GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3838be4cbdd1fc049e1943a47ab4e16cf494e558a
GraphQL introspection enabled at /graphql Types: 389 (by kind: ENUM: 25, INPUT_OBJECT: 89, INTERFACE: 20, OBJECT: 250, SCALAR: 5) Operations: - Query: Query | fields: MpGdprConfigs, availableStores, cart, categories, category - Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList Directives: deprecated, include, skip (total: 3) Detected: Magento
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3838be4cbdd1fc049e1943a47ab4e16cf717db3cf
GraphQL introspection enabled at /graphql Types: 389 (by kind: ENUM: 25, INPUT_OBJECT: 89, INTERFACE: 20, OBJECT: 250, SCALAR: 5) Operations: - Query: Query | fields: MpGdprConfigs, availableStores, cart, categories, category - Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addProductsToCart, addProductsToCompareList Directives: deprecated, include, skip (total: 3)
Open service 23.50.131.156:443 · omnicell.fulfillworks.com
2026-01-08 22:01
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Page title: Site is closed
ostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com thm.visa.com http://dpm.demdex.net https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://hp.fulfillworks.com/rest/all/V1/cspmanager/frontend_report;, upgrade-insecure-requests;
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-UA-Compatible: IE=edge
X-Frame-Options: SAMEORIGIN
X-Akamai-Transformed: 9 2878 0 pmb=mRUM,1
Expires: Thu, 08 Jan 2026 22:01:10 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 08 Jan 2026 22:01:10 GMT
Content-Length: 15815
Connection: close
Set-Cookie: X-Magento-Vary=fc33c17991140c3bec61683667c2600740ab9b25; expires=Thu, 08-Jan-2026 23:01:10 GMT; Max-Age=3600; path=/; secure; HttpOnly; SameSite=Lax
Server-Timing: edge; dur=2
Server-Timing: origin; dur=558
Server-Timing: cdn-cache; desc=MISS
Alt-Svc: h3=":443"; ma=93600
Server-Timing: ak_p; desc="1767909670139_389224220_453783263_55820_3750_80_83_-";dur=1
<!doctype html>
<html lang="en">
<head >
<script>
var BASE_URL = 'https\u003A\u002F\u002Fomnicell.fulfillworks.com\u002F';
var require = {
'baseUrl': 'https\u003A\u002F\u002Fomnicell.fulfillworks.com\u002Fstatic\u002Ffrontend\u002FFullpond\u002Fomnicell\u002Fen_US'
};</script> <meta charset="utf-8"/>
<meta name="title" content="Site is closed"/>
<meta name="robots" content="INDEX,FOLLOW"/>
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1.0"/>
<meta name="format-detection" content="telephone=no"/>
<title>Site is closed</title>
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/mage/calendar.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/css/styles-m.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Amasty_Stockstatus/css/amstockstatus.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Mageplaza_QuickCart/css/minicart.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/StripeIntegration_Payments/css/wallets.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Hiddentechies_StoreMaintenance/css/style.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Hiddentechies_StoreMaintenance/css/font-awesome.min.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Hiddentechies_StoreMaintenance/css/reset.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Hiddentechies_StoreMaintenance/css/supersized.css" />
<link rel="stylesheet" type="text/css" media="screen and (min-width: 768px)" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/css/styles-l.css" />
<link rel="stylesheet"
Open service 23.50.131.156:443 · omnicell.fulfillworks.com
2026-01-02 14:12
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Page title: Site is closed
ostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com thm.visa.com http://dpm.demdex.net https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://hp.fulfillworks.com/rest/all/V1/cspmanager/frontend_report;, upgrade-insecure-requests;
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-UA-Compatible: IE=edge
X-Frame-Options: SAMEORIGIN
X-Akamai-Transformed: 9 2878 0 pmb=mRUM,1
Expires: Fri, 02 Jan 2026 14:12:19 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Jan 2026 14:12:19 GMT
Content-Length: 15816
Connection: close
Set-Cookie: X-Magento-Vary=fc33c17991140c3bec61683667c2600740ab9b25; expires=Fri, 02-Jan-2026 15:12:19 GMT; Max-Age=3600; path=/; secure; HttpOnly; SameSite=Lax
