LeakIX - Host rekord.cloud

Domain rekord.cloud

Germany

Hetzner Online GmbH

Software information

BunnyCDN-DE1-1082

tcp/443 tcp/80

BunnyCDN-DE1-722

tcp/443 tcp/80

Caddy

tcp/443

CloudFront

tcp/443

Grafana 10.2.0

tcp/443

Netlify

tcp/443 tcp/80

nginx nginx 1.29.4

tcp/443

Grafana instance publicly available
Grafana instance is open to the public and could leak the following information :

System/internal statistics

Database backend credentials
IP: 49.12.132.239
Domain: stats.rekord.cloud
Port: 443
URL: https://stats.rekord.cloud/api/datasources

First seen 2023-11-19 18:11
Last seen 2026-01-15 07:24
Open for 787 days
- Fingerprint: afdaacf60309de55fbe6b9b415d6599215d6599215d6599215d6599215d65992
```
Read-only access:
Title: Rekordcloud 2 (Tuneful) | path: db/rekordcloud-2-tuneful | type: dash-db
```
  Found on 2026-01-15 07:24
- Fingerprint: afdaacf60309de55fbe6b9b4dc879eccdc879eccdc879eccdc879eccdc879ecc
```
Read-only access:
Title: Rekordcloud Business | path: db/rekordcloud-business | type: dash-db
```
  Found on 2024-04-18 22:56
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 49.12.132.239
Domain: content.rekord.cloud
Port: 443
URL: https://content.rekord.cloud

First seen 2025-11-10 06:40
Last seen 2026-01-02 06:38
Open for 52 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3d9181c39a346585bfbe2b3f59676f8159676f815
```
GraphQL introspection enabled at /graphql
Types: 12 (by kind: ENUM: 2, OBJECT: 7, SCALAR: 3)
Operations:
- Query: Query | fields: _empty
Directives: deprecated, include, skip (total: 3)
```
  Found on 2026-01-02 06:38
  
  17.0 kBytes
Create report

Open service 144.76.174.59:443 · n8n.rekord.cloud

2026-01-12 21:15

HTTP/1.1 200 OK
Accept-Ranges: bytes
Alt-Svc: h3=":443"; ma=2592000
Cache-Control: public, max-age=86400
Content-Type: text/html; charset=utf-8
Date: Mon, 12 Jan 2026 21:15:49 GMT
Etag: W/"7b7-19a3c11dcd7"
Last-Modified: Fri, 31 Oct 2025 20:59:54 GMT
Server: Caddy
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked

Page title: n8n.io - Workflow Automation

<!DOCTYPE html>
<html lang="en">
	<head>
		<script type="module" crossorigin src="/assets/polyfills-J2x06Gdp.js"></script>

		<meta charset="utf-8" />
		<meta http-equiv="X-UA-Compatible" content="IE=edge" />
		<meta name="viewport" content="width=device-width,initial-scale=1.0" />
		<link rel="icon" href="/favicon.ico" />
		<style>@media (prefers-color-scheme: dark) { body { background-color: rgb(45, 46, 46) } }</style>
		<script type="text/javascript">
			window.BASE_PATH = '/';
			window.REST_ENDPOINT = 'rest';
		</script>
		<script src="/rest/sentry.js"></script>
		<script>!function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.async=!0,p.src=s.api_host+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="capture identify alias people.set people.set_once set_config register register_once unregister opt_out_capturing has_opted_out_capturing opt_in_capturing reset isFeatureEnabled getFeatureFlag onFeatureFlags reloadFeatureFlags".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[])</script>

		<title>n8n.io - Workflow Automation</title>
		<script type="module" crossorigin src="/assets/index-yHq_9MHK.js"></script>
		<link rel="stylesheet" crossorigin href="/assets/index-DH8MNLw5.css">
	</head>
	<body>
		<noscript>
			<strong
				>We're sorry but the n8n Editor-UI doesn't work properly without JavaScript enabled. Please
				enable it to continue.</strong
			>
		</noscript>
		<div id="app"></div>
	</body>
</html>

Found 3 days ago by HttpPlugin

Create report

Open service 144.76.174.59:443 · n8n.rekord.cloud

2026-01-11 21:20

HTTP/1.1 200 OK
Accept-Ranges: bytes
Alt-Svc: h3=":443"; ma=2592000
Cache-Control: public, max-age=86400
Content-Type: text/html; charset=utf-8
Date: Sun, 11 Jan 2026 21:20:04 GMT
Etag: W/"7b7-19a3c11dcd7"
Last-Modified: Fri, 31 Oct 2025 20:59:54 GMT
Server: Caddy
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked

Page title: n8n.io - Workflow Automation

<!DOCTYPE html>
<html lang="en">
	<head>
		<script type="module" crossorigin src="/assets/polyfills-J2x06Gdp.js"></script>

