Heroku
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa32061ca5fee69eb6d4564c03682f3eef8ab8c3b58
GraphQL introspection enabled at /graphql Types: 154 (by kind: ENUM: 19, INPUT_OBJECT: 67, OBJECT: 63, SCALAR: 5) Operations: - Query: Query | fields: ReferringProvidersDataFromAdmin, adminInfo, careProviderInfo, checkLeadPatientExistFromAdmin, checkNpsIsCompleted - Mutation: Mutation | fields: cancelAppointment, checkPayersEligibility, checkPayersEligibilityV2, completeFormFromCareProvider, completeFormFromPatient Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa37bda0683df38ed818f30fb6acdfe7f5e2cb2778a
GraphQL introspection enabled at /graphql Types: 151 (by kind: ENUM: 19, INPUT_OBJECT: 64, OBJECT: 63, SCALAR: 5) Operations: - Query: Query | fields: ReferringProvidersDataFromAdmin, adminInfo, careProviderInfo, checkLeadPatientExistFromAdmin, checkNpsIsCompleted - Mutation: Mutation | fields: cancelAppointment, checkPayersEligibility, checkPayersEligibilityV2, completeGAD, completeIsi Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa302af5d9011c6b654e85e3af391c1bb737940635b
GraphQL introspection enabled at /graphql Types: 149 (by kind: ENUM: 19, INPUT_OBJECT: 62, OBJECT: 63, SCALAR: 5) Operations: - Query: Query | fields: ReferringProvidersDataFromAdmin, adminInfo, careProviderInfo, checkLeadPatientExistFromAdmin, checkNpsIsCompleted - Mutation: Mutation | fields: cancelAppointment, checkPayersEligibility, checkPayersEligibilityV2, completeGAD, completeIsi Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33197657a2c36602aee55527566f116f51371df41
GraphQL introspection enabled at /graphql Types: 144 (by kind: ENUM: 18, INPUT_OBJECT: 60, OBJECT: 61, SCALAR: 5) Operations: - Query: Query | fields: ReferringProvidersDataFromAdmin, adminInfo, careProviderInfo, checkLeadPatientExistFromAdmin, checkNpsIsCompleted - Mutation: Mutation | fields: cancelAppointment, checkPayersEligibility, checkPayersEligibilityV2, completeGAD, completeIsi Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ca0e38922cf03c620f3bf93d1adb63cd46985169
GraphQL introspection enabled at /graphql Types: 143 (by kind: ENUM: 18, INPUT_OBJECT: 60, OBJECT: 60, SCALAR: 5) Operations: - Query: Query | fields: ReferringProvidersDataFromAdmin, adminInfo, careProviderInfo, checkLeadPatientExistFromAdmin, checkNpsIsCompleted - Mutation: Mutation | fields: cancelAppointment, checkPayersEligibility, checkPayersEligibilityV2, completeGAD, completeIsi Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa335c2240f79eeba1dab28dd8167aebd295c422a15
GraphQL introspection enabled at /graphql Types: 135 (by kind: ENUM: 16, INPUT_OBJECT: 58, OBJECT: 56, SCALAR: 5) Operations: - Query: Query | fields: adminInfo, careProviderInfo, checkLeadPatientExistFromAdmin, checkNpsIsCompleted, checkPatientExist - Mutation: Mutation | fields: cancelAppointment, checkPayersEligibility, checkPayersEligibilityV2, completeGAD, completeIsi Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dcc7bbb3b7e304b1afb86b65521b3b0542536b91
GraphQL introspection enabled at /graphql Types: 133 (by kind: ENUM: 16, INPUT_OBJECT: 56, OBJECT: 56, SCALAR: 5) Operations: - Query: Query | fields: adminInfo, careProviderInfo, checkLeadPatientExistFromAdmin, checkNpsIsCompleted, checkPatientExist - Mutation: Mutation | fields: cancelAppointment, checkPayersEligibility, checkPayersEligibilityV2, completeGAD, completeIsi Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ef707c4e81ae34be3ce23d2a64766d9ed120cbca
GraphQL introspection enabled at /graphql Types: 129 (by kind: ENUM: 16, INPUT_OBJECT: 53, OBJECT: 55, SCALAR: 5) Operations: - Query: Query | fields: adminInfo, careProviderInfo, checkLeadPatientExistFromAdmin, checkNpsIsCompleted, checkPatientExist - Mutation: Mutation | fields: cancelAppointment, checkPayersEligibility, checkPayersEligibilityV2, completeGAD, completeIsi Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa32061ca5fee69eb6d4564c03682f3eef8ab8c3b58
GraphQL introspection enabled at /graphql Types: 154 (by kind: ENUM: 19, INPUT_OBJECT: 67, OBJECT: 63, SCALAR: 5) Operations: - Query: Query | fields: ReferringProvidersDataFromAdmin, adminInfo, careProviderInfo, checkLeadPatientExistFromAdmin, checkNpsIsCompleted - Mutation: Mutation | fields: cancelAppointment, checkPayersEligibility, checkPayersEligibilityV2, completeFormFromCareProvider, completeFormFromPatient Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa37bda0683df38ed818f30fb6acdfe7f5e2cb2778a
GraphQL introspection enabled at /graphql Types: 151 (by kind: ENUM: 19, INPUT_OBJECT: 64, OBJECT: 63, SCALAR: 5) Operations: - Query: Query | fields: ReferringProvidersDataFromAdmin, adminInfo, careProviderInfo, checkLeadPatientExistFromAdmin, checkNpsIsCompleted - Mutation: Mutation | fields: cancelAppointment, checkPayersEligibility, checkPayersEligibilityV2, completeGAD, completeIsi Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa302af5d9011c6b654e85e3af391c1bb737940635b
