Bypass Attempts
Every admin path probe attempt — baselines, techniques tried, and results.
70
paths tested
778
total attempts
708
blocked
0
bypasses
attempts
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/
→ https://venmo.com/
162b
Header: X-Rewrite-U…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/
technique: Header: X-Rewrite-URL
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/
→ https://venmo.com/
162b
Header: X-Original-…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/
technique: Header: X-Original-URL
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
162b
Header: X-Forwarded…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
technique: Header: X-Forwarded-Host: localhost
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
162b
Header: X-Custom-IP…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
technique: Header: X-Custom-IP-Authorization: 127.0.0.1
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
162b
Header: X-Real-IP: …
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
technique: Header: X-Real-IP: 127.0.0.1
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
162b
Header: X-Forwarded…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
technique: Header: X-Forwarded-For: 127.0.0.1
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com\src\graphql\mutations\codeConfirmation\verifyEmailMutation.ts
→ https://venmo.com/\src\graphql\mutations\codeConfirmation\verifyEmailMutation.ts
162b
Path: backslash
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com\src\graphql\mutations\codeConfirmation\verifyEmailMutation.ts
technique: Path: backslash
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/\src\graphql\mutations\codeConfirmation\verifyEmailMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts;/api/v1/
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts;/api/v1/
162b
Path: OAM semicolon…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts;/api/v1/
technique: Path: OAM semicolon inject
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts;/api/v1/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts?
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
162b
Path: append ?
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts?
technique: Path: append ?
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts.html
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts.html
162b
Path: append .html
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts.html
technique: Path: append .html
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts.html
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts.json
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts.json
162b
Path: append .json
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts.json
technique: Path: append .json
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts.json
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
403
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/..;/verifyEmailMutation.ts
520b
Path: dot-dot-semic…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/..;/verifyEmailMutation.ts
technique: Path: dot-dot-semicolon traversal
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 403 (520 bytes)
response body:
<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/../verifyEmailMutation.ts
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
162b
Path: dot-dot trave…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/../verifyEmailMutation.ts
technique: Path: dot-dot traversal
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/SRC/GRAPHQL/MUTATIONS/CODECONFIRMATION/VERIFYEMAILMUTATION.TS
→ https://venmo.com/SRC/GRAPHQL/MUTATIONS/CODECONFIRMATION/VERIFYEMAILMUTATION.TS
162b
Path: all uppercase
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/SRC/GRAPHQL/MUTATIONS/CODECONFIRMATION/VERIFYEMAILMUTATION.TS
technique: Path: all uppercase
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/SRC/GRAPHQL/MUTATIONS/CODECONFIRMATION/VERIFYEMAILMUTATION.TS
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/Src/graphql/mutations/codeconfirmation/verifyemailmutation.ts
→ https://venmo.com/Src/graphql/mutations/codeconfirmation/verifyemailmutation.ts
162b
Path: uppercase fir…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/Src/graphql/mutations/codeconfirmation/verifyemailmutation.ts
technique: Path: uppercase first
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/Src/graphql/mutations/codeconfirmation/verifyemailmutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
162b
Path: double-encode…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
technique: Path: double-encode first char
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
400
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts%00
122b
Path: null byte %00
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts%00
technique: Path: null byte %00
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 400 (122 bytes)
response body:
<html> <head><title>400 Bad Request</title></head> <body> <center><h1>400 Bad Request</h1></center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts%2f
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/
162b
Path: encoded slash…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts%2f
technique: Path: encoded slash %2f
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
162b
Path: url-encode fi…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
technique: Path: url-encode first char
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
403
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts..;/
520b
Path: dot-dot-semic…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts..;/
technique: Path: dot-dot-semicolon
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 403 (520 bytes)
response body:
<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts;/
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts;/
162b
Path: semicolon sla…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts;/
technique: Path: semicolon slash
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts;/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts;foo=bar
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts;foo=bar
162b
Path: semicolon par…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts;foo=bar
technique: Path: semicolon param
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts;foo=bar
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com//src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
162b
Path: double slash
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com//src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
technique: Path: double slash
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/./src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
162b
Path: prefix dot /.…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/./src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
technique: Path: prefix dot /./path
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/./
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/
162b
Path: dot segment /…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/./
technique: Path: dot segment /./
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/.
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/
162b
Path: dot segment /.
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/.
technique: Path: dot segment /.
