LeakIX - Host api-staging.riskiiit.com

Domain api-staging.riskiiit.com

CLOUDFLARENET

Software information

cloudflare

tcp/443

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 104.26.3.175
Domain: api-staging.riskiiit.com
Port: 443
URL: https://api-staging.riskiiit.com

First seen 2025-10-17 03:53
Last seen 2026-02-09 23:26
Open for 115 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa335e2d6ebc7b4a0a9b4f4dd979c6ac2d17ddf97fb

GraphQL introspection enabled at /graphql
Types: 99 (by kind: ENUM: 5, INPUT_OBJECT: 19, INTERFACE: 8, OBJECT: 62, SCALAR: 5)
Operations:
- Query: Query | fields: balance, balances, campaignReferralCode, ping, user
- Mutation: Mutation | fields: launchFreePlay, launchGame, requestWithdrawal, spinRoulette, startBlackjack
- Subscription: Subscription | fields: activeLobby, balances, liveWins
Directives: authorized, deprecated, include, oneOf, skip, specifiedBy (total: 6)

Found on 2026-02-09 23:26

121.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33e1640b17936c9b3e66695f924fa70c3e33f4c05

GraphQL introspection enabled at /graphql
Types: 94 (by kind: ENUM: 5, INPUT_OBJECT: 17, INTERFACE: 8, OBJECT: 60, SCALAR: 4)
Operations:
- Query: Query | fields: balance, balances, campaignReferralCode, ping, user
- Mutation: Mutation | fields: launchFreePlay, launchGame, requestWithdrawal, spinRoulette, startBlackjack
- Subscription: Subscription | fields: activeLobby, balances, liveWins
Directives: authorized, deprecated, include, oneOf, skip, specifiedBy (total: 6)

Found on 2026-01-23 10:27

116.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa34fbdc8b17b26a1b349719616a6ddb558f671a2e0

GraphQL introspection enabled at /graphql
Types: 76 (by kind: ENUM: 4, INPUT_OBJECT: 13, INTERFACE: 7, OBJECT: 48, SCALAR: 4)
Operations:
- Query: Query | fields: balance, balances, games, ping, user
- Mutation: Mutation | fields: launchFreePlay, launchGame, requestWithdrawal, spinRoulette, startBlackjack
- Subscription: Subscription | fields: balances, liveWins
Directives: authorized, deprecated, include, oneOf, skip, specifiedBy (total: 6)

Found on 2025-12-27 03:20

88.9 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f322c887d5552335ff5f91684aa4cafa5e5314ca

GraphQL introspection enabled at /graphql
Types: 81 (by kind: ENUM: 7, INPUT_OBJECT: 13, INTERFACE: 7, OBJECT: 50, SCALAR: 4)
Operations:
- Query: Query | fields: balance, balances, games, ping, user
- Mutation: Mutation | fields: launchFreePlay, launchGame, requestWithdrawal, spinRoulette, startBlackjack
- Subscription: Subscription | fields: balances, liveWins
Directives: authorized, deprecated, include, oneOf, skip, specifiedBy (total: 6)

Found on 2025-12-16 17:01

92.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa32539a32596e215270e1d922aa004166db982834b

GraphQL introspection enabled at /graphql
Types: 71 (by kind: ENUM: 7, INPUT_OBJECT: 11, INTERFACE: 5, OBJECT: 44, SCALAR: 4)
Operations:
- Query: Query | fields: balance, balances, games, ping, user
- Mutation: Mutation | fields: blackjackAction, launchGame, requestWithdrawal, spinRoulette, startBlackjack
- Subscription: Subscription | fields: balances, liveWins
Directives: authorized, deprecated, include, oneOf, skip, specifiedBy (total: 6)

Found on 2025-12-01 13:18

84.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa383adf35f24e24e6db6edac60134619fbc0a9ce89

GraphQL introspection enabled at /graphql
Types: 72 (by kind: ENUM: 7, INPUT_OBJECT: 11, INTERFACE: 5, OBJECT: 45, SCALAR: 4)
Operations:
- Query: Query | fields: balance, balances, games, ping, user
- Mutation: Mutation | fields: blackjackAction, launchGame, requestWithdrawal, spinRoulette, startBlackjack
- Subscription: Subscription | fields: balances, liveWins
Directives: authorized, deprecated, include, oneOf, skip, specifiedBy (total: 6)

Found on 2025-11-27 10:07

85.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ca81f45fb96ff96d7a29cd60bee5a4fb480cbf89

