Heroku
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3400105ec05482f709bb2e5e59b271c805a001e70
GraphQL introspection enabled at /graphql Types: 207 (by kind: ENUM: 16, INPUT_OBJECT: 43, INTERFACE: 2, OBJECT: 138, SCALAR: 8) Operations: - Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group - Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b4b02ad4aa531518a03d4c5d11f6cf68b7f2d088
GraphQL introspection enabled at /graphql Types: 194 (by kind: ENUM: 13, INPUT_OBJECT: 40, INTERFACE: 2, OBJECT: 131, SCALAR: 8) Operations: - Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group - Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3400105ec05482f709bb2e5e59b271c805a001e70
GraphQL introspection enabled at /graphql Types: 207 (by kind: ENUM: 16, INPUT_OBJECT: 43, INTERFACE: 2, OBJECT: 138, SCALAR: 8) Operations: - Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group - Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3b4b02ad4aa531518a03d4c5d11f6cf68b7f2d088
GraphQL introspection enabled at /graphql Types: 194 (by kind: ENUM: 13, INPUT_OBJECT: 40, INTERFACE: 2, OBJECT: 131, SCALAR: 8) Operations: - Query: Query | fields: getGroupCountsInClass, getGroupsInClass, getGroupsInClasses, getStudentClassGoal, group - Mutation: Mutation | fields: addStudentsToGroup, createGroup, deleteGroup, mutateStudentClassGoal, removeStudentsFromGroup Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Open service 75.2.60.68:443 · api.feedbackforward.org
2026-01-09 19:23
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 114
Content-Type: application/json; charset=utf-8
Date: Fri, 09 Jan 2026 19:23:22 GMT
Etag: W/"72-Ec5Fl9YbeLwlfNVzMvdpmXkmY58"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=zdWod4zkvSfKd08JVWcwfoeHcVXg7gViDaiEPkK1QBE%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767986602"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=zdWod4zkvSfKd08JVWcwfoeHcVXg7gViDaiEPkK1QBE%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767986602"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"statusCode":404,"timestamp":"2026-01-09T19:23:22.909Z","path":"/","message":"Cannot GET /","errors":"Not Found"}
Open service 99.83.220.108:80 · api.feedbackforward.org
2026-01-09 02:41
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 114
Content-Type: application/json; charset=utf-8
Date: Fri, 09 Jan 2026 02:42:17 GMT
Etag: W/"72-5GyQlbEsUuI8nC4UWNFGf88tAhY"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ouAYQJYZfJJ2mR1UE4eigNpDG4wTTA1FHEekGUSSFHU%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767926537"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ouAYQJYZfJJ2mR1UE4eigNpDG4wTTA1FHEekGUSSFHU%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767926537"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"statusCode":404,"timestamp":"2026-01-09T02:42:17.671Z","path":"/","message":"Cannot GET /","errors":"Not Found"}
Open service 75.2.60.68:443 · api.feedbackforward.org
2026-01-02 22:41
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 114
Content-Type: application/json; charset=utf-8
Date: Fri, 02 Jan 2026 22:41:53 GMT
Etag: W/"72-ZM9dhRLEbeJr6zAvm3JRB0w8xrw"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=e%2BwHWQUzMh41H%2BtdiEhnVWovWO3yXNMFr9mTYMrjv6U%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767393713"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=e%2BwHWQUzMh41H%2BtdiEhnVWovWO3yXNMFr9mTYMrjv6U%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767393713"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"statusCode":404,"timestamp":"2026-01-02T22:41:53.637Z","path":"/","message":"Cannot GET /","errors":"Not Found"}
Open service 99.83.220.108:80 · api.feedbackforward.org
2026-01-02 00:28
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 114
Content-Type: application/json; charset=utf-8
Date: Fri, 02 Jan 2026 00:28:40 GMT
