CloudFront
tcp/443 tcp/80
nginx
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d603073f8703073f8703073f8703073f8703073f87
GraphQL introspection enabled at /api/graphql Detected: GitLab
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
GraphQL introspection enabled at /api/graphql
Open service 52.63.67.254:443 · gitlab.wemakeapps.net
2026-01-09 03:06
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 09 Jan 2026 03:06:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 109
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.wemakeapps.net/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KEGBFTRS6BPCYV8TCG6MKKRQ","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KEGBFTRS6BPCYV8TCG6MKKRQ
X-Runtime: 0.030971
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://gitlab.wemakeapps.net/users/sign_in">redirected</a>.</body></html>
Open service 52.63.67.254:443 · gitlab.wemakeapps.net
2025-12-30 12:54
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 30 Dec 2025 12:54:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 109
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.wemakeapps.net/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KDQN59D8W95JCT9D7DMMZ7QH","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KDQN59D8W95JCT9D7DMMZ7QH
X-Runtime: 0.061041
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://gitlab.wemakeapps.net/users/sign_in">redirected</a>.</body></html>
Open service 52.63.67.254:443 · gitlab.wemakeapps.net
2025-12-22 07:42
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 22 Dec 2025 07:42:05 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 109
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.wemakeapps.net/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KD2G47EQVEZ5ETF1R414M7QM","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KD2G47EQVEZ5ETF1R414M7QM
X-Runtime: 0.023040
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://gitlab.wemakeapps.net/users/sign_in">redirected</a>.</body></html>
Open service 52.63.67.254:443 · gitlab.wemakeapps.net
2025-12-20 07:19
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 20 Dec 2025 07:19:07 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 109
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.wemakeapps.net/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KCXA0QGV9ETSRC7R8X40XNE5","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KCXA0QGV9ETSRC7R8X40XNE5
X-Runtime: 0.032457
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://gitlab.wemakeapps.net/users/sign_in">redirected</a>.</body></html>
Open service 65.8.131.78:443 · wemakeapps.net
2025-12-19 02:44
HTTP/1.1 403 Forbidden Server: CloudFront Date: Fri, 19 Dec 2025 02:44:38 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 9d48d29ac0d6fbcc29cb164716d39d68.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P13 X-Amz-Cf-Id: xuW9gOjlDoLsoIjrbOg4bkQEw6GN5jm2SvAYyGgWeQDcSEJyR5ranA== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: xuW9gOjlDoLsoIjrbOg4bkQEw6GN5jm2SvAYyGgWeQDcSEJyR5ranA== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Open service 65.8.131.119:80 · wemakeapps.net
2025-12-19 02:44
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 02:44:38 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://wemakeapps.net/ X-Cache: Redirect from cloudfront Via: 1.1 bad86c53165d48d66c80e183f57163d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P13 X-Amz-Cf-Id: JuHvyASPVRDR9owXSH6ziPqcYRMb5LdBbys7ByF63gfdVD5rYq9RHA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 65.8.131.119:443 · wemakeapps.net
2025-12-19 02:44
HTTP/1.1 403 Forbidden Server: CloudFront Date: Fri, 19 Dec 2025 02:44:38 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 c8441ee313b5204aa32e9bf5a370d536.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P13 X-Amz-Cf-Id: Wl6TzJYY_ygrOEta1IEYPAOZyBcVDnVodo9IEtLA9wpLiKXH3dusKg== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: Wl6TzJYY_ygrOEta1IEYPAOZyBcVDnVodo9IEtLA9wpLiKXH3dusKg== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Open service 65.8.131.96:443 · wemakeapps.net
2025-12-19 02:44
HTTP/1.1 403 Forbidden Server: CloudFront Date: Fri, 19 Dec 2025 02:44:38 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 387be0cf162c8cb6592090f9496a1e92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P13 X-Amz-Cf-Id: LuTPYOAEfdLaA_fn2jcReEzEu3wbDhVRSpyj_Ito8bEgTb76AON5XA== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: LuTPYOAEfdLaA_fn2jcReEzEu3wbDhVRSpyj_Ito8bEgTb76AON5XA== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Open service 65.8.131.105:443 · wemakeapps.net
2025-12-19 02:44
HTTP/1.1 403 Forbidden Server: CloudFront Date: Fri, 19 Dec 2025 02:44:39 GMT Content-Type: text/html Content-Length: 919 Connection: close X-Cache: Error from cloudfront Via: 1.1 e82859bd3e5e584a3698e67f22415dae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P13 X-Amz-Cf-Id: vtxswoHGvuz3CmDxce5iLBB6YjYlwVFgLWaWED6Y1Hu0x9Jiu_al-Q== Page title: ERROR: The request could not be satisfied <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <TITLE>ERROR: The request could not be satisfied</TITLE> </HEAD><BODY> <H1>403 ERROR</H1> <H2>The request could not be satisfied.</H2> <HR noshade size="1px"> Request blocked. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner. <BR clear="all"> If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation. <BR clear="all"> <HR noshade size="1px"> <PRE> Generated by cloudfront (CloudFront) Request ID: vtxswoHGvuz3CmDxce5iLBB6YjYlwVFgLWaWED6Y1Hu0x9Jiu_al-Q== </PRE> <ADDRESS> </ADDRESS> </BODY></HTML>
Open service 65.8.131.78:80 · wemakeapps.net
2025-12-19 02:44
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 02:44:38 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://wemakeapps.net/ X-Cache: Redirect from cloudfront Via: 1.1 ce45454d08e51c5b10e3462307ca3652.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P13 X-Amz-Cf-Id: brnWd3g3qFXH_jf_hoW9MswmLGNZwTyKARfGcfnwiope9Hfyji20Kw== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 65.8.131.96:80 · wemakeapps.net
2025-12-19 02:44
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 02:44:38 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://wemakeapps.net/ X-Cache: Redirect from cloudfront Via: 1.1 e82859bd3e5e584a3698e67f22415dae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P13 X-Amz-Cf-Id: PQuseb6SwhPKPuTe_JjCcOArnJ_ZXq6IxBDryIAguIaBl1IHRKYWow== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 65.8.131.105:80 · wemakeapps.net
2025-12-19 02:44
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Fri, 19 Dec 2025 02:44:38 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://wemakeapps.net/ X-Cache: Redirect from cloudfront Via: 1.1 4d4680d03dbc233f4f8d4e3d75985c84.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P13 X-Amz-Cf-Id: DnKbNnF3kfpyh5O0l75sFv04crg8SgiojidyTeiz0b4G-ukAD315cA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>