cloudflare
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d603073f8703073f8703073f8703073f8703073f87
GraphQL introspection enabled at /api/graphql Detected: GitLab
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
GraphQL introspection enabled at /api/graphql
Open service 104.21.67.25:443 · gitlab.kiwi.digital
2026-01-10 01:08
HTTP/1.1 302 Found
Date: Sat, 10 Jan 2026 01:08:55 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
location: https://gitlab.kiwi.digital/users/sign_in
Cache-Control: no-cache
content-security-policy:
permissions-policy: interest-cohort=()
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-gitlab-meta: {"correlation_id":"01KEJQ5ZVYC9PQ8H2A5VYJ2G3D","version":"1"}
x-permitted-cross-domain-policies: none
x-request-id: 01KEJQ5ZVYC9PQ8H2A5VYJ2G3D
x-runtime: 0.016529
x-ua-compatible: IE=edge
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=10,cfOrigin;dur=189
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=bevd7lYcTUPJGnB05QSJxPcyDusdefKKSgzDXu4G5jlMCqCWF84sEsklKylCrncrz%2FOMs72vhbZWca36W4dx7hw3tyEX0c2Dgw3dH9RzEHIKt4M%3D"}]}
Server: cloudflare
CF-RAY: 9bb84937dc157aa6-EWR
alt-svc: h3=":443"; ma=86400
<html><body>You are being <a href="https://gitlab.kiwi.digital/users/sign_in">redirected</a>.<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"ab10ee2313fb472cbe3cd43e172e3200","r":1,"server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>
</body></html>
Open service 104.21.67.25:443 · gitlab.kiwi.digital
2026-01-02 18:30
HTTP/1.1 302 Found
Date: Fri, 02 Jan 2026 18:30:02 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
location: https://gitlab.kiwi.digital/users/sign_in
Cache-Control: no-cache
content-security-policy:
permissions-policy: interest-cohort=()
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-gitlab-meta: {"correlation_id":"01KDZZJJ9EC8XNAD54HEAVQ3K8","version":"1"}
x-permitted-cross-domain-policies: none
x-request-id: 01KDZZJJ9EC8XNAD54HEAVQ3K8
x-runtime: 0.014708
x-ua-compatible: IE=edge
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=f73708giumRel2EKWBZdSOsL7HqPvZDeL0hxz3En%2FHJKWlwR4ZFhfXdOKyfg0OHMZE98mkau1NRxA%2FoyCrVY4D8pwUIeNuIDWe6KiQpIrWrOb2w%3D"}]}
Server: cloudflare
CF-RAY: 9b7c53460d085e4a-LHR
alt-svc: h3=":443"; ma=86400
<html><body>You are being <a href="https://gitlab.kiwi.digital/users/sign_in">redirected</a>.</body></html>
Open service 104.21.67.25:443 · gitlab.kiwi.digital
2025-12-22 10:22
HTTP/1.1 302 Found
Date: Mon, 22 Dec 2025 10:22:51 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
location: https://gitlab.kiwi.digital/users/sign_in
Cache-Control: no-cache
content-security-policy:
permissions-policy: interest-cohort=()
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-gitlab-meta: {"correlation_id":"01KD2SAKMGWBDZH0XHJGFSMDYK","version":"1"}
x-permitted-cross-domain-policies: none
x-request-id: 01KD2SAKMGWBDZH0XHJGFSMDYK
x-runtime: 0.014276
x-ua-compatible: IE=edge
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=XZTxpSdGK%2BRqPJ6dC%2BQPth4AG1Y%2B0d7s7qn0QvIpCrwZ6lQNCU50KYTqbuO8ZXpiGsS%2B%2F3PQEq7tThynBBidFjjsmI8VCf2%2FjR33mf58UYkfLag%3D"}]}
Server: cloudflare
CF-RAY: 9b1ee681ee921e2f-FRA
alt-svc: h3=":443"; ma=86400
<html><body>You are being <a href="https://gitlab.kiwi.digital/users/sign_in">redirected</a>.</body></html>
Open service 104.21.67.25:443 · gitlab.kiwi.digital
2025-12-21 11:13
HTTP/1.1 302 Found
Date: Sun, 21 Dec 2025 11:13:11 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
location: https://gitlab.kiwi.digital/users/sign_in
Cache-Control: no-cache
content-security-policy:
permissions-policy: interest-cohort=()
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-gitlab-meta: {"correlation_id":"01KD09T1JGVW84QDC42JBFVYP0","version":"1"}
x-permitted-cross-domain-policies: none
x-request-id: 01KD09T1JGVW84QDC42JBFVYP0
x-runtime: 0.014247
x-ua-compatible: IE=edge
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qoYGUTGtSJjT%2FgJvZWJbaaRoMcfVzjVUpXSlStI3EDloD3owHv%2FRp3W8NP5Myy5pfUYo8fql5NPgRW2by4BVHTeoX89%2FMs%2Bpz88eepD%2FGpWdwSY%3D"}]}
Server: cloudflare
CF-RAY: 9b16f2db3c038e2b-AMS
alt-svc: h3=":443"; ma=86400
<html><body>You are being <a href="https://gitlab.kiwi.digital/users/sign_in">redirected</a>.</body></html>
Open service 104.21.67.25:443 · gitlab.kiwi.digital
2025-12-19 07:39
HTTP/1.1 302 Found
Date: Fri, 19 Dec 2025 07:39:07 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
location: https://gitlab.kiwi.digital/users/sign_in
Cache-Control: no-cache
content-security-policy:
permissions-policy: interest-cohort=()
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-gitlab-meta: {"correlation_id":"01KCTRRMRXRM63CHEW807XVQ9R","version":"1"}
x-permitted-cross-domain-policies: none
x-request-id: 01KCTRRMRXRM63CHEW807XVQ9R
x-runtime: 0.014193
x-ua-compatible: IE=edge
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=7,cfOrigin;dur=225
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=zlKFu9J2dpr%2BlDTTzfVyaXfUqAt%2B5s%2FDRoIm9TuDG2Dms7T5CF7jGPotC18Y1QeLiyCGcwIkQOqm7IRr62rPHC0GHT492%2FiADXTjAXZ9UGWQLN0%3D"}]}
Server: cloudflare
CF-RAY: 9b053e8a4de71d7b-YYZ
alt-svc: h3=":443"; ma=86400
<html><body>You are being <a href="https://gitlab.kiwi.digital/users/sign_in">redirected</a>.<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"ab10ee2313fb472cbe3cd43e172e3200","r":1,"server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>
</body></html>