Apache
tcp/443
CloudFront
tcp/443 tcp/80
nginx
tcp/443
nginx 1.22.1
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b011144f
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = http://git.2jsncsk2dxks.xyz/pzhan/pzhan-luodiye-guide.git fetch = +refs/heads/*:refs/remotes/origin/*
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true hooksPath = /dev/null [remote "origin"] url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git fetch = +refs/heads/*:refs/remotes/origin/*
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e94a7e0559075c565a94f88adbfdbd5290
Found 5 files trough .DS_Store spidering: /css /fonts /images /imgs /js
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e94a7e0559075c565a94f88adbfdbd5290
Found 5 files trough .DS_Store spidering: /css /fonts /images /imgs /js
Open service 65.9.95.3:443 · business.ntt-west.co.jp
2026-01-12 00:29
HTTP/1.1 403 Forbidden Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Mon, 12 Jan 2026 00:29:34 GMT Accept-Ranges: bytes X-Robots-Tag: noindex Server: Apache X-FRAME-OPTIONS: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Download-Options: noopen Strict-Transport-Security: max-age=31536000; includeSubDomains Referrer-Policy: strict-origin-when-cross-origin X-Cache: Error from cloudfront Via: 1.1 df0aa1ee2f3a5b8f1aa2a31aa4b7db86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PRG50-C1 X-Amz-Cf-Id: G5r3EtLTFyZOILpkQWtnIbbF8uvo-emM_jruONGyUMLFAITwDi7rsg==
Open service 65.9.95.3:80 · business.ntt-west.co.jp
2026-01-12 00:29
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 12 Jan 2026 00:29:32 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://business.ntt-west.co.jp/ X-Cache: Redirect from cloudfront Via: 1.1 0c8bf5614b4bcc3e76982cb7ff9a7662.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PRG50-C1 X-Amz-Cf-Id: Zv7NDtuAfjpa_9nKdu174gNKRJ59ymQZPeOcjV2jrasU_S5AAt1S5Q== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 65.9.95.3:443 · wwwxcallytest.geekdev.tokyo
2026-01-09 13:31
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Date: Fri, 09 Jan 2026 13:31:58 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-B-Cache: BYPASS Link: <https://wwwxcallytest.geekdev.tokyo/wp-json/>; rel="https://api.w.org/" Link: <https://wwwxcallytest.geekdev.tokyo/>; rel=shortlink X-F-Cache: BYPASS X-Signature: KUSANAGI X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 168125097acf734cd7750e139a974b38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PRG50-C1 X-Amz-Cf-Id: AEWNf31fEhaFJ9ANqBrGLG67m80VukRyViCXbhSynGkN0Nu6ZNxT2g==
Open service 65.9.95.3:443 · crankenstein.com
2026-01-09 04:55
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 09 Jan 2026 04:55:48 GMT Vary: accept, content-type Link: <https://crankenstein.com/wp-json/>; rel="https://api.w.org/" Link: <https://wp.me/7HN9L>; rel=shortlink Server: nginx/1.22.1 X-Cache: Miss from cloudfront Via: 1.1 7df0d6b4ce8f8b155434dd5d830b76be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PRG50-C1 X-Amz-Cf-Id: WR9TeDzIgbz9RMDVtx5du7lp7I8qQ3InGhESoiIIkcOa6lKOeLBa9Q==
Open service 65.9.95.3:80 · zarezervujto.cz
2026-01-08 14:17
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Thu, 08 Jan 2026 14:17:50 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://zarezervujto.cz/ X-Cache: Redirect from cloudfront Via: 1.1 b5f551be30f63eca57ca04273cb75994.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PRG50-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: SXzS_jv4s1y61uzEJ2pT8G2kGNOqkSEL_0WRBO4dwE7XYTC3h-i0AQ== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 65.9.95.3:443 · zarezervujto.cz
2026-01-08 14:17
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 74345
Connection: close
