LeakIX - Host accencio.com

Domain accencio.com

United States

CLOUDFLARENET

Software information

Vercel

tcp/443 tcp/80

cloudflare

tcp/443

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 104.16.242.229
Domain: buy.accencio.com
Port: 443
URL: https://buy.accencio.com

First seen 2025-11-16 05:40
Last seen 2026-01-14 06:00
Open for 59 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
  Found on 2026-01-14 06:00
- Severity: medium
  Fingerprint: c2db3a1c40d490db1a0bbaa3a774c7d9a0ed4dbb13786b95c7bef80aaac107aa
```
GraphQL introspection enabled at /graphql
Types: 948 (by kind: ENUM: 167, INPUT_OBJECT: 286, INTERFACE: 4, OBJECT: 482, SCALAR: 9)
Operations:
- Query: query | fields: biBookmark, biBookmarks, cart, catalog, catalogStructure
- Mutation: mutation | fields: addBackupCd, convertOrderToPurchaseOrder, executeDeliveryProcess, processPurchase, renewSubscription
Directives: deprecated, include, skip (total: 3)
```
  Found on 2025-12-01 11:20
  
  1.5 MBytes
Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.32.99.122
Domain: accencio.com
Port: 443
URL: https://accencio.com

First seen 2023-10-17 18:17
Last seen 2024-03-21 13:10
Open for 155 days

Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbbe3970504

[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	symlinks = false
	ignorecase = true
[remote "origin"]
	url = https://git-codecommit.us-east-1.amazonaws.com/v1/repos/web
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
[branch "dev"]
	remote = origin
	merge = refs/heads/dev
[branch "pharma"]
	remote = origin
	merge = refs/heads/pharma
[branch "old"]
	remote = origin
	merge = refs/heads/old

Found on 2024-03-21 13:10

496 Bytes

Create report

Open service 104.16.242.229:443 · buy.accencio.com

2026-01-09 15:49

HTTP/1.1 302 Found
Date: Fri, 09 Jan 2026 15:49:11 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 146
Connection: close
Server: cloudflare
Accept-CH: Sec-CH-UA-Platform-Version
Location: https://accencio.com/buy.html
set-cookie: __cflb=02DiuGUwaHeX5xCq1y5EajwJxo7RZdu3QZkwHmYEFTfDe; HttpOnly; SameSite=Lax; Path=/; Expires=Sat, 10 Jan 2026 14:49:11 GMT
cf-cache-status: DYNAMIC
CF-RAY: 9bb51545785ad98b-SIN

Page title: Object moved

<html><head><title>Object moved</title></head><body>
<h2>Object moved to <a href="https://accencio.com/buy.html">here</a>.</h2>
</body></html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 104.16.242.229:443 · buy.accencio.com

2026-01-02 09:51

HTTP/1.1 302 Found
Date: Fri, 02 Jan 2026 09:51:36 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 146
Connection: close
Server: cloudflare
Accept-CH: Sec-CH-UA-Platform-Version
Location: https://accencio.com/buy.html
set-cookie: __cflb=02DiuGUwaHeX5xCq1y4RAgyJ26Rx5b4eGRvygDpcGnSyz; HttpOnly; SameSite=Lax; Path=/; Expires=Sat, 03 Jan 2026 08:51:36 GMT
cf-cache-status: DYNAMIC
CF-RAY: 9b795bdcbd44dca1-FRA

Page title: Object moved

<html><head><title>Object moved</title></head><body>
<h2>Object moved to <a href="https://accencio.com/buy.html">here</a>.</h2>
</body></html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 76.76.21.241:443 · lighthouse-dev.accencio.com

2025-12-31 14:03

HTTP/1.1 401 Unauthorized
Cache-Control: no-store, max-age=0
Content-Length: 14248
Content-Type: text/html; charset=utf-8
Date: Wed, 31 Dec 2025 14:03:32 GMT
Server: Vercel
Set-Cookie: _vercel_sso_nonce=bVcB3dhc2CzCCEZGvde9KoJX; Max-Age=3600; Path=/; Secure; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=63072000
X-Frame-Options: DENY
X-Vercel-Id: sfo1::7fkh4-1767189812542-22d5d37cb3ba
Connection: close

Page title: Authentication Required

<!doctype html><html lang=en><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>Authentication Required</title><script type=text/llms.txt>
## Note to agents accessing this page:

This page requires authentication to access. Automated agents should use a Vercel authentication bypass token to access this page.

