BunnyCDN-DE1-1328
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa320ffa5ffb1f424cd17dd94cb097f0050792f6d47
GraphQL introspection enabled at /graphql Types: 298 (by kind: ENUM: 3, INPUT_OBJECT: 64, OBJECT: 222, SCALAR: 9) Operations: - Query: Query | fields: FAQ, FAQ_by_version, License, License_by_version, assets_undefined - Subscription: Subscription | fields: FAQ_mutated, License_mutated, assets_categories_mutated, assets_files_mutated, assets_undefined_mutated Directives: deprecated, include, skip (total: 3) Readable stores: 2 FAQ (args: optional/default) : id=1 status=published rich_text=<p style="display: flex; flex-direction: column; gap: 16px;">... License (args: optional/default) : id=1 Text=<p class="p1"><em>Last updated: Sep. 2, 2025</em></p> <p clas... Name=Terms of Service
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa320ffa5ffb1f424cd17dd94cb097f005009746f4f
GraphQL introspection enabled at /graphql Types: 298 (by kind: ENUM: 3, INPUT_OBJECT: 64, OBJECT: 222, SCALAR: 9) Operations: - Query: Query | fields: FAQ, FAQ_by_version, License, License_by_version, assets_undefined - Subscription: Subscription | fields: FAQ_mutated, License_mutated, assets_categories_mutated, assets_files_mutated, assets_undefined_mutated Directives: deprecated, include, skip (total: 3) Readable stores: 2 FAQ (args: optional/default) : rich_text=<p style="display: flex; flex-direction: column; gap: 16px;">... id=1 status=published License (args: optional/default) : id=1 Text=<p class="p1"><em>Last updated: Sep. 2, 2025</em></p> <p clas... Name=Terms of Service
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa320ffa5ffb1f424cd17dd94cb097f0050813bba23
GraphQL introspection enabled at /graphql Types: 298 (by kind: ENUM: 3, INPUT_OBJECT: 64, OBJECT: 222, SCALAR: 9) Operations: - Query: Query | fields: FAQ, FAQ_by_version, License, License_by_version, assets_undefined - Subscription: Subscription | fields: FAQ_mutated, License_mutated, assets_categories_mutated, assets_files_mutated, assets_undefined_mutated Directives: deprecated, include, skip (total: 3) Readable stores: 2 FAQ (args: optional/default) : status=published rich_text=<p style="display: flex; flex-direction: column; gap: 16px;">... id=1 License (args: optional/default) : id=1 Text=<p class="p1"><em>Last updated: Sep. 2, 2025</em></p> <p clas... Name=Terms of Service
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa320ffa5ffb1f424cd17dd94cb097f0050dc16ccc5
GraphQL introspection enabled at /graphql Types: 298 (by kind: ENUM: 3, INPUT_OBJECT: 64, OBJECT: 222, SCALAR: 9) Operations: - Query: Query | fields: FAQ, FAQ_by_version, License, License_by_version, assets_undefined - Subscription: Subscription | fields: FAQ_mutated, License_mutated, assets_categories_mutated, assets_files_mutated, assets_undefined_mutated Directives: deprecated, include, skip (total: 3) Readable stores: 2 FAQ (args: optional/default) : status=published rich_text=<p style="display: flex; flex-direction: column; gap: 16px;">... id=1 License (args: optional/default) : Text=<p class="p1"><em>Last updated: Sep. 2, 2025</em></p> <p clas... Name=Terms of Service id=1
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa320ffa5ffb1f424cd17dd94cb097f00507a3a2cff
GraphQL introspection enabled at /graphql Types: 298 (by kind: ENUM: 3, INPUT_OBJECT: 64, OBJECT: 222, SCALAR: 9) Operations: - Query: Query | fields: FAQ, FAQ_by_version, License, License_by_version, assets_undefined - Subscription: Subscription | fields: FAQ_mutated, License_mutated, assets_categories_mutated, assets_files_mutated, assets_undefined_mutated Directives: deprecated, include, skip (total: 3) Readable stores: 2 FAQ (args: optional/default) : id=1 status=published rich_text=<p style="display: flex; flex-direction: column; gap: 16px;">... License (args: optional/default) : Name=Terms of Service id=1 Text=<p class="p1"><em>Last updated: Sep. 2, 2025</em></p> <p clas...
