Vercel
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6cd115740209c8684c08108dcb73cad73b771083f
GraphQL introspection enabled at /api/graphql Types: 912 (by kind: ENUM: 35, INPUT_OBJECT: 97, INTERFACE: 10, OBJECT: 744, SCALAR: 7, UNION: 19) Operations: - Query: Query | fields: adyenHealthcheck, dictionary, getPaymentConfig, getPaymentMethods, initiateExpressCheckout - Mutation: Mutation | fields: bankTransferInitiate, initiateExpressPaymentDetails, paymentAddDetails, paymentInitiate, updatePaypalExpressOrder Directives: deprecated, include, skip, specifiedBy (total: 4)
Open service 66.33.60.34:443 · mms-webapp.dev02.mars-phoenix.com
2026-01-09 04:00
HTTP/1.1 401 Unauthorized Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 14 Content-Type: text/plain; charset=utf-8 Date: Fri, 09 Jan 2026 04:01:01 GMT Referrer-Policy: strict-origin-when-cross-origin Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Www-Authenticate: Basic X-Content-Type-Options: nosniff X-Matched-Path: /api/auth X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::k4cxg-1767931261122-47bbbcbc6f4a Connection: close Auth Required.
Open service 66.33.60.34:443 · mms-webapp.dev02.mars-phoenix.com
2026-01-02 04:23
HTTP/1.1 401 Unauthorized Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 14 Content-Type: text/plain; charset=utf-8 Date: Fri, 02 Jan 2026 04:23:20 GMT Referrer-Policy: strict-origin-when-cross-origin Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Www-Authenticate: Basic X-Content-Type-Options: nosniff X-Matched-Path: /api/auth X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::8qb6r-1767327800498-eb7cf80a05af Connection: close Auth Required.
Open service 66.33.60.34:80 · mms-webapp.dev02.mars-phoenix.com
2026-01-01 03:47
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://mms-webapp.dev02.mars-phoenix.com/ Refresh: 0;url=https://mms-webapp.dev02.mars-phoenix.com/ server: Vercel Redirecting...
Open service 66.33.60.34:443 · mms-webapp.dev02.mars-phoenix.com
2026-01-01 03:47
HTTP/1.1 401 Unauthorized Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 14 Content-Type: text/plain; charset=utf-8 Date: Thu, 01 Jan 2026 03:47:58 GMT Referrer-Policy: strict-origin-when-cross-origin Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Www-Authenticate: Basic X-Content-Type-Options: nosniff X-Matched-Path: /api/auth X-Vercel-Cache: MISS X-Vercel-Id: sin1::iad1::zvp4z-1767239277540-9f83cbfc5343 Connection: close Auth Required.
Open service 76.76.21.164:443 · mms-webapp.dev02.mars-phoenix.com
2026-01-01 03:47
HTTP/1.1 401 Unauthorized Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 14 Content-Type: text/plain; charset=utf-8 Date: Thu, 01 Jan 2026 03:47:56 GMT Referrer-Policy: strict-origin-when-cross-origin Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Www-Authenticate: Basic X-Content-Type-Options: nosniff X-Matched-Path: /api/auth X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::95qx2-1767239276614-e76c67033fc5 Connection: close Auth Required.
Open service 76.76.21.164:80 · mms-webapp.dev02.mars-phoenix.com
2026-01-01 03:47
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://mms-webapp.dev02.mars-phoenix.com/ Refresh: 0;url=https://mms-webapp.dev02.mars-phoenix.com/ server: Vercel Redirecting...
Open service 66.33.60.34:443 · mms-webapp.dev02.mars-phoenix.com
2025-12-30 14:13
HTTP/1.1 401 Unauthorized Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 14 Content-Type: text/plain; charset=utf-8 Date: Tue, 30 Dec 2025 14:13:50 GMT Referrer-Policy: strict-origin-when-cross-origin Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Www-Authenticate: Basic X-Content-Type-Options: nosniff X-Matched-Path: /api/auth X-Vercel-Cache: MISS X-Vercel-Id: fra1::iad1::hgp5c-1767104030405-aa4df62e5fdd Connection: close Auth Required.
Open service 66.33.60.34:443 · mms-webapp.dev02.mars-phoenix.com
2025-12-22 15:07
HTTP/1.1 401 Unauthorized Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 14 Content-Type: text/plain; charset=utf-8 Date: Mon, 22 Dec 2025 15:07:12 GMT Referrer-Policy: strict-origin-when-cross-origin Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Www-Authenticate: Basic X-Content-Type-Options: nosniff X-Matched-Path: /api/auth X-Vercel-Cache: MISS X-Vercel-Id: sin1::iad1::5lfp6-1766416031403-aed35df8ab4e Connection: close Auth Required.
Open service 66.33.60.34:443 · mms-webapp.dev02.mars-phoenix.com
2025-12-20 18:25
HTTP/1.1 401 Unauthorized Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 14 Content-Type: text/plain; charset=utf-8 Date: Sat, 20 Dec 2025 18:25:45 GMT Referrer-Policy: strict-origin-when-cross-origin Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Www-Authenticate: Basic X-Content-Type-Options: nosniff X-Matched-Path: /api/auth X-Vercel-Cache: MISS X-Vercel-Id: sin1::iad1::srjw4-1766255144753-b283d22ec7b3 Connection: close Auth Required.