AmazonS3
tcp/443
GAZEL
tcp/443 tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb81b36fa3
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true [remote "origin"] url = https://github.com/broad-solutions-group/game-template.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "template-4"] remote = origin merge = refs/heads/template-4 [branch "template-1"] remote = origin merge = refs/heads/template-1 vscode-merge-base = origin/template-1 [branch "template-2"] remote = origin merge = refs/heads/template-2 vscode-merge-base = origin/template-2 [branch "template-3"] remote = origin merge = refs/heads/template-3 vscode-merge-base = origin/template-3
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb81b36fa3
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true [remote "origin"] url = https://github.com/broad-solutions-group/game-template.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "template-4"] remote = origin merge = refs/heads/template-4 [branch "template-1"] remote = origin merge = refs/heads/template-1 vscode-merge-base = origin/template-1 [branch "template-2"] remote = origin merge = refs/heads/template-2 vscode-merge-base = origin/template-2 [branch "template-3"] remote = origin merge = refs/heads/template-3 vscode-merge-base = origin/template-3
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb81b36fa3
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true [remote "origin"] url = https://github.com/broad-solutions-group/game-template.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "template-4"] remote = origin merge = refs/heads/template-4 [branch "template-1"] remote = origin merge = refs/heads/template-1 vscode-merge-base = origin/template-1 [branch "template-2"] remote = origin merge = refs/heads/template-2 vscode-merge-base = origin/template-2 [branch "template-3"] remote = origin merge = refs/heads/template-3 vscode-merge-base = origin/template-3
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb81b36fa3
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true [remote "origin"] url = https://github.com/broad-solutions-group/game-template.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "template-4"] remote = origin merge = refs/heads/template-4 [branch "template-1"] remote = origin merge = refs/heads/template-1 vscode-merge-base = origin/template-1 [branch "template-2"] remote = origin merge = refs/heads/template-2 vscode-merge-base = origin/template-2 [branch "template-3"] remote = origin merge = refs/heads/template-3 vscode-merge-base = origin/template-3
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb81b36fa3
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true [remote "origin"] url = https://github.com/broad-solutions-group/game-template.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "template-4"] remote = origin merge = refs/heads/template-4 [branch "template-1"] remote = origin merge = refs/heads/template-1 vscode-merge-base = origin/template-1 [branch "template-2"] remote = origin merge = refs/heads/template-2 vscode-merge-base = origin/template-2 [branch "template-3"] remote = origin merge = refs/heads/template-3 vscode-merge-base = origin/template-3
Open service 2.19.126.160:443 · download.aiot.mediatek.com
2026-01-26 09:52
HTTP/1.1 403 Forbidden x-amz-bucket-region: ap-southeast-1 x-amz-request-id: Z6DF3XQ7TQQW54FS x-amz-id-2: C+YGFhGEjWs5NFh0Oe8pGG6YAGSETxewMSu2mU/rO+bXGO0M5jgL5o6Fl1zpx4Y/NZZKYdwHRBPdKIH0aOIQtfz94OqfwyOQ Content-Type: application/xml Server: AmazonS3 Content-Length: 263 Date: Mon, 26 Jan 2026 09:52:23 GMT Connection: close <?xml version="1.0" encoding="UTF-8"?> <Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>Z6DF3XQ7TQQW54FS</RequestId><HostId>C+YGFhGEjWs5NFh0Oe8pGG6YAGSETxewMSu2mU/rO+bXGO0M5jgL5o6Fl1zpx4Y/NZZKYdwHRBPdKIH0aOIQtfz94OqfwyOQ</HostId></Error>
Open service 2.19.126.160:443 · saint-laurent.dam.kering.com
