nginx
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3a803e331a8ecd5335752ab0c2592b4ce32baa857
GraphQL introspection enabled at /graphql Types: 73 (by kind: ENUM: 3, INPUT_OBJECT: 23, OBJECT: 37, SCALAR: 10) Operations: - Query: Query | fields: business_cards, business_cards_aggregated, business_cards_by_id, business_cards_by_version, business_cards_files - Mutation: Mutation | fields: create_business_cards_files_item, create_business_cards_files_items, create_business_cards_item, create_business_cards_items, create_maps_poi_items - Subscription: Subscription | fields: business_cards_files_mutated, business_cards_mutated, directus_files_mutated, directus_folders_mutated, directus_users_mutated Directives: deprecated, include, skip (total: 3) Readable stores: 0
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3a803e331a8ecd5335752ab0c2592b4ce32baa857
GraphQL introspection enabled at /graphql Types: 73 (by kind: ENUM: 3, INPUT_OBJECT: 23, OBJECT: 37, SCALAR: 10) Operations: - Query: Query | fields: business_cards, business_cards_aggregated, business_cards_by_id, business_cards_by_version, business_cards_files - Mutation: Mutation | fields: create_business_cards_files_item, create_business_cards_files_items, create_business_cards_item, create_business_cards_items, create_maps_poi_items - Subscription: Subscription | fields: business_cards_files_mutated, business_cards_mutated, directus_files_mutated, directus_folders_mutated, directus_users_mutated Directives: deprecated, include, skip (total: 3) Readable stores: 0
Open service 116.203.2.207:443 · dashboard.nemo.ps
2026-01-23 16:27
HTTP/1.1 302 Found Server: nginx Date: Fri, 23 Jan 2026 16:27:30 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Vary: Accept Strict-Transport-Security: max-age=31536000; includeSubdomains Found. Redirecting to ./admin
Open service 116.203.2.207:443 · www.dashboard.nemo.ps
2026-01-23 12:04
HTTP/1.1 302 Found Server: nginx Date: Fri, 23 Jan 2026 12:04:44 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Vary: Accept Strict-Transport-Security: max-age=31536000; includeSubdomains Found. Redirecting to ./admin
Open service 116.203.2.207:443 · dashboard.nemo.ps
2026-01-09 15:53
HTTP/1.1 302 Found Server: nginx Date: Fri, 09 Jan 2026 15:53:31 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Vary: Accept Strict-Transport-Security: max-age=31536000; includeSubdomains Found. Redirecting to ./admin
Open service 116.203.2.207:443 · www.dashboard.nemo.ps
2026-01-09 08:21
HTTP/1.1 302 Found Server: nginx Date: Fri, 09 Jan 2026 08:21:17 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Vary: Accept Strict-Transport-Security: max-age=31536000; includeSubdomains Found. Redirecting to ./admin
Open service 116.203.2.207:443 · dashboard.nemo.ps
2026-01-02 22:36
HTTP/1.1 302 Found Server: nginx Date: Fri, 02 Jan 2026 22:36:35 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Vary: Accept Strict-Transport-Security: max-age=31536000; includeSubdomains Found. Redirecting to ./admin
Open service 116.203.2.207:443 · www.dashboard.nemo.ps
2026-01-02 11:49
HTTP/1.1 302 Found Server: nginx Date: Fri, 02 Jan 2026 11:49:22 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Vary: Accept Strict-Transport-Security: max-age=31536000; includeSubdomains Found. Redirecting to ./admin
Open service 116.203.2.207:443 · dashboard.nemo.ps
2025-12-22 21:24
HTTP/1.1 302 Found Server: nginx Date: Mon, 22 Dec 2025 21:24:55 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Vary: Accept Strict-Transport-Security: max-age=31536000; includeSubdomains Found. Redirecting to ./admin
Open service 116.203.2.207:443 · www.dashboard.nemo.ps
2025-12-22 20:28
HTTP/1.1 302 Found Server: nginx Date: Mon, 22 Dec 2025 20:28:31 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Vary: Accept Strict-Transport-Security: max-age=31536000; includeSubdomains Found. Redirecting to ./admin