LeakIX - Host api.tenvia.ec

Domain api.tenvia.ec

United States

RAILWAY

Software information

railway-edge

tcp/443 tcp/80

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 66.33.22.42
Domain: api.tenvia.ec
Port: 443
URL: https://api.tenvia.ec

First seen 2025-11-12 20:10
Last seen 2026-01-02 20:31
Open for 51 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2026-01-02 20:31

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa368eff37036ae3774ad0b7bec7f63f797947218a0

GraphQL introspection enabled at /graphql
Types: 1133 (by kind: ENUM: 66, INPUT_OBJECT: 601, OBJECT: 459, SCALAR: 7)
Operations:
- Query: Query | fields: card, cards, getMe, user, users
- Mutation: Mutation | fields: refreshToken, registerAndLogin, registerAndLoginWithApple, registerAndLoginWithGoogle, removeAccount
- Subscription: Subscription | fields: createdLocation, deletedManyLocations, deletedOneLocation, updatedManyLocations, updatedOneLocation
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-30 22:52

1.3 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa323213d40b4c128847c96f6dc9b8271e71631f550

GraphQL introspection enabled at /graphql
Types: 1109 (by kind: ENUM: 63, INPUT_OBJECT: 589, OBJECT: 450, SCALAR: 7)
Operations:
- Query: Query | fields: card, cards, getMe, user, users
- Mutation: Mutation | fields: refreshToken, registerAndLogin, registerAndLoginWithApple, registerAndLoginWithGoogle, removeAccount
- Subscription: Subscription | fields: createdLocation, deletedManyLocations, deletedOneLocation, updatedManyLocations, updatedOneLocation
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-21 13:06

1.3 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3df879daf36607ffd18daa52d9d768ffce66a688f

GraphQL introspection enabled at /graphql
Types: 1086 (by kind: ENUM: 62, INPUT_OBJECT: 576, OBJECT: 441, SCALAR: 7)
Operations:
- Query: Query | fields: card, cards, getMe, user, users
- Mutation: Mutation | fields: refreshToken, registerAndLogin, registerAndLoginWithApple, registerAndLoginWithGoogle, removeAccount
- Subscription: Subscription | fields: createdLocation, deletedManyLocations, deletedOneLocation, updatedManyLocations, updatedOneLocation
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-16 20:46

1.3 MBytes

Create report

Open service 66.33.22.42:443 · api.tenvia.ec

2026-01-11 19:26

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 12
Content-Type: text/html; charset=utf-8
Date: Sun, 11 Jan 2026 19:26:41 GMT
Etag: W/"c-Lve95gjOVATpfV8EL5X4nxwjKHE"
Server: railway-edge
X-Powered-By: Express
X-Railway-Edge: railway/us-east4-eqdc4a
X-Railway-Request-Id: k750aeqcROy56PhsBT7zVQ
Connection: close


Hello World!

Found 3 days ago by HttpPlugin

Create report

Open service 66.33.22.42:80 · api.tenvia.ec

2026-01-11 19:26

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
Location: https://api.tenvia.ec/
Server: railway-edge
X-Railway-Edge: railway/asia-southeast1-eqsg3a
X-Railway-Request-Id: FSXZAk9uT1Oz3caV0ubPiw
Date: Sun, 11 Jan 2026 19:26:50 GMT
Content-Length: 57
Connection: close


<a href="https://api.tenvia.ec/">Moved Permanently</a>.

Found 3 days ago by HttpPlugin

Create report

Open service 66.33.22.42:443 · api.tenvia.ec

2026-01-10 00:16

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 12
Content-Type: text/html; charset=utf-8
Date: Sat, 10 Jan 2026 00:16:21 GMT
Etag: W/"c-Lve95gjOVATpfV8EL5X4nxwjKHE"
Server: railway-edge
X-Powered-By: Express
X-Railway-Edge: railway/europe-west4-drams3a
X-Railway-Request-Id: L29shkwlSFSAu0n65nX1uw
Connection: close


Hello World!

Found 2026-01-10 by HttpPlugin

Create report

Open service 66.33.22.42:443 · api.tenvia.ec

2026-01-02 20:31

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 12
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 20:31:31 GMT
Etag: W/"c-Lve95gjOVATpfV8EL5X4nxwjKHE"
Server: railway-edge
X-Powered-By: Express
X-Railway-Edge: railway/us-east4-eqdc4a
X-Railway-Request-Id: 3G2CmbByTZmRdg93Cx5-qw
Connection: close


Hello World!

Found 2026-01-02 by HttpPlugin

Create report

Open service 66.33.22.42:443 · api.tenvia.ec

2025-12-23 02:43

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 12
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 02:43:42 GMT
Etag: W/"c-Lve95gjOVATpfV8EL5X4nxwjKHE"
Server: railway-edge
X-Powered-By: Express
X-Railway-Edge: railway/europe-west4-drams3a
X-Railway-Request-Id: 475vothUQ3CDnKfgss7a6g
Connection: close


Hello World!

Found 2025-12-23 by HttpPlugin

Create report

Open service 66.33.22.42:443 · api.tenvia.ec

2025-12-21 08:11

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 12
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 08:11:33 GMT
Etag: W/"c-Lve95gjOVATpfV8EL5X4nxwjKHE"
Server: railway-edge
X-Powered-By: Express
X-Railway-Edge: railway/europe-west4-drams3a
X-Railway-Request-Id: 6dnW1sdkQLeWL2YAw9P4nw
Connection: close


Hello World!

Found 2025-12-21 by HttpPlugin

Create report

Open service 66.33.22.42:443 · api.tenvia.ec

2025-12-19 06:04

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Length: 12
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 06:04:26 GMT
Etag: W/"c-Lve95gjOVATpfV8EL5X4nxwjKHE"
Server: railway-edge
X-Powered-By: Express
X-Railway-Edge: railway/europe-west4-drams3a
X-Railway-Request-Id: blKELKTvTWCZWb-zw9P4nw
Connection: close


Hello World!

Found 2025-12-19 by HttpPlugin

Create report

api.tenvia.ec

Fingerprint:

9729bec4082fff5164089142065aa31f4aca3ddefc11814b91b35b25619927c9

CN:

api.tenvia.ec

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-12 19:12

Not after:

2026-02-10 19:12

Domain summary

api.tenvia.ec 10

1 recorded

IP summary

66.33.22.42 2

1 recorded