Vercel
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6a65d8aef520006bd45a2cf612582c275eda242c1
GraphQL introspection enabled at /api/graphql Types: 379 (by kind: ENUM: 26, INPUT_OBJECT: 27, OBJECT: 319, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customers, organization, user, webhooks - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6a65d8aef520006bd45a2cf612582c275257f7da1
GraphQL introspection enabled at /api/graphql Types: 379 (by kind: ENUM: 26, INPUT_OBJECT: 27, OBJECT: 319, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customers, organization, user, webhooks - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6ad480f8f4b16889de83752814a4174951f0da9c1
GraphQL introspection enabled at /api/graphql Types: 372 (by kind: ENUM: 23, INPUT_OBJECT: 27, OBJECT: 315, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customers, organization, user, webhooks - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d67d4ec50e29df55fe63590576983a944078e27028
GraphQL introspection enabled at /api/graphql Types: 369 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 313, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d67d4ec50e29df55fe63590576983a9440eeab39f6
GraphQL introspection enabled at /api/graphql Types: 369 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 313, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, skip, specifiedBy (total: 4) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d616071e5e9c83ccce2456d4a65123c970218a77a6
GraphQL introspection enabled at /api/graphql Types: 368 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 312, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, skip, specifiedBy (total: 4) Readable stores: 0
Open service 76.76.21.22:443 · 1340.nickelpayments.com
2026-01-08 19:49
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Thu, 08 Jan 2026 19:49:05 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::8csdj-1767901745421-f37d0791ca8e Connection: close Transfer-Encoding: chunked Redirecting...
Open service 76.76.21.98:80 · 1340.nickelpayments.com
2026-01-07 08:51
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://1340.nickelpayments.com/ Refresh: 0;url=https://1340.nickelpayments.com/ server: Vercel Redirecting...
Open service 66.33.60.35:80 · 1340.nickelpayments.com
2026-01-07 08:51
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://1340.nickelpayments.com/ Refresh: 0;url=https://1340.nickelpayments.com/ server: Vercel Redirecting...
Open service 66.33.60.35:443 · 1340.nickelpayments.com
2026-01-07 08:51
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Wed, 07 Jan 2026 08:51:33 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: iad1::dz5gt-1767775893399-6b9513b6a1fe Connection: close Transfer-Encoding: chunked Redirecting...
Open service 76.76.21.98:443 · 1340.nickelpayments.com
2026-01-07 08:51
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Wed, 07 Jan 2026 08:51:33 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: sfo1::wd96t-1767775893617-2e7edc34b12f Connection: close Transfer-Encoding: chunked Redirecting...
Open service 76.76.21.22:443 · 1340.nickelpayments.com
2026-01-01 20:19
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Thu, 01 Jan 2026 20:19:47 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::d9mg8-1767298787842-5617845946f5 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 76.76.21.22:443 · 1340.nickelpayments.com
2025-12-30 04:28
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Tue, 30 Dec 2025 04:28:30 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: lhr1::69xpz-1767068910394-db00f135bb7c Connection: close Transfer-Encoding: chunked Redirecting...
Open service 76.76.21.22:443 · 1340.nickelpayments.com
2025-12-22 05:17
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Mon, 22 Dec 2025 05:17:07 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::rspkw-1766380627422-d001154032a4 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 76.76.21.22:443 · 1340.nickelpayments.com
2025-12-20 05:20
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Sat, 20 Dec 2025 05:20:07 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: iad1::nxf7s-1766208007542-57be9722489b Connection: close Transfer-Encoding: chunked Redirecting...