Domain nft-api.iboxtech.cloud
Software information
cloudflare
tcp/443
-
GraphQL introspection is enabled.
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
First seen 2025-11-05 02:46
Last seen 2026-01-02 18:21
Open for 58 days-
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3eaae90f6918f36e6d09dade1e0a5c66629f38c30GraphQL introspection enabled at /graphql Types: 169 (by kind: ENUM: 14, INPUT_OBJECT: 54, OBJECT: 93, SCALAR: 8) Operations: - Query: Query | fields: checkUnique, getMe, getUserByNickname, getUsers, userByAddress - Mutation: Mutation | fields: generateTfaQR, turnOffTfa, turnOnTfa, updateUser, updateUserByAdmin Directives: deprecated, include, skip, specifiedBy (total: 4)
Found on 2026-01-02 18:21278.1 kBytes
-
-
Open service 188.114.96.12:443 · nft-api.iboxtech.cloud
2026-01-09 19:41
HTTP/1.1 404 Not Found Date: Fri, 09 Jan 2026 19:41:28 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kAPfOt%2BFOB2PldkrrhEZcF0UQBMKfOuIg2DNHg%2FOOrDLHBRB2t3XL%2FN4wOFk2fzpmKvbgjjQxGyxMPgxuQb4Ctv8LaQ8tIx0pDunAe2h3qhgB9FykRQ%3D"}]} Vary: Accept-Encoding X-Powered-By: Express ETag: W/"3f-GR0G8sZfNVmVbqqGkyrPOefU7Ys" Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization,Accept,Origin,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,x-refresh-token,Content-Range,Range,content-type,origin Access-Control-Allow-Methods: GET,POST,OPTIONS,PUT,DELETE,PATCH cf-cache-status: DYNAMIC CF-RAY: 9bb6698e1f0f0bc5-AMS alt-svc: h3=":443"; ma=86400 {"statusCode":404,"message":"Cannot GET /","error":"Not Found"}Found 2026-01-09 by HttpPluginCreate report
-
Open service 188.114.96.12:443 · nft-api.iboxtech.cloud
2026-01-02 18:21
HTTP/1.1 404 Not Found Date: Fri, 02 Jan 2026 18:21:27 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=zWYjhUfvK2XUGTUeIOJQgNNyRPxaPdiQH7RtXG%2FdCbAomn3Mi%2BHYZhuZFdOKFLNHSmgthiUxMVDwxgFZFpLt811gpwLq5sXyHSO6g%2FFE%2FPNJ0wLeRtA%3D"}]} Vary: Accept-Encoding X-Powered-By: Express ETag: W/"3f-GR0G8sZfNVmVbqqGkyrPOefU7Ys" Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization,Accept,Origin,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,x-refresh-token,Content-Range,Range,content-type,origin Access-Control-Allow-Methods: GET,POST,OPTIONS,PUT,DELETE,PATCH Server-Timing: cfCacheStatus;desc="DYNAMIC" Server-Timing: cfEdge;dur=9,cfOrigin;dur=195 cf-cache-status: DYNAMIC CF-RAY: 9b7c46b46dbd0cfb-EWR alt-svc: h3=":443"; ma=86400 {"statusCode":404,"message":"Cannot GET /","error":"Not Found"}Found 2026-01-02 by HttpPluginCreate report
-
Open service 188.114.96.12:443 · nft-api.iboxtech.cloud
2025-12-22 19:34
HTTP/1.1 404 Not Found Date: Mon, 22 Dec 2025 19:34:30 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=sL2QnhE%2BnPA0buW7hFr%2FKIa5vlkVIJ0mB7cox6cjdgld5roZL%2FIs5HVqwxzdCg2P56k2xC2K3CtpF0%2BojYaJCt%2BOYfpS%2B34cp5zhYjYXbfTemjAnyr0%3D"}]} Vary: Accept-Encoding X-Powered-By: Express ETag: W/"3f-GR0G8sZfNVmVbqqGkyrPOefU7Ys" Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization,Accept,Origin,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,x-refresh-token,Content-Range,Range,content-type,origin Access-Control-Allow-Methods: GET,POST,OPTIONS,PUT,DELETE,PATCH Server-Timing: cfCacheStatus;desc="DYNAMIC" Server-Timing: cfEdge;dur=6,cfOrigin;dur=98 cf-cache-status: DYNAMIC CF-RAY: 9b220e96e929125e-EWR alt-svc: h3=":443"; ma=86400 {"statusCode":404,"message":"Cannot GET /","error":"Not Found"}Found 2025-12-22 by HttpPluginCreate report
-
Open service 188.114.96.12:443 · nft-api.iboxtech.cloud
2025-12-20 20:01
HTTP/1.1 404 Not Found Date: Sat, 20 Dec 2025 20:01:46 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=jqStlQcOjUmq8sVPD5encMXbqvVgmOKIo0YEHBgjl93G0A9KjRLiVUgvTNyeTYwjwqpP8tMbKxHMgoexAH4wb3GlSBdyARUuVZBhxekDyxL8GotDINU%3D"}]} Vary: Accept-Encoding X-Powered-By: Express ETag: W/"3f-GR0G8sZfNVmVbqqGkyrPOefU7Ys" Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization,Accept,Origin,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,x-refresh-token,Content-Range,Range,content-type,origin Access-Control-Allow-Methods: GET,POST,OPTIONS,PUT,DELETE,PATCH Server-Timing: cfCacheStatus;desc="DYNAMIC" Server-Timing: cfEdge;dur=7,cfOrigin;dur=353 cf-cache-status: DYNAMIC CF-RAY: 9b11bbc4b94941ce-SJC alt-svc: h3=":443"; ma=86400 {"statusCode":404,"message":"Cannot GET /","error":"Not Found"}Found 2025-12-20 by HttpPluginCreate report