LeakIX - Host www.api.onward-web.pp.ua

Domain www.api.onward-web.pp.ua

CLOUDFLARENET

Software information

cloudflare

tcp/80

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 172.67.138.180
Domain: www.api.onward-web.pp.ua
Port: 80
URL: http://www.api.onward-web.pp.ua

First seen 2025-12-01 01:37
Last seen 2026-02-16 15:53
Open for 77 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3234bb1efc7cb13bdcad81b35688e9549bc738ad4
```
GraphQL introspection enabled at /graphql
Types: 43 (by kind: ENUM: 3, INPUT_OBJECT: 4, OBJECT: 30, SCALAR: 6)
Operations:
- Query: Query | fields: FaqList, PortfolioWork, PortfolioWorks, Prices, StoreInfo
- Mutation: Mutation | fields: AddContactMutation, AddReviewMutation, LoginMutation
Directives: AggregateDirective, deprecated, include, skip (total: 4)
```
  Found on 2026-02-16 15:53
  
  55.4 kBytes
Create report

Open service 172.67.138.180:80 · www.api.onward-web.pp.ua

2026-01-23 09:20

HTTP/1.1 200 OK
Date: Fri, 23 Jan 2026 09:20:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=jTV0ZAQdc1P6LUBfoR0YjxHg5CInUFEjeYgr2I%2BaDWqg3IEgutJeA7bMusy6uZN0wRsw4w%2BrVNS970XDOGC1bphSuRxQZ0bpNd0EmlOmqEKeY0814X1dmg%3D%3D"}]}
Cache-Control: private, must-revalidate
pragma: no-cache
expires: -1
Vary: Origin,Accept-Encoding
Set-Cookie: XSRF-TOKEN=eyJpdiI6IkNMZlMyWVMrQXNFMHY5L0lKL0hGVUE9PSIsInZhbHVlIjoiRGFLVWZIZzFVS2VCak0wVmQ1b1BtWWozNzVYcjc5NmhsS0NiWE5lTjZsbzdPbWphME5IWnhjTzZPTG9MTWt3MGN6MGVxcExpZ0FzK1p4cnNPSm1VVHgxaFFKQW9MZWFXdlo3QzRQOUNBUmJFWGJjcmVUTHVIbGZrOTB1ZlZBdlEiLCJtYWMiOiJhZTMyY2Q2OWU1OGFlNzE3MDc5NzlhODZiNzNmMGYwY2YzMTA1NTcwNzMwZWRhNzBhYmY2ZGZhZjdlMjQwOTA2IiwidGFnIjoiIn0%3D; expires=Fri, 23 Jan 2026 11:20:18 GMT; Max-Age=7200; path=/; samesite=lax
Set-Cookie: api_onward_web_com_session=eyJpdiI6IkFCYkU0ZzVWWER2SlYxTmtWNVArQkE9PSIsInZhbHVlIjoiTWN6cTNpQVlNbi9wR2libmVjb0ZCOWYzZU5ZNHpjaWtFaldKT1dXQkRieHdTTjBjRThidE1QUE9idFptb0dRZXhFN2cvaUVoaGZEM3VpNmI3Ykdia3ladWpndDNDUGFCK294L0l1Y3FTYzY2V2RLa2JBRTNrZXdlbzdYbHEya2MiLCJtYWMiOiIxYmRjM2RiNGZjOGMxZTc3NDhkMjJhM2YwMGVmNWU3MzM1OWE4YzFhNjBhNmViMWFiYTc1YmY0YmIzNzgwMjU5IiwidGFnIjoiIn0%3D; expires=Fri, 23 Jan 2026 11:20:18 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=16,cfOrigin;dur=492
cf-cache-status: DYNAMIC
CF-RAY: 9c2636df99532e7a-EWR
alt-svc: h3=":443"; ma=86400

Page title: Laravel

<!DOCTYPE html>
<html lang="en">
    <head>
        <meta charset="utf-8">
        <meta name="viewport" content="width=device-width, initial-scale=1">

        <title>Laravel</title>

        <!-- Fonts -->
        <link href="https://fonts.googleapis.com/css2?family=Nunito:wght@400;600;700&display=swap" rel="stylesheet">

