LeakIX - Host staging.api.inly.com

Domain staging.api.inly.com

United States

AMAZON-02

Software information

Heroku

tcp/443

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 35.71.131.46
Domain: staging.api.inly.com
Port: 443
URL: https://staging.api.inly.com

First seen 2025-11-21 02:19
Last seen 2026-01-02 16:55
Open for 42 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa32ffb4131faa69f33c9f69773cac47e584aeca779

GraphQL introspection enabled at /graphql
Types: 488 (by kind: ENUM: 41, INPUT_OBJECT: 170, OBJECT: 263, SCALAR: 8, UNION: 6)
Operations:
- Query: Query | fields: announcements, automatedEmail, business, businessUsers, calendarMonthData
- Mutation: Mutation | fields: acceptPassClientFees, acceptProposal, acceptTeamInvitation, adminLoginAsUser, approveProposal
- Subscription: Subscription | fields: newMessage
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 16:55

549.7 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33fca7656eada1386b7b1490e81a68cc9f2f5d20a

GraphQL introspection enabled at /graphql
Types: 492 (by kind: ENUM: 41, INPUT_OBJECT: 172, OBJECT: 265, SCALAR: 8, UNION: 6)
Operations:
- Query: Query | fields: announcements, automatedEmail, business, businessUsers, calendarMonthData
- Mutation: Mutation | fields: acceptPassClientFees, acceptProposal, acceptTeamInvitation, adminLoginAsUser, approveProposal
- Subscription: Subscription | fields: newMessage
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-26 15:31

551.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3068f521a27e37b8a063f0ce266c718dd2858e2ee

GraphQL introspection enabled at /graphql
Types: 495 (by kind: ENUM: 41, INPUT_OBJECT: 173, OBJECT: 267, SCALAR: 8, UNION: 6)
Operations:
- Query: Query | fields: announcements, automatedEmail, business, businessUsers, calendarMonthData
- Mutation: Mutation | fields: acceptPassClientFees, acceptProposal, acceptTeamInvitation, adminLoginAsUser, approveProposal
- Subscription: Subscription | fields: newMessage
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-22 20:01

552.6 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa36b125d26bda486568c45063e56122f597c87b61a

GraphQL introspection enabled at /graphql
Types: 491 (by kind: ENUM: 41, INPUT_OBJECT: 171, OBJECT: 265, SCALAR: 8, UNION: 6)
Operations:
- Query: Query | fields: announcements, automatedEmail, business, businessUsers, calendarMonthData
- Mutation: Mutation | fields: acceptPassClientFees, acceptProposal, acceptTeamInvitation, adminLoginAsUser, approveProposal
- Subscription: Subscription | fields: newMessage
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-17 00:12

549.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa34c650feaaaf82e5a96264412d693876d549d177e

GraphQL introspection enabled at /graphql
Types: 487 (by kind: ENUM: 41, INPUT_OBJECT: 169, OBJECT: 263, SCALAR: 8, UNION: 6)
Operations:
- Query: Query | fields: announcements, automatedEmail, business, businessUsers, calendarMonthData
- Mutation: Mutation | fields: acceptPassClientFees, acceptProposal, acceptTeamInvitation, adminLoginAsUser, approveProposal
- Subscription: Subscription | fields: newMessage
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-13 19:53

544.3 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b8c7e57bb096da79ce9f296132c826fe02aee0cb

GraphQL introspection enabled at /graphql
Types: 490 (by kind: ENUM: 41, INPUT_OBJECT: 169, OBJECT: 266, SCALAR: 8, UNION: 6)
Operations:
- Query: Query | fields: announcements, automatedEmail, business, businessUsers, calendarMonthData
- Mutation: Mutation | fields: acceptPassClientFees, acceptProposal, acceptTeamInvitation, adminLoginAsUser, approveProposal
- Subscription: Subscription | fields: newMessage
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-01 20:23

548.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-11-27 12:45

Create report

Open service 35.71.131.46:443 · staging.api.inly.com

2026-01-09 21:36

HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=tJHqw%2FpctRUOI%2BeWsirk7VtfwgmAIEoF7w2rBbXPWsQ%3D\u0026sid=af571f24-03ee-46d1-9f90-ab9030c2c74c\u0026ts=1767994619"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=tJHqw%2FpctRUOI%2BeWsirk7VtfwgmAIEoF7w2rBbXPWsQ%3D&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&ts=1767994619"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 181f4466-5d03-4323-3b03-f76bf9e834a9
X-Runtime: 0.007067
Date: Fri, 09 Jan 2026 21:36:59 GMT
Connection: close

