GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3be11c29f68d3a92d9c7e07cebadf8c4e73b4e9fe
GraphQL introspection enabled at /graphql Types: 22 (by kind: ENUM: 2, INPUT_OBJECT: 2, OBJECT: 12, SCALAR: 6) Operations: - Query: Query | fields: order, orders, variants - Mutation: Mutation | fields: signIn Directives: deprecated, include, skip (total: 3)
Open service 92.123.104.63:443 ยท stostk.luxola.com
2026-01-23 09:06
HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=utf-8 Content-Length: 0 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Location: https://stostk.luxola.com/ X-Request-Id: 1f57a7fd431952ac88117d54dfaac0fe X-Runtime: 0.011300 Expires: Fri, 23 Jan 2026 09:06:16 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 23 Jan 2026 09:06:16 GMT Connection: close Set-Cookie: tenant=lx_hongkong; path=/; expires=Tue, 23 Jan 2046 09:06:16 GMT; SameSite=Lax Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=115 Server-Timing: origin; dur=165 Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload Server-Timing: ak_p; desc="1769159176350_388605887_295672863_28066_1995_174_177_-";dur=1