Domain manager.heardpos.com
United States
Software information
Vercel
tcp/443
-
GraphQL introspection is enabled.
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
First seen 2025-10-27 17:33
Last seen 2025-12-01 12:09
Open for 34 days-
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6f313b5807f0703440affa17841bc9bebc0a00771GraphQL introspection enabled at /api/graphql Types: 252 (by kind: ENUM: 30, INPUT_OBJECT: 40, OBJECT: 173, SCALAR: 8, UNION: 1) Operations: - Query: Query | fields: device, devices, options, products, reviewMetrics - Mutation: Mutation | fields: deviceRegister, jobCreate, jobUpdate, productCreate, productUpdate Directives: extends, external, inaccessible, key, link, override, provides, requires, shareable, tag (total: 17)
Found on 2025-12-01 12:09208.2 kBytes -
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6661069922287f7622019ef6a0080713932a66407GraphQL introspection enabled at /api/graphql Types: 251 (by kind: ENUM: 30, INPUT_OBJECT: 40, OBJECT: 172, SCALAR: 8, UNION: 1) Operations: - Query: Query | fields: device, devices, options, products, reviewMetrics - Mutation: Mutation | fields: deviceRegister, jobCreate, jobUpdate, productCreate, productUpdate Directives: extends, external, inaccessible, key, link, override, provides, requires, shareable, tag (total: 17)
Found on 2025-11-12 05:18207.2 kBytes -
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d6ae568e0f9cdb881d36842e59c975ea73255c1369GraphQL introspection enabled at /api/graphql Types: 243 (by kind: ENUM: 30, INPUT_OBJECT: 36, OBJECT: 168, SCALAR: 8, UNION: 1) Operations: - Query: Query | fields: device, devices, options, products, reviewMetrics - Mutation: Mutation | fields: authOtpSend, authOtpValidate, deviceRegister, jobCreate, jobUpdate Directives: extends, external, inaccessible, key, link, override, provides, requires, shareable, tag (total: 17)
Found on 2025-10-27 17:33200.2 kBytes
-
-
Open service 216.150.16.129:443 · manager.heardpos.com
2026-01-08 23:25
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Thu, 08 Jan 2026 23:25:33 GMT Location: /auth/sign-in Server: Vercel Set-Cookie: __Host-authjs.csrf-token=c12ea6fe0486fe47fd10f04adeb5c213a3adbcf53bad66a17e852c6ec39491e8%7Cc8701e6bfd8f14477a9cf8caa0613d69b6195198fc052c55152bae19b127477b; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: __Secure-authjs.callback-url=https%3A%2F%2Fmanager.heardpos.com; Path=/; HttpOnly; Secure; SameSite=Lax Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::blbcd-1767914732969-9ede89bb5cc0 Connection: close Transfer-Encoding: chunked Redirecting...
Found 2026-01-08 by HttpPluginCreate report
-
Open service 216.150.16.129:443 · manager.heardpos.com
2026-01-01 23:24
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Thu, 01 Jan 2026 23:24:48 GMT Location: /auth/sign-in Server: Vercel Set-Cookie: __Host-authjs.csrf-token=d520a2ab93afc9a5a84dfd2108d6f63c55a3b3a37314aaeea3ffc1a0abb635a8%7C544c3e0d16cf6c1167a6f554a09c52ddb75bf232b4fb06aef0fb1eddb6d71f6c; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: __Secure-authjs.callback-url=https%3A%2F%2Fmanager.heardpos.com; Path=/; HttpOnly; Secure; SameSite=Lax Strict-Transport-Security: max-age=63072000 X-Vercel-Id: fra1::hfhhv-1767309888560-e69f4b79759e Connection: close Transfer-Encoding: chunked Redirecting...
Found 2026-01-01 by HttpPluginCreate report
-
Open service 216.150.16.129:443 · manager.heardpos.com
2025-12-30 07:01
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Tue, 30 Dec 2025 07:01:25 GMT Location: /auth/sign-in Server: Vercel Set-Cookie: __Host-authjs.csrf-token=3bdb895a1ec9e2aedbac657ff5f356ed90553e0021aa4ed97223c05488a308ac%7C6bd529518c2eac68034c04a142c5ee7170dbf3d355cf7f9aacf06ea77f09378d; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: __Secure-authjs.callback-url=https%3A%2F%2Fmanager.heardpos.com; Path=/; HttpOnly; Secure; SameSite=Lax Strict-Transport-Security: max-age=63072000 X-Vercel-Id: lhr1::m5g76-1767078085284-6f8a9d86a480 Connection: close Transfer-Encoding: chunked Redirecting...
Found 2025-12-30 by HttpPluginCreate report
-
Open service 216.150.16.129:443 · manager.heardpos.com
2025-12-22 11:39
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Mon, 22 Dec 2025 11:39:10 GMT Location: /auth/sign-in Server: Vercel Set-Cookie: __Host-authjs.csrf-token=4a09b37a56d0ce5e27ffea875bb93ecd11ecba0ee41dae9c66ef221c2f63bc50%7C0430500dd42472372c1cda5693c8e80e5a95a02399594cf2579eca5c7c9db54d; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: __Secure-authjs.callback-url=https%3A%2F%2Fmanager.heardpos.com; Path=/; HttpOnly; Secure; SameSite=Lax Strict-Transport-Security: max-age=63072000 X-Vercel-Id: iad1::kwjtp-1766403550195-d2750715d4b0 Connection: close Transfer-Encoding: chunked Redirecting...
Found 2025-12-22 by HttpPluginCreate report
-
Open service 216.150.16.129:443 · manager.heardpos.com
2025-12-20 12:12
HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Sat, 20 Dec 2025 12:12:41 GMT Location: /auth/sign-in Server: Vercel Set-Cookie: __Host-authjs.csrf-token=c693559258462c899896b052c1c807076157b560fdea1c628c6a996229762263%7C01b29178590d72551d3f7f5eb46a79872165ef60ba0c8371d5b09ddd1fe37786; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: __Secure-authjs.callback-url=https%3A%2F%2Fmanager.heardpos.com; Path=/; HttpOnly; Secure; SameSite=Lax Strict-Transport-Security: max-age=63072000 X-Vercel-Id: sfo1::p5xxz-1766232761841-e794bbddbb78 Connection: close Transfer-Encoding: chunked Redirecting...
Found 2025-12-20 by HttpPluginCreate report