Twitter</a> </li> <li> <a href="https://instagram.com/xomboinc">Instagram</a> </li> <li> <a href="https://fb.me/xomboinc">Facebook</a> </li> <li> <a href="https://blog.xombo.com/">Blog</a> </li> </ul> <ul> <li><strong>Links</strong></li> <li> <a href="./about/index.html">About Us</a> </li> <li> <a href="https://jobs.xombo.com/">Jobs</a> </li> <li> <a href="https://press.xombo.com/">Press</a> </li> <li> <a href="https://liftingsocks.com/">Lifting Socks</a> </li> <li> <a href="https://habittapp.com/">Habit
Open service 45.61.141.42:80 · xombo.com
2026-01-23 22:57
HTTP/1.1 301 Moved Permanently Server: nginx/1.24.0 (Ubuntu) Date: Fri, 23 Jan 2026 22:57:05 GMT Content-Type: text/html Content-Length: 178 Connection: close Location: https://xombo.com/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx/1.24.0 (Ubuntu)</center> </body> </html>
Open service 45.61.141.42:443 · www.xombo.com
2026-01-23 22:57
HTTP/1.1 301 Moved Permanently Server: nginx/1.24.0 (Ubuntu) Date: Fri, 23 Jan 2026 22:57:05 GMT Content-Type: text/html Content-Length: 178 Connection: close Location: https://xombo.com/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx/1.24.0 (Ubuntu)</center> </body> </html>
Open service 45.61.141.42:443 · xombo.com
2026-01-23 12:58
HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Fri, 23 Jan 2026 12:58:30 GMT Content-Type: text/html Content-Length: 11121 Last-Modified: Sat, 30 Nov 2024 04:13:34 GMT Connection: close ETag: "674a90ee-2b71" Accept-Ranges: bytes Page title: Hardware, software, and sportswear to keep you moving. | XOMBO <html> <head> <meta name="google-site-verification" content="Ujh6bWidAtku1m5zZkI7DFYgKG0DlKgfuDHzQtNzC3w" /> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name="description" content="Hardware, software, and sportswear to keep you moving." /> <meta name="author" content="XOMBO" /> <link rel="icon" type="image/png" sizes="192x192" href="./static/192.png" /> <link rel="shortcut icon" type="image/png" sizes="48x48" href="./static/48.png" /> <title>Hardware, software, and sportswear to keep you moving. | XOMBO</title> <link href="https://fonts.googleapis.com/css?family=Lato:300,400,700" rel="stylesheet" /> <link rel="stylesheet" type="text/css" href="./static/site.css" /> </head> <body> <article class="announcement"> <div> <p> <strong> Get early access with <img src="./static/exclaim.png" alt="XO" style="vertical-align:-0.6em" height="50"> <i>Move!</i> </strong> </p> <a href="./emailform/index.html" class="button delete">Join Now!</a> <hr /> </div> </article> <figure class="right"> <div> <img src="./static/deadlift3.jpg" /> <aside> <img src="./static/socks1.png" /> </aside> <h1><span class="nowrap">Lifting Socks</span></h1> <h1><span class="nowrap">with Traction</span></h1> </div> </figure> <figure> <div> <ul> <li><a href="https://liftingsocks.com/" class="button">Order Now</a></li> </ul> </div> </figure> <hr id="video" class="anchor" /> <figure> <div> <iframe width="100%" height="395" src="https://www.youtube-nocookie.com/embed/93y4Sm2EJbI?rel=0&showinfo=0" frameborder="0" allow="autoplay; encrypted-media" allowfullscreen></iframe> </div> </figure> <figure> <div> <img src="./static/illustration1.jpg" /> <aside> <img src="./static/character1f.png" /> </aside> <h1><span class="nowrap">Artificial Intelligence</span> for</h1> <h1><span class="nowrap">Personal Trainers</span></h1> </div> </figure> <figure> <div> <ul> <li><a href="./trainers/index.html" class="button">Learn More</a></li> <li><a href="./trainers/index.html#register" class="button">Request Demo</a></li> </ul> </div> </figure> <footer> <div> <ul> <li><strong>Solutions for</strong></li> <li> <a href="./trainers/index.html">Personal Trainers</a> </li> <li> <a href="./gyms/index.html">Gyms</a> </li> <li> <a href="./doctors/index.html">Doctors</a> </li> <li> <a href="./employers/index.html">Employers</a> </li> <li> <a href="./schools/index.html">Schools</a> </li> <li> <a href="./sports/index.html">Sports Teams</a> </li> </ul> <ul> <li><strong></strong></li> <li> <a href="./military/index.html">Military</a> </li> <li> <a href="./emergency/index.html">First Responders</a> </li> <li> <a