cloudflare
tcp/443 tcp/80 tcp/8443
nginx 1.22.1
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6571aeb47788bd0753afcfb6a7b51f14c1a94625c
GraphQL introspection enabled at /api/graphql Types: 474 (by kind: ENUM: 12, INPUT_OBJECT: 386, OBJECT: 65, SCALAR: 8, UNION: 3) Operations: - Query: Query | fields: account, accountGroup, accountGroups, accounts, accountsCount - Mutation: Mutation | fields: createAccount, createAccounts, deleteAccount, updateAccount, updateAccounts Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d67813b5f6abf3ede61e7618a125bd16dbdfcf74e7
GraphQL introspection enabled at /api/graphql Types: 468 (by kind: ENUM: 12, INPUT_OBJECT: 380, OBJECT: 65, SCALAR: 8, UNION: 3) Operations: - Query: Query | fields: account, accountGroup, accountGroups, accounts, accountsCount - Mutation: Mutation | fields: createAccount, createAccounts, deleteAccount, updateAccount, updateAccounts Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6764762ebb2aa24a94cfaaebe8c562810569d4258
GraphQL introspection enabled at /api/graphql Types: 483 (by kind: ENUM: 12, INPUT_OBJECT: 394, OBJECT: 66, SCALAR: 8, UNION: 3) Operations: - Query: Query | fields: account, accountGroup, accountGroups, accounts, accountsCount - Mutation: Mutation | fields: createAccount, createAccounts, deleteAccount, updateAccount, updateAccounts Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Open service 34.165.122.189:443 · api.milgo.io
2026-01-23 00:19
HTTP/1.1 404 Not Found Server: nginx/1.22.1 Date: Fri, 23 Jan 2026 00:19:35 GMT Content-Type: text/html; charset=utf-8 Content-Length: 139 Connection: close X-Powered-By: Express Vary: Origin Access-Control-Allow-Credentials: true Content-Security-Policy: default-src 'none' Permissions-Policy: interest-cohort=() X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: no-referrer Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 34.165.122.189:443 · api.milgo.io
2026-01-09 02:02
HTTP/1.1 404 Not Found Server: nginx/1.22.1 Date: Fri, 09 Jan 2026 02:02:31 GMT Content-Type: text/html; charset=utf-8 Content-Length: 139 Connection: close X-Powered-By: Express Vary: Origin Access-Control-Allow-Credentials: true Content-Security-Policy: default-src 'none' Permissions-Policy: interest-cohort=() X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: no-referrer Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 2606:4700:20::ac43:4984:443 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 404 Not Found
Date: Wed, 07 Jan 2026 08:25:01 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
X-Powered-By: Express
Vary: Origin
vary: accept-encoding
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
Permissions-Policy: interest-cohort=()
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=FGZquXTrnncxIRX1Ary5phvMyysq8ZY92UFM4gZtVo8GGZqjKa%2BauO7mdj072u%2Fzo2M4ieGXh%2BXtzqvyGae2WjyfWy%2F5%2BhvEk8Coh932t5BzVZkN1Y2p"}]}
cf-cache-status: DYNAMIC
Strict-Transport-Security: max-age=0
CF-RAY: 9ba20fe55ff6ff82-SIN
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 2606:4700:20::681a:ba3:443 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 404 Not Found
Date: Wed, 07 Jan 2026 08:25:01 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
X-Powered-By: Express
Vary: Origin
vary: accept-encoding
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
Permissions-Policy: interest-cohort=()
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=MLz3AoHBF6jn4TOveNoG018qsv7moKHPWJU35Qki4tLry9vJ7iYZ5T9gfezsbit1HsOUt7u9qgEFIBsZaJXe6eiefgtrOqZ4i2%2Fn7rqz7W3gjehC5HEj"}]}
cf-cache-status: DYNAMIC
Strict-Transport-Security: max-age=0
CF-RAY: 9ba20fe4ef52eb36-SJC
