Domain stage.backpacker.com
United States
Software information
Vercel
tcp/443
-
GraphQL introspection is enabled.
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
First seen 2025-12-03 16:03-
Severity: medium
Fingerprint: c2db3a1c40d490dbaf340e11fb7eeddcb86a9b60ae5d8287055f95c01464c621GraphQL introspection enabled at /api/gql Types: 482 (by kind: ENUM: 55, INPUT_OBJECT: 66, INTERFACE: 4, OBJECT: 333, SCALAR: 16, UNION: 8) Operations: - Query: Query | fields: athleticEvent, athleticEventByURL, athleticEventTypes, featuredAthleticEvents, upcomingAthleticEvents - Mutation: Mutation | fields: addResultsSitePhotoUrl, addResultsSiteResults, feedServiceFollow, feedServiceUnfollow, updateRacerTracking - Subscription: Subscription | fields: chat, counter, notifications Directives: defer, deprecated, include, skip, specifiedBy (total: 5)
Found on 2025-12-03 16:03688.2 kBytes
-
-
Open service 66.33.60.193:443 · stage.backpacker.com
2026-01-09 03:05
HTTP/1.1 302 Found Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Fri, 09 Jan 2026 03:05:48 GMT Location: https://login-staging.outsideonline.com/oidc/o/authorize/?prompt=none&response_type=code%20id_token&response_mode=query&state=%7B%22token%22%3A%224cc8c756f8af6f8511c9428eb5491fad4ef1384d338d187924012379b990c09e3ba1832e88f1a13aee33b921939dcd7fb6bbf3890d0cf615ad51637cf924972a9337d0f6566cbead5eb927263892d1ab04065e280a1eda9d1d35f22617c428e7f99333c28629bbc806e4d3d54c7f070396712cd78923182bb84513e108857bf9e27d3021b214%22%2C%22iv%22%3A%22a54944b278540e507650dd81%22%7D&nonce=4fcb9f91-61f7-405a-b91d-7329041d9e0d&client_id=qjeUjIKVTaTklSXiDcpO6yN5oi93CVvHBAYJ4Q3c&redirect_uri=https%3A%2F%2Fstage.backpacker.com%2Fauthorize Server: Vercel Set-Cookie: outside_state=f9045439-e30b-4617-b180-89f87546496d; Path=/; Expires=Fri, 09 Jan 2026 03:20:48 GMT; Max-Age=900; Domain=.stage.backpacker.com; Secure; HttpOnly; SameSite=lax Set-Cookie: _r_token=; Domain=.stage.backpacker.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Set-Cookie: _rm=; Domain=.stage.backpacker.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Strict-Transport-Security: max-age=63072000 X-Vercel-Id: lhr1::j49wh-1767927948053-b716114be5c7 Connection: close Transfer-Encoding: chunked Redirecting...
Found 2026-01-09 by HttpPluginCreate report
-
Open service 66.33.60.193:443 · stage.backpacker.com
2026-01-02 03:38
HTTP/1.1 302 Found Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Fri, 02 Jan 2026 03:38:12 GMT Location: https://login-staging.outsideonline.com/oidc/o/authorize/?prompt=none&response_type=code%20id_token&response_mode=query&state=%7B%22token%22%3A%2271ae4b9d6acbfd9fed6a4acf5af2f9d37593ea8e4c6b01c71f1587112f0f891cc1355b4f5de3a360de44fd7ea9173d07924ac01b3a0b6445eb7c7d4936aa57b5a633c49bd844cc69849a19b4baa19169d3cd9814dde5ecd1271d1d4f178c45d148631629e09016203b542aad6a93de20a7475267e442b4db86b6e37ec1da6edbf82b0f4ec187%22%2C%22iv%22%3A%22b1bf850785c913f132d7c329%22%7D&nonce=6be7b205-b2ad-4aa5-8087-800827b1b7b6&client_id=qjeUjIKVTaTklSXiDcpO6yN5oi93CVvHBAYJ4Q3c&redirect_uri=https%3A%2F%2Fstage.backpacker.com%2Fauthorize Server: Vercel Set-Cookie: outside_state=3dd74dc2-529c-4ed4-9a5f-94fb960ba5af; Path=/; Expires=Fri, 02 Jan 2026 03:53:12 GMT; Max-Age=900; Domain=.stage.backpacker.com; Secure; HttpOnly; SameSite=lax Set-Cookie: _r_token=; Domain=.stage.backpacker.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Set-Cookie: _rm=; Domain=.stage.backpacker.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::2tdpv-1767325092604-1f562291bfd7 Connection: close Transfer-Encoding: chunked Redirecting...
