Vercel
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6a65d8aef520006bd45a2cf612582c275257f7da1
GraphQL introspection enabled at /api/graphql Types: 379 (by kind: ENUM: 26, INPUT_OBJECT: 27, OBJECT: 319, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customers, organization, user, webhooks - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6a4e5c25739f61d8502244f49aa61522d668d8159
GraphQL introspection enabled at /api/graphql Types: 378 (by kind: ENUM: 25, INPUT_OBJECT: 27, OBJECT: 319, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customers, organization, user, webhooks - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6ad480f8f4b16889de83752814a4174951f0da9c1
GraphQL introspection enabled at /api/graphql Types: 372 (by kind: ENUM: 23, INPUT_OBJECT: 27, OBJECT: 315, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customers, organization, user, webhooks - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d67d4ec50e29df55fe63590576983a944078e27028
GraphQL introspection enabled at /api/graphql Types: 369 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 313, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d67d4ec50e29df55fe63590576983a9440eeab39f6
GraphQL introspection enabled at /api/graphql Types: 369 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 313, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, skip, specifiedBy (total: 4) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d616071e5e9c83ccce2456d4a65123c970218a77a6
GraphQL introspection enabled at /api/graphql Types: 368 (by kind: ENUM: 22, INPUT_OBJECT: 27, OBJECT: 312, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, skip, specifiedBy (total: 4) Readable stores: 0
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d671dea0f1f788f073a14195e1d1a7fdf5aca8af61
GraphQL introspection enabled at /api/graphql Types: 362 (by kind: ENUM: 22, INPUT_OBJECT: 24, OBJECT: 309, SCALAR: 7) Operations: - Query: Query | fields: creditApplication, customer, customers, organization, user - Mutation: Mutation | fields: onboardingCreatePayoutMethod, sendTwoFactorVerificationCodeViaSMS, signup, updateOnboardingInformation, verifyTwoFactorSMSAuthCode Directives: deprecated, include, skip, specifiedBy (total: 4) Readable stores: 0
Open service 66.33.60.34:443 · data.nickelpayments.com
2026-01-08 23:29
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Thu, 08 Jan 2026 23:29:26 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: sin1::vcffh-1767914965843-c57bc9ff142e Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.34:443 · data.nickelpayments.com
2026-01-01 23:27
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Thu, 01 Jan 2026 23:27:36 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: sin1::4nctx-1767310056284-9390e566caf1 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.34:443 · data.nickelpayments.com
2025-12-30 07:04
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Tue, 30 Dec 2025 07:04:24 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: bom1::9q24z-1767078264659-88c6da3bc79d Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.130:443 · data.nickelpayments.com
2025-12-22 08:58
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Mon, 22 Dec 2025 08:58:50 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: iad1::bcb42-1766393930637-48f60fb59f8b Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.129:80 · data.nickelpayments.com
2025-12-22 08:58
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://data.nickelpayments.com/ Refresh: 0;url=https://data.nickelpayments.com/ server: Vercel Redirecting...
Open service 66.33.60.130:80 · data.nickelpayments.com
2025-12-22 08:58
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://data.nickelpayments.com/ Refresh: 0;url=https://data.nickelpayments.com/ server: Vercel Redirecting...
Open service 66.33.60.129:443 · data.nickelpayments.com
2025-12-22 08:58
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Mon, 22 Dec 2025 08:58:50 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: iad1::9npbq-1766393930515-0df6310e69b3 Connection: close Transfer-Encoding: chunked Redirecting...
Open service 66.33.60.34:443 · data.nickelpayments.com
2025-12-20 12:15
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Sat, 20 Dec 2025 12:15:37 GMT Location: https://nickel.com/ Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Id: sin1::c2v9r-1766232937017-453277642d64 Connection: close Transfer-Encoding: chunked Redirecting...