Etag: W/"72-Qpx4SAVD8hH8xxPG0HwlrxKuv9k"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=eHgsEfwT%2F4WT1SjFu%2B3jzq5dl4bSnikF%2FyugX7qj0W4%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767313720"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=eHgsEfwT%2F4WT1SjFu%2B3jzq5dl4bSnikF%2FyugX7qj0W4%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767313720"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"statusCode":404,"timestamp":"2026-01-02T00:28:40.565Z","path":"/","message":"Cannot GET /","errors":"Not Found"}
Open service 99.83.220.108:80 · api.feedbackforward.org
2025-12-30 08:20
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 114
Content-Type: application/json; charset=utf-8
Date: Tue, 30 Dec 2025 08:20:50 GMT
Etag: W/"72-uVkLiMUKEJxn/1znfQLDNK71K+c"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=SCvfoyGWBIcjRrZLD%2B48uysb52o2XDPSfQuHxs0%2Bhmc%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767082850"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=SCvfoyGWBIcjRrZLD%2B48uysb52o2XDPSfQuHxs0%2Bhmc%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767082850"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"statusCode":404,"timestamp":"2025-12-30T08:20:50.190Z","path":"/","message":"Cannot GET /","errors":"Not Found"}
Open service 75.2.60.68:443 · api.feedbackforward.org
2025-12-23 03:54
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 114
Content-Type: application/json; charset=utf-8
Date: Tue, 23 Dec 2025 03:54:15 GMT
Etag: W/"72-F0bKH7386MWLVZaQV3kY9k0Sq3E"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=f03rt2yBK3PJ1sDfKofw3C7svcCh1uJayVQL3cKvJPA%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766462055"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=f03rt2yBK3PJ1sDfKofw3C7svcCh1uJayVQL3cKvJPA%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766462055"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"statusCode":404,"timestamp":"2025-12-23T03:54:15.841Z","path":"/","message":"Cannot GET /","errors":"Not Found"}
Open service 99.83.220.108:80 · api.feedbackforward.org
2025-12-22 15:10
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 114
Content-Type: application/json; charset=utf-8
Date: Mon, 22 Dec 2025 15:10:18 GMT
Etag: W/"72-xRamX+gMOxUi4zczhhJ04/BMaIk"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=q17PaxTJ7IokBh2CWTK9PrzDo5j%2BlthTn7d5UdJIoos%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766416218"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=q17PaxTJ7IokBh2CWTK9PrzDo5j%2BlthTn7d5UdJIoos%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766416218"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"statusCode":404,"timestamp":"2025-12-22T15:10:18.673Z","path":"/","message":"Cannot GET /","errors":"Not Found"}
Open service 75.2.60.68:443 · api.feedbackforward.org
2025-12-20 16:37
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 114
Content-Type: application/json; charset=utf-8
Date: Sat, 20 Dec 2025 16:37:15 GMT
Etag: W/"72-S10J55ta03SNuHsCrQpAGyPEa5Q"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=mYOP91Lvo3tWfJJtkIBGab61B7sTWVumHLqieK%2BHaQs%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766248635"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=mYOP91Lvo3tWfJJtkIBGab61B7sTWVumHLqieK%2BHaQs%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766248635"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"statusCode":404,"timestamp":"2025-12-20T16:37:15.370Z","path":"/","message":"Cannot GET /","errors":"Not Found"}
Open service 99.83.220.108:80 · api.feedbackforward.org
2025-12-20 11:25
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 114
Content-Type: application/json; charset=utf-8
Date: Sat, 20 Dec 2025 11:25:30 GMT
Etag: W/"72-MpmlcQFaJB28m+HiMpcY57k0ix0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=XxhaMIPc6bB%2FqymuE6LfhUNaCKPsun4RfgIory9r%2BLs%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766229930"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=XxhaMIPc6bB%2FqymuE6LfhUNaCKPsun4RfgIory9r%2BLs%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766229930"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"statusCode":404,"timestamp":"2025-12-20T11:25:30.429Z","path":"/","message":"Cannot GET /","errors":"Not Found"}