LeakIX - Host staging.api.useaccrue.com

Domain staging.api.useaccrue.com

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 75.2.60.68
Domain: staging.api.useaccrue.com
Port: 80
URL: http://staging.api.useaccrue.com

First seen 2025-12-01 00:28
Last seen 2026-01-02 15:34
Open for 32 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33fd81b43e4c606c19347eabb29965825d4e4d3f1

GraphQL introspection enabled at /graphql
Types: 322 (by kind: ENUM: 72, INPUT_OBJECT: 1, INTERFACE: 1, OBJECT: 230, SCALAR: 9, UNION: 9)
Operations:
- Query: Query | fields: accountHistory, agentPaymentMethods, agentReviewStatistics, agents, appVersionDetail
- Mutation: Mutation | fields: addBankAccount, addCard, addFcmToken, addMarketingLead, addMoneyToFixedSaving
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 15:34

596.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
```
GraphQL introspection enabled at /graphql
```
Found on 2025-12-23 01:24

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3764dc0853a5cd5471023ba89d8edd664f23897c4

GraphQL introspection enabled at /graphql
Types: 319 (by kind: ENUM: 71, INPUT_OBJECT: 1, INTERFACE: 1, OBJECT: 228, SCALAR: 9, UNION: 9)
Operations:
- Query: Query | fields: accountHistory, agentPaymentMethods, agentReviewStatistics, agents, appVersionDetail
- Mutation: Mutation | fields: addBankAccount, addCard, addFcmToken, addMoneyToFixedSaving, addMoneyToSavingsChallenge
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-09 10:10

590.3 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b7a89925fc96672703d7f82940422ac4be7460e4

GraphQL introspection enabled at /graphql
Types: 318 (by kind: ENUM: 71, INPUT_OBJECT: 1, INTERFACE: 1, OBJECT: 227, SCALAR: 9, UNION: 9)
Operations:
- Query: Query | fields: accountHistory, agentPaymentMethods, agentReviewStatistics, agents, appVersionDetail
- Mutation: Mutation | fields: addBankAccount, addCard, addFcmToken, addMoneyToFixedSaving, addMoneyToSavingsChallenge
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-01 00:28

588.1 kBytes

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 13.248.244.96
Domain: staging.api.useaccrue.com
Port: 443
URL: https://staging.api.useaccrue.com

First seen 2025-12-01 00:28
Last seen 2026-01-02 20:25
Open for 32 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33fd81b43e4c606c19347eabb29965825d4e4d3f1

GraphQL introspection enabled at /graphql
Types: 322 (by kind: ENUM: 72, INPUT_OBJECT: 1, INTERFACE: 1, OBJECT: 230, SCALAR: 9, UNION: 9)
Operations:
- Query: Query | fields: accountHistory, agentPaymentMethods, agentReviewStatistics, agents, appVersionDetail
- Mutation: Mutation | fields: addBankAccount, addCard, addFcmToken, addMarketingLead, addMoneyToFixedSaving
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2026-01-02 20:25

596.0 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3764dc0853a5cd5471023ba89d8edd664f23897c4

GraphQL introspection enabled at /graphql
Types: 319 (by kind: ENUM: 71, INPUT_OBJECT: 1, INTERFACE: 1, OBJECT: 228, SCALAR: 9, UNION: 9)
Operations:
- Query: Query | fields: accountHistory, agentPaymentMethods, agentReviewStatistics, agents, appVersionDetail
- Mutation: Mutation | fields: addBankAccount, addCard, addFcmToken, addMoneyToFixedSaving, addMoneyToSavingsChallenge
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-09 10:10

590.3 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b7a89925fc96672703d7f82940422ac4be7460e4

GraphQL introspection enabled at /graphql
Types: 318 (by kind: ENUM: 71, INPUT_OBJECT: 1, INTERFACE: 1, OBJECT: 227, SCALAR: 9, UNION: 9)
Operations:
- Query: Query | fields: accountHistory, agentPaymentMethods, agentReviewStatistics, agents, appVersionDetail
- Mutation: Mutation | fields: addBankAccount, addCard, addFcmToken, addMoneyToFixedSaving, addMoneyToSavingsChallenge
Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)

Found on 2025-12-01 00:28

588.1 kBytes

Create report

Open service 13.248.244.96:443 · staging.api.useaccrue.com

2026-01-09 12:31

HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=rb9AK2YyTrKODTF%2Bh3T1iAYicBVXezrugbcdGMWm6hc%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767961866"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=rb9AK2YyTrKODTF%2Bh3T1iAYicBVXezrugbcdGMWm6hc%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767961866"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 91c19eca-01be-bae3-8e88-739bdba091be
X-Runtime: 0.001260
Date: Fri, 09 Jan 2026 12:31:06 GMT
Connection: close

