nginx
tcp/443
WARNING: This plugin will generate false positive and is purely informative:
regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)
Severity: info
Fingerprint: 3f43e0ebb5dce37ab8b59eb581e37d9a6fcdf7e36fcdf7e36fcdf7e36fcdf7e3
Found potentially vulnerable SSH version: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.11 WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
GraphQL introspection enabled at /api/graphql
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d603073f8703073f8703073f8703073f8703073f87
GraphQL introspection enabled at /api/graphql Detected: GitLab
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
GraphQL introspection enabled at /api/graphql
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d603073f8703073f8703073f8703073f8703073f87
GraphQL introspection enabled at /api/graphql Detected: GitLab
Open service 129.97.74.46:443
2026-01-22 16:18
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 22 Jan 2026 16:18:32 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://129.97.74.46/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KFK805C37GCG6TYFTAER9GVE","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KFK805C37GCG6TYFTAER9GVE
X-Runtime: 0.057905
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
Open service 129.97.74.46:22
2026-01-22 16:01
Open service 129.97.74.46:443 · riku.shoshin.uwaterloo.ca
2026-01-08 22:24
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 08 Jan 2026 22:24:41 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://riku.shoshin.uwaterloo.ca/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KEFVCHKAX3JJ1GMVN1P3XDPX","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KEFVCHKAX3JJ1GMVN1P3XDPX
X-Runtime: 0.051715
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
Open service 129.97.74.46:443
2026-01-08 13:48
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 08 Jan 2026 13:49:00 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://129.97.74.46/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KEEXWA0AB96R06Z4ZN8TNVNJ","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KEEXWA0AB96R06Z4ZN8TNVNJ
X-Runtime: 0.058069
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
Open service 129.97.74.46:22
2026-01-08 13:41
Open service 129.97.74.46:443 · riku.shoshin.uwaterloo.ca
2026-01-02 11:28
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 02 Jan 2026 11:28:23 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://riku.shoshin.uwaterloo.ca/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KDZ7EGCZ5RFQMPF4Z6V0RPDB","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KDZ7EGCZ5RFQMPF4Z6V0RPDB
X-Runtime: 0.050808
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
Open service 129.97.74.46:443
2026-01-01 19:00
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 01 Jan 2026 19:00:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://129.97.74.46/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KDXEXJYY87437FXQ9PVRP7R3","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KDXEXJYY87437FXQ9PVRP7R3
X-Runtime: 0.046826
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
Open service 129.97.74.46:22
2026-01-01 12:57
Open service 129.97.74.46:443 · riku.shoshin.uwaterloo.ca
2025-12-22 22:20
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 22 Dec 2025 22:20:27 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://riku.shoshin.uwaterloo.ca/users/sign_in
Nel: {"max_age": 0}
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KD42CJNR2KCQH95YE81DG5RS","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KD42CJNR2KCQH95YE81DG5RS
X-Runtime: 0.049352
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin