Vercel
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d677d4e73ea63624ee0529661c59aa019176181f8c
GraphQL introspection enabled at /api/graphql Types: 437 (by kind: ENUM: 86, INPUT_OBJECT: 36, OBJECT: 295, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d644f07c12ab9ed2e2bac10ab0b7ff243d4149e7c0
GraphQL introspection enabled at /api/graphql Types: 433 (by kind: ENUM: 84, INPUT_OBJECT: 36, OBJECT: 293, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6e135c6b2967cc74211b291d0524c8f1d6a1adae0
GraphQL introspection enabled at /api/graphql Types: 432 (by kind: ENUM: 84, INPUT_OBJECT: 36, OBJECT: 292, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d624d9d7ee4afeb31e0ebd430cc3f55c811589379c
GraphQL introspection enabled at /api/graphql Types: 431 (by kind: ENUM: 84, INPUT_OBJECT: 36, OBJECT: 291, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d650edf58a6fe9ac3aa7583118a716002538f7bc48
GraphQL introspection enabled at /api/graphql Types: 423 (by kind: ENUM: 80, INPUT_OBJECT: 36, OBJECT: 287, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d69dc0263272d211c22af5a550f1e0799df1798d60
GraphQL introspection enabled at /api/graphql Types: 422 (by kind: ENUM: 80, INPUT_OBJECT: 36, OBJECT: 287, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d630bf79fd4dc54f1fb5f380db0348767817b543e5
GraphQL introspection enabled at /api/graphql Types: 426 (by kind: ENUM: 80, INPUT_OBJECT: 36, OBJECT: 291, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d66f89e74fcc048dddc2e4e49596eaae020660c59b
GraphQL introspection enabled at /api/graphql Types: 425 (by kind: ENUM: 80, INPUT_OBJECT: 36, OBJECT: 290, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6e55af40871258c2cff0ae2a625e7cd33e6e99922
GraphQL introspection enabled at /api/graphql Types: 424 (by kind: ENUM: 79, INPUT_OBJECT: 36, OBJECT: 290, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d667bc0264dc70b56812f3aef2e40b5427037d1fbe
GraphQL introspection enabled at /api/graphql Types: 424 (by kind: ENUM: 78, INPUT_OBJECT: 37, OBJECT: 290, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Open service 216.150.1.65:443 · affiliates.willowboutique.com
2026-01-08 20:04
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Thu, 08 Jan 2026 20:04:29 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: iad1::l9bnc-1767902669409-e1559d13376b Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.65:443 · affiliates.willowboutique.com
2026-01-01 20:33
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Thu, 01 Jan 2026 20:33:30 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: fra1::lgb52-1767299610423-18dc4b944087 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.65:443 · affiliates.willowboutique.com
2025-12-30 04:44
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Tue, 30 Dec 2025 04:44:45 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: iad1::hx794-1767069885539-ba075bbb8c41 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.65:443 · affiliates.willowboutique.com
2025-12-22 05:38
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Mon, 22 Dec 2025 05:38:56 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: fra1::6d5bz-1766381936818-fb49ddd210e1 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.16.193:80 · affiliates.willowboutique.com
2025-12-21 09:08
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://affiliates.willowboutique.com/ Refresh: 0;url=https://affiliates.willowboutique.com/ server: Vercel Redirecting...
Open service 216.150.16.193:443 · affiliates.willowboutique.com
2025-12-21 09:08
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Sun, 21 Dec 2025 09:08:51 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: lhr1::tkgsk-1766308131970-dfb4a2e3422e Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.16.129:80 · affiliates.willowboutique.com
2025-12-21 09:08
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://affiliates.willowboutique.com/ Refresh: 0;url=https://affiliates.willowboutique.com/ server: Vercel Redirecting...
Open service 216.150.16.129:443 · affiliates.willowboutique.com
2025-12-21 09:08
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Sun, 21 Dec 2025 09:08:51 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: fra1::nwdkq-1766308131902-b8295c9d8479 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.65:443 · affiliates.willowboutique.com
2025-12-20 06:08
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Sat, 20 Dec 2025 06:08:04 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: iad1::2qntb-1766210884720-b8816267b641 Connection: close Transfer-Encoding: chunked Redirecting...