cloudflare
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
GraphQL introspection enabled at /graphql
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa374c2942e74c2942e74c2942e74c2942e74c2942e
GraphQL introspection enabled at /graphql Detected: Magento
Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2
GraphQL introspection enabled at /graphql/api
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3735153f777e7e9e5b395c8c26780941ff9602e47
GraphQL introspection enabled at /graphql Types: 1017 (by kind: ENUM: 81, INPUT_OBJECT: 255, INTERFACE: 34, OBJECT: 637, SCALAR: 5, UNION: 5) Operations: - Query: Query | fields: MpRewardConfig, MpRewardIcon, MpRewardShoppingCartSpendingRules, NewestBlogPosts, RelatedBlogPosts - Mutation: Mutation | fields: AmxnotifStockSubscribe, MpRewardInvite, MpRewardRefer, MpRewardSpendingPoint, MpRewardSubscribe Directives: deprecated, include, oneOf, skip (total: 4)
Open service 104.26.12.78:443 · ba.next.gymbeam.dev
2026-01-23 06:50
HTTP/1.1 200 OK
Date: Fri, 23 Jan 2026 06:50:56 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=5lWpyWJe1DslBcmt6tVT%2FKdqncEr47WLTi61rFgMh2Vp2ls7D0btdS6EqUnaVzKpnupiOxFmw8e9XZAJaw6LuzlC%2FpSzlPdrNv%2FHe1GiIx5OIw%3D%3D"}]}
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: same-origin
link: <https://ba.next.gymbeam.dev/media/gymbeam/bannerslider/s/k/sk_general-slider-mobile_1.jpg>; rel=preload; as="image"; fetchpriority="high", <https://ba.next.gymbeam.dev/media/gymbeam/bannerslider/s/k/sk_general-slider-desktop_1_1.jpg>; rel=preload; as="image"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/schudnut.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/budovatSvalovuHmotu.png?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/podporitRegeneraciu.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/zlepsitVyhon.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/zdravsieMaskrtit.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/zacatCvicitDoma.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/podporitImunitu.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/sportoveOblecenie.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high"
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
Set-Cookie: NEXT_LOCALE=bs; Path=/; SameSite=lax
store: gymbeamba
strict-transport-security: max-age=631138519; includeSubDomains
user-agent: Mozilla/5.0 (l9scan/2.0.8373e22313e26323e2430313; +https://leakix.net)
vary: Accept-Encoding
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding
x-content-type-options: nosniff
x-customer-segment: 0db377921f4ce762c62526131097968f
x-download-options: noopen
x-forwarded-url: https://ba.next.gymbeam.dev/
x-frame-options: SAMEORIGIN
x-magento-tags: store,cms_b,mp_smtp_script,cat_c,cms_b_footer_block_link_customer_service,cms_b_footer_block_link_social_media,cms_b_footer_block_link_certifications,cms_b_footer_block_link_contact,cms_p_8246,react_homepage
x-middleware-rewrite: /bs
x-permitted-cross-domain-policies: none
x-powered-by: Next.js
x-request-start-time: 1769151056877
x-trace-id: -
x-xss-protection: 0
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=7,cfOrigin;dur=146
CF-RAY: 9c255c191e5d97ed-EWR
Open service 104.26.12.78:443 · ba.next.gymbeam.dev
2026-01-10 01:05
HTTP/1.1 200 OK
Date: Sat, 10 Jan 2026 01:05:46 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=AYX5ibS1Ip9FogAZwiOfKDxpMHHjgbYNnl5wajCzshinYY76BV0iZkhD73ckzsI0kBHjUn5ZpIxtGHaZ5vkc2gogaUH3FX2M2%2BMYgQhISlRWzw%3D%3D"}]}
