nginx
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3893ac6fc385c5b40c357bb4f4ae358cea9f0a5b2
GraphQL introspection enabled at /graphql Types: 35 (by kind: ENUM: 1, INPUT_OBJECT: 4, INTERFACE: 1, OBJECT: 25, SCALAR: 4) Operations: - Query: RootQueryType | fields: allLeads, leadStats, node - Mutation: RootMutationType | fields: createBusinessSearch, deleteLead Directives: include, skip (total: 2)
Open service 34.209.57.169:443 · scan.agencyintelligence.co
2026-01-23 04:27
HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Security-Policy: form-action 'self'; object-src 'self';
Content-Type: text/html; charset=utf-8
Date: Fri, 23 Jan 2026 04:27:11 GMT
Server: Caddy
Server: nginx
Set-Cookie: _synup_key=SFMyNTY.g3QAAAABbQAAAAtfY3NyZl90b2tlbm0AAAAYK21iWjZsY1ZXcWNvUmlRRnQwamFCQT09.-iVNZ7o6-QCGroxBMdYpLkR-w2JXw_J_PJyS2sMgPAk; path=/; HttpOnly
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOWALL
X-Request-Id: 6rssr3f8urear0n5fcagumhkopv49ho7
X-Xss-Protection: 1; mode=block
Connection: close
Transfer-Encoding: chunked
Page title: Agency Intelligence
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<!-- <meta name="viewport" content="width=device-width, initial-scale=0.5, user-scalable=1, minimum-scale=0.5, maximum-scale=1.0"> -->
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="twitter:card" content="summary" />
<title>Agency Intelligence</title>
<meta property="og:title" content="Agency Intelligence"/>
<meta property="og:image:width" content="200" />
<meta property="og:image" content="https://thumbor-gcp.verifymybiz.com/b1Bw4xXHEIWCYaFKbMgX6thgbBw=/315x315/filters:format(png):fill(transparent)/https://s3-us-west-2.amazonaws.com/images.verifymybiz.com/accounts/company_logos/000/052/258/original/vzykJ1MTSqnRk3IZwy8g.png" />
<meta name="twitter:image" content="https://thumbor-gcp.verifymybiz.com/b1Bw4xXHEIWCYaFKbMgX6thgbBw=/315x315/filters:format(png):fill(transparent)/https://s3-us-west-2.amazonaws.com/images.verifymybiz.com/accounts/company_logos/000/052/258/original/vzykJ1MTSqnRk3IZwy8g.png" />
<!-- Latest compiled and minified CSS -->
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/tippy.js/3.4.1/tippy.css" />
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/tippy.js/3.4.1/themes/light.css" integrity="sha256-i6Q0EFfGpI7TQTMlmEHRu/8HWFrmGCbZBkRbg+oP9fc=" crossorigin="anonymous" />
<link rel="stylesheet" href="/css/app.css">
<script src="/js/vendor.js"></script>
<script src="/js/app.js"></script>
<link href='https://fonts.googleapis.com/css?family=Droid+Serif:400,400italic' rel='stylesheet' type='text/css'>
<!-- HTML5 shim and Respond.js for IE8 support of HTML5 elements and media queries -->
<!--[if lt IE 9]>
<script src="https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js"></script>
<script src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script>
<![endif]-->
<link rel="stylesheet" type="text/css" href=""/>
</head>
<body class="home-page page-steps">
<div class="container">
<div class="row scan-tool-header-wrapper">
<div class="col-md-12 scan-tool-header">
<img src="https://s3-us-west-2.amazonaws.com/images.verifymybiz.com/accounts/company_logos/000/052/258/original/vzykJ1MTSqnRk3IZwy8g.png" class="scan-tool-business-logo"/>
</div>
</div>
</div>
<div class="container">
<div class="row">
<div class="col-xs-12 col-lg-offset-2 col-lg-8">
<div class="step-two steps-wrapper">
<div class="steps-control">
<ul class="list-style no-padding-left section-control no-margin-bottom">
<li class="completed">
<span class="number no-padding-left no-margin-right tick">
<img src="images/img-tick.png" alt=""/>
</span>
<span>Nature of Business</span>
</li>
<li class="active">
<span class="number no-padding-left no-margin-right">2</span>
<span>Business Details</span>
</li>
<li>
<span class="number no-padding-left no-margin-right">3</span>
<span>Scan Results</span>
</li>
<li>
<span class="number no-padding-left no-margin-right">4</span>
<span>Fix your Listings</span>
</li>
</ul>
</div>
<h1 class="text-center">What kind of business do you run?</h1>
<div class="business-type row">
<div class="whitelabel-filter">
<label class="single-location location on-select" data-behavior="business-type-option" data-value="single-location">
<div class="inner-control">
<div class="box-sm small-control box">
<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" viewBox="0 0 35.875 50.563" class="icon-status single-scale">
Open service 194.1.147.26:443 · agencyintelligence.co
2026-01-22 21:34
