LeakIX - Host develop-api.local-drive.xyz

Domain develop-api.local-drive.xyz

United States

AMAZON-02

Software information

Heroku

tcp/443

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 35.71.179.82
Domain: develop-api.local-drive.xyz
Port: 443
URL: https://develop-api.local-drive.xyz

First seen 2025-11-18 01:18
Last seen 2025-12-30 14:52
Open for 42 days

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d64be75dbe2819cc6e3ce0408fff81c3451cb19c93

GraphQL introspection enabled at /api/graphql
Types: 327 (by kind: ENUM: 52, INPUT_OBJECT: 109, INTERFACE: 1, OBJECT: 154, SCALAR: 9, UNION: 2)
Operations:
- Query: RootQueryType | fields: browseAudienceByParent, defaultColorTheme, facebookAdAccounts, facebookBrowseTargetingLists, facebookCampaignEstimate
- Mutation: RootMutationType | fields: activateSubscription, adminUpdateAccount, apiErrorsLogsCsv, blockCorporate, cancelCampaignInstance
- Subscription: RootSubscriptionType | fields: notifications
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-30 14:52

382.1 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d64be75dbe2819cc6e3ce0408fff81c345b2de8907

GraphQL introspection enabled at /api/graphql
Types: 327 (by kind: ENUM: 52, INPUT_OBJECT: 109, INTERFACE: 1, OBJECT: 154, SCALAR: 9, UNION: 2)
Operations:
- Query: RootQueryType | fields: browseAudienceByParent, defaultColorTheme, facebookAdAccounts, facebookBrowseTargetingLists, facebookCampaignEstimate
- Mutation: RootMutationType | fields: activateSubscription, adminUpdateAccount, apiErrorsLogsCsv, blockCorporate, cancelCampaignInstance
- Subscription: RootSubscriptionType | fields: notifications
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-12-12 13:36

381.6 kBytes

Create report

Open service 35.71.179.82:443 · develop-api.local-drive.xyz

2026-01-09 10:12

HTTP/1.1 404 Not Found
Cache-Control: max-age=0, private, must-revalidate
Content-Length: 23
Content-Type: application/json; charset=utf-8
Date: Fri, 09 Jan 2026 10:12:40 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=TXQ2E9VZEewTl6qFWGxLG%2B%2BjFZGryNllrYjSKR9%2BTNY%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767953561"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=TXQ2E9VZEewTl6qFWGxLG%2B%2BjFZGryNllrYjSKR9%2BTNY%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767953561"
Server: Heroku
Strict-Transport-Security: max-age=31536000
Via: 1.1 heroku-router
X-Request-Id: 2a833f16-218f-7e92-e12e-4d993ab8113d
Connection: close


"Internal server error"

Found 2026-01-09 by HttpPlugin

Create report

Open service 35.71.179.82:443 · develop-api.local-drive.xyz

2025-12-30 14:52

HTTP/1.1 404 Not Found
Cache-Control: max-age=0, private, must-revalidate
Content-Length: 23
Content-Type: application/json; charset=utf-8
Date: Tue, 30 Dec 2025 14:52:24 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=3cTh56AFlJFTcr04XNVfY%2BTZ30HSpxj8gCul1YQCq84%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767106344"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=3cTh56AFlJFTcr04XNVfY%2BTZ30HSpxj8gCul1YQCq84%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767106344"
Server: Heroku
Strict-Transport-Security: max-age=31536000
Via: 1.1 heroku-router
X-Request-Id: d69016f3-d108-8f19-7757-b59ccc02bdb9
Connection: close


"Internal server error"

Found 2025-12-30 by HttpPlugin

Create report

Open service 35.71.179.82:443 · develop-api.local-drive.xyz

2025-12-23 08:09

HTTP/1.1 404 Not Found
Cache-Control: max-age=0, private, must-revalidate
Content-Length: 23
Content-Type: application/json; charset=utf-8
Date: Tue, 23 Dec 2025 08:09:00 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=9yI9xhDZsgNVR3ViqQAPnc2V1I2scx0G4WNoVM65ClE%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766477341"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=9yI9xhDZsgNVR3ViqQAPnc2V1I2scx0G4WNoVM65ClE%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766477341"
Server: Heroku
Strict-Transport-Security: max-age=31536000
Via: 1.1 heroku-router
X-Request-Id: 44c2aef2-fdd0-db11-9981-b925d76783ba
Connection: close


"Internal server error"

Found 2025-12-23 by HttpPlugin

Create report

Open service 35.71.179.82:443 · develop-api.local-drive.xyz

2025-12-20 15:14

HTTP/1.1 404 Not Found
Cache-Control: max-age=0, private, must-revalidate
Content-Length: 23
Content-Type: application/json; charset=utf-8
Date: Sat, 20 Dec 2025 15:14:40 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Ko0lsW2k552TxrDx3uitaJrbTiWJNFGbwXg7R9znnsc%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766243680"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Ko0lsW2k552TxrDx3uitaJrbTiWJNFGbwXg7R9znnsc%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766243680"
Server: Heroku
Strict-Transport-Security: max-age=31536000
Via: 1.1 heroku-router
X-Request-Id: dbb7557d-69e2-bab1-7069-078bb3999801
Connection: close


"Internal server error"

Found 2025-12-20 by HttpPlugin

Create report

develop-api.local-drive.xyz

Fingerprint:

ecd5181e635e7d0e50c064570be7149e78a01a195a2eab3d6392e9889eaa9c1a

CN:

develop-api.local-drive.xyz

Key:

RSA-2048

Issuer:

R12

Not before:

2025-11-18 00:20

Not after:

2026-02-16 00:20

Domain summary

develop-api.local-drive.xyz 5

1 recorded

IP summary

35.71.179.82 2

1 recorded