Found 2026-01-02 by HttpPluginCreate report
-
Open service 66.33.60.193:443 · stage.backpacker.com
2025-12-30 11:29
HTTP/1.1 302 Found Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Tue, 30 Dec 2025 11:29:33 GMT Location: https://login-staging.outsideonline.com/oidc/o/authorize/?prompt=none&response_type=code%20id_token&response_mode=query&state=%7B%22token%22%3A%223ccbdb7256d625af8f2c9a6cee92f9f83e09c148f5bf34b76f9d4138e8cc456faa2cc54b30748a4ea652923c9fa3422f8b57507f7c3b70a659073f894f8d9407b17c406d9ffd7d7a08465f0f9e70a1b4f460f6d6dd0f118de4763a58f9c130d8b8f3b700b0401bc9259c9a64d45f0fb8fd9c84f8f32e7adb927bea047b17d4467d39b31163df%22%2C%22iv%22%3A%22975b490a776eff534072d87a%22%7D&nonce=e7986b88-18bc-4716-8998-c46b245ce8f3&client_id=qjeUjIKVTaTklSXiDcpO6yN5oi93CVvHBAYJ4Q3c&redirect_uri=https%3A%2F%2Fstage.backpacker.com%2Fauthorize Server: Vercel Set-Cookie: outside_state=ab359690-016f-4b05-b0be-1ce1b2182939; Path=/; Expires=Tue, 30 Dec 2025 11:44:33 GMT; Max-Age=900; Domain=.stage.backpacker.com; Secure; HttpOnly; SameSite=lax Set-Cookie: _r_token=; Domain=.stage.backpacker.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Set-Cookie: _rm=; Domain=.stage.backpacker.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Strict-Transport-Security: max-age=63072000 X-Vercel-Id: sin1::qrf69-1767094173285-d16af6d98501 Connection: close Transfer-Encoding: chunked Redirecting...
Found 2025-12-30 by HttpPluginCreate report
-
Open service 66.33.60.193:443 · stage.backpacker.com
2025-12-22 14:39
HTTP/1.1 302 Found Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Mon, 22 Dec 2025 14:39:51 GMT Location: https://login-staging.outsideonline.com/oidc/o/authorize/?prompt=none&response_type=code%20id_token&response_mode=query&state=%7B%22token%22%3A%2226846d3c4b567f6de872191cd4e9dd6cacc887bd79974cf211c5dba3bef9d3ea94cd11f78e0b9a349fe76d53656a72175fd2f9106aedb4a3b499b554950640973333c426eebb57255734a817588d456e845eb404111b909f5640d2617bad2a36906c5e07ad2f92b797bc8bd6719820bb01e04e1c545428bf4809cf7f127ba54dc35f9f7bb007%22%2C%22iv%22%3A%2292dff9ef29002bd79eb52dc1%22%7D&nonce=f99b35c4-c720-422c-8a1e-d76ecd9257f4&client_id=qjeUjIKVTaTklSXiDcpO6yN5oi93CVvHBAYJ4Q3c&redirect_uri=https%3A%2F%2Fstage.backpacker.com%2Fauthorize Server: Vercel Set-Cookie: outside_state=f98a50ce-6af5-48fd-825e-885e710158dd; Path=/; Expires=Mon, 22 Dec 2025 14:54:51 GMT; Max-Age=900; Domain=.stage.backpacker.com; Secure; HttpOnly; SameSite=lax Set-Cookie: _r_token=; Domain=.stage.backpacker.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Set-Cookie: _rm=; Domain=.stage.backpacker.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::pshwn-1766414391406-12cedda9ad9e Connection: close Transfer-Encoding: chunked Redirecting...
Found 2025-12-22 by HttpPluginCreate report
-
Open service 66.33.60.193:443 · stage.backpacker.com
2025-12-20 17:15
HTTP/1.1 302 Found Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Sat, 20 Dec 2025 17:15:49 GMT Location: https://login-staging.outsideonline.com/oidc/o/authorize/?prompt=none&response_type=code%20id_token&response_mode=query&state=%7B%22token%22%3A%229065d2cabf485dedde2beebf1e3af9127daf4bffb8de10e7033e644702f9061efab3d6a16623fd1cdcf3901a01ef6b495c5bb92418086e0f32548d6b4cbc20a46d9c232ba7fa5d7d683238b0367efaf1a57f1b07dada7442c9a9d0f081bf231b317902c31a77336264a2cd15707899417e1995120e6fc7f1d2c80eafdef117de30c2bf0c4cf7%22%2C%22iv%22%3A%229905b68b3959809df758871c%22%7D&nonce=8d353018-0582-4315-8f66-598e3927d469&client_id=qjeUjIKVTaTklSXiDcpO6yN5oi93CVvHBAYJ4Q3c&redirect_uri=https%3A%2F%2Fstage.backpacker.com%2Fauthorize Server: Vercel Set-Cookie: outside_state=a4cb1e27-de82-471c-88f0-125397569a81; Path=/; Expires=Sat, 20 Dec 2025 17:30:49 GMT; Max-Age=900; Domain=.stage.backpacker.com; Secure; HttpOnly; SameSite=lax Set-Cookie: _r_token=; Domain=.stage.backpacker.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Set-Cookie: _rm=; Domain=.stage.backpacker.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Strict-Transport-Security: max-age=63072000 X-Vercel-Id: sfo1::m4zgl-1766250949499-1ebdd70d0b2a Connection: close Transfer-Encoding: chunked Redirecting...
Found 2025-12-20 by HttpPluginCreate report