GraphQL introspection enabled at /graphql
Types: 70 (by kind: ENUM: 7, INPUT_OBJECT: 11, INTERFACE: 3, OBJECT: 45, SCALAR: 4)
Operations:
- Query: Query | fields: balance, balances, games, ping, user
- Mutation: Mutation | fields: blackjackAction, launchGame, requestWithdrawal, spinRoulette, startBlackjack
- Subscription: Subscription | fields: balances, liveWins
Directives: authorized, deprecated, include, oneOf, skip, specifiedBy (total: 6)

Found on 2025-11-22 23:28

81.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ff8483085a87112ca57e8a7778939e7e4117f2ee

GraphQL introspection enabled at /graphql
Types: 66 (by kind: ENUM: 6, INPUT_OBJECT: 10, INTERFACE: 3, OBJECT: 43, SCALAR: 4)
Operations:
- Query: Query | fields: balance, balances, games, ping, user
- Mutation: Mutation | fields: blackjackAction, launchGame, requestWithdrawal, spinRoulette, startBlackjack
- Subscription: Subscription | fields: balances, liveWins
Directives: authorized, deprecated, include, oneOf, skip, specifiedBy (total: 6)

Found on 2025-11-21 11:31

77.3 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa394e005e9031a26cb8937534ebd8210e9afd70074

GraphQL introspection enabled at /graphql
Types: 53 (by kind: ENUM: 5, INPUT_OBJECT: 8, INTERFACE: 2, OBJECT: 34, SCALAR: 4)
Operations:
- Query: Query | fields: balance, balances, games, ping, user
- Mutation: Mutation | fields: blackjackAction, launchGame, requestWithdrawal, spinRoulette, startBlackjack
- Subscription: Subscription | fields: liveWins
Directives: authorized, deprecated, include, oneOf, skip, specifiedBy (total: 6)

Found on 2025-11-16 21:07

60.3 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3289a4c382870f1dc461052c75287624effe1c144

GraphQL introspection enabled at /graphql
Types: 49 (by kind: ENUM: 5, INPUT_OBJECT: 7, INTERFACE: 2, OBJECT: 31, SCALAR: 4)
Operations:
- Query: Query | fields: balance, balances, games, ping, user
- Mutation: Mutation | fields: blackjackAction, launchGame, requestWithdrawal, spinRoulette, startBlackjack
Directives: authorized, deprecated, include, oneOf, skip, specifiedBy (total: 6)

Found on 2025-11-12 22:11

57.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa361b61026a88017569e033571215f2518b80fda82

GraphQL introspection enabled at /graphql
Types: 38 (by kind: ENUM: 2, INPUT_OBJECT: 6, INTERFACE: 2, OBJECT: 24, SCALAR: 4)
Operations:
- Query: Query | fields: balance, balances, games, ping, user
- Mutation: Mutation | fields: blackjackAction, launchGame, requestWithdrawal, spinRoulette, startBlackjack
Directives: authorized, deprecated, include, oneOf, skip, specifiedBy (total: 6)

Found on 2025-11-11 00:03

49.3 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c78a092e06e763dee9c1d6d9d3b9ee90894b695a

GraphQL introspection enabled at /graphql
Types: 34 (by kind: ENUM: 2, INPUT_OBJECT: 6, INTERFACE: 2, OBJECT: 20, SCALAR: 4)
Operations:
- Query: Query | fields: balance, balances, games, ping, user
- Mutation: Mutation | fields: blackjackAction, launchGame, requestWithdrawal, spinRoulette, startBlackjack
Directives: authorized, deprecated, include, oneOf, skip, specifiedBy (total: 6)

Found on 2025-11-07 11:43

46.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa378f034bfa7ccb20d884d6b00e7963d5bdd7ad24a

GraphQL introspection enabled at /graphql
Types: 32 (by kind: ENUM: 2, INPUT_OBJECT: 6, OBJECT: 20, SCALAR: 4)
Operations:
- Query: Query | fields: balance, balances, games, ping, user
- Mutation: Mutation | fields: blackjackAction, launchGame, requestWithdrawal, spinRoulette, startBlackjack
Directives: adminAuthorized, authorized, deprecated, include, oneOf, skip, specifiedBy (total: 7)

Found on 2025-11-03 20:38

44.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e822e69adc442d0a56fb9ae5df94b314e5cca56f