The easiest way to get a token is using the get_access_to_vercel_url or web_fetch_vercel_url functions of the Vercel MCP server 
at https://mcp.vercel.com (Docs at https://vercel.com/docs/mcp/vercel-mcp).

Alternatively, this URL documents how to use the bypass token: https://vercel.com/docs/deployment-protection/methods-to-bypass-deployment-protection/protection-bypass-automation
You need to prompt the user to provide the bypass token to access this page. The URL above also explains how the user can
access the bypass token. Then you can calculate a URL of the following form and successfully access it: `https://current-domain/current-pathname?x-vercel-set-bypass-cookie=true&x-vercel-protection-bypass=$bypass_token`.
  </script><style>/*!normalize.css v8.0.1 | MIT License | github.com/necolas/normalize.css*/html{line-height:1.15;-webkit-text-size-adjust:100%;height:-webkit-fill-available}body{margin:0}main{display:block}h1{font-size:2em;margin:.67em 0}hr{box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:#0000}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{border-style:none;padding:0}[type=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{padding:.35em .75em .625em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;white-space:normal}progress{vertical-align:baseline}textarea{overflow:auto}[type=checkbox],[type=radio]{box-sizing:border-box;padding:0}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}details{display:block}summary{display:list-item}template{display:none}[hidden]{display:none}*,*::before,*::after{box-sizing:border-box}body{--foreground-color: #000000;--background-color: #ffffff;--border-color: #eaeaea;--text-color: #444;--disabled-background: #fafafa;--error-color: #e00;--blue-color: #0057FF;--secondary-text: #666;--link-color: inherit;--spinner-color: #8F8F8F;--button-hover-color: #333;--ds-focus-ring: 0 0 0 2px var(--background-color), 0 0 0 6px var(--blue-color);--monospace-font: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;background:var(--background-color);color:var(--foreground-color);display:block;font-family:-apple-system,BlinkMacSystemFont,segoe ui,roboto,oxygen,ubuntu,cantarell,fira sans,droid sans,helvetica neue,sans-serif;height:100vh;height:-webkit-fill-available;margin:0;padding:0;-webkit-font-smoothing:antialiased}button,.link-button{appearance:none;-webkit-appearance:none;background:var(--foreground-color);border:none;border-radius:6px;color:var(--background-color);cursor:pointer;font-size:14px;font-weight:500;height:42px;outline:none;padding:0;transition:all .2s ease 0s;user-select:none;width:100%;display:flex;align-items:center;justify-content:ce

Found 2025-12-31 by HttpPlugin

Create report

Open service 66.33.60.193:443 · lighthouse-dev.accencio.com

2025-12-31 14:03

HTTP/1.1 401 Unauthorized
Cache-Control: no-store, max-age=0
Content-Length: 14248
Content-Type: text/html; charset=utf-8
Date: Wed, 31 Dec 2025 14:03:32 GMT
Server: Vercel
Set-Cookie: _vercel_sso_nonce=1sNgAfjJaEYzWukeMR2mOWu5; Max-Age=3600; Path=/; Secure; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=63072000
X-Frame-Options: DENY
X-Vercel-Id: sfo1::tstj4-1767189812587-a4996744839c
Connection: close

Page title: Authentication Required

<!doctype html><html lang=en><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><title>Authentication Required</title><script type=text/llms.txt>
## Note to agents accessing this page:

This page requires authentication to access. Automated agents should use a Vercel authentication bypass token to access this page.

The easiest way to get a token is using the get_access_to_vercel_url or web_fetch_vercel_url functions of the Vercel MCP server 
at https://mcp.vercel.com (Docs at https://vercel.com/docs/mcp/vercel-mcp).

