GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3843a9cd3473fff9100c169003d23dba9bd98944a
GraphQL introspection enabled at /graphql Types: 251 (by kind: ENUM: 28, INPUT_OBJECT: 62, INTERFACE: 6, OBJECT: 134, SCALAR: 11, UNION: 10) Operations: - Query: Query | fields: _service, appConfigurationForDomain, appConfigurationForPath, appStatus, catalog - Mutation: Mutation | fields: assignLocalPurchases, googlePlayReceipts, itunesPromoOfferSignature, itunesReceipts, uploadAppStoreTransaction Directives: experimental, federation__composeDirective, federation__extends, federation__external, federation__interfaceObject, inaccessible, include, key, purpleConnection, skip (total: 21) Readable stores: 1 _service (args: none) : sdl=schema @link(import : ["@key", "@shareable"], url : "https://...
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3843a9cd3473fff9100c169003d23dba9bd98944a
GraphQL introspection enabled at /graphql Types: 251 (by kind: ENUM: 28, INPUT_OBJECT: 62, INTERFACE: 6, OBJECT: 134, SCALAR: 11, UNION: 10) Operations: - Query: Query | fields: _service, appConfigurationForDomain, appConfigurationForPath, appStatus, catalog - Mutation: Mutation | fields: assignLocalPurchases, googlePlayReceipts, itunesPromoOfferSignature, itunesReceipts, uploadAppStoreTransaction Directives: experimental, federation__composeDirective, federation__extends, federation__external, federation__interfaceObject, inaccessible, include, key, purpleConnection, skip (total: 21) Readable stores: 1 _service (args: none) : sdl=schema @link(import : ["@key", "@shareable"], url : "https://...
Open service 108.138.36.105:443 · web.dev.purplemanager.com
2026-01-10 00:18
HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close Date: Sat, 10 Jan 2026 00:18:37 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Powered-By: Express ETag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 a1d3f4e4f5c5940d2f1eea05f736c3ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: Ib1IrJ07YvgJ1OlSXcm2r6OPC2-gkD-2-F_RZsFkckj-N9ttYmLJiQ== Age: 2 Not Found
Open service 108.138.36.67:443 · review-dev-web-fe-vtrq24.web.dev.purplemanager.com
2026-01-09 05:00
HTTP/1.1 502 Bad Gateway Content-Type: text/html Content-Length: 937 Connection: close Date: Fri, 09 Jan 2026 05:00:24 GMT X-Cache: Error from cloudfront Via: 1.1 c7e33a86531bfe239a9c43428fc5c122.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: 3m3Hc9WkXdc2CcWpTLtKZcxndVRibCTOgmJMiROCLYK0vdVD0fxHtg== Age: 2 Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>502 Bad Gateway ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) HTTP3 Server Request ID: FTGpql1eX6Bv91rRlYxvBiidQhES8J3lD6r7xwOAoKw9Aex8MnUfWw== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Open service 18.239.83.66:443 · web.dev.purplemanager.com
2026-01-08 20:18
HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close Date: Thu, 08 Jan 2026 20:18:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Powered-By: Express ETag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 9840468fd7f0cd4b97907be5f049f14a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: 5zqoPICoV4TM9UsGagv6H5uO-Kp2li3rqKMrGRKN09O8xZi8ugsDxA== Age: 2 Not Found
Open service 108.138.36.105:443 · web.dev.purplemanager.com
2026-01-02 20:29
HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close Date: Fri, 02 Jan 2026 20:29:13 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Powered-By: Express ETag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 ef6c1b0d6b04f2b7f81eb00fa448b890.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: KBhMSIfRY8Mp-KF5JdtbJz-8xWHAalQ1k7ivJvR0PGi20xrRo41hhA== Not Found
Open service 108.138.36.67:443 · review-dev-web-fe-vtrq24.web.dev.purplemanager.com
2026-01-02 05:41
HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 146 Connection: close Date: Fri, 02 Jan 2026 05:41:22 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Error from cloudfront Via: 1.1 d2e8c709d1f79bde6ed8f833f02bdd34.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: 6tLDoy68kHm0_XiiiZ01lmNiyoJ-ggGnRjLf3fyf32xOOqTfWUWdZw== Page title: 404 Not Found <html> <head><title>404 Not Found</title></head> <body> <center><h1>404 Not Found</h1></center> <hr><center>nginx</center> </body> </html>
Open service 108.138.36.67:443 · review-dev-web-fe-vtrq24.web.dev.purplemanager.com
2025-12-30 13:16
HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 146 Connection: close Date: Tue, 30 Dec 2025 13:16:22 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Error from cloudfront Via: 1.1 ac1ae217387c42a8268a34d5a89f4b46.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: Y8bGvey7oXPrKZwzGiEZBeakORtomLXVRY50LftxbbNwag_D9rhpRg== Page title: 404 Not Found <html> <head><title>404 Not Found</title></head> <body> <center><h1>404 Not Found</h1></center> <hr><center>nginx</center> </body> </html>
Open service 108.138.36.105:443 · web.dev.purplemanager.com
2025-12-22 23:31
HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close Date: Mon, 22 Dec 2025 23:31:55 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Powered-By: Express ETag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 cdf03e675736c21829fede7b370fd99a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: l1t19rgY4VMBqB7km9qeBXZ7yBo7JsRmb-b6B5p7YpaKcufjIewAzw== Age: 1 Not Found
Open service 108.138.36.67:443 · review-dev-web-fe-vtrq24.web.dev.purplemanager.com
2025-12-22 19:37
HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 146 Connection: close Date: Mon, 22 Dec 2025 19:37:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Error from cloudfront Via: 1.1 fdeb2756d6789b370622d82fde82a532.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: TXvt5GIqhSm0ZsW8kcQeK5SSiMrVjY5-sylZDP3AmGyqwfYrhGIRjA== Page title: 404 Not Found <html> <head><title>404 Not Found</title></head> <body> <center><h1>404 Not Found</h1></center> <hr><center>nginx</center> </body> </html>
Open service 108.138.36.67:443 · review-dev-web-fe-vtrq24.web.dev.purplemanager.com
2025-12-21 01:58
HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 146 Connection: close Date: Sun, 21 Dec 2025 01:58:33 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Error from cloudfront Via: 1.1 cb64e02e44588dfd13b2a4b2483c404c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: CVoQtqnHJsdvg_o1vZsla3iz_4aG8KyMl7zgygwbHwzcz929X06Pag== Page title: 404 Not Found <html> <head><title>404 Not Found</title></head> <body> <center><h1>404 Not Found</h1></center> <hr><center>nginx</center> </body> </html>
Open service 108.138.36.105:443 · web.dev.purplemanager.com
2025-12-21 01:00
HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close Date: Sun, 21 Dec 2025 01:00:58 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Powered-By: Express ETag: W/"9-0gXL1ngzMqISxa6S1zx3F4wtLyg" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 068dc56746723ff514ed3604e029e74e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: oA2g7CImv8RBm4L7OtH2fFlo_gIlILnlJ_uJcE34xIknLSZDAM7yTA== Not Found
Open service 108.138.36.67:443 · review-dev-web-fe-vtrq24.web.dev.purplemanager.com
2025-12-19 03:56
HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 146 Connection: close Date: Fri, 19 Dec 2025 03:56:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Error from cloudfront Via: 1.1 cb64e02e44588dfd13b2a4b2483c404c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P2 X-Amz-Cf-Id: 4c5dlMuCuwS4i11ojUnZVCfzyRkvF11R_oZ-K461G8Fpk7iyFdwARQ== Page title: 404 Not Found <html> <head><title>404 Not Found</title></head> <body> <center><h1>404 Not Found</h1></center> <hr><center>nginx</center> </body> </html>