GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db84e0e3507c9f920fe465341d22354bb127d73c0f7b3bf2b3
GraphQL introspection enabled at /api Types: 261 (by kind: ENUM: 12, INPUT_OBJECT: 93, OBJECT: 133, SCALAR: 15, UNION: 8) Operations: - Query: Query | fields: i18NLocale, i18NLocales_connection, uploadFile, uploadFiles, uploadFiles_connection - Mutation: Mutation | fields: createReviewWorkflowsWorkflow, createReviewWorkflowsWorkflowStage, deleteReviewWorkflowsWorkflow, updateReviewWorkflowsWorkflow, updateReviewWorkflowsWorkflowStage Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db84e0e3507c9f920fe465341d22354bb127d73c0fea7f53f7
GraphQL introspection enabled at /api Types: 261 (by kind: ENUM: 12, INPUT_OBJECT: 93, OBJECT: 133, SCALAR: 15, UNION: 8) Operations: - Query: Query | fields: i18NLocale, i18NLocales_connection, uploadFile, uploadFiles, uploadFiles_connection - Mutation: Mutation | fields: createReviewWorkflowsWorkflow, createReviewWorkflowsWorkflowStage, deleteReviewWorkflowsWorkflow, updateReviewWorkflowsWorkflow, updateReviewWorkflowsWorkflowStage Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
Found 1 files trough .DS_Store spidering: /images
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9db7f4c636b7f4c636b7f4c636b7f4c636
Found 1 files trough .DS_Store spidering: /images
Open service 3.161.82.8:443 · pawsomechoice.com
2026-01-09 20:55
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Amz-Cf-Pop: FRA56-P13 Date: Fri, 09 Jan 2026 20:55:53 GMT x-content-type-options: nosniff cloudfront-viewer-country: * Cache-Control: s-maxage=10 x-middleware-rewrite: /en Link: </_next/static/media/83afe278b6a6bb3c.p.3a6ba036.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", <https://media.pawsomechoice.com/logo_86de4506c2.svg>; rel=preload; as="image" x-powered-by: Next.js strict-transport-security: max-age=31536000; includeSubDomains; preload x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Via: 1.1 f83dbfb0fedcf4135c2e4ba4b6ef2dc2.cloudfront.net (CloudFront), 1.1 7b33e91c10f2279399751cc4de05f400.cloudfront.net (CloudFront) Vary: Accept-Encoding X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P10 X-Amz-Cf-Id: uoNWNCB8sKaH98Y7s0ai-6c_-KCF9enUOXigeW7SvYp9KAQgUFZ9ug== Age: 2
Open service 3.161.82.8:443 · pawsomechoice.com
2026-01-02 16:34
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Via: 1.1 22071b16ebfda9a38c5d5316f5b9ce82.cloudfront.net (CloudFront), 1.1 b61ff825a3ca0ff851caf7741034ca52.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P13 Date: Fri, 02 Jan 2026 16:34:41 GMT x-content-type-options: nosniff cloudfront-viewer-country: * Cache-Control: s-maxage=10 x-middleware-rewrite: /en Link: </_next/static/media/83afe278b6a6bb3c.p.3a6ba036.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/chunks/52774beafd56bb4a.css>; rel=preload; as="style" x-powered-by: Next.js strict-transport-security: max-age=31536000; includeSubDomains; preload x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Vary: Accept-Encoding X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P10 X-Amz-Cf-Id: HsZ4XNsBMst-t755QRZjB08Uo_RGZymmz-OmcI1sUi7HxrXBHCn3lw==
Open service 3.161.82.8:443 · pawsomechoice.com
2025-12-23 06:11
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Via: 1.1 7b921af2d8563da7f429361b2f7dc3d4.cloudfront.net (CloudFront), 1.1 59d552fe007f8133d3f016164f2c79aa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P13 Date: Tue, 23 Dec 2025 06:11:18 GMT x-content-type-options: nosniff cloudfront-viewer-country: * Cache-Control: s-maxage=10 x-middleware-rewrite: /en Link: </_next/static/media/83afe278b6a6bb3c.p.3a6ba036.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/chunks/52774beafd56bb4a.css>; rel=preload; as="style" x-powered-by: Next.js strict-transport-security: max-age=31536000; includeSubDomains; preload x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P10 X-Amz-Cf-Id: Lw9rTaR-QemQAeY2Ag20eB71fgC_TVWYctu9loRA_wvM28SSwKF2pg==
Open service 3.161.82.8:443 · pawsomechoice.com
2025-12-19 00:55
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Via: 1.1 f7d063966b06905209f8790f5fd607e2.cloudfront.net (CloudFront), 1.1 a2fcaa589cf2ad79b72da94df54baac6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P5 Date: Fri, 19 Dec 2025 00:55:11 GMT x-content-type-options: nosniff cloudfront-viewer-country: * Cache-Control: public, max-age=31536000, immutable x-middleware-rewrite: /en Link: </_next/static/media/83afe278b6a6bb3c.p.3a6ba036.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/chunks/477f56d27f89081e.css>; rel=preload; as="style" x-powered-by: Next.js strict-transport-security: max-age=31536000; includeSubDomains; preload x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P10 X-Amz-Cf-Id: Ya22BeC0sUcFyU6u8-4G6Do_mO-RmYSHRZ3QAknrFilmvVOTDU0cpg==