LeakIX - Host graph.travelpass.com

Domain graph.travelpass.com

CLOUDFLARENET

Software information

cloudflare

tcp/443

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 104.18.10.106
Domain: graph.travelpass.com
Port: 443
URL: https://graph.travelpass.com

First seen 2025-10-30 02:51
Last seen 2026-02-09 21:54
Open for 102 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2026-02-09 21:54

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa30332be840eebc1c8d265603f108f48d6b09d8980

GraphQL introspection enabled at /graphql
Types: 1084 (by kind: ENUM: 156, INPUT_OBJECT: 314, INTERFACE: 1, OBJECT: 600, SCALAR: 11, UNION: 2)
Operations:
- Query: Query | fields: brandsAll, parentChainsAll, providerRoomsAll, standardHotel, standardHotels
- Mutation: Mutation | fields: createHotelFlag, deleteHotelFlag, hotelOverrides, updateBrand, updateHotelFlag
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-11-29 02:37

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3441d3e72fbccc08239ee9b89f0657714b1b38cee

GraphQL introspection enabled at /graphql
Types: 1083 (by kind: ENUM: 156, INPUT_OBJECT: 313, INTERFACE: 1, OBJECT: 600, SCALAR: 11, UNION: 2)
Operations:
- Query: Query | fields: brandsAll, parentChainsAll, providerRoomsAll, standardHotel, standardHotels
- Mutation: Mutation | fields: createHotelFlag, deleteHotelFlag, hotelOverrides, updateBrand, updateHotelFlag
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-11-23 16:10

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3da841430bcd06db4c8ab31f328be149ae60bbd2c

GraphQL introspection enabled at /graphql
Types: 1082 (by kind: ENUM: 155, INPUT_OBJECT: 313, INTERFACE: 1, OBJECT: 600, SCALAR: 11, UNION: 2)
Operations:
- Query: Query | fields: brandsAll, parentChainsAll, providerRoomsAll, standardHotel, standardHotels
- Mutation: Mutation | fields: createHotelFlag, deleteHotelFlag, hotelOverrides, updateBrand, updateHotelFlag
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-11-20 18:22

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e139f9d5d523c697a0990487e58f5c095fe8aadd

GraphQL introspection enabled at /graphql
Types: 1079 (by kind: ENUM: 154, INPUT_OBJECT: 313, INTERFACE: 1, OBJECT: 598, SCALAR: 11, UNION: 2)
Operations:
- Query: Query | fields: bookingChangeHotelRoomDetails, checkBookingChangeableResponse, generalAiQuery, getAllAmenities, getBannerImages
- Mutation: Mutation | fields: bookHotel, createAddress, createHotelBooking, deleteAddress, updateAddress
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-11-16 08:08

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e139f9d5d523c6973067e0e5a048cfa32564f60f

GraphQL introspection enabled at /graphql
Types: 1079 (by kind: ENUM: 154, INPUT_OBJECT: 313, INTERFACE: 1, OBJECT: 598, SCALAR: 11, UNION: 2)
Operations:
- Query: Query | fields: generalAiQuery, getAllAmenities, kafkaTopic, kafkaTopics, success
- Mutation: Mutation | fields: callCenterAgentAnsweredColossus, createBooking, createKafkaTopic, exposeTypesColossus, webFooterColossus
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-11-14 08:59

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa38c19bbb7043cec25825ea617ef040d59ae1a1bcd

GraphQL introspection enabled at /graphql
Types: 1075 (by kind: ENUM: 153, INPUT_OBJECT: 311, INTERFACE: 1, OBJECT: 597, SCALAR: 11, UNION: 2)
Operations:
- Query: Query | fields: generalAiQuery, getAllAmenities, kafkaTopic, kafkaTopics, success
- Mutation: Mutation | fields: callCenterAgentAnsweredColossus, createBooking, createKafkaTopic, exposeTypesColossus, webFooterColossus
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-11-12 07:22

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa38c19bbb7043cec25db8389c29954c272d2fc9e84

GraphQL introspection enabled at /graphql
Types: 1075 (by kind: ENUM: 153, INPUT_OBJECT: 311, INTERFACE: 1, OBJECT: 597, SCALAR: 11, UNION: 2)
Operations:
- Query: Query | fields: brandsAll, parentChainsAll, providerRoomsAll, standardHotel, standardHotels
- Mutation: Mutation | fields: batchHotelOverrides, bulkHotelProviderContentOverrides, hotelOverrides, hotelProviderContentOverrides, updateBrand
Directives: deprecated, include, skip, specifiedBy (total: 4)

Found on 2025-11-06 12:29

1.2 MBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa38c19bbb7043cec25db8389c29954c272a0b0de7d

GraphQL introspection enabled at /graphql
Types: 1075 (by kind: ENUM: 153, INPUT_OBJECT: 311, INTERFACE: 1, OBJECT: 597, SCALAR: 11, UNION: 2)
Operations:
- Query: Query | fields: brandsAll, parentChainsAll, providerRoomsAll, standardHotel, standardHotels
- Mutation: Mutation | fields: batchHotelOverrides, bulkHotelProviderContentOverrides, hotelOverrides, hotelProviderContentOverrides, updateBrand
Directives: deprecated, include, skip, specifiedBy, tag (total: 5)

Found on 2025-11-02 18:30

1.2 MBytes

Create report

Open service 104.18.10.106:443 · graph.travelpass.com

2026-01-23 03:29

HTTP/1.1 404 Not Found
Date: Fri, 23 Jan 2026 03:29:36 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 19
Connection: close
CF-RAY: 9c24352b68d0ac87-YYZ
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Server: cloudflare


404 page not found

Found 2026-01-23 by HttpPlugin

Create report

graph.travelpass.com

Fingerprint:

5429bf7cafeea9b93550fd3cd5ac2680436121fc9ac73dfaa1c38aaed93ab982

CN:

graph.travelpass.com

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-11-28 12:54

Not after:

2026-02-26 13:54

Domain summary

graph.travelpass.com 9

1 recorded

IP summary

104.18.10.106 2 104.18.11.106 1

2 recorded