2026-01-26 09:23
HTTP/1.1 302 Moved Temporarily Content-Type: text/html;charset=UTF-8 Content-Length: 0 Permissions-Policy: camera=(), geolocation=(), microphone=() Content-Security-Policy-Report-Only: default-src 'self'; child-src blob: https://*; connect-src 'self' blob: https://d8ejoa1fys2rk.cloudfront.net https://static.bynder.cloud https://dam.bynder.com https://sentry10.bynder.cloud https://api2.amplitude.com https://*.google-analytics.com https://stats.g.doubleclick.net https://*.amazonaws.com https://fast.appcues.com https://api.appcues.com https://api.appcues.net wss://api.appcues.net https://*.courier.com wss://*.courier.com https://apiv2.webdamdb.com/oauth2/token https://cmp.osano.com https://consent.api.osano.com https://tattle.api.osano.com https://disclosure.api.osano.com https://api.eu1.honeycomb.io https://heapanalytics.com https://*.heapanalytics.com https://*.heap-api.com; font-src https://* data: ; img-src https://* data: blob:; media-src https://*; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://d8ejoa1fys2rk.cloudfront.net https://static.bynder.cloud https://www.googletagmanager.com https://www.google-analytics.com https://js.hs-analytics.net https://fast.appcues.com https://browser.sentry-cdn.com https://bynder-static.s3.amazonaws.com https://cmp.osano.com https://consent.api.osano.com https://tattle.api.osano.com https://disclosure.api.osano.com https://heapanalytics.com https://*.heapanalytics.com https://*.heap-api.com; style-src 'self' 'unsafe-inline' https://d8ejoa1fys2rk.cloudfront.net https://static.bynder.cloud https://fonts.googleapis.com https://bynder-static.s3.amazonaws.com https://fast.appcues.com https://cmp.osano.com https://consent.api.osano.com https://tattle.api.osano.com https://disclosure.api.osano.com https://heapanalytics.com https://*.heapanalytics.com https://*.heap-api.com; worker-src 'self' blob:; report-uri https://sentry10.bynder.cloud/api/1817/security/?sentry_key=638cfd1ab10c78c179140416b9893c0e Location: /login/ X-API-Correlation-Id: 2d0ff0cf-1181-fd40-c1c4-eaa5ade961c9 Cross-Origin-Resource-Policy: cross-origin X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Amz-Cf-Pop: FRA56-P13 X-Amz-Cf-Id: gJpu5sHp0tMFDMk8UIasVSNIOz9y8SriYoagfJPHmoW3RXmbabiWVQ== Expires: Mon, 26 Jan 2026 09:23:25 GMT Cache-Control: max-age=0, no-cache Pragma: no-cache Date: Mon, 26 Jan 2026 09:23:25 GMT Connection: close Set-Cookie: bynder=6653E9DB-64BE-415C-8279BDE77C57E899;Path=/;Secure;HttpOnly Set-Cookie: DEFAULTLOCALE=en_US;Path=/ Akamai-Cache-Status: NotCacheable from child Strict-Transport-Security: max-age=15768000
Open service 2.19.126.160:80 · saint-laurent.dam.kering.com
2026-01-26 09:23
HTTP/1.1 301 Moved Permanently Content-Length: 0 Location: https://saint-laurent.dam.kering.com/ Expires: Mon, 26 Jan 2026 09:23:47 GMT Cache-Control: max-age=0, no-cache Pragma: no-cache Date: Mon, 26 Jan 2026 09:23:47 GMT Connection: close Akamai-Cache-Status: NotCacheable from child
Open service 2.19.126.160:443 · mstatic.sonyunara.com
2026-01-25 23:14
HTTP/1.1 200 OK Server: GAZEL Pragma: no-cache P3P: CP="NOI CURa ADMa DEVa TAIa OUR DELa BUS IND PHY ONL UNI COM NAV INT DEM PRE" Content-Type: text/html;charset=utf-8 Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Expires: Sun, 25 Jan 2026 23:14:43 GMT Date: Sun, 25 Jan 2026 23:14:43 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
Open service 2.19.126.160:80 · mstatic.sonyunara.com
2026-01-25 23:14
HTTP/1.1 302 Moved Temporarily Server: GAZEL Location: https://img.sonyunara.com/error_page/SN404.html Content-Length: 231 Content-Type: text/html; charset=iso-8859-1 Date: Sun, 25 Jan 2026 23:15:05 GMT Connection: close Page title: 302 Found <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="https://img.sonyunara.com/error_page/SN404.html">here</a>.</p> </body></html>