Date: Thu, 08 Jan 2026 14:17:50 GMT
x-nextjs-cache: HIT
x-nextjs-prerender: 1
x-nextjs-stale-time: 4294967294
x-powered-by: Next.js
Cache-Control: s-maxage=31536000
ETag: "tmu8c9aor21kvf"
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 6fc3cae9692b6db972e4990be9921fae.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: PRG50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: A-3EVFKdaoU3HU9d2w7EUGKf1iJkhw86yZaCW7ZRp1UWvcCh7YbBng==
<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/_next/static/media/4cf2300e9c8272f7-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/93f479601ee12b01-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" as="image" href="/logo.svg"/><link rel="preload" as="image" imageSrcSet="/_next/image?url=%2Fimages%2Fhero-phones.png&w=1200&q=75 1x, /_next/image?url=%2Fimages%2Fhero-phones.png&w=3840&q=75 2x"/><link rel="stylesheet" href="/_next/static/css/f096e2e1a26b291e.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/4072bd094a30733d.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-fa45add7900a936a.js"/><script src="/_next/static/chunks/4bd1b696-3a29b17f2dc87751.js" async=""></script><script src="/_next/static/chunks/1684-df0f613c7b27d368.js" async=""></script><script src="/_next/static/chunks/main-app-b361a269f5cbe5dd.js" async=""></script><script src="/_next/static/chunks/6035-b5a58817d3569b46.js" async=""></script><script src="/_next/static/chunks/1822-5c6f05f4165b27fb.js" async=""></script><script src="/_next/static/chunks/9545-551091e177b59410.js" async=""></script><script src="/_next/static/chunks/1926-8d3956f2e0a8de9a.js" async=""></script><script src="/_next/static/chunks/app/layout-7661d6769fe54f7d.js" async=""></script><script src="/_next/static/chunks/651-804e1a6e9a81bae4.js" async=""></script><script src="/_next/static/chunks/6874-a2fd73b6eff1a15e.js" async=""></script><script src="/_next/static/chunks/1260-f1aef1caab4af348.js" async=""></script><script src="/_next/static/chunks/app/page-9190bb8b21ea8bee.js" async=""></script><meta name="next-size-adjust" content=""/><link rel="icon" href="/favicon.ico" type="image/x-icon" sizes="16x16"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body class="__variable_188709 __variable_9a8899 antialiased"><div><header class="fixed top-0 left-0 right-0 z-50 px-4 sm:px-6 py-4 transition-all duration-300 bg-transparent"><div class="max-w-7xl mx-auto flex items-center justify-between relative"><div class="flex items-center z-10"><a class="flex items-center gap-2 sm:gap-3" href="/"><img alt="Zarezervuj To logo" width="40" height="40" decoding="async" data-nimg="1" class="w-8 h-8 sm:w-10 sm:h-10" style="color:transparent" src="/logo.svg"/><span class="text-lg sm:text-xl font-bold text-gray-900">Zarezervuj To</span></a></div><nav class="hidden lg:flex items-center justify-center absolute left-1/2 -translate-x-1/2"><div class="flex items-center gap-6 xl:gap-8"><a class="text-gray-700 hover:text-[#5945FE] transition-colors font-medium border-b-2 border-transparent hover:border-[#5945FE] pb-1" href="/#funkce">Funkce</a><a class="text-gray-700 hover:text-[#5945FE] transition-colors font-medium border-b-2 border-transparent hover:border-[#5945FE] pb-1" href="/#cenik">Ceník</a><a class="text-gray-700 hover:text-[#5945FE] transition-colors font-medium border-b-2 border-transparent hover:border-[#5945FE] pb-1" href="/blog">Blog</a><a class="text-gray-700 hover:text-[#5945FE] transition-colors font-medium border-b-2 border-transparent hover:border-[#5945FE] pb-1" href="/#kontakt">Kontakt</a><a class="text-gray-700 hover:text-[#5945FE] transition-colors font-medium border-b-2 border-transparent hover:border-[#5945FE] pb-1" href="/integrace">Integrace</a></div></nav><div class="hidden lg:flex items-center gap-3 xl:gap-4 z-10"><a class="text-gray-700 hover:text-[#5945FE] px-4 py-2 font-medium transition-colors" href="/login">Přihlásit se</a><a class="bg-[#5945FE] hover:bg-[#4835E8] text-white px-4 xl:px-5 py-2 rounded-full font-semibold transition-all duration-300 hover:transform hover:-translate-y-0.5 hover:shadow-lg wh