Found 2026-01-09 by HttpPlugin

Create report

Open service 35.71.131.46:443 · staging.api.inly.com

2026-01-02 16:55

HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=K2%2B3DzNUEQY0KmVsPzuvjMjMZpWk07R9GoPjtEdeBwY%3D\u0026sid=af571f24-03ee-46d1-9f90-ab9030c2c74c\u0026ts=1767372955"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=K2%2B3DzNUEQY0KmVsPzuvjMjMZpWk07R9GoPjtEdeBwY%3D&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&ts=1767372955"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 46f9b59d-f592-972b-112c-e66fba3b7220
X-Runtime: 0.000942
Date: Fri, 02 Jan 2026 16:55:55 GMT
Connection: close

Found 2026-01-02 by HttpPlugin

Create report

Open service 35.71.131.46:443 · staging.api.inly.com

2025-12-30 14:05

HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=lWpHIF2H60FUfaXdI24xghtEB41mYrBM%2FoKiHsXIiW8%3D\u0026sid=af571f24-03ee-46d1-9f90-ab9030c2c74c\u0026ts=1767103513"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=lWpHIF2H60FUfaXdI24xghtEB41mYrBM%2FoKiHsXIiW8%3D&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&ts=1767103513"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 83c5dfb6-9de3-6d9b-04da-fe245384199b
X-Runtime: 0.000938
Date: Tue, 30 Dec 2025 14:05:13 GMT
Connection: close

Found 2025-12-30 by HttpPlugin

Create report

Open service 35.71.131.46:443 · staging.api.inly.com

2025-12-22 20:01

HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2FAej9QFfYhsgSrsy%2FNFUxrWIyUjE3ftipOL%2Ff6NwMY8%3D\u0026sid=af571f24-03ee-46d1-9f90-ab9030c2c74c\u0026ts=1766433663"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2FAej9QFfYhsgSrsy%2FNFUxrWIyUjE3ftipOL%2Ff6NwMY8%3D&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&ts=1766433663"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: f3c71628-de97-c2c8-16ef-e29720a7c1c9
X-Runtime: 0.001059
Date: Mon, 22 Dec 2025 20:01:03 GMT
Connection: close

Found 2025-12-22 by HttpPlugin

Create report

Open service 35.71.131.46:443 · staging.api.inly.com

2025-12-21 04:20

HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=TjXNEUZiocs8xz6JMqdibHF9F2HUnyxsVoc9ziOJJag%3D\u0026sid=af571f24-03ee-46d1-9f90-ab9030c2c74c\u0026ts=1766290805"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=TjXNEUZiocs8xz6JMqdibHF9F2HUnyxsVoc9ziOJJag%3D&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&ts=1766290805"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 22f25153-f75c-ad76-db42-b67fc542fa06
X-Runtime: 0.001565
Date: Sun, 21 Dec 2025 04:20:05 GMT
Connection: close

Found 2025-12-21 by HttpPlugin

Create report

Open service 35.71.131.46:443 · staging.api.inly.com

2025-12-19 04:29

HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=m0oYNQNta6dZ8S6lBOuSRqBdLU8Te5LZH4po%2FfGhg98%3D\u0026sid=af571f24-03ee-46d1-9f90-ab9030c2c74c\u0026ts=1766118568"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=m0oYNQNta6dZ8S6lBOuSRqBdLU8Te5LZH4po%2FfGhg98%3D&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&ts=1766118568"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 19b30093-e606-6a3d-347c-3bb630b89d94
X-Runtime: 0.000962
Date: Fri, 19 Dec 2025 04:29:28 GMT
Connection: close

Found 2025-12-19 by HttpPlugin

Create report

staging.api.inly.com

Fingerprint:

acc42d6f670937fddbc1afb26f5961aec9da201d6aaeecba6713ee0d560b1329

CN:

staging.api.inly.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-21 01:20

Not after:

2026-02-19 01:20

Domain summary

staging.api.inly.com 12

1 recorded

IP summary

35.71.131.46 2 3.33.148.61 1

2 recorded