Apache
tcp/443
awselb 2.0
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa37dd2db492eb743ebbd7f0c0cdef2a19a5e28dcda
GraphQL introspection enabled at /graphql Types: 55 (by kind: ENUM: 10, INPUT_OBJECT: 6, OBJECT: 33, SCALAR: 6) Operations: - Query: Query | fields: me, product, products, shopInfo, shoppingCart - Mutation: Mutation | fields: addToCart, loginWeb, removeFromCart, removeFromWaitlist, updateCartQuantity Directives: deprecated, include, skip (total: 3)
Open service 151.101.130.132:443 · apparelapps.org
2026-01-09 09:31
HTTP/1.1 200 OK Connection: close Content-Type: text/html; charset=UTF-8 Server: Apache Cache-Control: no-cache, private Content-Security-Policy: default-src 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data: blob: android-webview-video-poster:; font-src * data:; connect-src * blob:; media-src * blob:; frame-src * blob: navigate:; worker-src 'self' blob:; frame-ancestors *; form-action 'self' www.facebook.com tr.snapchat.com pos.commentsoldlima.com; object-src 'none'; manifest-src *; child-src 'self' blob: x-robots-tag: all X-Request-Id: d7f86281-e673-4ae3-97fd-6f75bfb9e066 Set-Cookie: laravel_session=eyJpdiI6IksvQjdETWdmS3ZYTnM4QnJUTHUvR1E9PSIsInZhbHVlIjoiQWE4RmErck9kblhna3Y1TTRSc0ZNS05JdENGZFBnRTZ5dHovNmNDMUwxU2hHMkFzNTh5VTEzWDQyQUZicUNQckxoaUNzeVN4RjE2dllXSTRXMFRwN21xWTdVczNDUHFWK2QvRUhLZDlkbW5yb0pQcnVycng3V1NvdlE5dGJqYWsiLCJtYWMiOiI0NzU4NGY5NzQ2MWQzZWY1OWMxYzU0M2E4OTljODc4YjUzYjI5MzIwZGY1MTU0ZmVkNGEyNTRhMGM0NmE1YmI0IiwidGFnIjoiIn0%3D; expires=Tue, 10 Mar 2026 09:31:42 GMT; Max-Age=5184000; path=/; secure; httponly; samesite=none Set-Cookie: 36M6YKFOiT2baF6bjl3bZlIvtFHGWySN20C2RgJ0=eyJpdiI6IlZ0VUE3WnZCRmZhUFRrMHJzVDVJd1E9PSIsInZhbHVlIjoiMTZPZlNpN2ZRT1BaR1FlTm5CeVpRRXUySlBMRzYvQlIxOHVvMzRERk1kcVhwVE9KZXF1UHVNbko0cWJVUHRIZjVCQ0RUeFBCdzdOYVpUMUY4enp5SDZhT2pjSSt1Z2FGelZGZ05EcnZybW10Q2ZPcUtnZGtFQldtaldadlhXcFd5UUVqZ2w0RlJqaElZVWUvMS8va01PSitTZFhUODdseGExRkJsYksxdUM4SXRsWUVKZXFBdVo2SDdYeTZyRVc1Mm1pYnBTdnhKamlOek9aL0FydldxcjhCR0VBYWZBVW1tc0NxYVpwQmhleEEvZHlmeU01cklJMnZqblloWTBVT2VTcUJvYmQ3V1NPTFQwbjFaLzBUUHlyUVl1QjV1WnZ5NEp4UkIyYXNWYTFLdHpZY1dUQ1NMNERncnNSMWNVN2c2ejZ2TnNTb1h5bDY3M1c1a1VRZEQ0RDNkMG9jV0ZMMmZPUExicS9NbW5lVDI3WUJNV2RhbTA5VVIxWSszRjBvTVlVVGwvNXdlcUMrZkl2OXlsRWg5N1BxUlRiSlNlMlRlZW5ZZzNNL2JVRmRzZ2F5YUdaQUNLRm4vVkFIQXlla3FGOGl6MVVEOUNwR2FHVnlPR2hQa0hhSkprRlR5NzhnbU9aM0VLWVF4TnIvc1R5LzluQnNVakJTRUUxdS9UOWgiLCJtYWMiOiI5NWI4YTdiYzA5YjNmZDY1NDM4YjllNzdkZjk0MjgwZWU4OTg5ZjkxMjQwYTU5MDcxYTI2ODgwNjg4NjhiNDYxIiwidGFnIjoiIn0%3D; expires=Tue, 