AmazonS3
tcp/443
CloudFront
tcp/443 tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652228a30bca
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://www.yc2common.com/web-page/xiguaweb.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652228a30bca
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://www.yc2common.com/web-page/xiguaweb.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652228a30bca
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://www.yc2common.com/web-page/xiguaweb.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652228a30bca
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://www.yc2common.com/web-page/xiguaweb.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 18.239.36.55:443 · laser2026.com
2026-01-25 23:33
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 7162
Connection: close
Date: Thu, 22 Jan 2026 14:36:29 GMT
Cache-Control: public, max-age=0, s-maxage=31536000
Server: AmazonS3
Accept-Ranges: bytes
ETag: "d181f14c4f773e32fcaa3a8064193793"
Last-Modified: Thu, 22 Jan 2026 13:42:43 GMT
X-Cache: Hit from cloudfront
Via: 1.1 2be97027a80b483d863e32bd7fe334e2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: hJbY6gGwjgQUVwkrUsLcPKavTXPqqyrn7hJb1hVVvfI4xGpyTYW0kA==
Age: 291446
Page title: Dashboard
<!DOCTYPE html><html lang="en"><head>
<meta charset="utf-8">
<title>Dashboard</title>
<base href="/">
<meta name="viewport" content="width=device-width, initial-scale=1.0, height=device-height, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0">
<!-- <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=5.0" /> -->
<!-- <meta name="viewport" content="width=device-width, initial-scale=1"> -->
<!-- <meta name="viewport" content="width=device-width, initial-scale=1.0"> -->
<meta content="A fully featured admin theme which can be used to build CRM, CMS, etc." name="description">
<meta content="Coderthemes" name="author">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<!-- <link rel="icon" type="image/x-icon" href="favicon.ico"> -->
<script type="text/javascript" src="https://speedcdn.io/flashphoner/js/flashphoner.bundle.min.js"></script>
<link rel="stylesheet" href="https://speedcdn.io/flashphoner/css/flashphoner.bundle.min.css">
<!-- App favicon -->
<link rel="shortcut icon" href="favicon.ico">
<!-- Plugins css -->
<link href="assets/css/flatpickr.min.css" rel="stylesheet" type="text/css" media="print" onload="this.media='all'"><noscript><link rel="stylesheet" href="assets/css/flatpickr.min.css"></noscript>
<link href="assets/css/selectize.bootstrap3.css" rel="stylesheet" type="text/css" media="print" onload="this.media='all'"><noscript><link rel="stylesheet" href="assets/css/selectize.bootstrap3.css"></noscript>
<style>@charset "UTF-8";@import url(https://fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700&display=swap);:root{--bs-blue:#4a81d4;--bs-indigo:#675aa9;--bs-purple:#6658dd;--bs-pink:#f672a7;--bs-red:#f1556c;--bs-orange:#fd7e14;--bs-yellow:#f7b84b;--bs-green:#1abc9c;--bs-teal:#02a8b5;--bs-cyan:#4fc6e1;--bs-white:#fff;--bs-gray:#98a6ad;--bs-gray-dark:#343a40;--bs-gray-100:#f7f8f9;--bs-gray-200:#eceff1;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#98a6ad;--bs-gray-700:#6c757d;--bs-gray-800:#343a40;--bs-gray-900:#323a46;--bs-primary:#6658dd;--bs-secondary:#6c757d;--bs-success:#1abc9c;--bs-info:#4fc6e1;--bs-warning:#f7b84b;--bs-danger:#f1556c;--bs-light:#eceff1;--bs-dark:#323a46;--bs-pink:#f672a7;--bs-blue:#4a81d4;--bs-primary-rgb:102,88,221;--bs-secondary-rgb:108,117,125;--bs-success-rgb:26,188,156;--bs-info-rgb:79,198,225;--bs-warning-rgb:247,184,75;--bs-danger-rgb:241,85,108;--bs-light-rgb:236,239,241;--bs-dark-rgb:50,58,70;--bs-pink-rgb:246,114,167;--bs-blue-rgb:74,129,212;--bs-white-rgb:255,255,255;--bs-black-rgb:0,0,0;--bs-body-color-rgb:108,117,125;--bs-body-bg-rgb:245,245,245;--bs-font-sans-serif:"Roboto",sans-serif;--bs-font-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--bs-gradient:linear-gradient(180deg, rgba(255, 