LeakIX - Host qa.buenamesa.com

Domain qa.buenamesa.com

United States

FASTLY

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 151.101.195.10
Domain: qa.buenamesa.com
Port: 443
URL: https://qa.buenamesa.com

First seen 2025-11-04 19:38
Last seen 2026-02-02 10:36
Open for 89 days

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
Found on 2026-02-02 10:36
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6d5e6ea65d5e6ea65d5e6ea65d5e6ea65d5e6ea65
```
GraphQL introspection enabled at /api/graphql
Detected: Magento
```
Found on 2026-01-16 15:57

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d60479c685c36ad747762d0ab155eafb05dab91a01

GraphQL introspection enabled at /api/graphql
Types: 435 (by kind: ENUM: 27, INPUT_OBJECT: 101, INTERFACE: 18, OBJECT: 284, SCALAR: 5)
Operations:
- Query: Query | fields: categories, category, categoryList, customAttributeMetadata, products
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 2
categories (args: optional/default) : total_count=7
products (args: optional/default) : total_count=1136

Found on 2025-11-28 12:25

1.3 MBytes 2 rows

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d60479c685c36ad747762d0ab155eafb05dab91a00

GraphQL introspection enabled at /api/graphql
Types: 435 (by kind: ENUM: 27, INPUT_OBJECT: 101, INTERFACE: 18, OBJECT: 284, SCALAR: 5)
Operations:
- Query: Query | fields: categories, category, categoryList, customAttributeMetadata, products
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 2
categories (args: optional/default) : total_count=7
products (args: optional/default) : total_count=1137

Found on 2025-11-21 11:57

1.3 MBytes 2 rows

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d60479c685c36ad747762d0ab155eafb05dab91a0f

GraphQL introspection enabled at /api/graphql
Types: 435 (by kind: ENUM: 27, INPUT_OBJECT: 101, INTERFACE: 18, OBJECT: 284, SCALAR: 5)
Operations:
- Query: Query | fields: categories, category, categoryList, customAttributeMetadata, products
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 2
categories (args: optional/default) : total_count=7
products (args: optional/default) : total_count=1138

Found on 2025-11-14 12:12

1.3 MBytes 2 rows

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d60479c685c36ad747762d0ab155eafb05d7b9154e

GraphQL introspection enabled at /api/graphql
Types: 435 (by kind: ENUM: 27, INPUT_OBJECT: 101, INTERFACE: 18, OBJECT: 284, SCALAR: 5)
Operations:
- Query: Query | fields: categories, category, categoryList, customAttributeMetadata, products
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 2
categories (args: optional/default) : total_count=7
products (args: optional/default) : total_count=1140

Found on 2025-11-08 14:07

1.3 MBytes 2 rows

Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d60479c685c36ad747762d0ab155eafb05dab91a0e

GraphQL introspection enabled at /api/graphql
Types: 435 (by kind: ENUM: 27, INPUT_OBJECT: 101, INTERFACE: 18, OBJECT: 284, SCALAR: 5)
Operations:
- Query: Query | fields: categories, category, categoryList, customAttributeMetadata, products
Directives: deprecated, include, skip, specifiedBy (total: 4)

Readable stores: 2
categories (args: optional/default) : total_count=7
products (args: optional/default) : total_count=1139

Found on 2025-11-04 19:38

1.3 MBytes 2 rows

Create report

Open service 151.101.195.10:443 · qa.buenamesa.com

2026-01-23 06:22

HTTP/1.1 200 OK
Connection: close
Content-Length: 16673
x-frame-options: SAMEORIGIN
cache-control: max-age=300,stale-while-revalidate=300
x-frame-options: SAMEORIGIN
last-modified: Fri, 23 Jan 2026 06:22:10 GMT
etag: W/"4121-649082d60bdfe"
x-vhost: buenamesa.com
content-type: text/html;charset=utf-8
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Date: Fri, 23 Jan 2026 06:22:10 GMT
Age: 1
Strict-Transport-Security: max-age=31557600
X-Served-By: cache-fra-eddf8230022-FRA
X-Cache: HIT
X-Timer: S1769149331.995191,VS0,VS0,VE2
Vary: Accept-Encoding

Page title: Buena Mesa Home

<!DOCTYPE HTML>
<html lang="en">
    <head>
          <head>
            <title class="mainPageTitle">Buena Mesa Home</title>
            
        </head>
    
    <meta class="pageDesc" name="description" content="buena mesa"/>
    <meta name="template" content="buenamesa-freeform-template"/>
    <meta name="viewport" content="width=device-width, initial-scale=1"/>
    

    
    
    

    

<script defer="defer" type="text/javascript" src="/.rum/@adobe/helix-rum-js@%5E2/dist/rum-standalone.js"></script>
<script src="https://kit.fontawesome.com/136d59004e.js" crossorigin="anonymous" defer></script>
<script src="https://www.youtube.com/iframe_api"></script>





