LeakIX - Host zapisp.com.br

Domain zapisp.com.br

United States

CLOUDFLARENET

Software information

cloudflare

tcp/443

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.94.82
Domain: zapisp.com.br
Port: 443
URL: https://zapisp.com.br

First seen 2023-03-02 02:00
Last seen 2023-11-16 19:48
Open for 259 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225a3a900e

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/zapisp/zapisp
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX3l1cElSWEl5bngwbFUyZXhPTUEzVHpBWUg2dlY2cDBvZW9xZw==
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-11-16 19:48

414 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652207414905

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/zapisp/zapisp
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzXzAzTlRoOWh5UVFXYW5GQ1B4N0VWT29RemZMc3R5STBVcjdnbw==
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-11-05 23:28

414 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522706fbca0

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/zapisp/zapisp
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX29QQTVtOVM1cW5LRWxqMGU2eEVuS3dYMDdmSXhScTRWNnJXcQ==
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-10-26 18:39

414 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65228dc8235f

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/zapisp/zapisp
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX20wVlNiWkc5MWlMM1R5Z0gzclA5bHVjaThLQ01aZzQxeUcyOQ==
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-10-11 03:27

414 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e2477df3

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/zapisp/zapisp
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX0ZlMUtPWDM3UmlFbFVqSGJkb3FWUGlXVFZJbUxqdjBXczJ3Mw==
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-10-03 15:58

414 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522be1fd8ca

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/zapisp/zapisp
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX21odk1LYjNvUmJDVG8yRTR1YzFyTVpqQkJRb29LVTRUVXl1OQ==
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-10-02 12:10

414 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65229a11acbf

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/zapisp/zapisp
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX0RZeUtMSE53UVFWN3NjcDJldVdWaVJTNjVmUDAyaDJRSEtIYQ==
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-04-02 21:19

414 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65228074b1d4

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/zapisp/zapisp
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX1RCbUpUdGowdVNvdjMwdmxaMkRIdkJ0SDdNN3d5NDNaek9neQ==
[branch "master"]
	remote = origin
	merge = refs/heads/master

Found on 2023-03-02 02:00

414 Bytes

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 107.22.170.230
Domain: hml.zapisp.com.br
Port: 443
URL: https://hml.zapisp.com.br

First seen 2022-09-11 15:38
Last seen 2023-02-28 02:45
Open for 169 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522db722950

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/zapisp/zapisp
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX3JDeUluUjZ5NGQ1SnRNaVdUMXFIelByWXBIc2NHVTA4YXhWYQ==
[branch "release/2.2.0"]
	remote = origin
	merge = refs/heads/release/2.2.0

Found on 2023-02-28 02:45

428 Bytes

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522d71aa9d4

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://github.com/zapisp/aws-teste
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
[http "https://github.com/"]
	extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX3lWOWE4WUhyamZYa2lTbXlsM1ZPaFBlVDQxcDkyMjBmeEZWZg==
[branch "release/1.0.0"]
	remote = origin
	merge = refs/heads/release/1.0.0

Found on 2022-09-11 15:38

431 Bytes

Create report

Open service 172.66.162.122:443 · faculdade.zapisp.com.br

2026-01-22 22:16

HTTP/1.1 302 Found
Date: Thu, 22 Jan 2026 22:16:52 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=27,cfOrigin;dur=87
Cache-Control: no-cache, private
Location: https://faculdade.zapisp.com.br/auth/login?redirect=%2F
X-Frame-Options: SAMEORIGIN
Set-Cookie: XSRF-TOKEN=eyJpdiI6Ink4b2s2SURybkR4bTQ2VlEwY2pJYXc9PSIsInZhbHVlIjoiYk44YUVVcFZwWkRmNjEyVlJMOGtOWjdmMmFtQ0xQbzNqZlFSN3BVUWlQNWtkcUNpTHhkbUIzZG1WN2hYNWd2U3JUQjh4SlMzYWJoOERwVWxWYnhyMzEreTBNNzNlTTRrU29EeWhna0FzTDZwVFkxZGMxWUcxMzBReStPQUdjNk0iLCJtYWMiOiIxN2Q2ZjM4NzRiOGVjMDVjOWIxMzBhYmRiYWNmYjgwNTIzYTNkODNlZjhhMDU0Yzg0ZDZhYzUyOTQ2N2M5NWRiIn0%3D; expires=Fri, 23-Jan-2026 00:16:52 GMT; Max-Age=7200; path=/; secure; samesite=none
Set-Cookie: laravel_session=Ya7ZFjCaJhgkw06P2OLPTlfNQ2dC2RojsIColpJG; expires=Fri, 23-Jan-2026 00:16:52 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
X-Debug-Backend: php74
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
cf-cache-status: DYNAMIC
CF-RAY: 9c226b0f095ea1ea-YYZ
alt-svc: h3=":443"; ma=86400

Page title: Redirecting to https://faculdade.zapisp.com.br/auth/login?redirect=%2F

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url='https://faculdade.zapisp.com.br/auth/login?redirect=%2F'" />

        <title>Redirecting to https://faculdade.zapisp.com.br/auth/login?redirect=%2F</title>
    </head>
    <body>
        Redirecting to <a href="https://faculdade.zapisp.com.br/auth/login?redirect=%2F">https://faculdade.zapisp.com.br/auth/login?redirect=%2F</a>.
    <script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"8a78ae05f76e47baae69d6b8bdbe035e","server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>
</body>
</html>

Found 2026-01-22 by HttpPlugin

Create report

Open service 172.67.70.236:443 · drones.zapisp.com.br

2026-01-10 07:58

HTTP/1.1 200 OK
Date: Sat, 10 Jan 2026 07:58:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
access-control-allow-origin: *
Cache-Control: no-cache, no-store
feature-policy: geolocation 'none';midi 'none';sync-xhr 'none';microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';fullscreen 'self';payment 'none';accelerometer 'none';usb 'none';autoplay 'none'
nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
report-to: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=htJCnYGS9ezo2fNuVZBnqt%2FhvUi5ZXnBQUSvty6KqDw%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1768031918"}],"max_age":3600}
reporting-endpoints: heroku-nel="https://nel.heroku.com/reports?s=htJCnYGS9ezo2fNuVZBnqt%2FhvUi5ZXnBQUSvty6KqDw%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1768031918"
Server: cloudflare
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
via: 2.0 heroku-router
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: deny
x-permitted-cross-domain-policies: none
x-xss-protection: 0
cf-cache-status: DYNAMIC
CF-RAY: 9bbaa160b930f78f-EWR
alt-svc: h3=":443"; ma=86400

Found 2026-01-10 by HttpPlugin

Create report

faculdade.zapisp.com.br

Fingerprint:

082ebf8c81118dbe9bd970a8414a72a9459b6458b661a6d5d9ffea851de1dd42

CN:

faculdade.zapisp.com.br

Key:

RSA-2048

Issuer:

R13

Not before:

2025-12-28 17:25

Not after:

2026-03-28 17:25

drones.zapisp.com.br

Fingerprint:

7a7bbccb8d0934ee4893111e6f3dd998b5b33c7037736dfb12f1a0951dd2cecf

CN:

drones.zapisp.com.br

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-12-29 10:43

Not after:

2026-03-29 11:43

Domain summary

zapisp.com.br 8 hml.zapisp.com.br 2 faculdade.zapisp.com.br 0 drones.zapisp.com.br 0

4 recorded

IP summary

172.66.162.122 1 172.67.70.236 1 18.239.94.82 1 18.66.122.5 1 13.225.78.42 1 107.22.170.230 1 35.174.222.110 1

7 recorded