LeakIX - Host staging-admin.feedbackforward.org

Domain staging-admin.feedbackforward.org

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 99.83.151.71
Domain: staging-admin.feedbackforward.org
Port: 80
URL: http://staging-admin.feedbackforward.org

First seen 2025-11-21 05:09
Last seen 2026-01-02 14:27
Open for 42 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3400105ec05482f709bb2e5e59b271c805a001e70

GraphQL introspection enabled at /graphql
Types: 207 (by kind: ENUM: 16, INPUT_OBJECT: 43, INTERFACE: 2, OBJECT: 138, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 14:27

391.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3181a27e89b7baf4c851ec869ce672cf448945614

GraphQL introspection enabled at /graphql
Types: 202 (by kind: ENUM: 13, INPUT_OBJECT: 41, INTERFACE: 2, OBJECT: 138, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-16 13:28

389.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b4b02ad4aa531518a03d4c5d11f6cf68b7f2d088

GraphQL introspection enabled at /graphql
Types: 194 (by kind: ENUM: 13, INPUT_OBJECT: 40, INTERFACE: 2, OBJECT: 131, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-11-30 22:16

378.2 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.132.87
Domain: staging-admin.feedbackforward.org
Port: 443
URL: https://staging-admin.feedbackforward.org

First seen 2025-11-21 05:09
Last seen 2026-01-02 09:08
Open for 42 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3400105ec05482f709bb2e5e59b271c805a001e70

GraphQL introspection enabled at /graphql
Types: 207 (by kind: ENUM: 16, INPUT_OBJECT: 43, INTERFACE: 2, OBJECT: 138, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 09:08

391.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3181a27e89b7baf4c851ec869ce672cf448945614

GraphQL introspection enabled at /graphql
Types: 202 (by kind: ENUM: 13, INPUT_OBJECT: 41, INTERFACE: 2, OBJECT: 138, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-16 10:59

389.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b4b02ad4aa531518a03d4c5d11f6cf68b7f2d088

GraphQL introspection enabled at /graphql
Types: 194 (by kind: ENUM: 13, INPUT_OBJECT: 40, INTERFACE: 2, OBJECT: 131, SCALAR: 8)
Operations:
- Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group
- Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-08 08:16

378.2 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-11-21 05:09

Create report

Open service 99.83.151.71:80 · staging-admin.feedbackforward.org

2026-01-09 07:22

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 114
Content-Type: application/json; charset=utf-8
Date: Fri, 09 Jan 2026 07:23:52 GMT
Etag: W/"72-lPjDBOtR2CV80iEGKUX2sWd6D7Y"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=WrQE1%2BIsdBnxVqW%2Be%2B4TngPC%2BZwleCII748a4vzOayE%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767943432"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=WrQE1%2BIsdBnxVqW%2Be%2B4TngPC%2BZwleCII748a4vzOayE%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767943432"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"statusCode":404,"timestamp":"2026-01-09T07:23:52.154Z","path":"/","message":"Cannot GET /","errors":"Not Found"}

Found 2026-01-09 by HttpPlugin

Create report

Open service 13.248.132.87:443 · staging-admin.feedbackforward.org

2026-01-09 05:10

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 114
Content-Type: application/json; charset=utf-8
Date: Fri, 09 Jan 2026 05:10:30 GMT
Etag: W/"72-Cu6jL79QZowHotHy6BCAh4cjTRw"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=6No6%2FMK5a289vkanvJhyuCU4xqsHB4l80%2FVLHFQaGgw%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767935430"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=6No6%2FMK5a289vkanvJhyuCU4xqsHB4l80%2FVLHFQaGgw%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767935430"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"statusCode":404,"timestamp":"2026-01-09T05:10:30.972Z","path":"/","message":"Cannot GET /","errors":"Not Found"}