Alternatively, this URL documents how to use the bypass token: https://vercel.com/docs/deployment-protection/methods-to-bypass-deployment-protection/protection-bypass-automation
You need to prompt the user to provide the bypass token to access this page. The URL above also explains how the user can
access the bypass token. Then you can calculate a URL of the following form and successfully access it: `https://current-domain/current-pathname?x-vercel-set-bypass-cookie=true&x-vercel-protection-bypass=$bypass_token`.
  </script><style>/*!normalize.css v8.0.1 | MIT License | github.com/necolas/normalize.css*/html{line-height:1.15;-webkit-text-size-adjust:100%;height:-webkit-fill-available}body{margin:0}main{display:block}h1{font-size:2em;margin:.67em 0}hr{box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:#0000}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{border-style:none;padding:0}[type=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{padding:.35em .75em .625em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;white-space:normal}progress{vertical-align:baseline}textarea{overflow:auto}[type=checkbox],[type=radio]{box-sizing:border-box;padding:0}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}details{display:block}summary{display:list-item}template{display:none}[hidden]{display:none}*,*::before,*::after{box-sizing:border-box}body{--foreground-color: #000000;--background-color: #ffffff;--border-color: #eaeaea;--text-color: #444;--disabled-background: #fafafa;--error-color: #e00;--blue-color: #0057FF;--secondary-text: #666;--link-color: inherit;--spinner-color: #8F8F8F;--button-hover-color: #333;--ds-focus-ring: 0 0 0 2px var(--background-color), 0 0 0 6px var(--blue-color);--monospace-font: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;background:var(--background-color);color:var(--foreground-color);display:block;font-family:-apple-system,BlinkMacSystemFont,segoe ui,roboto,oxygen,ubuntu,cantarell,fira sans,droid sans,helvetica neue,sans-serif;height:100vh;height:-webkit-fill-available;margin:0;padding:0;-webkit-font-smoothing:antialiased}button,.link-button{appearance:none;-webkit-appearance:none;background:var(--foreground-color);border:none;border-radius:6px;color:var(--background-color);cursor:pointer;font-size:14px;font-weight:500;height:42px;outline:none;padding:0;transition:all .2s ease 0s;user-select:none;width:100%;display:flex;align-items:center;justify-content:ce

Found 2025-12-31 by HttpPlugin

Create report

Open service 66.33.60.193:80 · lighthouse-dev.accencio.com

2025-12-31 14:03

HTTP/1.0 308 Permanent Redirect
Content-Type: text/plain
Location: https://lighthouse-dev.accencio.com/
Refresh: 0;url=https://lighthouse-dev.accencio.com/
server: Vercel


Redirecting...

Found 2025-12-31 by HttpPlugin

Create report

Open service 76.76.21.241:80 · lighthouse-dev.accencio.com

2025-12-31 14:03

HTTP/1.0 308 Permanent Redirect
Content-Type: text/plain
Location: https://lighthouse-dev.accencio.com/
Refresh: 0;url=https://lighthouse-dev.accencio.com/
server: Vercel


Redirecting...

Found 2025-12-31 by HttpPlugin

Create report

Open service 104.16.242.229:443 · buy.accencio.com

2025-12-22 23:37

HTTP/1.1 302 Found
Date: Mon, 22 Dec 2025 23:37:27 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 146
Connection: close
Server: cloudflare
Accept-CH: Sec-CH-UA-Platform-Version
Location: https://accencio.com/buy.html
set-cookie: __cflb=02DiuGUwaHeX5xCq1y635hgE5Ju77x3TDGBJJHy1KT8Sp; HttpOnly; SameSite=Lax; Path=/; Expires=Tue, 23 Dec 2025 22:37:27 GMT
cf-cache-status: DYNAMIC
CF-RAY: 9b2372776a9a36fb-YYZ

Page title: Object moved

<html><head><title>Object moved</title></head><body>
<h2>Object moved to <a href="https://accencio.com/buy.html">here</a>.</h2>
</body></html>

Found 2025-12-22 by HttpPlugin