GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d63e930952d0dcbfa2c8ff28f32b970d8457008d26
GraphQL introspection enabled at /api/graphql Types: 600 (by kind: ENUM: 58, INPUT_OBJECT: 144, INTERFACE: 30, OBJECT: 363, SCALAR: 5) Operations: - Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories - Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addGiftRegistryRegistrants, addProductsToCart Directives: deprecated, include, oneOf, skip (total: 4)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d63e930952d0dcbfa2c8ff28f32b970d848a2919d5
GraphQL introspection enabled at /api/graphql Types: 600 (by kind: ENUM: 58, INPUT_OBJECT: 144, INTERFACE: 30, OBJECT: 363, SCALAR: 5) Operations: - Query: Query | fields: attributesForm, attributesList, availableStores, cart, categories - Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addGiftRegistryRegistrants, addProductsToCart Directives: deprecated, include, oneOf, skip (total: 4) Detected: Magento
Open service 151.101.195.10:80 · dev-ava.inspirali.com
2026-01-25 00:21
HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Retry-After: 0 Location: https://dev-ava.inspirali.com/ Accept-Ranges: bytes Date: Sun, 25 Jan 2026 00:21:50 GMT Strict-Transport-Security: max-age=31557600 X-Served-By: cache-sin-wsss1830034-SIN X-Cache: HIT X-Timer: S1769300510.409013,VS0,VE1
Open service 151.101.195.10:443 · dev-ava.inspirali.com
2026-01-25 00:21
HTTP/1.1 401 Unauthorized Connection: close Content-Length: 381 x-frame-options: SAMEORIGIN www-authenticate: Basic realm="Authentication Required" content-type: text/html; charset=iso-8859-1 Accept-Ranges: bytes Date: Sun, 25 Jan 2026 00:21:50 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="e056fd8ada6f39aa"; Path=/; HttpOnly; secure X-Served-By: cache-lga21964-LGA X-Cache: MISS X-Timer: S1769300510.473099,VS0,VS0,VE16 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>
Open service 151.101.131.10:80 · dev-ava.inspirali.com
2026-01-25 00:21
HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Retry-After: 0 Location: https://dev-ava.inspirali.com/ Accept-Ranges: bytes Date: Sun, 25 Jan 2026 00:21:50 GMT Strict-Transport-Security: max-age=31557600 X-Served-By: cache-fra-eddf8230164-FRA X-Cache: HIT X-Timer: S1769300510.314299,VS0,VE1
Open service 151.101.131.10:443 · dev-ava.inspirali.com
2026-01-25 00:21
HTTP/1.1 401 Unauthorized Connection: close Content-Length: 381 x-frame-options: SAMEORIGIN www-authenticate: Basic realm="Authentication Required" content-type: text/html; charset=iso-8859-1 Accept-Ranges: bytes Date: Sun, 25 Jan 2026 00:21:50 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="d9d5818ab3d9ccb2"; Path=/; HttpOnly; secure X-Served-By: cache-yyz4576-YYZ X-Cache: MISS X-Timer: S1769300511.815888,VS0,VS0,VE111 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>
Open service 151.101.3.10:443 · dev-ava.inspirali.com
2026-01-25 00:21
HTTP/1.1 401 Unauthorized Connection: close Content-Length: 381 x-frame-options: SAMEORIGIN www-authenticate: Basic realm="Authentication Required" content-type: text/html; charset=iso-8859-1 Accept-Ranges: bytes Date: Sun, 25 Jan 2026 00:21:50 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="d9d5818ab3d9ccb2"; Path=/; HttpOnly; secure X-Served-By: cache-yyz4554-YYZ X-Cache: MISS X-Timer: S1769300510.321170,VS0,VS0,VE23 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>
Open service 151.101.3.10:80 · dev-ava.inspirali.com
2026-01-25 00:21
HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Retry-After: 0 Location: https://dev-ava.inspirali.com/ Accept-Ranges: bytes Date: Sun, 25 Jan 2026 00:21:50 GMT Strict-Transport-Security: max-age=31557600 X-Served-By: cache-yyz4540-YYZ X-Cache: HIT X-Timer: S1769300510.323674,VS0,VE197
Open service 151.101.67.10:443 · dev-ava.inspirali.com
2026-01-25 00:21
HTTP/1.1 401 Unauthorized Connection: close Content-Length: 381 x-frame-options: SAMEORIGIN www-authenticate: Basic realm="Authentication Required" content-type: text/html; charset=iso-8859-1 Accept-Ranges: bytes Date: Sun, 25 Jan 2026 00:21:50 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="e4a99e0a36be8e0c"; Path=/; HttpOnly; secure X-Served-By: cache-rtm-ehrd2290026-RTM X-Cache: MISS X-Timer: S1769300511.579013,VS0,VS0,VE92 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>
Open service 151.101.195.10:443 · dev-ava.inspirali.com
2026-01-09 01:23
HTTP/1.1 401 Unauthorized Connection: close Content-Length: 381 x-frame-options: SAMEORIGIN www-authenticate: Basic realm="Authentication Required" content-type: text/html; charset=iso-8859-1 Accept-Ranges: bytes Date: Fri, 09 Jan 2026 01:23:26 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="7e7e5e81f5794a41"; Path=/; HttpOnly; secure X-Served-By: cache-lga21939-LGA X-Cache: MISS X-Timer: S1767921806.804176,VS0,VS0,VE246 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>
Open service 151.101.195.10:443 · dev-ava.inspirali.com
2026-01-01 22:35
HTTP/1.1 401 Unauthorized Connection: close Content-Length: 381 x-frame-options: SAMEORIGIN www-authenticate: Basic realm="Authentication Required" content-type: text/html; charset=iso-8859-1 Accept-Ranges: bytes Date: Thu, 01 Jan 2026 22:35:43 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="f84bbe5369f9f59b"; Path=/; HttpOnly; secure X-Served-By: cache-rtm-ehrd2290034-RTM X-Cache: MISS X-Timer: S1767306943.953567,VS0,VS0,VE162 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>
Open service 151.101.195.10:443 · dev-ava.inspirali.com
2025-12-23 01:46
HTTP/1.1 401 Unauthorized Connection: close Content-Length: 381 x-frame-options: SAMEORIGIN www-authenticate: Basic realm="Authentication Required" content-type: text/html; charset=iso-8859-1 Accept-Ranges: bytes Date: Tue, 23 Dec 2025 01:46:14 GMT Strict-Transport-Security: max-age=31557600 set-cookie: affinity="bdf8f94b03c49f34"; Path=/; HttpOnly; secure X-Served-By: cache-sin-wsat1880040-SIN X-Cache: MISS X-Timer: S1766454374.254714,VS0,VS0,VE453 Page title: 401 Unauthorized <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Unauthorized</title> </head><body> <h1>Unauthorized</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html>