{
  "count": 10,
  "entries": [
    {
      "at": "2026-10-28T16:46:02.802Z",
      "path": "/graphql",
      "body": "{\"query\":\"query IntrospectionQuery{__schema{queryType{name} types{name} directives{name}}}\"}",
      "headers": {
        "accept": "application/json",
        "accept-encoding": "gzip, br",
        "cf-connecting-ip": "167.99.210.137",
        "cf-ipcountry": "NL",
        "cf-ray": "a51b6a132c7a8b46",
        "cf-visitor": "{\"scheme\":\"https\"}",
        "connection": "Keep-Alive",
        "content-length": "92",
        "content-type": "application/json",
        "host": "hook.walkaround.dev:8443",
        "user-agent": "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)",
        "x-forwarded-proto": "https",
        "x-real-ip": "167.99.210.137"
      }
    },
    {
      "at": "2026-10-28T16:46:02.606Z",
      "path": "/api/gql",
      "body": "{\"query\":\"query IntrospectionQuery{__schema{queryType{name} types{name} directives{name}}}\"}",
      "headers": {
        "accept": "application/json",
        "accept-encoding": "gzip",
        "cf-connecting-ip": "165.227.84.14",
        "cf-ipcountry": "US",
        "cf-ray": "a51b6a119ae1b7a0",
        "cf-visitor": "{\"scheme\":\"http\"}",
        "connection": "Keep-Alive",
        "content-length": "92",
        "content-type": "application/json",
        "host": "hook.walkaround.dev",
        "user-agent": "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)",
        "x-forwarded-proto": "http",
        "x-real-ip": "165.227.84.14"
      }
    },
    {
      "at": "2026-10-28T16:46:01.452Z",
      "path": "/graphql/api",
      "body": "{\"query\":\"query IntrospectionQuery{__schema{queryType{name} types{name} directives{name}}}\"}",
      "headers": {
        "accept": "application/json",
        "accept-encoding": "gzip",
        "cf-connecting-ip": "165.227.84.14",
        "cf-ipcountry": "US",
        "cf-ray": "a51b6a0adf51592a",
        "cf-visitor": "{\"scheme\":\"http\"}",
        "connection": "Keep-Alive",
        "content-length": "92",
        "content-type": "application/json",
        "host": "hook.walkaround.dev",
        "user-agent": "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)",
        "x-forwarded-proto": "http",
        "x-real-ip": "165.227.84.14"
      }
    },
    {
      "at": "2026-10-28T16:46:00.707Z",
      "path": "/api/graphql",
      "body": "{\"query\":\"query IntrospectionQuery{__schema{queryType{name} types{name} directives{name}}}\"}",
      "headers": {
        "accept": "application/json",
        "accept-encoding": "gzip",
        "cf-connecting-ip": "165.227.84.14",
        "cf-ipcountry": "US",
        "cf-ray": "a51b6a063a0daab7",
        "cf-visitor": "{\"scheme\":\"http\"}",
        "connection": "Keep-Alive",
        "content-length": "92",
        "content-type": "application/json",
        "host": "hook.walkaround.dev",
        "user-agent": "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)",
        "x-forwarded-proto": "http",
        "x-real-ip": "165.227.84.14"
      }
    },
    {
      "at": "2026-10-28T16:45:59.514Z",
      "path": "/api",
      "body": "{\"query\":\"query IntrospectionQuery{__schema{queryType{name} types{name} directives{name}}}\"}",
      "headers": {
        "accept": "application/json",
        "accept-encoding": "gzip",
        "cf-connecting-ip": "165.227.84.14",
        "cf-ipcountry": "US",
        "cf-ray": "a51b69fe9a41c342",
