CloudFront
tcp/443
frontend-web
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62ea3a4b79ab48f255bfd7aa9aa08dd4ec5ad50ba
GraphQL introspection enabled at /api/graphql Types: 147 (by kind: ENUM: 20, OBJECT: 117, SCALAR: 8, UNION: 2) Operations: - Query: Query | fields: appMessages, appVersionCheck, audiobook, audiobooks, author - Mutation: Mutation | fields: addAudiobooksToUserCollection, addOptionalContributionToPurchase, archiveUserAudiobook, archiveUserAudiobooks, createAdditionalPurchaseItemsForPurchase Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Open service 65.8.131.26:443 · listen-api.librango.com
2026-01-09 05:58
HTTP/1.1 401 Unauthorized Content-Type: text/html; charset=utf-8 Content-Length: 27 Connection: close Date: Fri, 09 Jan 2026 05:58:34 GMT Server: frontend-web X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin WWW-Authenticate: Basic realm="Application" X-Request-Id: 29d9e924-bd03-4354-988a-c43d86fd93aa X-Runtime: 0.030888 Strict-Transport-Security: max-age=63072000; includeSubDomains X-Cache: Error from cloudfront Via: 1.1 cf0761f56e297984902a10e73dbff038.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P13 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: zIpx5BWwnK99fplJkaHMft3m4l6rbhBkOy9w9d3k2oqpv0q2Pkcg1A== HTTP Basic: Access denied.
Open service 65.8.131.26:443 · listen-api.librango.com
2026-01-02 11:32
HTTP/1.1 403 Forbidden Server: CloudFront Date: Fri, 02 Jan 2026 11:33:00 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 4d4680d03dbc233f4f8d4e3d75985c84.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P13 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: D6BbEAMJHScD7hHqIg02VKiD3R6765lgtdV71me3ITV4v7NMHRePmA== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: D6BbEAMJHScD7hHqIg02VKiD3R6765lgtdV71me3ITV4v7NMHRePmA== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Open service 65.8.131.26:443 · listen-api.librango.com
2025-12-30 14:14
HTTP/1.1 401 Unauthorized Content-Type: text/html; charset=utf-8 Content-Length: 27 Connection: close Date: Tue, 30 Dec 2025 14:14:45 GMT Server: frontend-web X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin WWW-Authenticate: Basic realm="Application" X-Request-Id: b4eb369a-b038-498d-90a3-3b55ae6cb748 X-Runtime: 0.010559 Strict-Transport-Security: max-age=63072000; includeSubDomains X-Cache: Error from cloudfront Via: 1.1 2455ef8edb3925202de453ceda9f2c14.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P13 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: gszy3t-sg6ozjmVG1gWv8CuInlFojt6b90OviLuose7lWVKuLPylZQ== HTTP Basic: Access denied.
Open service 65.8.131.26:443 · listen-api.librango.com
2025-12-23 05:25
HTTP/1.1 403 Forbidden Server: CloudFront Date: Tue, 23 Dec 2025 05:25:03 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 59927012a1a01484504f9d4b511a043c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P13 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 6mymgPGRYvROrHL-csCE18fhM9ezvkWxdr2qEPXwhAJR80o7XZ-6kQ== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: 6mymgPGRYvROrHL-csCE18fhM9ezvkWxdr2qEPXwhAJR80o7XZ-6kQ== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Open service 65.8.131.26:443 · listen-api.librango.com
2025-12-21 01:37
HTTP/1.1 401 Unauthorized Content-Type: text/html; charset=utf-8 Content-Length: 27 Connection: close Date: Sun, 21 Dec 2025 01:37:29 GMT Server: frontend-web X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin WWW-Authenticate: Basic realm="Application" X-Request-Id: 9c8b9653-be00-4447-ab5a-cba467163209 X-Runtime: 0.008922 Strict-Transport-Security: max-age=63072000; includeSubDomains X-Cache: Error from cloudfront Via: 1.1 ce45454d08e51c5b10e3462307ca3652.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P13 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: tM8zPzKUViPh1FTyVJHQsnXynQco2VpSstvo65PSy8i-mSGqnqTb5A== HTTP Basic: Access denied.
Open service 65.8.131.26:443 · listen-api.librango.com
2025-12-19 05:15
HTTP/1.1 401 Unauthorized Content-Type: text/html; charset=utf-8 Content-Length: 27 Connection: close Date: Fri, 19 Dec 2025 05:15:24 GMT Server: frontend-web X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin WWW-Authenticate: Basic realm="Application" X-Request-Id: b37a4f86-ea1a-4da8-b3ac-6b9b4541f0fd X-Runtime: 0.009485 Strict-Transport-Security: max-age=63072000; includeSubDomains X-Cache: Error from cloudfront Via: 1.1 b3c2d934335633b45a80b7ad63463cda.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P13 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: skdTqj5uPmwXfcsFPGa8xn1x4Hu_FqdOYzRfZ7v9COldI6QlvX-Syg== HTTP Basic: Access denied.