Copying my message from another forum, hope it might bring some help.

This is a long time riddle and I might have solved it, although in a somewhat of a hack-ish way and at least for newer models, but it will give you more information than just a date. This worked for my new Formula 1, on chrome based browsers (Chrome, Edge). The method is based on information that is already included in the response that TAG is sending so there is nothing illegal or fishy here.

The instructions:
1. Go to TAG's serial number and warranty checker
2. Solve the captcha on the top if you get one
3. Right click on an empty space on the page and click "Inspect" . A window will open up, usually to you right.
4. On the top choose network, and a little below it click Fetch/XHR
5. Enter you serial number and proceed as usual
6. The "Name" column contain new items now, click on the one matching the pattern https://gw.was.tagheuer.com/api/external/aftersale?searchTerm=**
7. On the right side of the window click "Response"
8. Search the data for the information you want

Older serial numbers I digged up on Google had only the warranty dates, BUT newer ones had also

• Under "productItem" there was the "productionDate", "isFake" (no) and "isUsed" (yes)
• The retailer details are under "retailer" with full name, location and contacts
• "clubMemberId" was empty

Does it work for you?

 

Thanks! !!!!! It's a 2019 production watch with the warranty activated in 2023! Weird, isn't it? Do these criminals hack this data from the TAG server?
{
"value": [
{
"id": 9481753,
"date": "2023-04-08T12:02:13.984169",
"endDate": "2025-04-08T12:02:13.984169",
"warrantyId": 9868906,
"retailerId": 33638,
"deviceId": null,
"productItemId": 26622448,
"productSku": "WAY101A.BA0746",
"productName": "WAY101A.BA0746",
"isFake": false,
"warrantyCardCode": "K4D4-DJCS-HZZG",
"serialNumber": "WZV6971",
"isReturned": false,
"distribution": "Mobile",
"lastOperationType": 1,
"sellerId": "ac590ae6-f445-4113-c53b-08d719d52ed2",
"isExported": true,
"isDuplicate": false,
"isLegacy": false,
"isCpo": false,
"hasBlockchainCertificate": false,
"soldBy": null,
"device": null,
"retailer": {
"id": 33638,
"code": "13000962",
"name": "Ray & Scott Jewellers",
"address": "The Bridge",
"addressIndications": "St Sampson",
"zip": "GY2 4QN",
"city": "Guernsey",
"isoCountry": "GB",
"latitude": "49,4834823599999",
"longitude": "-2,519576788",
"isActive": true,
"hasCpo": false,
"marketId": 976,
"market": null,
"channelId": 51,
"channel": null,
"nameRomanized": null,
"cityNameRomanized": null,
"locale": "en",
"commercialGroupName": null,
"externalPosId": null,
"posOpeningDate": "2012-01-01T00:00:00",
"posClosingDate": null,
"posStatus": "S-L02",
"posReason": null,
"posCluster": "C-A03",
"createdById": "99999999-9999-9999-9999-999999999999",
"createdBy": null,
"createdOn": "2019-07-16T20:01:52.6560282",
"updatedById": "99999999-9999-9999-9999-999999999999",
"updatedBy": null,
"updatedOn": "2019-07-16T20:01:52.6560282"
},
"seller": {
"id": "ac590ae6-f445-4113-c53b-08d719d52ed2",
"isActive": true,
"firstName": "Jeff",
"lastName": "Fox",
"userName": "jefox",
"email": "sales@rayandscott.com",
"locale": "en",
"firstNameRomanized": null,
"lastNameRomanized": null,
"privacyPolicyAcceptationDate": "2019-08-13T16:02:47.907972",
"createdOn": "2019-08-06T19:27:34.1666756",
"imageUrl": null,
"allowedChangePassword": true,
"latestLogin": "2024-01-16T15:40:44.9380999",
"roles": [],
"retailers": [],
"markets": [],
"createdById": null,
"updatedById": null,
"userCreatedBy": null,
"userUpdatedBy": null
},
"productItem": {
"id": 26622448,
"productId": 3904,
"serialNumber": "WZV6971",
"productionDate": "2020-12-09T00:00:00",
"securityCode": null,
"isFake": false,
"isUsed": true,
"isCpo": false,
"warrantyDurationMonths": null,
"product": {
"id": 3904,
"name": "WAY101A.BA0746",
"sku": "WAY101A.BA0746",
"description": "WTCH AQPRE QRTZ MG STEEL DI BLACK BR STE",
"lastUpdateDate": "2019-06-12T09:44:00",
"productFamilyId": 27,
"productTypeId": 6,
"isSerializable": true,
"iscustomizable": true,
"isWarrantyCardMandatory": true,
"imageUrl": "https://eapi.tagheuer.com/th-eapi-product-prod/assets/WAY101A.BA0746?source=was ",
