LeakIX - Host 104.18.20.90

Host 104.18.20.90

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 104.18.20.90
Domain: cricnerds.com
Port: 443
URL: https://cricnerds.com

First seen 2025-06-01 00:23
Last seen 2025-11-26 16:58
Open for 178 days

Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652209833b84

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://oauth2:glpat-iL9Yj7SJYNsmw_r7do2s@gitlab.n10.xyz/northstarnetwork/sites-legacy/cricnerds-com.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[user]
	email = gitlab-sync@example.com
	name = GitLab Sync Script
[credential]
	helper = store
[safe]
	directory = /mnt/cephfs/cricnerds.com

Found on 2025-11-26 16:58

471 Bytes

Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652249bfc12e

[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://oauth2:glpat-qUDPdHxi1Z72QT59YMmL@gitlab.n10.xyz/northstarnetwork/sites-legacy/cricnerds-com.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[user]
	email = gitlab-sync@example.com
	name = GitLab Sync Script
[credential]
	helper = store
[safe]
	directory = /mnt/cephfs/cricnerds.com

Found on 2025-06-26 10:38

471 Bytes

Create report

Open service 104.18.20.90:80 · softwareforums.aveva.com

2026-01-26 14:05

HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Jan 2026 14:05:40 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Mon, 26 Jan 2026 15:05:40 GMT
Location: https://softwareforums.aveva.com/
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 9c4091081d4288c3-EWR
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 104.18.20.90:8443 · softwareforums.aveva.com

2026-01-26 14:05

HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Jan 2026 14:05:40 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Mon, 26 Jan 2026 15:05:40 GMT
Location: https://community.aveva.com
Strict-Transport-Security: max-age=15638400
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 9c4091076c6b0cea-SIN
alt-svc: h3=":8443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 104.18.20.90:443 · softwareforums.aveva.com

2026-01-26 14:05

HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Jan 2026 14:05:40 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Mon, 26 Jan 2026 15:05:40 GMT
Location: https://community.aveva.com
Strict-Transport-Security: max-age=15638400
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 9c4091073926923d-FRA
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 104.18.20.90:8443 · menshairstyleswag.com

2026-01-26 10:10
Found 2026-01-26 by HttpPlugin
Create report

Open service 104.18.20.90:443 · menshairstyleswag.com

2026-01-26 10:10

HTTP/1.1 200 OK
Date: Mon, 26 Jan 2026 10:10:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
CF-RAY: 9c3f38ab8939db0c-FRA
Strict-Transport-Security: max-age=63072000
Link: <https://menshairstyleswag.com/wp-json/>; rel="https://api.w.org/"
Link: <https://menshairstyleswag.com/wp-json/wp/v2/pages/2577>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://menshairstyleswag.com/>; rel=shortlink
Vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 5309
Last-Modified: Mon, 26 Jan 2026 08:42:06 GMT
Expires: Thu, 26 Feb 2026 10:10:35 GMT
Cache-Control: public, max-age=2678400
Server: cloudflare
alt-svc: h3=":443"; ma=86400

Found 2026-01-26 by HttpPlugin

Create report

Open service 104.18.20.90:80 · menshairstyleswag.com

2026-01-26 10:10

HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Jan 2026 10:10:35 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Mon, 26 Jan 2026 11:10:35 GMT
Location: https://menshairstyleswag.com/
Server: cloudflare
CF-RAY: 9c3f38ab7fb0972a-FRA
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 104.18.20.90:80 · aveva.com

2026-01-25 08:33

HTTP/1.1 301 Moved Permanently
Date: Sun, 25 Jan 2026 08:33:21 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Sun, 25 Jan 2026 09:33:21 GMT
Location: https://aveva.com/
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 9c366cdead8d1d50-BLR
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2026-01-25 by HttpPlugin

Create report

Open service 104.18.20.90:8443 · aveva.com

2026-01-25 08:33
Found 2026-01-25 by HttpPlugin
Create report

Open service 104.18.20.90:443 · aveva.com

2026-01-25 08:33

HTTP/1.1 301 Moved Permanently
Date: Sun, 25 Jan 2026 08:33:21 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: close
CF-RAY: 9c366cde78a82bb9-FRA
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15638400
location: https://www.aveva.com/
Cache-Control: max-age=70222
cf-cache-status: DYNAMIC
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://www.aveva.com/">here</a>.</p>
</body></html>

Found 2026-01-25 by HttpPlugin

Create report

Open service 104.18.20.90:443 · bb01-wgnc-wlm-web-ts2.jdadelivers.com

2026-01-24 20:29

HTTP/1.1 302 Found
Date: Sat, 24 Jan 2026 20:29:44 GMT
Content-Length: 0
Connection: close
location: https://bb01-wgnc-wlm-web-ts2.jdadelivers.com/portal
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, must-revalidate
set-cookie: __cf_bm=rLN6xVPP5iXLecj..Ybfx19Zz.E5AtdH3txs6YEshME-1769286583.7197015-1.0.1.1-orMsmkKE8Qq_2rXX7h1sc9CVNLHtWP1DLXau6AKC3hNOW_hQYyRpwTgtp9mfN9s1amk1YERZuwOREH4ZoZ7tzB6izd1RpiyEPwHS7YaozAV9DRuAFYQqonRba5_x9R6o; HttpOnly; Secure; Path=/; Domain=bb01-wgnc-wlm-web-ts2.jdadelivers.com; Expires=Sat, 24 Jan 2026 20:59:44 GMT
cf-cache-status: DYNAMIC
Server: cloudflare
CF-RAY: 9c3248dc3f0ace59-SIN

