LeakIX - Host staging.hdpiano.com

Domain staging.hdpiano.com

United States

AMAZON-02

Software information

Vercel

tcp/443

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 216.150.1.1
Domain: staging.hdpiano.com
Port: 443
URL: https://staging.hdpiano.com

First seen 2025-11-27 23:17
Last seen 2025-12-06 13:21
Open for 8 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
  Found on 2025-12-06 13:21
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d640b6d8cdceab406f948b4b96f5095e49ed7f4375
```
GraphQL introspection enabled at /api/graphql
Types: 2597 (by kind: ENUM: 56, INPUT_OBJECT: 380, OBJECT: 2149, SCALAR: 8, UNION: 4)
Operations:
- Query: Query | fields: Lesson, Lessons, countLessons, docAccessLesson, versionLesson
- Mutation: Mutation | fields: createLesson, deleteLesson, duplicateLesson, restoreVersionLesson, updateLesson
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
```
  Found on 2025-12-01 14:58
  
  1.7 MBytes
Create report

Open service 216.150.1.1:443 · staging.hdpiano.com

2026-01-08 21:33

HTTP/1.1 200 OK
Accept-Ch: Sec-CH-Prefers-Color-Scheme
Age: 0
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Content-Security-Policy: frame-src 'self' https://auth.hdpiano.com https://auth.stage.hdpiano.com https://widget.trustpilot.com https://www.youtube.com https://youtube.com https://*.youtube-nocookie.com https://vercel.live https://*.vercel.live https://*.paddle.com https://www.googletagmanager.com https://*.googletagmanager.com;
Content-Type: text/html; charset=utf-8
Critical-Ch: Sec-CH-Prefers-Color-Scheme
Date: Thu, 08 Jan 2026 21:33:55 GMT
Link: </_next/static/media/0484562807a97172-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/7db6c35d839a711c-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/8888a3826f4a3af4-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/b957ea75a84b6ea7-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/eafabf029ad39a43-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
X-Matched-Path: /
X-Vercel-Cache: MISS
X-Vercel-Id: iad1::sfo1::rfp9q-1767908035193-16935c80c619
Connection: close
Transfer-Encoding: chunked

Found 2026-01-08 by HttpPlugin

Create report

Open service 216.150.1.1:443 · staging.hdpiano.com

2026-01-01 21:50

HTTP/1.1 200 OK
Accept-Ch: Sec-CH-Prefers-Color-Scheme
Age: 0
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Content-Security-Policy: frame-src 'self' https://auth.hdpiano.com https://auth.stage.hdpiano.com https://widget.trustpilot.com https://www.youtube.com https://youtube.com https://*.youtube-nocookie.com https://vercel.live https://*.vercel.live https://*.paddle.com https://www.googletagmanager.com https://*.googletagmanager.com;
Content-Type: text/html; charset=utf-8
Critical-Ch: Sec-CH-Prefers-Color-Scheme
Date: Thu, 01 Jan 2026 21:50:11 GMT
Link: </_next/static/media/0484562807a97172-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/7db6c35d839a711c-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/8888a3826f4a3af4-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/b957ea75a84b6ea7-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/eafabf029ad39a43-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
X-Matched-Path: /
X-Vercel-Cache: MISS
X-Vercel-Id: iad1::sfo1::fpztr-1767304211226-cbcd0b6ad681
Connection: close
Transfer-Encoding: chunked

Found 2026-01-01 by HttpPlugin

Create report

Open service 216.150.1.1:443 · staging.hdpiano.com

2025-12-30 05:12

HTTP/1.1 200 OK
Accept-Ch: Sec-CH-Prefers-Color-Scheme
Age: 0
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Content-Security-Policy: frame-src 'self' https://auth.hdpiano.com https://auth.stage.hdpiano.com https://widget.trustpilot.com https://www.youtube.com https://youtube.com https://*.youtube-nocookie.com https://vercel.live https://*.vercel.live https://*.paddle.com https://www.googletagmanager.com https://*.googletagmanager.com;
Content-Type: text/html; charset=utf-8
Critical-Ch: Sec-CH-Prefers-Color-Scheme
Date: Tue, 30 Dec 2025 05:12:15 GMT
Link: </_next/static/media/0484562807a97172-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/7db6c35d839a711c-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/8888a3826f4a3af4-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/b957ea75a84b6ea7-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/eafabf029ad39a43-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
X-Matched-Path: /
X-Vercel-Cache: MISS
X-Vercel-Id: fra1::sfo1::ds7v2-1767071535618-3677d279bdf9
Connection: close
Transfer-Encoding: chunked

Found 2025-12-30 by HttpPlugin

Create report

Open service 216.150.1.1:443 · staging.hdpiano.com

2025-12-22 06:07

HTTP/1.1 200 OK
Accept-Ch: Sec-CH-Prefers-Color-Scheme
Age: 0
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Content-Security-Policy: frame-src 'self' https://auth.hdpiano.com https://auth.stage.hdpiano.com https://widget.trustpilot.com https://www.youtube.com https://youtube.com https://*.youtube-nocookie.com https://vercel.live https://*.vercel.live https://*.paddle.com https://www.googletagmanager.com https://*.googletagmanager.com;
Content-Type: text/html; charset=utf-8
Critical-Ch: Sec-CH-Prefers-Color-Scheme
Date: Mon, 22 Dec 2025 06:07:56 GMT
Link: </_next/static/media/0484562807a97172-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/7db6c35d839a711c-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/8888a3826f4a3af4-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/b957ea75a84b6ea7-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/eafabf029ad39a43-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
X-Matched-Path: /
X-Vercel-Cache: MISS
X-Vercel-Id: lhr1::sfo1::8mc6d-1766383674347-0312a9e48ecc
Connection: close
Transfer-Encoding: chunked

Found 2025-12-22 by HttpPlugin

Create report

Open service 216.150.1.1:443 · staging.hdpiano.com

2025-12-20 06:39

HTTP/1.1 200 OK
Accept-Ch: Sec-CH-Prefers-Color-Scheme
Age: 0
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Content-Security-Policy: frame-src 'self' https://auth.hdpiano.com https://auth.stage.hdpiano.com https://widget.trustpilot.com https://www.youtube.com https://youtube.com https://*.youtube-nocookie.com https://vercel.live https://*.vercel.live https://*.paddle.com https://www.googletagmanager.com https://*.googletagmanager.com;
Content-Type: text/html; charset=utf-8
Critical-Ch: Sec-CH-Prefers-Color-Scheme
Date: Sat, 20 Dec 2025 06:39:50 GMT
Link: </_next/static/media/0484562807a97172-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/7db6c35d839a711c-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/8888a3826f4a3af4-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/b957ea75a84b6ea7-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/eafabf029ad39a43-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
X-Matched-Path: /
X-Vercel-Cache: MISS
X-Vercel-Id: fra1::sfo1::dl42l-1766212788708-1feb741bbd3d
Connection: close
Transfer-Encoding: chunked

Found 2025-12-20 by HttpPlugin

Create report

staging.hdpiano.com

Fingerprint:

3e80f87dcaf6b0277203ce926a1726e2f25589ac7a19fbc67fcf3bcae753f692

CN:

staging.hdpiano.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-27 22:18

Not after:

2026-02-25 22:18

Domain summary

staging.hdpiano.com 6

1 recorded

IP summary

216.150.1.1 2 216.150.16.65 1

2 recorded

Domain staging.hdpiano.com

United States

Software information

GraphQL introspection is enabled.

Create report

Create report

Create report

Create report

Create report

staging.hdpiano.com

Domain summary

IP summary