Vercel
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d677d4e73ea63624ee0529661c59aa019176181f8c
GraphQL introspection enabled at /api/graphql Types: 437 (by kind: ENUM: 86, INPUT_OBJECT: 36, OBJECT: 295, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d644f07c12ab9ed2e2bac10ab0b7ff243d4149e7c0
GraphQL introspection enabled at /api/graphql Types: 433 (by kind: ENUM: 84, INPUT_OBJECT: 36, OBJECT: 293, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6e135c6b2967cc74211b291d0524c8f1d6a1adae0
GraphQL introspection enabled at /api/graphql Types: 432 (by kind: ENUM: 84, INPUT_OBJECT: 36, OBJECT: 292, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d624d9d7ee4afeb31e0ebd430cc3f55c811589379c
GraphQL introspection enabled at /api/graphql Types: 431 (by kind: ENUM: 84, INPUT_OBJECT: 36, OBJECT: 291, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d650edf58a6fe9ac3aa7583118a716002538f7bc48
GraphQL introspection enabled at /api/graphql Types: 423 (by kind: ENUM: 80, INPUT_OBJECT: 36, OBJECT: 287, SCALAR: 9, UNION: 11) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d69dc0263272d211c22af5a550f1e0799df1798d60
GraphQL introspection enabled at /api/graphql Types: 422 (by kind: ENUM: 80, INPUT_OBJECT: 36, OBJECT: 287, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d630bf79fd4dc54f1fb5f380db0348767817b543e5
GraphQL introspection enabled at /api/graphql Types: 426 (by kind: ENUM: 80, INPUT_OBJECT: 36, OBJECT: 291, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d66f89e74fcc048dddc2e4e49596eaae020660c59b
GraphQL introspection enabled at /api/graphql Types: 425 (by kind: ENUM: 80, INPUT_OBJECT: 36, OBJECT: 290, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6e55af40871258c2cff0ae2a625e7cd33e6e99922
GraphQL introspection enabled at /api/graphql Types: 424 (by kind: ENUM: 79, INPUT_OBJECT: 36, OBJECT: 290, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d667bc0264dc70b56812f3aef2e40b5427037d1fbe
GraphQL introspection enabled at /api/graphql Types: 424 (by kind: ENUM: 78, INPUT_OBJECT: 37, OBJECT: 290, SCALAR: 9, UNION: 10) Operations: - Query: SchemaExternalQuery | fields: activeStorageBlobsExternal, authenticateCreatorInstagramLink, campaignSuperfiliateMicrosite, campaignUtmParams, contentBrief - Mutation: SchemaExternalMutation | fields: externalCreateMedia, externalMicrositeClaimGift, externalMicrositeFindOrCreateGiftingShippingDiscount, externalMicrositeUpdateMicrositeCustomerSettings, externalMicrositeValidateExternalInvite - Subscription: SchemaExternalSubscription | fields: personalizationDraftChanged Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Open service 216.150.1.1:443 · try.sureshot.com
2026-01-09 03:40
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Fri, 09 Jan 2026 03:40:02 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: fra1::9zj9w-1767930002962-782bc1596e34 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.1:443 · try.sureshot.com
2026-01-02 04:03
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Fri, 02 Jan 2026 04:03:22 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: lhr1::m8dkt-1767326602101-e319234f5bca Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.1:443 · try.sureshot.com
2025-12-30 13:58
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Tue, 30 Dec 2025 13:58:54 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: sfo1::llhpx-1767103134107-1bdf247248d5 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.1:443 · try.sureshot.com
2025-12-22 14:45
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Mon, 22 Dec 2025 14:45:17 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: lhr1::b7zsl-1766414717534-d3554a500cf9 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 216.150.1.1:443 · try.sureshot.com
2025-12-20 17:55
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Security-Policy: upgrade-insecure-requests Content-Type: text/plain Date: Sat, 20 Dec 2025 17:55:15 GMT Location: /portal Permissions-Policy: camera=(), microphone=(), payment=(), autoplay=* Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Vercel-Id: fra1::dxk6b-1766253315778-8d1caf4ea02c Connection: close Transfer-Encoding: chunked Redirecting...