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
store: gymbeamba
strict-transport-security: max-age=631138519; includeSubDomains
user-agent: Mozilla/5.0 (l9scan/2.0.8373e22313e26323e2430313; +https://leakix.net)
vary: Accept-Encoding
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding
x-content-type-options: nosniff
x-customer-segment: 0db377921f4ce762c62526131097968f
x-download-options: noopen
x-forwarded-url: https://ba.next.gymbeam.dev/
x-frame-options: SAMEORIGIN
x-magento-tags: store,cms_b,mp_smtp_script,cat_c,cms_b_footer_block_link_customer_service,cms_b_footer_block_link_social_media,cms_b_footer_block_link_certifications,cms_b_footer_block_link_contact,cms_p_8246,react_homepage
x-middleware-rewrite: /bs
x-permitted-cross-domain-policies: none
x-powered-by: Next.js
x-trace-id: 4ezEs_5_OAzLJ5Yyhx14e
x-xss-protection: 0
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=7,cfOrigin;dur=220
CF-RAY: 9bb844967a9ed396-FRA
Open service 104.26.12.78:443 · ba.next.gymbeam.dev
2026-01-02 18:40
HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 18:40:58 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=iX0D7h3Izso%2FO4vwEZwOWBgYXURbC75bh9Uw6sWnlVyCrmeMZyAAzf3Q3rDaxNI%2FsBXirPdlP7YhKdTIQLah55M6XZHSMkeXkaahyx4X60lKMQ%3D%3D"}]}
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
store: gymbeamba
strict-transport-security: max-age=631138519; includeSubDomains
user-agent: Mozilla/5.0 (l9scan/2.0.8373e22313e26323e2430313; +https://leakix.net)
vary: Accept-Encoding
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding
x-content-type-options: nosniff
x-customer-segment: 0db377921f4ce762c62526131097968f
x-download-options: noopen
x-forwarded-url: https://ba.next.gymbeam.dev/
x-frame-options: SAMEORIGIN
x-magento-tags: store,cms_b,mp_smtp_script,cat_c,cms_b_footer_block_link_customer_service,cms_b_footer_block_link_social_media,cms_b_footer_block_link_certifications,cms_b_footer_block_link_contact,cms_p_8246,react_homepage
x-middleware-rewrite: /bs
x-permitted-cross-domain-policies: none
x-powered-by: Next.js
x-trace-id: xzofzOxeBunUl5Gh13KhR
x-xss-protection: 0
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=9,cfOrigin;dur=439
CF-RAY: 9b7c63481e7581e7-EWR
Open service 104.26.12.78:443 · ba.next.gymbeam.dev
2025-12-23 06:47
HTTP/1.1 200 OK
Date: Tue, 23 Dec 2025 06:47:32 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Xqc3vP1tC6rOXf5rcLQfEcjA4Bz4xsK5v%2B9IHPlWcCqH5gqAj1sM4tw1VBhXow51wjy2s9htPYiezVBGyK0Sq9REC7fyL3sDRskueIP8VucjEg%3D%3D"}]}
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
store: gymbeamba
strict-transport-security: max-age=631138519; includeSubDomains
user-agent: Mozilla/5.0 (l9scan/2.0.8373e22313e26323e2430313; +https://leakix.net)
vary: Accept-Encoding
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding
x-content-type-options: nosniff
x-customer-segment: 0db377921f4ce762c62526131097968f
x-download-options: noopen
x-forwarded-url: https://ba.next.gymbeam.dev/
x-frame-options: SAMEORIGIN
x-magento-tags: store,cms_b,mp_smtp_script,cat_c,cms_b_footer_block_link_customer_service,cms_b_footer_block_link_social_media,cms_b_footer_block_link_certifications,cms_b_footer_block_link_contact,cms_p_8246,react_homepage
x-middleware-rewrite: /bs
x-permitted-cross-domain-policies: none
x-powered-by: Next.js
x-trace-id: RUoRk2P3mpoeNM6HkMXZc
x-xss-protection: 0
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=8,cfOrigin;dur=114
CF-RAY: 9b25e87dacf1dc9e-FRA