Found 2026-01-09 by HttpPlugin

Create report

Open service 75.2.60.68:80 · staging.api.useaccrue.com

2026-01-09 12:22

HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=RaajZOC4jqkix6SnlBKIVNKR2wHY%2BNX0rkhZsc0877U%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767961435"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=RaajZOC4jqkix6SnlBKIVNKR2wHY%2BNX0rkhZsc0877U%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767961435"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: ccc5c332-2b5a-8502-ede0-d3420029f45c
X-Runtime: 0.001979
Date: Fri, 09 Jan 2026 12:23:55 GMT
Connection: close

Found 2026-01-09 by HttpPlugin

Create report

Open service 13.248.244.96:443 · staging.api.useaccrue.com

2026-01-02 20:25

HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ETPBJsuJG7bDUxi1zfROGYjVupIfg%2BStLOfLULkuJ7c%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767385543"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ETPBJsuJG7bDUxi1zfROGYjVupIfg%2BStLOfLULkuJ7c%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767385543"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 520d1059-25e6-7775-61b5-2c5c2f69a564
X-Runtime: 0.000960
Date: Fri, 02 Jan 2026 20:25:43 GMT
Connection: close

Found 2026-01-02 by HttpPlugin

Create report

Open service 75.2.60.68:80 · staging.api.useaccrue.com

2026-01-02 15:34

HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=WIbLEBHp9O4YyKDxCchS94vHb%2FvtnIOntynZXq33CK4%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767368086"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=WIbLEBHp9O4YyKDxCchS94vHb%2FvtnIOntynZXq33CK4%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767368086"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 56d6436d-8a2d-0002-f50b-d27cbe96b27e
X-Runtime: 0.001563
Date: Fri, 02 Jan 2026 15:34:46 GMT
Connection: close

Found 2026-01-02 by HttpPlugin

Create report

Open service 75.2.60.68:80 · staging.api.useaccrue.com

2025-12-23 01:24

HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=7GPejse6X8X%2FwgRDy4Hiv8sCxdOX8m2gZWbde4CmTFk%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766453062"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=7GPejse6X8X%2FwgRDy4Hiv8sCxdOX8m2gZWbde4CmTFk%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766453062"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 7f5d3785-a16f-fe38-333e-4e1cdb5b9315
X-Runtime: 0.001337
Date: Tue, 23 Dec 2025 01:24:22 GMT
Connection: close

Found 2025-12-23 by HttpPlugin

Create report

Open service 13.248.244.96:443 · staging.api.useaccrue.com

2025-12-22 20:05

HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=y8vTKbL%2BmEaB9V1ydYNBslAHglvYHz0KhvyIj8xYe74%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766433903"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=y8vTKbL%2BmEaB9V1ydYNBslAHglvYHz0KhvyIj8xYe74%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766433903"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 2b987135-2bef-3054-6514-4086c56f3534
X-Runtime: 0.002611
Date: Mon, 22 Dec 2025 20:05:03 GMT
Connection: close

Found 2025-12-22 by HttpPlugin

Create report

Open service 75.2.60.68:80 · staging.api.useaccrue.com

2025-12-21 09:09

HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=k7z51g1wmaMnvzRTdmwiYO1gKkeo29JEkx51yl56bIk%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766308172"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=k7z51g1wmaMnvzRTdmwiYO1gKkeo29JEkx51yl56bIk%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766308172"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 374fe630-a49b-da74-69b9-a3f78100db5e
X-Runtime: 0.001723
Date: Sun, 21 Dec 2025 09:09:32 GMT
Connection: close

Found 2025-12-21 by HttpPlugin

Create report

Open service 13.248.244.96:443 · staging.api.useaccrue.com

2025-12-20 18:43

HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=WPYv1Dx72bxalt1uWURGL%2BlxA1AEGF%2FrfwZYcD2Pjvc%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766256229"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=WPYv1Dx72bxalt1uWURGL%2BlxA1AEGF%2FrfwZYcD2Pjvc%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766256229"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 1da2cb54-3a35-4669-7ad9-7779b317614c
X-Runtime: 0.000801
Date: Sat, 20 Dec 2025 18:43:49 GMT
Connection: close

Found 2025-12-20 by HttpPlugin

Create report

Open service 75.2.60.68:80 · staging.api.useaccrue.com

2025-12-19 02:36

HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=L%2FdGa9UHycnUHPBvUtpmuMtyKT%2F5i1IZcKJ9pm83uZ0%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766111766"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=L%2FdGa9UHycnUHPBvUtpmuMtyKT%2F5i1IZcKJ9pm83uZ0%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766111766"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: d75fd529-80cc-0ffd-cb3d-35fb8aafbec0
X-Runtime: 0.000835
Date: Fri, 19 Dec 2025 02:36:06 GMT
Connection: close

Found 2025-12-19 by HttpPlugin

Create report

staging.api.useaccrue.com

Fingerprint:

5a444748570ceaa5f5cc9af75c6662160035bf907dbb345a3ca970a967e61ab5

CN:

staging.api.useaccrue.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-30 23:29

Not after:

2026-02-28 23:29

Domain summary

staging.api.useaccrue.com 15

1 recorded

IP summary

13.248.244.96 1 75.2.60.68 1 35.71.179.82 1

3 recorded