nginx
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dec863f59258a9f72eacd4d9eb5bbc5a957af4f2
GraphQL introspection enabled at /graphql Types: 134 (by kind: ENUM: 10, INPUT_OBJECT: 12, OBJECT: 107, SCALAR: 5) Operations: - Query: Query | fields: analytics, assets, authentication, comments, contribute - Mutation: Mutation | fields: analytics, assets, authentication, comments, groups - Subscription: Subscription | fields: loggingLiveTrail Directives: auth, cacheControl, deprecated, include, rateLimit, skip, specifiedBy (total: 7)
Open service 192.0.78.227:80 · wiraya.com
2026-01-12 13:45
HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 12 Jan 2026 13:45:43 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://wiraya.com/ Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=ams, cache;desc=BYPASS;dur=0.0 Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 192.0.78.227:443 · wiraya.com
2026-01-12 13:45
HTTP/1.1 200 OK Server: nginx Date: Mon, 12 Jan 2026 13:45:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: Cookie Link: <https://wiraya.com/wp-json/>; rel="https://api.w.org/" Link: <https://wiraya.com/wp-json/wp/v2/pages/6>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PeP1Db-6>; rel=shortlink X-ac: 23.jfk _atomic_dca HIT Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=jfk, cache;desc=HIT;dur=2.0
Open service 192.0.78.129:443 · wiraya.com
2026-01-12 13:45
HTTP/1.1 200 OK Server: nginx Date: Mon, 12 Jan 2026 13:45:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: Cookie Link: <https://wiraya.com/wp-json/>; rel="https://api.w.org/" Link: <https://wiraya.com/wp-json/wp/v2/pages/6>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PeP1Db-6>; rel=shortlink Last-Modified: Mon, 12 Jan 2026 13:45:42 GMT Cache-Control: max-age=300, must-revalidate X-nananana: Batcache-Set X-ac: 2.lhr _atomic_ams HIT Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=lhr, cache;desc=HIT;dur=2.0
Open service 192.0.78.129:80 · wiraya.com
2026-01-12 13:45
HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 12 Jan 2026 13:45:43 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://wiraya.com/ Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=hhn, cache;desc=BYPASS;dur=0.0 Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 192.0.78.129:443 · wiraya.com
2026-01-09 08:41
HTTP/1.1 200 OK Server: nginx Date: Fri, 09 Jan 2026 08:42:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: Cookie Link: <https://wiraya.com/wp-json/>; rel="https://api.w.org/" Link: <https://wiraya.com/wp-json/wp/v2/pages/6>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PeP1Db-6>; rel=shortlink X-ac: 28.sin _atomic_bur HIT Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=sin, cache;desc=HIT;dur=1.0
Open service 138.201.54.81:443 · wiki.wiraya.com
2026-01-09 08:35
HTTP/1.1 302 Found X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-UA-Compatible: IE=edge Referrer-Policy: same-origin Strict-Transport-Security: max-age=300; includeSubDomains Content-Language: en Set-Cookie: loginRedirect=%2F; Max-Age=900; Path=/; Expires=Fri, 09 Jan 2026 08:50:12 GMT Location: /login Vary: Accept, Accept-Encoding Content-Type: text/plain; charset=utf-8 Content-Length: 28 Date: Fri, 09 Jan 2026 08:35:12 GMT Connection: close Found. Redirecting to /login
Open service 138.201.54.81:443 · wiki.wiraya.com
2026-01-02 10:13
HTTP/1.1 302 Found X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-UA-Compatible: IE=edge Referrer-Policy: same-origin Strict-Transport-Security: max-age=300; includeSubDomains Content-Language: en Set-Cookie: loginRedirect=%2F; Max-Age=900; Path=/; Expires=Fri, 02 Jan 2026 10:28:20 GMT Location: /login Vary: Accept, Accept-Encoding Content-Type: text/plain; charset=utf-8 Content-Length: 28 Date: Fri, 02 Jan 2026 10:13:20 GMT Connection: close Found. Redirecting to /login
