GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa323e578615fdcaea39373153a758ca418a62d9da0
GraphQL introspection enabled at /graphql Types: 365 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 306, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible Readable stores: 5 getAllLatestLiveReports (args: optional/default) : statusCode=200 getMatchDayAndTakeover (args: none) : statusCode=200 setting (args: none) : setting=map[category:onlineBallers cfg_id:89 collection_injection_for... sponsor=[] sponsorRevisionId=0 appPush=map[] icon=map[bulb:map[path:[m 71.5719 43.2771 c -2.2395 0 -4.3725 -1.0... swrveDefaultProps (args: none) : revId=87 user (args: none) : banned=false birthDate= contactNumber= country= crmId= accessToken=
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa323e578615fdcaea39373153a758ca4187eda032c
GraphQL introspection enabled at /graphql Types: 365 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 306, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible Readable stores: 5 getAllLatestLiveReports (args: optional/default) : statusCode=200 getMatchDayAndTakeover (args: none) : statusCode=200 setting (args: none) : appPush=map[] icon=map[bulb:map[path:[m 71.5719 43.2771 c -2.2395 0 -4.3725 -1.0... setting=map[category:onlineBallers cfg_id:89 collection_injection_for... sponsor=[] sponsorRevisionId=0 swrveDefaultProps (args: none) : revId=87 user (args: none) : crmId= accessToken= banned=false birthDate= contactNumber= country=
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e4228b4a418e7c7a5caff4df6c2311e571f343ff
GraphQL introspection enabled at /graphql Types: 353 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 294, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible Readable stores: 5 getAllLatestLiveReports (args: optional/default) : statusCode=200 getMatchDayAndTakeover (args: none) : statusCode=200 setting (args: none) : icon=map[bulb:map[path:[m 71.5719 43.2771 c -2.2395 0 -4.3725 -1.0... setting=map[category:onlineBallers cfg_id:89 collection_injection_for... sponsor=[] sponsorRevisionId=0 appPush=map[] swrveDefaultProps (args: none) : revId=87 user (args: none) : crmId= accessToken= banned=false birthDate= contactNumber= country=
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e4228b4a418e7c7a5caff4df6c2311e55537b739
GraphQL introspection enabled at /graphql Types: 353 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 294, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible Readable stores: 5 getAllLatestLiveReports (args: optional/default) : statusCode=200 getMatchDayAndTakeover (args: none) : statusCode=200 setting (args: none) : icon=map[bulb:map[path:[m 71.5719 43.2771 c -2.2395 0 -4.3725 -1.0... setting=map[category:onlineBallers cfg_id:89 collection_injection_for... sponsor=[] sponsorRevisionId=0 appPush=map[] swrveDefaultProps (args: none) : revId=87 user (args: none) : birthDate= contactNumber= country= crmId= accessToken= banned=false
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e4228b4a418e7c7a5caff4df6c2311e563f8006b
GraphQL introspection enabled at /graphql Types: 353 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 294, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible Readable stores: 5 getAllLatestLiveReports (args: optional/default) : statusCode=200 getMatchDayAndTakeover (args: none) : statusCode=200 setting (args: none) : appPush=map[] icon=map[bulb:map[path:[m 71.5719 43.2771 c -2.2395 0 -4.3725 -1.0... setting=map[category:onlineBallers cfg_id:89 collection_injection_for... sponsor=[] sponsorRevisionId=0 swrveDefaultProps (args: none) : revId=87 user (args: none) : banned=false birthDate= contactNumber= country= crmId= accessToken=
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3e4228b4a418e7c7a5caff4df6c2311e54d3ad227
GraphQL introspection enabled at /graphql Types: 353 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 294, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible Readable stores: 5 getAllLatestLiveReports (args: optional/default) : statusCode=200 getMatchDayAndTakeover (args: none) : statusCode=200 setting (args: none) : appPush=map[] icon=map[bulb:map[path:[m 71.5719 43.2771 c -2.2395 0 -4.3725 -1.0... setting=map[category:onlineBallers cfg_id:89 collection_injection_for... sponsor=[] sponsorRevisionId=0 swrveDefaultProps (args: none) : revId=87 user (args: none) : crmId= accessToken= banned=false birthDate= contactNumber= country=
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35e3ee2e6a8ab7b96ce68fc9b4adddf393986f3fb
GraphQL introspection enabled at /graphql Types: 352 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 293, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible Readable stores: 5 getAllLatestLiveReports (args: optional/default) : statusCode=200 getMatchDayAndTakeover (args: none) : statusCode=200 setting (args: none) : appPush=map[] icon=map[bulb:map[path:[m 71.5719 43.2771 c -2.2395 0 -4.3725 -1.0... setting=map[category:onlineBallers cfg_id:89 collection_injection_for... sponsor=[] sponsorRevisionId=0 swrveDefaultProps (args: none) : revId=87 user (args: none) : crmId= accessToken= banned=false birthDate= contactNumber= country=
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa35e3ee2e6a8ab7b96ce68fc9b4adddf39d6703404
GraphQL introspection enabled at /graphql Types: 352 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 293, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33b70535fe0186e6d6eb9a018fd6563fa76721deb
GraphQL introspection enabled at /graphql Types: 349 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 290, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33b70535fe0186e6d6eb9a018fd6563fac79123f8
GraphQL introspection enabled at /graphql Types: 349 (by kind: ENUM: 2, INPUT_OBJECT: 20, OBJECT: 290, SCALAR: 37) Operations: - Query: Query | fields: Gallery, collectionFeeds, commentStats, comments, feedPromoAssets - Mutation: Mutation | fields: comment, logout, postBaseSiteIdAddToCart, postBaseSiteIdCreateCart, postBaseSiteIdGetOccToken - Subscription: Subscription | fields: _no_fields_accessible Readable stores: 5 getAllLatestLiveReports (args: optional/default) : statusCode=200 getMatchDayAndTakeover (args: none) : statusCode=200 setting (args: none) : sponsor=[] sponsorRevisionId=0 appPush=map[] icon=map[bulb:map[path:[m 71.5719 43.2771 c -2.2395 0 -4.3725 -1.0... setting=map[category:onlineBallers cfg_id:89 collection_injection_for... swrveDefaultProps (args: none) : revId=87 user (args: none) : birthDate= contactNumber= country= crmId= accessToken= banned=false
Open service 23.36.162.11:443 · afc-prd.graph.arsenal.com
2026-01-23 06:19
HTTP/1.1 404 Not Found Content-Length: 0 Expires: Fri, 23 Jan 2026 06:19:09 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 23 Jan 2026 06:19:09 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Open service 23.36.162.11:443 · afc-prd.graph.arsenal.com
2026-01-09 20:23
HTTP/1.1 404 Not Found Content-Length: 0 Expires: Fri, 09 Jan 2026 20:23:04 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 09 Jan 2026 20:23:04 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Open service 23.36.162.11:443 · afc-prd.graph.arsenal.com
2026-01-03 00:45
HTTP/1.1 404 Not Found Content-Length: 0 Expires: Sat, 03 Jan 2026 00:45:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 03 Jan 2026 00:45:40 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Open service 23.36.162.11:443 · afc-prd.graph.arsenal.com
2025-12-23 08:11
HTTP/1.1 404 Not Found Content-Length: 0 Expires: Tue, 23 Dec 2025 08:11:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 23 Dec 2025 08:11:46 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload