LeakIX - Host app.worknice.com

Domain app.worknice.com

United States

AMAZON-02

Software information

Vercel

tcp/443

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 216.150.16.65
Domain: app.worknice.com
Port: 443
URL: https://app.worknice.com

First seen 2025-11-15 11:10
Last seen 2025-12-06 04:59
Open for 20 days

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6950c522beb6af8699cf1e51b4a703662b9ce576f

GraphQL introspection enabled at /api/graphql
Types: 288 (by kind: ENUM: 53, INPUT_OBJECT: 63, INTERFACE: 25, OBJECT: 132, SCALAR: 12, UNION: 3)
Operations:
- Query: Query | fields: account, apps, assignment, basicAbnFormTemplate, basicBankAccountFormTemplate
- Mutation: Mutation | fields: acceptLogin, activateIntegration, activateKeypayIntegration, activatePerson, activateXeroIntegration
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 1
session (args: none) : authState=UNAUTHENTICATED

Found on 2025-12-06 04:59

772.3 kBytes 1 rows

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6ba022d16756a6ac6fb1fb170a194c90ae8f3e1c7

GraphQL introspection enabled at /api/graphql
Types: 279 (by kind: ENUM: 52, INPUT_OBJECT: 58, INTERFACE: 25, OBJECT: 129, SCALAR: 12, UNION: 3)
Operations:
- Query: Query | fields: account, apps, assignment, basicAbnFormTemplate, basicBankAccountFormTemplate
- Mutation: Mutation | fields: acceptLogin, activateIntegration, activatePerson, addPeopleToBundles, addPeopleToTags
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 1
session (args: none) : authState=UNAUTHENTICATED

Found on 2025-11-30 17:47

756.1 kBytes 1 rows

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d635830182a6bb0612e1d1244ca264de1e5855b93b

GraphQL introspection enabled at /api/graphql
Types: 278 (by kind: ENUM: 51, INPUT_OBJECT: 58, INTERFACE: 25, OBJECT: 129, SCALAR: 12, UNION: 3)
Operations:
- Query: Query | fields: account, apps, assignment, basicAbnFormTemplate, basicBankAccountFormTemplate
- Mutation: Mutation | fields: acceptLogin, activateIntegration, activatePerson, addPeopleToBundles, addPeopleToTags
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 1
session (args: none) : authState=UNAUTHENTICATED

Found on 2025-11-22 15:43

751.6 kBytes 1 rows

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6737304a9c565100be03dae21be23404b16d907a0

GraphQL introspection enabled at /api/graphql
Types: 279 (by kind: ENUM: 51, INPUT_OBJECT: 58, INTERFACE: 25, OBJECT: 130, SCALAR: 12, UNION: 3)
Operations:
- Query: Query | fields: account, apps, assignment, basicAbnFormTemplate, basicBankAccountFormTemplate
- Mutation: Mutation | fields: acceptLogin, activateIntegration, activatePerson, addPeopleToBundles, addPeopleToTags
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 1
session (args: none) : authState=UNAUTHENTICATED

Found on 2025-11-20 14:24

757.2 kBytes 1 rows

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d68a41f4c8025b496c8e9bff12849747b0af5195b5

GraphQL introspection enabled at /api/graphql
Types: 279 (by kind: ENUM: 51, INPUT_OBJECT: 59, INTERFACE: 25, OBJECT: 129, SCALAR: 12, UNION: 3)
Operations:
- Query: Query | fields: account, apps, assignment, basicAbnFormTemplate, basicBankAccountFormTemplate
- Mutation: Mutation | fields: acceptLogin, activateIntegration, activatePerson, addPeopleToBundles, addPeopleToTags
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 1
session (args: none) : authState=UNAUTHENTICATED

Found on 2025-11-16 23:35

760.8 kBytes 1 rows

Create report

Open service 216.150.16.65:443 · app.worknice.com

2026-01-09 05:06

HTTP/1.1 307 Temporary Redirect
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 0
Date: Fri, 09 Jan 2026 05:06:46 GMT
Location: https://app.worknice.com/inbox
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
X-Matched-Path: /
X-Request-Id: 15092749-766e-4511-9041-d8f84204921e
X-Vercel-Cache: MISS
X-Vercel-Id: sfo1::syd1::c8k5n-1767935206609-97f758b74686
Connection: close

Found 2026-01-09 by HttpPlugin

Create report

Open service 216.150.16.65:443 · app.worknice.com

2026-01-02 05:44

HTTP/1.1 307 Temporary Redirect
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 0
Date: Fri, 02 Jan 2026 05:44:43 GMT
Location: https://app.worknice.com/inbox
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
X-Matched-Path: /
X-Request-Id: 44d872bb-00ba-41d3-99ee-63956e30a2e0
X-Vercel-Cache: MISS
X-Vercel-Id: iad1::syd1::ldt7n-1767332683547-5c09d696111c
Connection: close

Found 2026-01-02 by HttpPlugin

Create report

Open service 216.150.16.65:443 · app.worknice.com

2025-12-30 13:19

HTTP/1.1 307 Temporary Redirect
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 0
Date: Tue, 30 Dec 2025 13:19:39 GMT
Location: https://app.worknice.com/inbox
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
X-Matched-Path: /
X-Request-Id: 55a6a8e2-b4ef-431f-b85f-4bb3fb0fbcc7
X-Vercel-Cache: MISS
X-Vercel-Id: sin1::syd1::wphj9-1767100779029-ce6896240f9a
Connection: close

Found 2025-12-30 by HttpPlugin

Create report

Open service 216.150.16.65:443 · app.worknice.com

2025-12-22 16:19

HTTP/1.1 307 Temporary Redirect
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 0
Date: Mon, 22 Dec 2025 16:19:07 GMT
Location: https://app.worknice.com/inbox
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
X-Matched-Path: /
X-Request-Id: 832e9a25-f2d6-4a14-831e-c599c254533e
X-Vercel-Cache: MISS
X-Vercel-Id: fra1::syd1::nhd9s-1766420346879-e74ddc79ac0c
Connection: close

Found 2025-12-22 by HttpPlugin

Create report

Open service 216.150.16.65:443 · app.worknice.com

2025-12-20 19:38

HTTP/1.1 307 Temporary Redirect
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 0
Date: Sat, 20 Dec 2025 19:38:48 GMT
Location: https://app.worknice.com/inbox
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
X-Matched-Path: /
X-Request-Id: 3d73c867-62c5-41b1-8daf-1be1da9d0f49
X-Vercel-Cache: MISS
X-Vercel-Id: bom1::syd1::29kcm-1766259528492-246282d1ef97
Connection: close

Found 2025-12-20 by HttpPlugin

Create report

app.worknice.com

Fingerprint:

47b483dd38197da17fa34a16f1644a9444de389c0bdec5362b34830c6e12a041

CN:

app.worknice.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-15 10:11

Not after:

2026-02-13 10:11

Data leak

Size

772.3 kB

Collections

Rows

Domain summary

app.worknice.com 9

1 recorded

IP summary

216.150.16.65 2

1 recorded