255, 255, 0.15), rgba(255, 255, 255, 0));--bs-body-font-family:Roboto,sans-serif;--bs-body-font-size:0.875rem;--bs-body-font-weight:400;--bs-body-line-height:1.5;--bs-body-color:#6c757d;--bs-body-bg:#f5f5f5}*,::after,::before{box-sizing:border-box}@media (prefers-reduced-motion:no-preference){:root{scroll-behavior:smooth}}body{margin:0;font-family:var(--bs-body-font-family);font-size:var(--bs-body-font-size);font-weight:var(--bs-body-font-weight);line-height:var(--bs-body-line-height);color:var(--bs-body-color);text-align:var(--bs-body-text-align);background-color:var(--bs-body-bg);-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}body{padding-right:0!important;padding-left:0!important}body.loading{visibility:hidden;opacity:0}</style><link href="assets/css/bootstrap.min.css" rel="stylesheet" type="text/css" id="bs-default-stylesheet" media="print" onload="this.media='all'"><noscript><link rel="stylesheet" href="assets/css/bootstrap.min.css"></noscript>
<style>@charset "UTF-8";@import url(https://fonts.googleapis.com/css?family=Nunito:400,600,700,900);@import url(https://fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700&display=swap);html{position:relative;min-height:100%}body{overf
Open service 18.239.36.55:80 · laser2026.com
2026-01-25 23:33
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sun, 25 Jan 2026 23:33:55 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://laser2026.com/ X-Cache: Redirect from cloudfront Via: 1.1 1e604122efa69acb57f0b5ccc10d9de6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: qPnDHxIqItUrRVtOitprUHibND3F0z3zYnEh5nMH_jPmRHbqgkeEaw== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 18.239.36.55:80 · caplytahcp.com
2026-01-22 19:49
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Thu, 22 Jan 2026 19:49:49 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://caplytahcp.com/ X-Cache: Redirect from cloudfront Via: 1.1 0b7cb67940347be0c4ee6f93e9091938.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P2 X-Amz-Cf-Id: z0ON6R5bnrlVeEs7DxWjiWlpmwcz1n55d2jrVfeQrd_gloADkA8AoA== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 18.239.36.55:443 · caplytahcp.com
2026-01-22 19:49
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Thu, 22 Jan 2026 19:49:49 GMT Content-Length: 0 Connection: close Location: //www.caplytahcp.com/ X-Cache: FunctionGeneratedResponse from cloudfront Via: 1.1 0df834b214e5d5be3767a579b1941edc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P2 X-Amz-Cf-Id: Rilwg4oja5-9YVh779pQwdZEUJ60SG3VeCdLj-2hyFYuNYgoJGsjnw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
Open service 18.239.36.55:443 · lekke.co
2026-01-11 21:14
HTTP/1.1 403 Forbidden Content-Type: text/html; charset=utf-8 Content-Length: 474 Connection: close Date: Sun, 11 Jan 2026 21:14:22 GMT Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 cda23f0bbfe83784416efeada1ac1cf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: b5_MeqRD-mWuVJLZgWpKOmWcaoaSHywaSfvopCnzynNo8AWjylwijw== Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <h1>403 Forbidden</h1> <ul> <li>Code: AccessDenied</li> <li>Message: Access Denied</li> <li>RequestId: J6BSPDZEF5AF6PSH</li> <li>HostId: WPsUMolLNM/HEkzgaEpwYxef1fsJrJQOJRLjmapyyDM5O1wReQ0ALpfl9UpW6IZmdkObkA6iDUSDDTZUPZrfne06//HblxNP</li> </ul> <h3>An Error Occurred While Attempting to Retrieve a Custom Error Document</h3> <ul> <li>Code: AccessDenied</li> <li>Message: Access Denied</li> </ul> <hr/> </body> </html>
