Heroku
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa37ea6780cc7e1c3505dfb231711fee113ca283b3b
GraphQL introspection enabled at /graphql Types: 331 (by kind: ENUM: 33, INPUT_OBJECT: 94, OBJECT: 187, SCALAR: 8, UNION: 9) Operations: - Query: Query | fields: accounts, albumByArtistIdSlug, albumById, albumBySlug, albums - Mutation: Mutation | fields: acceptInvite, acceptTierInvite, addCampaignInvite, addPaymentMethod, addTierInvite Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3556969d97fd783bb687e25ccb3c2bfa67979b602
GraphQL introspection enabled at /graphql Types: 328 (by kind: ENUM: 33, INPUT_OBJECT: 93, OBJECT: 186, SCALAR: 8, UNION: 8) Operations: - Query: Query | fields: accounts, albumByArtistIdSlug, albumBySlug, albums, allAlbums - Mutation: Mutation | fields: acceptInvite, acceptTierInvite, addCampaignInvite, addPaymentMethod, addTierInvite Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa37a5b24071e1dc1b57fe80052f4276eec12a68efc
GraphQL introspection enabled at /graphql Types: 324 (by kind: ENUM: 33, INPUT_OBJECT: 92, OBJECT: 183, SCALAR: 8, UNION: 8) Operations: - Query: Query | fields: accounts, albumByArtistIdSlug, albumBySlug, albums, allAlbums - Mutation: Mutation | fields: acceptInvite, acceptTierInvite, addCampaignInvite, addPaymentMethod, addTierInvite Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Open service 75.2.43.161:443 · api.sleeve.fm
2026-01-09 13:56
HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=4TtF4a8etllgVh2HKpr9Po2x0kyfnYCryyV0Jxt7UFQ%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767966999"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=4TtF4a8etllgVh2HKpr9Po2x0kyfnYCryyV0Jxt7UFQ%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767966999"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Request-Id: deeb0642-cc82-cc76-c885-eb2991a1a395
X-Runtime: 0.002703
Date: Fri, 09 Jan 2026 13:56:39 GMT
Connection: close
Open service 75.2.43.161:443 · api.sleeve.fm
2026-01-02 19:14
HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=kJKL9TKPIBn4Bgkk7Jsauhv0x6Jq8V%2F8D4kM86w8y8Q%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767381296"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=kJKL9TKPIBn4Bgkk7Jsauhv0x6Jq8V%2F8D4kM86w8y8Q%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767381296"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Request-Id: aa6455e4-f017-db5c-4913-d584e2ab0689
X-Runtime: 0.003371
Date: Fri, 02 Jan 2026 19:14:56 GMT
Connection: close
Open service 75.2.43.161:443 · api.sleeve.fm
2025-12-23 05:05
HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=mbAityYHDt5HOmHtmERYrlh5DbkdqFEi52FZvuk5Wws%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766466333"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=mbAityYHDt5HOmHtmERYrlh5DbkdqFEi52FZvuk5Wws%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766466333"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Request-Id: 70da08f5-3242-ecfa-5c54-bae9a5fc86fa
X-Runtime: 0.003063
Date: Tue, 23 Dec 2025 05:05:33 GMT
Connection: close
Open service 75.2.43.161:443 · api.sleeve.fm
2025-12-21 01:52
HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=UD4VGhxCC5FcdOstNzl298KdVUGS4pFc%2F%2BZ9g%2Blmu8w%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766281931"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=UD4VGhxCC5FcdOstNzl298KdVUGS4pFc%2F%2BZ9g%2Blmu8w%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766281931"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Request-Id: f73e3f0f-e65f-05f6-1c00-504c8a6fcdc3
X-Runtime: 0.003432
Date: Sun, 21 Dec 2025 01:52:11 GMT
Connection: close
Open service 75.2.43.161:443 · api.sleeve.fm
2025-12-19 04:56
HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=FKgTcILuueW%2BIu9e5I28wUlhkBL9QC9wKJyLyf0o06s%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766120187"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=FKgTcILuueW%2BIu9e5I28wUlhkBL9QC9wKJyLyf0o06s%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766120187"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Via: 1.1 heroku-router
X-Request-Id: 8e90a405-c45b-1a34-0bfe-fdd969993f82
X-Runtime: 0.003871
Date: Fri, 19 Dec 2025 04:56:27 GMT
Connection: close