Domain admin.dagym-manager.com
United States
Software information
Vercel
tcp/443
-
GraphQL introspection is enabled.
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
First seen 2025-10-22 18:54
Last seen 2025-11-30 13:21
Open for 38 days-
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d620845ec960159a6bd79b10487e5cc45063355cb9GraphQL introspection enabled at /api/graphql Types: 882 (by kind: ENUM: 147, INPUT_OBJECT: 251, INTERFACE: 7, OBJECT: 456, SCALAR: 18, UNION: 3) Operations: - Query: Query | fields: customer, customerAlertSetting, customerGyms, customerNotice, customerNotices - Mutation: Mutation | fields: loginCustomer, logoutCustomer, sendAuthorityCodeForCustomer, verifyLoginAtChangeDevice, verifyUserHadCertificatedByPhone - Subscription: Subscription | fields: alertFromKiosk, attendanceCard, detailedEntranceEvent, videoCallNotificationDismiss Directives: constraint, encryptedNumberValidation, encryptedStringValidation, include, isAdminAuthenticated, isAuthenticated, isMemberAuthenticated, login, needAuth, skip (total: 12)
Found on 2025-11-30 13:211.3 MBytes -
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d61ecd876ab73f80daf85c44057bc45bffd5fc37c6GraphQL introspection enabled at /api/graphql Types: 884 (by kind: ENUM: 150, INPUT_OBJECT: 251, INTERFACE: 7, OBJECT: 455, SCALAR: 18, UNION: 3) Operations: - Query: Query | fields: customer, customerAlertSetting, customerGyms, customerNotice, customerNotices - Mutation: Mutation | fields: loginCustomer, logoutCustomer, sendAuthorityCodeForCustomer, verifyLoginAtChangeDevice, verifyUserHadCertificatedByPhone - Subscription: Subscription | fields: alertFromKiosk, attendanceCard, detailedEntranceEvent, videoCallNotificationDismiss Directives: constraint, encryptedNumberValidation, encryptedStringValidation, include, isAdminAuthenticated, isAuthenticated, isMemberAuthenticated, login, needAuth, skip (total: 12)
Found on 2025-11-16 10:351.3 MBytes -
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6GraphQL introspection enabled at /api/graphql
Found on 2025-11-14 11:34 -
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6ef3348588eb875bca6777ebb1ec92b49f0b8e320GraphQL introspection enabled at /api/graphql Types: 879 (by kind: ENUM: 149, INPUT_OBJECT: 251, INTERFACE: 7, OBJECT: 451, SCALAR: 18, UNION: 3) Operations: - Query: Query | fields: customer, customerAlertSetting, customerGyms, customerNotice, customerNotices - Mutation: Mutation | fields: loginCustomer, logoutCustomer, sendAuthorityCodeForCustomer, verifyLoginAtChangeDevice, verifyUserHadCertificatedByPhone - Subscription: Subscription | fields: alertFromKiosk, attendanceCard, detailedEntranceEvent Directives: constraint, encryptedNumberValidation, encryptedStringValidation, include, isAdminAuthenticated, isAuthenticated, isMemberAuthenticated, login, needAuth, skip (total: 12)
Found on 2025-11-10 11:071.3 MBytes -
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d608b5ec4c17061b10a066ebc766bf76a56cedded4GraphQL introspection enabled at /api/graphql Types: 838 (by kind: ENUM: 141, INPUT_OBJECT: 243, INTERFACE: 7, OBJECT: 426, SCALAR: 18, UNION: 3) Operations: - Query: Query | fields: customer, customerAlertSetting, customerGyms, customerNotice, customerNotices - Mutation: Mutation | fields: loginCustomer, logoutCustomer, sendAuthorityCodeForCustomer, verifyLoginAtChangeDevice, verifyUserHadCertificatedByPhone - Subscription: Subscription | fields: alertFromKiosk, attendanceCard, detailedEntranceEvent Directives: constraint, encryptedNumberValidation, encryptedStringValidation, include, isAdminAuthenticated, isAuthenticated, isMemberAuthenticated, login, needAuth, skip (total: 12)
Found on 2025-11-08 22:371.2 MBytes
-
-
Open service 66.33.60.34:443 · admin.dagym-manager.com
2026-01-08 23:29
HTTP/1.1 308 Permanent Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Thu, 08 Jan 2026 23:29:31 GMT Location: /account/login Refresh: 0;url=/account/login Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: iad1::tl7r7-1767914971221-da41ecc68a8d Connection: close Transfer-Encoding: chunked Redirecting...
Found 2026-01-08 by HttpPluginCreate report
-
Open service 66.33.60.34:443 · admin.dagym-manager.com
2026-01-01 23:27
HTTP/1.1 308 Permanent Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Thu, 01 Jan 2026 23:27:40 GMT Location: /account/login Refresh: 0;url=/account/login Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: bom1::glqwh-1767310060020-a6a589ff6178 Connection: close Transfer-Encoding: chunked Redirecting...
Found 2026-01-01 by HttpPluginCreate report
-
Open service 66.33.60.34:443 · admin.dagym-manager.com
2025-12-30 07:04
HTTP/1.1 308 Permanent Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Tue, 30 Dec 2025 07:04:27 GMT Location: /account/login Refresh: 0;url=/account/login Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::772zr-1767078267338-a1d4ceef1d6f Connection: close Transfer-Encoding: chunked Redirecting...
Found 2025-12-30 by HttpPluginCreate report
-
Open service 66.33.60.34:443 · admin.dagym-manager.com
2025-12-22 11:45
HTTP/1.1 308 Permanent Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Mon, 22 Dec 2025 11:45:01 GMT Location: /account/login Refresh: 0;url=/account/login Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::hxmqp-1766403901609-790001db631d Connection: close Transfer-Encoding: chunked Redirecting...
Found 2025-12-22 by HttpPluginCreate report
-
Open service 66.33.60.34:443 · admin.dagym-manager.com
2025-12-20 12:15
HTTP/1.1 308 Permanent Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Sat, 20 Dec 2025 12:15:43 GMT Location: /account/login Refresh: 0;url=/account/login Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::qkj4d-1766232943006-fe50fe84369c Connection: close Transfer-Encoding: chunked Redirecting...
Found 2025-12-20 by HttpPluginCreate report