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/
162b
Path: trailing slash
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/
technique: Path: trailing slash
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
BASE
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
→ https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
162b
baseline
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
technique: baseline
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/codeConfirmation/verifyEmailMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
162b
Method: POST + X-HT…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
technique: Method: POST + X-HTTP-Method-Override
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
405
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
524b
Method: TRACE method
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
technique: Method: TRACE method
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 405 (524 bytes)
response body:
<html> <head><title>405 Not Allowed</title></head> <body> <center><h1>405 Not Allowed</h1></center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
162b
Method: OPTIONS met…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
technique: Method: OPTIONS method
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
162b
Method: PATCH method
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
technique: Method: PATCH method
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
162b
Method: PUT method
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
technique: Method: PUT method
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
162b
Method: POST method
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
technique: Method: POST method
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/
→ https://venmo.com/
162b
Header: X-Rewrite-U…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/
technique: Header: X-Rewrite-URL
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/
→ https://venmo.com/
162b
Header: X-Original-…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/
technique: Header: X-Original-URL
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
162b
Header: X-Forwarded…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
technique: Header: X-Forwarded-Host: localhost
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
162b
Header: X-Custom-IP…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
technique: Header: X-Custom-IP-Authorization: 127.0.0.1
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
162b
Header: X-Real-IP: …
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
technique: Header: X-Real-IP: 127.0.0.1
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
162b
Header: X-Forwarded…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
technique: Header: X-Forwarded-For: 127.0.0.1
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com\src\graphql\mutations\personalProfileSignUp\sendMFACodeToPhone.ts
→ https://venmo.com/\src\graphql\mutations\personalProfileSignUp\sendMFACodeToPhone.ts
162b
Path: backslash
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com\src\graphql\mutations\personalProfileSignUp\sendMFACodeToPhone.ts
technique: Path: backslash
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/\src\graphql\mutations\personalProfileSignUp\sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts;/api/v1/
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts;/api/v1/
162b
Path: OAM semicolon…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts;/api/v1/
technique: Path: OAM semicolon inject
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts;/api/v1/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts?
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
162b
Path: append ?
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts?
technique: Path: append ?
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts.html
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts.html
162b
Path: append .html
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts.html
technique: Path: append .html
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts.html
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts.json
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts.json
162b
Path: append .json
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts.json
technique: Path: append .json
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts.json
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
403
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/..;/sendMFACodeToPhone.ts
520b
Path: dot-dot-semic…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/..;/sendMFACodeToPhone.ts
technique: Path: dot-dot-semicolon traversal
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 403 (520 bytes)
response body:
<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/../sendMFACodeToPhone.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
162b
Path: dot-dot trave…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/../sendMFACodeToPhone.ts
technique: Path: dot-dot traversal
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/SRC/GRAPHQL/MUTATIONS/PERSONALPROFILESIGNUP/SENDMFACODETOPHONE.TS
→ https://venmo.com/SRC/GRAPHQL/MUTATIONS/PERSONALPROFILESIGNUP/SENDMFACODETOPHONE.TS
162b
Path: all uppercase
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/SRC/GRAPHQL/MUTATIONS/PERSONALPROFILESIGNUP/SENDMFACODETOPHONE.TS
technique: Path: all uppercase
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/SRC/GRAPHQL/MUTATIONS/PERSONALPROFILESIGNUP/SENDMFACODETOPHONE.TS
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/Src/graphql/mutations/personalprofilesignup/sendmfacodetophone.ts
→ https://venmo.com/Src/graphql/mutations/personalprofilesignup/sendmfacodetophone.ts
162b
Path: uppercase fir…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/Src/graphql/mutations/personalprofilesignup/sendmfacodetophone.ts
technique: Path: uppercase first
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/Src/graphql/mutations/personalprofilesignup/sendmfacodetophone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
162b
Path: double-encode…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
technique: Path: double-encode first char
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
400
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts%00
122b
Path: null byte %00
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts%00
technique: Path: null byte %00
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 400 (122 bytes)
response body:
<html> <head><title>400 Bad Request</title></head> <body> <center><h1>400 Bad Request</h1></center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts%2f
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/
162b
Path: encoded slash…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts%2f
technique: Path: encoded slash %2f
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
162b
Path: url-encode fi…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
technique: Path: url-encode first char
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
403
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts..;/
520b
Path: dot-dot-semic…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts..;/
technique: Path: dot-dot-semicolon
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 403 (520 bytes)
response body:
<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts;/
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts;/
162b
Path: semicolon sla…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts;/
technique: Path: semicolon slash
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts;/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts;foo=bar
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts;foo=bar
162b
Path: semicolon par…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts;foo=bar
technique: Path: semicolon param
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts;foo=bar
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com//src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
162b
Path: double slash
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com//src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
technique: Path: double slash
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/./src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
162b
Path: prefix dot /.…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/./src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
technique: Path: prefix dot /./path
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/./
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/
162b
Path: dot segment /…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/./
technique: Path: dot segment /./
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/.
