Heroku
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f3bf0a2e24400ede6095672a3eba06754442de65
GraphQL introspection enabled at /graphql Types: 50 (by kind: ENUM: 8, INPUT_OBJECT: 5, OBJECT: 31, SCALAR: 6) Operations: - Query: Query | fields: pro, pros, prosInArea, user, users - Mutation: Mutation | fields: addBooking, addNewUser, addUserWithRelationship, cancelBooking, updateUser Directives: cacheControl, deprecated, include, skip (total: 4)
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3f3bf0a2e24400ede6095672a3eba06754442de65
GraphQL introspection enabled at /graphql Types: 50 (by kind: ENUM: 8, INPUT_OBJECT: 5, OBJECT: 31, SCALAR: 6) Operations: - Query: Query | fields: pro, pros, prosInArea, user, users - Mutation: Mutation | fields: addBooking, addNewUser, addUserWithRelationship, cancelBooking, updateUser Directives: cacheControl, deprecated, include, skip (total: 4)
Open service 75.2.97.79:80 · api.mamamobile.com
2026-01-09 21:39
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 21:40:54 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=qmeRdTeSQh5rK4zF9dQt22sJYRjY7HavQ6Uj24BI%2BMc%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767994854"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=qmeRdTeSQh5rK4zF9dQt22sJYRjY7HavQ6Uj24BI%2BMc%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767994854"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
hello world
Open service 35.71.145.101:443 · api.mamamobile.com
2026-01-09 08:07
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 08:07:48 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=45kCh1nGpBSA6dzL9odI8LPZhg6N0SbdfmkAAvZQNAg%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767946068"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=45kCh1nGpBSA6dzL9odI8LPZhg6N0SbdfmkAAvZQNAg%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767946068"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
hello world
Open service 75.2.97.79:80 · api.mamamobile.com
2026-01-02 16:50
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 16:50:52 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=4dRQ7NSpUAnG8kjPUln05BAecLXxKz3UQm345Zblz4I%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767372652"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=4dRQ7NSpUAnG8kjPUln05BAecLXxKz3UQm345Zblz4I%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767372652"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
hello world
Open service 35.71.145.101:443 · api.mamamobile.com
2026-01-02 12:41
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 12:41:14 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=EcBad0JHawAzaKPOaF%2BQPkSCT8upklMRTdO2rbEysWI%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767357674"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=EcBad0JHawAzaKPOaF%2BQPkSCT8upklMRTdO2rbEysWI%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767357674"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
hello world
Open service 75.2.97.79:80 · api.mamamobile.com
2025-12-30 14:12
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Tue, 30 Dec 2025 14:12:35 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=h1AcHxcvYbFPp2suMJwkFZiwf7d6I0HzElYw42o%2BiDk%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767103955"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=h1AcHxcvYbFPp2suMJwkFZiwf7d6I0HzElYw42o%2BiDk%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767103955"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
hello world
Open service 35.71.145.101:443 · api.mamamobile.com
2025-12-30 11:29
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Tue, 30 Dec 2025 11:29:44 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=JuXAZI1QbM75JyM150yXOAN3n0mzLEzdXXDdN%2Bb7IR0%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767094184"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=JuXAZI1QbM75JyM150yXOAN3n0mzLEzdXXDdN%2Bb7IR0%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767094184"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
hello world
Open service 35.71.145.101:443 · api.mamamobile.com
2025-12-26 10:39
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Fri, 26 Dec 2025 10:39:49 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=4MSSuj%2BQ4peUMUveuGvO7LvZjrKx04aSvQ4%2B7%2BtQUnE%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766745589"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=4MSSuj%2BQ4peUMUveuGvO7LvZjrKx04aSvQ4%2B7%2BtQUnE%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766745589"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
hello world
Open service 75.2.97.79:80 · api.mamamobile.com
2025-12-23 05:17
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 05:17:39 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=5PRVClV3GFOOhLxL2lOuaR%2FSXe24pYUqBsaDUM2BflM%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766467059"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=5PRVClV3GFOOhLxL2lOuaR%2FSXe24pYUqBsaDUM2BflM%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766467059"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
hello world
Open service 35.71.145.101:443 · api.mamamobile.com
2025-12-22 12:16
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 12:16:12 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=VXA0eYjISXWxKw3vZwJkSpMAEMpygwXoQJBebfkSI90%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766405772"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=VXA0eYjISXWxKw3vZwJkSpMAEMpygwXoQJBebfkSI90%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766405772"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
hello world
Open service 75.2.97.79:80 · api.mamamobile.com
2025-12-20 15:30
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 15:30:10 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=qYcXUs3M6nl0rmuCS2ABglWM9wOjPczn8vukAPyjwFc%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766244610"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=qYcXUs3M6nl0rmuCS2ABglWM9wOjPczn8vukAPyjwFc%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766244610"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
hello world
Open service 35.71.145.101:443 · api.mamamobile.com
2025-12-20 11:35
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 11:35:55 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=jdvbSqGWUtYzkBaMDtbWLKFJl9d6MF94J7iSMLCXqD0%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766230555"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=jdvbSqGWUtYzkBaMDtbWLKFJl9d6MF94J7iSMLCXqD0%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766230555"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
hello world