GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f80a7c900dd36b54010663bfd9d64789705cf0b9
GraphQL introspection enabled at /graphql Types: 522 (by kind: ENUM: 41, INPUT_OBJECT: 118, INTERFACE: 26, OBJECT: 332, SCALAR: 5) Operations: - Query: Query | fields: amMegaMenuAll, amMegaMenuTree, amMegaMenuWidget, authnetcimHostedPaymentFormParams, authnetcimHostedProfileFormParams - Mutation: Mutation | fields: addBundleProductsToCart, addCommentToPost, addConfigurableProductsToCart, addDownloadableProductsToCart, addGiftRegistryRegistrants Directives: deprecated, include, skip (total: 3)
Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2
GraphQL introspection enabled at /graphql/api
Open service 151.101.130.132:443 · m24pim.baseballmonkey.com
2026-01-08 19:50
HTTP/1.1 406 Not Acceptable Connection: close cache-control: private, no-store Accept-Ranges: bytes Date: Thu, 08 Jan 2026 19:50:42 GMT X-Timer: S1767901843.634139,VS0,VE126 x-san: 5.01 [0] [NC][0:0=0] X-Debug-Mode: X-Client-Ip: 165.227.173.41 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31557600 transfer-encoding: chunked
Open service 151.101.130.132:443 · m24pim.baseballmonkey.com
2026-01-01 20:21
HTTP/1.1 406 Not Acceptable Connection: close cache-control: private, no-store Accept-Ranges: bytes Date: Thu, 01 Jan 2026 20:21:04 GMT X-Timer: S1767298865.717244,VS0,VE119 x-san: 5.01 [0] [NC][0:0=0] X-Debug-Mode: X-Client-Ip: 206.81.24.74 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31557600 transfer-encoding: chunked
Open service 151.101.130.132:443 · m24pim.baseballmonkey.com
2025-12-30 04:29
HTTP/1.1 406 Not Acceptable Connection: close cache-control: private, no-store Accept-Ranges: bytes Date: Tue, 30 Dec 2025 04:29:48 GMT X-Timer: S1767068989.863187,VS0,VE132 x-san: 5.01 [0] [NC][0:0=0] X-Debug-Mode: X-Client-Ip: 207.154.197.113 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31557600 transfer-encoding: chunked
Open service 151.101.130.132:443 · m24pim.baseballmonkey.com
2025-12-22 05:18
HTTP/1.1 406 Not Acceptable Connection: close cache-control: private, no-store Accept-Ranges: bytes Date: Mon, 22 Dec 2025 05:18:28 GMT X-Timer: S1766380708.324944,VS0,VE31 x-san: 5.01 [0:0] [NC][0:0=0] X-Debug-Mode: X-Client-Ip: 167.99.182.39 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31557600 transfer-encoding: chunked
Open service 151.101.130.132:443 · m24pim.baseballmonkey.com
2025-12-20 05:21
HTTP/1.1 406 Not Acceptable Connection: close cache-control: private, no-store Accept-Ranges: bytes Date: Sat, 20 Dec 2025 05:21:40 GMT X-Timer: S1766208100.222619,VS0,VE31 x-san: 5.01 [0:0] [NC][0:0=0] X-Debug-Mode: X-Client-Ip: 167.99.182.39 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31557600 transfer-encoding: chunked