10 Mar 2026 09:31:42 GMT; Max-Age=5184000; path=/; secure; httponly; samesite=none Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token, Accept-Encoding Accept-Ranges: bytes Date: Fri, 09 Jan 2026 09:31:42 GMT Via: 1.1 varnish X-Served-By: cache-vie6326-VIE X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1767951102.994670,VS0,VE946 Vary: Accept-Encoding Strict-Transport-Security: max-age=300 transfer-encoding: chunked
Open service 151.101.130.132:443 · apparelapps.org
2026-01-02 12:11
HTTP/1.1 200 OK Connection: close Content-Type: text/html; charset=UTF-8 Server: Apache Cache-Control: no-cache, private Content-Security-Policy: default-src 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data: blob: android-webview-video-poster:; font-src * data:; connect-src * blob:; media-src * blob:; frame-src * blob: navigate:; worker-src 'self' blob:; frame-ancestors *; form-action 'self' www.facebook.com tr.snapchat.com pos.commentsoldlima.com; object-src 'none'; manifest-src *; child-src 'self' blob: x-robots-tag: all X-Request-Id: 96516136-c99a-4ee8-ad7b-4ffac923c697 Set-Cookie: laravel_session=eyJpdiI6IjQvbk56UFBTK2NyVTBwT0V0NitWN1E9PSIsInZhbHVlIjoiLzU3SGRYT1ZIczVnc0Z4RUZhaCtSOWtqL2E1UkkrWjBXN1FXSGI2TmtNYmhYVFVCNy9ZUFc3N3ZIbkVWZC9tRkloUHBDa0NUdlkvek1MOHgvd3dqS0RLU2xiV21ZVWxWenV2dm9nZ09ZUXQ2QVd6WlFCbEdqK2YyUFMzNXhUTjIiLCJtYWMiOiI0YmEyZmRiMWFhNDEwZjZmODRkYmZmMmFiN2ZkMmE3MmZmNTI2NmUyNWNiNWY2ZDY2YmRlZTJhYWIzN2I5MjlmIiwidGFnIjoiIn0%3D; expires=Tue, 03 Mar 2026 12:11:41 GMT; Max-Age=5184000; path=/; secure; httponly; samesite=none Set-Cookie: 9xni1qCG4lKVQkCWfCmOrvwrxu7CWIroNX2O96IV=eyJpdiI6IlBhUnBKS2U1VU56ek0zcHkwZ0FmeFE9PSIsInZhbHVlIjoiaU5pMWdDRktiOFlWMjVhbit1QnQvMUpBL05RODVvOWJyN0FKTVMrUXJHOVZxYkNpUDRQOVMwUXExZFk0SHNPVk56SjZOcitMRHlIM2tPT1ZIcmI0UnpZbmFTUm5wQlNDZmt4K1dOazFKa1RUanloaDdtNHFFSytnYTBhUlZ5bEVWa2EvQkF2RkR0bjA0MHZMaWlGdG9ldGwxYXJyNWxDMW9aTkY2SFB1RmJvbW8xcnlYQUk1cHY4Z0x3bUxaVnI2WlRNckt3N1NJQ0RiaWt4S1ZTbVg5eFBnRS82TGlxYWVONkdYckttd2hsVTJVaDFGazVCR20wWDU3Z0FObW1wUFJ1QWZKLytKQklkc0xWUFhjVUE4ejNhMVN3ck9qeXY3dkFMSHViZ04zNmM1cEpVc2VjR2RKVWJUZTZBTkY2cXFRY3JpWlFYVmpCMk1oMHdvczF1S084RkVJTkdiQ0kyODRPZWVydnRTbnIwVU41clVRVUNTRmpUMDJGV0YzM0RGUFFkOVkzYnMvVUpOWlNuUDhrc3dDeG1YUEswNWhEVloyWGs2aG1DT0F6d25YV1BTODZEeUVYNXA2UTF1cDlHRWZFdlEzRmloOFZVN3o5c2FZU09NUXN0bDdDUVBaWmEwRUVKb0VQUWRKSHBON3NDVm83UTEzZ3Flcm8xWXUxNmIiLCJtYWMiOiI1ODFkY2EwNTZhODc0YTc2ZDc2ZTc4MjAzYThiOWY5ZDk0NjFhZjFhNjgyOTBmNmI2MDhlZTM3OGQ3YWJhOTBhIiwidGFnIjoiIn0%3D; expires=Tue, 