LeakIX - Host web.staging.purplemanager.com

Domain web.staging.purplemanager.com

United States

AMAZON-02

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 65.9.175.15
Domain: hotfix-3-8-12.web.staging.purplemanager.com
Port: 443
URL: https://hotfix-3-8-12.web.staging.purplemanager.com

First seen 2025-11-01 07:31
Last seen 2025-12-31 06:32
Open for 59 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3843a9cd3473fff9100c169003d23dba9bd98944a

GraphQL introspection enabled at /graphql
Types: 251 (by kind: ENUM: 28, INPUT_OBJECT: 62, INTERFACE: 6, OBJECT: 134, SCALAR: 11, UNION: 10)
Operations:
- Query: Query | fields: _service, appConfigurationForDomain, appConfigurationForPath, appStatus, catalog
- Mutation: Mutation | fields: assignLocalPurchases, googlePlayReceipts, itunesPromoOfferSignature, itunesReceipts, uploadAppStoreTransaction
Directives: experimental, federation__composeDirective, federation__extends, federation__external, federation__interfaceObject, inaccessible, include, key, purpleConnection, skip (total: 21)

Readable stores: 1
_service (args: none) : sdl=schema @link(import : ["@key", "@shareable"], url : "https://...

Found on 2025-12-31 06:32

293.5 kBytes 1 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa38fdb7c9816dd327c31a38e3fa0f1ad50cb533f99

GraphQL introspection enabled at /graphql
Types: 249 (by kind: ENUM: 27, INPUT_OBJECT: 62, INTERFACE: 6, OBJECT: 134, SCALAR: 10, UNION: 10)
Operations:
- Query: Query | fields: _service, appConfigurationForDomain, appConfigurationForPath, appStatus, catalog
- Mutation: Mutation | fields: assignLocalPurchases, googlePlayReceipts, itunesPromoOfferSignature, itunesReceipts, uploadAppStoreTransaction
Directives: deprecated, experimental, extends, external, include, key, provides, purpleConnection, requires, skip (total: 12)

Readable stores: 1
_service (args: none) : sdl=schema {
  query: Query
  mutation: Mutation
}

directive @ex...

Found on 2025-11-02 18:27

289.7 kBytes 1 rows

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 65.9.175.67
Domain: hotfix-4-2-0.web.staging.purplemanager.com
Port: 443
URL: https://hotfix-4-2-0.web.staging.purplemanager.com

First seen 2025-10-30 10:40
Last seen 2026-01-01 23:08
Open for 63 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3843a9cd3473fff9100c169003d23dba9bd98944a

GraphQL introspection enabled at /graphql
Types: 251 (by kind: ENUM: 28, INPUT_OBJECT: 62, INTERFACE: 6, OBJECT: 134, SCALAR: 11, UNION: 10)
Operations:
- Query: Query | fields: _service, appConfigurationForDomain, appConfigurationForPath, appStatus, catalog
- Mutation: Mutation | fields: assignLocalPurchases, googlePlayReceipts, itunesPromoOfferSignature, itunesReceipts, uploadAppStoreTransaction
Directives: experimental, federation__composeDirective, federation__extends, federation__external, federation__interfaceObject, inaccessible, include, key, purpleConnection, skip (total: 21)

Readable stores: 1
_service (args: none) : sdl=schema @link(import : ["@key", "@shareable"], url : "https://...

Found on 2026-01-01 23:08

293.5 kBytes 1 rows

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa38fdb7c9816dd327c31a38e3fa0f1ad50cb533f99

GraphQL introspection enabled at /graphql
Types: 249 (by kind: ENUM: 27, INPUT_OBJECT: 62, INTERFACE: 6, OBJECT: 134, SCALAR: 10, UNION: 10)
Operations:
- Query: Query | fields: _service, appConfigurationForDomain, appConfigurationForPath, appStatus, catalog
- Mutation: Mutation | fields: assignLocalPurchases, googlePlayReceipts, itunesPromoOfferSignature, itunesReceipts, uploadAppStoreTransaction
Directives: deprecated, experimental, extends, external, include, key, provides, purpleConnection, requires, skip (total: 12)

Readable stores: 1
_service (args: none) : sdl=schema {
  query: Query
  mutation: Mutation
}

directive @ex...

Found on 2025-11-03 16:23

289.7 kBytes 1 rows

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 18.66.192.95
Domain: develop.web.staging.purplemanager.com
Port: 443
URL: https://develop.web.staging.purplemanager.com

First seen 2025-11-10 23:27
Last seen 2026-01-03 00:07
Open for 53 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3843a9cd3473fff9100c169003d23dba9bd98944a

GraphQL introspection enabled at /graphql
Types: 251 (by kind: ENUM: 28, INPUT_OBJECT: 62, INTERFACE: 6, OBJECT: 134, SCALAR: 11, UNION: 10)
Operations:
- Query: Query | fields: _service, appConfigurationForDomain, appConfigurationForPath, appStatus, catalog
- Mutation: Mutation | fields: assignLocalPurchases, googlePlayReceipts, itunesPromoOfferSignature, itunesReceipts, uploadAppStoreTransaction
Directives: experimental, federation__composeDirective, federation__extends, federation__external, federation__interfaceObject, inaccessible, include, key, purpleConnection, skip (total: 21)

Readable stores: 1
_service (args: none) : sdl=schema @link(import : ["@key", "@shareable"], url : "https://...

