LeakIX - Host onrr.gov

Domain onrr.gov

United States

SERVICENOW-WAVE

Software information

CloudFront

tcp/80

snow_adc

tcp/443 tcp/80

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.84.152.35
Domain: onrr.gov
Port: 443
URL: https://onrr.gov

First seen 2025-10-22 18:45
Last seen 2026-01-05 00:29
Open for 74 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa315e543184b4349fc6445e7c8d74e52bedc1cb16b

GraphQL introspection enabled at /graphql
Types: 308 (by kind: ENUM: 3, INPUT_OBJECT: 56, OBJECT: 235, SCALAR: 9, UNION: 5)
Operations:
- Query: Query | fields: events, events_aggregated, events_by_id, events_by_version, expansion_panel_block_label
- Mutation: Mutation | fields: create_pages_page_blocks_item, create_pages_page_blocks_items, update_pages_page_blocks_batch, update_pages_page_blocks_item, update_pages_page_blocks_items
- Subscription: Subscription | fields: directus_flows_mutated, directus_folders_mutated, directus_revisions_mutated, events_mutated, expansion_panel_block_label_mutated
Directives: deprecated, include, skip (total: 3)

Readable stores: 0

Found on 2026-01-05 00:29

648.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3a3582009be61832b36fb66818d13349574088ecb

GraphQL introspection enabled at /graphql
Types: 292 (by kind: ENUM: 3, INPUT_OBJECT: 53, OBJECT: 223, SCALAR: 9, UNION: 4)
Operations:
- Query: Query | fields: announcements, announcements_aggregated, announcements_by_id, announcements_by_version, card_blocks
- Mutation: Mutation | fields: create_pages_page_blocks_item, create_pages_page_blocks_items, update_pages_page_blocks_batch, update_pages_page_blocks_item, update_pages_page_blocks_items
- Subscription: Subscription | fields: Interest_Oil_and_Gas_mutated, announcements_mutated, card_blocks_mutated, contacts_mutated, content_blocks_mutated
Directives: deprecated, include, skip (total: 3)

Readable stores: 0

Found on 2025-12-13 14:44

612.9 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 18.66.192.129
Domain: www.onrr.gov
Port: 443
URL: https://www.onrr.gov

First seen 2025-11-07 17:20
Last seen 2026-01-02 10:42
Open for 55 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa315e543184b4349fc6445e7c8d74e52bedc1cb16b

GraphQL introspection enabled at /graphql
Types: 308 (by kind: ENUM: 3, INPUT_OBJECT: 56, OBJECT: 235, SCALAR: 9, UNION: 5)
Operations:
- Query: Query | fields: events, events_aggregated, events_by_id, events_by_version, expansion_panel_block_label
- Mutation: Mutation | fields: create_pages_page_blocks_item, create_pages_page_blocks_items, update_pages_page_blocks_batch, update_pages_page_blocks_item, update_pages_page_blocks_items
- Subscription: Subscription | fields: directus_flows_mutated, directus_folders_mutated, directus_revisions_mutated, events_mutated, expansion_panel_block_label_mutated
Directives: deprecated, include, skip (total: 3)

Readable stores: 0

Found on 2026-01-02 10:42

648.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3a3582009be61832b36fb66818d13349574088ecb

GraphQL introspection enabled at /graphql
Types: 292 (by kind: ENUM: 3, INPUT_OBJECT: 53, OBJECT: 223, SCALAR: 9, UNION: 4)
Operations:
- Query: Query | fields: announcements, announcements_aggregated, announcements_by_id, announcements_by_version, card_blocks
- Mutation: Mutation | fields: create_pages_page_blocks_item, create_pages_page_blocks_items, update_pages_page_blocks_batch, update_pages_page_blocks_item, update_pages_page_blocks_items
- Subscription: Subscription | fields: Interest_Oil_and_Gas_mutated, announcements_mutated, card_blocks_mutated, contacts_mutated, content_blocks_mutated
Directives: deprecated, include, skip (total: 3)

Readable stores: 0

Found on 2025-12-14 05:37

612.9 kBytes

Create report

Open service 149.96.184.223:443 · emarf.onrr.gov

2026-01-10 16:00

HTTP/1.1 302 Found
Server: snow_adc
Date: Sat, 10 Jan 2026 16:00:59 GMT
Content-Length: 0
Connection: close
Set-Cookie: BIGipServerpool_bsee=95a836d1a14928b7b395eff3221d2785; httponly; secure; samesite=None; path=/
Set-Cookie: JSESSIONID=DF1BE27E3434EF4A441102476D290715; Path=/; HttpOnly; Secure; SameSite=None
Server-Timing: sem_wait;dur=0, sesh_wait;dur=0
X-Frame-Options: SAMEORIGIN
Set-Cookie: glide_user=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: glide_user_session=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: glide_user_route=glide.00fddb108731900b1105d2d37191a4b0; Max-Age=2147483647; Expires=Thu, 28-Jan-2094 19:15:06 GMT; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: glide_node_id_for_js=7db4e137810944452a72e87b869b603cf14a3a2ecdddc625f91ff54fa538532c; Path=/; Secure; SameSite=None
X-Is-Logged-In: false
X-Transaction-ID: 7c0139ee9752
Location: https://emarf.onrr.gov/emarf
Strict-Transport-Security: max-age=63072000; includeSubDomains

