cloudflare
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa374c2942e74c2942e74c2942e74c2942e74c2942e
GraphQL introspection enabled at /graphql Detected: Magento
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
GraphQL introspection enabled at /graphql
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a7edf4f1b1e35dd9d9b3c9a7b2b4097b0a1b0df
GraphQL introspection enabled at /graphql Types: 1018 (by kind: ENUM: 81, INPUT_OBJECT: 256, INTERFACE: 34, OBJECT: 637, SCALAR: 5, UNION: 5) Operations: - Query: Query | fields: MpRewardConfig, MpRewardIcon, MpRewardShoppingCartSpendingRules, NewestBlogPosts, RelatedBlogPosts - Mutation: Mutation | fields: AmxnotifStockSubscribe, MpRewardInvite, MpRewardRefer, MpRewardSpendingPoint, MpRewardSubscribe Directives: deprecated, include, oneOf, skip (total: 4)
Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2f8cbe7e2
GraphQL introspection enabled at /graphql/api
Open service 188.114.97.3:443 · sk.staging24.gymbeam.dev
2026-01-23 16:08
HTTP/1.1 200 OK
Date: Fri, 23 Jan 2026 16:08:18 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ZyijMJK3ctdVSZkzozsQks72%2BJ3Avb9wWw090EQO20mJBzvn0L3Ld6WmUQapGpNHF6lnTNF4SQAzbZNL5yAzlTh%2BJhMAx5ftAn%2Fc%2B61dekOlNz1KSV73"}]}
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: same-origin
link: <https://sk.staging24.gymbeam.dev/media/gymbeam/bannerslider/s/k/sk-valentines_protein_deal_-slider-mobile.jpg>; rel=preload; as="image"; fetchpriority="high", <https://sk.staging24.gymbeam.dev/media/gymbeam/bannerslider/s/k/sk-valentines_protein_deal_-slider-desktop.jpg>; rel=preload; as="image"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/schudnut.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/budovatSvalovuHmotu.png?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/podporitRegeneraciu.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/zlepsitVyhon.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/zdravsieMaskrtit.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/zacatCvicitDoma.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/podporitImunitu.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high", <https://gymbeam.sk/media/.renditions/wysiwyg/sportoveOblecenie.jpg?v=1>; rel=preload; as="image"; imagesizes="(max-width: 640px) 173px%2C (max-width: 1024px) 216px%2C 260px"; fetchpriority="high"
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
Set-Cookie: NEXT_LOCALE=sk; Path=/; SameSite=lax
store: gymbeamsk
strict-transport-security: max-age=631138519; includeSubDomains
user-agent: Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)
vary: Accept-Encoding
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding
x-content-type-options: nosniff
x-customer-segment: 0db377921f4ce762c62526131097968f
x-download-options: noopen
x-forwarded-url: https://sk.staging24.gymbeam.dev/
x-frame-options: SAMEORIGIN
x-magento-tags: store,cms_b,mp_smtp_script,cat_c,cms_b_footer_block_link_customer_service,cms_b_footer_block_link_social_media,cms_b_footer_block_link_certifications,cms_b_footer_block_link_contact,cms_p_8246,react_homepage
x-middleware-rewrite: /sk
x-permitted-cross-domain-policies: none
x-powered-by: Next.js
x-request-start-time: 1769184498630
x-trace-id: -
x-xss-protection: 0
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=11,cfOrigin;dur=91
CF-RAY: 9c288c8c3e6506c4-AMS
Open service 188.114.97.3:443 · sk.staging24.gymbeam.dev
2026-01-09 19:47
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 19:47:15 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=opC%2BcF7fMUIP3Tx8nOASsBLWo2SGZtZMJWgd%2Bqyb16%2BD%2BzXRRkicfY%2BjK%2FBPIwIXGsoaJUwCfPF%2BfurKQy25jqVx7elW4oA1FOaj2HfLGqKPnkYjB3Rr"}]}