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 2606:4700:20::681a:ba3:8443 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 522 <none> Date: Wed, 07 Jan 2026 08:25:20 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: strict-origin-when-cross-origin X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9ba20fe75ed2ac18-YYZ error code: 522
Open service 2606:4700:20::681a:aa3:8443 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 522 <none> Date: Wed, 07 Jan 2026 08:25:20 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: strict-origin-when-cross-origin X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9ba20fe74f1ec457-EWR error code: 522
Open service 2606:4700:20::681a:ba3:80 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 301 Moved Permanently
Date: Wed, 07 Jan 2026 08:25:00 GMT
Content-Length: 0
Connection: close
Location: https://api.milgo.io/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=zEB4YZKpJ%2FR8JLb5gkqECSaSAqTeEjlWsYrQHeKVjuHMxyrhVY8uR7gqc8iayn71kvHV8WnWvxul6fUKT22PEQfYhEOqGoMebNPa%2F518AlNrRGkKGcGF"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 9ba20fe0dd4352aa-SJC
Open service 2606:4700:20::ac43:4984:8443 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 522 <none> Date: Wed, 07 Jan 2026 08:25:20 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: strict-origin-when-cross-origin X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9ba20fe71bc83451-SJC error code: 522
Open service 2606:4700:20::681a:aa3:80 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 301 Moved Permanently
Date: Wed, 07 Jan 2026 08:25:00 GMT
Content-Length: 0
Connection: close
Location: https://api.milgo.io/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=DB4lugcqV1BgZIRE1O5JQXZW5HHsj4kdn4U7%2BD3E1U9how9e%2FtEIcf601M%2FyWL8j7yc9k1izcuy9PvL7zG9h6PTcroIGYfCR7Gio1vUJOmfhLlLm8Q%3D%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 9ba20fe07e799a1b-FRA
Open service 104.26.11.163:443 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 404 Not Found
Date: Wed, 07 Jan 2026 08:25:00 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
X-Powered-By: Express
Vary: Origin
vary: accept-encoding
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
Permissions-Policy: interest-cohort=()
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fafRseL%2FsRxZEp3UNeW%2FyLLkHb4reQ8axrsqby0%2BeKZ7VIxLjrFSKYi8PuKNwoKtZuk5UUhMQX5kBmD%2BJkCFeCVYkM1mCUzRbrzr"}]}
cf-cache-status: DYNAMIC
Strict-Transport-Security: max-age=0
CF-RAY: 9ba20fe10f9b2580-FRA
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 104.26.10.163:80 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 301 Moved Permanently
Date: Wed, 07 Jan 2026 08:25:00 GMT
Content-Length: 0
Connection: close
Location: https://api.milgo.io/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=g07Er70kFcG1uh1rRyEpvm4cx1M86zN2HAkyurX4ak%2BUiw0TzrU7V%2F95yB%2BUURT%2B2KqMF4z538%2FBLxWFwR7Dw69OzI8JM21%2F6D4k"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 9ba20fe079f9dca6-FRA
Open service 104.26.10.163:443 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 404 Not Found
Date: Wed, 07 Jan 2026 08:25:01 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
X-Powered-By: Express
Vary: Origin
vary: accept-encoding
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
Permissions-Policy: interest-cohort=()
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=xzZhwmYXs4ybO%2Bep1RVoR7ttkJ5Kd4Y%2B18DZPIinwitSyH6G706hfccnlsxv1t1Ps3s0%2FDms%2FWvTdI2mt5IAqNJtniE78Q17Zg%3D%3D"}]}
cf-cache-status: DYNAMIC
Strict-Transport-Security: max-age=0
CF-RAY: 9ba20fe48ec8678e-SIN
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 104.26.11.163:8443 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 522 <none> Date: Wed, 07 Jan 2026 08:25:20 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: strict-origin-when-cross-origin X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9ba20fe6a811fe0d-SIN error code: 522
