Vercel
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490dbaf340e11fb7eeddcb86a9b60ae5d8287055f95c01464c621
GraphQL introspection enabled at /api/gql Types: 482 (by kind: ENUM: 55, INPUT_OBJECT: 66, INTERFACE: 4, OBJECT: 333, SCALAR: 16, UNION: 8) Operations: - Query: Query | fields: athleticEvent, athleticEventByURL, athleticEventTypes, featuredAthleticEvents, upcomingAthleticEvents - Mutation: Mutation | fields: addResultsSitePhotoUrl, addResultsSiteResults, feedServiceFollow, feedServiceUnfollow, updateRacerTracking - Subscription: Subscription | fields: chat, counter, notifications Directives: defer, deprecated, include, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490dbaf340e119530f53e8be17eeeeb26f4059384168e5e355077
GraphQL introspection enabled at /api/gql Types: 481 (by kind: ENUM: 55, INPUT_OBJECT: 66, INTERFACE: 4, OBJECT: 332, SCALAR: 16, UNION: 8) Operations: - Query: Query | fields: athleticEvent, athleticEventByURL, athleticEventTypes, featuredAthleticEvents, upcomingAthleticEvents - Mutation: Mutation | fields: addResultsSitePhotoUrl, addResultsSiteResults, feedServiceFollow, feedServiceUnfollow, updateRacerTracking - Subscription: Subscription | fields: chat, counter, notifications Directives: defer, deprecated, include, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490dbaf340e116b577944f018eb08b129627f8544b698b439e9c9
GraphQL introspection enabled at /api/gql Types: 480 (by kind: ENUM: 54, INPUT_OBJECT: 66, INTERFACE: 4, OBJECT: 332, SCALAR: 16, UNION: 8) Operations: - Query: Query | fields: athleticEvent, athleticEventByURL, athleticEventTypes, featuredAthleticEvents, upcomingAthleticEvents - Mutation: Mutation | fields: addResultsSitePhotoUrl, addResultsSiteResults, feedServiceFollow, feedServiceUnfollow, updateRacerTracking - Subscription: Subscription | fields: chat, counter, notifications Directives: defer, deprecated, include, skip, specifiedBy (total: 5)
Open service 66.33.60.193:443 · stage.skimag.com
2026-01-08 19:49
HTTP/1.1 302 Found Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Thu, 08 Jan 2026 19:49:29 GMT Location: https://login-staging.outsideonline.com/oidc/o/authorize/?prompt=none&response_type=code%20id_token&response_mode=query&state=%7B%22token%22%3A%22d593aab44aaafcee384932c323b55d8e88a46fbd7b2ae5be526eb39c38ca2d760d7688368fab66668c2a987f9faf548045828bc8e3ac25574eb984e99ab8efa550acf33c23251d0926828d66f0872a76759113afe38f407a9b75135b9cbafac021e86a7e1aea29b960390eee689db5703edf08d40f1d0d6d729163a1a85661aaea63%22%2C%22iv%22%3A%226f7958cf7f641f80be8bad85%22%7D&nonce=9b6f8eb9-43e4-40c1-bc63-5bea1608ca98&client_id=qjeUjIKVTaTklSXiDcpO6yN5oi93CVvHBAYJ4Q3c&redirect_uri=https%3A%2F%2Fstage.skimag.com%2Fauthorize Server: Vercel Set-Cookie: outside_state=70e96af2-df21-4579-9a46-de90bf449fae; Path=/; Expires=Thu, 08 Jan 2026 20:04:29 GMT; Max-Age=900; Domain=stage.skimag.com; Secure; HttpOnly; SameSite=lax Set-Cookie: _r_token=; Domain=stage.skimag.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Set-Cookie: _rm=; Domain=stage.skimag.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::w5kl5-1767901769308-fe641ce9e07e Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.194:80 · stage.skimag.com
2026-01-06 13:12
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://stage.skimag.com/ Refresh: 0;url=https://stage.skimag.com/ server: Vercel Redirecting...
Open service 76.76.21.93:80 · stage.skimag.com
2026-01-06 13:12
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://stage.skimag.com/ Refresh: 0;url=https://stage.skimag.com/ server: Vercel Redirecting...
