Heroku
tcp/443 tcp/80
Vercel
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa32fc881f1af933b732cf9274cfc92751894a086a8
GraphQL introspection enabled at /graphql Types: 102 (by kind: ENUM: 10, INPUT_OBJECT: 21, INTERFACE: 1, OBJECT: 63, SCALAR: 7) Operations: - Query: Query | fields: entries, events, me, node, users - Mutation: Mutation | fields: googleLogin, requestPasswordResetCode, resetPasswordWithCode, userLogin, userLogout - Subscription: Subscription | fields: notifications Directives: deprecated, include, skip, specifiedBy (total: 4)
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa32fc881f1af933b732cf9274cfc92751894a086a8
GraphQL introspection enabled at /graphql Types: 102 (by kind: ENUM: 10, INPUT_OBJECT: 21, INTERFACE: 1, OBJECT: 63, SCALAR: 7) Operations: - Query: Query | fields: entries, events, me, node, users - Mutation: Mutation | fields: googleLogin, requestPasswordResetCode, resetPasswordWithCode, userLogin, userLogout - Subscription: Subscription | fields: notifications Directives: deprecated, include, skip, specifiedBy (total: 4)
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d676834eaaf80e019a1f8ae30f368dab23843c6b91
GraphQL introspection enabled at /api/graphql Types: 102 (by kind: ENUM: 10, INPUT_OBJECT: 21, INTERFACE: 1, OBJECT: 63, SCALAR: 7) Operations: - Query: Query | fields: entries, events, me, node, users - Mutation: Mutation | fields: googleLogin, requestPasswordResetCode, resetPasswordWithCode, userLogin, userLogout - Subscription: Subscription | fields: notifications Directives: deprecated, include, skip, specifiedBy (total: 4)
Open service 216.150.1.1:80 · cosplaypro.app
2026-01-12 06:26
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://cosplaypro.app/ Refresh: 0;url=https://cosplaypro.app/ server: Vercel Redirecting...
Open service 216.150.1.1:443 · cosplaypro.app
2026-01-12 06:26
HTTP/1.1 200 OK Age: 0 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Date: Mon, 12 Jan 2026 06:26:15 GMT Link: </_next/static/media/e807dee2426166ad-s.p.woff2?dpl=dpl_48PyVrRtTCCmjis649rQSGN4G4N2>; rel=preload; as="font"; crossorigin=""; type="font/woff2" Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch X-Matched-Path: / X-Powered-By: Next.js X-Vercel-Cache: MISS X-Vercel-Id: lhr1::iad1::pwhbh-1768199175047-d9cb57dafae3 Connection: close Transfer-Encoding: chunked
Open service 13.248.213.92:443 · api.cosplaypro.app
2026-01-09 13:24
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Fri, 09 Jan 2026 13:24:14 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=F6IwAMwgej688PgjbxAq7t%2F6xw73rb6BSOrG3AkkWFk%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767965054"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=F6IwAMwgej688PgjbxAq7t%2F6xw73rb6BSOrG3AkkWFk%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767965054"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 3.33.241.96:80 · api.cosplaypro.app
2026-01-09 07:11
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Fri, 09 Jan 2026 07:12:55 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=S9ZpJc9m8tynI7%2FSxeYHk8VbICjlLnjb4Bxkoo7ia4Y%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767942776"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=S9ZpJc9m8tynI7%2FSxeYHk8VbICjlLnjb4Bxkoo7ia4Y%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767942776"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 216.150.1.1:443 · cosplaypro.app
2026-01-08 19:48
HTTP/1.1 200 OK Age: 0 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Date: Thu, 08 Jan 2026 19:48:33 GMT Link: </_next/static/media/e807dee2426166ad-s.p.woff2?dpl=dpl_48PyVrRtTCCmjis649rQSGN4G4N2>; rel=preload; as="font"; crossorigin=""; type="font/woff2" Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch X-Matched-Path: / X-Powered-By: Next.js X-Vercel-Cache: MISS X-Vercel-Id: lhr1::iad1::b446h-1767901713703-cf6f14ef2d0f Connection: close Transfer-Encoding: chunked
Open service 3.33.241.96:80 · api.cosplaypro.app
2026-01-02 14:39
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Fri, 02 Jan 2026 14:39:53 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=xJPyglp3p4OoAgL2rsqq%2F9cDxxEnuDipMNUT3gdmUIU%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767364794"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=xJPyglp3p4OoAgL2rsqq%2F9cDxxEnuDipMNUT3gdmUIU%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767364794"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 13.248.213.92:443 · api.cosplaypro.app
2026-01-02 07:23
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Fri, 02 Jan 2026 07:23:08 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=NHJGfKvn87yvr8iM537SnvgQIWJjDhRVJe2zT%2BmfOgE%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767338588"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=NHJGfKvn87yvr8iM537SnvgQIWJjDhRVJe2zT%2BmfOgE%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767338588"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 216.150.1.1:443 · cosplaypro.app
2026-01-01 20:19