GraphQL introspection enabled at /graphql
Types: 30 (by kind: ENUM: 2, INPUT_OBJECT: 5, OBJECT: 19, SCALAR: 4)
Operations:
- Query: Query | fields: balance, balances, games, ping, user
- Mutation: Mutation | fields: blackjackAction, launchGame, requestWithdrawal, spinRoulette, startBlackjack
Directives: adminAuthorized, authorized, deprecated, include, oneOf, skip, specifiedBy (total: 7)

Found on 2025-11-02 15:20

40.9 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa34b9ce8816967eb03af410206126799919a6f8da0

GraphQL introspection enabled at /graphql
Types: 27 (by kind: ENUM: 2, INPUT_OBJECT: 4, OBJECT: 17, SCALAR: 4)
Operations:
- Query: Query | fields: balance, balances, games, ping, user
- Mutation: Mutation | fields: blackjackAction, launchGame, requestWithdrawal, spinRoulette, startBlackjack
Directives: adminAuthorized, authorized, deprecated, include, oneOf, skip, specifiedBy (total: 7)

Readable stores: 0

Found on 2025-10-29 03:39

36.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3324325eded7bd1cf37dab952cbb5607fb0ea3b4a

GraphQL introspection enabled at /graphql
Types: 21 (by kind: ENUM: 2, INPUT_OBJECT: 1, OBJECT: 14, SCALAR: 4)
Operations:
- Query: Query | fields: balance, balances, games, ping, user
- Mutation: Mutation | fields: launchGame, requestWithdrawal, spinRoulette
Directives: adminAuthorized, authorized, deprecated, include, oneOf, skip, specifiedBy (total: 7)

Readable stores: 0

Found on 2025-10-27 05:42

29.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3147de65dd9ce5d3f218ed422202824493f75e658

GraphQL introspection enabled at /graphql
Types: 20 (by kind: ENUM: 2, INPUT_OBJECT: 1, OBJECT: 13, SCALAR: 4)
Operations:
- Query: Query | fields: balance, balances, games, ping, user
- Mutation: Mutation | fields: launchGame, launchOriginalGame, requestWithdrawal, spinRoulette
Directives: adminAuthorized, authorized, deprecated, include, oneOf, skip, specifiedBy (total: 7)

Readable stores: 0

Found on 2025-10-23 16:57

28.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa339bb9b2af6ad9b1ad7baadd5633d3bdad4cc9b05

GraphQL introspection enabled at /graphql
Types: 17 (by kind: ENUM: 2, OBJECT: 12, SCALAR: 3)
Operations:
- Query: Query | fields: balance, balances, games, ping, user
- Mutation: Mutation | fields: launchGame
Directives: adminAuthorized, authorized, deprecated, include, oneOf, skip, specifiedBy (total: 7)

Readable stores: 0

Found on 2025-10-21 16:06

24.3 kBytes

Create report

Open service 104.26.3.175:443 · api-staging.riskiiit.com

2026-01-23 10:27

HTTP/1.1 404 Not Found
Date: Fri, 23 Jan 2026 10:27:53 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
access-control-allow-credentials: true
content-security-policy: default-src 'none'
nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
report-to: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ffKpOp8wjrx6AizZE6anaWXXtRPiG4HgyBBVT6nY8N4%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1769164073"}],"max_age":3600}
reporting-endpoints: heroku-nel="https://nel.heroku.com/reports?s=ffKpOp8wjrx6AizZE6anaWXXtRPiG4HgyBBVT6nY8N4%3D&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&ts=1769164073"
Server: cloudflare
vary: Origin
via: 2.0 heroku-router
x-content-type-options: nosniff
x-powered-by: Express
cf-cache-status: DYNAMIC
CF-RAY: 9c2699e10ed653a3-LHR
alt-svc: h3=":443"; ma=86400

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
<script>(function(){function c(){var b=a.contentDocument||a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'9c2699e10ed653a3',t:'MTc2OTE2NDA3Mw=='};var a=document.createElement('script');a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange||function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();</script></body>
</html>

Found 2026-01-23 by HttpPlugin

Create report

riskiiit.com*.riskiiit.com

Fingerprint:

a402f67c52ca562fea213639e4a24c5088b766a186623ba96e8c58a858df349f

CN:

riskiiit.com

Key:

ECDSA-256

Issuer:

WE1

Not before:

2026-01-17 01:23

Not after:

2026-04-17 02:23

Domain summary

api-staging.riskiiit.com 18

1 recorded

IP summary

104.26.3.175 2

1 recorded