Open service 66.33.60.194:443 · stage.skimag.com
2026-01-06 13:12
HTTP/1.1 302 Found Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Tue, 06 Jan 2026 13:12:58 GMT Location: https://login-staging.outsideonline.com/oidc/o/authorize/?prompt=none&response_type=code%20id_token&response_mode=query&state=%7B%22token%22%3A%22f5f52f7d4a290b82c552fedb07671b5705149d7d4c42975a48c562790e9646b5585a42080f5f4a241b3331a45efe944d2306010c7bfb8ac96e8d6c1b753334203ff7dacf5889acfc58838047e36f5a79f3f2f4a467069449effde64a3556288092541313b1152f3e91db6a611e2437396a31d18da882cf3196bcd88331a1e7d0d321%22%2C%22iv%22%3A%22d864fdd80ddca7d53b2ba48e%22%7D&nonce=251db071-89a8-40bf-8dcb-946f5377f74c&client_id=qjeUjIKVTaTklSXiDcpO6yN5oi93CVvHBAYJ4Q3c&redirect_uri=https%3A%2F%2Fstage.skimag.com%2Fauthorize Server: Vercel Set-Cookie: outside_state=8a4972d6-36d0-42be-902d-edb0e281fe31; Path=/; Expires=Tue, 06 Jan 2026 13:27:58 GMT; Max-Age=900; Domain=stage.skimag.com; Secure; HttpOnly; SameSite=lax Set-Cookie: _r_token=; Domain=stage.skimag.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Set-Cookie: _rm=; Domain=stage.skimag.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::ksprs-1767705178889-4e5c9337d5a2 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 76.76.21.93:443 · stage.skimag.com
2026-01-06 13:12
HTTP/1.1 302 Found Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Tue, 06 Jan 2026 13:12:58 GMT Location: https://login-staging.outsideonline.com/oidc/o/authorize/?prompt=none&response_type=code%20id_token&response_mode=query&state=%7B%22token%22%3A%2211d80a3ed6a65ad5506847620c9327975b0ebbe878a5eea029156c09459aa0bbeb0ef1292a011349a1d3d288aa054de6bebc1eb5bc84777e5f698024559de94d45385a959192d7fd434dc7872ae399c0c0e51cd9d05c2155e3df957931055ec1b5f0474c04cf63168e3d0b99327dd2ac71555205951b5c5b7ba4e999ad603d6638c7%22%2C%22iv%22%3A%22c0c415521e1f2a01062d76ff%22%7D&nonce=584f3a9a-f8ac-4659-815e-ac0353abb74b&client_id=qjeUjIKVTaTklSXiDcpO6yN5oi93CVvHBAYJ4Q3c&redirect_uri=https%3A%2F%2Fstage.skimag.com%2Fauthorize Server: Vercel Set-Cookie: outside_state=220325ce-7e38-4c94-bfa4-bbaa8861f03b; Path=/; Expires=Tue, 06 Jan 2026 13:27:58 GMT; Max-Age=900; Domain=stage.skimag.com; Secure; HttpOnly; SameSite=lax Set-Cookie: _r_token=; Domain=stage.skimag.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Set-Cookie: _rm=; Domain=stage.skimag.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Strict-Transport-Security: max-age=63072000 X-Vercel-Id: iad1::wl7bz-1767705178622-04d50fb062e3 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.193:443 · stage.skimag.com
2026-01-01 20:20
HTTP/1.1 302 Found Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Thu, 01 Jan 2026 20:20:04 GMT Location: https://login-staging.outsideonline.com/oidc/o/authorize/?prompt=none&response_type=code%20id_token&response_mode=query&state=%7B%22token%22%3A%22990bb42492753a56ca6223af7de0120057a1edcf294d53ed32be74906b3c7bb159521a4f3ff7f587985ee65474255d4e81299a39fb5330c4055b81b249a10a6b95d5631507bf65ee44578436855eb9f7b782cf71ed8083e54c466b868eb8f816a510ede3a21f7fda2dff460e8026d33df0d6a56e2f5bc6cf0064d74caef83d52226c%22%2C%22iv%22%3A%22dc4ee475fc11f8e230a60d2b%22%7D&nonce=159d330a-7db2-404f-b26e-b098d664f3a7&client_id=qjeUjIKVTaTklSXiDcpO6yN5oi93CVvHBAYJ4Q3c&redirect_uri=https%3A%2F%2Fstage.skimag.com%2Fauthorize Server: Vercel Set-Cookie: outside_state=ffefe1fe-d445-4510-8a71-4ebca8316d09; Path=/; Expires=Thu, 01 Jan 2026 20:35:04 GMT; Max-Age=900; Domain=stage.skimag.com; Secure; HttpOnly; SameSite=lax Set-Cookie: _r_token=; Domain=stage.skimag.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Set-Cookie: _rm=; Domain=stage.skimag.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Strict-Transport-Security: max-age=63072000 X-Vercel-Id: lhr1::qqdwc-1767298804452-4f4f83160a17 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.193:443 · stage.skimag.com
