AkamaiGHost
tcp/443 tcp/80
GAZEL
tcp/443 tcp/80
Microsoft-IIS 10.0
tcp/443 tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb81b36fa3
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true [remote "origin"] url = https://github.com/broad-solutions-group/game-template.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "template-4"] remote = origin merge = refs/heads/template-4 [branch "template-1"] remote = origin merge = refs/heads/template-1 vscode-merge-base = origin/template-1 [branch "template-2"] remote = origin merge = refs/heads/template-2 vscode-merge-base = origin/template-2 [branch "template-3"] remote = origin merge = refs/heads/template-3 vscode-merge-base = origin/template-3
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb81b36fa3
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true [remote "origin"] url = https://github.com/broad-solutions-group/game-template.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "template-4"] remote = origin merge = refs/heads/template-4 [branch "template-1"] remote = origin merge = refs/heads/template-1 vscode-merge-base = origin/template-1 [branch "template-2"] remote = origin merge = refs/heads/template-2 vscode-merge-base = origin/template-2 [branch "template-3"] remote = origin merge = refs/heads/template-3 vscode-merge-base = origin/template-3
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb81b36fa3
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true [remote "origin"] url = https://github.com/broad-solutions-group/game-template.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "template-4"] remote = origin merge = refs/heads/template-4 [branch "template-1"] remote = origin merge = refs/heads/template-1 vscode-merge-base = origin/template-1 [branch "template-2"] remote = origin merge = refs/heads/template-2 vscode-merge-base = origin/template-2 [branch "template-3"] remote = origin merge = refs/heads/template-3 vscode-merge-base = origin/template-3
Open service 2.19.126.156:443 · mstatic.sonyunara.tw
2026-01-25 23:14
HTTP/1.1 200 OK Server: GAZEL Pragma: no-cache P3P: CP="NOI CURa ADMa DEVa TAIa OUR DELa BUS IND PHY ONL UNI COM NAV INT DEM PRE" Content-Type: text/html;charset=utf-8 Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Expires: Sun, 25 Jan 2026 23:14:44 GMT Date: Sun, 25 Jan 2026 23:14:44 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
Open service 2.19.126.156:80 · mstatic.sonyunara.tw
2026-01-25 23:14
HTTP/1.1 302 Moved Temporarily Server: GAZEL Location: https://img.sonyunara.com/error_page/SN404.html Content-Length: 231 Content-Type: text/html; charset=iso-8859-1 Date: Sun, 25 Jan 2026 23:15:06 GMT Connection: close Page title: 302 Found <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="https://img.sonyunara.com/error_page/SN404.html">here</a>.</p> </body></html>
Open service 2.19.126.156:443 · lvlt.bioware.cdn.ea.com
2026-01-25 21:35
HTTP/1.1 503 Service Unavailable Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 282 Expires: Sun, 25 Jan 2026 21:35:07 GMT Date: Sun, 25 Jan 2026 21:35:07 GMT Connection: close Akamai-Request-BC: [a=2.19.125.99,b=2799159430,c=g,n=DE_HE_FRANKFURT,o=20940],[c=c,n=DE_HE_FRANKFURT,o=20940],[c=o] Akamai-GRN: 0.637d1302.1769376906.a6d7c886 Page title: Error <HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY> An error occurred while processing your request.<p> Reference #132.331c1202.1769376906.c17a9f5f <P>https://errors.edgesuite.net/132.331c1202.1769376906.c17a9f5f</P> </BODY></HTML>
