nginx
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
GraphQL introspection enabled at /graphql
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa32e73dc747518467899929a00240adbdc34ecd264
GraphQL introspection enabled at /graphql Types: 596 (by kind: ENUM: 47, INPUT_OBJECT: 103, INTERFACE: 109, OBJECT: 331, SCALAR: 5, UNION: 1) Operations: - Query: RootQuery | fields: actionMonitorAction, actionMonitorActionBy, actionMonitorActions, allSettings, cartListing - Mutation: RootMutation | fields: createActionMonitorAction, createCartListing, createCartcompany, createCartshowcase, createCategory Directives: deprecated, include, skip (total: 3)
Open service 192.0.78.172:443 · constructivebuiltenvironment.com
2026-01-09 16:48
HTTP/1.1 200 OK Server: nginx Date: Fri, 09 Jan 2026 16:48:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: accept, content-type, cookie Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com") Link: <https://constructivebuiltenvironment.com/wp-json/>; rel="https://api.w.org/" Link: <https://constructivebuiltenvironment.com/wp-json/wp/v2/pages/1889>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PfD4b0-ut>; rel=shortlink Last-Modified: Wed, 07 Jan 2026 12:19:37 GMT Cache-Control: max-age=300, must-revalidate X-nananana: Batcache-Set X-ac: 22.hhn _atomic_ams UPDATING Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=hhn, cache;desc=UPDATING;dur=2.0
Open service 192.0.78.250:443 · constructivebuiltenvironment.com
2026-01-08 20:41
HTTP/1.1 200 OK Server: nginx Date: Thu, 08 Jan 2026 20:41:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: accept, content-type, cookie Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com") Link: <https://constructivebuiltenvironment.com/wp-json/>; rel="https://api.w.org/" Link: <https://constructivebuiltenvironment.com/wp-json/wp/v2/pages/1889>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PfD4b0-ut>; rel=shortlink X-ac: 24.jfk _atomic_dca HIT Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=jfk, cache;desc=HIT;dur=1.0
Open service 192.0.78.172:443 · constructivebuiltenvironment.com
2026-01-02 23:51
HTTP/1.1 200 OK Server: nginx Date: Fri, 02 Jan 2026 23:51:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: accept, content-type, cookie Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com") Link: <https://constructivebuiltenvironment.com/wp-json/>; rel="https://api.w.org/" Link: <https://constructivebuiltenvironment.com/wp-json/wp/v2/pages/1889>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PfD4b0-ut>; rel=shortlink X-ac: 31.sin _atomic_bur UPDATING Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=sin, cache;desc=UPDATING;dur=2.0
Open service 192.0.78.250:443 · constructivebuiltenvironment.com
2026-01-01 20:53
HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Jan 2026 20:53:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: accept, content-type, cookie Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com") Link: <https://constructivebuiltenvironment.com/wp-json/>; rel="https://api.w.org/" Link: <https://constructivebuiltenvironment.com/wp-json/wp/v2/pages/1889>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PfD4b0-ut>; rel=shortlink X-ac: 1.ams _atomic_ams UPDATING Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=ams, cache;desc=UPDATING;dur=1.0
Open service 192.0.78.250:443 · constructivebuiltenvironment.com
2025-12-30 05:25
HTTP/1.1 200 OK Server: nginx Date: Tue, 30 Dec 2025 05:25:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: accept, content-type, cookie Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com") Link: <https://constructivebuiltenvironment.com/wp-json/>; rel="https://api.w.org/" Link: <https://constructivebuiltenvironment.com/wp-json/wp/v2/pages/1889>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PfD4b0-ut>; rel=shortlink Last-Modified: Sat, 27 Dec 2025 01:43:12 GMT Cache-Control: max-age=300, must-revalidate X-nananana: Batcache-Set X-ac: 22.hhn _atomic_ams UPDATING Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=hhn, cache;desc=UPDATING;dur=2.0
Open service 192.0.78.250:443 · constructivebuiltenvironment.com
2025-12-23 05:12
