LeakIX - Host api.tundrafinops.com

Domain api.tundrafinops.com

CLOUDFLARENET

Software information

cloudflare

tcp/443

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 172.67.166.111
Domain: api.tundrafinops.com
Port: 443
URL: https://api.tundrafinops.com

First seen 2025-11-28 20:07
Last seen 2026-01-30 23:47
Open for 63 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa38de69f4372bc32c1e6bb7bc201bad8d2eba950ae

GraphQL introspection enabled at /graphql
Types: 97 (by kind: ENUM: 13, INPUT_OBJECT: 41, OBJECT: 34, SCALAR: 9)
Operations:
- Query: Query | fields: allUsers, clientInvoice, clientInvoices, isAuthenticated, users
- Mutation: Mutation | fields: enroll, login, logout, refreshToken, register
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-30 23:47

134.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3addebffb228d4df9081e403a8772db0a24bab056

GraphQL introspection enabled at /graphql
Types: 96 (by kind: ENUM: 13, INPUT_OBJECT: 41, OBJECT: 33, SCALAR: 9)
Operations:
- Query: Query | fields: allUsers, clientInvoice, clientInvoices, isAuthenticated, users
- Mutation: Mutation | fields: enroll, login, logout, refreshToken, register
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 09:02

133.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e479b46423b89b68fe3728b7d20f3a6fdb0fb117

GraphQL introspection enabled at /graphql
Types: 91 (by kind: ENUM: 13, INPUT_OBJECT: 38, OBJECT: 32, SCALAR: 8)
Operations:
- Query: Query | fields: allUsers, clientInvoice, clientInvoices, isAuthenticated, users
- Mutation: Mutation | fields: enroll, login, logout, refreshToken, register
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-27 02:39

130.5 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa384de85bdf2255b5f830d1912a7d8fb42b9c16b1e

GraphQL introspection enabled at /graphql
Types: 89 (by kind: ENUM: 13, INPUT_OBJECT: 37, OBJECT: 31, SCALAR: 8)
Operations:
- Query: Query | fields: allUsers, isAuthenticated, user, userByEmail, users
- Mutation: Mutation | fields: enroll, login, logout, refreshToken, register
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-16 23:28

127.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3fbb7eb4b0ca697c9b993b41cb0899e5408ae9434

GraphQL introspection enabled at /graphql
Types: 88 (by kind: ENUM: 13, INPUT_OBJECT: 36, OBJECT: 31, SCALAR: 8)
Operations:
- Query: Query | fields: allUsers, isAuthenticated, user, userByEmail, users
- Mutation: Mutation | fields: enroll, login, logout, refreshToken, register
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-06 17:55

126.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2d336e7665e92fd16d16b4c7b286ad1e3172d4e0b

GraphQL introspection enabled at /graphql/api
Types: 88 (by kind: ENUM: 13, INPUT_OBJECT: 36, OBJECT: 31, SCALAR: 8)
Operations:
- Query: Query | fields: allUsers, isAuthenticated, user, userByEmail, users
- Mutation: Mutation | fields: enroll, login, logout, refreshToken, register
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-28 20:07

126.0 kBytes

Create report

Open service 172.67.166.111:443 · api.tundrafinops.com

2026-01-23 05:58

HTTP/1.1 404 Not Found
Date: Fri, 23 Jan 2026 05:59:00 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 63
Connection: close
access-control-allow-credentials: true
etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
vary: Origin
x-powered-by: Express
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=13,cfOrigin;dur=1092
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VY05qerULAWwPlLLmltUrNvGpftuz7WPsbnUnBREZ4GJC6GoYazaZ4uCWMe71I7Ux2Aax3N8pm3fz1os6N03ITNxrW%2BWRwqT6ZRfREN9UG3WCnM6"}]}
Server: cloudflare
CF-RAY: 9c250ffaeb6bc189-SIN
alt-svc: h3=":443"; ma=86400


{"message":"Cannot GET /","error":"Not Found","statusCode":404}

Found 2026-01-23 by HttpPlugin

Create report

tundrafinops.com*.tundrafinops.com

Fingerprint:

3dd25d1038e594341de6f2390c8d132e023bb0ae91e1463094a62195eaa9b002

CN:

tundrafinops.com

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-11-28 16:30

Not after:

2026-02-26 17:24

Domain summary

api.tundrafinops.com 6

1 recorded

IP summary

172.67.166.111 2 104.21.82.251 1

2 recorded