Caddy
tcp/80
nginx 1.22.1
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652214b7a655
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:glcbt-64_AsKs1xvRuw-r3r61MfoE@gitlab.droidnet.de/droid.ac15/appcreator-cms.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65223d8dbf18
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:glcbt-64_zmRXrAAE3hrsQQutyy-4@gitlab.droidnet.de/droid.ac15/appcreator-cms.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884029ffc42c188889f90
[init] defaultBranch = none [fetch] recurseSubmodules = false [transfer] bundleURI = true [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:glcbt-64_ug5xDHxADzzfvJWJHRyC@gitlab.droidnet.de/droid.ac15/appcreator-cms.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884029ffc42c108cbc2eb
[init] defaultBranch = none [fetch] recurseSubmodules = false [transfer] bundleURI = true [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:glcbt-64_zo8_4PHjzhtPX3jsU9kY@gitlab.droidnet.de/droid.ac15/appcreator-cms.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884029ffc42c1f5f77356
[init] defaultBranch = none [fetch] recurseSubmodules = false [transfer] bundleURI = true [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:glcbt-64_1dGwqsNE-huAjXpXt_2c@gitlab.droidnet.de/droid.ac15/appcreator-cms.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Open service 49.12.43.166:443 · zuliefermesse.appcms-lm.droidhosting.de
2026-01-10 21:14
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Jan 2026 21:14:56 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=042acefac9a0588315cd826684c71556; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · zuliefermesse.appcms-lm.droidhosting.de
2026-01-09 21:41
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Fri, 09 Jan 2026 21:41:57 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=34824bea15aabb2bb8a6060a805da397; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · zuliefermesse.appcms-lm.droidhosting.de
2026-01-08 21:26
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Thu, 08 Jan 2026 21:26:53 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=37dfd1cd6f1f3f2ddd7c5e23dec93074; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · zuliefermesse.appcms-lm.droidhosting.de
2026-01-07 21:16
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Wed, 07 Jan 2026 21:16:17 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=4dd5c10ee5d8a6749602751163caaac5; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · zuliefermesse.appcms-lm.droidhosting.de
2026-01-06 21:25
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Tue, 06 Jan 2026 21:25:35 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=4601638c02912a5c99b626d4322e35e5; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · zuliefermesse.appcms-lm.droidhosting.de
2026-01-03 21:28
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sat, 03 Jan 2026 21:28:41 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=48d356f732090dcc9557dd5157d89991; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · zuliefermesse.appcms-lm.droidhosting.de
2026-01-02 21:24
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Fri, 02 Jan 2026 21:24:37 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=6726dbaffebab11d4111c96534997a13; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · zuliefermesse.appcms-lm.droidhosting.de
2026-01-01 21:21
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Thu, 01 Jan 2026 21:21:14 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=e0476c782654fd97f3a4a94eff6caf82; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · zuliefermesse.appcms-lm.droidhosting.de
2025-12-31 21:30
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Wed, 31 Dec 2025 21:30:40 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=9abf1743e42a700eabb4147ee5b48098; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · zuliefermesse.appcms-lm.droidhosting.de
2025-12-30 21:39
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Tue, 30 Dec 2025 21:39:22 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=dc07f2d86c3d341c0ece24d1e13d0db4; path=/ Connection: close Transfer-Encoding: chunked
Open service 2a01:4f8:c013:acbf::1:443 · zuliefermesse.appcms-lm.droidhosting.de
2025-12-30 16:08
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Tue, 30 Dec 2025 16:08:49 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=15466fe265ae04f64ee3740005dd256f; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · zuliefermesse.appcms-lm.droidhosting.de
2025-12-30 16:08
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Tue, 30 Dec 2025 16:08:49 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=05347a2467550f7b2c8435b61398cfce; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:80 · zuliefermesse.appcms-lm.droidhosting.de
2025-12-30 16:08
HTTP/1.1 308 Permanent Redirect Connection: close Location: https://zuliefermesse.appcms-lm.droidhosting.de/ Server: Caddy Date: Tue, 30 Dec 2025 16:08:49 GMT Content-Length: 0
Open service 2a01:4f8:c013:acbf::1:80 · zuliefermesse.appcms-lm.droidhosting.de
2025-12-30 16:08
HTTP/1.1 308 Permanent Redirect Connection: close Location: https://zuliefermesse.appcms-lm.droidhosting.de/ Server: Caddy Date: Tue, 30 Dec 2025 16:08:49 GMT Content-Length: 0
Open service 49.12.43.166:443 · zuliefermesse.appcms-lm.droidhosting.de
2025-12-22 20:02
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Mon, 22 Dec 2025 20:02:09 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=f2f207154b55b9ff9b85412e079cd325; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · zuliefermesse.appcms-lm.droidhosting.de
2025-12-21 04:18
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Sun, 21 Dec 2025 04:18:28 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=2781ac182809b4ee4c857048ca2b7db5; path=/ Connection: close Transfer-Encoding: chunked
Open service 49.12.43.166:443 · zuliefermesse.appcms-lm.droidhosting.de
2025-12-19 04:32
HTTP/1.1 302 Found Alt-Svc: h3=":443"; ma=2592000 Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Dec 2025 04:32:15 GMT Expires: Thu, 19 Nov 1981 08:52:00 GMT Location: /auth/login?to=/ Pragma: no-cache Server: Caddy Server: nginx/1.22.1 Set-Cookie: 40d1b2d83998fabacb726e5bc3d22129=7e73dffe51d48a94c6cf4241a093ecb6; path=/ Connection: close Transfer-Encoding: chunked