Vercel
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d677d4e73ea63624ee0529661c59aa019176181f8c
GraphQL introspection enabled at /api/graphql Types: 437 (by kind: ENUM: 86, INPUT_OBJECT: 36, OBJECT: 295, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d644f07c12ab9ed2e2bac10ab0b7ff243d4149e7c0
GraphQL introspection enabled at /api/graphql Types: 433 (by kind: ENUM: 84, INPUT_OBJECT: 36, OBJECT: 293, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6e135c6b2967cc74211b291d0524c8f1d6a1adae0
GraphQL introspection enabled at /api/graphql Types: 432 (by kind: ENUM: 84, INPUT_OBJECT: 36, OBJECT: 292, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d650edf58a6fe9ac3aa7583118a716002538f7bc48
GraphQL introspection enabled at /api/graphql Types: 423 (by kind: ENUM: 80, INPUT_OBJECT: 36, OBJECT: 287, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d69dc0263272d211c22af5a550f1e0799df1798d60
GraphQL introspection enabled at /api/graphql Types: 422 (by kind: ENUM: 80, INPUT_OBJECT: 36, OBJECT: 287, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d630bf79fd4dc54f1fb5f380db0348767817b543e5
GraphQL introspection enabled at /api/graphql Types: 426 (by kind: ENUM: 80, INPUT_OBJECT: 36, OBJECT: 291, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d66f89e74fcc048dddc2e4e49596eaae020660c59b
GraphQL introspection enabled at /api/graphql Types: 425 (by kind: ENUM: 80, INPUT_OBJECT: 36, OBJECT: 290, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6e55af40871258c2cff0ae2a625e7cd33e6e99922
GraphQL introspection enabled at /api/graphql Types: 424 (by kind: ENUM: 79, INPUT_OBJECT: 36, OBJECT: 290, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Open service 216.150.1.1:443 · partners.aloha.com
2026-01-09 05:33
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Fri, 09 Jan 2026 05:33:35 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: lhr1::whct7-1767936815393-f1f9153f1f73 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.1:443 · partners.aloha.com
2026-01-02 06:03
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Fri, 02 Jan 2026 06:03:35 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: fra1::ktk2b-1767333815130-6189ac0d8d7c Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.1:443 · partners.aloha.com
2025-12-30 13:38
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Tue, 30 Dec 2025 13:38:47 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: sin1::st5wk-1767101927536-ad4dcdff3e81 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.1:443 · partners.aloha.com
2025-12-22 16:48
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Mon, 22 Dec 2025 16:48:53 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: iad1::v5mjf-1766422133963-4b82a0e5792f Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.1:80 · partners.aloha.com
2025-12-21 17:35
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://partners.aloha.com/ Refresh: 0;url=https://partners.aloha.com/ server: Vercel Redirecting...
Open service 216.150.1.1:443 · partners.aloha.com
2025-12-21 17:35
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Sun, 21 Dec 2025 17:35:07 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: sfo1::v2lhp-1766338507236-a7b90181bd02 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.16.1:80 · partners.aloha.com
2025-12-21 17:35
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://partners.aloha.com/ Refresh: 0;url=https://partners.aloha.com/ server: Vercel Redirecting...
Open service 216.150.16.1:443 · partners.aloha.com
2025-12-21 17:35
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Sun, 21 Dec 2025 17:35:06 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: bom1::6lzdn-1766338506969-b1000e86d8f1 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.1:443 · partners.aloha.com
2025-12-20 22:52
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Sat, 20 Dec 2025 22:52:10 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: lhr1::5lm74-1766271130724-78cf1f12ea4a Connection: close Transfer-Encoding: chunked Redirecting...