        "cf-visitor": "{\"scheme\":\"http\"}",
        "connection": "Keep-Alive",
        "content-length": "92",
        "content-type": "application/json",
        "host": "hook.walkaround.dev",
        "user-agent": "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)",
        "x-forwarded-proto": "http",
        "x-real-ip": "165.227.84.14"
      }
    },
    {
      "at": "2026-10-28T16:45:58.855Z",
      "path": "/graphql",
      "body": "{\"query\":\"query IntrospectionQuery{__schema{queryType{name} types{name} directives{name}}}\"}",
      "headers": {
        "accept": "application/json",
        "accept-encoding": "gzip",
        "cf-connecting-ip": "165.227.84.14",
        "cf-ipcountry": "US",
        "cf-ray": "a51b69fa9f91dd37",
        "cf-visitor": "{\"scheme\":\"http\"}",
        "connection": "Keep-Alive",
        "content-length": "92",
        "content-type": "application/json",
        "host": "hook.walkaround.dev",
        "user-agent": "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)",
        "x-forwarded-proto": "http",
        "x-real-ip": "165.227.84.14"
      }
    },
    {
      "at": "2026-10-28T16:08:03.646Z",
      "path": "/ingest",
      "body": "{\"text\":\"Test alert: 2 example findings on demo.walkaround.dev. These are examples, not a real scan of the site. Walkaround found 2 new problems on demo.walkaround.dev: Admin page answers without signing in (example), A test key sits in the page source (example)\",\"event\":\"findings.new\",\"delivery_id\":\"nd_test_b0c7351dffa8\",\"site\":{\"id\":\"a98ed705-3539-4d35-a01b-09a52c05d071\",\"url\":\"https://demo.walkaround.dev\"},\"run\":{\"id\":\"test_b0c7351dffa8\",\"finished_at\":\"2026-10-28T16:08:03.313Z\"},\"report_url\":\"https://walkaround.app/signin?next=%2Freport%2Fa98ed705-3539-4d35-a01b-09a52c05d071.pdf\",\"new_finding_count\":2,\"test\":true,\"new_findings\":[{\"id\":\"example-1\",\"title\":\"Admin page answers without signing in (example)\",\"severity\":\"critical\",\"pages\":[\"https://demo.walkaround.dev/admin\"],\"quote\":\"example text: this page was meant to be behind the sign-in\",\"why\":\"Anyone who finds the address opens the admin screens, and nothing asks who they are.\",\"fix\":\"Put the whole /admin path behind the sign-in check.\"},{\"id\":\"example-2\",\"title\":\"A test key sits in the page source (example)\",\"severity\":\"high\",\"pages\":[\"https://demo.walkaround.dev/pricing\"],\"quote\":\"sk_test_example_51H8xQ\",\"why\":\"A key in a page can be copied by anyone who opens it, and it works until it is revoked.\",\"fix\":\"Move the key to the server and make a new one.\"}]}",
      "headers": {
        "accept": "*/*",
        "accept-encoding": "gzip, br",
        "accept-language": "*",
        "cf-connecting-ip": "34.142.68.47",
        "cf-ipcountry": "GB",
        "cf-ray": "a51b326eaf94a56d",
        "cf-visitor": "{\"scheme\":\"https\"}",
        "connection": "Keep-Alive",
        "content-length": "1332",
        "content-type": "application/json",
        "host": "hook.walkaround.dev",
        "sec-fetch-mode": "cors",
        "user-agent": "node",
        "x-forwarded-proto": "https",
        "x-real-ip": "34.142.68.47",
        "x-walkaround-delivery": "ne_505a0ed301b4232ad8a2d88d",
        "x-walkaround-event": "findings.new",
        "x-walkaround-signature": "sha256=4b387a3a5343353a85e9b30315351af3cb27e738922203d5ef713724b1cd7477"
      }
    },
    {
