LeakIX - Host donauer.pt

Domain donauer.pt

Germany

Hetzner Online GmbH

Software information

AmazonS3

tcp/443

CloudFront

tcp/80

nginx nginx

tcp/443 tcp/80

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 195.201.113.74
Domain: bo.donauer.pt
Port: 443
URL: https://bo.donauer.pt

First seen 2025-11-13 11:45
Last seen 2025-12-30 09:04
Open for 46 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa39c3ed546ec598ab6367f95c8ae08c4baa8b8594c
```
GraphQL introspection enabled at /graphql
Types: 138 (by kind: ENUM: 2, INPUT_OBJECT: 51, OBJECT: 79, SCALAR: 6)
Operations:
- Query: Query | fields: admin, adminSchema, allAdmins, initialized, me
- Mutation: Mutation | fields: createAdmin, deleteAdmins, editAdmin, login, signup
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2025-12-30 09:04
  
  166.0 kBytes
Create report

Open service 195.201.113.74:80 · bo.donauer.pt

2026-01-12 13:03

HTTP/1.1 302 Found
Server: nginx
Date: Mon, 12 Jan 2026 13:03:23 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 44
Connection: close
X-Powered-By: Express
Location: https://bo.donauer.pt/
Vary: Accept


Found. Redirecting to https://bo.donauer.pt/

Found 2 days ago by HttpPlugin

Create report

Open service 195.201.113.74:443 · bo.donauer.pt

2026-01-12 13:03

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Jan 2026 13:03:24 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 1153
Connection: close
Content-Security-Policy: default-src 'self';script-src 'self' *.gstatic.com *.google.com 'unsafe-eval' https://bo.donauer.pt;connect-src 'self' blob: https://bo.donauer.pt;img-src 'self' data: blob: *.amazonaws.com https://bo.donauer.pt;style-src 'self' 'unsafe-inline' *.googleapis.com https://bo.donauer.pt;font-src 'self' *.googleapis.com *.gstatic.com https://bo.donauer.pt;frame-src 'self' *.google.com blob:;base-uri 'self';block-all-mixed-content;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests
Cross-Origin-Embedder-Policy: unsafe-none
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
X-DNS-Prefetch-Control: off
Expect-CT: max-age=0
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
Origin-Agent-Cluster: ?1
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer
X-XSS-Protection: 0
Vary: Origin
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Wed, 13 Aug 2025 15:25:23 GMT
ETag: W/"481-198a40932b8"

Page title: React App

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Web site created using create-react-app"/><link rel="preconnect" href="https://fonts.googleapis.com"/><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin/><link href="https://fonts.googleapis.com/css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900&display=swap" rel="stylesheet"/><link href="https://fonts.googleapis.com/css2?family=Raleway:wght@100;200;300;400;500;600;700;800;900&display=swap" rel="stylesheet"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>React App</title><link href="/static/css/124.15506354.chunk.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div><script src="/static/js/runtime-main.ed8a190f.js"></script><script src="/static/js/124.e83fa055.chunk.js"></script><script src="/static/js/main.b4cb739d.chunk.js"></script></body></html>

Found 2 days ago by HttpPlugin

Create report

Open service 195.201.113.74:80 · frontend.infra.donauer.pt

2026-01-11 16:46

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Jan 2026 16:46:58 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 293026
Connection: close
X-Powered-By: Next.js
ETag: "478a2-TamYAA918d+k4g1utk9/FUyYm2A"
Cache-Control: s-maxage=10, stale-while-revalidate
Vary: Accept-Encoding

Page title: Donauer - Energia Solar é o que nos move.

