Caddy
tcp/80
nginx
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3893ac6fc385c5b40c357bb4f4ae358cea9f0a5b2
GraphQL introspection enabled at /graphql Types: 35 (by kind: ENUM: 1, INPUT_OBJECT: 4, INTERFACE: 1, OBJECT: 25, SCALAR: 4) Operations: - Query: RootQueryType | fields: allLeads, leadStats, node - Mutation: RootMutationType | fields: createBusinessSearch, deleteLead Directives: include, skip (total: 2)
Open service 34.209.57.169:443 · scan.ampdirectories.com
2026-01-24 21:02
HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Security-Policy: form-action 'self'; object-src 'self';
Content-Type: text/html; charset=utf-8
Date: Sat, 24 Jan 2026 21:02:40 GMT
Server: Caddy
Server: nginx
Set-Cookie: _synup_key=SFMyNTY.g3QAAAABbQAAAAtfY3NyZl90b2tlbm0AAAAYU1V3endPNEh0K2pnR3R5WGhFaFBVQT09.W9rzP0GGaekCuGQRakFLZk84Ui7Vv-FLWPiF3QPfswM; path=/; HttpOnly
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOWALL
X-Request-Id: k9b0dkm97hhtgs0fujm89sdh1a0hqapn
X-Xss-Protection: 1; mode=block
Connection: close
Transfer-Encoding: chunked
Page title: AmpMediaSales Scan Tool
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<!-- <meta name="viewport" content="width=device-width, initial-scale=0.5, user-scalable=1, minimum-scale=0.5, maximum-scale=1.0"> -->
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="twitter:card" content="summary" />
<title>AmpMediaSales Scan Tool</title>
<meta property="og:title" content="AmpMediaSales Scan Tool"/>
<meta property="og:image:width" content="200" />
<meta property="og:image" content="https://thumbor-gcp.verifymybiz.com/OlCqG26GMGrIC1Y2U7aeR2vTgVo=/315x315/filters:format(png):fill(transparent)/https://s3-us-west-2.amazonaws.com/images.verifymybiz.com/accounts/company_logos/000/019/756/original/mxuwvwo6RkWOJSANPSOe.png" />
<meta name="twitter:image" content="https://thumbor-gcp.verifymybiz.com/OlCqG26GMGrIC1Y2U7aeR2vTgVo=/315x315/filters:format(png):fill(transparent)/https://s3-us-west-2.amazonaws.com/images.verifymybiz.com/accounts/company_logos/000/019/756/original/mxuwvwo6RkWOJSANPSOe.png" />
<!-- Latest compiled and minified CSS -->
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/tippy.js/3.4.1/tippy.css" />
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/tippy.js/3.4.1/themes/light.css" integrity="sha256-i6Q0EFfGpI7TQTMlmEHRu/8HWFrmGCbZBkRbg+oP9fc=" crossorigin="anonymous" />
<link rel="stylesheet" href="/css/app.css">
<script src="/js/vendor.js"></script>
<script src="/js/app.js"></script>
<link href='https://fonts.googleapis.com/css?family=Droid+Serif:400,400italic' rel='stylesheet' type='text/css'>
<!-- HTML5 shim and Respond.js for IE8 support of HTML5 elements and media queries -->
<!--[if lt IE 9]>
<script src="https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js"></script>
<script src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script>
<![endif]-->
<link rel="stylesheet" type="text/css" href=""/>
</head>
<body class="home-page page-steps">
<div class="container">
<div class="row scan-tool-header-wrapper">
<div class="col-md-12 scan-tool-header">
<img src="https://s3-us-west-2.amazonaws.com/images.verifymybiz.com/accounts/company_logos/000/019/756/original/mxuwvwo6RkWOJSANPSOe.png" class="scan-tool-business-logo"/>
</div>
</div>
</div>
<div class="container">
<div class="row">
<div class="col-xs-12 col-lg-offset-2 col-lg-8">
<div class="step-two steps-wrapper">
<div class="steps-control">
<ul class="list-style no-padding-left section-control no-margin-bottom">
<li class="completed">
<span class="number no-padding-left no-margin-right tick">
<img src="images/img-tick.png" alt=""/>
</span>
<span>Nature of Business</span>
</li>
<li class="active">
<span class="number no-padding-left no-margin-right">2</span>
<span>Business Details</span>
</li>
<li>
<span class="number no-padding-left no-margin-right">3</span>
<span>Scan Results</span>
</li>
<li>
<span class="number no-padding-left no-margin-right">4</span>
<span>Fix your Listings</span>
</li>
</ul>
</div>
<h1 class="text-center">What kind of business do you run?</h1>
<div class="business-type row">
<div class="whitelabel-filter">
<label class="single-location location on-select" data-behavior="business-type-option" data-value="single-location">
<div class="inner-control">
<div class="box-sm small-control box">
<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" viewBox="0 0 35.875 50.563" class="icon-status single-scale">
Open service 34.209.57.169:80 · scan.ampdirectories.com
2026-01-24 21:02
HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Location: https://scan.ampdirectories.com/ Server: Caddy Date: Sat, 24 Jan 2026 21:03:09 GMT Content-Length: 67 Connection: close <a href="https://scan.ampdirectories.com/">Moved Permanently</a>.