"warrantyDurationMonths": 24,
"productFamily": {
"id": 27,
"code": "20",
"name": "Aquaracer",
"parentId": null,
"parent": null,
"createdById": "99999999-9999-9999-9999-999999999999",
"createdBy": null,
"createdOn": "2019-07-15T18:16:58.4286728",
"updatedById": "99999999-9999-9999-9999-999999999999",
"updatedBy": null,
"updatedOn": "2019-07-15T18:16:58.4286728"
},
"productType": null,
"createdById": "99999999-9999-9999-9999-999999999999",
"createdBy": null,
"createdOn": "2019-07-15T18:17:42.1147825",
"updatedById": "99999999-9999-9999-9999-999999999999",
"updatedBy": null,
"updatedOn": "2019-10-22T23:38:31.2683018"
},
"certificate": null,
"isValid": false,
"securityCodeVersion": null,
"createdById": "04bb2202-5bea-4344-fc78-08d72b074a8a",
"createdBy": {
"id": "04bb2202-5bea-4344-fc78-08d72b074a8a",
"isActive": false,
"firstName": "Meriem",
"lastName": "Aarab",
"userName": "maarab",
"email": "meriem.aarab@dentsuaegis.com",
"locale": null,
"firstNameRomanized": null,
"lastNameRomanized": null,
"privacyPolicyAcceptationDate": null,
"createdOn": "2019-08-27T15:57:41.2576944",
"imageUrl": null,
"allowedChangePassword": false,
"latestLogin": "2023-11-02T11:22:45.1287595",
"roles": null,
"retailers": null,
"markets": null,
"createdById": null,
"updatedById": null,
"userCreatedBy": null,
"userUpdatedBy": null
},
"createdOn": "2020-12-10T21:19:03.0212869",
"updatedById": "04bb2202-5bea-4344-fc78-08d72b074a8a",
"updatedBy": {
"id": "04bb2202-5bea-4344-fc78-08d72b074a8a",
"isActive": false,
"firstName": "Meriem",
"lastName": "Aarab",
"userName": "maarab",
"email": "meriem.aarab@dentsuaegis.com",
"locale": null,
"firstNameRomanized": null,
"lastNameRomanized": null,
"privacyPolicyAcceptationDate": null,
"createdOn": "2019-08-27T15:57:41.2576944",
"imageUrl": null,
"allowedChangePassword": false,
"latestLogin": "2023-11-02T11:22:45.1287595",
"roles": null,
"retailers": null,
"markets": null,
"createdById": null,
"updatedById": null,
"userCreatedBy": null,
"userUpdatedBy": null
},
"updatedOn": "2023-04-08T13:02:15.337056"
},
"warranty": null,
"warrantyType": "Sale Warranty",
"saleAttribute": null,
"isValid": false,
"hasD2CExtension": false,
"salesforceId": null,
"clubMemberId": null,
"isBrandOwner": false,
"transferCount": 0,
"isWebWallet": false,
"extensionStartDate": null,
"extensionEndDate": null,
"operationDate": "2023-04-08T12:02:13.984169",
"customer": null,
"createdById": "ac590ae6-f445-4113-c53b-08d719d52ed2",
"createdBy": null,
"createdOn": "2023-04-08T13:02:15.33546",
"updatedById": "ac590ae6-f445-4113-c53b-08d719d52ed2",
"updatedBy": null,
"updatedOn": "2023-04-08T18:00:52.5084458"
}
],
"isSuccess": true,
"message": null,
"code": null,
"messageData": null
}

 

This is very interesting… I’m going to give this a try later, lol. How did you end up discovering this?

 

That is very cool! It let me know the original dealer who punched the warranty before sending it to the grey-market dealer who sold me my watch.

 

This is not a hack at all. The data is present in the response from TAG's server. All we're doing is looking at all the data sent to us by TAG, instead of only the subset shown on the web page. At worst, this is data leakage on TAG's part.

My guess is that they use the same backend endpoint to support in-network dealer inquiries -- they probably have a set of dealer-only web pages that us "outsiders" aren't allowed/supposed to see.

This appears to be just laziness on the part of TAG's website programmers. If TAG really wanted to keep the data private, they should have made two data-inquiry endpoints -- one for the "customers/outsiders" and a separate one for their dealers and/or "insiders".

 

Hi. I have a question. I have carried out the operation that indicates Rsf on 3 watches that appeared in an auction. Supposedly, the watches are from the "gray market", but it catches my attention that in one of them the same name that I highlighted appeared (meriem.aarab@dentsuaegis.com), and in the other 2, the email address "was-system@b-i.com" appears linked. Do you have any explanation? Could it be that the TAG server was hacked?.