    
    
<link rel="stylesheet" href="/etc.clientlibs/tyson-core/clientlibs/clientlib-dependencies-tyson-core.lc-d41d8cd98f00b204e9800998ecf8427e-lc.min.css" type="text/css">
<link rel="stylesheet" href="/etc.clientlibs/buenamesa/clientlibs/clientlib-dependencies-buenamesa.lc-d41d8cd98f00b204e9800998ecf8427e-lc.min.css" type="text/css">
<link rel="stylesheet" href="/etc.clientlibs/buenamesa/clientlibs/clientlib-site-buenamesa.lc-ba0804a2408c34972016bb159f46b1b6-lc.min.css" type="text/css">
<link rel="stylesheet" href="/etc.clientlibs/buenamesa/clientlibs/clientlib-base.lc-9222ec5da99d65c4c6fc2c8b9e4b4c77-lc.min.css" type="text/css">




	
<link rel="canonical" href="https://dev.buenamesa.com/"/>


<!-- meta -->
<meta charset="UTF-8"/>

<link href="/etc.clientlibs/retail/clientlibs/clientlib-site-retail/resources/images/favicon-16x16.png" rel="icon" type="image/png" sizes="16x16"/>
<link href="/etc.clientlibs/retail/clientlibs/clientlib-site-retail/resources/images/favicon-32x32.png" rel="icon" type="image/png" sizes="32x32"/>
<link href="/etc.clientlibs/retail/clientlibs/clientlib-site-retail/resources/images/apple-touch-icon.png" rel="apple-touch-icon" type="image/png" sizes="180x180"/>

<link href="/themes/custom/tfs/favicons/apple-touch-icon.png?v=XS8BSoObZc" rel="apple-touch-icon" type="image/png" sizes="180x180"/>












<meta name="image" content="/content/dam/buenamesa/logos/hero-image-3.jpg"/>
<meta name="language-code" content="en"/>











<meta class="swiftype" name="page_id" data-type="string" content="1001807632"/>
<!--// meta -->
    
    
    

    

    


        <script type="text/javascript" src="//assets.adobedtm.com/4b84b345350f/d08e96ac7cf8/launch-edbb73fb5297-staging.min.js" async></script>


    
    
<script src="/etc.clientlibs/tyson-core/clientlibs/clientlib-dependencies-tyson-core.lc-06b16f7f3208a8aae7429a9bcc89544c-lc.min.js"></script>
<script src="/etc.clientlibs/buenamesa/clientlibs/clientlib-dependencies-buenamesa.lc-0237501df2e54fa1ed0671cbb81b30cf-lc.min.js"></script>



    
    



    

    
    
</head>
    <body class="page basicpage tyson-component" id="page-c32bd681e6" data-graphql-endpoint="/api/graphql" data-graphql-method="GET" data-http-headers="{}">
        
        <input type="hidden" id="wcm-mode" value="DISABLED"/>
        
        
            




            



            
<div class="root container responsivegrid tyson-component">

    

  


  
    <div id="container-bd4fa3443e" class="cmp-container">
        


<div class="aem-Grid aem-Grid--12 aem-Grid--default--12 ">
    
    <div class="container responsivegrid tyson-component aem-GridColumn aem-GridColumn--default--12">

    

  


  
    <div id="container-e18e72f2cf" class="cmp-container">
        


<div class="aem-Grid aem-Grid--12 aem-Grid--default--12 ">
    
    <div class="experiencefragment tyson-component aem-GridColumn aem-GridColumn--default--12">
<div id="experiencefragment-6013380332" class="cmp-experiencefragment cmp-experiencefragment--header">


    

  


  
    <div id="container-b5957995c0" class="cmp-container">
        


<div class="aem-Grid aem-Grid--12 aem-Grid--default--12 ">
    
    <div class="header tyson-component aem-GridColumn aem-GridColumn--default--12">


<div class="buenamesa-header-base">
   <div class="buenamesa-header">
      <nav class="navbar buenamesa-header-navbar main-nav navbar-expand-lg navbar-l

Found 2026-01-23 by HttpPlugin

Create report

Open service 151.101.195.10:443 · qa.buenamesa.com

2026-01-09 19:42

HTTP/1.1 200 OK
Connection: close
Content-Length: 16673
x-frame-options: SAMEORIGIN
cache-control: max-age=300,stale-while-revalidate=300
x-frame-options: SAMEORIGIN
last-modified: Fri, 09 Jan 2026 19:42:19 GMT
etag: W/"4121-647f9b930d910"
x-vhost: buenamesa.com
content-type: text/html;charset=utf-8
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Date: Fri, 09 Jan 2026 19:42:20 GMT
Age: 0
Strict-Transport-Security: max-age=31557600
X-Served-By: cache-sin-wsat1880081-SIN
X-Cache: HIT
X-Timer: S1767987738.046976,VS0,VS0,VE1960
Vary: Accept-Encoding