href="./families/index.html">Families</a> </li> <li> <a href="./elders/index.html">Elders</a> </li> <li> <a href="./patients/index.html">Patients/Clients</a> </li> <li> <a href="./other/index.html">Other</a> </li> </ul> <ul> <li><strong>Social Media</strong></li> <li> <a href="https://twitter.com/xomboinc">Twitter</a> </li> <li> <a href="https://instagram.com/xomboinc">Instagram</a> </li> <li> <a href="https://fb.me/xomboinc">Facebook</a> </li> <li> <a href="https://blog.xombo.com/">Blog</a> </li> </ul> <ul> <li><strong>Links</strong></li> <li> <a href="./about/index.html">About Us</a> </li> <li> <a href="https://jobs.xombo.com/">Jobs</a> </li> <li> <a href="https://press.xombo.com/">Press</a> </li> <li> <a href="https://liftingsocks.com/">Lifting Socks</a> </li> <li> <a href="https://habittapp.com/">Habit
Open service 45.61.141.42:443 · xombo.com
2026-01-10 01:55
HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Sat, 10 Jan 2026 01:55:50 GMT Content-Type: text/html Content-Length: 11121 Last-Modified: Sat, 30 Nov 2024 04:13:34 GMT Connection: close ETag: "674a90ee-2b71" Accept-Ranges: bytes Page title: Hardware, software, and sportswear to keep you moving. | XOMBO <html> <head> <meta name="google-site-verification" content="Ujh6bWidAtku1m5zZkI7DFYgKG0DlKgfuDHzQtNzC3w" /> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name="description" content="Hardware, software, and sportswear to keep you moving." /> <meta name="author" content="XOMBO" /> <link rel="icon" type="image/png" sizes="192x192" href="./static/192.png" /> <link rel="shortcut icon" type="image/png" sizes="48x48" href="./static/48.png" /> <title>Hardware, software, and sportswear to keep you moving. | XOMBO</title> <link href="https://fonts.googleapis.com/css?family=Lato:300,400,700" rel="stylesheet" /> <link rel="stylesheet" type="text/css" href="./static/site.css" /> </head> <body> <article class="announcement"> <div> <p> <strong> Get early access with <img src="./static/exclaim.png" alt="XO" style="vertical-align:-0.6em" height="50"> <i>Move!</i> </strong> </p> <a href="./emailform/index.html" class="button delete">Join Now!</a> <hr /> </div> </article> <figure class="right"> <div> <img src="./static/deadlift3.jpg" /> <aside> <img src="./static/socks1.png" /> </aside> <h1><span class="nowrap">Lifting Socks</span></h1> <h1><span class="nowrap">with Traction</span></h1> </div> </figure> <figure> <div> <ul> <li><a href="https://liftingsocks.com/" class="button">Order Now</a></li> </ul> </div> </figure> <hr id="video" class="anchor" /> <figure> <div> <iframe width="100%" height="395" src="https://www.youtube-nocookie.com/embed/93y4Sm2EJbI?rel=0&showinfo=0" frameborder="0" allow="autoplay; encrypted-media" allowfullscreen></iframe> </div> </figure> <figure> <div> <img src="./static/illustration1.jpg" /> <aside> <img src="./static/character1f.png" /> </aside> <h1><span class="nowrap">Artificial Intelligence</span> for</h1> <h1><span class="nowrap">Personal Trainers</span></h1> </div> </figure> <figure> <div> <ul> <li><a href="./trainers/index.html" class="button">Learn More</a></li> <li><a href="./trainers/index.html#register" class="button">Request Demo</a></li> </ul> </div> </figure> <footer> <div> <ul> <li><strong>Solutions for</strong></li> <li> <a href="./trainers/index.html">Personal Trainers</a> </li> <li> <a href="./gyms/index.html">Gyms</a> </li> <li> <a href="./doctors/index.html">Doctors</a> </li> <li> <a href="./employers/index.html">Employers</a> </li> <li> <a href="./schools/index.html">Schools</a> </li> <li> <a href="./sports/index.html">Sports Teams</a> </li> </ul> <ul> <li><strong></strong></li> <li> <a href="./military/index.html">Military</a> </li> <li> <a href="./emergency/index.html">First Responders</a> </li> <li> <a href="./families/index.html">Families</a> </li> <li> <a href="./elders/index.html">Elders</a> </li> <li> <a href="./patients/index.html">Patients/Clients</a> </li> <li> <a href="./other/index.html">Other</a> </li> </ul> <ul> <li><strong>Social Media</strong></li> <li> <a href="https://twitter.com/xomboinc">Twitter</a> </li> <li> <a href="https://instagram.com/xomboinc">Instagram</a> </li> <li> <a href="https://fb.me/xomboinc">Facebook</a> </li> <li> <a href="https://blog.xombo.com/">Blog</a> </li> </ul> <ul> <li><strong>Links</strong></li> <li> <a href="./about/index.html">About Us</a> </li> <li> <a href="https://jobs.xombo.com/">Jobs</a> </li> <li> <a href="https://press.xombo.com/">Press</a> </li> <li> <a href="https://liftingsocks.com/">Lifting Socks</a> </li> <li> <a href="https://habittapp.com/">Habit