2025-12-30 04:28
HTTP/1.1 302 Found Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Tue, 30 Dec 2025 04:28:47 GMT Location: https://login-staging.outsideonline.com/oidc/o/authorize/?prompt=none&response_type=code%20id_token&response_mode=query&state=%7B%22token%22%3A%22be6db76177c6933c0764afc43791b42388cf2f4ca58aa6e76026c6098e56ea765e465d089ac36c3f1ed207a0c4381544680f598519bdf0246c25c0ae298cecef9ee7dacda5d9a1db0f633169b519f59f8ecc461759ec8aeffbe6633354eb649c7a43c6cb8671a8a40c414083cef534798f0e8b9d08228a10beb7ea469f3c1dcbbccb%22%2C%22iv%22%3A%225e3a6a4bdc36f0cefd03d8a1%22%7D&nonce=12a39678-cbf9-4470-889c-8b38aca15b17&client_id=qjeUjIKVTaTklSXiDcpO6yN5oi93CVvHBAYJ4Q3c&redirect_uri=https%3A%2F%2Fstage.skimag.com%2Fauthorize Server: Vercel Set-Cookie: outside_state=964a5b42-85d5-4ae3-bd3b-247935e5ba93; Path=/; Expires=Tue, 30 Dec 2025 04:43:47 GMT; Max-Age=900; Domain=stage.skimag.com; Secure; HttpOnly; SameSite=lax Set-Cookie: _r_token=; Domain=stage.skimag.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Set-Cookie: _rm=; Domain=stage.skimag.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Strict-Transport-Security: max-age=63072000 X-Vercel-Id: bom1::j6mgg-1767068927236-dc7ac21b5ca0 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.193:443 · stage.skimag.com
2025-12-22 05:17
HTTP/1.1 302 Found Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Mon, 22 Dec 2025 05:17:24 GMT Location: https://login-staging.outsideonline.com/oidc/o/authorize/?prompt=none&response_type=code%20id_token&response_mode=query&state=%7B%22token%22%3A%227c1432a827c44985e708f2302bbb3fea419836045335482ca5b2f3ee7b68bf32a96db2a6b43962f268058728036fb16b317aa497421edef696514333006075341ec0cb2898469edc48d4f9b36cdd6b4210043c81e37c9204266fe00a3d33e4b7cb75cdc5321fb9792f5c5d07e697ca8c2c9fb7fa1e84f33a9811db7bb1cb9615d4f1%22%2C%22iv%22%3A%22eaaf6d3d96522c270f4b89a4%22%7D&nonce=e1a95cbb-efad-4b53-8145-8e4db7d90720&client_id=qjeUjIKVTaTklSXiDcpO6yN5oi93CVvHBAYJ4Q3c&redirect_uri=https%3A%2F%2Fstage.skimag.com%2Fauthorize Server: Vercel Set-Cookie: outside_state=6b0a1ea6-676f-4c61-b35a-26c6b7e7ae2c; Path=/; Expires=Mon, 22 Dec 2025 05:32:24 GMT; Max-Age=900; Domain=stage.skimag.com; Secure; HttpOnly; SameSite=lax Set-Cookie: _r_token=; Domain=stage.skimag.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Set-Cookie: _rm=; Domain=stage.skimag.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Strict-Transport-Security: max-age=63072000 X-Vercel-Id: sfo1::52hlk-1766380644214-01a3384b8fff Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.193:443 · stage.skimag.com
2025-12-20 05:20
HTTP/1.1 302 Found Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Sat, 20 Dec 2025 05:20:26 GMT Location: https://login-staging.outsideonline.com/oidc/o/authorize/?prompt=none&response_type=code%20id_token&response_mode=query&state=%7B%22token%22%3A%22461767471cd0cdfae668a7a228620c3d25a71c03c5ccaa8ff7a548b8509526dade8b33cc48e3d34c87f3ab60638320b55dc17b33516462c16fbef6f0e999e10a41a7c1ff6a4ea6c6871e6c69d40d9fc2564a010d23293104f4626b82edd1fa3171535eaa4698c1e57b54b38c7ee595a1e80da40a92c46b8c467d02c3315a1256fbe9%22%2C%22iv%22%3A%222cecb5a6aeefbf3b5587a938%22%7D&nonce=99435469-d4b8-4c38-b8fa-0d0fdc6cb007&client_id=qjeUjIKVTaTklSXiDcpO6yN5oi93CVvHBAYJ4Q3c&redirect_uri=https%3A%2F%2Fstage.skimag.com%2Fauthorize Server: Vercel Set-Cookie: outside_state=fb72be3e-11b8-46eb-8635-2f6d6f59e687; Path=/; Expires=Sat, 20 Dec 2025 05:35:26 GMT; Max-Age=900; Domain=stage.skimag.com; Secure; HttpOnly; SameSite=lax Set-Cookie: _r_token=; Domain=stage.skimag.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Set-Cookie: _rm=; Domain=stage.skimag.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/ Strict-Transport-Security: max-age=63072000 X-Vercel-Id: sfo1::m52vq-1766208026336-6b785600dcc0 Connection: close Transfer-Encoding: chunked Redirecting...