Open service 65.9.95.3:443 · wwwxcallytest.geekdev.tokyo
2026-01-02 13:45
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Date: Fri, 02 Jan 2026 13:45:35 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-B-Cache: BYPASS Link: <https://wwwxcallytest.geekdev.tokyo/wp-json/>; rel="https://api.w.org/" Link: <https://wwwxcallytest.geekdev.tokyo/>; rel=shortlink X-F-Cache: BYPASS X-Signature: KUSANAGI X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 32f35b6a71829a460d6fdae31f270164.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PRG50-C1 X-Amz-Cf-Id: Mp8pRTrWkW-Ig9AhrQJRRToBl94jBrDvXAMfCGjwdUaVGweeHSy_pg==
Open service 65.9.95.3:443 · crankenstein.com
2026-01-02 12:18
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 02 Jan 2026 12:18:22 GMT Vary: accept, content-type Link: <https://crankenstein.com/wp-json/>; rel="https://api.w.org/" Link: <https://wp.me/7HN9L>; rel=shortlink Server: nginx/1.22.1 X-Cache: Miss from cloudfront Via: 1.1 1f7383179aa19c47a962c46236696426.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PRG50-C1 X-Amz-Cf-Id: i619We4-ku-5etlSiA0K1C7yrQsta0gJP5iSpPkvb0H0KIP0rfkgaw==
Open service 65.9.95.3:80 · datapreview.nc.votinginfotool.org
2025-12-24 00:47
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Wed, 24 Dec 2025 00:47:09 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://datapreview.nc.votinginfotool.org/ X-Cache: Redirect from cloudfront Via: 1.1 b031f43146c9801101822eabdc464390.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PRG50-C1 X-Amz-Cf-Id: uRbtMXqSvd2M4G7WbX121VQ4vCtNKdSX1WW0EJaCmDvJ94wr6v7I3A== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 65.9.95.3:443 · datapreview.nc.votinginfotool.org
2025-12-24 00:47
HTTP/1.1 401 Unauthorized Server: CloudFront Date: Wed, 24 Dec 2025 00:47:09 GMT Content-Length: 12 Connection: close WWW-Authenticate: Basic X-Cache: LambdaGeneratedResponse from cloudfront Via: 1.1 e14614617e85116e937d5168b35a94de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PRG50-C1 X-Amz-Cf-Id: ne1plN06PkY1WgYE0C82n0mg5Rt5100rkHHFmZnH9FKJ1js61H0iyg== Strict-Transport-Security: max-age=31536000; includeSubDomains Unauthorized
Open service 65.9.95.3:443 · wwwxcallytest.geekdev.tokyo
2025-12-23 06:37
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Date: Tue, 23 Dec 2025 06:37:54 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-B-Cache: BYPASS Link: <https://wwwxcallytest.geekdev.tokyo/wp-json/>; rel="https://api.w.org/" Link: <https://wwwxcallytest.geekdev.tokyo/>; rel=shortlink X-F-Cache: BYPASS X-Signature: KUSANAGI X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 db66f1cc00a415c34c42ad011b26850c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PRG50-C1 X-Amz-Cf-Id: 8P4PDk7Kq_wZeGwlST3Gb7MYhMuSQwgTdwVKjAGicGHqSi61kCf_kQ==
Open service 65.9.95.3:443 · crankenstein.com
2025-12-22 14:44
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Mon, 22 Dec 2025 14:44:35 GMT Vary: accept, content-type Link: <https://crankenstein.com/wp-json/>; rel="https://api.w.org/" Link: <https://wp.me/7HN9L>; rel=shortlink Server: nginx/1.22.1 X-Cache: Miss from cloudfront Via: 1.1 b5f551be30f63eca57ca04273cb75994.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PRG50-C1 X-Amz-Cf-Id: Vdo1hT2jR-Lx8KeIy4Eg3QKH5o_f5TTJFxd7YQRR6oAM7YU20bulCA==