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/
162b
Path: dot segment /.
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/.
technique: Path: dot segment /.
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/
162b
Path: trailing slash
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/
technique: Path: trailing slash
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
BASE
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
162b
baseline
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
technique: baseline
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/sendMFACodeToPhone.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
162b
Method: POST + X-HT…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
technique: Method: POST + X-HTTP-Method-Override
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
405
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
524b
Method: TRACE method
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
technique: Method: TRACE method
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 405 (524 bytes)
response body:
<html> <head><title>405 Not Allowed</title></head> <body> <center><h1>405 Not Allowed</h1></center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
162b
Method: OPTIONS met…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
technique: Method: OPTIONS method
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
162b
Method: PATCH method
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
technique: Method: PATCH method
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
162b
Method: PUT method
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
technique: Method: PUT method
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
162b
Method: POST method
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
technique: Method: POST method
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/
→ https://venmo.com/
162b
Header: X-Rewrite-U…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/
technique: Header: X-Rewrite-URL
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/
→ https://venmo.com/
162b
Header: X-Original-…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/
technique: Header: X-Original-URL
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
162b
Header: X-Forwarded…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
technique: Header: X-Forwarded-Host: localhost
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
162b
Header: X-Custom-IP…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
technique: Header: X-Custom-IP-Authorization: 127.0.0.1
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
162b
Header: X-Real-IP: …
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
technique: Header: X-Real-IP: 127.0.0.1
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
162b
Header: X-Forwarded…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
technique: Header: X-Forwarded-For: 127.0.0.1
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com\src\graphql\mutations\personalProfileSignUp\createProfileMutation.ts
→ https://venmo.com/\src\graphql\mutations\personalProfileSignUp\createProfileMutation.ts
162b
Path: backslash
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com\src\graphql\mutations\personalProfileSignUp\createProfileMutation.ts
technique: Path: backslash
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/\src\graphql\mutations\personalProfileSignUp\createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts;/api/v1/
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts;/api/v1/
162b
Path: OAM semicolon…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts;/api/v1/
technique: Path: OAM semicolon inject
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts;/api/v1/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts?
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
162b
Path: append ?
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts?
technique: Path: append ?
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts.html
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts.html
162b
Path: append .html
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts.html
technique: Path: append .html
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts.html
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts.json
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts.json
162b
Path: append .json
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts.json
technique: Path: append .json
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts.json
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
403
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/..;/createProfileMutation.ts
520b
Path: dot-dot-semic…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/..;/createProfileMutation.ts
technique: Path: dot-dot-semicolon traversal
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 403 (520 bytes)
response body:
<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/../createProfileMutation.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
162b
Path: dot-dot trave…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/../createProfileMutation.ts
technique: Path: dot-dot traversal
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/SRC/GRAPHQL/MUTATIONS/PERSONALPROFILESIGNUP/CREATEPROFILEMUTATION.TS
→ https://venmo.com/SRC/GRAPHQL/MUTATIONS/PERSONALPROFILESIGNUP/CREATEPROFILEMUTATION.TS
162b
Path: all uppercase
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/SRC/GRAPHQL/MUTATIONS/PERSONALPROFILESIGNUP/CREATEPROFILEMUTATION.TS
technique: Path: all uppercase
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/SRC/GRAPHQL/MUTATIONS/PERSONALPROFILESIGNUP/CREATEPROFILEMUTATION.TS
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/Src/graphql/mutations/personalprofilesignup/createprofilemutation.ts
→ https://venmo.com/Src/graphql/mutations/personalprofilesignup/createprofilemutation.ts
162b
Path: uppercase fir…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/Src/graphql/mutations/personalprofilesignup/createprofilemutation.ts
technique: Path: uppercase first
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/Src/graphql/mutations/personalprofilesignup/createprofilemutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
162b
Path: double-encode…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
technique: Path: double-encode first char
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
400
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts%00
122b
Path: null byte %00
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts%00
technique: Path: null byte %00
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 400 (122 bytes)
response body:
<html> <head><title>400 Bad Request</title></head> <body> <center><h1>400 Bad Request</h1></center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts%2f
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/
162b
Path: encoded slash…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts%2f
technique: Path: encoded slash %2f
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
162b
Path: url-encode fi…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
technique: Path: url-encode first char
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
403
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts..;/
520b
Path: dot-dot-semic…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts..;/
technique: Path: dot-dot-semicolon
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 403 (520 bytes)
response body:
<html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page --> <!-- a padding to disable MSIE and Chrome friendly error page -->
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts;/
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts;/
162b
Path: semicolon sla…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts;/
technique: Path: semicolon slash
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts;/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts;foo=bar
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts;foo=bar
162b
Path: semicolon par…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts;foo=bar
technique: Path: semicolon param
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts;foo=bar
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com//src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
162b
Path: double slash
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com//src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
technique: Path: double slash
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/./src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
162b
Path: prefix dot /.…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/./src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
technique: Path: prefix dot /./path
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/./
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/
162b
Path: dot segment /…
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/./
technique: Path: dot segment /./
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/.
