Heroku
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3604b202c00d8793009843ffcebc244e91a4677bd
GraphQL introspection enabled at /graphql Types: 107 (by kind: ENUM: 15, INPUT_OBJECT: 7, INTERFACE: 1, OBJECT: 78, SCALAR: 6) Operations: - Query: Query | fields: public, translate, translateBulk, userByName, viewer - Mutation: Mutation | fields: login, loginAs, loginGuest, oauth, register Directives: deprecated, include, skip, specifiedBy (total: 4)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa353df1b225d341c72a9f6110ebfa9c6876c7f05bb
GraphQL introspection enabled at /graphql Types: 106 (by kind: ENUM: 15, INPUT_OBJECT: 7, INTERFACE: 1, OBJECT: 77, SCALAR: 6) Operations: - Query: Query | fields: public, translate, translateBulk, userByName, viewer - Mutation: Mutation | fields: login, loginAs, loginGuest, oauth, register Directives: deprecated, include, skip, specifiedBy (total: 4)
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3604b202c00d8793009843ffcebc244e91a4677bd
GraphQL introspection enabled at /graphql Types: 107 (by kind: ENUM: 15, INPUT_OBJECT: 7, INTERFACE: 1, OBJECT: 78, SCALAR: 6) Operations: - Query: Query | fields: public, translate, translateBulk, userByName, viewer - Mutation: Mutation | fields: login, loginAs, loginGuest, oauth, register Directives: deprecated, include, skip, specifiedBy (total: 4)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa353df1b225d341c72a9f6110ebfa9c6876c7f05bb
GraphQL introspection enabled at /graphql Types: 106 (by kind: ENUM: 15, INPUT_OBJECT: 7, INTERFACE: 1, OBJECT: 77, SCALAR: 6) Operations: - Query: Query | fields: public, translate, translateBulk, userByName, viewer - Mutation: Mutation | fields: login, loginAs, loginGuest, oauth, register Directives: deprecated, include, skip, specifiedBy (total: 4)
Open service 76.223.11.49:80 · api.duocards.com
2026-01-09 21:50
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 21:51:26 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=POy0T7bGDtviKImHRPRdlsab4jqbYKzPaqGwURu%2FBkY%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767995486"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=POy0T7bGDtviKImHRPRdlsab4jqbYKzPaqGwURu%2FBkY%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767995486"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 15.197.129.158:443 · api.duocards.com
2026-01-09 09:50
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 09:50:06 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=5KCFfnCxOZmSm9tkqqJglUGZ%2Fj6YUk3IOdxJwnyrr7I%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767952206"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=5KCFfnCxOZmSm9tkqqJglUGZ%2Fj6YUk3IOdxJwnyrr7I%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767952206"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 76.223.11.49:80 · api.duocards.com
2026-01-02 16:37
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 16:38:00 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=hXiqKoppA8oo5pJ97Gwo7dNwECiUn60JobLL8CCWNuc%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767371880"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=hXiqKoppA8oo5pJ97Gwo7dNwECiUn60JobLL8CCWNuc%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767371880"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 15.197.129.158:443 · api.duocards.com
2026-01-02 10:56
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 10:56:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=OAMczbduUMweJQEmvxtxJbnP601uWGg6LdM6pHnjVc8%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767351387"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=OAMczbduUMweJQEmvxtxJbnP601uWGg6LdM6pHnjVc8%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767351387"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 76.223.11.49:80 · api.duocards.com
2025-12-30 14:28
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 30 Dec 2025 14:28:05 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=wwawoHyMnS03Zl8SUWSCjPoZSEic3t1S42xmJFSKs9Y%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767104885"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=wwawoHyMnS03Zl8SUWSCjPoZSEic3t1S42xmJFSKs9Y%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767104885"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 76.223.11.49:80 · api.duocards.com
2025-12-23 04:49
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 04:49:14 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=WA72g5Gu1BL11gCCrRJsZ8eIOUh%2Bg9K3%2BuWEwW8wQn4%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766465354"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=WA72g5Gu1BL11gCCrRJsZ8eIOUh%2Bg9K3%2BuWEwW8wQn4%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766465354"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 15.197.129.158:443 · api.duocards.com
2025-12-22 15:38
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 15:38:00 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=BF6FkCw5AUzRYVwjZHN5Fnf5XBlOIqBL5Z8RmZCksFU%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766417880"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=BF6FkCw5AUzRYVwjZHN5Fnf5XBlOIqBL5Z8RmZCksFU%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766417880"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 15.197.129.158:443 · api.duocards.com
2025-12-20 16:20
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 16:20:24 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=fNnmnHj0poJ6bULKQ%2BlMQKGH%2Fz%2B%2Fi8h7N0zm3jlJN5M%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766247624"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=fNnmnHj0poJ6bULKQ%2BlMQKGH%2Fz%2B%2Fi8h7N0zm3jlJN5M%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766247624"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 76.223.11.49:80 · api.duocards.com
2025-12-20 15:50
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 15:50:43 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=v%2BU2fJL9tiaswbGoMhNzzQIL6qc%2BFHG%2BmLsFB1J3Am4%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766245843"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=v%2BU2fJL9tiaswbGoMhNzzQIL6qc%2BFHG%2BmLsFB1J3Am4%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766245843"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>