LeakIX - Host dev.tcg.nl

Domain dev.tcg.nl

United States

AUTOMATTIC

Software information

nginx nginx

tcp/443

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 192.0.78.196
Domain: dev.tcg.nl
Port: 443
URL: https://dev.tcg.nl

First seen 2025-10-27 01:25
Last seen 2026-01-02 02:13
Open for 67 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa374c2942e74c2942e74c2942e74c2942e74c2942e
```
GraphQL introspection enabled at /graphql
Detected: Magento
```
  Found on 2026-01-02 02:13
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2025-12-11 06:21
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3c6efc29aca37210a147bff0e508248e57eb4441d
```
GraphQL introspection enabled at /graphql
Types: 1187 (by kind: ENUM: 91, INPUT_OBJECT: 255, INTERFACE: 190, OBJECT: 645, SCALAR: 5, UNION: 1)
Operations:
- Query: RootQuery | fields: allPaExpansions, allSettings, allowedCountries, cart, cartFee
- Mutation: RootMutation | fields: addCartItems, addFee, addMethodToShippingZone, addToCart, applyCoupon
Directives: deprecated, include, oneOf, skip (total: 4)
```
  Found on 2025-11-30 22:11
  
  2.7 MBytes
Create report

Open service 192.0.78.196:443 · dev.tcg.nl

2026-01-09 06:53

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Jan 2026 06:53:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-hacker: Want root?  Visit join.a8c.com and mention this header.
Host-Header: WordPress.com
Vary: accept, content-type, cookie
Link: <https://dev.tcg.nl/wp-json/>; rel="https://api.w.org/"
Link: <https://dev.tcg.nl/wp-json/wp/v2/pages/31>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://wp.me/PgRlmQ-v>; rel=shortlink
X-ac: 2.yyz _atomic_dca HIT
Alt-Svc: h3=":443"; ma=86400
Server-Timing: a8c-cdn, dc;desc=yyz, cache;desc=HIT;dur=2.0

Found 2026-01-09 by HttpPlugin

Create report

Open service 192.0.78.196:443 · dev.tcg.nl

2026-01-09 02:15

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Jan 2026 02:15:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-hacker: Want root?  Visit join.a8c.com and mention this header.
Host-Header: WordPress.com
Vary: accept, content-type, cookie
Link: <https://dev.tcg.nl/wp-json/>; rel="https://api.w.org/"
Link: <https://dev.tcg.nl/wp-json/wp/v2/pages/31>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://wp.me/PgRlmQ-v>; rel=shortlink
Last-Modified: Fri, 09 Jan 2026 02:15:27 GMT
Cache-Control: max-age=300, must-revalidate
X-nananana: Batcache-Set
X-ac: 4.ams _atomic_ams MISS
Alt-Svc: h3=":443"; ma=86400
Server-Timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=1763.0

Found 2026-01-09 by HttpPlugin

Create report

Open service 192.0.78.196:443 · dev.tcg.nl

2026-01-02 02:13

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Jan 2026 02:13:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-hacker: Want root?  Visit join.a8c.com and mention this header.
Host-Header: WordPress.com
Vary: accept, content-type, cookie
Link: <https://dev.tcg.nl/wp-json/>; rel="https://api.w.org/"
Link: <https://dev.tcg.nl/wp-json/wp/v2/pages/31>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://wp.me/PgRlmQ-v>; rel=shortlink
Last-Modified: Thu, 25 Dec 2025 06:15:49 GMT
Cache-Control: max-age=300, must-revalidate
X-nananana: Batcache-Set
X-ac: 32.hhn _atomic_ams UPDATING
Alt-Svc: h3=":443"; ma=86400
Server-Timing: a8c-cdn, dc;desc=hhn, cache;desc=UPDATING;dur=2.0

Found 2026-01-02 by HttpPlugin

Create report

Open service 192.0.78.196:443 · dev.tcg.nl

2026-01-01 23:02

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Jan 2026 23:02:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-hacker: Want root?  Visit join.a8c.com and mention this header.
Host-Header: WordPress.com
Vary: accept, content-type, cookie
Link: <https://dev.tcg.nl/wp-json/>; rel="https://api.w.org/"
Link: <https://dev.tcg.nl/wp-json/wp/v2/pages/31>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://wp.me/PgRlmQ-v>; rel=shortlink
X-ac: 1.lhr _atomic_ams UPDATING
Alt-Svc: h3=":443"; ma=86400
Server-Timing: a8c-cdn, dc;desc=lhr, cache;desc=UPDATING;dur=2.0

Found 2026-01-01 by HttpPlugin

Create report

Open service 192.0.78.196:443 · dev.tcg.nl

2025-12-30 05:27

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 30 Dec 2025 05:27:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-hacker: Want root?  Visit join.a8c.com and mention this header.
Host-Header: WordPress.com
Vary: accept, content-type, cookie
Link: <https://dev.tcg.nl/wp-json/>; rel="https://api.w.org/"
Link: <https://dev.tcg.nl/wp-json/wp/v2/pages/31>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://wp.me/PgRlmQ-v>; rel=shortlink
Last-Modified: Tue, 30 Dec 2025 05:27:42 GMT
Cache-Control: max-age=300, must-revalidate
X-nananana: Batcache-Set
X-ac: 4.sjc _atomic_bur MISS
Alt-Svc: h3=":443"; ma=86400
Server-Timing: a8c-cdn, dc;desc=sjc, cache;desc=MISS;dur=1016.0

