Heroku
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3190fed2ca14a6830c1186b6c3d30994acc5bf5ea
GraphQL introspection enabled at /graphql Types: 120 (by kind: ENUM: 4, INPUT_OBJECT: 4, OBJECT: 105, SCALAR: 7) Operations: - Query: Query | fields: agencies, agency, algoliaSearchSecuredApiKey, oAuthAuthorize, oAuthRefreshToken - Mutation: Mutation | fields: addAgency, addAgencyProducer, deleteAgency, updateAgency, updateAgencyProducer Directives: deprecated, include, skip (total: 3)
Open service 35.71.179.82:443 · api.pagprodigy.com
2026-01-09 04:29
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 04:29:32 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: none
Public-Key-Pins: pin-sha256="base64=="; max-age=15552000
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=B1JENh3iJBJBD%2FPgmfcG4mbg1%2B16PJmzYdqhi9i%2Fjp4%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767932972"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=B1JENh3iJBJBD%2FPgmfcG4mbg1%2B16PJmzYdqhi9i%2Fjp4%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767932972"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: null, 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: null
X-Ratelimit-Limit: 300
X-Ratelimit-Remaining: 299
X-Ratelimit-Reset: 1767933873
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 35.71.179.82:443 · api.pagprodigy.com
2026-01-02 11:00
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 11:00:52 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: none
Public-Key-Pins: pin-sha256="base64=="; max-age=15552000
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=uz6yYukSmaELrgaLbvE4I63H84%2ByPQBusOXhmUcl0%2Bk%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767351652"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=uz6yYukSmaELrgaLbvE4I63H84%2ByPQBusOXhmUcl0%2Bk%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767351652"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: null, 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: null
X-Ratelimit-Limit: 300
X-Ratelimit-Remaining: 299
X-Ratelimit-Reset: 1767352553
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 35.71.179.82:443 · api.pagprodigy.com
2025-12-23 02:53
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 02:53:55 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: none
Public-Key-Pins: pin-sha256="base64=="; max-age=15552000
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=FdJvczOWHTsKOBECW5jrOkpAtqQDzaN5vYago%2F4vMV4%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766458435"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=FdJvczOWHTsKOBECW5jrOkpAtqQDzaN5vYago%2F4vMV4%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766458435"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: null, 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: null
X-Ratelimit-Limit: 300
X-Ratelimit-Remaining: 298
X-Ratelimit-Reset: 1766459335
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 35.71.179.82:443 · api.pagprodigy.com
2025-12-20 18:09
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 18:09:50 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: none
Public-Key-Pins: pin-sha256="base64=="; max-age=15552000
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=J49dmFYtaUD5FVRUUEgZdevN1UYpvzLll2BnGhe13wM%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766254190"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=J49dmFYtaUD5FVRUUEgZdevN1UYpvzLll2BnGhe13wM%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766254190"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: null, 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: null
X-Ratelimit-Limit: 300
X-Ratelimit-Remaining: 298
X-Ratelimit-Reset: 1766255091
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 35.71.179.82:443 · api.pagprodigy.com
2025-12-19 02:50
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 02:50:06 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: none
Public-Key-Pins: pin-sha256="base64=="; max-age=15552000
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=rJR89C9bNeLt6LvYoKlUIiUUfT86nZEjH3eptrjDMOE%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766112606"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=rJR89C9bNeLt6LvYoKlUIiUUfT86nZEjH3eptrjDMOE%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766112606"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: null, 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: null
X-Ratelimit-Limit: 300
X-Ratelimit-Remaining: 298
X-Ratelimit-Reset: 1766113507
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>