Domain gitlab-sandbox.bfops.io
Germany
Software information
nginx
tcp/443
-
GraphQL introspection is enabled.
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
First seen 2025-10-28 13:53
Last seen 2026-01-23 05:09
Open for 86 days-
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d603073f8703073f8703073f8703073f8703073f87GraphQL introspection enabled at /api/graphql Detected: GitLab
Found on 2026-01-23 05:09 -
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6GraphQL introspection enabled at /api/graphql
Found on 2025-12-01 17:13
-
-
Open service 35.157.52.27:443 · gitlab-sandbox.bfops.io
2026-01-23 05:09
HTTP/1.1 302 Found Server: nginx Date: Fri, 23 Jan 2026 05:09:37 GMT Content-Type: text/html; charset=utf-8 Content-Length: 111 Connection: close Cache-Control: no-cache Content-Security-Policy: Location: https://gitlab-sandbox.bfops.io/users/sign_in Nel: {"max_age": 0} Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Gitlab-Meta: {"correlation_id":"01KFMM41MX6768BM6G7R2WYR29","version":"1"} X-Permitted-Cross-Domain-Policies: none X-Request-Id: 01KFMM41MX6768BM6G7R2WYR29 X-Runtime: 0.038956 X-Ua-Compatible: IE=edge X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=63072000 Referrer-Policy: strict-origin-when-cross-origin <html><body>You are being <a href="https://gitlab-sandbox.bfops.io/users/sign_in">redirected</a>.</body></html>Found 2026-01-23 by HttpPluginCreate report
-
Open service 35.157.52.27:443 · gitlab-sandbox.bfops.io
2026-01-09 13:14
HTTP/1.1 302 Found Server: nginx Date: Fri, 09 Jan 2026 13:14:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 111 Connection: close Cache-Control: no-cache Content-Security-Policy: Location: https://gitlab-sandbox.bfops.io/users/sign_in Nel: {"max_age": 0} Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Gitlab-Meta: {"correlation_id":"01KEHE9T16QEYMW39G9117HD4M","version":"1"} X-Permitted-Cross-Domain-Policies: none X-Request-Id: 01KEHE9T16QEYMW39G9117HD4M X-Runtime: 0.035850 X-Ua-Compatible: IE=edge X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=63072000 Referrer-Policy: strict-origin-when-cross-origin <html><body>You are being <a href="https://gitlab-sandbox.bfops.io/users/sign_in">redirected</a>.</body></html>Found 2026-01-09 by HttpPluginCreate report
-
Open service 35.157.52.27:443 · gitlab-sandbox.bfops.io
2026-01-02 07:36
HTTP/1.1 302 Found Server: nginx Date: Fri, 02 Jan 2026 07:36:38 GMT Content-Type: text/html; charset=utf-8 Content-Length: 111 Connection: close Cache-Control: no-cache Content-Security-Policy: Location: https://gitlab-sandbox.bfops.io/users/sign_in Nel: {"max_age": 0} Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Gitlab-Meta: {"correlation_id":"01KDYT655VEYHHGFPKB7MY3223","version":"1"} X-Permitted-Cross-Domain-Policies: none X-Request-Id: 01KDYT655VEYHHGFPKB7MY3223 X-Runtime: 0.094505 X-Ua-Compatible: IE=edge X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=63072000 Referrer-Policy: strict-origin-when-cross-origin <html><body>You are being <a href="https://gitlab-sandbox.bfops.io/users/sign_in">redirected</a>.</body></html>Found 2026-01-02 by HttpPluginCreate report
-
Open service 35.157.52.27:443 · gitlab-sandbox.bfops.io
2025-12-22 13:49
HTTP/1.1 302 Found Server: nginx Date: Mon, 22 Dec 2025 13:49:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 111 Connection: close Cache-Control: no-cache Content-Security-Policy: Location: https://gitlab-sandbox.bfops.io/users/sign_in Nel: {"max_age": 0} Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Gitlab-Meta: {"correlation_id":"01KD355M8E2FTG3QM91ZVV2KWV","version":"1"} X-Permitted-Cross-Domain-Policies: none X-Request-Id: 01KD355M8E2FTG3QM91ZVV2KWV X-Runtime: 0.052415 X-Ua-Compatible: IE=edge X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=63072000 Referrer-Policy: strict-origin-when-cross-origin <html><body>You are being <a href="https://gitlab-sandbox.bfops.io/users/sign_in">redirected</a>.</body></html>Found 2025-12-22 by HttpPluginCreate report