LeakIX - Host staging-api.reviewpoint.com

Domain staging-api.reviewpoint.com

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 3.33.241.96
Domain: staging-api.reviewpoint.com
Port: 443
URL: https://staging-api.reviewpoint.com

First seen 2025-11-22 00:24
Last seen 2026-01-02 03:39
Open for 41 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
  Found on 2026-01-02 03:39
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d6fcfaa9d3abc5ae913fd06a497772ba2eaa5da338
```
GraphQL introspection enabled at /api/graphql
Types: 1509 (by kind: ENUM: 10, INPUT_OBJECT: 1427, OBJECT: 65, SCALAR: 7)
Operations:
- Query: Query | fields: companyContacts, companyContactsCount, contact, contactByEmail, contactByPhoneNumber
- Mutation: Mutation | fields: changePassword, deleteOneContact, requestPasswordReset, resetPassword, updateOneOffCampaignContact
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2025-11-30 14:19
  
  2.4 MBytes
Create report
GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.213.92
Domain: staging-api.reviewpoint.com
Port: 80
URL: http://staging-api.reviewpoint.com

First seen 2025-11-22 00:24
Last seen 2026-01-02 13:18
Open for 41 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
  Found on 2026-01-02 13:18
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d6fcfaa9d3abc5ae913fd06a497772ba2eaa5da338
```
GraphQL introspection enabled at /api/graphql
Types: 1509 (by kind: ENUM: 10, INPUT_OBJECT: 1427, OBJECT: 65, SCALAR: 7)
Operations:
- Query: Query | fields: companyContacts, companyContactsCount, contact, contactByEmail, contactByPhoneNumber
- Mutation: Mutation | fields: changePassword, deleteOneContact, requestPasswordReset, resetPassword, updateOneOffCampaignContact
Directives: deprecated, include, skip, specifiedBy (total: 4)
```
  Found on 2025-11-30 13:44
  
  2.4 MBytes
Create report

Open service 3.33.241.96:443 · staging-api.reviewpoint.com

2026-01-09 19:21

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: https://staging.app.reviewpoint.com
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 19:21:53 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2BjefNNuApmhe29IFwpcZWM7QaNtww%2FwENPudAPTF6sM%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767986513"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2BjefNNuApmhe29IFwpcZWM7QaNtww%2FwENPudAPTF6sM%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767986513"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 13.248.213.92:80 · staging-api.reviewpoint.com

2026-01-09 08:55

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: https://staging.app.reviewpoint.com
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 08:56:48 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Dh2u%2B63JGv7DiVouD1uPhMghOVAsu85gN3GCj%2BsZ%2Fjc%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767949008"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Dh2u%2B63JGv7DiVouD1uPhMghOVAsu85gN3GCj%2BsZ%2Fjc%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767949008"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 3.33.241.96:443 · staging-api.reviewpoint.com

2026-01-02 03:39

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: https://staging.app.reviewpoint.com
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 03:39:33 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=v0L5H2pPvr2AiltaWi2nh9pEuL4fxg6rHC2ByY1NL94%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767325173"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=v0L5H2pPvr2AiltaWi2nh9pEuL4fxg6rHC2ByY1NL94%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767325173"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 3.33.241.96:443 · staging-api.reviewpoint.com

2025-12-30 11:14

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: https://staging.app.reviewpoint.com
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 30 Dec 2025 11:14:23 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=tASpWaNgi4B6REadVR9h9BiZsHtZc7ojVQwRXTFt5no%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767093263"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=tASpWaNgi4B6REadVR9h9BiZsHtZc7ojVQwRXTFt5no%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767093263"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 13.248.213.92:80 · staging-api.reviewpoint.com

2025-12-22 18:02

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: https://staging.app.reviewpoint.com
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 18:02:10 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=U5k8maaIoDMC1XGJjk53b9J%2BSWGX3f3XReFi5e3lg8I%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766426530"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=U5k8maaIoDMC1XGJjk53b9J%2BSWGX3f3XReFi5e3lg8I%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766426530"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 3.33.241.96:443 · staging-api.reviewpoint.com

2025-12-22 12:54

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: https://staging.app.reviewpoint.com
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 12:54:30 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=jcddk8mum5rBmCbtOJvu7RRJQzGLFDCpaVysjqvUnGw%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766408070"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=jcddk8mum5rBmCbtOJvu7RRJQzGLFDCpaVysjqvUnGw%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766408070"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 13.248.213.92:80 · staging-api.reviewpoint.com

2025-12-20 19:25

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: https://staging.app.reviewpoint.com
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 19:25:14 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=iP%2BJCYrPSnwp6u1oeQ7eOWuqM7u2E35SvAyrmQcyYPw%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766258714"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=iP%2BJCYrPSnwp6u1oeQ7eOWuqM7u2E35SvAyrmQcyYPw%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766258714"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

Open service 3.33.241.96:443 · staging-api.reviewpoint.com

2025-12-20 09:38

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: https://staging.app.reviewpoint.com
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 09:38:39 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=XjtFj61FkMmK%2FTZsuma%2FwClmQfwA9%2FXD7ahWwr9dZhY%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766223519"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=XjtFj61FkMmK%2FTZsuma%2FwClmQfwA9%2FXD7ahWwr9dZhY%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766223519"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

staging-api.reviewpoint.com

Fingerprint:

7883058191c9aa0c32ce24abea090edad4ccbe34d42905299cc7c9eedcd877c4

CN:

staging-api.reviewpoint.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-21 23:25

Not after:

2026-02-19 23:25

Domain summary

staging-api.reviewpoint.com 11

1 recorded

IP summary

3.33.241.96 1 13.248.213.92 1

2 recorded

Domain staging-api.reviewpoint.com

United States

Software information

GraphQL introspection is enabled.

GraphQL introspection is enabled.

staging-api.reviewpoint.com

Domain summary

IP summary