<!DOCTYPE html><html lang="pt"><head><link rel="stylesheet" data-href="https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;600;700&amp;display=optional"/><link rel="stylesheet" data-href="https://fonts.googleapis.com/css2?family=PT+Sans:wght@400;700&amp;display=optional"/><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin /><meta charSet="utf-8"/><meta name="viewport" content="initial-scale=1.0, width=device-width"/><title>Donauer - Energia Solar é o que nos move.</title><meta name="title" property="title" content="Donauer - Energia Solar é o que nos move."/><meta property="fb:app_id"/><meta name="description" property="description" content="Há mais de 15 anos a desenvolver um portefólio de soluções de energia renovável para criar um amanhã mais sustentável."/><meta property="og:type" content="website"/><meta property="og:url" content="http://localhost:8000/"/><meta property="og:title" content="Donauer - Energia Solar é o que nos move."/><meta property="og:description" content="Há mais de 15 anos a desenvolver um portefólio de soluções de energia renovável para criar um amanhã mais sustentável."/><meta property="og:image" content="http://localhost:8000/images/donauer-logo@2x.png"/><meta property="twitter:card" content="summary_large_image"/><meta property="twitter:url" content="http://localhost:8000/"/><meta property="twitter:title" content="Donauer - Energia Solar é o que nos move."/><meta property="twitter:description" content="Há mais de 15 anos a desenvolver um portefólio de soluções de energia renovável para criar um amanhã mais sustentável."/><meta property="twitter:image" content="http://localhost:8000/images/donauer-logo@2x.png"/><link rel="icon" type="ico" sizes="16x16" href="/favicon.ico"/><link rel="mask-icon" href="/safari-pinned-tab.svg" color="#000000"/><meta name="msapplication-TileColor" content="#8CC63F"/><meta name="theme-color" content="#8CC63F"/><meta name="next-head-count" content="20"/><link rel="preload" href="/_next/static/css/6337faeec80a480a6146.css" as="style"/><link rel="stylesheet" href="/_next/static/css/6337faeec80a480a6146.css" data-n-p=""/><link rel="preload" href="/_next/static/css/597ef3d539d5d76a7668.css" as="style"/><link rel="stylesheet" href="/_next/static/css/597ef3d539d5d76a7668.css" data-n-p=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-a40ef1678bae11e696dba45124eadd70.js"></script><script src="/_next/static/chunks/webpack-08d254eb2dd69a322d40.js" defer=""></script><script src="/_next/static/chunks/framework-106d25c2ed81dc45938c.js" defer=""></script><script src="/_next/static/chunks/main-931ecbb6ec856fd62ca8.js" defer=""></script><script src="/_next/static/chunks/pages/_app-f85567f15b0cca5cc680.js" defer=""></script><script src="/_next/static/chunks/6402-eeaf8f0af0b2b4e8f4e5.js" defer=""></script><script src="/_next/static/chunks/8229-6766e76c90dff394367f.js" defer=""></script><script src="/_next/static/chunks/6066-38ff2431a4b2de489ea7.js" defer=""></script><script src="/_next/static/chunks/7428-047027501dfee8b91325.js" defer=""></script><script src="/_next/static/chunks/9320-666ed3bf22cbcf11ffb9.js" defer=""></script><script src="/_next/static/chunks/pages/index-ad31537dd4808c8493e1.js" defer=""></script><script src="/_next/static/27jfAZ3Fj9w1vev0yEPwt/_buildManifest.js" defer=""></script><script src="/_next/static/27jfAZ3Fj9w1vev0yEPwt/_ssgManifest.js" defer=""></script><style data-styled="" data-styled-version="5.3.5">@font-face{font-family:'Avenir';src:url("/fonts/Avenir-Regular.otf") format('otf');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;font-weight:300;font-style:normal;}/*!sc*/
@font-face{font-family:'Avenir LT Std';src:url("/fonts/AvenirLTStd-Book.otf") format('otf');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;font-weight:300;font-style:normal;}/

Found 3 days ago by HttpPlugin

Create report

Open service 195.201.113.74:443 · frontend.infra.donauer.pt

2026-01-11 16:46

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Jan 2026 16:46:57 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 293026
Connection: close
X-Powered-By: Next.js
ETag: "478a2-TamYAA918d+k4g1utk9/FUyYm2A"
Cache-Control: s-maxage=10, stale-while-revalidate
Vary: Accept-Encoding

Page title: Donauer - Energia Solar é o que nos move.