Found 2025-12-30 by HttpPlugin

Create report

Open service 192.0.78.196:443 · dev.tcg.nl

2025-12-23 05:11

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Dec 2025 05:11:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-hacker: Want root?  Visit join.a8c.com and mention this header.
Host-Header: WordPress.com
Vary: accept, content-type, cookie
Link: <https://dev.tcg.nl/wp-json/>; rel="https://api.w.org/"
Link: <https://dev.tcg.nl/wp-json/wp/v2/pages/31>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://wp.me/PgRlmQ-v>; rel=shortlink
X-ac: 20.sin _atomic_bur MISS
Alt-Svc: h3=":443"; ma=86400
Server-Timing: a8c-cdn, dc;desc=sin, cache;desc=MISS;dur=814.0

Found 2025-12-23 by HttpPlugin

Create report

Open service 192.0.78.196:443 · dev.tcg.nl

2025-12-22 22:40

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 22 Dec 2025 22:40:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-hacker: Want root?  Visit join.a8c.com and mention this header.
Host-Header: WordPress.com
Vary: accept, content-type, cookie
Link: <https://dev.tcg.nl/wp-json/>; rel="https://api.w.org/"
Link: <https://dev.tcg.nl/wp-json/wp/v2/pages/31>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://wp.me/PgRlmQ-v>; rel=shortlink
Last-Modified: Sun, 21 Dec 2025 08:38:19 GMT
Cache-Control: max-age=300, must-revalidate
X-nananana: Batcache-Set
X-ac: 32.hhn _atomic_ams UPDATING
Alt-Svc: h3=":443"; ma=86400
Server-Timing: a8c-cdn, dc;desc=hhn, cache;desc=UPDATING;dur=1.0

Found 2025-12-22 by HttpPlugin

Create report

Open service 192.0.78.196:443 · dev.tcg.nl

2025-12-21 08:38

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 Dec 2025 08:38:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-hacker: Want root?  Visit join.a8c.com and mention this header.
Host-Header: WordPress.com
Vary: accept, content-type, cookie
Link: <https://dev.tcg.nl/wp-json/>; rel="https://api.w.org/"
Link: <https://dev.tcg.nl/wp-json/wp/v2/pages/31>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://wp.me/PgRlmQ-v>; rel=shortlink
X-ac: 32.hhn _atomic_ams UPDATING
Alt-Svc: h3=":443"; ma=86400
Server-Timing: a8c-cdn, dc;desc=hhn, cache;desc=UPDATING;dur=1.0

Found 2025-12-21 by HttpPlugin

Create report

Open service 192.0.78.196:443 · dev.tcg.nl

2025-12-21 02:14

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 Dec 2025 02:14:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-hacker: Want root?  Visit join.a8c.com and mention this header.
Host-Header: WordPress.com
Vary: accept, content-type, cookie
Link: <https://dev.tcg.nl/wp-json/>; rel="https://api.w.org/"
Link: <https://dev.tcg.nl/wp-json/wp/v2/pages/31>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://wp.me/PgRlmQ-v>; rel=shortlink
Last-Modified: Tue, 16 Dec 2025 18:44:44 GMT
Cache-Control: max-age=300, must-revalidate
X-nananana: Batcache-Set
X-ac: 32.hhn _atomic_ams UPDATING
Alt-Svc: h3=":443"; ma=86400
Server-Timing: a8c-cdn, dc;desc=hhn, cache;desc=UPDATING;dur=1.0

Found 2025-12-21 by HttpPlugin

Create report

Open service 192.0.78.196:443 · dev.tcg.nl

2025-12-19 09:05

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Dec 2025 09:05:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-hacker: Want root?  Visit join.a8c.com and mention this header.
Host-Header: WordPress.com
Vary: accept, content-type, cookie
Link: <https://dev.tcg.nl/wp-json/>; rel="https://api.w.org/"
Link: <https://dev.tcg.nl/wp-json/wp/v2/pages/31>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://wp.me/PgRlmQ-v>; rel=shortlink
X-ac: 36.jfk _atomic_dca UPDATING
Alt-Svc: h3=":443"; ma=86400
Server-Timing: a8c-cdn, dc;desc=jfk, cache;desc=UPDATING;dur=3.0

Found 2025-12-19 by HttpPlugin

Create report

Open service 192.0.78.196:443 · dev.tcg.nl

2025-12-18 23:54

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Dec 2025 23:54:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
X-hacker: Want root?  Visit join.a8c.com and mention this header.
Host-Header: WordPress.com
Vary: accept, content-type, cookie
Link: <https://dev.tcg.nl/wp-json/>; rel="https://api.w.org/"
Link: <https://dev.tcg.nl/wp-json/wp/v2/pages/31>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://wp.me/PgRlmQ-v>; rel=shortlink
X-ac: 36.jfk _atomic_dca UPDATING
Alt-Svc: h3=":443"; ma=86400
Server-Timing: a8c-cdn, dc;desc=jfk, cache;desc=UPDATING;dur=2.0

Found 2025-12-18 by HttpPlugin

Create report

*.wordpress.comwordpress.com

Fingerprint:

f70998483128eabeee9ec70b2366b133a41426ebba98beb27258b0d363566c54

CN:

wordpress.com

Key:

ECDSA-256

Issuer:

Not before:

2026-01-07 19:45

Not after:

2026-04-07 19:45

*.wordpress.comwordpress.com

Fingerprint:

b5f98de67b0a81fd65eec06637d1b9dd4be4f1fcecf9a5082cb30e506155c59c

CN:

wordpress.com

Key:

ECDSA-256

Issuer:

Not before:

2025-11-08 19:45

Not after:

2026-02-06 19:45

Domain summary

dev.tcg.nl 13

1 recorded

IP summary

192.0.78.196 2

1 recorded

Domain dev.tcg.nl

United States

Software information

GraphQL introspection is enabled.

*.wordpress.comwordpress.com

*.wordpress.comwordpress.com

Domain summary

IP summary