>
Unvertise  /  Content  /  You scanned us

Hello, scanner.

You asked this server for a file that would contain passwords. Here's what's actually here.

# GET {the path you just tried} # 404 — and it was always going to be STACK static HTML on a CDN DATABASE none ADMIN none PHP none WORDPRESS none .ENV does not exist SECRETS not on this machine # This site is 533 pre-built HTML files. There is no server-side # code to exploit, no login to brute force, and no environment # file to read. The build happens on a laptop in Louisville and # the result is copied to a CDN. That is the entire attack surface. # If you are a person: hello. The real pages are below.

Why this page exists

Because a meaningful share of the traffic to any website is automated software looking for a way in. Not people, not Google — scripts, trying a list of paths that sometimes work on sites running WordPress, Laravel, Vite or an exposed cloud console.

This is a sample of what's been requested here and never found:

/.env/.env.local/.env.development/.env.production/.env.backup/@fs/.env/@fs/src/.env/__vite_rsc_findSourceMapURL/v1/graphql/api/templates/preview/console/feast/read-document/model/info/index.php/api/auth/cgi-bin/php/wp-login.php/wp-admin/xmlrpc.php/administrator

What this means for your site

If you run WordPress, those same requests are hitting you right now and some of them are not harmless. The short version of defending against it:

  • Keep core, themes and plugins updated. Almost every successful attack is a known hole left open.
  • Delete plugins you don't use. Deactivated is not the same as removed; the code is still reachable.
  • Never leave a .env or a .git folder inside your web root. That's what most of these requests are hunting for.
  • Use real hosting. Managed hosting blocks most of this before it reaches your site.
  • Check Search Console for hacked-content notices once a month. A hacked site usually ranks fine until it suddenly doesn't.

A static site avoids the entire category, which is one of several reasons this one is built the way it is.

Free five-minute audit of your site Go to the actual homepage

Want this done on your site?

Tell me what's going on. You'll get a straight answer, including if that answer is that you don't need me.

Goes straight to me, not a sequence. Usually same-day reply. Prefer the phone? (502) 963-7305