GraphQL introspection enabled at /graphql Types: 149 (by kind: ENUM: 19, INPUT_OBJECT: 62, OBJECT: 63, SCALAR: 5) Operations: - Query: Query | fields: ReferringProvidersDataFromAdmin, adminInfo, careProviderInfo, checkLeadPatientExistFromAdmin, checkNpsIsCompleted - Mutation: Mutation | fields: cancelAppointment, checkPayersEligibility, checkPayersEligibilityV2, completeGAD, completeIsi Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ca0e38922cf03c620f3bf93d1adb63cd46985169
GraphQL introspection enabled at /graphql Types: 143 (by kind: ENUM: 18, INPUT_OBJECT: 60, OBJECT: 60, SCALAR: 5) Operations: - Query: Query | fields: ReferringProvidersDataFromAdmin, adminInfo, careProviderInfo, checkLeadPatientExistFromAdmin, checkNpsIsCompleted - Mutation: Mutation | fields: cancelAppointment, checkPayersEligibility, checkPayersEligibilityV2, completeGAD, completeIsi Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dcc7bbb3b7e304b1afb86b65521b3b0542536b91
GraphQL introspection enabled at /graphql Types: 133 (by kind: ENUM: 16, INPUT_OBJECT: 56, OBJECT: 56, SCALAR: 5) Operations: - Query: Query | fields: adminInfo, careProviderInfo, checkLeadPatientExistFromAdmin, checkNpsIsCompleted, checkPatientExist - Mutation: Mutation | fields: cancelAppointment, checkPayersEligibility, checkPayersEligibilityV2, completeGAD, completeIsi Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3ef707c4e81ae34be3ce23d2a64766d9ed120cbca
GraphQL introspection enabled at /graphql Types: 129 (by kind: ENUM: 16, INPUT_OBJECT: 53, OBJECT: 55, SCALAR: 5) Operations: - Query: Query | fields: adminInfo, careProviderInfo, checkLeadPatientExistFromAdmin, checkNpsIsCompleted, checkPatientExist - Mutation: Mutation | fields: cancelAppointment, checkPayersEligibility, checkPayersEligibilityV2, completeGAD, completeIsi Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Open service 75.2.60.68:80 · dev.api.moona.health
2026-01-09 05:28
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 12
Content-Security-Policy: img-src 'self' data: apollo-server-landing-page.cdn.apollographql.com;script-src 'self' https: 'unsafe-inline';manifest-src 'self' apollo-server-landing-page.cdn.apollographql.com;frame-src 'self' sandbox.embed.apollographql.com;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 09 Jan 2026 05:29:33 GMT
Etag: W/"c-Lve95gjOVATpfV8EL5X4nxwjKHE"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Cvk0vdp9hAsQhqbhHC%2FERQKvbskHOnpmS1jUhRLMUXA%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767936573"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Cvk0vdp9hAsQhqbhHC%2FERQKvbskHOnpmS1jUhRLMUXA%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767936573"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close
Hello World!
Open service 75.2.60.68:443 · dev.api.moona.health
2026-01-09 01:50
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 12
Content-Security-Policy: img-src 'self' data: apollo-server-landing-page.cdn.apollographql.com;script-src 'self' https: 'unsafe-inline';manifest-src 'self' apollo-server-landing-page.cdn.apollographql.com;frame-src 'self' sandbox.embed.apollographql.com;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 09 Jan 2026 01:50:49 GMT
Etag: W/"c-Lve95gjOVATpfV8EL5X4nxwjKHE"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=HfarxgF17%2BmFs%2FjHiBahWF6vUnBJ66R8aeZ5M93K454%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767923449"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=HfarxgF17%2BmFs%2FjHiBahWF6vUnBJ66R8aeZ5M93K454%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767923449"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close
Hello World!
Open service 75.2.60.68:80 · dev.api.moona.health
2026-01-02 05:06
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 12
Content-Security-Policy: img-src 'self' data: apollo-server-landing-page.cdn.apollographql.com;script-src 'self' https: 'unsafe-inline';manifest-src 'self' apollo-server-landing-page.cdn.apollographql.com;frame-src 'self' sandbox.embed.apollographql.com;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 02 Jan 2026 05:06:45 GMT
Etag: W/"c-Lve95gjOVATpfV8EL5X4nxwjKHE"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=iSfT8Gr%2B2yiDnuOKhoqg1ILSdbFrpqPZKb11yDIcZmI%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767330405"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=iSfT8Gr%2B2yiDnuOKhoqg1ILSdbFrpqPZKb11yDIcZmI%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767330405"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close
Hello World!
