The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb6c5fc55c
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true [remote "origin"] url = https://github.com/FarhansheikhBB/sde_website14.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "develop"] remote = origin merge = refs/heads/develop
Open service 44.205.65.78:443 · tf-infra-notification-srvc-nonproda-pr106.mobile-nonprod.lllapi.vision
2026-01-21 19:28
HTTP/1.1 403 Forbidden
Date: Wed, 21 Jan 2026 19:28:08 GMT
Content-Type: application/json
Content-Length: 23
Connection: close
x-amzn-RequestId: 22158ae6-7f98-43d5-a684-120a8e3db16f
x-amzn-ErrorType: ForbiddenException
x-amz-apigw-id: XjNPUGErIAMEljg=
{"message":"Forbidden"}
Open service 44.205.65.78:443 · api-cache.moova.io
2026-01-12 03:44
HTTP/1.1 403 Forbidden
Date: Mon, 12 Jan 2026 03:44:50 GMT
Content-Type: application/json
Content-Length: 42
Connection: close
x-amzn-RequestId: 13979c39-3ca8-4d11-ad7d-f7c13385de0d
x-amzn-ErrorType: MissingAuthenticationTokenException
x-amz-apigw-id: XDYn5HjEIAMEpXA=
X-Amzn-Trace-Id: Root=1-69646e32-3956be6c6388620155027b3c
{"message":"Missing Authentication Token"}