HTTP/1.1 200 OK Age: 0 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Date: Thu, 01 Jan 2026 20:19:17 GMT Link: </_next/static/media/e807dee2426166ad-s.p.woff2?dpl=dpl_48PyVrRtTCCmjis649rQSGN4G4N2>; rel=preload; as="font"; crossorigin=""; type="font/woff2" Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch X-Matched-Path: / X-Powered-By: Next.js X-Vercel-Cache: MISS X-Vercel-Id: fra1::iad1::wzsvf-1767298757743-f762db16bd07 Connection: close Transfer-Encoding: chunked
Open service 13.248.213.92:443 · api.cosplaypro.app
2025-12-30 09:23
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Tue, 30 Dec 2025 09:23:21 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=aM3nRz1VZbaAQbkb8jrUzVBkVmOOxtFKRiprciff5L0%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767086602"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=aM3nRz1VZbaAQbkb8jrUzVBkVmOOxtFKRiprciff5L0%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767086602"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 216.150.1.1:443 · cosplaypro.app
2025-12-30 04:27
HTTP/1.1 200 OK Age: 0 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Date: Tue, 30 Dec 2025 04:27:59 GMT Link: </_next/static/media/e807dee2426166ad-s.p.woff2?dpl=dpl_48PyVrRtTCCmjis649rQSGN4G4N2>; rel=preload; as="font"; crossorigin=""; type="font/woff2" Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch X-Matched-Path: / X-Powered-By: Next.js X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::mxms4-1767068879321-ff3c33b5deb7 Connection: close Transfer-Encoding: chunked
Open service 13.248.213.92:443 · api.cosplaypro.app
2025-12-23 02:57
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Tue, 23 Dec 2025 02:57:42 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=lFtNzRuvbGdvBq6z94ncGhIir2bjxF14c7XcgElt75I%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766458663"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=lFtNzRuvbGdvBq6z94ncGhIir2bjxF14c7XcgElt75I%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766458663"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 3.33.241.96:80 · api.cosplaypro.app
2025-12-23 02:07
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Tue, 23 Dec 2025 02:08:00 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Znu0NW4cK49mH4akaKzyuUAgBphOiSfAIQxeuUAnP9A%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766455680"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Znu0NW4cK49mH4akaKzyuUAgBphOiSfAIQxeuUAnP9A%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766455680"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 216.150.1.1:443 · cosplaypro.app
2025-12-22 05:16
HTTP/1.1 200 OK Age: 0 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Date: Mon, 22 Dec 2025 05:16:34 GMT Link: </_next/static/media/e807dee2426166ad-s.p.woff2?dpl=dpl_48PyVrRtTCCmjis649rQSGN4G4N2>; rel=preload; as="font"; crossorigin=""; type="font/woff2" Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch X-Matched-Path: / X-Powered-By: Next.js X-Vercel-Cache: MISS X-Vercel-Id: sin1::iad1::g5nfd-1766380594713-21709c7c472c Connection: close Transfer-Encoding: chunked
Open service 13.248.213.92:443 · api.cosplaypro.app
2025-12-20 18:01
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Sat, 20 Dec 2025 18:01:51 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=WVODhTEoutm5QZpYUA2gYU3W4xLdLsyqkGMk9wNkX%2FE%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766253712"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=WVODhTEoutm5QZpYUA2gYU3W4xLdLsyqkGMk9wNkX%2FE%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766253712"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 3.33.241.96:80 · api.cosplaypro.app
2025-12-20 14:35
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Sat, 20 Dec 2025 14:35:15 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=xjGOCLc2dXeZyB3c%2FePvGVpA3r%2BK5h6cD%2BbnMfxd7gw%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766241315"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=xjGOCLc2dXeZyB3c%2FePvGVpA3r%2BK5h6cD%2BbnMfxd7gw%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766241315"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 216.150.1.1:443 · cosplaypro.app
2025-12-20 05:19
HTTP/1.1 200 OK Age: 0 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Date: Sat, 20 Dec 2025 05:19:28 GMT Link: </_next/static/media/e807dee2426166ad-s.p.woff2?dpl=dpl_48PyVrRtTCCmjis649rQSGN4G4N2>; rel=preload; as="font"; crossorigin=""; type="font/woff2" Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch X-Matched-Path: / X-Powered-By: Next.js X-Vercel-Cache: MISS X-Vercel-Id: fra1::iad1::9dvq5-1766207967953-52887bb1ec04 Connection: close Transfer-Encoding: chunked
Open service 216.150.1.1:443 · cosplaypro.app
2025-12-19 01:00
HTTP/1.1 200 OK Age: 0 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Date: Fri, 19 Dec 2025 01:00:51 GMT Link: </_next/static/media/e807dee2426166ad-s.p.woff2?dpl=dpl_48PyVrRtTCCmjis649rQSGN4G4N2>; rel=preload; as="font"; crossorigin=""; type="font/woff2" Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch X-Matched-Path: / X-Powered-By: Next.js X-Vercel-Cache: MISS X-Vercel-Id: fra1::iad1::9dzjh-1766106051377-0cacc14a8428 Connection: close Transfer-Encoding: chunked
Open service 216.150.1.1:80 · cosplaypro.app
2025-12-19 01:00
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://cosplaypro.app/ Refresh: 0;url=https://cosplaypro.app/ server: Vercel Redirecting...