Heroku
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3213851d1aa5f031308ee72b13895a1bc6d75d44c
GraphQL introspection enabled at /graphql Types: 85 (by kind: ENUM: 21, INPUT_OBJECT: 26, OBJECT: 31, SCALAR: 7) Operations: - Query: Query | fields: activeWorkoutSession, adminExercise, adminExercises, chatMessageCount, chatMessages - Mutation: Mutation | fields: addExerciseAlias, addExerciseToTrainingPlan, completeOnboarding, createExercise, createTrainingPlan Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c2ca3dc0cc1cfe04af8b23dbff3b1e528161ee2e
GraphQL introspection enabled at /graphql Types: 79 (by kind: ENUM: 21, INPUT_OBJECT: 21, OBJECT: 30, SCALAR: 7) Operations: - Query: Query | fields: activeWorkoutSession, chatMessageCount, chatMessages, currentActiveWorkoutSession, exercise - Mutation: Mutation | fields: addExerciseToTrainingPlan, completeOnboarding, createTrainingPlan, createWorkoutSession, deleteTrainingPlan Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
GraphQL introspection enabled at /graphql
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3213851d1aa5f031308ee72b13895a1bc6d75d44c
GraphQL introspection enabled at /graphql Types: 85 (by kind: ENUM: 21, INPUT_OBJECT: 26, OBJECT: 31, SCALAR: 7) Operations: - Query: Query | fields: activeWorkoutSession, adminExercise, adminExercises, chatMessageCount, chatMessages - Mutation: Mutation | fields: addExerciseAlias, addExerciseToTrainingPlan, completeOnboarding, createExercise, createTrainingPlan Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c2ca3dc0cc1cfe04af8b23dbff3b1e528161ee2e
GraphQL introspection enabled at /graphql Types: 79 (by kind: ENUM: 21, INPUT_OBJECT: 21, OBJECT: 30, SCALAR: 7) Operations: - Query: Query | fields: activeWorkoutSession, chatMessageCount, chatMessages, currentActiveWorkoutSession, exercise - Mutation: Mutation | fields: addExerciseToTrainingPlan, completeOnboarding, createTrainingPlan, createWorkoutSession, deleteTrainingPlan Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Open service 75.2.43.161:443 · api.trnrr.com
2026-01-09 23:21
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Fri, 09 Jan 2026 23:21:04 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Fo%2Bm8XCXKDArX3z2MWCZnU9cwetnk59zI6eBR2%2Fnt5s%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768000864"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Fo%2Bm8XCXKDArX3z2MWCZnU9cwetnk59zI6eBR2%2Fnt5s%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768000864"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 15.197.129.158:80 · api.trnrr.com
2026-01-09 23:21
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Fri, 09 Jan 2026 23:22:03 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=cWQrO%2BAml%2Bz4sK0Bn%2FUOXnxD6TaY%2BYZUwRWwpWL%2Fmns%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768000923"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=cWQrO%2BAml%2Bz4sK0Bn%2FUOXnxD6TaY%2BYZUwRWwpWL%2Fmns%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768000923"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 15.197.129.158:80 · api.trnrr.com
2026-01-02 12:38
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Fri, 02 Jan 2026 12:38:19 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=yGH9WCDZRu0gZ3p9NFtDzS1D6m2DNZONSsgmrFngjEk%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767357499"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=yGH9WCDZRu0gZ3p9NFtDzS1D6m2DNZONSsgmrFngjEk%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767357499"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 75.2.43.161:443 · api.trnrr.com
2026-01-02 12:38
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Fri, 02 Jan 2026 12:38:15 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=FF85%2B%2FBiV4NBo%2BoGg5BNLQChLCnl8V%2B80uBW9GMjnCA%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767357495"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=FF85%2B%2FBiV4NBo%2BoGg5BNLQChLCnl8V%2B80uBW9GMjnCA%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767357495"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 75.2.43.161:443 · api.trnrr.com
2025-12-22 18:03
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Mon, 22 Dec 2025 18:03:48 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=6Etn48c076Xq403Jxiwv9I5dECuyy%2FjFBe2lEdI1bpo%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766426628"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=6Etn48c076Xq403Jxiwv9I5dECuyy%2FjFBe2lEdI1bpo%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766426628"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 15.197.129.158:80 · api.trnrr.com
2025-12-22 18:03
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Mon, 22 Dec 2025 18:03:50 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=QQxAUWX7MEGj8lRON93kfwn6NFrd6lLXadB5QnFxqH0%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766426630"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=QQxAUWX7MEGj8lRON93kfwn6NFrd6lLXadB5QnFxqH0%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766426630"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 75.2.43.161:443 · api.trnrr.com
2025-12-20 20:34
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Sat, 20 Dec 2025 20:34:32 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=p1nfSfqf1im1RD%2BAjG4RKAR7yhGZ07u%2BGyLCSt%2BbgeY%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766262872"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=p1nfSfqf1im1RD%2BAjG4RKAR7yhGZ07u%2BGyLCSt%2BbgeY%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766262872"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 15.197.129.158:80 · api.trnrr.com
2025-12-20 20:34
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Sat, 20 Dec 2025 20:34:35 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=5eUWNhxDCND0TbkGVowHB8J%2FFkpyO9zGvRgyDsYpwZI%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766262875"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=5eUWNhxDCND0TbkGVowHB8J%2FFkpyO9zGvRgyDsYpwZI%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766262875"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}