      "at": "2026-10-28T16:06:51.308Z",
      "path": "/",
      "body": "",
      "headers": {
        "accept-encoding": "gzip, br",
        "cf-connecting-ip": "81.171.72.135",
        "cf-ipcountry": "NL",
        "cf-ray": "a51b30aaa9c0d93f",
        "cf-visitor": "{\"scheme\":\"https\"}",
        "connection": "Keep-Alive",
        "content-length": "0",
        "host": "hook.walkaround.dev",
        "user-agent": "Go-http-client/2.0",
        "x-forwarded-proto": "https",
        "x-real-ip": "81.171.72.135"
      }
    },
    {
      "at": "2026-10-28T16:05:14.333Z",
      "path": "/ingest",
      "body": "{\"hello\":\"world\"}",
      "headers": {
        "accept": "*/*",
        "accept-encoding": "gzip, br",
        "cf-connecting-ip": "34.142.68.47",
        "cf-ipcountry": "GB",
        "cf-ray": "a51b2e4c698976a1",
        "cf-visitor": "{\"scheme\":\"https\"}",
        "connection": "Keep-Alive",
        "content-length": "17",
        "content-type": "application/json",
        "host": "hook.walkaround.dev",
        "user-agent": "curl/7.88.1",
        "x-forwarded-proto": "https",
        "x-real-ip": "34.142.68.47"
      }
    },
    {
      "at": "2026-10-28T16:04:51.564Z",
      "path": "/ingest",
      "body": "{\"text\":\"Test alert: 2 example findings on demo.walkaround.dev. These are examples, not a real scan of the site. Walkaround found 2 new problems on demo.walkaround.dev: Admin page answers without signing in (example), A test key sits in the page source (example)\",\"event\":\"findings.new\",\"delivery_id\":\"nd_test_7480090718e0\",\"site\":{\"id\":\"a98ed705-3539-4d35-a01b-09a52c05d071\",\"url\":\"https://demo.walkaround.dev\"},\"run\":{\"id\":\"test_7480090718e0\",\"finished_at\":\"2026-10-28T16:04:51.303Z\"},\"report_url\":\"https://walkaround.app/signin?next=%2Freport%2Fa98ed705-3539-4d35-a01b-09a52c05d071.pdf\",\"new_finding_count\":2,\"test\":true,\"new_findings\":[{\"id\":\"example-1\",\"title\":\"Admin page answers without signing in (example)\",\"severity\":\"critical\",\"pages\":[\"https://demo.walkaround.dev/admin\"],\"quote\":\"example text: this page was meant to be behind the sign-in\",\"why\":\"Anyone who finds the address opens the admin screens, and nothing asks who they are.\",\"fix\":\"Put the whole /admin path behind the sign-in check.\"},{\"id\":\"example-2\",\"title\":\"A test key sits in the page source (example)\",\"severity\":\"high\",\"pages\":[\"https://demo.walkaround.dev/pricing\"],\"quote\":\"sk_test_example_51H8xQ\",\"why\":\"A key in a page can be copied by anyone who opens it, and it works until it is revoked.\",\"fix\":\"Move the key to the server and make a new one.\"}]}",
      "headers": {
        "accept": "*/*",
        "accept-encoding": "gzip, br",
        "accept-language": "*",
        "cf-connecting-ip": "34.142.68.47",
        "cf-ipcountry": "GB",
        "cf-ray": "a51b2dbe381eedef",
        "cf-visitor": "{\"scheme\":\"https\"}",
        "connection": "Keep-Alive",
        "content-length": "1332",
        "content-type": "application/json",
        "host": "hook.walkaround.dev",
        "sec-fetch-mode": "cors",
        "user-agent": "node",
        "x-forwarded-proto": "https",
        "x-real-ip": "34.142.68.47",
        "x-walkaround-delivery": "ne_a979a7b26c01200d73f24187",
        "x-walkaround-event": "findings.new",
        "x-walkaround-signature": "sha256=d4d4c34408684bd5fb47b2aa8f4831f06429b8d515d931d26fcb7fc5e2cef67d"
      }
    }
  ]
}