Found 2026-01-10 by HttpPlugin

Create report

Open service 149.96.184.223:80 · emarf.onrr.gov

2026-01-10 16:00

HTTP/1.1 301 Moved Permanently
Server: snow_adc
Date: Sat, 10 Jan 2026 16:00:58 GMT
Content-Type: text/html
Content-Length: 165
Connection: close
Location: https://emarf.onrr.gov/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>snow_adc</center>
</body>
</html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 149.96.184.223:80 · onboarding.onrr.gov

2026-01-10 16:00

HTTP/1.1 301 Moved Permanently
Server: snow_adc
Date: Sat, 10 Jan 2026 16:00:58 GMT
Content-Type: text/html
Content-Length: 165
Connection: close
Location: https://onboarding.onrr.gov/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>snow_adc</center>
</body>
</html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 149.96.184.223:443 · onboarding.onrr.gov

2026-01-10 16:00

HTTP/1.1 302 Found
Server: snow_adc
Date: Sat, 10 Jan 2026 16:00:59 GMT
Content-Length: 0
Connection: close
Set-Cookie: BIGipServerpool_bsee=95a836d1a14928b7b395eff3221d2785; httponly; secure; samesite=None; path=/
Set-Cookie: JSESSIONID=C5514B4AA4EF09BB82EEDCBF9AB47197; Path=/; HttpOnly; Secure; SameSite=None
Server-Timing: sem_wait;dur=0, sesh_wait;dur=0
X-Frame-Options: SAMEORIGIN
Set-Cookie: glide_user=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: glide_user_session=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: glide_user_route=glide.00fddb108731900b1105d2d37191a4b0; Max-Age=2147483647; Expires=Thu, 28-Jan-2094 19:15:06 GMT; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: glide_node_id_for_js=7db4e137810944452a72e87b869b603cf14a3a2ecdddc625f91ff54fa538532c; Path=/; Secure; SameSite=None
X-Is-Logged-In: false
X-Transaction-ID: 3801356e9752
Location: https://onboarding.onrr.gov/onboarding
Strict-Transport-Security: max-age=63072000; includeSubDomains

Found 2026-01-10 by HttpPlugin

Create report

Open service 149.96.184.223:80 · help.onrr.gov

2026-01-10 16:00

HTTP/1.1 301 Moved Permanently
Server: snow_adc
Date: Sat, 10 Jan 2026 16:00:58 GMT
Content-Type: text/html
Content-Length: 165
Connection: close
Location: https://help.onrr.gov/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>snow_adc</center>
</body>
</html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 149.96.184.223:443 · help.onrr.gov

2026-01-10 16:00

HTTP/1.1 302 Found
Server: snow_adc
Date: Sat, 10 Jan 2026 16:00:59 GMT
Content-Length: 0
Connection: close
Set-Cookie: BIGipServerpool_bsee=95a836d1a14928b7b395eff3221d2785; httponly; secure; samesite=None; path=/
Set-Cookie: JSESSIONID=321CFF182ACB374155F76B2DA123A356; Path=/; HttpOnly; Secure; SameSite=None
Server-Timing: sem_wait;dur=0, sesh_wait;dur=0
X-Frame-Options: SAMEORIGIN
Set-Cookie: glide_user=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: glide_user_session=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: glide_user_route=glide.00fddb108731900b1105d2d37191a4b0; Max-Age=2147483647; Expires=Thu, 28-Jan-2094 19:15:06 GMT; Path=/; HttpOnly; Secure; SameSite=None
Set-Cookie: glide_node_id_for_js=7db4e137810944452a72e87b869b603cf14a3a2ecdddc625f91ff54fa538532c; Path=/; Secure; SameSite=None
X-Is-Logged-In: false
X-Transaction-ID: b401bdee9752
Location: /auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Flogin.microsoftonline.com%2F0693b5ba-4b18-4d7b-9341-f32f400a5494%2Fsaml2%3FSAMLRequest%3DjVJLj5swEP4ryHfAEF6xQqQ0UdVI2220SXvozcCQWDJj6jFs%252B%252B9LSFa7vUS9WfY38728ItnpuBebwV3wBX4NQM773WkkcXsp2WBRGEmKBMoOSLhaHDdfn0QccNFb40xtNPM2RGCdMrg1SEMH9gh2VDV8f3kq2cW5nkQYXkD3gUFrg7MZQ5RjL88QNIZ5u4lXobwueIdrc1YYdKq2hkzrDGqFENSmC3m2XFRpJf2kigo%252FafLKXy6SyG8XcZtwLtNkmYSzAeZ9NraG2V%252FJWqkJmLfflez4vC3iNAeZZ1ET5XFTNC2XbdNmSSyrqkiLdALSQRKpEd5HiQbYIzmJrmQxjzOfR37ET1EmOBfpMsgj%252FpN5h3synxQ2Cs%252BPY6xuIBJfTqeDf%252Fh2PM0LRtWAfZ7Q%252F5PgD7A0pzctZOvVbF7Mau3HQh8LkW8tsvUbY0UAAd3KRPN6P9G1hlX4keXO2Yur4v3uYLSq%252F3gbrc3r1oJ0kwtnB5gL6aR7LOR6oxq%252FnaHCWYmkAB0L13fSf7%252Fs%252Bi8%253D%26RelayState%3Dhttps%253A%252F%252Fhelp.onrr.gov%252Fnavpage.do
Strict-Transport-Security: max-age=63072000; includeSubDomains

