openresty
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa367cd4c2d3138288f79c5e99111a06538b1fa9bc0
GraphQL introspection enabled at /graphql Types: 497 (by kind: ENUM: 42, INPUT_OBJECT: 85, INTERFACE: 90, OBJECT: 274, SCALAR: 5, UNION: 1) Operations: - Query: RootQuery | fields: acfOptionsErrorSettings, acfOptionsFooterSettings, acfOptionsHeaderSettings, allSettings, basicSettings - Mutation: RootMutation | fields: createCategory, createComment, createEvent, createMediaItem, createPage Directives: deprecated, include, skip (total: 3)
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa367cd4c2d3138288f79c5e99111a06538b1fa9bc0
GraphQL introspection enabled at /graphql Types: 497 (by kind: ENUM: 42, INPUT_OBJECT: 85, INTERFACE: 90, OBJECT: 274, SCALAR: 5, UNION: 1) Operations: - Query: RootQuery | fields: acfOptionsErrorSettings, acfOptionsFooterSettings, acfOptionsHeaderSettings, allSettings, basicSettings - Mutation: RootMutation | fields: createCategory, createComment, createEvent, createMediaItem, createPage Directives: deprecated, include, skip (total: 3)
Open service 37.9.175.164:443 · atelier.vvy.dev
2026-01-23 00:38
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 23 Jan 2026 00:38:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Link: <https://atelier.vvy.dev/wp-json/>; rel="https://api.w.org/"
alt-svc: h3=":443"; ma=86400
<script type="text/javascript">
window.location.replace(window.location.protocol + "//" + window.location.hostname + "/wp-admin");
</script>
Open service 37.9.175.164:80 · atelier.vvy.dev
2026-01-22 20:22
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 22 Jan 2026 20:22:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Link: <https://atelier.vvy.dev/wp-json/>; rel="https://api.w.org/"
<script type="text/javascript">
window.location.replace(window.location.protocol + "//" + window.location.hostname + "/wp-admin");
</script>
Open service 37.9.175.164:80 · atelier.vvy.dev
2026-01-22 20:22
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 22 Jan 2026 20:22:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Link: <https://atelier.vvy.dev/wp-json/>; rel="https://api.w.org/"
<script type="text/javascript">
window.location.replace(window.location.protocol + "//" + window.location.hostname + "/wp-admin");
</script>