Open service 2.19.126.156:80 · lvlt.bioware.cdn.ea.com
2026-01-25 21:35
HTTP/1.1 503 Service Unavailable Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 282 Expires: Sun, 25 Jan 2026 21:35:27 GMT Date: Sun, 25 Jan 2026 21:35:27 GMT Connection: close Akamai-Request-BC: [a=2.19.125.92,b=70359104,c=g,n=DE_HE_FRANKFURT,o=20940],[c=c,n=DE_HE_FRANKFURT,o=20940],[c=o] Akamai-GRN: 0.5c7d1302.1769376926.4319840 Page title: Error <HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY> An error occurred while processing your request.<p> Reference #132.331c1202.1769376927.c17fcb43 <P>https://errors.edgesuite.net/132.331c1202.1769376927.c17fcb43</P> </BODY></HTML>
Open service 2.19.126.156:443 · my.z-markets.world
2026-01-10 03:28
HTTP/1.1 200 OK
Content-Type: text/html
X-Akamai-Transformed: 9 3356 0 pmb=mRUM,2
Expires: Sat, 10 Jan 2026 03:28:29 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sat, 10 Jan 2026 03:28:29 GMT
Content-Length: 8181
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=159
Server-Timing: origin; dur=3
Akamai-Cache-Status: NotCacheable from child
Strict-Transport-Security: max-age=15768000 ; preload
Set-Cookie: _abck=033BB1CD66696230030B55FB22ECE9A4~-1~YAAQXH0TAu9onIibAQAAG8bypQ/gCY6Vj2q3Honro+BUHQEBUW7Bi2ANXnsZexSbMk+5F9IQ6sozh19iRxGvLsczOD7+gNlHI0tt5rHbYgJpKHMVzPwWJHJV6y/ybbOA/kcu5uq9Fq//Cbb1imn7ymqzNlF/wjbLh7DvDLR9mpT8tShhTdLrnkQR4o3qPN5CJaZj4Up1BqQzYqkKl228Cel3PWeW/WkwtDMgw38hFdKy1dj3dCr677LIduqGPN13Pvzkc5rGkfvA3F5SEOdimugaMmTOdhKQWDqES+DYW/9auM0g7oIMSWEwZmPpbW73/ElMuBXFzFWhmWLAfVIPCZjvwXOqf93TZOZlTG9R6kj0tzxQzI8hPtsesdIgOebDR51VUUTqXYdYKdFJHald7vBuKjGLJC+oVNOfFcSBYoKoyD+z3/Z38cEdCHdQkOOg25sqlQdUX58wLA==~-1~-1~-1~-1~-1; Domain=.z-markets.world; Path=/; Expires=Sun, 10 Jan 2027 03:28:29 GMT; Max-Age=31536000; Secure
Set-Cookie: bm_sz=CA8D2B053727F653ED22AE7EE1378E9E~YAAQXH0TAvBonIibAQAAG8bypR4kYBUp920E2s2/kjjvwSVuxQpdb7zdEztzcHskSQCQQ8MW9KfF4JWxabP7Er7FPP4P8b8cJtzstRAUe02S1lULuMc+n7sKgB/HefuCxLrtx1t5qPAIARP4wza0125fS00BGCjwuCPLl7WdbW3W1h79ul6GkVdO1rE5x8K41FgphKLt0pKKQ92xcFCG9fGxLAdDIy0y3D/PHdAQ/8qKuvmAITPLFDXeQPs1otTX4Xzc6gi0Mq1Pbz2YWgS4No/LZmRWrX/GaeFky6ahRs4V8CKlN/HfiuJFtxXust/47PP0lep8nmJt69XHOcmOyZQV53EKKnaKLgEvhCyiuY+TH06u~3486529~3488056; Domain=.z-markets.world; Path=/; Expires=Sat, 10 Jan 2026 07:28:29 GMT; Max-Age=14400
Server-Timing: ak_p; desc="1768015709521_34831708_2564468806_16184_12431_14_26_-";dur=1
<!DOCTYPE html>
<html>
<head>
<style>
.spinner-wrapper {
display: flex;
justify-content: center;
align-items: center;
position: absolute;
width: 100%; /* double percent for correct string.format work */
height: 100%;
left: 0;
top: 0;
}
.spinner {
width: 36px;
height: 36px;
border: 2px solid #F2F3F8;
border-top: 3px solid #1f47cd;
border-radius: 100%;
animation: spin 1s infinite linear;
}
#main-text {
font-family: poppins,-apple-system,blinkmacsystemfont,arial,sans-serif;
font-size: 24px;
font-weight: 500;
line-height: 1.5;
color: #333;
background: #fff;
-webkit-font-smoothing: antialiased;
}
@keyframes spin {
from {
transform:rotate(0deg);
}
to {
transform:rotate(360deg);
}
}
</style>
<script>(window.BOOMR_mq=window.BOOMR_mq||[]).push(["addVar",{"rua.upush":"false","rua.cpush":"false","rua.upre":"false","rua.cpre":"false","rua.uprl":"false","rua.cprl":"false","rua.cprf":"false","rua.trans":"","rua.cook":"false","rua.ims":"false","rua.ufprl":"false","rua.cfprl":"false","rua.isuxp":"false","rua.texp":"norulematch","rua.ceh":"false","rua.ueh":"false","rua.ieh.st":"0"}]);</script>
