Heroku
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa39a620f2713b62b952c0f0479f0ce327a412e8d82
GraphQL introspection enabled at /graphql Types: 46 (by kind: ENUM: 4, INPUT_OBJECT: 14, OBJECT: 21, SCALAR: 7) Operations: - Query: Query | fields: fetchAllAnswers, fetchAnswers, fetchAnswersForAdmin, fetchUser, getApplications - Mutation: Mutation | fields: cancelInvitation, createInvitation, createPipe, deletePipe, deleteTeamMember Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Open service 15.197.149.68:443 · api.staging.aqvc.com
2026-01-09 23:12
HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Jy2TEk1cK56%2FxLiQBN9%2FPEPPVExgol2qFxg%2FzH7eEC8%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1768000380"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Jy2TEk1cK56%2FxLiQBN9%2FPEPPVExgol2qFxg%2FzH7eEC8%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1768000380"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: beb94776-9d15-c2ab-3245-f3066b52a0ce
X-Runtime: 0.007389
Date: Fri, 09 Jan 2026 23:13:00 GMT
Connection: close
Open service 15.197.149.68:443 · api.staging.aqvc.com
2026-01-02 13:00
HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=2PwVLxxvRgMx1QuhplM77NCAFhvXIoQHX7VQWtAOFwE%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767358811"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=2PwVLxxvRgMx1QuhplM77NCAFhvXIoQHX7VQWtAOFwE%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767358811"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: dba362c3-d865-652d-3ebf-2e30584efb6c
X-Runtime: 0.001215
Date: Fri, 02 Jan 2026 13:00:11 GMT
Connection: close
Open service 15.197.149.68:80 · api.staging.aqvc.com
2026-01-02 01:28
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Content-Type: text/html; charset=utf-8
Location: https://api.staging.aqvc.com/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=pqZpXIDnL9CcSS1xDMIIFar4AJzZr1lWk66GaKC91Lw%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767317291"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=pqZpXIDnL9CcSS1xDMIIFar4AJzZr1lWk66GaKC91Lw%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767317291"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
Date: Fri, 02 Jan 2026 01:28:11 GMT
Connection: close
Open service 15.197.149.68:443 · api.staging.aqvc.com
2026-01-02 01:28
HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=xOZN5nrE2aH1E4CTErU4jgqrXcgOumahHbouMjA3Ax0%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767317287"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=xOZN5nrE2aH1E4CTErU4jgqrXcgOumahHbouMjA3Ax0%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767317287"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 84bfffcb-567a-85b0-1d0d-6b3c014b8472
X-Runtime: 0.001552
Date: Fri, 02 Jan 2026 01:28:07 GMT
Connection: close
Open service 76.223.57.73:443 · api.staging.aqvc.com
2026-01-02 01:28
HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=xOZN5nrE2aH1E4CTErU4jgqrXcgOumahHbouMjA3Ax0%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767317287"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=xOZN5nrE2aH1E4CTErU4jgqrXcgOumahHbouMjA3Ax0%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767317287"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 2ed1c0d4-33aa-2ce6-f2ed-bf8352ad46fd
X-Runtime: 0.007256
Date: Fri, 02 Jan 2026 01:28:07 GMT
Connection: close
Open service 13.248.213.92:80 · api.staging.aqvc.com
2026-01-02 01:28
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Content-Type: text/html; charset=utf-8
Location: https://api.staging.aqvc.com/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=pqZpXIDnL9CcSS1xDMIIFar4AJzZr1lWk66GaKC91Lw%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767317291"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=pqZpXIDnL9CcSS1xDMIIFar4AJzZr1lWk66GaKC91Lw%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767317291"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
Date: Fri, 02 Jan 2026 01:28:11 GMT
Connection: close
Open service 3.33.241.96:80 · api.staging.aqvc.com
2026-01-02 01:28
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Content-Type: text/html; charset=utf-8
