LeakIX - Host ca-fr.explore.omsystem.com

Domain ca-fr.explore.omsystem.com

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 104.18.40.102
Domain: ca-fr.explore.omsystem.com
Port: 443
URL: https://ca-fr.explore.omsystem.com

First seen 2025-10-22 10:36
Last seen 2026-02-01 19:33
Open for 102 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2026-02-01 19:33
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa374c2942e74c2942e74c2942e74c2942e74c2942e
```
GraphQL introspection enabled at /graphql
Detected: Magento
```
Found on 2026-01-24 09:27

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3962fbee586a19d67e2a391373d2fd28021913c58

GraphQL introspection enabled at /graphql
Types: 578 (by kind: ENUM: 37, INPUT_OBJECT: 121, INTERFACE: 25, OBJECT: 390, SCALAR: 5)
Operations:
- Query: Query | fields: adyenPaymentMethods, adyenPaymentMethodsBalance, adyenPaymentStatus, adyenRedeemedGiftcards, amBrandGetMoreFromThisBrandBlock
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addGiftRegistryRegistrants, addProductsToCart
Directives: deprecated, include, skip (total: 3)

Found on 2025-11-25 12:56

2.6 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e75a701873e558fcf45ac400951e9a05ee5ce685

GraphQL introspection enabled at /graphql
Types: 571 (by kind: ENUM: 37, INPUT_OBJECT: 121, INTERFACE: 25, OBJECT: 383, SCALAR: 5)
Operations:
- Query: Query | fields: adyenPaymentMethods, adyenPaymentMethodsBalance, adyenPaymentStatus, adyenRedeemedGiftcards, amBrandGetMoreFromThisBrandBlock
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addGiftRegistryRegistrants, addProductsToCart
Directives: deprecated, include, skip (total: 3)

Found on 2025-10-22 12:14

2.6 MBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 104.18.40.102
Domain: ca-fr.explore.omsystem.com
Port: 8443
URL: https://ca-fr.explore.omsystem.com:8443

First seen 2025-10-22 10:36
Last seen 2026-01-24 09:27
Open for 93 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa374c2942e74c2942e74c2942e74c2942e74c2942e
```
GraphQL introspection enabled at /graphql
Detected: Magento
```
Found on 2026-01-24 09:27

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3962fbee586a19d67e2a391373d2fd28021913c58

GraphQL introspection enabled at /graphql
Types: 578 (by kind: ENUM: 37, INPUT_OBJECT: 121, INTERFACE: 25, OBJECT: 390, SCALAR: 5)
Operations:
- Query: Query | fields: adyenPaymentMethods, adyenPaymentMethodsBalance, adyenPaymentStatus, adyenRedeemedGiftcards, amBrandGetMoreFromThisBrandBlock
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addGiftRegistryRegistrants, addProductsToCart
Directives: deprecated, include, skip (total: 3)

Found on 2025-12-01 01:50

2.6 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-11-08 15:03

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e75a701873e558fcf45ac400951e9a05ee5ce685

GraphQL introspection enabled at /graphql
Types: 571 (by kind: ENUM: 37, INPUT_OBJECT: 121, INTERFACE: 25, OBJECT: 383, SCALAR: 5)
Operations:
- Query: Query | fields: adyenPaymentMethods, adyenPaymentMethodsBalance, adyenPaymentStatus, adyenRedeemedGiftcards, amBrandGetMoreFromThisBrandBlock
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addGiftRegistryRegistrants, addProductsToCart
Directives: deprecated, include, skip (total: 3)

Found on 2025-10-22 10:36

2.6 MBytes

Create report

Open service 2606:4700:4406::ac40:939a:8443 · ca-fr.explore.omsystem.com

2026-01-24 09:27

HTTP/1.1 200 OK
Date: Sat, 24 Jan 2026 09:27:28 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 765585
Connection: close
Server: cloudflare
CF-Ray: 9c2e7e8f5c68fd0f-SIN
CF-Cache-Status: DYNAMIC
Age: 5464
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Content-Language: en
Expires: Sun, 24 Jan 2027 13:45:27 GMT
Link: <https://explore.omsystem.com/ca/fr/>; rel="canonical"
Strict-Transport-Security: max-age=31557600
Vary: Accept-Encoding,Cookie
Pragma: cache
Weglot: id.9c2e7e8f5c68fd0f, p.cf


google.gl www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sm www.google.sr www.google.tn www.google.tt www.google.vu https://id5-sync.com *.quantserve.com alb.reddit.com *.linkedin.com https://tg.socdm.com https://cs.adingo.jp https://ads.stickyadstv.com https://idsync.rlcdn.com https://exchange.mediavine.com https://jadserve.postrelease.com https://criteo-partners.tremorhub.com https://ad.yieldlab.net https://x.bidswitch.net https://ib.adnxs.com https://r.casalemedia.com https://ad.360yield.com https://contextual.media.net https://sync.outbrain.com https://simage2.pubmatic.com https://pixel.rubiconproject.com https://rtb-csync.smartadserver.com https://sync-t1.taboola.com https://criteo-sync.teads.tv https://eb2.3lift.com https://aa.agkn.com https://ade.clmbtech.com https://sync.1rx.io https://a.twiago.com https://sync.targeting.unrulymedia.com *.zendesk.com *.adyen.com https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.pxlecdn.com *.pixlee.com *.cdninstagram.com *.sanity.io www.facebook.com *.magentosite.cloud shop.olympus.com.au www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.googletagmanager.com *.cash.app *.payments-amazon.com *.google.com *.paypal.com *.checkout.visa.com *.mastercard.com *.omds.acidgreen.com.au *.explore.omsystem.com *.go-mpulse.net *.newrelic.com *.cookielaw.org *.weglot.com *.pricespider.com cdnjs.cloudflare.com api.tiles.mapbox.com *.adobedtm.com *.bing.com *.criteo.com *.doubleclick.net *.elfsight.com *.facebook.net *.googleapis.com *.googletagmanager.com *.googleadservices.com *.googleads.g.doubleclick.net *.igodigital.com *.mczbf.com *.omappapi.com *.pixlee.com *.js-agent.newrelic.com *.bam.nr-data.net *.cardinalcommerce.com  merchant-center-analytics.goog  analytics.tiktok.com *.quantserve.com www.redditstatic.com https://trck.linkster.co https://unpkg.com snap.licdn.com *.tradedoubler.com *.zdassets.com *.zendesk.com *.adyen.com https://maps.googleapis.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.google.com/ *.marketo.com *.pxlecdn.com *.pixlee.co https://acsbapp.com https://*.acsbapp.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.omds.acidgreen.com.au *.explore.omsystem.com *.weglot.com *.fontawesome.com api.tiles.mapbox.com *.omappapi.com *.pricespider.com *.gstatic.com *.marketo.co