Heroku
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ee6fa6d9866f42bbb83cac51f32be31ecde1994a
GraphQL introspection enabled at /graphql Types: 291 (by kind: ENUM: 40, INPUT_OBJECT: 61, OBJECT: 180, SCALAR: 10) Operations: - Query: Query | fields: agreement, agreementEvents, getAgreementAuthor, getTeamAgreementByPublicId, me - Mutation: Mutation | fields: bankId, otp, teams, truid, zealId Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Open service 76.223.11.49:443 · api.zigned.io
2026-01-09 10:46
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Access-Control-Allow-Origin, Accept, Content-Type, authorization, content-length, x-requested-with, origin, token, x-zigned-verify, x-refresh-token, x-zigned-api-key, apollographql-client-name, apollographql-client-version, x-zigned-proxy-user-id
Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT
Access-Control-Allow-Origin: undefined
Access-Control-Expose-Headers: x-refresh-token
Access-Control-Expose-Headers: token
Allow: POST, GET, OPTIONS
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 10:46:52 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=X8id0JwyJoLw17gnEJC9K9IUEfXfp5b9mq0LV2W3o%2FA%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767955612"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=X8id0JwyJoLw17gnEJC9K9IUEfXfp5b9mq0LV2W3o%2FA%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767955612"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 76.223.11.49:443 · api.zigned.io
2026-01-02 04:21
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Access-Control-Allow-Origin, Accept, Content-Type, authorization, content-length, x-requested-with, origin, token, x-zigned-verify, x-refresh-token, x-zigned-api-key, apollographql-client-name, apollographql-client-version, x-zigned-proxy-user-id
Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT
Access-Control-Allow-Origin: undefined
Access-Control-Expose-Headers: x-refresh-token
Access-Control-Expose-Headers: token
Allow: POST, GET, OPTIONS
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 04:21:36 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=XITWQuw6OPx%2Bv282EY%2BnomYaqRRrTGX91v3%2FuRu5mQs%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767327696"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=XITWQuw6OPx%2Bv282EY%2BnomYaqRRrTGX91v3%2FuRu5mQs%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767327696"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 76.223.11.49:443 · api.zigned.io
2025-12-22 19:16
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Access-Control-Allow-Origin, Accept, Content-Type, authorization, content-length, x-requested-with, origin, token, x-zigned-verify, x-refresh-token, x-zigned-api-key, apollographql-client-name, apollographql-client-version, x-zigned-proxy-user-id
Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT
Access-Control-Allow-Origin: undefined
Access-Control-Expose-Headers: x-refresh-token
Access-Control-Expose-Headers: token
Allow: POST, GET, OPTIONS
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 19:16:51 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=a5wAoq5C85ZmOOLAY3rXKTtunTHMqlwd3DlslvnK3ys%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766431011"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=a5wAoq5C85ZmOOLAY3rXKTtunTHMqlwd3DlslvnK3ys%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766431011"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 76.223.11.49:443 · api.zigned.io
2025-12-20 18:41
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Access-Control-Allow-Origin, Accept, Content-Type, authorization, content-length, x-requested-with, origin, token, x-zigned-verify, x-refresh-token, x-zigned-api-key, apollographql-client-name, apollographql-client-version, x-zigned-proxy-user-id
Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT
Access-Control-Allow-Origin: undefined
Access-Control-Expose-Headers: x-refresh-token
Access-Control-Expose-Headers: token
Allow: POST, GET, OPTIONS
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 18:41:09 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=kSb2zxsUPT4Ph9VQYdpxVNJPM4wghvAbbka6sDU6Vrw%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766256069"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=kSb2zxsUPT4Ph9VQYdpxVNJPM4wghvAbbka6sDU6Vrw%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766256069"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 76.223.11.49:443 · api.zigned.io
2025-12-19 01:36
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Access-Control-Allow-Origin, Accept, Content-Type, authorization, content-length, x-requested-with, origin, token, x-zigned-verify, x-refresh-token, x-zigned-api-key, apollographql-client-name, apollographql-client-version, x-zigned-proxy-user-id
Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT
Access-Control-Allow-Origin: undefined
Access-Control-Expose-Headers: x-refresh-token
Access-Control-Expose-Headers: token
Allow: POST, GET, OPTIONS
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 01:36:15 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=7qtVZkTmo%2BfZulVEBo7sRPwx2oSfXicpCkaqiBEH7ws%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766108175"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=7qtVZkTmo%2BfZulVEBo7sRPwx2oSfXicpCkaqiBEH7ws%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766108175"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>