Open service 2606:4700:20::ac43:4984:80 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 301 Moved Permanently
Date: Wed, 07 Jan 2026 08:25:00 GMT
Content-Length: 0
Connection: close
Location: https://api.milgo.io/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=xAXXuw4NyQ3UgACAEXhO4mf3Ax8KhRgUFYResleNHqJNZCadGh61VcmNdPDSuxeUUjg3zaVLfRBrxYHqokyUnIBRPPuUhmAMXMqWMU5iS8ndNIQWKr6h"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 9ba20fe05833999b-BLR
Open service 172.67.73.132:443 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 404 Not Found
Date: Wed, 07 Jan 2026 08:25:01 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
X-Powered-By: Express
Vary: Origin
vary: accept-encoding
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
Permissions-Policy: interest-cohort=()
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kIn0hHK7vAmBpIk%2Fk3hNxRcoTt6S8OTo%2BwEu%2BRuCYn3A3IAn9St7E14JYyXnWB3Ldludf55ggbhDVok6UsduTwpvB5edD1cvrLZC"}]}
cf-cache-status: DYNAMIC
Strict-Transport-Security: max-age=0
CF-RAY: 9ba20fe62b9a58e1-BLR
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 2606:4700:20::681a:aa3:443 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 404 Not Found
Date: Wed, 07 Jan 2026 08:25:01 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
X-Powered-By: Express
Vary: Origin
vary: accept-encoding
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
Permissions-Policy: interest-cohort=()
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=LYHLyMasMKJwfVPwpY4GCSOWtzDKgeBUPR5D2yb4jaCiJ4Du6zYUtx5VSXpymgyAkZZVyOOop2TGxKNC%2BqT8S3XAXUubTdv9XX%2FjX9vsoiIldDEcLGej"}]}
cf-cache-status: DYNAMIC
Strict-Transport-Security: max-age=0
CF-RAY: 9ba20fe62c479dfa-BLR
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 172.67.73.132:8443 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 522 <none> Date: Wed, 07 Jan 2026 08:25:20 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: strict-origin-when-cross-origin X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9ba20fe629152d6d-LHR error code: 522
Open service 104.26.11.163:80 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 301 Moved Permanently
Date: Wed, 07 Jan 2026 08:25:00 GMT
Content-Length: 0
Connection: close
Location: https://api.milgo.io/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CfRUChdik8yExA93%2BwXI7To9OoJP%2FGwbt8%2BB6ueRMoYZNNnpPQ7dC46ufUG7Nm82oIR%2B6vOP6helEKzMofrsxglm2cRJ8UJNqtMq"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 9ba20fdfe94f770d-LHR
Open service 104.26.10.163:8443 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 522 <none> Date: Wed, 07 Jan 2026 08:25:20 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: strict-origin-when-cross-origin X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9ba20fe62b9c71d8-LHR error code: 522
Open service 172.67.73.132:80 · api.milgo.io
2026-01-07 08:24
HTTP/1.1 301 Moved Permanently
Date: Wed, 07 Jan 2026 08:25:00 GMT
Content-Length: 0
Connection: close
Location: https://api.milgo.io/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=U8K2cj8lyD0Rb68oev6raDlB1VIiHjz5gyjaY1Hb6fOre4SdbPywjWK%2FZPGm9vKZ8uWz%2BUEf%2F%2BQELLIrYpSxu3DR%2BgH49KCFIVW7"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 9ba20fdf9b688e4d-BLR
Open service 34.165.122.189:443 · api.milgo.io
2026-01-01 19:36
HTTP/1.1 404 Not Found Server: nginx/1.22.1 Date: Thu, 01 Jan 2026 19:36:53 GMT Content-Type: text/html; charset=utf-8 Content-Length: 139 Connection: close X-Powered-By: Express Vary: Origin Access-Control-Allow-Credentials: true Content-Security-Policy: default-src 'none' Permissions-Policy: interest-cohort=() X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: no-referrer Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>