Apache 2
tcp/443 tcp/80
Vercel
tcp/443 tcp/80
nginx 1.23.2
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f5376f70762a0b74d244149538b35d57524f2e43
GraphQL introspection enabled at /graphql Types: 104 (by kind: ENUM: 2, INPUT_OBJECT: 27, OBJECT: 65, SCALAR: 10) Operations: - Query: Query | fields: cities, cities_aggregated, cities_by_id, collectives, collectives_by_id - Mutation: Mutation | fields: create_feedback_item, create_feedback_items, create_user_settings_item, create_user_settings_items Directives: deprecated, include, skip (total: 3) Readable stores: 0
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f5376f70762a0b74d244149538b35d57524f2e43
GraphQL introspection enabled at /graphql Types: 104 (by kind: ENUM: 2, INPUT_OBJECT: 27, OBJECT: 65, SCALAR: 10) Operations: - Query: Query | fields: cities, cities_aggregated, cities_by_id, collectives, collectives_by_id - Mutation: Mutation | fields: create_feedback_item, create_feedback_items, create_user_settings_item, create_user_settings_items Directives: deprecated, include, skip (total: 3) Readable stores: 0
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62a3582176d1596c578ec0f1c3a09b9b4153493ac
GraphQL introspection enabled at /api/graphql Types: 104 (by kind: ENUM: 2, INPUT_OBJECT: 27, OBJECT: 65, SCALAR: 10) Operations: - Query: Query | fields: cities, cities_aggregated, cities_by_id, collectives, collectives_by_id - Mutation: Mutation | fields: create_feedback_item, create_feedback_items, create_user_settings_item, create_user_settings_items Directives: deprecated, include, skip (total: 3) Readable stores: 0
Open service 178.79.140.200:443 · make.stompsli.de
2026-01-10 00:06
HTTP/1.1 302 Found Server: nginx/1.23.2 Date: Sat, 10 Jan 2026 00:06:55 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Vary: Origin, Accept Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Found. Redirecting to ./admin
Open service 178.79.140.200:443 · api.stompsli.de
2026-01-09 10:54
HTTP/1.1 302 Found Server: nginx/1.23.2 Date: Fri, 09 Jan 2026 10:54:14 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Vary: Origin, Accept Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Found. Redirecting to ./admin
Open service 66.33.60.193:443 · stompsli.de
2026-01-08 18:44
HTTP/1.1 307 Temporary Redirect Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version, Authorization, X-Refresh-Token, X-Session-Id Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS Access-Control-Allow-Origin: https://dublin.stompsli.de Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Thu, 08 Jan 2026 18:45:02 GMT Location: https://dublin.stompsli.de/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::jxvh7-1767897901946-6cd7ce5c8e9b Connection: close Transfer-Encoding: chunked Redirecting...
Open service 178.79.140.200:443 · make.stompsli.de
2026-01-02 20:41
HTTP/1.1 302 Found Server: nginx/1.23.2 Date: Fri, 02 Jan 2026 20:41:30 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Vary: Origin, Accept Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Found. Redirecting to ./admin
Open service 178.79.140.200:443 · api.stompsli.de
2026-01-02 04:10
HTTP/1.1 302 Found Server: nginx/1.23.2 Date: Fri, 02 Jan 2026 04:10:02 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Vary: Origin, Accept Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Found. Redirecting to ./admin
Open service 66.33.60.193:443 · stompsli.de
2026-01-01 19:17
HTTP/1.1 307 Temporary Redirect Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version, Authorization, X-Refresh-Token, X-Session-Id Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS Access-Control-Allow-Origin: https://dublin.stompsli.de Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Thu, 01 Jan 2026 19:17:23 GMT Location: https://dublin.stompsli.de/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::w6zkx-1767295043717-5f3354d6e1f7 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.193:443 · stompsli.de
2025-12-30 03:48
HTTP/1.1 307 Temporary Redirect Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version, Authorization, X-Refresh-Token, X-Session-Id Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS Access-Control-Allow-Origin: https://dublin.stompsli.de Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Tue, 30 Dec 2025 03:48:53 GMT Location: https://dublin.stompsli.de/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::mq5q6-1767066533908-23ecef40f3a0 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 178.79.140.200:443 · make.stompsli.de
2025-12-23 02:26
HTTP/1.1 302 Found Server: nginx/1.23.2 Date: Tue, 23 Dec 2025 02:26:10 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Vary: Origin, Accept Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Found. Redirecting to ./admin
