LeakIX - Host critel.li

Domain critel.li

United States

CLOUDFLARENET

Software information

cloudflare

tcp/8443

nginx nginx

tcp/443 tcp/80

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 72.68.13.211
Domain: gitlab.critel.li
Port: 443
URL: https://gitlab.critel.li

First seen 2025-12-02 06:40
Last seen 2026-01-01 22:03
Open for 30 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d603073f8703073f8703073f8703073f8703073f87
```
GraphQL introspection enabled at /api/graphql
Detected: GitLab
```
  Found on 2026-01-01 22:03
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
  Found on 2025-12-11 01:13
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 72.68.13.211
Domain: gitlab.critel.li
Port: 80
URL: https://gitlab.critel.li:80

First seen 2025-12-02 06:40
Last seen 2025-12-27 07:08
Open for 25 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d603073f8703073f8703073f8703073f8703073f87
```
GraphQL introspection enabled at /api/graphql
Detected: GitLab
```
  Found on 2025-12-27 07:08
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
  Found on 2025-12-10 19:14
Create report

Open service 96.240.15.242:443 · ws.review-195.rev.critel.li

2026-01-12 20:41

HTTP/1.1 200 OK
Date: Mon, 12 Jan 2026 20:42:27 GMT
Content-Length: 2
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token, X-Requested-With, Accept, Authorization, X-CSRF-TOKEN, XSRF-TOKEN, X-Socket-Id
uWebSockets: 20
Strict-Transport-Security: max-age=31536000; includeSubDomains


OK

Found 5 hours ago by HttpPlugin

Create report

Open service 96.240.15.242:80 · ws.review-195.rev.critel.li

2026-01-12 20:41

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Mon, 12 Jan 2026 20:42:27 GMT
Content-Length: 19
Connection: close


404 page not found

Found 5 hours ago by HttpPlugin

Create report

Open service 96.240.15.242:443 · enterprise.review-195.rev.critel.li

2026-01-12 20:41

HTTP/1.1 200 OK
Date: Mon, 12 Jan 2026 20:42:27 GMT
Content-Type: text/html
Content-Length: 447
Connection: close
Last-Modified: Mon, 12 Jan 2026 20:34:10 GMT
ETag: "69655ac2-1bf"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubDomains

Page title: Enterprise Portal

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8" />
    <link href="/vite.svg" rel="icon" type="image/svg+xml" />
    <meta content="width=device-width, initial-scale=1.0" name="viewport" />
    <title>Enterprise Portal</title>
  <script type="module" crossorigin src="/assets/index-CyFBxWWg.js"></script>
  <link rel="stylesheet" crossorigin href="/assets/index-DtiQC-r4.css">
</head>
<body>
<div id="app"></div>
</body>
</html>

Found 5 hours ago by HttpPlugin

Create report

Open service 96.240.15.242:443 · app.review-195.rev.critel.li

2026-01-12 20:41

HTTP/1.1 200 OK
Date: Mon, 12 Jan 2026 20:42:28 GMT
Content-Type: text/html
Content-Length: 3997
Connection: close
Last-Modified: Mon, 12 Jan 2026 20:34:11 GMT
ETag: "69655ac3-f9d"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubDomains

Page title: LoopSpark

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="utf-8">
    <meta content="IE=edge" http-equiv="X-UA-Compatible">
    <meta content="width=device-width,initial-scale=1.0" name="viewport">
    <link href="/favicon.ico" rel="icon">
    <title>LoopSpark</title>

    <meta property="og:url" content="https://loopspark.com/" />
    <meta property="og:type" content="website" />
    <meta property="og:title" content="LoopSpark" />
    <meta property="og:description"
          content="The Revolutionary Software Transforming Fitness Studios - One gorgeous platform. Everything you need to run your studio like clockwork." />
    <meta property="og:image" content="https://loopspark.com/images/public/twitter-card.png" />
    <meta name="description"
          content="The Revolutionary Software Transforming Fitness Studios - One gorgeous platform. Everything you need to run your studio like clockwork.">

    <meta name="apple-itunes-app" content="app-id=1491780495" />

    <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
    <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png">
    <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png">
    <link rel="manifest" href="/site.webmanifest">
    <link rel="mask-icon" href="/safari-pinned-tab.svg" color="#0262ac">
    <meta name="apple-mobile-web-app-title" content="LoopSpark">
    <meta name="application-name" content="LoopSpark">
    <meta name="msapplication-TileColor" content="#0262ac">
    <meta name="theme-color" content="#ffffff">