		<meta charset="utf-8" />
		<meta http-equiv="X-UA-Compatible" content="IE=edge" />
		<meta name="viewport" content="width=device-width,initial-scale=1.0" />
		<link rel="icon" href="/favicon.ico" />
		<style>@media (prefers-color-scheme: dark) { body { background-color: rgb(45, 46, 46) } }</style>
		<script type="text/javascript">
			window.BASE_PATH = '/';
			window.REST_ENDPOINT = 'rest';
		</script>
		<script src="/rest/sentry.js"></script>
		<script>!function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.async=!0,p.src=s.api_host+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="capture identify alias people.set people.set_once set_config register register_once unregister opt_out_capturing has_opted_out_capturing opt_in_capturing reset isFeatureEnabled getFeatureFlag onFeatureFlags reloadFeatureFlags".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[])</script>

		<title>n8n.io - Workflow Automation</title>
		<script type="module" crossorigin src="/assets/index-yHq_9MHK.js"></script>
		<link rel="stylesheet" crossorigin href="/assets/index-DH8MNLw5.css">
	</head>
	<body>
		<noscript>
			<strong
				>We're sorry but the n8n Editor-UI doesn't work properly without JavaScript enabled. Please
				enable it to continue.</strong
			>
		</noscript>
		<div id="app"></div>
	</body>
</html>

Found 2026-01-11 by HttpPlugin

Create report

Open service 144.76.174.59:443 · n8n.rekord.cloud

2026-01-10 21:17

HTTP/1.1 200 OK
Accept-Ranges: bytes
Alt-Svc: h3=":443"; ma=2592000
Cache-Control: public, max-age=86400
Content-Type: text/html; charset=utf-8
Date: Sat, 10 Jan 2026 21:17:05 GMT
Etag: W/"7b7-19a3c11dcd7"
Last-Modified: Fri, 31 Oct 2025 20:59:54 GMT
Server: Caddy
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked

Page title: n8n.io - Workflow Automation

<!DOCTYPE html>
<html lang="en">
	<head>
		<script type="module" crossorigin src="/assets/polyfills-J2x06Gdp.js"></script>

		<meta charset="utf-8" />
		<meta http-equiv="X-UA-Compatible" content="IE=edge" />
		<meta name="viewport" content="width=device-width,initial-scale=1.0" />
		<link rel="icon" href="/favicon.ico" />
		<style>@media (prefers-color-scheme: dark) { body { background-color: rgb(45, 46, 46) } }</style>
		<script type="text/javascript">
			window.BASE_PATH = '/';
			window.REST_ENDPOINT = 'rest';
		</script>
		<script src="/rest/sentry.js"></script>
		<script>!function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.async=!0,p.src=s.api_host+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="capture identify alias people.set people.set_once set_config register register_once unregister opt_out_capturing has_opted_out_capturing opt_in_capturing reset isFeatureEnabled getFeatureFlag onFeatureFlags reloadFeatureFlags".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[])</script>

		<title>n8n.io - Workflow Automation</title>
		<script type="module" crossorigin src="/assets/index-yHq_9MHK.js"></script>
		<link rel="stylesheet" crossorigin href="/assets/index-DH8MNLw5.css">
	</head>
	<body>
		<noscript>
			<strong
				>We're sorry but the n8n Editor-UI doesn't work properly without JavaScript enabled. Please
				enable it to continue.</strong
			>
		</noscript>
		<div id="app"></div>
	</body>
</html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 144.76.174.59:443 · n8n.rekord.cloud

2026-01-09 21:16

HTTP/1.1 200 OK
Accept-Ranges: bytes
Alt-Svc: h3=":443"; ma=2592000
Cache-Control: public, max-age=86400
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 21:16:09 GMT
Etag: W/"7b7-19a3c11dcd7"
Last-Modified: Fri, 31 Oct 2025 20:59:54 GMT
Server: Caddy
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked

Page title: n8n.io - Workflow Automation

<!DOCTYPE html>
<html lang="en">
	<head>
		<script type="module" crossorigin src="/assets/polyfills-J2x06Gdp.js"></script>

		<meta charset="utf-8" />
		<meta http-equiv="X-UA-Compatible" content="IE=edge" />
		<meta name="viewport" content="width=device-width,initial-scale=1.0" />
		<link rel="icon" href="/favicon.ico" />
		<style>@media (prefers-color-scheme: dark) { body { background-color: rgb(45, 46, 46) } }</style>
		<script type="text/javascript">
			window.BASE_PATH = '/';
			window.REST_ENDPOINT = 'rest';
		</script>
		<script src="/rest/sentry.js"></script>
		<script>!function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.async=!0,p.src=s.api_host+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="capture identify alias people.set people.set_once set_config register register_once unregister opt_out_capturing has_opted_out_capturing opt_in_capturing reset isFeatureEnabled getFeatureFlag onFeatureFlags reloadFeatureFlags".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[])</script>

