Heroku
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3101d2516dce612c6a9201141b9cfdfdb3f22b131
GraphQL introspection enabled at /graphql Types: 380 (by kind: ENUM: 40, INPUT_OBJECT: 117, INTERFACE: 1, OBJECT: 212, SCALAR: 10) Operations: - Query: Query | fields: attachments, customer, customers, downtimeCategories, eventTypes - Mutation: Mutation | fields: addAPIKey, addAttachments, addCompanyCalendarEvent, addCustomer, addDowntimeCategory - Subscription: Subscription | fields: jobUpdated Directives: deprecated, include, skip (total: 3)
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3101d2516dce612c6a9201141b9cfdfdb3f22b131
GraphQL introspection enabled at /graphql Types: 380 (by kind: ENUM: 40, INPUT_OBJECT: 117, INTERFACE: 1, OBJECT: 212, SCALAR: 10) Operations: - Query: Query | fields: attachments, customer, customers, downtimeCategories, eventTypes - Mutation: Mutation | fields: addAPIKey, addAttachments, addCompanyCalendarEvent, addCustomer, addDowntimeCategory - Subscription: Subscription | fields: jobUpdated Directives: deprecated, include, skip (total: 3)
Open service 35.71.150.51:443 · operator.work-clo.com
2026-01-09 09:13
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Content-Length: 890
Content-Type: text/html; charset=UTF-8
Date: Fri, 09 Jan 2026 09:13:41 GMT
Etag: W/"37a-18e42d25f38"
Last-Modified: Fri, 15 Mar 2024 15:54:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=WCPsUCOJXdMsRDlo8nKCsmBFnslmitmNARgXtwPXpBo%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767950021"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=WCPsUCOJXdMsRDlo8nKCsmBFnslmitmNARgXtwPXpBo%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767950021"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: WorkClout | Operator Portal
<!doctype html>
<html lang="en">
<head>
<title>WorkClout | Operator Portal</title>
<meta charset="utf-8">
<!-- <meta name="viewport" content="width=device-width, initial-scale=1"> -->
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />
<link rel="shortcut icon" id="favicon" href="/assets/favicon/favicon.ico" type="image/png">
<link rel="apple-touch-icon" sizes="180x180" href="/assets/favicon/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="/assets/favicon/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="/assets/favicon/favicon-16x16.png">
<link rel="mask-icon" href="/assets/favicon/safari-pinned-tab.svg" color="#365aef">
</head>
<body>
<div id="app"></div>
<script type="text/javascript" src="/app.87b6257424e6ab33fd77.min.js"></script></body>
</html>
Open service 13.248.131.213:80 · operator.work-clo.com
2026-01-08 22:06
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Content-Length: 890
Content-Type: text/html; charset=UTF-8
Date: Thu, 08 Jan 2026 22:08:02 GMT
Etag: W/"37a-18e42d25f38"
Last-Modified: Fri, 15 Mar 2024 15:54:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=RcbS4%2BKGpFILbJiBJmQSdHGT5aT3QOpRUvOMldF2PDA%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767910082"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=RcbS4%2BKGpFILbJiBJmQSdHGT5aT3QOpRUvOMldF2PDA%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767910082"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: WorkClout | Operator Portal
<!doctype html>
<html lang="en">
<head>
<title>WorkClout | Operator Portal</title>
<meta charset="utf-8">
<!-- <meta name="viewport" content="width=device-width, initial-scale=1"> -->
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />
<link rel="shortcut icon" id="favicon" href="/assets/favicon/favicon.ico" type="image/png">
<link rel="apple-touch-icon" sizes="180x180" href="/assets/favicon/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="/assets/favicon/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="/assets/favicon/favicon-16x16.png">
<link rel="mask-icon" href="/assets/favicon/safari-pinned-tab.svg" color="#365aef">
</head>
<body>
<div id="app"></div>
<script type="text/javascript" src="/app.87b6257424e6ab33fd77.min.js"></script></body>
</html>
Open service 13.248.131.213:80 · operator.work-clo.com
2026-01-02 14:03
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Content-Length: 890
Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Jan 2026 14:03:33 GMT