Found 2026-01-10 by HttpPlugin

Create report

Open service 99.84.152.35:443 · onrr.gov

2026-01-09 22:56

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 1346
Connection: close
Date: Fri, 09 Jan 2026 22:50:46 GMT
X-Frame-Options: DENY
Accept-Ranges: bytes
ETag: "69614f14-542"
Last-Modified: Fri, 09 Jan 2026 18:55:16 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Powered-By: Express
X-Vcap-Request-Id: 19a633c1-da47-4cd0-7acc-78884d36d607
Vary: Accept-Encoding,Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 e3a1c60ff7fddfed742d9400bd9fdf9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P13
X-Amz-Cf-Id: 5OwnJpgrrtyNujAUQ-wOVUO0JANGCXcIq0szIb5mitkt2V1QTLVluw==
Age: 321


<!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="icon" type="image/x-icon" href="/favicon.ico"><link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin><link href="https://fonts.googleapis.com/css2?family=Lato:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&display=swap" rel="stylesheet"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@latest/css/materialdesignicons.min.css"><script src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.7/MathJax.js?config=TeX-MML-AM_CHTML" async></script><script defer="defer" type="module" src="/js/chunk-vendors.eaa49163.js"></script><script defer="defer" type="module" src="/js/app.4410ec2a.js"></script><link href="/css/chunk-vendors.b13c3e2a.css" rel="stylesheet"><link href="/css/app.0c0aee14.css" rel="stylesheet"><script defer="defer" src="/js/chunk-vendors-legacy.d233e581.js" nomodule></script><script defer="defer" src="/js/app-legacy.81d83ece.js" nomodule></script></head><body><a href="#main-content" class="skip-link">Skip to main content</a><noscript><strong>We're sorry but onrr-frontend-app-vue doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div></body></html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 18.66.192.129:443 · www.onrr.gov

2026-01-09 15:37

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 1346
Connection: close
Date: Thu, 08 Jan 2026 15:45:32 GMT
X-Frame-Options: DENY
Accept-Ranges: bytes
Last-Modified: Tue, 16 Dec 2025 18:39:06 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Powered-By: Express
X-Vcap-Request-Id: 4cedadd5-7fa2-4c64-725e-517d968c29d4
ETag: "6941a74a-542"
Vary: Accept-Encoding,Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 dcfe318aa268be733627ea7884246be4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
X-Amz-Cf-Id: WRu2kRnc-v1ZJN3IRlhBzw4S7qgPHo_wK5b1Z-QvGFbpII57GTXicQ==
Age: 85914


<!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="icon" type="image/x-icon" href="/favicon.ico"><link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin><link href="https://fonts.googleapis.com/css2?family=Lato:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&display=swap" rel="stylesheet"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@mdi/font@latest/css/materialdesignicons.min.css"><script src="https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.7/MathJax.js?config=TeX-MML-AM_CHTML" async></script><script defer="defer" type="module" src="/js/chunk-vendors.eaa49163.js"></script><script defer="defer" type="module" src="/js/app.08bb6dcc.js"></script><link href="/css/chunk-vendors.b13c3e2a.css" rel="stylesheet"><link href="/css/app.0c0aee14.css" rel="stylesheet"><script defer="defer" src="/js/chunk-vendors-legacy.d233e581.js" nomodule></script><script defer="defer" src="/js/app-legacy.53e6fb92.js" nomodule></script></head><body><a href="#main-content" class="skip-link">Skip to main content</a><noscript><strong>We're sorry but onrr-frontend-app-vue doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id="app"></div></body></html>

Found 2026-01-09 by HttpPlugin