Location: https://api.staging.aqvc.com/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=jOk5zpDDZnAw80f4oLuO%2BgIBG4hjrNvE5r6fLtuzPRg%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767317290"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=jOk5zpDDZnAw80f4oLuO%2BgIBG4hjrNvE5r6fLtuzPRg%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767317290"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
Date: Fri, 02 Jan 2026 01:28:10 GMT
Connection: close
Open service 3.33.241.96:443 · api.staging.aqvc.com
2026-01-02 01:28
HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=0SXlL5iFBHd0EDZLUhG2YcunrJGIeAp8GRvZ3OqBn4M%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767317288"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=0SXlL5iFBHd0EDZLUhG2YcunrJGIeAp8GRvZ3OqBn4M%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767317288"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 51e7e087-3895-12f6-e1ab-191630cfb9a4
X-Runtime: 0.001359
Date: Fri, 02 Jan 2026 01:28:08 GMT
Connection: close
Open service 13.248.213.92:443 · api.staging.aqvc.com
2026-01-02 01:28
HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=0SXlL5iFBHd0EDZLUhG2YcunrJGIeAp8GRvZ3OqBn4M%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767317288"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=0SXlL5iFBHd0EDZLUhG2YcunrJGIeAp8GRvZ3OqBn4M%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767317288"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 7d36f64f-80e0-8d9e-13b4-e436b05a5618
X-Runtime: 0.002030
Date: Fri, 02 Jan 2026 01:28:08 GMT
Connection: close
Open service 76.223.57.73:80 · api.staging.aqvc.com
2026-01-02 01:28
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Content-Type: text/html; charset=utf-8
Location: https://api.staging.aqvc.com/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=jOk5zpDDZnAw80f4oLuO%2BgIBG4hjrNvE5r6fLtuzPRg%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767317290"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=jOk5zpDDZnAw80f4oLuO%2BgIBG4hjrNvE5r6fLtuzPRg%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767317290"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
Date: Fri, 02 Jan 2026 01:28:10 GMT
Connection: close
Open service 15.197.149.68:443 · api.staging.aqvc.com
2025-12-26 16:39
HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=4VvnwcIgl6we2Wc0eDbwe5q3TVNiMINNvIZbPyLh5lk%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766767149"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=4VvnwcIgl6we2Wc0eDbwe5q3TVNiMINNvIZbPyLh5lk%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766767149"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 483f9b7d-2638-f1a5-b840-4ad7663d7b58
X-Runtime: 0.002001
Date: Fri, 26 Dec 2025 16:39:09 GMT
Connection: close
Open service 15.197.149.68:443 · api.staging.aqvc.com
2025-12-22 13:39
HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=IJI1clE5P3vg4atkWzaL63dhrTz1I85LU0IHVtaoUqI%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766410762"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=IJI1clE5P3vg4atkWzaL63dhrTz1I85LU0IHVtaoUqI%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766410762"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: b8e93270-6eec-08a1-49f1-da26d9c78c11
X-Runtime: 0.008016
Date: Mon, 22 Dec 2025 13:39:22 GMT
Connection: close
Open service 15.197.149.68:443 · api.staging.aqvc.com
2025-12-20 11:22
HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=j%2FurOw%2F2hssSk9wswaQmXiWgEFQU1OVv9mwPXP3f0SE%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766229773"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=j%2FurOw%2F2hssSk9wswaQmXiWgEFQU1OVv9mwPXP3f0SE%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766229773"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: d3b43765-2749-b3ab-131d-a82c2b9b933b
X-Runtime: 0.006844
Date: Sat, 20 Dec 2025 11:22:53 GMT
Connection: close
Open service 15.197.149.68:443 · api.staging.aqvc.com
2025-12-19 10:23
HTTP/1.1 404 Not Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=e7XCHngc7IvI8mOvrjC8MVVp14Sx%2Fvr2V0HuLZGBLdc%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766139820"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=e7XCHngc7IvI8mOvrjC8MVVp14Sx%2Fvr2V0HuLZGBLdc%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766139820"
Server: Heroku
Strict-Transport-Security: max-age=63072000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Request-Id: 8a162770-90c2-2f5c-1335-12740454dd8a
X-Runtime: 0.001589
Date: Fri, 19 Dec 2025 10:23:40 GMT
Connection: close