LeakIX - Host stage-football-api.hyper.live

Domain stage-football-api.hyper.live

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 162.159.140.98
Domain: stage-football-api.hyper.live
Port: 443
URL: https://stage-football-api.hyper.live

First seen 2025-10-26 02:01
Last seen 2026-02-15 20:26
Open for 112 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3a9f982a58c73dfa7bd9baebf1d1876bbbb6d3315

GraphQL introspection enabled at /graphql
Types: 41 (by kind: ENUM: 2, OBJECT: 34, SCALAR: 5)
Operations:
- Query: Query | fields: competitions, me, roles, user, users
- Mutation: Mutation | fields: addCompetition, login, register, updateCompetition, updateUser
- Subscription: Subscription | fields: gameUpdated, liveScoresUpdated, newOptaEvent, newOptaEvents
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-02-15 20:26

97.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa34aa25d3bd1845eb9f5fbe7417b7bc7056509f60f

GraphQL introspection enabled at /graphql
Types: 35 (by kind: ENUM: 2, OBJECT: 28, SCALAR: 5)
Operations:
- Query: Query | fields: competitions, me, roles, user, users
- Mutation: Mutation | fields: addCompetition, login, register, updateCompetition, updateUser
- Subscription: Subscription | fields: gameUpdated, newOptaEvent, newOptaEvents
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-10-28 06:42

73.3 kBytes

Create report

Open service 2606:4700:7::60:80 · stage-football-api.hyper.live

2026-01-26 15:24

HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Jan 2026 15:24:57 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Mon, 26 Jan 2026 16:24:57 GMT
Location: https://stage-football-api.hyper.live/
Set-Cookie: __cf_bm=Ptf0BOj2TV4e1iOa_.MBDn1ZmAL4oHwfjSG39Sm1_ME-1769441097-1.0.1.1-LjBjqQTUcp2xVeurl_Ddx6qgOL.58ew2tifNw6APjmxAUui1uXDx4Z2hHcVOs11RrL_xfkjvwVLTdXVwZMw.Xmy7JJcX3YzRhtALiROVTKo; path=/; expires=Mon, 26-Jan-26 15:54:57 GMT; domain=.stage-football-api.hyper.live; HttpOnly
Server: cloudflare
CF-RAY: 9c4105299d126568-AMS
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 2a06:98c1:58::60:8443 · stage-football-api.hyper.live

2026-01-26 15:24

HTTP/1.1 522 
Date: Mon, 26 Jan 2026 15:25:17 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: cloudflare
CF-RAY: 9c41052eea9930db-FRA
alt-svc: h3=":8443"; ma=86400


error code: 522

Found 2026-01-26 by HttpPlugin

Create report

Open service 2606:4700:7::60:443 · stage-football-api.hyper.live

2026-01-26 15:24

HTTP/1.1 404 Not Found
Date: Mon, 26 Jan 2026 15:24:57 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
CF-RAY: 9c41052b397441e7-EWR
vary: Origin, Accept-Encoding
content-security-policy: default-src 'none'
x-content-type-options: nosniff
x-do-app-origin: 57ba559f-e6ba-11ec-b1dc-0c42a19a82a7
Cache-Control: private
x-do-orig-status: 404
cf-cache-status: MISS
Set-Cookie: __cf_bm=LrsUBW3xuvgWdsYntLqffL1VT7Q6gTHkAGeBNgELh4g-1769441097-1.0.1.1-QfMIMLQG1TFTHF9PWqvIQYHWz52KLAZJ1zTXfeLgL2_Ulxopnx9rrDqb0FeKURnPJEcKV6OAnx_e59WayIKFCjMP1BSxqsw0DIpuyLzUgLc; path=/; expires=Mon, 26-Jan-26 15:54:57 GMT; domain=.stage-football-api.hyper.live; HttpOnly; Secure; SameSite=None
Server: cloudflare
alt-svc: h3=":443"; ma=86400

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 2606:4700:7::60:8443 · stage-football-api.hyper.live