HTTP/1.1 200 OK Server: nginx Date: Tue, 23 Dec 2025 05:12:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: accept, content-type, cookie Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com") Link: <https://constructivebuiltenvironment.com/wp-json/>; rel="https://api.w.org/" Link: <https://constructivebuiltenvironment.com/wp-json/wp/v2/pages/1889>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PfD4b0-ut>; rel=shortlink Last-Modified: Sat, 13 Dec 2025 13:51:53 GMT Cache-Control: max-age=300, must-revalidate X-nananana: Batcache-Set X-ac: 1.bom _atomic_dca UPDATING Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=bom, cache;desc=UPDATING;dur=2.0
Open service 192.0.78.172:443 · constructivebuiltenvironment.com
2025-12-23 03:15
HTTP/1.1 200 OK Server: nginx Date: Tue, 23 Dec 2025 03:15:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: accept, content-type, cookie Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com") Link: <https://constructivebuiltenvironment.com/wp-json/>; rel="https://api.w.org/" Link: <https://constructivebuiltenvironment.com/wp-json/wp/v2/pages/1889>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PfD4b0-ut>; rel=shortlink X-ac: 24.jfk _atomic_dca UPDATING Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=jfk, cache;desc=UPDATING;dur=3.0
Open service 192.0.78.172:443 · constructivebuiltenvironment.com
2025-12-21 07:52
HTTP/1.1 200 OK Server: nginx Date: Sun, 21 Dec 2025 07:52:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: accept, content-type, cookie Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com") Link: <https://constructivebuiltenvironment.com/wp-json/>; rel="https://api.w.org/" Link: <https://constructivebuiltenvironment.com/wp-json/wp/v2/pages/1889>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PfD4b0-ut>; rel=shortlink Last-Modified: Tue, 16 Dec 2025 20:20:23 GMT Cache-Control: max-age=300, must-revalidate X-nananana: Batcache-Set X-ac: 24.jfk _atomic_dca UPDATING Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=jfk, cache;desc=UPDATING;dur=2.0
Open service 192.0.78.250:443 · constructivebuiltenvironment.com
2025-12-21 03:48
HTTP/1.1 200 OK Server: nginx Date: Sun, 21 Dec 2025 03:48:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: accept, content-type, cookie Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com") Link: <https://constructivebuiltenvironment.com/wp-json/>; rel="https://api.w.org/" Link: <https://constructivebuiltenvironment.com/wp-json/wp/v2/pages/1889>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PfD4b0-ut>; rel=shortlink X-ac: 22.hhn _atomic_ams UPDATING Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=hhn, cache;desc=UPDATING;dur=1.0
Open service 192.0.78.172:443 · constructivebuiltenvironment.com
2025-12-19 09:29
HTTP/1.1 200 OK Server: nginx Date: Fri, 19 Dec 2025 09:29:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: accept, content-type, cookie Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com") Link: <https://constructivebuiltenvironment.com/wp-json/>; rel="https://api.w.org/" Link: <https://constructivebuiltenvironment.com/wp-json/wp/v2/pages/1889>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PfD4b0-ut>; rel=shortlink Last-Modified: Fri, 19 Dec 2025 09:29:13 GMT Cache-Control: max-age=300, must-revalidate X-nananana: Batcache-Set X-ac: 1.ams _atomic_ams MISS Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=1542.0
Open service 192.0.78.250:443 · constructivebuiltenvironment.com
2025-12-19 04:02
HTTP/1.1 200 OK Server: nginx Date: Fri, 19 Dec 2025 04:02:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-hacker: Want root? Visit join.a8c.com and mention this header. Host-Header: WordPress.com Vary: accept, content-type, cookie Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com") Link: <https://constructivebuiltenvironment.com/wp-json/>; rel="https://api.w.org/" Link: <https://constructivebuiltenvironment.com/wp-json/wp/v2/pages/1889>; rel="alternate"; title="JSON"; type="application/json" Link: <https://wp.me/PfD4b0-ut>; rel=shortlink X-ac: 22.hhn _atomic_ams UPDATING Alt-Svc: h3=":443"; ma=86400 Server-Timing: a8c-cdn, dc;desc=hhn, cache;desc=UPDATING;dur=1.0