Finding a hidden GraphQL endpoint