BunnyCDN-DE1-1054
tcp/443 tcp/80
BunnyCDN-DE1-1055
tcp/443
BunnyCDN-DE1-1075
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa38241f33d15a4ffdf053ba431762e7c429e169a2c
GraphQL introspection enabled at /graphql Types: 1187 (by kind: ENUM: 95, INPUT_OBJECT: 248, INTERFACE: 193, OBJECT: 645, SCALAR: 5, UNION: 1) Operations: - Query: RootQuery | fields: allPaTest, allSettings, allowedCountries, cart, cartFee - Mutation: RootMutation | fields: addCartItems, addFee, addMethodToShippingZone, addToCart, applyCoupon Directives: deprecated, include, oneOf, skip (total: 4)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa37ed5663845654fdc93323866213da3ad448461bd
GraphQL introspection enabled at /graphql Types: 1194 (by kind: ENUM: 94, INPUT_OBJECT: 251, INTERFACE: 193, OBJECT: 650, SCALAR: 5, UNION: 1) Operations: - Query: RootQuery | fields: allPaTest, allSettings, allowedCountries, cart, cartFee - Mutation: RootMutation | fields: addCartItems, addFee, addMethodToShippingZone, addToCart, applyCoupon Directives: deprecated, include, skip (total: 3)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
GraphQL introspection enabled at /graphql
Open service 138.199.37.225:443 · www.satchart.com
2026-01-09 23:52
HTTP/1.1 301 Moved Permanently Date: Fri, 09 Jan 2026 23:52:25 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1055 CDN-PullZone: 3235768 CDN-RequestCountryCode: US Cache-Control: public, max-age=0 Location: https://vincor.com/ X-Redirect-By: WordPress X-Cache-Status: HIT X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 301 CDN-CachedAt: 01/09/2026 23:52:25 CDN-EdgeStorageId: 863 CDN-RequestId: a8be15a6204050a3ba2759285caeda78 CDN-Cache: BYPASS CDN-Status: 301 CDN-RequestTime: 0
Open service 138.199.37.225:443 · www.satchart.com
2026-01-08 19:13
HTTP/1.1 301 Moved Permanently Date: Thu, 08 Jan 2026 19:13:08 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1055 CDN-PullZone: 3235768 CDN-RequestCountryCode: US Cache-Control: public, max-age=0 Location: https://vincor.com/ X-Redirect-By: WordPress X-Cache-Status: HIT X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 301 CDN-CachedAt: 01/08/2026 19:13:08 CDN-EdgeStorageId: 863 CDN-RequestId: bdd4a3dbd97b58b78370ab9acfa7144c CDN-Cache: BYPASS CDN-Status: 301 CDN-RequestTime: 0
Open service 169.150.247.40:80 · www.satchart.com
2026-01-08 06:38
HTTP/1.1 301 Moved Permanently Date: Thu, 08 Jan 2026 06:38:03 GMT Content-Type: text/html Content-Length: 166 Connection: close Server: BunnyCDN-DE1-1075 CDN-PullZone: 3235768 CDN-RequestCountryCode: DE Location: https://www.satchart.com/ CDN-RequestId: fdfcefba936e5e9931612922ab349a7b CDN-RequestTime: 0 Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>openresty</center> </body> </html>
Open service 169.150.247.40:443 · www.satchart.com
2026-01-08 06:38
HTTP/1.1 301 Moved Permanently Date: Thu, 08 Jan 2026 06:38:03 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1075 CDN-PullZone: 3235768 CDN-RequestCountryCode: DE Cache-Control: public, max-age=0 Location: https://vincor.com/ X-Redirect-By: WordPress X-Cache-Status: HIT X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 301 CDN-CachedAt: 01/08/2026 06:38:03 CDN-EdgeStorageId: 863 CDN-RequestId: eba132ab0d9ca691f6faa67af8742523 CDN-Cache: BYPASS CDN-Status: 301 CDN-RequestTime: 0
Open service 2400:52e0:1e00::1054:1:80 · www.satchart.com
2026-01-08 06:38
HTTP/1.1 301 Moved Permanently Date: Thu, 08 Jan 2026 06:38:02 GMT Content-Type: text/html Content-Length: 166 Connection: close Server: BunnyCDN-DE1-1054 CDN-PullZone: 3235768 CDN-RequestCountryCode: DE Location: https://www.satchart.com/ CDN-RequestId: 14510f5f69ec53d3ec1430aec8252c05 CDN-RequestTime: 0 Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>openresty</center> </body> </html>
Open service 2400:52e0:1e00::1054:1:443 · www.satchart.com
2026-01-08 06:38
HTTP/1.1 301 Moved Permanently Date: Thu, 08 Jan 2026 06:38:03 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1054 CDN-PullZone: 3235768 CDN-RequestCountryCode: NL Cache-Control: public, max-age=0 Location: https://vincor.com/ X-Redirect-By: WordPress X-Cache-Status: HIT X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 301 CDN-CachedAt: 01/08/2026 06:38:03 CDN-EdgeStorageId: 863 CDN-RequestId: 8560be50ebd6dbdaea0831449a413c38 CDN-Cache: BYPASS CDN-Status: 301 CDN-RequestTime: 0