Open service 34.209.57.169:443 · scan.ampdirectories.com
2026-01-23 16:06
HTTP/1.1 200 OK
Cache-Control: max-age=0, private, must-revalidate
Content-Security-Policy: form-action 'self'; object-src 'self';
Content-Type: text/html; charset=utf-8
Date: Fri, 23 Jan 2026 16:06:25 GMT
Server: Caddy
Server: nginx
Set-Cookie: _synup_key=SFMyNTY.g3QAAAABbQAAAAtfY3NyZl90b2tlbm0AAAAYckpHc25JV2o0NWU5OWtpeXF4endHQT09.1kF5OFXJpeSDB4O-nM52Bn2zchHkBqYV-ImaCuHF0Kw; path=/; HttpOnly
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: ALLOWALL
X-Request-Id: kgl1gptb7r53o8t788patkh9qvvslfd4
X-Xss-Protection: 1; mode=block
Connection: close
Transfer-Encoding: chunked
Page title: AmpMediaSales Scan Tool
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<!-- <meta name="viewport" content="width=device-width, initial-scale=0.5, user-scalable=1, minimum-scale=0.5, maximum-scale=1.0"> -->
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="twitter:card" content="summary" />
<title>AmpMediaSales Scan Tool</title>
<meta property="og:title" content="AmpMediaSales Scan Tool"/>
<meta property="og:image:width" content="200" />
<meta property="og:image" content="https://thumbor-gcp.verifymybiz.com/OlCqG26GMGrIC1Y2U7aeR2vTgVo=/315x315/filters:format(png):fill(transparent)/https://s3-us-west-2.amazonaws.com/images.verifymybiz.com/accounts/company_logos/000/019/756/original/mxuwvwo6RkWOJSANPSOe.png" />
<meta name="twitter:image" content="https://thumbor-gcp.verifymybiz.com/OlCqG26GMGrIC1Y2U7aeR2vTgVo=/315x315/filters:format(png):fill(transparent)/https://s3-us-west-2.amazonaws.com/images.verifymybiz.com/accounts/company_logos/000/019/756/original/mxuwvwo6RkWOJSANPSOe.png" />
<!-- Latest compiled and minified CSS -->
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/tippy.js/3.4.1/tippy.css" />
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/tippy.js/3.4.1/themes/light.css" integrity="sha256-i6Q0EFfGpI7TQTMlmEHRu/8HWFrmGCbZBkRbg+oP9fc=" crossorigin="anonymous" />
<link rel="stylesheet" href="/css/app.css">
<script src="/js/vendor.js"></script>
<script src="/js/app.js"></script>
<link href='https://fonts.googleapis.com/css?family=Droid+Serif:400,400italic' rel='stylesheet' type='text/css'>
<!-- HTML5 shim and Respond.js for IE8 support of HTML5 elements and media queries -->
<!--[if lt IE 9]>
<script src="https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js"></script>
<script src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script>
<![endif]-->
<link rel="stylesheet" type="text/css" href=""/>
</head>
<body class="home-page page-steps">
<div class="container">
<div class="row scan-tool-header-wrapper">
<div class="col-md-12 scan-tool-header">
<img src="https://s3-us-west-2.amazonaws.com/images.verifymybiz.com/accounts/company_logos/000/019/756/original/mxuwvwo6RkWOJSANPSOe.png" class="scan-tool-business-logo"/>
</div>
</div>
</div>
<div class="container">
<div class="row">
<div class="col-xs-12 col-lg-offset-2 col-lg-8">
<div class="step-two steps-wrapper">
<div class="steps-control">
<ul class="list-style no-padding-left section-control no-margin-bottom">
<li class="completed">
<span class="number no-padding-left no-margin-right tick">
<img src="images/img-tick.png" alt=""/>
</span>
<span>Nature of Business</span>
</li>
<li class="active">
<span class="number no-padding-left no-margin-right">2</span>
<span>Business Details</span>
</li>
<li>
<span class="number no-padding-left no-margin-right">3</span>
<span>Scan Results</span>
</li>
<li>
<span class="number no-padding-left no-margin-right">4</span>
<span>Fix your Listings</span>
</li>
</ul>
</div>
<h1 class="text-center">What kind of business do you run?</h1>
<div class="business-type row">
<div class="whitelabel-filter">
<label class="single-location location on-select" data-behavior="business-type-option" data-value="single-location">
<div class="inner-control">
<div class="box-sm small-control box">
<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" viewBox="0 0 35.875 50.563" class="icon-status single-scale">