Open service 18.239.36.55:80 · lekke.co
2026-01-11 21:14
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sun, 11 Jan 2026 21:14:24 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://lekke.co/ X-Cache: Redirect from cloudfront Via: 1.1 cda23f0bbfe83784416efeada1ac1cf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: WZ4UsXdptRxJmz1SU6aUbcOAxbYLMphy5jxF-AbzHSO8_PnJTKH6tA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 18.239.36.55:443 · 110west40community.com
2026-01-11 00:02
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 36420
Connection: close
Date: Sun, 11 Jan 2026 00:02:06 GMT
Cache-Control: public,must-revalidate,max-age=0,s-maxage=300
x-frame-options: DENY
x-content-type-options: nosniff
reporting-endpoints: csp-endpoint="https://q8mlgy0mu5.execute-api.us-east-1.amazonaws.com/default/production/web-ng/report"
content-security-policy-report-only: frame-ancestors 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.iframe.ly https://js.stripe.com https://js-agent.newrelic.com https://bam.nr-data.net https://*.nr-data.net https://embed.tawk.to; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.iframe.ly https://js.stripe.com https://js-agent.newrelic.com https://bam.nr-data.net https://*.nr-data.net https://embed.tawk.to; report-to csp-endpoint; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.getequiem.com https://fonts.googleapis.com wss://*.iot.us-east-1.amazonaws.com wss://*.iot.ap-southeast-2.amazonaws.com wss://*.iot.eu-west-1.amazonaws.com https://bam.nr-data.net https://*.nr-data.net https://api.stripe.com https://iframe.ly; object-src 'self' data:; form-action 'self'; base-uri 'self'
content-security-policy: frame-ancestors 'none'
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000
referrer-policy: strict-origin-when-cross-origin
X-Powered-By: Next.js
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 58b391c0bc32913049841b1b8cd9053a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: -HRYUisaxRE3vS4fe2o1ESmNN8bPTB0L8EhXRcYWjNtM8WJJYG-KNQ==
Age: 1
Page title: 110 West 40
<!DOCTYPE html><html><head><meta charSet="utf-8" data-next-head=""/><script type="text/javascript" data-next-head="">
;window.NREUM||(NREUM={});NREUM.init={"distributed_tracing":{"enabled":true,"cors_use_newrelic_header":true,"cors_use_tracecontext_headers":true,"allowed_origins":["https://us.gateway.getequiem.com"]},"privacy":{"cookies_enabled":false}};
window.NREUM||(NREUM={}),__nr_require=function(t,e,n){function r(n){if(!e[n]){var o=e[n]={exports:{}};t[n][0].call(o.exports,function(e){var o=t[n][1][e];return r(o||e)},o,o.exports)}return e[n].exports}if("function"==typeof __nr_require)return __nr_require;for(var o=0;o<n.length;o++)r(n[o]);return r}({1:[function(t,e,n){function r(t){try{c.console&&console.log(t)}catch(e){}}var o,i=t("ee"),a=t(25),c={};try{o=localStorage.getItem("__nr_flags").split(","),console&&"function"==typeof console.log&&(c.console=!0,o.indexOf("dev")!==-1&&(c.dev=!0),o.indexOf("nr_dev")!==-1&&(c.nrDev=!0))}catch(s){}c.nrDev&&i.on("internal-error",function(t){r(t.stack)}),c.dev&&i.on("fn-err",function(t,e,n){r(n.stack)}),c.dev&&(r("NR AGENT IN DEVELOPMENT MODE"),r("flags: "+a(c,function(t,e){return t}).join(", ")))},{}],2:[function(t,e,n){function r(t,e,n,r,c){try{l?l-=1:o(c||new UncaughtException(t,e,n),!0)}catch(f){try{i("ierr",[f,s.now(),!0])}catch(d){}}return"function"==typeof u&&u.apply(this,a(arguments))}function UncaughtException(t,e,n){this.message=t||"Uncaught error with no additional information",this.sourceURL=e,this.line=n}function o(t,e){var n=e?null:s.now();i("err",[t,n])}var i=t("handle"),a=t(26),c=t("ee"),s=t("loader"),f=t("gos"),u=window.onerror,d=!1,p="nr@seenError",l=0;s.features.err=!0,t(1),window.onerror=r;try{throw new Error}catch(h){"stack"in h&&(t(13),t(12),"addEventListener"in window&&t(6),s.xhrWrappable&&t(14),d=!0)}c.on("fn-start",function(t,e,n){d&&(l+=1)}),c.on("fn-err",function(t,e,n){d&&!n[p]&&(f(n,p,function(){return!0}),this.thrown=!0,o(n))}),c.on("fn-end",function(){d&&!this.thrown&&l>0&&(l-=1)}),c.on("internal-error",function(t){i("ierr",[t,s.now(),!0])})},{}],3:[function(t,e,n){t("loader").features.ins=!0},{}],4:[function(t,e,n){function r(){_++,T=g.hash,this[u]=y.now()}function o(){_--,g.hash!