Open service 138.199.37.225:443 · www.satchart.com
2026-01-02 04:51
HTTP/1.1 301 Moved Permanently Date: Fri, 02 Jan 2026 04:51:53 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1055 CDN-PullZone: 3235768 CDN-RequestCountryCode: DE Cache-Control: public, max-age=0 Location: https://vincor.com/ X-Redirect-By: WordPress X-Cache-Status: HIT X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 301 CDN-CachedAt: 01/02/2026 04:51:53 CDN-EdgeStorageId: 863 CDN-RequestId: 60cbe548a373a67c854b98a67fda33ee CDN-Cache: BYPASS CDN-Status: 301 CDN-RequestTime: 0
Open service 138.199.37.225:443 · www.satchart.com
2026-01-01 20:05
HTTP/1.1 301 Moved Permanently Date: Thu, 01 Jan 2026 20:05:14 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1055 CDN-PullZone: 3235768 CDN-RequestCountryCode: SG Cache-Control: public, max-age=0 Location: https://vincor.com/ X-Redirect-By: WordPress X-Cache-Status: HIT X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 301 CDN-CachedAt: 01/01/2026 20:05:14 CDN-EdgeStorageId: 863 CDN-RequestId: a2fd072fd0f9d1b1601bc30a3b5e6aed CDN-Cache: BYPASS CDN-Status: 301 CDN-RequestTime: 0
Open service 138.199.37.225:443 · www.satchart.com
2025-12-30 04:11
HTTP/1.1 301 Moved Permanently Date: Tue, 30 Dec 2025 04:11:49 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1055 CDN-PullZone: 3235768 CDN-RequestCountryCode: SG Cache-Control: public, max-age=0 Location: https://vincor.com/ X-Redirect-By: WordPress X-Cache-Status: HIT X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 301 CDN-CachedAt: 12/30/2025 04:11:49 CDN-EdgeStorageId: 863 CDN-RequestId: b064a68e344cef45434b37c844d53efa CDN-Cache: BYPASS CDN-Status: 301 CDN-RequestTime: 0
Open service 138.199.37.225:443 · www.satchart.com
2025-12-23 05:58
HTTP/1.1 301 Moved Permanently Date: Tue, 23 Dec 2025 05:58:44 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1055 CDN-PullZone: 3235768 CDN-RequestCountryCode: DE Cache-Control: public, max-age=0 Location: https://vincor.com/ X-Redirect-By: WordPress X-Cache-Status: HIT X-Rocket-Nginx-Serving-Static: MISS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 301 CDN-CachedAt: 12/23/2025 05:58:44 CDN-EdgeStorageId: 863 CDN-RequestId: 96a448f8f9750b74041eb8941147348b CDN-Cache: BYPASS CDN-Status: 301 CDN-RequestTime: 0
Open service 138.199.37.225:443 · www.satchart.com
2025-12-22 04:57
HTTP/1.1 301 Moved Permanently Date: Mon, 22 Dec 2025 04:57:40 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1055 CDN-PullZone: 3235768 CDN-RequestCountryCode: CA Cache-Control: public, max-age=0 Location: https://vincor.com/ X-Redirect-By: WordPress X-Cache-Status: HIT X-Rocket-Nginx-Serving-Static: MISS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 301 CDN-CachedAt: 12/22/2025 04:57:40 CDN-EdgeStorageId: 863 CDN-RequestId: b1cdb2fcbfe677e65f8bfe995dfca542 CDN-Cache: BYPASS CDN-Status: 301 CDN-RequestTime: 0
Open service 138.199.37.225:443 · www.satchart.com
2025-12-21 00:15
HTTP/1.1 301 Moved Permanently Date: Sun, 21 Dec 2025 00:15:13 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1055 CDN-PullZone: 3235768 CDN-RequestCountryCode: US Cache-Control: public, max-age=0 Location: https://vincor.com/ X-Redirect-By: WordPress X-Cache-Status: HIT X-Rocket-Nginx-Serving-Static: MISS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 301 CDN-CachedAt: 12/21/2025 00:15:13 CDN-EdgeStorageId: 863 CDN-RequestId: 91220f8718aaea427748e6d3e100fb2b CDN-Cache: BYPASS CDN-Status: 301 CDN-RequestTime: 0
Open service 138.199.37.225:443 · www.satchart.com
2025-12-20 04:56
HTTP/1.1 301 Moved Permanently Date: Sat, 20 Dec 2025 04:56:55 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1055 CDN-PullZone: 3235768 CDN-RequestCountryCode: US Cache-Control: public, max-age=0 Location: https://vincor.com/ X-Redirect-By: WordPress X-Cache-Status: HIT X-Rocket-Nginx-Serving-Static: MISS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 301 CDN-CachedAt: 12/20/2025 04:56:55 CDN-EdgeStorageId: 863 CDN-RequestId: 309627e01ad8e55c98d3c8a9a71732c9 CDN-Cache: BYPASS CDN-Status: 301 CDN-RequestTime: 0