        <!-- Styles -->
        <style>
            /*! normalize.css v8.0.1 | MIT License | github.com/necolas/normalize.css */html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}a{background-color:transparent}[hidden]{display:none}html{font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;line-height:1.5}*,:after,:before{box-sizing:border-box;border:0 solid #e2e8f0}a{color:inherit;text-decoration:inherit}svg,video{display:block;vertical-align:middle}video{max-width:100%;height:auto}.bg-white{--bg-opacity:1;background-color:#fff;background-color:rgba(255,255,255,var(--bg-opacity))}.bg-gray-100{--bg-opacity:1;background-color:#f7fafc;background-color:rgba(247,250,252,var(--bg-opacity))}.border-gray-200{--border-opacity:1;border-color:#edf2f7;border-color:rgba(237,242,247,var(--border-opacity))}.border-t{border-top-width:1px}.flex{display:flex}.grid{display:grid}.hidden{display:none}.items-center{align-items:center}.justify-center{justify-content:center}.font-semibold{font-weight:600}.h-5{height:1.25rem}.h-8{height:2rem}.h-16{height:4rem}.text-sm{font-size:.875rem}.text-lg{font-size:1.125rem}.leading-7{line-height:1.75rem}.mx-auto{margin-left:auto;margin-right:auto}.ml-1{margin-left:.25rem}.mt-2{margin-top:.5rem}.mr-2{margin-right:.5rem}.ml-2{margin-left:.5rem}.mt-4{margin-top:1rem}.ml-4{margin-left:1rem}.mt-8{margin-top:2rem}.ml-12{margin-left:3rem}.-mt-px{margin-top:-1px}.max-w-6xl{max-width:72rem}.min-h-screen{min-height:100vh}.overflow-hidden{overflow:hidden}.p-6{padding:1.5rem}.py-4{padding-top:1rem;padding-bottom:1rem}.px-6{padding-left:1.5rem;padding-right:1.5rem}.pt-8{padding-top:2rem}.fixed{position:fixed}.relative{position:relative}.top-0{top:0}.right-0{right:0}.shadow{box-shadow:0 1px 3px 0 rgba(0,0,0,.1),0 1px 2px 0 rgba(0,0,0,.06)}.text-center{text-align:center}.text-gray-200{--text-opacity:1;color:#edf2f7;color:rgba(237,242,247,var(--text-opacity))}.text-gray-300{--text-opacity:1;color:#e2e8f0;color:rgba(226,232,240,var(--text-opacity))}.text-gray-400{--text-opacity:1;color:#cbd5e0;color:rgba(203,213,224,var(--text-opacity))}.text-gray-500{--text-opacity:1;color:#a0aec0;color:rgba(160,174,192,var(--text-opacity))}.text-gray-600{--text-opacity:1;color:#718096;color:rgba(113,128,150,var(--text-opacity))}.text-gray-700{--text-opacity:1;color:#4a5568;color:rgba(74,85,104,var(--text-opacity))}.text-gray-900{--text-opacity:1;color:#1a202c;color:rgba(26,32,44,var(--text-opacity))}.underline{text-decoration:underline}.antialiased{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.w-5{width:1.25rem}.w-8{width:2rem}.w-auto{width:auto}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}@media (min-width:640px){.sm\:rounded-lg{border-radius:.5rem}.sm\:block{display:block}.sm\:items-center{align-items:center}.sm\:justify-start{justify-content:flex-start}.sm\:justify-between{justify-content:space-between}.sm\:h-20{height:5rem}.sm\:ml-0{margin-left:0}.sm\:px-6{padding-left:1.5rem;padding-right:1.5rem}.sm\:pt-0{padding-top:0}.sm\:text-left{text-align:left}.sm\:text-right{text-align:right}}@media (min-width:768px){.md\:border-t-0{border-top-width:0}.md\:border-l{border-left-width:1px}.md\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}}@media (min-width:1024px){.lg\:px-8{padding-left:2rem;padding-right:2rem}}@media (prefers-color-scheme:dark){.dark\:bg-gray-800{--bg-opacity:1;background-color:#2d3748;background-color:rgba(45,55,72,var(--bg-opacity))}.dark\:bg-gray-900{--bg-opacity:1;background-color:#1a202c;background-color:rgba(26,32,44,var(--bg-opacity))}.dark\:border-gray-700{--border-opacity:1;border-color:#4a5568;border-color:r

Found 2026-01-23 by HttpPlugin

Create report

Domain summary

www.api.onward-web.pp.ua 1

1 recorded

IP summary

172.67.138.180 2

1 recorded

Domain www.api.onward-web.pp.ua

Software information

GraphQL introspection is enabled.

Create report

Domain summary

IP summary