==T&&i(0,!0);var t=y.now();this[h]=~~this[h]+t-this[u],this[d]=t}function i(t,e){E.emit("newURL",[""+g,e])}function a(t,e){t.on(e,function(){this[e]=y.now()})}var c="-start",s="-end",f="-body",u="fn"+c,d="fn"+s,p="cb"+c,l="cb"+s,h="jsTime",m="fetch",v="addEventListener",w=window,g=w.location,y=t("loader");if(w[v]&&y.xhrWrappable){var x=t(10),b=t(11),E=t(8),R=t(6),O=t(13),N=t(7),M=t(14),P=t(9),C=t("ee"),S=C.get("tracer");t(16),y.features.spa=!0;var T,_=0;C.on(u,r),C.on(p,r),C.on(d,o),C.on(l,o),C.buffer([u,d,"xhr-done","xhr-resolved"]),R.buffer([u]),O.buffer(["setTimeout"+s,"clearTimeout"+c,u]),M.buffer([u,"new-xhr","send-xhr"+c]),N.buffer([m+c,m+"-done",m+f+c,m+f+s]),E.buffer(["newURL"]),x.buffer([u]),b.buffer(["propagate",p,l,"executor-err","resolve"+c]),S.buffer([u,"no-"+u]),P.buffer(["new-jsonp","cb-start","jsonp-error","jsonp-end"]),a(M,"send-xhr"+c),a(C,"xhr-resolved"),a(C,"xhr-done"),a(N,m+c),a(N,m+"-done"),a(P,"new-jsonp"),a(P,"jsonp-end"),a(P,"cb-start"),E.on("pushState-end",i),E.on("replaceState-end",i),w[v]("hashchange",i,!0),w[v]("load",i,!0),w[v]("popstate",function(){i(0,_>1)},!0)}},{}],5:[function(t,e,n){function r(t){}if(window.performance&&window.performance.timing&&window.performance.getEntriesByType){var o=t("ee"),i=t("handle"),a=t(13),c=t(12),s="learResourceTimings",f="addEventListener",u="resourcetimingbufferfull",d="bstResource",p="resource",l="-start",h="-end",m="fn"+l,v="fn"+h,w="bstTimer",g="pushState",y=t("loader");y.features.stn=!0,t(8),"addEventListener"in window&&t(6);var x=NREUM.o.EV;o.on(m,function(t,e){var n=t[0];n instanceof x&&(this.bstStart=y.now())}),o.on(v,function(t,e){var n=t[0];n instanceof x&&i("bst",[n,e,this.bstStart,y.now()])}),a.on(m,function(t,e,n){this.bstStart=y.now(),this.bstType=n}),a.on(v,function(t,e){i(w,[e,this.bstStart,y.now(),this.bstType])}),c.on(m,function(){this.bstStart=y.now()}),c.on(v,function(t,e){i(w,[e,this.bst
Open service 18.239.36.55:80 · 110west40community.com
2026-01-11 00:02
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sun, 11 Jan 2026 00:02:06 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://110west40community.com/ X-Cache: Redirect from cloudfront Via: 1.1 fa7c071d9391a32eff94728584435f34.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P2 X-Amz-Cf-Id: SI4x7LTJRnn_iQpxvXT11vMSdnCEtt-t2A872BEJyQ0tUNtrrieArg== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 18.239.36.55:443 · m.boldmarkprop.co.za
2026-01-10 01:56
HTTP/1.1 403 Forbidden Server: CloudFront Date: Sat, 10 Jan 2026 01:56:42 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 2be97027a80b483d863e32bd7fe334e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ZvS7yxFX0ko5_xY51BtYia7DwZC-hFX-lpSwlxwfeMO8db4E_w-teQ== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: ZvS7yxFX0ko5_xY51BtYia7DwZC-hFX-lpSwlxwfeMO8db4E_w-teQ== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Open service 18.239.36.55:443 · d2743ch0fdw5tw.amplifyapp.com
2026-01-10 01:08
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Sat, 10 Jan 2026 01:08:44 GMT X-Cache: Error from cloudfront Via: 1.1 f7534ef0cb2fd28f5c17e7cc694ad68a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: sv5agXhAfo-clyRMqk04VbtOR0EJScz6OLpAmIX8v8p52MDK_WuSRw==