LeakIX - Host cms.carcollect.com

Domain cms.carcollect.com

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 15.197.253.240
Domain: cms.carcollect.com
Port: 443
URL: https://cms.carcollect.com

First seen 2025-10-17 00:41
Last seen 2026-01-02 12:04
Open for 77 days

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
Found on 2026-01-02 12:04

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6191b7d2f898e4a7d1b0046e5f98d0080c0a44270

GraphQL introspection enabled at /api/graphql
Types: 2318 (by kind: ENUM: 89, INPUT_OBJECT: 643, OBJECT: 1571, SCALAR: 8, UNION: 7)
Operations:
- Query: Query | fields: GlobalNewsitem, GlobalNewsitems, countGlobalNewsitems, docAccessGlobalNewsitem, versionGlobalNewsitem
- Mutation: Mutation | fields: createGlobalNewsitem, createLocalNewsitem, deleteGlobalNewsitem, restoreVersionGlobalNewsitem, updateGlobalNewsitem
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-28 15:41

1.9 MBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 52.223.53.203
Domain: cms.carcollect.com
Port: 80
URL: http://cms.carcollect.com

First seen 2025-10-17 00:41
Last seen 2026-01-02 05:04
Open for 77 days

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
Found on 2026-01-02 05:04

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6191b7d2f898e4a7d1b0046e5f98d0080c0a44270

GraphQL introspection enabled at /api/graphql
Types: 2318 (by kind: ENUM: 89, INPUT_OBJECT: 643, OBJECT: 1571, SCALAR: 8, UNION: 7)
Operations:
- Query: Query | fields: GlobalNewsitem, GlobalNewsitems, countGlobalNewsitems, docAccessGlobalNewsitem, versionGlobalNewsitem
- Mutation: Mutation | fields: createGlobalNewsitem, createLocalNewsitem, deleteGlobalNewsitem, restoreVersionGlobalNewsitem, updateGlobalNewsitem
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-01 00:46

1.9 MBytes

Create report

Open service 15.197.253.240:443 · cms.carcollect.com

2026-01-09 08:17

HTTP/1.1 302 Found
Content-Length: 28
Content-Type: text/plain; charset=utf-8
Date: Fri, 09 Jan 2026 08:17:45 GMT
Location: /admin
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=bKwHiZaTMGJ2uzkVfDErqaIuyK3uCtH6hfCZgJhCbvo%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767946665"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=bKwHiZaTMGJ2uzkVfDErqaIuyK3uCtH6hfCZgJhCbvo%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767946665"
Server: Heroku
Vary: Accept
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Found. Redirecting to /admin

Found 2026-01-09 by HttpPlugin

Create report

Open service 52.223.53.203:80 · cms.carcollect.com

2026-01-09 05:31

HTTP/1.1 302 Found
Content-Length: 28
Content-Type: text/plain; charset=utf-8
Date: Fri, 09 Jan 2026 05:32:26 GMT
Location: /admin
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=qsQG5zvZ900D8Ag1srVqLRWwKr5S6XVEvhwIFIqtZcM%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767936746"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=qsQG5zvZ900D8Ag1srVqLRWwKr5S6XVEvhwIFIqtZcM%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767936746"
Server: Heroku
Vary: Accept
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Found. Redirecting to /admin

Found 2026-01-09 by HttpPlugin

Create report

Open service 15.197.253.240:443 · cms.carcollect.com

2026-01-02 12:04

HTTP/1.1 302 Found
Content-Length: 28
Content-Type: text/plain; charset=utf-8
Date: Fri, 02 Jan 2026 12:04:49 GMT
Location: /admin
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=CfNkdgpnduqz6dK17W7to98bYbjDJFDLNtDVRp58jwQ%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767355489"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=CfNkdgpnduqz6dK17W7to98bYbjDJFDLNtDVRp58jwQ%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767355489"
Server: Heroku
Vary: Accept
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Found. Redirecting to /admin