2026-01-26 15:24

HTTP/1.1 522 
Date: Mon, 26 Jan 2026 15:25:16 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: cloudflare
CF-RAY: 9c4105255a136e57-YYZ
alt-svc: h3=":8443"; ma=86400


error code: 522

Found 2026-01-26 by HttpPlugin

Create report

Open service 162.159.140.98:80 · stage-football-api.hyper.live

2026-01-26 15:24

HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Jan 2026 15:24:55 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Mon, 26 Jan 2026 16:24:55 GMT
Location: https://stage-football-api.hyper.live/
Set-Cookie: __cf_bm=zrgOc_dsVdtsEWydpAYSbQdgLHo_lBjFaxxQ9faD.Qk-1769441095-1.0.1.1-JUiKWTHsjXqLZg1Q0Kzg9R2bGWPpKTckvsDLyutsy9uCEX93t1MJkKw2iISXcdna3kXloM5xsZyGYuNI3iOhaqyYxNKx1IVLPYeuUckJI9Q; path=/; expires=Mon, 26-Jan-26 15:54:55 GMT; domain=.stage-football-api.hyper.live; HttpOnly
Server: cloudflare
CF-RAY: 9c41051f9f9cd07a-LHR
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 162.159.140.98:8443 · stage-football-api.hyper.live

2026-01-26 15:24

HTTP/1.1 522 
Date: Mon, 26 Jan 2026 15:25:14 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: cloudflare
CF-RAY: 9c41051a1a7d0da9-LHR
alt-svc: h3=":8443"; ma=86400


error code: 522

Found 2026-01-26 by HttpPlugin

Create report

Open service 2a06:98c1:58::60:80 · stage-football-api.hyper.live

2026-01-26 15:24

HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Jan 2026 15:24:56 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Mon, 26 Jan 2026 16:24:56 GMT
Location: https://stage-football-api.hyper.live/
Set-Cookie: __cf_bm=rsDNFF2a1sFZ88rB8_xnGteCs65kR60TcrBArksTbpA-1769441096-1.0.1.1-gs4fOFlKbfZeetmFWae7c4Rzu4bwwyyjujVLygtcyriLZfsFIPpGZ3fsNcmhSYOP93B4_jZ513xjIv9AtlcunvtvxGBkuiNw316tdCTZ_7E; path=/; expires=Mon, 26-Jan-26 15:54:56 GMT; domain=.stage-football-api.hyper.live; HttpOnly
Server: cloudflare
CF-RAY: 9c410523498f5d38-SIN
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 2a06:98c1:58::60:443 · stage-football-api.hyper.live

2026-01-26 15:24

HTTP/1.1 404 Not Found
Date: Mon, 26 Jan 2026 15:24:53 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
CF-RAY: 9c410511681ec598-EWR
vary: Origin, Accept-Encoding
content-security-policy: default-src 'none'
x-content-type-options: nosniff
x-do-app-origin: 57ba559f-e6ba-11ec-b1dc-0c42a19a82a7
Cache-Control: private
x-do-orig-status: 404
cf-cache-status: MISS
Set-Cookie: __cf_bm=5bovS95QW2s0XsQ_DSp7WZgKvvchB924jXTpO790XBY-1769441093-1.0.1.1-UISAMSJf5Kkd_kHbJxuOF40x4T2VUvtBzzFBaYqrPs17IWBHg2UQAaY9M39zYFiKYgKjN8Db6_z2vanEmVGG2QNP6nKoNS_Bw.ntovxYqq0; path=/; expires=Mon, 26-Jan-26 15:54:53 GMT; domain=.stage-football-api.hyper.live; HttpOnly; Secure; SameSite=None
Server: cloudflare
alt-svc: h3=":443"; ma=86400

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 162.159.140.98:443 · stage-football-api.hyper.live