HTTP/1.1 200 OK Date: Thu, 22 Jan 2026 21:34:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding X-Powered-By: PHP/8.2.30 Link: <https://agencyintelligence.co/wp-json/>; rel="https://api.w.org/" Link: <https://agencyintelligence.co/wp-json/wp/v2/pages/156>; rel="alternate"; title="JSON"; type="application/json" Link: <https://agencyintelligence.co/>; rel=shortlink Vary: Accept-Encoding,Origin WPX: 1 X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/FF02 cache-control: public,max-age=3600,stale-while-revalidate=21600 alt-svc: h3=":443"; ma=86400 x-quic: h3 Server: WPX CLOUD/FF02 X-Cache-Status: MISS
Open service 194.1.147.26:443 · www.agencyintelligence.co
2026-01-22 19:45
HTTP/1.1 301 Moved Permanently Date: Thu, 22 Jan 2026 19:45:16 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.2.30 X-Redirect-By: WordPress Location: https://agencyintelligence.co/ Vary: Accept-Encoding,Origin WPX: 1 X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/SGPR01 alt-svc: h3=":443"; ma=86400 x-quic: h3 Server: WPX CLOUD/SGPR01 X-Cache-Status: MISS
Open service 194.1.147.37:443 · www.agencyintelligence.co
2026-01-11 23:16
HTTP/1.1 301 Moved Permanently Date: Sun, 11 Jan 2026 23:16:39 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.2.30 X-Redirect-By: WordPress Location: https://agencyintelligence.co/ Vary: Accept-Encoding,Origin WPX: 1 X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/TOR01 alt-svc: h3=":443"; ma=86400 x-quic: h3 Server: WPX CLOUD/TOR01 X-Cache-Status: MISS
Open service 194.1.147.37:80 · www.agencyintelligence.co
2026-01-11 23:16
HTTP/1.1 301 Moved Permanently Date: Sun, 11 Jan 2026 23:16:40 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.2.30 X-Redirect-By: WordPress Location: https://agencyintelligence.co/ Vary: Accept-Encoding,Origin WPX: 1 X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/NY01 Server: WPX CLOUD/NY01 X-Cache-Status: MISS
Open service 194.1.147.26:443 · www.agencyintelligence.co
2026-01-11 23:16
HTTP/1.1 301 Moved Permanently Date: Sun, 11 Jan 2026 23:16:40 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.2.30 X-Redirect-By: WordPress Location: https://agencyintelligence.co/ Vary: Accept-Encoding,Origin WPX: 1 X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/AMS03 alt-svc: h3=":443"; ma=86400 x-quic: h3 Server: WPX CLOUD/AMS03 X-Cache-Status: MISS
Open service 194.1.147.26:80 · www.agencyintelligence.co
2026-01-11 23:16
HTTP/1.1 301 Moved Permanently Date: Sun, 11 Jan 2026 23:16:40 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.2.30 X-Redirect-By: WordPress Location: https://agencyintelligence.co/ Vary: Accept-Encoding,Origin WPX: 1 X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/FF02 Server: WPX CLOUD/FF02 X-Cache-Status: MISS
Open service 194.1.147.37:80 · agencyintelligence.co
2026-01-11 23:16
HTTP/1.1 301 Moved Permanently Date: Sun, 11 Jan 2026 23:16:39 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.2.30 X-Redirect-By: WordPress Location: https://agencyintelligence.co/ Vary: Accept-Encoding,Origin WPX: 1 X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/TOR01 Server: WPX CLOUD/TOR01 X-Cache-Status: MISS
Open service 194.1.147.26:443 · agencyintelligence.co
2026-01-11 23:16
HTTP/1.1 200 OK Date: Sun, 11 Jan 2026 23:16:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding X-Powered-By: PHP/8.2.30 Link: <https://agencyintelligence.co/wp-json/>; rel="https://api.w.org/" Link: <https://agencyintelligence.co/wp-json/wp/v2/pages/156>; rel="alternate"; title="JSON"; type="application/json" Link: <https://agencyintelligence.co/>; rel=shortlink Vary: Accept-Encoding,Origin WPX: 1 X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/TOR01 cache-control: public,max-age=3600,stale-while-revalidate=21600 alt-svc: h3=":443"; ma=86400 x-quic: h3 Server: WPX CLOUD/TOR01 X-Cache-Status: EXPIRED
Open service 194.1.147.26:80 · agencyintelligence.co
2026-01-11 23:16
HTTP/1.1 301 Moved Permanently Date: Sun, 11 Jan 2026 23:16:39 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/8.2.30 X-Redirect-By: WordPress Location: https://agencyintelligence.co/ Vary: Accept-Encoding,Origin WPX: 1 X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/CVT01 Server: WPX CLOUD/CVT01 X-Cache-Status: MISS
Open service 194.1.147.37:443 · agencyintelligence.co
2026-01-11 23:16
HTTP/1.1 200 OK Date: Sun, 11 Jan 2026 23:16:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding X-Powered-By: PHP/8.2.30 Link: <https://agencyintelligence.co/wp-json/>; rel="https://api.w.org/" Link: <https://agencyintelligence.co/wp-json/wp/v2/pages/156>; rel="alternate"; title="JSON"; type="application/json" Link: <https://agencyintelligence.co/>; rel=shortlink Vary: Accept-Encoding,Origin WPX: 1 X-turbo-charged-by: LiteSpeed X-Edge-Location: WPX CLOUD/AMS03 cache-control: public,max-age=3600,stale-while-revalidate=21600 alt-svc: h3=":443"; ma=86400 x-quic: h3 Server: WPX CLOUD/AMS03 X-Cache-Status: EXPIRED