<!DOCTYPE html><html lang="pt"><head><link rel="stylesheet" data-href="https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;600;700&amp;display=optional"/><link rel="stylesheet" data-href="https://fonts.googleapis.com/css2?family=PT+Sans:wght@400;700&amp;display=optional"/><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin /><meta charSet="utf-8"/><meta name="viewport" content="initial-scale=1.0, width=device-width"/><title>Donauer - Energia Solar é o que nos move.</title><meta name="title" property="title" content="Donauer - Energia Solar é o que nos move."/><meta property="fb:app_id"/><meta name="description" property="description" content="Há mais de 15 anos a desenvolver um portefólio de soluções de energia renovável para criar um amanhã mais sustentável."/><meta property="og:type" content="website"/><meta property="og:url" content="http://localhost:8000/"/><meta property="og:title" content="Donauer - Energia Solar é o que nos move."/><meta property="og:description" content="Há mais de 15 anos a desenvolver um portefólio de soluções de energia renovável para criar um amanhã mais sustentável."/><meta property="og:image" content="http://localhost:8000/images/donauer-logo@2x.png"/><meta property="twitter:card" content="summary_large_image"/><meta property="twitter:url" content="http://localhost:8000/"/><meta property="twitter:title" content="Donauer - Energia Solar é o que nos move."/><meta property="twitter:description" content="Há mais de 15 anos a desenvolver um portefólio de soluções de energia renovável para criar um amanhã mais sustentável."/><meta property="twitter:image" content="http://localhost:8000/images/donauer-logo@2x.png"/><link rel="icon" type="ico" sizes="16x16" href="/favicon.ico"/><link rel="mask-icon" href="/safari-pinned-tab.svg" color="#000000"/><meta name="msapplication-TileColor" content="#8CC63F"/><meta name="theme-color" content="#8CC63F"/><meta name="next-head-count" content="20"/><link rel="preload" href="/_next/static/css/6337faeec80a480a6146.css" as="style"/><link rel="stylesheet" href="/_next/static/css/6337faeec80a480a6146.css" data-n-p=""/><link rel="preload" href="/_next/static/css/597ef3d539d5d76a7668.css" as="style"/><link rel="stylesheet" href="/_next/static/css/597ef3d539d5d76a7668.css" data-n-p=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-a40ef1678bae11e696dba45124eadd70.js"></script><script src="/_next/static/chunks/webpack-08d254eb2dd69a322d40.js" defer=""></script><script src="/_next/static/chunks/framework-106d25c2ed81dc45938c.js" defer=""></script><script src="/_next/static/chunks/main-931ecbb6ec856fd62ca8.js" defer=""></script><script src="/_next/static/chunks/pages/_app-f85567f15b0cca5cc680.js" defer=""></script><script src="/_next/static/chunks/6402-eeaf8f0af0b2b4e8f4e5.js" defer=""></script><script src="/_next/static/chunks/8229-6766e76c90dff394367f.js" defer=""></script><script src="/_next/static/chunks/6066-38ff2431a4b2de489ea7.js" defer=""></script><script src="/_next/static/chunks/7428-047027501dfee8b91325.js" defer=""></script><script src="/_next/static/chunks/9320-666ed3bf22cbcf11ffb9.js" defer=""></script><script src="/_next/static/chunks/pages/index-ad31537dd4808c8493e1.js" defer=""></script><script src="/_next/static/27jfAZ3Fj9w1vev0yEPwt/_buildManifest.js" defer=""></script><script src="/_next/static/27jfAZ3Fj9w1vev0yEPwt/_ssgManifest.js" defer=""></script><style data-styled="" data-styled-version="5.3.5">@font-face{font-family:'Avenir';src:url("/fonts/Avenir-Regular.otf") format('otf');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;font-weight:300;font-style:normal;}/*!sc*/
@font-face{font-family:'Avenir LT Std';src:url("/fonts/AvenirLTStd-Book.otf") format('otf');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;font-weight:300;font-style:normal;}/

Found 3 days ago by HttpPlugin

Create report

Open service 195.201.113.74:443 · captain.infra.donauer.pt

2026-01-11 16:46

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Jan 2026 16:46:47 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 978
Connection: close
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 01 Dec 2024 23:11:27 GMT
