Domain cms.tramdot.app
United States
Software information
railway-edge
tcp/443
-
GraphQL introspection is enabled.
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
First seen 2025-11-16 13:05
Last seen 2026-01-02 06:42
Open for 46 days-
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b99e8e8f466c5d9d1e26ddf353b6822567151bcdGraphQL introspection enabled at /graphql Types: 146 (by kind: ENUM: 3, INPUT_OBJECT: 28, OBJECT: 104, SCALAR: 11) Operations: - Query: Query | fields: spot_areas, spots, spots_aggregated, spots_by_id, spots_by_version - Mutation: Mutation | fields: create_order_items_item, create_order_items_items, create_orders_item, create_orders_items - Subscription: Subscription | fields: directus_files_mutated, directus_users_mutated, spot_activities_mutated, spot_areas_mutated, spots_mutated Directives: deprecated, include, skip (total: 3) Readable stores: 0
Found on 2026-01-02 06:42280.0 kBytes
-
-
Open service 66.33.22.151:443 · cms.tramdot.app
2026-01-09 07:04
HTTP/1.1 302 Found Content-Length: 29 Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob: https://raw.githubusercontent.com https://avatars.githubusercontent.com;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' Content-Type: text/plain; charset=utf-8 Date: Fri, 09 Jan 2026 07:04:59 GMT Location: ./admin Server: railway-edge Vary: Accept X-Powered-By: Directus X-Railway-Edge: railway/europe-west4-drams3a X-Railway-Request-Id: rs8IDSP7Q4GiDleAm3z_FQ Connection: close Found. Redirecting to ./admin
Found 2026-01-09 by HttpPluginCreate report
-
Open service 66.33.22.151:443 · cms.tramdot.app
2026-01-02 06:42
HTTP/1.1 302 Found Content-Length: 29 Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob: https://raw.githubusercontent.com https://avatars.githubusercontent.com;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' Content-Type: text/plain; charset=utf-8 Date: Fri, 02 Jan 2026 06:42:19 GMT Location: ./admin Server: railway-edge Vary: Accept X-Powered-By: Directus X-Railway-Edge: railway/europe-west4-drams3a X-Railway-Request-Id: QzGVe705R6SILfOa5nX1uw Connection: close Found. Redirecting to ./admin
Found 2026-01-02 by HttpPluginCreate report
-
Open service 66.33.22.151:443 · cms.tramdot.app
2025-12-22 21:11
HTTP/1.1 302 Found Content-Length: 29 Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob: https://raw.githubusercontent.com https://avatars.githubusercontent.com;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' Content-Type: text/plain; charset=utf-8 Date: Mon, 22 Dec 2025 21:11:58 GMT Location: ./admin Server: railway-edge Vary: Accept X-Powered-By: Directus X-Railway-Edge: railway/europe-west4-drams3a X-Railway-Request-Id: XtIlP6GyQYqBNEpGrJsmnA Connection: close Found. Redirecting to ./admin
Found 2025-12-22 by HttpPluginCreate report
-
Open service 66.33.22.151:443 · cms.tramdot.app
2025-12-21 00:21
HTTP/1.1 302 Found Content-Length: 29 Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob: https://raw.githubusercontent.com https://avatars.githubusercontent.com;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' Content-Type: text/plain; charset=utf-8 Date: Sun, 21 Dec 2025 00:21:32 GMT Location: ./admin Server: railway-edge Vary: Accept X-Powered-By: Directus X-Railway-Edge: railway/europe-west4-drams3a X-Railway-Request-Id: re0xlHF7SW-ytYkOm3z_FQ Connection: close Found. Redirecting to ./admin
Found 2025-12-21 by HttpPluginCreate report