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=110
Server-Timing: origin; dur=447
Alt-Svc: h3=":443"; ma=93600
Server-Timing: ak_p; desc="1767363139176_389224197_2204528236_55602_3489_94_100_-";dur=1
<!doctype html>
<html lang="en">
<head >
<script>
var BASE_URL = 'https\u003A\u002F\u002Fomnicell.fulfillworks.com\u002F';
var require = {
'baseUrl': 'https\u003A\u002F\u002Fomnicell.fulfillworks.com\u002Fstatic\u002Ffrontend\u002FFullpond\u002Fomnicell\u002Fen_US'
};</script> <meta charset="utf-8"/>
<meta name="title" content="Site is closed"/>
<meta name="robots" content="INDEX,FOLLOW"/>
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1.0"/>
<meta name="format-detection" content="telephone=no"/>
<title>Site is closed</title>
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/mage/calendar.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/css/styles-m.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Amasty_Stockstatus/css/amstockstatus.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Mageplaza_QuickCart/css/minicart.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/StripeIntegration_Payments/css/wallets.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Hiddentechies_StoreMaintenance/css/style.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Hiddentechies_StoreMaintenance/css/font-awesome.min.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Hiddentechies_StoreMaintenance/css/reset.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Hiddentechies_StoreMaintenance/css/supersized.css" />
<link rel="stylesheet" type="text/css" media="screen and (min-width: 768px)" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/css/styles-l.css" />
<link rel="stylesh
Open service 23.50.131.156:443 · omnicell.fulfillworks.com
2025-12-22 19:02
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Page title: Site is closed
ostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com thm.visa.com http://dpm.demdex.net https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://hp.fulfillworks.com/rest/all/V1/cspmanager/frontend_report;, upgrade-insecure-requests;
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-UA-Compatible: IE=edge
X-Frame-Options: SAMEORIGIN
X-Akamai-Transformed: 9 2878 0 pmb=mRUM,1
Expires: Mon, 22 Dec 2025 19:02:50 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 22 Dec 2025 19:02:50 GMT
Content-Length: 15813
Connection: close
Set-Cookie: X-Magento-Vary=fc33c17991140c3bec61683667c2600740ab9b25; expires=Mon, 22-Dec-2025 20:02:50 GMT; Max-Age=3600; path=/; secure; HttpOnly; SameSite=Lax
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=401
Server-Timing: origin; dur=251
Alt-Svc: h3=":443"; ma=93600
Server-Timing: ak_p; desc="1766430169743_389224197_680216541_65069_7490_88_106_-";dur=1
<!doctype html>
<html lang="en">
<head >
<script>
var BASE_URL = 'https\u003A\u002F\u002Fomnicell.fulfillworks.com\u002F';
var require = {
'baseUrl': 'https\u003A\u002F\u002Fomnicell.fulfillworks.com\u002Fstatic\u002Ffrontend\u002FFullpond\u002Fomnicell\u002Fen_US'
};</script> <meta charset="utf-8"/>
<meta name="title" content="Site is closed"/>
<meta name="robots" content="INDEX,FOLLOW"/>
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1.0"/>
<meta name="format-detection" content="telephone=no"/>
<title>Site is closed</title>
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/mage/calendar.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/css/styles-m.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Amasty_Stockstatus/css/amstockstatus.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Mageplaza_QuickCart/css/minicart.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/StripeIntegration_Payments/css/wallets.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Hiddentechies_StoreMaintenance/css/style.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Hiddentechies_StoreMaintenance/css/font-awesome.min.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Hiddentechies_StoreMaintenance/css/reset.css" />
<link rel="stylesheet" type="text/css" media="all" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/Hiddentechies_StoreMaintenance/css/supersized.css" />
<link rel="stylesheet" type="text/css" media="screen and (min-width: 768px)" href="https://omnicell.fulfillworks.com/static/frontend/Fullpond/omnicell/en_US/css/styles-l.css" />
<link rel="styleshe