nginx
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3893ac6fc385c5b40c357bb4f4ae358cea9f0a5b2
GraphQL introspection enabled at /graphql Types: 35 (by kind: ENUM: 1, INPUT_OBJECT: 4, INTERFACE: 1, OBJECT: 25, SCALAR: 4) Operations: - Query: RootQueryType | fields: allLeads, leadStats, node - Mutation: RootMutationType | fields: createBusinessSearch, deleteLead Directives: include, skip (total: 2)
Open service 34.209.57.169:443 ยท scan.thecleversite.com
2026-01-23 06:03
HTTP/1.1 500 Internal Server Error Cache-Control: max-age=0, private, must-revalidate Content-Length: 21 Content-Security-Policy: form-action 'self'; object-src 'self'; Content-Type: text/html; charset=utf-8 Date: Fri, 23 Jan 2026 06:03:58 GMT Server: Caddy Server: nginx Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: ALLOWALL X-Request-Id: qno0p2fapt1hkl3o9er688nr0c41aoun X-Xss-Protection: 1; mode=block Connection: close Server internal error