Open service 75.2.60.68:443 · dev.api.moona.health
2026-01-01 19:47
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 12
Content-Security-Policy: img-src 'self' data: apollo-server-landing-page.cdn.apollographql.com;script-src 'self' https: 'unsafe-inline';manifest-src 'self' apollo-server-landing-page.cdn.apollographql.com;frame-src 'self' sandbox.embed.apollographql.com;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Thu, 01 Jan 2026 19:47:15 GMT
Etag: W/"c-Lve95gjOVATpfV8EL5X4nxwjKHE"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Yv%2FYW09CpsLbOPkKsrikltfZ4V0F%2B%2Bq7Sazvdnm0zxU%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767296835"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Yv%2FYW09CpsLbOPkKsrikltfZ4V0F%2B%2Bq7Sazvdnm0zxU%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767296835"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close
Hello World!
Open service 75.2.60.68:443 · dev.api.moona.health
2025-12-22 20:12
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 12
Content-Security-Policy: img-src 'self' data: apollo-server-landing-page.cdn.apollographql.com;script-src 'self' https: 'unsafe-inline';manifest-src 'self' apollo-server-landing-page.cdn.apollographql.com;frame-src 'self' sandbox.embed.apollographql.com;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Mon, 22 Dec 2025 20:12:35 GMT
Etag: W/"c-Lve95gjOVATpfV8EL5X4nxwjKHE"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ts4MB76pEeMaRMJ1jEwdhExw3E%2FJD2m6s9QN30NcAfE%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766434355"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ts4MB76pEeMaRMJ1jEwdhExw3E%2FJD2m6s9QN30NcAfE%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766434355"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close
Hello World!
Open service 75.2.60.68:80 · dev.api.moona.health
2025-12-22 16:34
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 12
Content-Security-Policy: img-src 'self' data: apollo-server-landing-page.cdn.apollographql.com;script-src 'self' https: 'unsafe-inline';manifest-src 'self' apollo-server-landing-page.cdn.apollographql.com;frame-src 'self' sandbox.embed.apollographql.com;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Mon, 22 Dec 2025 16:34:57 GMT
Etag: W/"c-Lve95gjOVATpfV8EL5X4nxwjKHE"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Ykj2orv5JT0QPKITf9Dovxv9rFppd1Mqv7T4FO4dmwU%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766421297"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Ykj2orv5JT0QPKITf9Dovxv9rFppd1Mqv7T4FO4dmwU%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766421297"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close
Hello World!
Open service 75.2.60.68:443 · dev.api.moona.health
2025-12-21 04:05
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 12
Content-Security-Policy: img-src 'self' data: apollo-server-landing-page.cdn.apollographql.com;script-src 'self' https: 'unsafe-inline';manifest-src 'self' apollo-server-landing-page.cdn.apollographql.com;frame-src 'self' sandbox.embed.apollographql.com;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Sun, 21 Dec 2025 04:05:17 GMT
Etag: W/"c-Lve95gjOVATpfV8EL5X4nxwjKHE"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=vg0oixIGwinNWrItC5rihh4BsGc9U3Kq0l11oGtnZlA%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766289917"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=vg0oixIGwinNWrItC5rihh4BsGc9U3Kq0l11oGtnZlA%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766289917"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close
Hello World!
Open service 75.2.60.68:80 · dev.api.moona.health
2025-12-20 15:38
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 12
Content-Security-Policy: img-src 'self' data: apollo-server-landing-page.cdn.apollographql.com;script-src 'self' https: 'unsafe-inline';manifest-src 'self' apollo-server-landing-page.cdn.apollographql.com;frame-src 'self' sandbox.embed.apollographql.com;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Sat, 20 Dec 2025 15:39:03 GMT
Etag: W/"c-Lve95gjOVATpfV8EL5X4nxwjKHE"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2FI9FInxsLPzALsziFuJAjqIoCP%2Fi6MXAHXEgNBo5jXc%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766245143"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2FI9FInxsLPzALsziFuJAjqIoCP%2Fi6MXAHXEgNBo5jXc%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766245143"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close
Hello World!
Open service 75.2.60.68:443 · dev.api.moona.health
2025-12-19 04:45
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 12
Content-Security-Policy: img-src 'self' data: apollo-server-landing-page.cdn.apollographql.com;script-src 'self' https: 'unsafe-inline';manifest-src 'self' apollo-server-landing-page.cdn.apollographql.com;frame-src 'self' sandbox.embed.apollographql.com;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 19 Dec 2025 04:45:34 GMT
Etag: W/"c-Lve95gjOVATpfV8EL5X4nxwjKHE"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=EEHr3tsBYcEM35d1eLltq%2BBE4Xc6cDIqXS8weY7Pi8c%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766119534"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=EEHr3tsBYcEM35d1eLltq%2BBE4Xc6cDIqXS8weY7Pi8c%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766119534"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close
Hello World!