Found on 2026-01-03 00:07

293.5 kBytes 1 rows

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 18.66.192.53
Domain: web.staging.purplemanager.com
Port: 443
URL: https://web.staging.purplemanager.com

First seen 2025-11-12 00:46
Last seen 2026-01-02 21:56
Open for 51 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3843a9cd3473fff9100c169003d23dba9bd98944a

GraphQL introspection enabled at /graphql
Types: 251 (by kind: ENUM: 28, INPUT_OBJECT: 62, INTERFACE: 6, OBJECT: 134, SCALAR: 11, UNION: 10)
Operations:
- Query: Query | fields: _service, appConfigurationForDomain, appConfigurationForPath, appStatus, catalog
- Mutation: Mutation | fields: assignLocalPurchases, googlePlayReceipts, itunesPromoOfferSignature, itunesReceipts, uploadAppStoreTransaction
Directives: experimental, federation__composeDirective, federation__extends, federation__external, federation__interfaceObject, inaccessible, include, key, purpleConnection, skip (total: 21)

Readable stores: 1
_service (args: none) : sdl=schema @link(import : ["@key", "@shareable"], url : "https://...

Found on 2026-01-02 21:56

293.5 kBytes 1 rows

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 18.66.192.53
Domain: hotfix-4-1-0.web.staging.purplemanager.com
Port: 443
URL: https://hotfix-4-1-0.web.staging.purplemanager.com

First seen 2025-10-23 17:15
Last seen 2025-10-28 05:35
Open for 4 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3843a9cd3473fff9100c169003d23dba9bd98944a

GraphQL introspection enabled at /graphql
Types: 251 (by kind: ENUM: 28, INPUT_OBJECT: 62, INTERFACE: 6, OBJECT: 134, SCALAR: 11, UNION: 10)
Operations:
- Query: Query | fields: _service, appConfigurationForDomain, appConfigurationForPath, appStatus, catalog
- Mutation: Mutation | fields: assignLocalPurchases, googlePlayReceipts, itunesPromoOfferSignature, itunesReceipts, uploadAppStoreTransaction
Directives: experimental, federation__composeDirective, federation__extends, federation__external, federation__interfaceObject, inaccessible, include, key, purpleConnection, skip (total: 21)

Readable stores: 1
_service (args: none) : sdl=schema @link(import : ["@key", "@shareable"], url : "https://...

Found on 2025-10-28 05:35

293.5 kBytes 1 rows

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 18.66.192.14
Domain: review-staging-we-t3j41q.web.staging.purplemanager.com
Port: 443
URL: https://review-staging-we-t3j41q.web.staging.purplemanager.com

First seen 2025-12-04 13:24
Last seen 2025-12-08 01:50
Open for 3 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3843a9cd3473fff9100c169003d23dba9bd98944a

GraphQL introspection enabled at /graphql
Types: 251 (by kind: ENUM: 28, INPUT_OBJECT: 62, INTERFACE: 6, OBJECT: 134, SCALAR: 11, UNION: 10)
Operations:
- Query: Query | fields: _service, appConfigurationForDomain, appConfigurationForPath, appStatus, catalog
- Mutation: Mutation | fields: assignLocalPurchases, googlePlayReceipts, itunesPromoOfferSignature, itunesReceipts, uploadAppStoreTransaction
Directives: experimental, federation__composeDirective, federation__extends, federation__external, federation__interfaceObject, inaccessible, include, key, purpleConnection, skip (total: 21)

Readable stores: 1
_service (args: none) : sdl=schema @link(import : ["@key", "@shareable"], url : "https://...

Found on 2025-12-08 01:50

293.5 kBytes 1 rows

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 18.66.192.53
Domain: review-staging-we-xee636.web.staging.purplemanager.com
Port: 443
URL: https://review-staging-we-xee636.web.staging.purplemanager.com

First seen 2025-10-16 12:14
Last seen 2025-10-22 13:26
Open for 6 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3843a9cd3473fff9100c169003d23dba9bd98944a

GraphQL introspection enabled at /graphql
Types: 251 (by kind: ENUM: 28, INPUT_OBJECT: 62, INTERFACE: 6, OBJECT: 134, SCALAR: 11, UNION: 10)
Operations:
- Query: Query | fields: _service, appConfigurationForDomain, appConfigurationForPath, appStatus, catalog
- Mutation: Mutation | fields: assignLocalPurchases, googlePlayReceipts, itunesPromoOfferSignature, itunesReceipts, uploadAppStoreTransaction
Directives: experimental, federation__composeDirective, federation__extends, federation__external, federation__interfaceObject, inaccessible, include, key, purpleConnection, skip (total: 21)

Readable stores: 1
_service (args: none) : sdl=schema @link(import : ["@key", "@shareable"], url : "https://...

Found on 2025-10-22 13:26

293.5 kBytes 1 rows

Create report

Open service 2600:9000:225b:c600:3:1c85:9c00:93a1:443 · web.staging.purplemanager.com

2026-01-10 23:49

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
Content-Length: 9
Connection: close
Date: Sat, 10 Jan 2026 23:49:49 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Powered-By: Express
ETag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg"
Vary: Accept-Encoding
X-Cache: Error from cloudfront
Via: 1.1 a4a80ac7ffee78c042728f52e3f729e0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P1
X-Amz-Cf-Id: ee0Zcnau_u3tKVS6hHBRKkf8qqPkHI2_pjJFYRDBagMJYO3Lhz7EDQ==
Age: 3


Not Found

Found 2026-01-10 by HttpPlugin

Domain web.staging.purplemanager.com

United States

GraphQL introspection is enabled.

GraphQL introspection is enabled.

GraphQL introspection is enabled.

GraphQL introspection is enabled.

GraphQL introspection is enabled.

GraphQL introspection is enabled.

GraphQL introspection is enabled.

web.staging.purplemanager.com*.web.staging.purplemanager.com

Data leak

Domain summary

IP summary