Vercel
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d677d4e73ea63624ee0529661c59aa019176181f8c
GraphQL introspection enabled at /api/graphql Types: 437 (by kind: ENUM: 86, INPUT_OBJECT: 36, OBJECT: 295, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d644f07c12ab9ed2e2bac10ab0b7ff243d4149e7c0
GraphQL introspection enabled at /api/graphql Types: 433 (by kind: ENUM: 84, INPUT_OBJECT: 36, OBJECT: 293, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6e135c6b2967cc74211b291d0524c8f1d6a1adae0
GraphQL introspection enabled at /api/graphql Types: 432 (by kind: ENUM: 84, INPUT_OBJECT: 36, OBJECT: 292, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d650edf58a6fe9ac3aa7583118a716002538f7bc48
GraphQL introspection enabled at /api/graphql Types: 423 (by kind: ENUM: 80, INPUT_OBJECT: 36, OBJECT: 287, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d69dc0263272d211c22af5a550f1e0799df1798d60
GraphQL introspection enabled at /api/graphql Types: 422 (by kind: ENUM: 80, INPUT_OBJECT: 36, OBJECT: 287, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d630bf79fd4dc54f1fb5f380db0348767817b543e5
GraphQL introspection enabled at /api/graphql Types: 426 (by kind: ENUM: 80, INPUT_OBJECT: 36, OBJECT: 291, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d66f89e74fcc048dddc2e4e49596eaae020660c59b
GraphQL introspection enabled at /api/graphql Types: 425 (by kind: ENUM: 80, INPUT_OBJECT: 36, OBJECT: 290, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6e55af40871258c2cff0ae2a625e7cd33e6e99922
GraphQL introspection enabled at /api/graphql Types: 424 (by kind: ENUM: 79, INPUT_OBJECT: 36, OBJECT: 290, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Open service 216.150.1.1:443 · partners.trulabs.com
2026-01-08 22:30
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Thu, 08 Jan 2026 22:30:42 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: lhr1::kv5vz-1767911442813-22e68d232d15 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.1:443 · partners.trulabs.com
2026-01-02 00:34
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Fri, 02 Jan 2026 00:34:57 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: sfo1::s87f8-1767314097315-9b9616cb9556 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.1:443 · partners.trulabs.com
2025-12-30 08:12
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Tue, 30 Dec 2025 08:12:55 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: lhr1::cpk7n-1767082375077-b4315a784220 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.65:80 · partners.trulabs.com
2025-12-22 09:32
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://partners.trulabs.com/ Refresh: 0;url=https://partners.trulabs.com/ server: Vercel Redirecting...
Open service 216.150.16.193:443 · partners.trulabs.com
2025-12-22 09:32
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Mon, 22 Dec 2025 09:32:15 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: iad1::n96vt-1766395935481-f67977b211c1 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.16.193:80 · partners.trulabs.com
2025-12-22 09:32
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://partners.trulabs.com/ Refresh: 0;url=https://partners.trulabs.com/ server: Vercel Redirecting...
Open service 216.150.1.65:443 · partners.trulabs.com
2025-12-22 09:32
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Mon, 22 Dec 2025 09:32:15 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: fra1::8wqt2-1766395934983-5f740f91cad0 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.1:443 · partners.trulabs.com
2025-12-22 09:30
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Mon, 22 Dec 2025 09:30:07 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: sin1::dj7gb-1766395807330-31703e61c88b Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.1:443 · partners.trulabs.com
2025-12-20 10:16
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Sat, 20 Dec 2025 10:16:00 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: iad1::xtjhd-1766225760720-8b8ab7eb98a4 Connection: close Transfer-Encoding: chunked Redirecting...