Found 2026-01-09 by HttpPlugin

Create report

Open service 99.83.151.71:80 · staging-admin.feedbackforward.org

2026-01-02 14:27

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 114
Content-Type: application/json; charset=utf-8
Date: Fri, 02 Jan 2026 14:27:18 GMT
Etag: W/"72-MOeLNzunyx/Of/WrZyxvCUg1x6w"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=2UvnPVdtCZ364fillIduwcnCZ1uarBefCeYNq%2FYrM70%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767364038"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=2UvnPVdtCZ364fillIduwcnCZ1uarBefCeYNq%2FYrM70%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767364038"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"statusCode":404,"timestamp":"2026-01-02T14:27:18.759Z","path":"/","message":"Cannot GET /","errors":"Not Found"}

Found 2026-01-02 by HttpPlugin

Create report

Open service 13.248.132.87:443 · staging-admin.feedbackforward.org

2026-01-02 09:08

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 114
Content-Type: application/json; charset=utf-8
Date: Fri, 02 Jan 2026 09:08:23 GMT
Etag: W/"72-5D7k8rILksQ0rMO6bjcpIK9XOnE"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=v9HJ6nWvswqaDSY2xwF7qBkR0lUUxIUR3R1MZnjfsA0%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767344903"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=v9HJ6nWvswqaDSY2xwF7qBkR0lUUxIUR3R1MZnjfsA0%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767344903"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"statusCode":404,"timestamp":"2026-01-02T09:08:23.965Z","path":"/","message":"Cannot GET /","errors":"Not Found"}

Found 2026-01-02 by HttpPlugin

Create report

Open service 99.83.151.71:80 · staging-admin.feedbackforward.org

2025-12-23 02:41

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 114
Content-Type: application/json; charset=utf-8
Date: Tue, 23 Dec 2025 02:41:12 GMT
Etag: W/"72-CXP9Z2z7bXg1nu57aMB+8XrYFlc"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=xijNlrtXmqVqW7OwFKqseXduNOJLiwNQ%2FiM1qvDa%2Fe0%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766457672"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=xijNlrtXmqVqW7OwFKqseXduNOJLiwNQ%2FiM1qvDa%2Fe0%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766457672"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"statusCode":404,"timestamp":"2025-12-23T02:41:12.219Z","path":"/","message":"Cannot GET /","errors":"Not Found"}

Found 2025-12-23 by HttpPlugin

Create report

Open service 13.248.132.87:443 · staging-admin.feedbackforward.org

2025-12-23 01:17

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 114
Content-Type: application/json; charset=utf-8
Date: Tue, 23 Dec 2025 01:17:30 GMT
Etag: W/"72-33ugLtvML8eWJxSBTN8j15CxUnI"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=gx6F4hCC7l8f%2FlQLGtUZX2WolUtVz2Q968XGC%2F8yzo0%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766452650"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=gx6F4hCC7l8f%2FlQLGtUZX2WolUtVz2Q968XGC%2F8yzo0%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766452650"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"statusCode":404,"timestamp":"2025-12-23T01:17:30.163Z","path":"/","message":"Cannot GET /","errors":"Not Found"}

Found 2025-12-23 by HttpPlugin

Create report

Open service 99.83.151.71:80 · staging-admin.feedbackforward.org

2025-12-20 13:23

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 114
Content-Type: application/json; charset=utf-8
Date: Sat, 20 Dec 2025 13:23:56 GMT
Etag: W/"72-uEsKUsdYo0e8vVcT6p9Gydh+avI"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=o%2Bm%2BRgRPS%2FCLJyBRN%2FSWHuCRg48gmNwC%2F3pTuNjnIvk%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766237036"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=o%2Bm%2BRgRPS%2FCLJyBRN%2FSWHuCRg48gmNwC%2F3pTuNjnIvk%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766237036"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"statusCode":404,"timestamp":"2025-12-20T13:23:56.938Z","path":"/","message":"Cannot GET /","errors":"Not Found"}

Found 2025-12-20 by HttpPlugin

Create report

staging-admin.feedbackforward.org

Fingerprint:

922efb1565c79be9f41d2a99b7087b928230378faebea031c6d2a601e546870c

CN:

staging-admin.feedbackforward.org

Key:

RSA-2048

Issuer:

R12

Not before:

2025-11-21 04:10

Not after:

2026-02-19 04:10

Domain summary

staging-admin.feedbackforward.org 13

1 recorded

IP summary

99.83.151.71 1 13.248.132.87 1 75.2.97.79 1

3 recorded