2026-01-26 15:24

HTTP/1.1 404 Not Found
Date: Mon, 26 Jan 2026 15:24:54 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
CF-RAY: 9c41051648ced389-FRA
vary: Origin, Accept-Encoding
content-security-policy: default-src 'none'
x-content-type-options: nosniff
x-do-app-origin: 57ba559f-e6ba-11ec-b1dc-0c42a19a82a7
Cache-Control: private
x-do-orig-status: 404
cf-cache-status: MISS
Set-Cookie: __cf_bm=A7473SzUmLLt6HF0AwAAh5cKR07i2AYIgA_OLRrmHR8-1769441094-1.0.1.1-kpC0fPq4mo24ZGt7TzNinDKmftY0137Uy0uafRMkRBhL55jIjHQnloi5rv7mNnbs46.4PoU4tyEJtCqEFcHP3eNAXVYNoIu0o0PFPoIjo5w; path=/; expires=Mon, 26-Jan-26 15:54:54 GMT; domain=.stage-football-api.hyper.live; HttpOnly; Secure; SameSite=None
Server: cloudflare
alt-svc: h3=":443"; ma=86400

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 172.66.0.96:443 · stage-football-api.hyper.live

2026-01-26 15:24

HTTP/1.1 404 Not Found
Date: Mon, 26 Jan 2026 15:24:54 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
CF-RAY: 9c410517ddec069b-EWR
vary: Origin, Accept-Encoding
content-security-policy: default-src 'none'
x-content-type-options: nosniff
x-do-app-origin: 57ba559f-e6ba-11ec-b1dc-0c42a19a82a7
Cache-Control: private
x-do-orig-status: 404
cf-cache-status: MISS
Set-Cookie: __cf_bm=9MLE4q3jou1wcIqvos6G5rBO.CsfQkCsI.3UuGeOqds-1769441094-1.0.1.1-wOsTe6dqlJ0hbDENDiH93EEUfKwOFDzAwbAdNtDAUleyQvtRaYHSmIs1rkU8K6sDkgFqRKmKZVHAPjFB2wB20ZxPyctn6r_0Sndw2Dt32us; path=/; expires=Mon, 26-Jan-26 15:54:54 GMT; domain=.stage-football-api.hyper.live; HttpOnly; Secure; SameSite=None
Server: cloudflare
alt-svc: h3=":443"; ma=86400

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 172.66.0.96:80 · stage-football-api.hyper.live

2026-01-26 15:24

HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Jan 2026 15:24:54 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Mon, 26 Jan 2026 16:24:54 GMT
Location: https://stage-football-api.hyper.live/
Set-Cookie: __cf_bm=_YZcTe_8EgEcARgMB7nrWcoRy6UkVZaNskqyGopuw1s-1769441094-1.0.1.1-w3asr8bqGl8bTbeX.pMv4IchvK0cGuEGht6oVgf.x5ZFDHhUmEYfuiZ6GPSG1ie_Xj_dJ8DRhz2D7gB__ZXDMpLDn1qnR.AWIWHPOrrKJr0; path=/; expires=Mon, 26-Jan-26 15:54:54 GMT; domain=.stage-football-api.hyper.live; HttpOnly
Server: cloudflare
CF-RAY: 9c410519f96082a6-EWR
alt-svc: h3=":443"; ma=86400

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 172.66.0.96:8443 · stage-football-api.hyper.live

2026-01-26 15:24

HTTP/1.1 522 
Date: Mon, 26 Jan 2026 15:25:11 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: cloudflare
CF-RAY: 9c41050a5fd6a364-SJC
alt-svc: h3=":8443"; ma=86400


error code: 522

Found 2026-01-26 by HttpPlugin

Create report

stage-football-api.hyper.live

Fingerprint:

b1557109a9f0d32c6b76de6adb193e94ac2b3b1621a0dd81b459ff82ecb02ad4

CN:

stage-football-api.hyper.live

Key:

ECDSA-256

Issuer:

E8

Not before:

2026-01-26 14:16

Not after:

2026-04-26 14:16

Domain summary

stage-football-api.hyper.live 13

1 recorded

IP summary

2606:4700:7::60 1 2a06:98c1:58::60 1 162.159.140.98 1 172.66.0.96 1

4 recorded

© 2026 LeakIX v2.0.49
About LeakIX - Credits - Take-down and blacklist requests - Security issues - Terms and conditions - Cookie policy - Legal notice