Following this thread!

Stupid question, but are you somehow publicly exposing your vhost config (or a bak file of it)?