LeakIX - Host api.dev.dininghood.com

Domain api.dev.dininghood.com

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 15.197.149.68
Domain: api.dev.dininghood.com
Port: 443
URL: https://api.dev.dininghood.com

First seen 2025-10-21 15:37
Last seen 2026-01-02 02:09
Open for 72 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e9883400c1ee02c4acbc40c07cab18d7bf1e08ed

GraphQL introspection enabled at /graphql
Types: 261 (by kind: ENUM: 40, INPUT_OBJECT: 56, INTERFACE: 1, OBJECT: 151, SCALAR: 12, UNION: 1)
Operations:
- Query: Query | fields: applicationUser, applicationUsers, image, images, membershipProducts
- Mutation: Mutation | fields: createUser, followOffers, unfollowOffers, updateMe, uploadImage
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 1
requestLocation (args: none) : city=Frankfurt am Main latitude=50.1169 longitude=8.6837

Found on 2026-01-02 02:09

444.0 kBytes 3 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e9883400c1ee02c4acbc40c07cab18d76d07b52b

GraphQL introspection enabled at /graphql
Types: 261 (by kind: ENUM: 40, INPUT_OBJECT: 56, INTERFACE: 1, OBJECT: 151, SCALAR: 12, UNION: 1)
Operations:
- Query: Query | fields: applicationUser, applicationUsers, image, images, membershipProducts
- Mutation: Mutation | fields: createUser, followOffers, unfollowOffers, updateMe, uploadImage
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-12-27 05:48

442.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3833b35026140ec92f2bcfc86ea59dfa9fb48107d

GraphQL introspection enabled at /graphql
Types: 256 (by kind: ENUM: 40, INPUT_OBJECT: 54, INTERFACE: 1, OBJECT: 148, SCALAR: 12, UNION: 1)
Operations:
- Query: Query | fields: applicationUser, applicationUsers, image, images, membershipProducts
- Mutation: Mutation | fields: createUser, followOffers, unfollowOffers, updateMe, uploadImage
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-12-23 05:55

427.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3fad474daa1f161cab7dbffbedb693a413d770ab5

GraphQL introspection enabled at /graphql
Types: 254 (by kind: ENUM: 40, INPUT_OBJECT: 53, INTERFACE: 1, OBJECT: 147, SCALAR: 12, UNION: 1)
Operations:
- Query: Query | fields: applicationUser, applicationUsers, image, images, membershipProducts
- Mutation: Mutation | fields: createUser, followOffers, unfollowOffers, updateMe, uploadImage
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-11-30 17:26

426.3 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-11-26 07:20

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa360b3895138ec95930ff9c05d8f727d6a6c1fa9dc

GraphQL introspection enabled at /graphql
Types: 252 (by kind: ENUM: 38, INPUT_OBJECT: 53, INTERFACE: 1, OBJECT: 147, SCALAR: 12, UNION: 1)
Operations:
- Query: Query | fields: applicationUser, applicationUsers, image, images, membershipProducts
- Mutation: Mutation | fields: createUser, followOffers, unfollowOffers, updateMe, uploadImage
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-11-12 03:01

424.4 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3540fd2e9a80515cbb321d0d57073300254c268b4

GraphQL introspection enabled at /graphql
Types: 237 (by kind: ENUM: 38, INPUT_OBJECT: 49, INTERFACE: 1, OBJECT: 136, SCALAR: 12, UNION: 1)
Operations:
- Query: Query | fields: applicationUser, applicationUsers, image, images, membershipProducts
- Mutation: Mutation | fields: createUser, followOffers, unfollowOffers, updateMe, uploadImage
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-11-08 16:14

398.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3474cd7572f962485c7e4bf2ff98003a839d802fa

GraphQL introspection enabled at /graphql
Types: 234 (by kind: ENUM: 36, INPUT_OBJECT: 49, INTERFACE: 1, OBJECT: 135, SCALAR: 12, UNION: 1)
Operations:
- Query: Query | fields: applicationUser, applicationUsers, image, images, membershipProducts
- Mutation: Mutation | fields: createUser, followOffers, unfollowOffers, updateMe, uploadImage
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-11-03 10:43

393.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3a29b953f2b1ea78d6be30c37439e9a5083a42582

GraphQL introspection enabled at /graphql
Types: 232 (by kind: ENUM: 37, INPUT_OBJECT: 48, INTERFACE: 1, OBJECT: 133, SCALAR: 12, UNION: 1)
Operations:
- Query: Query | fields: applicationUser, applicationUsers, image, images, membershipProducts
- Mutation: Mutation | fields: createUser, followOffers, unfollowOffers, updateMe, uploadImage
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-10-29 10:10

390.7 kBytes

Create report

Open service 15.197.149.68:443 · api.dev.dininghood.com

2026-01-08 23:41

HTTP/1.1 404 Not Found
Content-Length: 2476
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Thu, 08 Jan 2026 23:41:15 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=TgcXPANm%2BjV96JprXXaA7fl%2F%2FpRKaGeWUdKclLt42PI%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767915675"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=TgcXPANm%2BjV96JprXXaA7fl%2F%2FpRKaGeWUdKclLt42PI%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767915675"
Server: Heroku
Vary: origin, Cookie
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close