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
store: gymbeamsk
strict-transport-security: max-age=631138519; includeSubDomains
user-agent: Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)
vary: Accept-Encoding
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding
x-content-type-options: nosniff
x-customer-segment: 0db377921f4ce762c62526131097968f
x-download-options: noopen
x-forwarded-url: https://sk.staging24.gymbeam.dev/
x-frame-options: SAMEORIGIN
x-magento-tags: store,cms_b,mp_smtp_script,cat_c,cms_b_footer_block_link_customer_service,cms_b_footer_block_link_social_media,cms_b_footer_block_link_certifications,cms_b_footer_block_link_contact,cms_p_8246,react_homepage
x-middleware-rewrite: /sk
x-permitted-cross-domain-policies: none
x-powered-by: Next.js
x-trace-id: gGDDgXu8r_fb6_q6fsV92
x-xss-protection: 0
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=11,cfOrigin;dur=109
CF-RAY: 9bb672072ecf5c3c-AMS
Open service 188.114.97.3:443 · sk.staging24.gymbeam.dev
2026-01-02 18:13
HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 18:13:21 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=OOj5HD8Izv3To1eqETa%2FOMJTa3CHuhbQiKoPxAYsheesZToVOz%2F%2BsEvwx8WKdimfDqzIhSec7pJ7P54%2BUK7hF0qHZXn%2F%2BjEShQ%2FIZkaD4xyqqWCIkQ%3D%3D"}]}
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
store: gymbeamsk
strict-transport-security: max-age=631138519; includeSubDomains
user-agent: Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)
vary: Accept-Encoding
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding
x-content-type-options: nosniff
x-customer-segment: 0db377921f4ce762c62526131097968f
x-download-options: noopen
x-forwarded-url: https://sk.staging24.gymbeam.dev/
x-frame-options: SAMEORIGIN
x-magento-tags: store,cms_b,mp_smtp_script,cat_c,cms_b_footer_block_link_customer_service,cms_b_footer_block_link_social_media,cms_b_footer_block_link_certifications,cms_b_footer_block_link_contact,cms_p_8246,react_homepage
x-middleware-rewrite: /sk
x-permitted-cross-domain-policies: none
x-powered-by: Next.js
x-trace-id: ZNMFXZp06CQwuo-gzUWPH
x-xss-protection: 0
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=9,cfOrigin;dur=224
CF-RAY: 9b7c3adabe25cfa7-EWR
Open service 188.114.97.3:443 · sk.staging24.gymbeam.dev
2025-12-23 00:10
HTTP/1.1 200 OK
Date: Tue, 23 Dec 2025 00:11:00 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=HaDPY5MFEqwxWD4gi%2BHxlWGVt1KQJAr6jPjJXgJ3wOOu52YetIuO7P%2BMMEYIEsEOLhMQwlgaQIvoCTBTPXZLbJsMIoIg3mjd0CeNbzm8lSCHJpHnZM%2B1"}]}
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: strict-origin-when-cross-origin
store: gymbeamsk
strict-transport-security: max-age=631138519; includeSubDomains
user-agent: Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)
vary: Accept-Encoding
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding
x-content-type-options: nosniff
x-customer-segment: 0db377921f4ce762c62526131097968f
x-download-options: noopen
x-forwarded-url: https://sk.staging24.gymbeam.dev/
x-frame-options: SAMEORIGIN
x-magento-tags: store,cms_b,mp_smtp_script,cat_c,cms_b_footer_block_link_customer_service,cms_b_footer_block_link_social_media,cms_b_footer_block_link_certifications,cms_b_footer_block_link_contact,cms_p_8246,react_homepage
x-middleware-rewrite: /sk
x-permitted-cross-domain-policies: none
x-powered-by: Next.js
x-trace-id: xEekW7jVUBJUmcwzff5Jp
x-xss-protection: 0
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=7,cfOrigin;dur=671
CF-RAY: 9b23a39c9f6a7e3e-FRA