Domain api-dev.ardaudiothek.de
Germany
-
GraphQL introspection is enabled.
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
First seen 2025-10-28 14:59
Last seen 2026-02-09 19:38
Open for 104 days-
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e7813880ec808444354e4c122ab3ecfc671eb9bfGraphQL introspection enabled at /graphql Types: 355 (by kind: ENUM: 45, INPUT_OBJECT: 135, INTERFACE: 19, OBJECT: 142, SCALAR: 14) Operations: - Query: Query | fields: allEndUsers, allPlaylists, bookmark, bookmarkList, endUser - Mutation: Mutation | fields: deleteHistoryEntryByItem, mergeUserData, syncUserData, updateBookmark, updateProgramSetSubscriptionByProgramSet Directives: cacheControl, deprecated, external, include, key, oneOf, sameAs, skip, specifiedBy (total: 9)
Found on 2026-02-09 19:38671.1 kBytes -
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e7813880ec808444354e4c122ab3ecfc75d5dd1fGraphQL introspection enabled at /graphql Types: 355 (by kind: ENUM: 45, INPUT_OBJECT: 135, INTERFACE: 19, OBJECT: 142, SCALAR: 14) Operations: - Query: Query | fields: allEndUsers, allPlaylists, bookmark, bookmarkList, endUser - Mutation: Mutation | fields: deleteHistoryEntryByItem, mergeUserData, syncUserData, updateBookmark, updateProgramSetSubscriptionByProgramSet Directives: cacheControl, deprecated, external, include, key, sameAs, skip, specifiedBy (total: 8)
Found on 2025-12-01 00:23670.8 kBytes
-
-
Open service 23.36.163.233:443 · api-dev.ardaudiothek.de
2026-01-23 14:22
HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=utf-8 Content-Length: 27 Location: /docs X-Forwarded-Host: api-dev.ardaudiothek.de Date: Fri, 23 Jan 2026 14:22:50 GMT Connection: close Access-Control-Allow-Headers: Authorization, X-Authorization, x-pipeuserid, Content-Type, DPR, Origin, Referer, User-Agent, Viewport-Width, Accept, X-ARD-User-Agent, X-Apollo-Tracing, X-Apollo-Operation-Name Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Origin: https://dev.ardaudiothek.de Found. Redirecting to /docs
Found 2026-01-23 by HttpPluginCreate report
-
Open service 23.36.163.233:443 · api-dev.ardaudiothek.de
2026-01-09 21:53
HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=utf-8 Content-Length: 27 Location: /docs X-Forwarded-Host: api-dev.ardaudiothek.de Date: Fri, 09 Jan 2026 21:53:27 GMT Connection: close Access-Control-Allow-Headers: Authorization, X-Authorization, x-pipeuserid, Content-Type, DPR, Origin, Referer, User-Agent, Viewport-Width, Accept, X-ARD-User-Agent, X-Apollo-Tracing, X-Apollo-Operation-Name Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Origin: https://dev.ardaudiothek.de Found. Redirecting to /docs
Found 2026-01-09 by HttpPluginCreate report
-
Open service 23.36.163.233:443 · api-dev.ardaudiothek.de
2026-01-02 16:32
HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=utf-8 Content-Length: 27 Location: /docs X-Forwarded-Host: api-dev.ardaudiothek.de Date: Fri, 02 Jan 2026 16:32:56 GMT Connection: close Access-Control-Allow-Headers: Authorization, X-Authorization, x-pipeuserid, Content-Type, DPR, Origin, Referer, User-Agent, Viewport-Width, Accept, X-ARD-User-Agent, X-Apollo-Tracing, X-Apollo-Operation-Name Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Origin: https://dev.ardaudiothek.de Found. Redirecting to /docs
Found 2026-01-02 by HttpPluginCreate report
-
Open service 23.36.163.233:443 · api-dev.ardaudiothek.de
2025-12-23 04:33
HTTP/1.1 302 Moved Temporarily Content-Type: text/plain; charset=utf-8 Content-Length: 27 Location: /docs X-Forwarded-Host: api-dev.ardaudiothek.de Date: Tue, 23 Dec 2025 04:33:47 GMT Connection: close Access-Control-Allow-Headers: Authorization, X-Authorization, x-pipeuserid, Content-Type, DPR, Origin, Referer, User-Agent, Viewport-Width, Accept, X-ARD-User-Agent, X-Apollo-Tracing, X-Apollo-Operation-Name Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Origin: https://dev.ardaudiothek.de Found. Redirecting to /docs
Found 2025-12-23 by HttpPluginCreate report