Open service 192.0.78.129:443 · wiraya.com
2026-01-02 09:54
HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Jan 2026 09:54:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding Last-Modified: Thu, 18 Dec 2025 04:44:56 GMT Cache-Control: max-age=110, must-revalidate X-nananana: Batcache-Hit X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: Cookie Link: <https://wiraya.com/wp-json/>; rel="https://api.w.org/" Link: <https://wiraya.com/wp-json/wp/v2/pages/6>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PeP1Db-6>; rel=shortlink X-ac: 28.sin _atomic_bur UPDATING Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=sin, cache;desc=UPDATING;dur=1.0
Open service 138.201.54.81:443 · wiki.wiraya.com
2025-12-23 08:09
HTTP/1.1 302 Found X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-UA-Compatible: IE=edge Referrer-Policy: same-origin Strict-Transport-Security: max-age=300; includeSubDomains Content-Language: en Set-Cookie: loginRedirect=%2F; Max-Age=900; Path=/; Expires=Tue, 23 Dec 2025 08:24:06 GMT Location: /login Vary: Accept, Accept-Encoding Content-Type: text/plain; charset=utf-8 Content-Length: 28 Date: Tue, 23 Dec 2025 08:09:06 GMT Connection: close Found. Redirecting to /login
Open service 192.0.78.129:443 · wiraya.com
2025-12-22 17:23
HTTP/1.1 200 OK Server: nginx Date: Mon, 22 Dec 2025 17:23:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding Last-Modified: Sat, 20 Dec 2025 20:03:05 GMT Cache-Control: max-age=254, must-revalidate X-nananana: Batcache-Hit X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: Cookie Link: <https://wiraya.com/wp-json/>; rel="https://api.w.org/" Link: <https://wiraya.com/wp-json/wp/v2/pages/6>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PeP1Db-6>; rel=shortlink X-ac: 2.lhr _atomic_ams UPDATING Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=lhr, cache;desc=UPDATING;dur=1.0
Open service 192.0.78.129:443 · wiraya.com
2025-12-20 23:11
HTTP/1.1 200 OK Server: nginx Date: Sat, 20 Dec 2025 23:11:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: Cookie Link: <https://wiraya.com/wp-json/>; rel="https://api.w.org/" Link: <https://wiraya.com/wp-json/wp/v2/pages/6>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PeP1Db-6>; rel=shortlink Last-Modified: Sat, 13 Dec 2025 15:24:21 GMT Cache-Control: max-age=300, must-revalidate X-nananana: Batcache-Set X-ac: 23.jfk _atomic_dca UPDATING Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=jfk, cache;desc=UPDATING;dur=1.0
Open service 138.201.54.81:443 · wiki.wiraya.com
2025-12-20 15:14
HTTP/1.1 302 Found X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-UA-Compatible: IE=edge Referrer-Policy: same-origin Strict-Transport-Security: max-age=300; includeSubDomains Content-Language: en Set-Cookie: loginRedirect=%2F; Max-Age=900; Path=/; Expires=Sat, 20 Dec 2025 15:29:07 GMT Location: /login Vary: Accept, Accept-Encoding Content-Type: text/plain; charset=utf-8 Content-Length: 28 Date: Sat, 20 Dec 2025 15:14:07 GMT Connection: close Found. Redirecting to /login
Open service 192.0.78.129:443 · wiraya.com
2025-12-19 00:51
HTTP/1.1 200 OK Server: nginx Date: Fri, 19 Dec 2025 00:51:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding Last-Modified: Thu, 18 Dec 2025 07:29:55 GMT Cache-Control: max-age=290, must-revalidate X-nananana: Batcache-Hit X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: Cookie Link: <https://wiraya.com/wp-json/>; rel="https://api.w.org/" Link: <https://wiraya.com/wp-json/wp/v2/pages/6>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PeP1Db-6>; rel=shortlink X-ac: 2.lhr _atomic_ams UPDATING Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=lhr, cache;desc=UPDATING;dur=1.0