<script>!function(e){var n="https://s.go-mpulse.net/boomerang/";if("False"=="True")e.BOOMR_config=e.BOOMR_config||{},e.BOOMR_config.PageParams=e.BOOMR_config.PageParams||{},e.BOOMR_config.PageParams.pci=!0,n="https://s2.go-mpulse.net/boomerang/";if(window.BOOMR_API_key="BHE5W-K2X86-F6ENT-WLD6L-BZK74",function(){function e(){if(!o){var e=document.createElement("script");e.id="boomr-scr-as",e.src=window.BOOMR.url,e.async=!0,i.parentNode.appendChild(e),o=!0}}function t(e){o=!0;var n,t,a,r,d=document,O=window;if(window.BOOMR.snippetMethod=e?"if":"i",t=function(e,n){var t=d.createElement("script");t.id=n||"boomr-if-as",t.src=window.BOOMR.url,BOOMR_lstart=(new Date).getTime(),e=e||d.body,e.appendChild(t)},!window.addEventListener&&window.attachEvent&&navigator.userAgent.match(/MSIE [67]\./))return window.BOOMR.snippetMethod="s",void t(i.parentNode,"boomr-async");a=document.createElement("IFRAME"),a.src="about:blank",a.title="",a.role="presentation",a.loading="eager",r=(a.frameElement||a).style,r.width=0,r.height=0,r.border=0,r.display="none",i.parentNode.appendChild(a);try{O=a.contentWindow,d=O.document.open()}catch(_){n=document.domain,a.src="javascript:var d=document.open();d.domain='"+n+"';void(0);",O=a.contentWindow,d=O.document.open()}if(n)d._boomrl=function(){this.domain=n,t()},d.write("<bo"+"dy onload='document._boomrl();'>");else if(O._boomrl=function(){t()},O.addEventListener)O.addEventListener("load",O._boomrl,!1);else if(O.attachEvent)O.attachEvent("onload",O._boomrl);d.close()}function a(e){window.BOOMR_onload=e&&e.timeStamp||(new Date).getTime()}if(!window.BOOMR||!window.BOOMR.version&&!window.BOOMR.snippetExecuted){window.BOOMR=window.BOOMR||{},window.BOOMR.snippetStart=(new Date).getTime(),window.BOOMR.snippetExecuted=!0,window.BOOMR.snippetVersion=12,window.BOOMR.url=n+"BHE5W-K2X86-F6ENT-WLD6L-BZK74";var i=document.currentScript||document.getElementsByTagName("script")[0],o=!1,r=document.createElement("link");if(r.relList&&"function"==typeof r.relList.supports&&r.relList.supports("preload")&&"as"in r)window.BOOMR.snippetMethod="p",r.href=window.BOOMR.url,r.rel="preload",r.as="script",r.addEventListener("load",e),r.addEventListener("error",function
Open service 2.19.126.156:80 · image.xboxlive.com
2026-01-09 20:10
HTTP/1.1 404 Not Found
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Content-Length: 1245
Date: Fri, 09 Jan 2026 20:10:56 GMT
Connection: close
Page title: 404 - File or directory not found.
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>404 - File or directory not found.</title>
<style type="text/css">
<!--
body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}
fieldset{padding:0 15px 10px 15px;}
h1{font-size:2.4em;margin:0;color:#FFF;}
h2{font-size:1.7em;margin:0;color:#CC0000;}
h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;}
#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;
background-color:#555555;}
#content{margin:0 0 0 2%;position:relative;}
.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}
-->
</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
<div class="content-container"><fieldset>
<h2>404 - File or directory not found.</h2>
<h3>The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.</h3>
</fieldset></div>
</div>
</body>
</html>
Open service 2.19.126.156:443 · image.xboxlive.com
2026-01-09 20:10
HTTP/1.1 404 Not Found
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Content-Length: 1245
Date: Fri, 09 Jan 2026 20:10:15 GMT
Connection: close
Page title: 404 - File or directory not found.