03 Mar 2026 12:11:41 GMT; Max-Age=5184000; path=/; secure; httponly; samesite=none Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token, Accept-Encoding Accept-Ranges: bytes Date: Fri, 02 Jan 2026 12:11:41 GMT Via: 1.1 varnish X-Served-By: cache-sjc1000127-SJC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1767355901.709737,VS0,VE609 Vary: Accept-Encoding Strict-Transport-Security: max-age=300 transfer-encoding: chunked
Open service 151.101.130.132:443 · apparelapps.org
2025-12-23 00:16
HTTP/1.1 503 Service Temporarily Unavailable Connection: close Content-Length: 162 Server: awselb/2.0 Content-Type: text/html Fastly-Restarts: 1 Accept-Ranges: bytes Date: Tue, 23 Dec 2025 00:16:46 GMT Via: 1.1 varnish X-Served-By: cache-yyz4578-YYZ X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1766449006.319394,VS0,VE194 Strict-Transport-Security: max-age=300 Page title: 503 Service Temporarily Unavailable <html> <head><title>503 Service Temporarily Unavailable</title></head> <body> <center><h1>503 Service Temporarily Unavailable</h1></center> </body> </html>
Open service 151.101.130.132:443 · apparelapps.org
2025-12-21 07:08
HTTP/1.1 503 Service Temporarily Unavailable Connection: close Content-Length: 162 Server: awselb/2.0 Content-Type: text/html Fastly-Restarts: 1 Accept-Ranges: bytes Date: Sun, 21 Dec 2025 07:08:35 GMT Via: 1.1 varnish X-Served-By: cache-rtm-ehrd2290022-RTM X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1766300915.639594,VS0,VE776 Strict-Transport-Security: max-age=300 Page title: 503 Service Temporarily Unavailable <html> <head><title>503 Service Temporarily Unavailable</title></head> <body> <center><h1>503 Service Temporarily Unavailable</h1></center> </body> </html>
Open service 151.101.130.132:443 · apparelapps.org
2025-12-19 05:35
HTTP/1.1 503 Service Temporarily Unavailable Connection: close Content-Length: 162 Server: awselb/2.0 Content-Type: text/html Fastly-Restarts: 1 Accept-Ranges: bytes Date: Fri, 19 Dec 2025 05:35:40 GMT Via: 1.1 varnish X-Served-By: cache-rtm-ehrd2290045-RTM X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1766122540.720732,VS0,VE527 Strict-Transport-Security: max-age=300 Page title: 503 Service Temporarily Unavailable <html> <head><title>503 Service Temporarily Unavailable</title></head> <body> <center><h1>503 Service Temporarily Unavailable</h1></center> </body> </html>