Vercel
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6a65d8aef520006bd45a2cf612582c275257f7da1
GraphQL introspection enabled at /api/graphql Types: 379 (by kind: ENUM: 26, INPUT_OBJECT: 27, OBJECT: 319, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customers, organization, user, webhooks - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6a4e5c25739f61d8502244f49aa61522d668d8159
GraphQL introspection enabled at /api/graphql Types: 378 (by kind: ENUM: 25, INPUT_OBJECT: 27, OBJECT: 319, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customers, organization, user, webhooks - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6ad480f8f4b16889de83752814a4174951f0da9c1
GraphQL introspection enabled at /api/graphql Types: 372 (by kind: ENUM: 23, INPUT_OBJECT: 27, OBJECT: 315, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customers, organization, user, webhooks - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d67d4ec50e29df55fe63590576983a944078e27028
GraphQL introspection enabled at /api/graphql Types: 369 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 313, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d67d4ec50e29df55fe63590576983a9440eeab39f6
GraphQL introspection enabled at /api/graphql Types: 369 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 313, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, skip, specifiedBy (total: 4) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d616071e5e9c83ccce2456d4a65123c970218a77a6
GraphQL introspection enabled at /api/graphql Types: 368 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 312, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, skip, specifiedBy (total: 4) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d671dea0f1f788f073a14195e1d1a7fdf5aca8af61
GraphQL introspection enabled at /api/graphql Types: 362 (by kind: ENUM: 22, INPUT_OBJECT: 24, OBJECT: 309, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, skip, specifiedBy (total: 4) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
GraphQL introspection enabled at /api/graphql
Open service 66.33.60.129:443 · 816.nickelpayments.com
2026-01-09 00:29
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Fri, 09 Jan 2026 00:29:07 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: iad1::5b78b-1767918547648-268c38504019 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.129:443 · 816.nickelpayments.com
2026-01-02 00:28
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Fri, 02 Jan 2026 00:28:02 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: iad1::l6zl5-1767313682385-2875117c8280 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.129:443 · 816.nickelpayments.com
2025-12-30 08:04
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Tue, 30 Dec 2025 08:04:59 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::dvpcs-1767081899132-a3b06f5b75ee Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.129:443 · 816.nickelpayments.com
2025-12-22 08:47
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Mon, 22 Dec 2025 08:47:44 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: sin1::7bs6f-1766393264537-0040e6527c7d Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.66:443 · 816.nickelpayments.com
2025-12-22 00:57
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Mon, 22 Dec 2025 00:57:15 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: iad1::kdclk-1766365035956-952bb7ec7196 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.194:443 · 816.nickelpayments.com
2025-12-22 00:57
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Mon, 22 Dec 2025 00:57:16 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: iad1::rppdm-1766365035959-fe19f962ef1b Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.194:80 · 816.nickelpayments.com
2025-12-22 00:57
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://816.nickelpayments.com/ Refresh: 0;url=https://816.nickelpayments.com/ server: Vercel Redirecting...
Open service 66.33.60.66:80 · 816.nickelpayments.com
2025-12-22 00:57
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://816.nickelpayments.com/ Refresh: 0;url=https://816.nickelpayments.com/ server: Vercel Redirecting...
Open service 66.33.60.129:443 · 816.nickelpayments.com
2025-12-20 12:29
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Sat, 20 Dec 2025 12:29:55 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::r6ppd-1766233795186-f29cce441714 Connection: close Transfer-Encoding: chunked Redirecting...