AkamaiGHost
tcp/80
nginx
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d603073f8703073f8703073f8703073f8703073f87
GraphQL introspection enabled at /api/graphql Detected: GitLab
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
GraphQL introspection enabled at /api/graphql
Open service 2.16.183.218:443 · gitlab.gfk-e.com
2026-01-12 09:11
HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.gfk-e.com/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KERQJBCNTWFRG8CCFT8F3H1W","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KERQJBCNTWFRG8CCFT8F3H1W
X-Runtime: 0.011568
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
Content-Length: 104
Date: Mon, 12 Jan 2026 09:11:07 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.gfk-e.com/users/sign_in">redirected</a>.</body></html>
Open service 2.16.183.204:80 · gitlab.gfk-e.com
2026-01-12 09:11
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://gitlab.gfk-e.com/ Date: Mon, 12 Jan 2026 09:11:48 GMT Connection: close
Open service 2.16.183.204:443 · gitlab.gfk-e.com
2026-01-12 09:11
HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.gfk-e.com/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KERQJCC9AXBPPJW2GPATZA1R","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KERQJCC9AXBPPJW2GPATZA1R
X-Runtime: 0.012013
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
Content-Length: 104
Date: Mon, 12 Jan 2026 09:11:08 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.gfk-e.com/users/sign_in">redirected</a>.</body></html>
Open service 2.16.183.197:443 · gitlab.gfk-e.com
2026-01-12 09:11
HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.gfk-e.com/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KERQJE9463VZSPSNVRBZ7DCC","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KERQJE9463VZSPSNVRBZ7DCC
X-Runtime: 0.016180
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
Content-Length: 104
Date: Mon, 12 Jan 2026 09:11:10 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.gfk-e.com/users/sign_in">redirected</a>.</body></html>
Open service 2.16.183.220:80 · gitlab.gfk-e.com
2026-01-12 09:11
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://gitlab.gfk-e.com/ Date: Mon, 12 Jan 2026 09:11:48 GMT Connection: close
Open service 2.16.183.225:443 · gitlab.gfk-e.com
2026-01-12 09:11
HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.gfk-e.com/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KERQJBTZVBKCW5AYYPESZSWD","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KERQJBTZVBKCW5AYYPESZSWD
X-Runtime: 0.015471
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
Content-Length: 104
Date: Mon, 12 Jan 2026 09:11:07 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.gfk-e.com/users/sign_in">redirected</a>.</body></html>
Open service 2.16.183.233:443 · gitlab.gfk-e.com
2026-01-12 09:11
HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.gfk-e.com/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KERQJCF0FBWNHRCWKWVVBMXQ","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KERQJCF0FBWNHRCWKWVVBMXQ
X-Runtime: 0.011702
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
Content-Length: 104
Date: Mon, 12 Jan 2026 09:11:08 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.gfk-e.com/users/sign_in">redirected</a>.</body></html>
Open service 2.16.183.234:443 · gitlab.gfk-e.com
2026-01-12 09:11
HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.gfk-e.com/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KERQJBHRYKQW0XR4YWX7YFHQ","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KERQJBHRYKQW0XR4YWX7YFHQ
X-Runtime: 0.011654
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
Content-Length: 104
Date: Mon, 12 Jan 2026 09:11:07 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.gfk-e.com/users/sign_in">redirected</a>.</body></html>
Open service 2.16.183.225:80 · gitlab.gfk-e.com
2026-01-12 09:11
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://gitlab.gfk-e.com/ Date: Mon, 12 Jan 2026 09:11:47 GMT Connection: close
Open service 2.16.183.220:443 · gitlab.gfk-e.com
2026-01-12 09:11
HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.gfk-e.com/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KERQJBJJG8ENJSED4H1HPRYG","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KERQJBJJG8ENJSED4H1HPRYG
X-Runtime: 0.015899
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
Content-Length: 104
Date: Mon, 12 Jan 2026 09:11:07 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.gfk-e.com/users/sign_in">redirected</a>.</body></html>
Open service 2.16.183.234:80 · gitlab.gfk-e.com
2026-01-12 09:11
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://gitlab.gfk-e.com/ Date: Mon, 12 Jan 2026 09:11:47 GMT Connection: close
Open service 2.16.183.233:80 · gitlab.gfk-e.com
2026-01-12 09:11
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://gitlab.gfk-e.com/ Date: Mon, 12 Jan 2026 09:11:47 GMT Connection: close
Open service 2.16.206.153:443 · gitlab.gfk-e.com
2026-01-09 18:10
HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.gfk-e.com/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KEHZ7QB4SF2C4XYMPP8Z69C5","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KEHZ7QB4SF2C4XYMPP8Z69C5
X-Runtime: 0.036799
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
Content-Length: 104
Date: Fri, 09 Jan 2026 18:10:26 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.gfk-e.com/users/sign_in">redirected</a>.</body></html>
Open service 2.16.206.153:443 · gitlab.gfk-e.com
2026-01-02 18:00
HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.gfk-e.com/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KDZXWRNY761Q399PZ8D57ZCQ","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KDZXWRNY761Q399PZ8D57ZCQ
X-Runtime: 0.015955
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
Content-Length: 104
Date: Fri, 02 Jan 2026 18:00:39 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.gfk-e.com/users/sign_in">redirected</a>.</body></html>
Open service 2.16.206.153:443 · gitlab.gfk-e.com
2025-12-23 06:24
HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.gfk-e.com/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KD4Y2M98PXTJSA4NM8YAT7QD","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KD4Y2M98PXTJSA4NM8YAT7QD
X-Runtime: 0.011373
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
Content-Length: 104
Date: Tue, 23 Dec 2025 06:24:21 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.gfk-e.com/users/sign_in">redirected</a>.</body></html>
Open service 2.16.206.153:443 · gitlab.gfk-e.com
2025-12-21 02:36
HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.gfk-e.com/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KCZC7WWDAVP0FVNR3GPXTGSG","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KCZC7WWDAVP0FVNR3GPXTGSG
X-Runtime: 0.029910
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
Content-Length: 104
Date: Sun, 21 Dec 2025 02:36:27 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.gfk-e.com/users/sign_in">redirected</a>.</body></html>
Open service 2.16.206.153:443 · gitlab.gfk-e.com
2025-12-19 06:34
HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.gfk-e.com/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KCTN1JDE8E7AF3365RF7VYYG","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KCTN1JDE8E7AF3365RF7VYYG
X-Runtime: 0.011648
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
Content-Length: 104
Date: Fri, 19 Dec 2025 06:34:05 GMT
Connection: close
<html><body>You are being <a href="https://gitlab.gfk-e.com/users/sign_in">redirected</a>.</body></html>