Vercel
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6a65d8aef520006bd45a2cf612582c275257f7da1
GraphQL introspection enabled at /api/graphql Types: 379 (by kind: ENUM: 26, INPUT_OBJECT: 27, OBJECT: 319, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customers, organization, user, webhooks - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6a4e5c25739f61d8502244f49aa61522d668d8159
GraphQL introspection enabled at /api/graphql Types: 378 (by kind: ENUM: 25, INPUT_OBJECT: 27, OBJECT: 319, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customers, organization, user, webhooks - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6ce8669677c410f55eb2e90397c017f5d7882bca9
GraphQL introspection enabled at /api/graphql Types: 374 (by kind: ENUM: 24, INPUT_OBJECT: 27, OBJECT: 316, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customers, organization, user, webhooks - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6ad480f8f4b16889de83752814a4174951f0da9c1
GraphQL introspection enabled at /api/graphql Types: 372 (by kind: ENUM: 23, INPUT_OBJECT: 27, OBJECT: 315, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customers, organization, user, webhooks - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d67d4ec50e29df55fe63590576983a944078e27028
GraphQL introspection enabled at /api/graphql Types: 369 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 313, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d67d4ec50e29df55fe63590576983a9440eeab39f6
GraphQL introspection enabled at /api/graphql Types: 369 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 313, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, skip, specifiedBy (total: 4) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d616071e5e9c83ccce2456d4a65123c970218a77a6
GraphQL introspection enabled at /api/graphql Types: 368 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 312, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, skip, specifiedBy (total: 4) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d671dea0f1f788f073a14195e1d1a7fdf5aca8af61
GraphQL introspection enabled at /api/graphql Types: 362 (by kind: ENUM: 22, INPUT_OBJECT: 24, OBJECT: 309, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, skip, specifiedBy (total: 4) Readable stores: 0
Open service 76.76.21.164:443 · 699.nickelpayments.com
2026-01-08 23:04
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Thu, 08 Jan 2026 23:04:45 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::xdh5z-1767913485385-caa0fdbdeb39 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 76.76.21.164:443 · 699.nickelpayments.com
2026-01-01 22:30
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Thu, 01 Jan 2026 22:30:24 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: lhr1::7vspn-1767306623919-1b8c485acafc Connection: close Transfer-Encoding: chunked Redirecting...
Open service 76.76.21.164:443 · 699.nickelpayments.com
2025-12-30 07:21
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Tue, 30 Dec 2025 07:21:12 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: bom1::lll52-1767079271822-ab158a4a2568 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 76.76.21.164:443 · 699.nickelpayments.com
2025-12-22 09:06
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Mon, 22 Dec 2025 09:06:10 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: sfo1::mrgrf-1766394370528-3fcf883b9f42 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 76.76.21.164:443 · 699.nickelpayments.com
2025-12-20 10:03
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Sat, 20 Dec 2025 10:03:20 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: lhr1::9lj9x-1766225000367-4b513d8b6ebe Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.129:443 · 699.nickelpayments.com
2025-12-19 23:37
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Fri, 19 Dec 2025 23:37:08 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::cd6nl-1766187428289-a0904902ae6c Connection: close Transfer-Encoding: chunked Redirecting...
Open service 76.76.21.22:80 · 699.nickelpayments.com
2025-12-19 23:37
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://699.nickelpayments.com/ Refresh: 0;url=https://699.nickelpayments.com/ server: Vercel Redirecting...
Open service 76.76.21.22:443 · 699.nickelpayments.com
2025-12-19 23:37
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Fri, 19 Dec 2025 23:37:08 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::5fsln-1766187428245-1611bac26c37 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.129:80 · 699.nickelpayments.com
2025-12-19 23:37
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://699.nickelpayments.com/ Refresh: 0;url=https://699.nickelpayments.com/ server: Vercel Redirecting...