ETag: W/"3d2-193847e4118"

Page title: CapRover | Server Dashboard

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="shortcut icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"/><meta name="theme-color" content="#1b8ad3"/><link rel="manifest" href="/manifest.json"/><link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin><link href="https://fonts.googleapis.com/css2?family=Noto+Sans:ital,wght@0,100..900;1,100..900&family=Noto+Serif:ital,wght@0,100..900;1,100..900&display=swap" rel="stylesheet"><link href="https://fonts.googleapis.com/css2?family=Noto+Sans+Mono:wght@100..900&display=swap" rel="stylesheet"><title>CapRover | Server Dashboard</title><script defer="defer" src="/static/js/main.ecef38b1.js"></script><link href="/static/css/main.86a54358.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Found 3 days ago by HttpPlugin

Create report

Open service 195.201.113.74:80 · captain.infra.donauer.pt

2026-01-11 16:46

HTTP/1.1 302 Found
Server: nginx
Date: Sun, 11 Jan 2026 16:46:46 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 55
Connection: close
X-Powered-By: Express
Location: https://captain.infra.donauer.pt/
Vary: Accept


Found. Redirecting to https://captain.infra.donauer.pt/

Found 3 days ago by HttpPlugin

Create report

Open service 195.201.113.74:80 · api.infra.donauer.pt

2026-01-11 16:46

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sun, 11 Jan 2026 16:46:35 GMT
Content-Type: text/html
Content-Length: 138
Connection: close
Location: http://bo.donauer.pt/

Page title: 302 Found

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 3 days ago by HttpPlugin

Create report

Open service 195.201.113.74:443 · api.infra.donauer.pt

2026-01-11 16:46

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sun, 11 Jan 2026 16:46:35 GMT
Content-Type: text/html
Content-Length: 138
Connection: close
Location: http://bo.donauer.pt/

Page title: 302 Found

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 3 days ago by HttpPlugin

Create report

Open service 195.201.113.74:443 · bo.donauer.pt

2026-01-09 10:27

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Jan 2026 10:27:45 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 1153
Connection: close
Content-Security-Policy: default-src 'self';script-src 'self' *.gstatic.com *.google.com 'unsafe-eval' https://bo.donauer.pt;connect-src 'self' blob: https://bo.donauer.pt;img-src 'self' data: blob: *.amazonaws.com https://bo.donauer.pt;style-src 'self' 'unsafe-inline' *.googleapis.com https://bo.donauer.pt;font-src 'self' *.googleapis.com *.gstatic.com https://bo.donauer.pt;frame-src 'self' *.google.com blob:;base-uri 'self';block-all-mixed-content;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests
Cross-Origin-Embedder-Policy: unsafe-none
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
X-DNS-Prefetch-Control: off
Expect-CT: max-age=0
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
Origin-Agent-Cluster: ?1
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer
X-XSS-Protection: 0
Vary: Origin
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Wed, 13 Aug 2025 15:25:23 GMT
ETag: W/"481-198a40932b8"

Page title: React App

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Web site created using create-react-app"/><link rel="preconnect" href="https://fonts.googleapis.com"/><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin/><link href="https://fonts.googleapis.com/css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900&display=swap" rel="stylesheet"/><link href="https://fonts.googleapis.com/css2?family=Raleway:wght@100;200;300;400;500;600;700;800;900&display=swap" rel="stylesheet"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>React App</title><link href="/static/css/124.15506354.chunk.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div><script src="/static/js/runtime-main.ed8a190f.js"></script><script src="/static/js/124.e83fa055.chunk.js"></script><script src="/static/js/main.b4cb739d.chunk.js"></script></body></html>

Found 2026-01-09 by HttpPlugin