CloudFront
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa36f82c0547bba719896f25e707466017174660171
GraphQL introspection enabled at /graphql Types: 91 (by kind: ENUM: 9, INPUT_OBJECT: 8, INTERFACE: 7, OBJECT: 59, SCALAR: 7, UNION: 1) Operations: - Query: Query | fields: categories, products, recommendations, refineProduct, variants Directives: defer, deprecated, include, skip, specifiedBy (total: 5)
Open service 108.138.36.126:80 · autoparts.greshamtoyota.com
2026-01-05 10:56
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 05 Jan 2026 10:56:08 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://autoparts.greshamtoyota.com/ X-Cache: Redirect from cloudfront Via: 1.1 82fdc4c167a56caabe3a8a99b02abee4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: xr7Za-6BnsfSV4SwkjC1GLwI1Ow3JjI6f4UvJp_S5TKInGoNcYFc5A== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 108.138.36.124:80 · autoparts.greshamtoyota.com
2026-01-05 10:56
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 05 Jan 2026 10:56:07 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://autoparts.greshamtoyota.com/ X-Cache: Redirect from cloudfront Via: 1.1 73b81cd9bd041c21d2fd170c0f53e030.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: eUWMPNeW6vKkVeNoS1qwZkLp5F_1v0h4lwiiG_5GQs8ckTyFZrEw9g== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 108.138.36.10:443 · autoparts.greshamtoyota.com
2026-01-05 10:56
HTTP/1.1 403 Forbidden Server: CloudFront Date: Mon, 05 Jan 2026 10:56:07 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 210c8ad3e752d602af05a2de06eb2ff8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: uDF3dLEZ3hA8ImFmGgjpFjAk-1xNy9cJbiFlzmplfKs9RRv2oXPi8A== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: uDF3dLEZ3hA8ImFmGgjpFjAk-1xNy9cJbiFlzmplfKs9RRv2oXPi8A== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Open service 108.138.36.43:80 · autoparts.greshamtoyota.com
2026-01-05 10:56
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 05 Jan 2026 10:56:07 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://autoparts.greshamtoyota.com/ X-Cache: Redirect from cloudfront Via: 1.1 05e8912dc00dd796ed2b040e3237568e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: V1eTtXTARetnM8DmSeyQM8SyCpz85WvXdxOqf9hP9Pxiwbmnk0s3Kw== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 108.138.36.124:443 · autoparts.greshamtoyota.com
2026-01-05 10:56
HTTP/1.1 403 Forbidden Server: CloudFront Date: Mon, 05 Jan 2026 10:56:07 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 91220e34cbdd95f669dbfd83e711fee6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: 7CM0HsjeHZugMSpk0-dYJVEyT0dI-DajPSiD1-R4MRpYewu0gCaX2g== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: 7CM0HsjeHZugMSpk0-dYJVEyT0dI-DajPSiD1-R4MRpYewu0gCaX2g== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Open service 108.138.36.10:80 · autoparts.greshamtoyota.com
2026-01-05 10:56
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Mon, 05 Jan 2026 10:56:08 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://autoparts.greshamtoyota.com/ X-Cache: Redirect from cloudfront Via: 1.1 82fdc4c167a56caabe3a8a99b02abee4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: E5yfnHQVfupOHAOWqiACZiMokpj60AKh2qGPnZl3TFzQVnOR1QBnRQ== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 108.138.36.126:443 · autoparts.greshamtoyota.com
2026-01-05 10:56
HTTP/1.1 403 Forbidden Server: CloudFront Date: Mon, 05 Jan 2026 10:56:08 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 09b934fc5a2991212bdc3b299a0a1cb4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: 3BjxhAldtpd4sY8mO8FkcShDPrzDEaLJRK3DJnr8ukBJVc1EfgvQzA== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: 3BjxhAldtpd4sY8mO8FkcShDPrzDEaLJRK3DJnr8ukBJVc1EfgvQzA== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Open service 108.138.36.43:443 · autoparts.greshamtoyota.com
2026-01-05 10:56
HTTP/1.1 403 Forbidden Server: CloudFront Date: Mon, 05 Jan 2026 10:56:08 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 a79cccd642ddc0038c3b0c4a9e7fcd6c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: bYqyrVPmADurYZb3W6mdBsM1ccIRi_ifkr3wM_BTloESL6QwJNxe4g== Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: bYqyrVPmADurYZb3W6mdBsM1ccIRi_ifkr3wM_BTloESL6QwJNxe4g== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>