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>404 - File or directory not found.</title>
<style type="text/css">
<!--
body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}
fieldset{padding:0 15px 10px 15px;}
h1{font-size:2.4em;margin:0;color:#FFF;}
h2{font-size:1.7em;margin:0;color:#CC0000;}
h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;}
#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;
background-color:#555555;}
#content{margin:0 0 0 2%;position:relative;}
.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}
-->
</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
<div class="content-container"><fieldset>
<h2>404 - File or directory not found.</h2>
<h3>The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.</h3>
</fieldset></div>
</div>
</body>
</html>
Open service 2.19.126.156:443 · mediact.mycccportal.com
2026-01-09 08:33
HTTP/1.1 403 Forbidden Mime-Version: 1.0 Content-Type: text/html Content-Length: 377 Expires: Fri, 09 Jan 2026 08:33:41 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 09 Jan 2026 08:33:41 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1767947621429_34831689_758490048_14_3609_0_13_-";dur=1 Page title: Access Denied <HTML><HEAD> <TITLE>Access Denied</TITLE> </HEAD><BODY> <H1>Access Denied</H1> You don't have permission to access "http://mediact.mycccportal.com/" on this server.<P> Reference #18.497d1302.1767947621.2d35a3c0 <P>https://errors.edgesuite.net/18.497d1302.1767947621.2d35a3c0</P> </BODY> </HTML>
Open service 2.19.126.156:443 · loja.cvale.com.br
2026-01-08 20:29
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Page title: C.Vale - Cooperativa Agroindustrial
rity.ms https://k.clarity.ms *.fontawesome.com *.googleapis.com *.googletagmanager.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://integracaoloja.cvale.com.br https://integracaoloja.cvale.com.br/webhook/UpdateCatalogPoints https://integracaoloja.cvale.com.br/webhook/UpdateCatalogCashBack https://integracaolojaqas.cvale.com.br https://integracaolojaqas.cvale.com.br/webhook/UpdateCatalogPoints https://integracaolojaqas.cvale.com.br/webhook/UpdateCatalogCashBack https://dev-n8n.eaware.io https://dev-n8n.eaware.io/webhook/UpdateCatalogPointsCvale https://dev-n8n.eaware.io/webhook/UpdateCatalogCashBackCvale https://www.clarity.ms https://k.clarity.ms ekr.zdassets.com/ *.facebook.com *.facebook.net *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://get.geojs.io *.avada.io *.meetanshi.com meetanshi.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Akamai-Transformed: 9 46555 0 pmb=mRUM,1
Expires: Thu, 08 Jan 2026 20:29:39 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 08 Jan 2026 20:29:39 GMT
Transfer-Encoding: chunked
Connection: close
Connection: Transfer-Encoding
Set-Cookie: PHPSESSID=4gi8anho6m9o559r8d85p18j10; expires=Thu, 08 Jan 2026 21:29:37 GMT; Max-Age=3600; path=/; domain=loja.cvale.com.br; secure; HttpOnly; SameSite=Lax
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=1788
Server-Timing: origin; dur=872
Alt-Svc: h3=":443"; ma=93600
Server-Timing: ak_p; desc="1767904176282_34831701_912958513_265521_28395_18_62_-";dur=1
0000C000
<!doctype html>
<html lang="pt">
<head >
<script>
var LOCALE = 'pt\u002DBR';
var BASE_URL = 'https\u003A\u002F\u002Floja.cvale.com.br\u002F';
var require = {
'baseUrl': 'https\u003A\u002F\u002Floja.cvale.com.br\u002Fstatic\u002Fversion1765482805\u002Ffrontend\u002FMagefan\u002Foptimized\u002Fpt_BR'
};</script> <meta charset="utf-8"/>
<meta name="title" content="C.Vale - Cooperativa Agroindustrial"/>
<meta name="robots" content="INDEX,FOLLOW"/>
<meta name="viewport" content="width=device-width, initial-scale=1"/>
<meta name="format-detection" content="telephone=no"/>
<title>C.Vale - Cooperativa Agroindustrial</title>
<link rel="stylesheet" type="text/css" media="all" href="https://loja.cvale.com.br/static/version1765482805/frontend/Magefan/optimized/pt_BR/css/styles-m.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://loja.cvale.com.br/static/version1765482805/frontend/Magefan/optimized/pt_BR/jquery/uppy/dist/uppy-custom.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://loja.cvale.com.br/static/version1765482805/frontend/Magefan/optimized/pt_BR/MageWorx_SearchSuiteAutocomplete/css/searchsuiteautocomplete.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://loja.cvale.com.br/static/version1765482805/frontend/Magefan/optimized/pt_BR/Mageplaza_Core/css/owl.carousel.css" />
<li
Open service 2.19.126.156:443 · sports.amperjai.com
2025-12-23 15:12
HTTP/1.1 302 Moved Temporarily Location: https://sports.amperjai.com/blocked Cache-Control: max-age=0, private, must-revalidate Content-Length: 0 Date: Tue, 23 Dec 2025 15:12:33 GMT Connection: close Strict-Transport-Security: max-age=15768000 ; includeSubDomains
Open service 2.19.126.156:80 · sports.amperjai.com
2025-12-23 15:12
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://sports.amperjai.com/ Cache-Control: max-age=0 Expires: Tue, 23 Dec 2025 15:12:35 GMT Date: Tue, 23 Dec 2025 15:12:35 GMT Connection: close