Open service 45.61.141.42:443 · xombo.com
2025-12-23 03:35
HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Tue, 23 Dec 2025 03:35:40 GMT Content-Type: text/html Content-Length: 11121 Last-Modified: Sat, 30 Nov 2024 04:13:34 GMT Connection: close ETag: "674a90ee-2b71" Accept-Ranges: bytes Page title: Hardware, software, and sportswear to keep you moving. | XOMBO <html> <head> <meta name="google-site-verification" content="Ujh6bWidAtku1m5zZkI7DFYgKG0DlKgfuDHzQtNzC3w" /> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name="description" content="Hardware, software, and sportswear to keep you moving." /> <meta name="author" content="XOMBO" /> <link rel="icon" type="image/png" sizes="192x192" href="./static/192.png" /> <link rel="shortcut icon" type="image/png" sizes="48x48" href="./static/48.png" /> <title>Hardware, software, and sportswear to keep you moving. | XOMBO</title> <link href="https://fonts.googleapis.com/css?family=Lato:300,400,700" rel="stylesheet" /> <link rel="stylesheet" type="text/css" href="./static/site.css" /> </head> <body> <article class="announcement"> <div> <p> <strong> Get early access with <img src="./static/exclaim.png" alt="XO" style="vertical-align:-0.6em" height="50"> <i>Move!</i> </strong> </p> <a href="./emailform/index.html" class="button delete">Join Now!</a> <hr /> </div> </article> <figure class="right"> <div> <img src="./static/deadlift3.jpg" /> <aside> <img src="./static/socks1.png" /> </aside> <h1><span class="nowrap">Lifting Socks</span></h1> <h1><span class="nowrap">with Traction</span></h1> </div> </figure> <figure> <div> <ul> <li><a href="https://liftingsocks.com/" class="button">Order Now</a></li> </ul> </div> </figure> <hr id="video" class="anchor" /> <figure> <div> <iframe width="100%" height="395" src="https://www.youtube-nocookie.com/embed/93y4Sm2EJbI?rel=0&showinfo=0" frameborder="0" allow="autoplay; encrypted-media" allowfullscreen></iframe> </div> </figure> <figure> <div> <img src="./static/illustration1.jpg" /> <aside> <img src="./static/character1f.png" /> </aside> <h1><span class="nowrap">Artificial Intelligence</span> for</h1> <h1><span class="nowrap">Personal Trainers</span></h1> </div> </figure> <figure> <div> <ul> <li><a href="./trainers/index.html" class="button">Learn More</a></li> <li><a href="./trainers/index.html#register" class="button">Request Demo</a></li> </ul> </div> </figure> <footer> <div> <ul> <li><strong>Solutions for</strong></li> <li> <a href="./trainers/index.html">Personal Trainers</a> </li> <li> <a href="./gyms/index.html">Gyms</a> </li> <li> <a href="./doctors/index.html">Doctors</a> </li> <li> <a href="./employers/index.html">Employers</a> </li> <li> <a href="./schools/index.html">Schools</a> </li> <li> <a href="./sports/index.html">Sports Teams</a> </li> </ul> <ul> <li><strong></strong></li> <li> <a href="./military/index.html">Military</a> </li> <li> <a href="./emergency/index.html">First Responders</a> </li> <li> <a href="./families/index.html">Families</a> </li> <li> <a href="./elders/index.html">Elders</a> </li> <li> <a href="./patients/index.html">Patients/Clients</a> </li> <li> <a href="./other/index.html">Other</a> </li> </ul> <ul> <li><strong>Social Media</strong></li> <li> <a href="https://twitter.com/xomboinc">Twitter</a> </li> <li> <a href="https://instagram.com/xomboinc">Instagram</a> </li> <li> <a href="https://fb.me/xomboinc">Facebook</a> </li> <li> <a href="https://blog.xombo.com/">Blog</a> </li> </ul> <ul> <li><strong>Links</strong></li> <li> <a href="./about/index.html">About Us</a> </li> <li> <a href="https://jobs.xombo.com/">Jobs</a> </li> <li> <a href="https://press.xombo.com/">Press</a> </li> <li> <a href="https://liftingsocks.com/">Lifting Socks</a> </li> <li> <a href="https://habittapp.com/">Habit