Domain bg.staging24.gymbeam.dev
Software information
cloudflare
tcp/443
-
GraphQL introspection is enabled.
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
First seen 2025-10-19 01:59
Last seen 2026-01-22 23:14
Open for 95 days-
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa374c2942e74c2942e74c2942e74c2942e74c2942eGraphQL introspection enabled at /graphql Detected: Magento
Found on 2026-01-22 23:14 -
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3GraphQL introspection enabled at /graphql
Found on 2025-12-12 11:16 -
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a7edf4f1b1e35dd9d9b3c9a7b2b4097b0a1b0dfGraphQL introspection enabled at /graphql Types: 1018 (by kind: ENUM: 81, INPUT_OBJECT: 256, INTERFACE: 34, OBJECT: 637, SCALAR: 5, UNION: 5) Operations: - Query: Query | fields: MpRewardConfig, MpRewardIcon, MpRewardShoppingCartSpendingRules, NewestBlogPosts, RelatedBlogPosts - Mutation: Mutation | fields: AmxnotifStockSubscribe, MpRewardInvite, MpRewardRefer, MpRewardSpendingPoint, MpRewardSubscribe Directives: deprecated, include, oneOf, skip (total: 4)
Found on 2025-11-29 01:461.6 MBytes -
Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2GraphQL introspection enabled at /graphql/api
Found on 2025-11-14 12:31
-
-
Open service 188.114.97.3:443 ยท bg.staging24.gymbeam.dev
2026-01-22 23:14
HTTP/1.1 200 OK Date: Thu, 22 Jan 2026 23:14:27 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=93KvETaYc%2FeNXmcgmqyH0WfivF60THL13uYd1zrbGrr02bl8wNiWeyH27yDNAPkBmgGviWL9mA0DZulBELTY4haPCergowyK2grSGX1lF8bIJ1TXDm9X"}]} cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: same-origin link: <https://bg.staging24.gymbeam.dev/media/gymbeam/bannerslider/s/l/slider_phone_66_.jpg>; rel=preload; as="image"; fetchpriority="high", <https://bg.staging24.gymbeam.dev/media/gymbeam/bannerslider/s/l/slider_desktop_70_.jpg>; rel=preload; as="image"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/schudnut.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/budovatSvalovuHmotu.png?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/podporitRegeneraciu.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/zlepsitVyhon.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/zdravsieMaskrtit.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/zacatCvicitDoma.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/podporitImunitu.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/sportoveOblecenie.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high" origin-agent-cluster: ?1 referrer-policy: strict-origin-when-cross-origin Set-Cookie: NEXT_LOCALE=bg; Path=/; SameSite=lax store: gymbeambg strict-transport-security: max-age=631138519; includeSubDomains user-agent: Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net) vary: Accept-Encoding vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding x-content-type-options: nosniff x-customer-segment: 0db377921f4ce762c62526131097968f x-download-options: noopen x-forwarded-url: https://bg.staging24.gymbeam.dev/ x-frame-options: SAMEORIGIN x-magento-tags: store,cms_b,mp_smtp_script,cat_c,cms_b_footer_block_link_customer_service,cms_b_footer_block_link_social_media,cms_b_footer_block_link_certifications,cms_b_footer_block_link_contact,cms_p_8246,react_homepage x-middleware-rewrite: /bg x-permitted-cross-domain-policies: none x-powered-by: Next.js x-request-start-time: 1769123667230 x-trace-id: - x-xss-protection: 0 via: 1.1 google alt-svc: h3=":443"; ma=86400 cf-cache-status: DYNAMIC Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} Server-Timing: cfCacheStatus;desc="DYNAMIC" Server-Timing: cfEdge;dur=15,cfOrigin;dur=112 CF-RAY: 9c22bf67fd275d96-FRAFound 2026-01-22 by HttpPluginCreate report