Domain heard.popstroke.com
United States
Software information
Vercel
tcp/443
-
GraphQL introspection is enabled.
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
First seen 2025-12-06 18:28
Last seen 2025-12-06 18:28-
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6f313b5807f0703440affa17841bc9bebc0a00771GraphQL introspection enabled at /api/graphql Types: 252 (by kind: ENUM: 30, INPUT_OBJECT: 40, OBJECT: 173, SCALAR: 8, UNION: 1) Operations: - Query: Query | fields: device, devices, options, products, reviewMetrics - Mutation: Mutation | fields: deviceRegister, jobCreate, jobUpdate, productCreate, productUpdate Directives: extends, external, inaccessible, key, link, override, provides, requires, shareable, tag (total: 17)
Found on 2025-12-06 18:28209.2 kBytes
-
-
Open service 216.150.16.65:443 · heard.popstroke.com
2026-01-08 22:26
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Thu, 08 Jan 2026 22:26:52 GMT Location: /auth/sign-in Server: Vercel Set-Cookie: __Host-authjs.csrf-token=e989922c833557920fa4e88db90f062177b6c13ad8d0bb9aec47fa8fcffb6c57%7C711b12cce5456ca6f03d90d73cb6928d247d14b79a61583da03dc05aaa950b24; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: __Secure-authjs.callback-url=https%3A%2F%2Fheard.popstroke.com; Path=/; HttpOnly; Secure; SameSite=Lax Strict-Transport-Security: max-age=63072000 X-Vercel-Id: iad1::677xb-1767911212897-37b4fbddf900 Connection: close Transfer-Encoding: chunked Redirecting...
Found 2026-01-08 by HttpPluginCreate report
-
Open service 216.150.16.65:443 · heard.popstroke.com
2026-01-02 00:27
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Fri, 02 Jan 2026 00:27:24 GMT Location: /auth/sign-in Server: Vercel Set-Cookie: __Host-authjs.csrf-token=9108b19717beb2080d83200821b4db3026aaa7cc01e5aa72b3925a50e0c75e12%7C321e574a19465d95687e8cef86f31b2785ca8a56fd2212793b3c19436deecad7; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: __Secure-authjs.callback-url=https%3A%2F%2Fheard.popstroke.com; Path=/; HttpOnly; Secure; SameSite=Lax Strict-Transport-Security: max-age=63072000 X-Vercel-Id: sfo1::2s557-1767313644713-ce99fa74e2be Connection: close Transfer-Encoding: chunked Redirecting...
Found 2026-01-02 by HttpPluginCreate report
-
Open service 216.150.16.65:443 · heard.popstroke.com
2025-12-30 08:04
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Tue, 30 Dec 2025 08:04:18 GMT Location: /auth/sign-in Server: Vercel Set-Cookie: __Host-authjs.csrf-token=19a6474faf9b635b52ae4728d1cce803cbaa0135cc6e5b541d10b7c0296f76ff%7Cea86dfa0bfca44cf3e28594c7f64e67f8632dd35d2f95aa9b54daf7b96ca8a19; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: __Secure-authjs.callback-url=https%3A%2F%2Fheard.popstroke.com; Path=/; HttpOnly; Secure; SameSite=Lax Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::bcsmb-1767081858573-f4747da3b193 Connection: close Transfer-Encoding: chunked Redirecting...
Found 2025-12-30 by HttpPluginCreate report
-
Open service 216.150.16.65:443 · heard.popstroke.com
2025-12-22 14:04
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Mon, 22 Dec 2025 14:04:34 GMT Location: /auth/sign-in Server: Vercel Set-Cookie: __Host-authjs.csrf-token=dcb9454f2bee49409d598109280b17bad39e8f513294ef73c9543fcfe8638480%7C473f7ad00a109215067ed671c59ca23144fbaded17b2d29d439b912395f05a38; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: __Secure-authjs.callback-url=https%3A%2F%2Fheard.popstroke.com; Path=/; HttpOnly; Secure; SameSite=Lax Strict-Transport-Security: max-age=63072000 X-Vercel-Id: iad1::5cllf-1766412273998-fe89b6abac17 Connection: close Transfer-Encoding: chunked Redirecting...
Found 2025-12-22 by HttpPluginCreate report
-
Open service 216.150.16.65:443 · heard.popstroke.com
2025-12-20 14:24
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Sat, 20 Dec 2025 14:24:47 GMT Location: /auth/sign-in Server: Vercel Set-Cookie: __Host-authjs.csrf-token=f150b7dcbfd0c12b6f92fb6ee66e6e9987d874a605847820e04d64f28a30ee3d%7C6c3d49f4c11822d338f60d9b57c707fa389834761330832a6656334992dab5af; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: __Secure-authjs.callback-url=https%3A%2F%2Fheard.popstroke.com; Path=/; HttpOnly; Secure; SameSite=Lax Strict-Transport-Security: max-age=63072000 X-Vercel-Id: bom1::lg49s-1766240687654-4513364fc0ca Connection: close Transfer-Encoding: chunked Redirecting...
Found 2025-12-20 by HttpPluginCreate report