    <meta http-equiv="cache-control" content="max-age=0" />
    <meta http-equiv="cache-control" content="no-cache" />
    <meta http-equiv="expires" content="0" />
    <meta http-equiv="expires" content="Tue, 01 Jan 1980 1:00:00 GMT" />
    <meta http-equiv="pragma" content="no-cache" />

    <script src="//editor.unlayer.com/embed.js"></script>
    <style>
        #my-splash {
            position:absolute;
            display:flex;
            top:0;
            left:0;
            width:100%;
            height:100%;
            background-color:rgb(242 247 251);
            justify-content:center;
            justify-items:center;
            align-content:center;
            align-items:center;
        }
        #my-splash-inside{
            color: rgb(2 98 172);
            height:4rem;
            width:4rem;
        }
        #app[data-v-app] + #my-splash{
            display:none;
        }
    </style>
  <script type="module" crossorigin src="/assets/index-D6GrctaY.js"></script>
  <link rel="stylesheet" crossorigin href="/assets/index-BD3mGJ7q.css">
</head>
<body style="background-color:rgb(242 247 251)">
<noscript>
    <strong>We're sorry but LoopSpark doesn't work properly without JavaScript enabled.
            Please enable it to continue.</strong>
</noscript>
<div id="app"></div>
<div id="my-splash">
    <div id="my-splash-inside">
        <svg class="w-full h-full stroke-current"
             preserveAspectRatio="xMidYMid"
             style="display: block; shape-rendering: auto; background-position: initial; background-repeat: initial;"
             viewBox="0 0 100 100" xmlns="http://www.w3.org/2000/svg">
            <path d="M24.3 30C11.4 30 5 43.3 5 50s6.4 20 19.3 20c19.3 0 32.1-40 51.4-40 C88.6 30 95 43.3 95 50s-6.4 20-19.3 20C56.4 70 43.6 30 24.3 30z"
                  fill="none"
                  stroke-dasharray="42.76482137044271 42.76482137044271"
                  stroke-linecap="round"
                  stroke-width="8"
                  style="transform:scale(0.8);transform-origin:50px 50px">
                <animate attributeName="stroke-dashoffset"
                         dur="1s"
                         keyTimes="0;1"
                         repeatCount="indefinite"
                         values="0;256.58892822265625"></animate>
            </path>
        </svg>
    </div>

</div>

<!-- built files will be auto injected -->

</body>
</html>

Found 5 hours ago by HttpPlugin

Create report

Open service 96.240.15.242:80 · enterprise.review-195.rev.critel.li

2026-01-12 20:41

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Mon, 12 Jan 2026 20:42:27 GMT
Content-Length: 19
Connection: close


404 page not found

Found 5 hours ago by HttpPlugin

Create report

Open service 96.240.15.242:80 · review-195.rev.critel.li

2026-01-12 20:41

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Mon, 12 Jan 2026 20:42:27 GMT
Content-Length: 19
Connection: close


404 page not found

Found 5 hours ago by HttpPlugin

Create report

Open service 96.240.15.242:443 · review-195.rev.critel.li

2026-01-12 20:41

HTTP/1.1 200 OK
Date: Mon, 12 Jan 2026 20:42:27 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-Powered-By: PHP/8.3.29
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6IlBSNTVnQXpLTmNSOXpYWGpiS2FSZFE9PSIsInZhbHVlIjoidjFlQTlwNHNXRVJWUGdZY04vSGhMY3FjUFRGM2dvZ29IZWM2ZjVtVzQ0WlJtb2IraHV2YU1GVnVBOGdveEppekJlNlVmM0ZyUXIyZUk2SnJLb0RDUXpCSy9qanBndittZVlVWVROcURocTRpWVVNenJySk90V2pHS2pIbDFUdGQiLCJtYWMiOiI0NWI0ZTViYzFhNzQ4NmM4NDc1ODYzMGZjY2VjZjRhMTAwODQ4N2IwMTYzNTQzMjVjYzI4M2Q1ZmFlNWMxNWM4IiwidGFnIjoiIn0%3D; expires=Mon, 12 Jan 2026 22:42:27 GMT; Max-Age=7200; path=/; domain=.review-195.rev.critel.li; secure; samesite=lax
Set-Cookie: loopspark_review_session=eyJpdiI6IjYvRGdHTkdEN1Vld1ptSSttUjkvcXc9PSIsInZhbHVlIjoiMktrYlJYckl4Vjcwa1Y3WWZFMTE5SFVGNnpYTVViZExobC9uRkRxU0VKekFWWkhOYk1QZVdSZVBROFM3VkNCVnJtR0RVblR1WHc1QS9zRFZMejdQT1BJc3FFdXRHVi9hTDdZd2VhVDJoUlFkMUdLQXNOVVpKdzdKaVYvM01hOTgiLCJtYWMiOiI1YzZmMzM5MjJlMTdmMWQ2YzM3MGM4MTEyNDA1NzM3ZmM1ZTM4NjQ5M2E3ZmQwYzg0MjFjM2UzYzdhZDM5Mzk2IiwidGFnIjoiIn0%3D; expires=Mon, 12 Jan 2026 22:42:27 GMT; Max-Age=7200; path=/; domain=.review-195.rev.critel.li; secure; httponly; samesite=lax
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains

Page title: LoopSpark

<!doctype html>
<html lang="en" class="bg-white antialiased font-sans">
<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
    <meta http-equiv="x-ua-compatible" content="ie=edge">
    <title>LoopSpark</title>
    <meta name="apple-itunes-app" content="app-id=1491780495" />
    <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png?v=enter-refresh">
    <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png?v=enter-refresh">
    <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png?v=enter-refresh">
    <link rel="manifest" href="/site.webmanifest?v=enter-refresh">
    <link rel="mask-icon" href="/safari-pinned-tab.svg?v=enter-refresh" color="#0262ac">
    <link rel="shortcut icon" href="/favicon.ico?v=enter-refresh">
    <meta name="apple-mobile-web-app-title" content="LoopSpark">
    <meta name="application-name" content="LoopSpark">
    <meta name="msapplication-TileColor" content="#0262ac">
    <meta name="theme-color" content="#0262ac">

    <meta property="og:url" content="https://loopspark.com/" />
    <meta property="og:type" content="website" />
    <meta property="og:title" content="LoopSpark" />
    <meta property="og:description"
          content="#1 Sales CRM for Fitness Brands. Maximize ROI on your marketing & sales efforts in one gorgeous platform with everything you need to run your studio like clockwork." />
    <meta property="og:image" content="https://review-195.rev.critel.li/build/assets/twitter-card-C5buVUeC.png" />
    <meta name="description"
          content="#1 Sales CRM for Fitness Brands. Maximize ROI on your marketing & sales efforts in one gorgeous platform with everything you need to run your studio like clockwork.">

    <meta name="csrf-token" content="vp6fd5JjJOgubWEN0JLJYh1qqCrjaEXSBTokMXgU">
        <script>
		window.Spark = {"csrfToken":"vp6fd5JjJOgubWEN0JLJYh1qqCrjaEXSBTokMXgU","env":"review","roles":{"MEMBER":"member","OWNER":"owner","ADMIN":"admin","MANAGER":"manager"},"providers":[{"id":1,"name":"MindBody","is_mindbody":true,"is_clubready":false},{"id":3,"name":"Pike13","is_mindbody":false,"is_clubready":false},{"id":4,"name":"FitDegree","is_mindbody":false,"is_clubready":false},{"id":5,"name":"MarianaTek","is_mindbody":false,"is_clubready":false}],"stripeKey":"pk_test_placeholder","userId":null,"pusherKey":"review-app-key","appVersion":"enter-refresh","echo_host":"loopspark.test:6001","echo_host_port":6001,"echo_auth_url":"http:\/\/loopspark.test\/broadcasting\/auth","echo_host_path":"loopspark.test:6001","is_impersonating":false,"useReverb":false,"reverbKey":null,"reverbHost":null,"reverbPort":null,"reverbScheme":null};
    </script>

    <link rel="preload" as="style" href="https://review-195.rev.critel.li/build/assets/app-C2DG8lCY.css" /><link rel="modulepreload" href="https://review-195.rev.critel.li/build/assets/app-pUX0PJos.js" /><link rel="stylesheet" href="https://review-195.rev.critel.li/build/assets/app-C2DG8lCY.css" data-navigate-track="reload" /><script type="module" src="https://review-195.rev.critel.li/build/assets/app-pUX0PJos.js" data-navigate-track="reload"></script>
    <style>
        [v-cloak] {
            display:none;
        }
    </style>
</head>
<body data-sidebar-visible="true" class="">
<body class="" data-sidebar-visible="true">
<div class="" id="app" v-cloak>
    <div class="flex flex-col h-screen">
        <page-header></page-header>
        <div class="grow" v-cloak>
                <home-page></home-page>
        </div>
        <ls-footer></ls-footer>
    </div>
    <button id="feedback-form" class="fixed z-10 right-10 bottom-10">
        <div class="items-center rounded-full border border-transparent bg-indigo-600 p-3 text-white shadow-sm hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-indigo-500 focus:ring-offset-2">
            <svg xmlns="http://www.w3.org/2000/svg"
                 width="192"
                 height="192"
                 fill="currentColor"
                 viewBox="0 0 256 256"

Found 5 hours ago by HttpPlugin