Open service 178.79.140.200:443 · api.stompsli.de
2025-12-22 14:07
HTTP/1.1 302 Found Server: nginx/1.23.2 Date: Mon, 22 Dec 2025 14:07:07 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Vary: Origin, Accept Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Found. Redirecting to ./admin
Open service 66.33.60.193:443 · stompsli.de
2025-12-22 04:31
HTTP/1.1 307 Temporary Redirect Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version, Authorization, X-Refresh-Token, X-Session-Id Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS Access-Control-Allow-Origin: https://dublin.stompsli.de Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Mon, 22 Dec 2025 04:31:00 GMT Location: https://dublin.stompsli.de/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: iad1::656kk-1766377860563-f7e7765949b7 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 159.69.143.143:443 · mail.stompsli.de
2025-12-22 02:32
HTTP/1.1 200 OK Date: Mon, 22 Dec 2025 02:32:12 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 21 Dec 2025 22:45:58 GMT ETag: "5-6467e12f65dc6" Accept-Ranges: bytes Content-Length: 5 Vary: User-Agent Content-Type: text/html Test
Open service 159.69.143.143:80 · mail.stompsli.de
2025-12-22 02:32
HTTP/1.1 200 OK Date: Mon, 22 Dec 2025 02:32:12 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 21 Dec 2025 22:45:58 GMT ETag: "5-6467e12f65dc6" Accept-Ranges: bytes Content-Length: 5 Vary: User-Agent Content-Type: text/html Test
Open service 178.79.140.200:443 · make.stompsli.de
2025-12-21 08:25
HTTP/1.1 302 Found Server: nginx/1.23.2 Date: Sun, 21 Dec 2025 08:25:45 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Vary: Origin, Accept Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Found. Redirecting to ./admin
Open service 178.79.140.200:443 · api.stompsli.de
2025-12-20 14:19
HTTP/1.1 302 Found Server: nginx/1.23.2 Date: Sat, 20 Dec 2025 14:19:18 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Vary: Origin, Accept Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Found. Redirecting to ./admin
Open service 66.33.60.193:443 · stompsli.de
2025-12-20 04:27
HTTP/1.1 307 Temporary Redirect Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version, Authorization, X-Refresh-Token, X-Session-Id Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS Access-Control-Allow-Origin: https://dublin.stompsli.de Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Sat, 20 Dec 2025 04:27:12 GMT Location: https://dublin.stompsli.de/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::6v5cz-1766204832185-9d9ac790fc16 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.35:443 · stompsli.de
2025-12-19 11:56
HTTP/1.1 307 Temporary Redirect Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version, Authorization, X-Refresh-Token, X-Session-Id Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS Access-Control-Allow-Origin: https://dublin.stompsli.de Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Fri, 19 Dec 2025 11:56:44 GMT Location: https://dublin.stompsli.de/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: sfo1::jgprz-1766145404037-2880e9143567 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.35:80 · stompsli.de
2025-12-19 11:56
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://stompsli.de/ Refresh: 0;url=https://stompsli.de/ server: Vercel Redirecting...
Open service 66.33.60.67:443 · stompsli.de
2025-12-19 11:56
HTTP/1.1 307 Temporary Redirect Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version, Authorization, X-Refresh-Token, X-Session-Id Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS Access-Control-Allow-Origin: https://dublin.stompsli.de Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Fri, 19 Dec 2025 11:56:44 GMT Location: https://dublin.stompsli.de/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: iad1::xwwk6-1766145404198-73ccc2cb8129 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.67:80 · stompsli.de
2025-12-19 11:56
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://stompsli.de/ Refresh: 0;url=https://stompsli.de/ server: Vercel Redirecting...
Open service 178.79.140.200:443 · make.stompsli.de
2025-12-19 05:41
HTTP/1.1 302 Found Server: nginx/1.23.2 Date: Fri, 19 Dec 2025 05:41:55 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close Content-Security-Policy: script-src 'self' 'unsafe-eval';worker-src 'self' blob:;child-src 'self' blob:;img-src 'self' data: blob:;media-src 'self';connect-src 'self' https://*;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' X-Powered-By: Directus Vary: Origin, Accept Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Range Location: ./admin Found. Redirecting to ./admin