Heroku
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3a9604bdb055eda9977003150f58ee29e390319ee
GraphQL introspection enabled at /graphql Types: 37 (by kind: ENUM: 3, INPUT_OBJECT: 7, OBJECT: 22, SCALAR: 5) Operations: - Query: Query | fields: Category, Template, allCategories, allTemplates, currentUser - Mutation: Mutation | fields: createDesign, linkDesign, subscribeUser, syncUser, updateDesign Directives: deprecated, include, skip (total: 3)
Severity: medium
Fingerprint: c2db3a1c40d490dbf8cbe7e25504e7febeab512edbd8c0dd5e6427e37d72b3f3
GraphQL introspection enabled at /graphql/api Types: 37 (by kind: ENUM: 3, INPUT_OBJECT: 7, OBJECT: 22, SCALAR: 5) Operations: - Query: Query | fields: Category, Template, allCategories, allTemplates, currentUser - Mutation: Mutation | fields: createDesign, linkDesign, subscribeUser, syncUser, updateDesign Directives: deprecated, include, skip (total: 3)
Open service 35.71.150.51:443 · api.emailmonster.io
2026-01-09 11:09
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 11:09:29 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=GJpkifsymuVVah69uX7PM9CBZvn%2FwQm%2BZSx%2BWk28L24%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767956969"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=GJpkifsymuVVah69uX7PM9CBZvn%2FwQm%2BZSx%2BWk28L24%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767956969"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 35.71.150.51:443 · api.emailmonster.io
2026-01-05 02:00
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Mon, 05 Jan 2026 02:00:46 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=W605HK7MMUhd3WGbPKAzf8X8EgwYHCw6y9rAIbtaiaw%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767578446"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=W605HK7MMUhd3WGbPKAzf8X8EgwYHCw6y9rAIbtaiaw%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767578446"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 15.197.152.254:443 · api.emailmonster.io
2026-01-05 02:00
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Mon, 05 Jan 2026 02:00:45 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=atMT4jrSuCktniTQOzJcUAp0DOMT8LQkjIDKpKFYXAw%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767578445"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=atMT4jrSuCktniTQOzJcUAp0DOMT8LQkjIDKpKFYXAw%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767578445"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 3.33.161.45:443 · api.emailmonster.io
2026-01-05 02:00
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Mon, 05 Jan 2026 02:00:46 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=W605HK7MMUhd3WGbPKAzf8X8EgwYHCw6y9rAIbtaiaw%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767578446"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=W605HK7MMUhd3WGbPKAzf8X8EgwYHCw6y9rAIbtaiaw%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767578446"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 13.248.131.213:443 · api.emailmonster.io
2026-01-05 02:00
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Mon, 05 Jan 2026 02:00:45 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=atMT4jrSuCktniTQOzJcUAp0DOMT8LQkjIDKpKFYXAw%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767578445"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=atMT4jrSuCktniTQOzJcUAp0DOMT8LQkjIDKpKFYXAw%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767578445"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 3.33.161.45:443 · api.emailmonster.io
2026-01-02 17:36
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 17:36:07 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=UbPbOWtdjPWCk9HEC58kElJnEAdi4LXqzSXJT2gJFXU%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767375367"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=UbPbOWtdjPWCk9HEC58kElJnEAdi4LXqzSXJT2gJFXU%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767375367"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 3.33.161.45:443 · api.emailmonster.io
2025-12-23 08:47
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 08:47:48 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=UVxsj9jQZuIFpT8X9JbMdKmPYn1qKw5csLV0jCQaySU%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766479668"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=UVxsj9jQZuIFpT8X9JbMdKmPYn1qKw5csLV0jCQaySU%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766479668"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 3.33.161.45:443 · api.emailmonster.io
2025-12-21 06:26
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 06:26:57 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=hmo0DeWfihR5uiK80osnMNMSYxjlJD2ono8ay1QszqE%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766298417"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=hmo0DeWfihR5uiK80osnMNMSYxjlJD2ono8ay1QszqE%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766298417"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 3.33.161.45:443 · api.emailmonster.io
2025-12-19 02:30
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 02:30:26 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=XkfoIInwoGbegjJbMCx4zHjnQBti6cuAhEtwP%2FPGo9g%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766111426"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=XkfoIInwoGbegjJbMCx4zHjnQBti6cuAhEtwP%2FPGo9g%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766111426"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>