Found 2026-01-02 by HttpPlugin

Create report

Open service 52.223.53.203:80 · cms.carcollect.com

2026-01-02 05:04

HTTP/1.1 302 Found
Content-Length: 28
Content-Type: text/plain; charset=utf-8
Date: Fri, 02 Jan 2026 05:04:09 GMT
Location: /admin
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=j5%2FA80aNBEtWKoQrTCjK1ctBpIQysq1J3qWqbLO5%2BY4%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767330249"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=j5%2FA80aNBEtWKoQrTCjK1ctBpIQysq1J3qWqbLO5%2BY4%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767330249"
Server: Heroku
Vary: Accept
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Found. Redirecting to /admin

Found 2026-01-02 by HttpPlugin

Create report

Open service 15.197.253.240:443 · cms.carcollect.com

2025-12-22 19:48

HTTP/1.1 302 Found
Content-Length: 28
Content-Type: text/plain; charset=utf-8
Date: Mon, 22 Dec 2025 19:48:24 GMT
Location: /admin
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=KTkeIf6psj2Vhf64rw8ObO%2B854LJAHN8JJkaMEJI96w%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766432904"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=KTkeIf6psj2Vhf64rw8ObO%2B854LJAHN8JJkaMEJI96w%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766432904"
Server: Heroku
Vary: Accept
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Found. Redirecting to /admin

Found 2025-12-22 by HttpPlugin

Create report

Open service 52.223.53.203:80 · cms.carcollect.com

2025-12-22 16:39

HTTP/1.1 302 Found
Content-Length: 28
Content-Type: text/plain; charset=utf-8
Date: Mon, 22 Dec 2025 16:39:24 GMT
Location: /admin
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Zub%2Bt3U0L75uyYhzt9SSEg7KIWD3myL0IFYV8WVtVoE%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766421564"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Zub%2Bt3U0L75uyYhzt9SSEg7KIWD3myL0IFYV8WVtVoE%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766421564"
Server: Heroku
Vary: Accept
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Found. Redirecting to /admin

Found 2025-12-22 by HttpPlugin

Create report

Open service 15.197.253.240:443 · cms.carcollect.com

2025-12-21 05:16

HTTP/1.1 302 Found
Content-Length: 28
Content-Type: text/plain; charset=utf-8
Date: Sun, 21 Dec 2025 05:16:50 GMT
Location: /admin
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Cxv6aMRpc%2Bq%2BE%2BojsPSkjViuY8XTfgd5HHXf95Zpd34%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766294210"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Cxv6aMRpc%2Bq%2BE%2BojsPSkjViuY8XTfgd5HHXf95Zpd34%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766294210"
Server: Heroku
Vary: Accept
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Found. Redirecting to /admin

Found 2025-12-21 by HttpPlugin

Create report

Open service 52.223.53.203:80 · cms.carcollect.com

2025-12-20 15:32

HTTP/1.1 302 Found
Content-Length: 28
Content-Type: text/plain; charset=utf-8
Date: Sat, 20 Dec 2025 15:33:01 GMT
Location: /admin
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=1Qlmj9xBZB4WtzCWCRKFFURtXpAY1dlffUPX53NirZo%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766244781"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=1Qlmj9xBZB4WtzCWCRKFFURtXpAY1dlffUPX53NirZo%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766244781"
Server: Heroku
Vary: Accept
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Found. Redirecting to /admin

Found 2025-12-20 by HttpPlugin

Create report

Open service 15.197.253.240:443 · cms.carcollect.com

2025-12-19 08:39

HTTP/1.1 302 Found
Content-Length: 28
Content-Type: text/plain; charset=utf-8
Date: Fri, 19 Dec 2025 08:39:58 GMT
Location: /admin
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=hBgSPM%2BJJkvuumcgEBR7ewgA1p9xzxHJM00I1MgdgPE%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766133598"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=hBgSPM%2BJJkvuumcgEBR7ewgA1p9xzxHJM00I1MgdgPE%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766133598"
Server: Heroku
Vary: Accept
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Found. Redirecting to /admin

Found 2025-12-19 by HttpPlugin

Create report

cms.carcollect.com

Fingerprint:

ac838477dee1845d5c6f436febc87f87734254b7ca720e6138f270a3eac20591

CN:

cms.carcollect.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-16 01:33

Not after:

2026-03-16 01:33

Domain summary

cms.carcollect.com 12

1 recorded

IP summary

15.197.253.240 1 52.223.53.203 1

2 recorded