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/
162b
Path: dot segment /.
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/.
technique: Path: dot segment /.
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/
162b
Path: trailing slash
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/
technique: Path: trailing slash
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts/
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
BASE
301
→
301
https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
→ https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
162b
baseline
url: https://0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
technique: baseline
target: venmo.com
subdomain: 0-arc.aiaa.org-aatawala.hubspot.skyline.venmo.com
path: /src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
baseline: 301
response: 301 (162 bytes)
redirect: https://venmo.com/src/graphql/mutations/personalProfileSignUp/createProfileMutation.ts
response body:
<html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
blocked
301
→
301
https://academy.unrealengine.com/admin
→ http://academy.unrealengine.com/admin/
336b
Method: POST + X-HT…
url: https://academy.unrealengine.com/admin
technique: Method: POST + X-HTTP-Method-Override
target: unrealengine.com
subdomain: academy.unrealengine.com
path: /admin
baseline: 301
response: 301 (336 bytes)
redirect: http://academy.unrealengine.com/admin/
response body:
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="http://academy.unrealengine.com/admin/">here</a>.</p> <hr> <address>Apache/2.4.41 (Ubuntu) Server at academy.unrealengine.com Port 80</address> </body></html>
blocked
301
→
301
https://academy.unrealengine.com/admin
→ http://academy.unrealengine.com/admin/
336b
Method: POST + X-HT…
url: https://academy.unrealengine.com/admin
technique: Method: POST + X-HTTP-Method-Override
target: unrealengine.com
subdomain: academy.unrealengine.com
path: /admin
baseline: 301
response: 301 (336 bytes)
redirect: http://academy.unrealengine.com/admin/
response body:
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="http://academy.unrealengine.com/admin/">here</a>.</p> <hr> <address>Apache/2.4.41 (Ubuntu) Server at academy.unrealengine.com Port 80</address> </body></html>
blocked
301
→
301
https://academy.unrealengine.com/admin
→ http://academy.unrealengine.com/admin/
336b
Method: POST + X-HT…
url: https://academy.unrealengine.com/admin
technique: Method: POST + X-HTTP-Method-Override
target: unrealengine.com
subdomain: academy.unrealengine.com
path: /admin
baseline: 301
response: 301 (336 bytes)
redirect: http://academy.unrealengine.com/admin/
response body:
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="http://academy.unrealengine.com/admin/">here</a>.</p> <hr> <address>Apache/2.4.41 (Ubuntu) Server at academy.unrealengine.com Port 80</address> </body></html>
blocked
301
→
301
https://academy.unrealengine.com/admin
→ http://academy.unrealengine.com/admin/
336b
Method: POST + X-HT…
url: https://academy.unrealengine.com/admin
technique: Method: POST + X-HTTP-Method-Override
target: unrealengine.com
subdomain: academy.unrealengine.com
path: /admin
baseline: 301
response: 301 (336 bytes)
redirect: http://academy.unrealengine.com/admin/
response body:
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="http://academy.unrealengine.com/admin/">here</a>.</p> <hr> <address>Apache/2.4.41 (Ubuntu) Server at academy.unrealengine.com Port 80</address> </body></html>