Found 2026-01-24 by HttpPlugin

Create report

Open service 104.18.20.90:8443 · bb01-wgnc-wlm-web-ts2.jdadelivers.com

2026-01-24 20:29

HTTP/1.1 403 Forbidden
Date: Sat, 24 Jan 2026 20:29:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
set-cookie: __cf_bm=bfloAJcIqQETzkP_AFJANiRVA_20HHWVr9Hrl4o8rpo-1769286583.408421-1.0.1.1-HNA5Irq20gpLKjJrHvl6FexCKr4JeO_RK06KXGOG6GwasAIhOFCi6RU6atC6Anod_dcN3grCsZ6S7DsE7foD3wyFC_NaNfEnhc1xxZj.yvbgd75oSKASy_rOwWcxWr8F; HttpOnly; Secure; Path=/; Domain=bb01-wgnc-wlm-web-ts2.jdadelivers.com; Expires=Sat, 24 Jan 2026 20:59:43 GMT
Server: cloudflare
CF-RAY: 9c3248da4e56590f-FRA

Page title: Attention Required! | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>    <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>    <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]-->
<head>
<title>Attention Required! | Cloudflare</title>
<meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

</head>
<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable cookies.</div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-wrapper cf-header cf-error-overview">
        <h1 data-translate="block_headline">Sorry, you have been blocked</h1>
        <h2 class="cf-subheadline"><span data-translate="unable_to_access">You are unable to access</span> bb01-wgnc-wlm-web-ts2.jdadelivers.com</h2>
      </div><!-- /.header -->

      <div class="cf-section cf-highlight">
        <div class="cf-wrapper">
          <div class="cf-screenshot-container cf-screenshot-full">
            
              <span class="cf-no-screenshot error"></span>
            
          </div>
        </div>
      </div><!-- /.captcha-container -->

      <div class="cf-section cf-wrapper">
        <div class="cf-columns two">
          <div class="cf-column">
            <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2>

            <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.</p>
          </div>

          <div class="cf-column">
            <h2 data-translate="blocked_resolve_headline">What can I do to resolve this?</h2>

            <p data-translate="blocked_resolve_detail">You can email the site owner to let them know you were blocked. Please include what you were doing when this page came up and the Cloudflare Ray ID found at the bottom of this page.</p>
          </div>
        </div>
      </div><!-- /.section -->

      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9c3248da4e56590f</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">64.226.65.160</span>
        <span class="cf-footer-separator sm:hidden">&bull;</span>
      </span>
      <span class="cf-footer-item sm:block sm:mb-1"><span>Performance &amp; security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">Cloudflare</a></span>
      
    </p>
    <script>(function(){function d(){var b=a.getElementById("cf-footer-item-ip"),c=a.getElementById("cf-

Found 2026-01-24 by HttpPlugin

Create report

Open service 104.18.20.90:80 · bb01-wgnc-wlm-web-ts2.jdadelivers.com

2026-01-24 20:29

HTTP/1.1 403 Forbidden
Date: Sat, 24 Jan 2026 20:29:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
set-cookie: __cf_bm=qJ9i3XR2tVwYbni3JejoCttRN6sVVlQJGXIQsepIY5k-1769286583.3672247-1.0.1.1-P7ke9bhTtm4RoZZncIOGkiVrglGURyJ3b9AYBHYbG_CtWmfGDqc3SdOxA9Oej5ZOa8mxB3e.rcUaiakv3ji2YPCcsfl4s9tMEEZGw8F_mVr63I6YWrd5OsCZFFD6ofg4; HttpOnly; Path=/; Domain=bb01-wgnc-wlm-web-ts2.jdadelivers.com; Expires=Sat, 24 Jan 2026 20:59:43 GMT
Server: cloudflare
CF-RAY: 9c3248da0e1966be-AMS

Page title: Attention Required! | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>    <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>    <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]-->
<head>
<title>Attention Required! | Cloudflare</title>
<meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

</head>
<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable cookies.</div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-wrapper cf-header cf-error-overview">
        <h1 data-translate="block_headline">Sorry, you have been blocked</h1>
        <h2 class="cf-subheadline"><span data-translate="unable_to_access">You are unable to access</span> bb01-wgnc-wlm-web-ts2.jdadelivers.com</h2>
      </div><!-- /.header -->

      <div class="cf-section cf-highlight">
        <div class="cf-wrapper">
          <div class="cf-screenshot-container cf-screenshot-full">
            
              <span class="cf-no-screenshot error"></span>
            
          </div>
        </div>
      </div><!-- /.captcha-container -->

      <div class="cf-section cf-wrapper">
        <div class="cf-columns two">
          <div class="cf-column">
            <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2>

            <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.</p>
          </div>

          <div class="cf-column">
            <h2 data-translate="blocked_resolve_headline">What can I do to resolve this?</h2>

            <p data-translate="blocked_resolve_detail">You can email the site owner to let them know you were blocked. Please include what you were doing when this page came up and the Cloudflare Ray ID found at the bottom of this page.</p>
          </div>
        </div>
      </div><!-- /.section -->

      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9c3248da0e1966be</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">206.189.2.13</span>
        <span class="cf-footer-separator sm:hidden">&bull;</span>
      </span>
      <span class="cf-footer-item sm:block sm:mb-1"><span>Performance &amp; security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">Cloudflare</a></span>
      
    </p>
    <script>(function(){function d(){var b=a.getElementById("cf-footer-item-ip"),c=a.getElementById("cf-f

Found 2026-01-24 by HttpPlugin