		<title>n8n.io - Workflow Automation</title>
		<script type="module" crossorigin src="/assets/index-yHq_9MHK.js"></script>
		<link rel="stylesheet" crossorigin href="/assets/index-DH8MNLw5.css">
	</head>
	<body>
		<noscript>
			<strong
				>We're sorry but the n8n Editor-UI doesn't work properly without JavaScript enabled. Please
				enable it to continue.</strong
			>
		</noscript>
		<div id="app"></div>
	</body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 49.12.132.239:443 · stats.rekord.cloud

2026-01-09 20:14

HTTP/1.1 200 OK
Alt-Svc: h3=":443"; ma=2592000
Cache-Control: no-store
Content-Type: text/html; charset=UTF-8
Date: Fri, 09 Jan 2026 20:14:46 GMT
Server: Caddy
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Connection: close
Transfer-Encoding: chunked

Found 2026-01-09 by HttpPlugin

Create report

Open service 49.12.132.239:443 · content.rekord.cloud

2026-01-09 18:28

HTTP/1.1 302 Found
Alt-Svc: h3=":443"; ma=2592000
Content-Length: 29
Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob: https://cdn.directus.io;media-src 'self' https://cdn.directus.io;connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'
Content-Type: text/plain; charset=utf-8
Date: Fri, 09 Jan 2026 18:28:06 GMT
Location: ./admin
Server: Caddy
Vary: Accept
X-Powered-By: Directus
Connection: close


Found. Redirecting to ./admin

Found 2026-01-09 by HttpPlugin

Create report

Open service 18.239.50.7:443 · rekord.cloud

2026-01-09 11:40

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 09 Jan 2026 11:40:31 GMT
Content-Length: 0
Connection: close
Location: https://www.rekord.cloud/
X-Cache: FunctionGeneratedResponse from cloudfront
Via: 1.1 5bf4ed1052f9d87875430429ad189f42.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P3
X-Amz-Cf-Id: aN65nLZ5Fnyg7RqQYWR1saSSZHOn7n-1c-UNWrk-VaGNJx4mQ3HX2A==

Found 2026-01-09 by HttpPlugin

Create report

Open service 49.12.132.239:443 · content.rekord.cloud

2026-01-09 05:50

HTTP/1.1 302 Found
Alt-Svc: h3=":443"; ma=2592000
Content-Length: 29
Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob: https://cdn.directus.io;media-src 'self' https://cdn.directus.io;connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'
Content-Type: text/plain; charset=utf-8
Date: Fri, 09 Jan 2026 05:50:33 GMT
Location: ./admin
Server: Caddy
Vary: Accept
X-Powered-By: Directus
Connection: close


Found. Redirecting to ./admin

Found 2026-01-09 by HttpPlugin

Create report

Open service 144.76.174.59:443 · n8n.rekord.cloud

2026-01-08 23:38

HTTP/1.1 200 OK
Accept-Ranges: bytes
Alt-Svc: h3=":443"; ma=2592000
Cache-Control: public, max-age=86400
Content-Type: text/html; charset=utf-8
Date: Thu, 08 Jan 2026 23:38:47 GMT
Etag: W/"7b7-19a3c11dcd7"
Last-Modified: Fri, 31 Oct 2025 20:59:54 GMT
Server: Caddy
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked

Page title: n8n.io - Workflow Automation

<!DOCTYPE html>
<html lang="en">
	<head>
		<script type="module" crossorigin src="/assets/polyfills-J2x06Gdp.js"></script>

		<meta charset="utf-8" />
		<meta http-equiv="X-UA-Compatible" content="IE=edge" />
		<meta name="viewport" content="width=device-width,initial-scale=1.0" />
		<link rel="icon" href="/favicon.ico" />
		<style>@media (prefers-color-scheme: dark) { body { background-color: rgb(45, 46, 46) } }</style>
		<script type="text/javascript">
			window.BASE_PATH = '/';
			window.REST_ENDPOINT = 'rest';
		</script>
		<script src="/rest/sentry.js"></script>
		<script>!function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.async=!0,p.src=s.api_host+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="capture identify alias people.set people.set_once set_config register register_once unregister opt_out_capturing has_opted_out_capturing opt_in_capturing reset isFeatureEnabled getFeatureFlag onFeatureFlags reloadFeatureFlags".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[])</script>

		<title>n8n.io - Workflow Automation</title>
		<script type="module" crossorigin src="/assets/index-yHq_9MHK.js"></script>
		<link rel="stylesheet" crossorigin href="/assets/index-DH8MNLw5.css">
	</head>
	<body>
		<noscript>
			<strong
				>We're sorry but the n8n Editor-UI doesn't work properly without JavaScript enabled. Please
				enable it to continue.</strong
			>
		</noscript>
		<div id="app"></div>
	</body>
</html>

Found 2026-01-08 by HttpPlugin