Page title: Buena Mesa Home

<!DOCTYPE HTML>
<html lang="en">
    <head>
          <head>
            <title class="mainPageTitle">Buena Mesa Home</title>
            
        </head>
    
    <meta class="pageDesc" name="description" content="buena mesa"/>
    <meta name="template" content="buenamesa-freeform-template"/>
    <meta name="viewport" content="width=device-width, initial-scale=1"/>
    

    
    
    

    

<script defer="defer" type="text/javascript" src="/.rum/@adobe/helix-rum-js@%5E2/dist/rum-standalone.js"></script>
<script src="https://kit.fontawesome.com/136d59004e.js" crossorigin="anonymous" defer></script>
<script src="https://www.youtube.com/iframe_api"></script>





    
    
<link rel="stylesheet" href="/etc.clientlibs/tyson-core/clientlibs/clientlib-dependencies-tyson-core.lc-d41d8cd98f00b204e9800998ecf8427e-lc.min.css" type="text/css">
<link rel="stylesheet" href="/etc.clientlibs/buenamesa/clientlibs/clientlib-dependencies-buenamesa.lc-d41d8cd98f00b204e9800998ecf8427e-lc.min.css" type="text/css">
<link rel="stylesheet" href="/etc.clientlibs/buenamesa/clientlibs/clientlib-site-buenamesa.lc-ba0804a2408c34972016bb159f46b1b6-lc.min.css" type="text/css">
<link rel="stylesheet" href="/etc.clientlibs/buenamesa/clientlibs/clientlib-base.lc-9222ec5da99d65c4c6fc2c8b9e4b4c77-lc.min.css" type="text/css">




	
<link rel="canonical" href="https://dev.buenamesa.com/"/>


<!-- meta -->
<meta charset="UTF-8"/>

<link href="/etc.clientlibs/retail/clientlibs/clientlib-site-retail/resources/images/favicon-16x16.png" rel="icon" type="image/png" sizes="16x16"/>
<link href="/etc.clientlibs/retail/clientlibs/clientlib-site-retail/resources/images/favicon-32x32.png" rel="icon" type="image/png" sizes="32x32"/>
<link href="/etc.clientlibs/retail/clientlibs/clientlib-site-retail/resources/images/apple-touch-icon.png" rel="apple-touch-icon" type="image/png" sizes="180x180"/>

<link href="/themes/custom/tfs/favicons/apple-touch-icon.png?v=XS8BSoObZc" rel="apple-touch-icon" type="image/png" sizes="180x180"/>












<meta name="image" content="/content/dam/buenamesa/logos/hero-image-3.jpg"/>
<meta name="language-code" content="en"/>











<meta class="swiftype" name="page_id" data-type="string" content="1001807632"/>
<!--// meta -->
    
    
    

    

    


        <script type="text/javascript" src="//assets.adobedtm.com/4b84b345350f/d08e96ac7cf8/launch-edbb73fb5297-staging.min.js" async></script>


    
    
<script src="/etc.clientlibs/tyson-core/clientlibs/clientlib-dependencies-tyson-core.lc-06b16f7f3208a8aae7429a9bcc89544c-lc.min.js"></script>
<script src="/etc.clientlibs/buenamesa/clientlibs/clientlib-dependencies-buenamesa.lc-0237501df2e54fa1ed0671cbb81b30cf-lc.min.js"></script>



    
    



    

    
    
</head>
    <body class="page basicpage tyson-component" id="page-c32bd681e6" data-graphql-endpoint="/api/graphql" data-graphql-method="GET" data-http-headers="{}">
        
        <input type="hidden" id="wcm-mode" value="DISABLED"/>
        
        
            




            



            
<div class="root container responsivegrid tyson-component">

    

  


  
    <div id="container-bd4fa3443e" class="cmp-container">
        


<div class="aem-Grid aem-Grid--12 aem-Grid--default--12 ">
    
    <div class="container responsivegrid tyson-component aem-GridColumn aem-GridColumn--default--12">

    

  


  
    <div id="container-e18e72f2cf" class="cmp-container">
        


<div class="aem-Grid aem-Grid--12 aem-Grid--default--12 ">
    
    <div class="experiencefragment tyson-component aem-GridColumn aem-GridColumn--default--12">
<div id="experiencefragment-6013380332" class="cmp-experiencefragment cmp-experiencefragment--header">


    

  


  
    <div id="container-b5957995c0" class="cmp-container">
        


<div class="aem-Grid aem-Grid--12 aem-Grid--default--12 ">
    
    <div class="header tyson-component aem-GridColumn aem-GridColumn--default--12">


<div class="buenamesa-header-base">
   <div class="buenamesa-header">
      <nav class="navbar buenamesa-header-navbar main-nav navbar-expand-lg navbar-l

Found 2026-01-09 by HttpPlugin