Domain 1012.nickelpayments.com
United States
Software information
Vercel
tcp/443
-
GraphQL introspection is enabled.
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
First seen 2025-11-13 19:41
Last seen 2025-11-30 22:47
Open for 17 days-
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6a65d8aef520006bd45a2cf612582c275257f7da1GraphQL introspection enabled at /api/graphql Types: 379 (by kind: ENUM: 26, INPUT_OBJECT: 27, OBJECT: 319, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customers, organization, user, webhooks - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Found on 2025-11-30 22:47454.1 kBytes -
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6a4e5c25739f61d8502244f49aa61522d668d8159GraphQL introspection enabled at /api/graphql Types: 378 (by kind: ENUM: 25, INPUT_OBJECT: 27, OBJECT: 319, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customers, organization, user, webhooks - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Found on 2025-11-26 20:06452.2 kBytes -
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6ad480f8f4b16889de83752814a4174951f0da9c1GraphQL introspection enabled at /api/graphql Types: 372 (by kind: ENUM: 23, INPUT_OBJECT: 27, OBJECT: 315, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customers, organization, user, webhooks - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Found on 2025-11-23 02:26448.0 kBytes -
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d67d4ec50e29df55fe63590576983a944078e27028GraphQL introspection enabled at /api/graphql Types: 369 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 313, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Found on 2025-11-21 08:10446.2 kBytes -
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d67d4ec50e29df55fe63590576983a9440eeab39f6GraphQL introspection enabled at /api/graphql Types: 369 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 313, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, skip, specifiedBy (total: 4) Readable stores: 0
Found on 2025-11-18 06:38445.8 kBytes -
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d616071e5e9c83ccce2456d4a65123c970218a77a6GraphQL introspection enabled at /api/graphql Types: 368 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 312, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, skip, specifiedBy (total: 4) Readable stores: 0
Found on 2025-11-13 19:41445.1 kBytes
-
-
Open service 66.33.60.193:443 · 1012.nickelpayments.com
2026-01-08 22:33
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Thu, 08 Jan 2026 22:33:31 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: sfo1::497hg-1767911611604-939f612136f1 Connection: close Transfer-Encoding: chunked Redirecting...
Found 2026-01-08 by HttpPluginCreate report
-
Open service 66.33.60.193:443 · 1012.nickelpayments.com
2026-01-02 00:41
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Fri, 02 Jan 2026 00:41:07 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: sfo1::n7l8m-1767314467557-ee40c2cb7122 Connection: close Transfer-Encoding: chunked Redirecting...
Found 2026-01-02 by HttpPluginCreate report
-
Open service 66.33.60.193:443 · 1012.nickelpayments.com
2025-12-30 08:19
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Tue, 30 Dec 2025 08:19:04 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: sfo1::lj9q4-1767082743939-12fe3b1fc71a Connection: close Transfer-Encoding: chunked Redirecting...
Found 2025-12-30 by HttpPluginCreate report
-
Open service 66.33.60.193:443 · 1012.nickelpayments.com
2025-12-22 11:37
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Mon, 22 Dec 2025 11:37:50 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: iad1::wt656-1766403470723-876b42475a7f Connection: close Transfer-Encoding: chunked Redirecting...
Found 2025-12-22 by HttpPluginCreate report
-
Open service 66.33.60.193:443 · 1012.nickelpayments.com
2025-12-20 12:07
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Sat, 20 Dec 2025 12:07:05 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::rj6m7-1766232425779-6679988b14e2 Connection: close Transfer-Encoding: chunked Redirecting...
Found 2025-12-20 by HttpPluginCreate report