Open service 185.111.111.154:443 · cdn.ls.graphics
2026-01-09 12:58
HTTP/1.1 302 Found Date: Fri, 09 Jan 2026 12:58:21 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Server: BunnyCDN-DE1-1328 CDN-PullZone: 4042738 CDN-RequestCountryCode: DE Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Range Location: ./admin Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob: https://raw.githubusercontent.com https://avatars.githubusercontent.com;media-src 'self';connect-src 'self' https://* wss://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Strict-Transport-Security: max-age=31536000 CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 01/08/2026 18:54:59 CDN-EdgeStorageId: 1332 CDN-RequestId: 510f82b264da26c8eab1d8ce97feeb59 CDN-Cache: HIT CDN-Status: 302 CDN-RequestTime: 0 Found. Redirecting to ./admin
Open service 185.111.111.154:443 · cdn.ls.graphics
2026-01-02 07:54
HTTP/1.1 302 Found Date: Fri, 02 Jan 2026 07:54:02 GMT Content-Type: text/html; charset=utf-8 Content-Length: 36 Connection: close Server: BunnyCDN-DE1-1328 CDN-PullZone: 4042738 CDN-RequestCountryCode: US Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Range Location: ./admin Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob: https://raw.githubusercontent.com https://avatars.githubusercontent.com;media-src 'self';connect-src 'self' https://* wss://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Strict-Transport-Security: max-age=31536000 CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 12/09/2025 07:24:50 CDN-EdgeStorageId: 1332 CDN-RequestId: 05ae0f8cd298b69b24a6e9b4d024225a CDN-Cache: HIT CDN-Status: 302 CDN-RequestTime: 0 <p>Found. Redirecting to ./admin</p>
Open service 185.111.111.154:443 · cdn.ls.graphics
2025-12-23 07:00
HTTP/1.1 302 Found Date: Tue, 23 Dec 2025 07:00:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 36 Connection: close Server: BunnyCDN-DE1-1328 CDN-PullZone: 4042738 CDN-RequestCountryCode: NL Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Range Location: ./admin Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob: https://raw.githubusercontent.com https://avatars.githubusercontent.com;media-src 'self';connect-src 'self' https://* wss://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Strict-Transport-Security: max-age=31536000 CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 12/09/2025 07:24:50 CDN-EdgeStorageId: 1332 CDN-RequestId: ff1183e5f1a6e846e95c611bb8e0bee0 CDN-Cache: HIT CDN-Status: 302 CDN-RequestTime: 0 <p>Found. Redirecting to ./admin</p>
Open service 185.111.111.154:443 · cdn.ls.graphics
2025-12-21 00:16
HTTP/1.1 302 Found Date: Sun, 21 Dec 2025 00:16:37 GMT Content-Type: text/html; charset=utf-8 Content-Length: 36 Connection: close Server: BunnyCDN-DE1-1328 CDN-PullZone: 4042738 CDN-RequestCountryCode: GB Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Range Location: ./admin Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob: https://raw.githubusercontent.com https://avatars.githubusercontent.com;media-src 'self';connect-src 'self' https://* wss://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Strict-Transport-Security: max-age=31536000 CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 12/09/2025 07:24:50 CDN-EdgeStorageId: 1332 CDN-RequestId: f3750b86a54321650cedfa56dd387d6c CDN-Cache: HIT CDN-Status: 302 CDN-RequestTime: 0 <p>Found. Redirecting to ./admin</p>