Heroku
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa357376a4644aa11b6d414c4454b169ff938a60725
GraphQL introspection enabled at /graphql Types: 213 (by kind: ENUM: 31, INPUT_OBJECT: 30, OBJECT: 144, SCALAR: 8) Operations: - Query: Query | fields: analytics, cities, deliveryCompanies, eshop, eshopBranding - Mutation: Mutation | fields: addShipment, cancelVoucher, connectStore, createPickupList, createVoucher Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c1b81349d28babeb46374f16cccbba2a835addb6
GraphQL introspection enabled at /graphql Types: 209 (by kind: ENUM: 30, INPUT_OBJECT: 30, OBJECT: 141, SCALAR: 8) Operations: - Query: Query | fields: analytics, cities, deliveryCompanies, eshop, eshopBranding - Mutation: Mutation | fields: addShipment, cancelVoucher, connectStore, createPickupList, createVoucher Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3548f9a363e5bfca682915475044d69a933879e95
GraphQL introspection enabled at /graphql Types: 208 (by kind: ENUM: 30, INPUT_OBJECT: 29, OBJECT: 141, SCALAR: 8) Operations: - Query: Query | fields: analytics, cities, deliveryCompanies, eshop, eshopBranding - Mutation: Mutation | fields: addShipment, cancelVoucher, connectStore, createPickupList, createVoucher Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d20cd0987de44e7c5c8be37f0221543b59e73513
GraphQL introspection enabled at /graphql Types: 205 (by kind: ENUM: 30, INPUT_OBJECT: 27, OBJECT: 140, SCALAR: 8) Operations: - Query: Query | fields: analytics, cities, deliveryCompanies, eshop, eshopBranding - Mutation: Mutation | fields: addShipment, cancelVoucher, connectStore, createPickupList, createVoucher Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa357376a4644aa11b6d414c4454b169ff938a60725
GraphQL introspection enabled at /graphql Types: 213 (by kind: ENUM: 31, INPUT_OBJECT: 30, OBJECT: 144, SCALAR: 8) Operations: - Query: Query | fields: analytics, cities, deliveryCompanies, eshop, eshopBranding - Mutation: Mutation | fields: addShipment, cancelVoucher, connectStore, createPickupList, createVoucher Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa32c2ce470af443274cb5ac52728121e833937ea6b
GraphQL introspection enabled at /graphql Types: 210 (by kind: ENUM: 30, INPUT_OBJECT: 30, OBJECT: 142, SCALAR: 8) Operations: - Query: Query | fields: analytics, cities, deliveryCompanies, eshop, eshopBranding - Mutation: Mutation | fields: addShipment, cancelVoucher, connectStore, createPickupList, createVoucher Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c1b81349d28babeb46374f16cccbba2a835addb6
GraphQL introspection enabled at /graphql Types: 209 (by kind: ENUM: 30, INPUT_OBJECT: 30, OBJECT: 141, SCALAR: 8) Operations: - Query: Query | fields: analytics, cities, deliveryCompanies, eshop, eshopBranding - Mutation: Mutation | fields: addShipment, cancelVoucher, connectStore, createPickupList, createVoucher Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3548f9a363e5bfca682915475044d69a933879e95
GraphQL introspection enabled at /graphql Types: 208 (by kind: ENUM: 30, INPUT_OBJECT: 29, OBJECT: 141, SCALAR: 8) Operations: - Query: Query | fields: analytics, cities, deliveryCompanies, eshop, eshopBranding - Mutation: Mutation | fields: addShipment, cancelVoucher, connectStore, createPickupList, createVoucher Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d20cd0987de44e7c5c8be37f0221543b59e73513
GraphQL introspection enabled at /graphql Types: 205 (by kind: ENUM: 30, INPUT_OBJECT: 27, OBJECT: 140, SCALAR: 8) Operations: - Query: Query | fields: analytics, cities, deliveryCompanies, eshop, eshopBranding - Mutation: Mutation | fields: addShipment, cancelVoucher, connectStore, createPickupList, createVoucher Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Open service 99.83.185.157:443 · api.pircel.com
2026-01-09 12:55
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Disposition
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 12:55:52 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=i6IkoRqrBKr0lIQ6WHrbeJo9h465yUxZp58%2BGKzRlSI%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767963352"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=i6IkoRqrBKr0lIQ6WHrbeJo9h465yUxZp58%2BGKzRlSI%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767963352"
Server: Heroku
Vary: Origin, Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 3.33.249.164:80 · api.pircel.com
2026-01-09 07:04
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Disposition
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 07:05:55 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=EjZfHtVyDKywXJrEeF1hqdAyW9vcV0iY4eRQ5WR8Y5I%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767942355"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=EjZfHtVyDKywXJrEeF1hqdAyW9vcV0iY4eRQ5WR8Y5I%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767942355"
Server: Heroku
Vary: Origin, Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 99.83.185.157:443 · api.pircel.com
2026-01-02 15:10
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Disposition
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 15:10:59 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=RhAKYSsaXmbXm8%2Bd2h3ES7t1VFFHpBcveZ0e0%2F9oTlc%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767366659"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=RhAKYSsaXmbXm8%2Bd2h3ES7t1VFFHpBcveZ0e0%2F9oTlc%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767366659"
Server: Heroku
Vary: Origin, Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 3.33.249.164:80 · api.pircel.com
2026-01-02 06:42
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Disposition
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 06:42:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ankqkEIAWNZG1PepHNqU382kmPzavz66nrzy2rlMGU0%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767336147"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ankqkEIAWNZG1PepHNqU382kmPzavz66nrzy2rlMGU0%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767336147"
Server: Heroku
Vary: Origin, Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 99.83.185.157:443 · api.pircel.com
2025-12-22 21:22
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Disposition
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 21:22:41 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=42aQ8tHaFN13KpOmvUHVX1l2lHFHH1oL0U7uWX2z3PE%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766438561"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=42aQ8tHaFN13KpOmvUHVX1l2lHFHH1oL0U7uWX2z3PE%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766438561"
Server: Heroku
Vary: Origin, Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 3.33.249.164:80 · api.pircel.com
2025-12-22 21:11
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Disposition
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 21:11:51 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=U3hgJ45ezDtJu5Y%2FakpAjulItBqtoZerQAy9QV9LLGo%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766437911"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=U3hgJ45ezDtJu5Y%2FakpAjulItBqtoZerQAy9QV9LLGo%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766437911"
Server: Heroku
Vary: Origin, Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 3.33.249.164:80 · api.pircel.com
2025-12-21 00:21
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Content-Disposition
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 00:21:46 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=1OugvgxNYD5rrWfMfg5OpNuXyQJYMD1uQQRh3kFaM60%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766276506"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=1OugvgxNYD5rrWfMfg5OpNuXyQJYMD1uQQRh3kFaM60%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766276506"
Server: Heroku
Vary: Origin, Accept-Encoding
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>