Page title: Page not found at /

<!DOCTYPE html>
<html lang="en">
<head>
  <meta http-equiv="content-type" content="text/html; charset=utf-8">
  <title>Page not found at /</title>
  <meta name="robots" content="NONE,NOARCHIVE">
  <style>
    html * { padding:0; margin:0; }
    body * { padding:10px 20px; }
    body * * { padding:0; }
    body { font-family: sans-serif; background:#eee; color:#000; }
    body > :where(header, main, footer) { border-bottom:1px solid #ddd; }
    h1 { font-weight:normal; margin-bottom:.4em; }
    h1 small { font-size:60%; color:#666; font-weight:normal; }
    table { border:none; border-collapse: collapse; width:100%; }
    td, th { vertical-align:top; padding:2px 3px; }
    th { width:12em; text-align:right; color:#666; padding-right:.5em; }
    #info { background:#f6f6f6; }
    #info ol { margin: 0.5em 4em; }
    #info ol li { font-family: monospace; }
    #summary { background: #ffc; }
    #explanation { background:#eee; border-bottom: 0px none; }
    pre.exception_value { font-family: sans-serif; color: #575757; font-size: 1.5em; margin: 10px 0 10px 0; }
  </style>
</head>
<body>
  <header id="summary">
    <h1>Page not found <small>(404)</small></h1>
    
    <table class="meta">
      <tr>
        <th scope="row">Request Method:</th>
        <td>GET</td>
      </tr>
      <tr>
        <th scope="row">Request URL:</th>
        <td>https://api.dev.dininghood.com/</td>
      </tr>
      
    </table>
  </header>

  <main id="info">
    
      <p>
      Using the URLconf defined in <code>cover.urls</code>,
      Django tried these URL patterns, in this order:
      </p>
      <ol>
        
          <li>
            
              <code>
                backofhouse/
                
              </code>
            
          </li>
        
          <li>
            
              <code>
                experiences/
                
              </code>
            
          </li>
        
          <li>
            
              <code>
                graphql
                
              </code>
            
          </li>
        
      </ol>
      <p>
        
          The empty path
        
        didn’t match any of these.
      </p>
    
  </main>

  <footer id="explanation">
    <p>
      You’re seeing this error because you have <code>DEBUG = True</code> in
      your Django settings file. Change that to <code>False</code>, and Django
      will display a standard 404 page.
    </p>
  </footer>
</body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 15.197.149.68:443 · api.dev.dininghood.com

2026-01-02 02:09

HTTP/1.1 404 Not Found
Content-Length: 2476
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Fri, 02 Jan 2026 02:09:54 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=g597p%2Fl2X7aMrJyCVDCow%2FjgtSU2J9ZYSbVbGs5OUhk%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767319794"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=g597p%2Fl2X7aMrJyCVDCow%2FjgtSU2J9ZYSbVbGs5OUhk%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767319794"
Server: Heroku
Vary: origin, Cookie
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close

Page title: Page not found at /

<!DOCTYPE html>
<html lang="en">
<head>
  <meta http-equiv="content-type" content="text/html; charset=utf-8">
  <title>Page not found at /</title>
  <meta name="robots" content="NONE,NOARCHIVE">
  <style>
    html * { padding:0; margin:0; }
    body * { padding:10px 20px; }
    body * * { padding:0; }
    body { font-family: sans-serif; background:#eee; color:#000; }
    body > :where(header, main, footer) { border-bottom:1px solid #ddd; }
    h1 { font-weight:normal; margin-bottom:.4em; }
    h1 small { font-size:60%; color:#666; font-weight:normal; }
    table { border:none; border-collapse: collapse; width:100%; }
    td, th { vertical-align:top; padding:2px 3px; }
    th { width:12em; text-align:right; color:#666; padding-right:.5em; }
    #info { background:#f6f6f6; }
    #info ol { margin: 0.5em 4em; }
    #info ol li { font-family: monospace; }
    #summary { background: #ffc; }
    #explanation { background:#eee; border-bottom: 0px none; }
    pre.exception_value { font-family: sans-serif; color: #575757; font-size: 1.5em; margin: 10px 0 10px 0; }
  </style>
</head>
<body>
  <header id="summary">
    <h1>Page not found <small>(404)</small></h1>
    
    <table class="meta">
      <tr>
        <th scope="row">Request Method:</th>
        <td>GET</td>
      </tr>
      <tr>
        <th scope="row">Request URL:</th>
        <td>https://api.dev.dininghood.com/</td>
      </tr>
      
    </table>
  </header>

  <main id="info">
    
      <p>
      Using the URLconf defined in <code>cover.urls</code>,
      Django tried these URL patterns, in this order:
      </p>
      <ol>
        
          <li>
            
              <code>
                backofhouse/
                
              </code>
            
          </li>
        
          <li>
            
              <code>
                experiences/
                
              </code>
            
          </li>
        
          <li>
            
              <code>
                graphql
                
              </code>
            
          </li>
        
      </ol>
      <p>
        
          The empty path
        
        didn’t match any of these.
      </p>
    
  </main>

  <footer id="explanation">
    <p>
      You’re seeing this error because you have <code>DEBUG = True</code> in
      your Django settings file. Change that to <code>False</code>, and Django
      will display a standard 404 page.
    </p>
  </footer>
</body>
</html>

Found 2026-01-02 by HttpPlugin