Etag: W/"37a-18e42d25f38"
Last-Modified: Fri, 15 Mar 2024 15:54:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=0UbdblJVWJwlry7jw%2FthSWrIq4cBalw5qx9VmakT6ko%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767362613"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=0UbdblJVWJwlry7jw%2FthSWrIq4cBalw5qx9VmakT6ko%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767362613"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: WorkClout | Operator Portal
<!doctype html>
<html lang="en">
<head>
<title>WorkClout | Operator Portal</title>
<meta charset="utf-8">
<!-- <meta name="viewport" content="width=device-width, initial-scale=1"> -->
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />
<link rel="shortcut icon" id="favicon" href="/assets/favicon/favicon.ico" type="image/png">
<link rel="apple-touch-icon" sizes="180x180" href="/assets/favicon/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="/assets/favicon/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="/assets/favicon/favicon-16x16.png">
<link rel="mask-icon" href="/assets/favicon/safari-pinned-tab.svg" color="#365aef">
</head>
<body>
<div id="app"></div>
<script type="text/javascript" src="/app.87b6257424e6ab33fd77.min.js"></script></body>
</html>
Open service 35.71.150.51:443 · operator.work-clo.com
2026-01-02 08:13
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Content-Length: 890
Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Jan 2026 08:13:55 GMT
Etag: W/"37a-18e42d25f38"
Last-Modified: Fri, 15 Mar 2024 15:54:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=6udAswbRTDNF2RAqgagibON4%2FqoZO9SqZSbHnAIQpUc%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767341635"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=6udAswbRTDNF2RAqgagibON4%2FqoZO9SqZSbHnAIQpUc%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767341635"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: WorkClout | Operator Portal
<!doctype html>
<html lang="en">
<head>
<title>WorkClout | Operator Portal</title>
<meta charset="utf-8">
<!-- <meta name="viewport" content="width=device-width, initial-scale=1"> -->
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />
<link rel="shortcut icon" id="favicon" href="/assets/favicon/favicon.ico" type="image/png">
<link rel="apple-touch-icon" sizes="180x180" href="/assets/favicon/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="/assets/favicon/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="/assets/favicon/favicon-16x16.png">
<link rel="mask-icon" href="/assets/favicon/safari-pinned-tab.svg" color="#365aef">
</head>
<body>
<div id="app"></div>
<script type="text/javascript" src="/app.87b6257424e6ab33fd77.min.js"></script></body>
</html>
Open service 13.248.131.213:80 · operator.work-clo.com
2025-12-30 14:54
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Content-Length: 890
Content-Type: text/html; charset=UTF-8
Date: Tue, 30 Dec 2025 14:54:38 GMT
Etag: W/"37a-18e42d25f38"
Last-Modified: Fri, 15 Mar 2024 15:54:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=QUfy4Fp2VKE5gQcW7bZSvRUe%2BVX3XY1l9nz%2FtGc4CiQ%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767106478"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=QUfy4Fp2VKE5gQcW7bZSvRUe%2BVX3XY1l9nz%2FtGc4CiQ%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767106478"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: WorkClout | Operator Portal
<!doctype html>
<html lang="en">
<head>
<title>WorkClout | Operator Portal</title>
<meta charset="utf-8">
<!-- <meta name="viewport" content="width=device-width, initial-scale=1"> -->
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />
<link rel="shortcut icon" id="favicon" href="/assets/favicon/favicon.ico" type="image/png">
<link rel="apple-touch-icon" sizes="180x180" href="/assets/favicon/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="/assets/favicon/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="/assets/favicon/favicon-16x16.png">
<link rel="mask-icon" href="/assets/favicon/safari-pinned-tab.svg" color="#365aef">
</head>
<body>
<div id="app"></div>
<script type="text/javascript" src="/app.87b6257424e6ab33fd77.min.js"></script></body>
</html>
Open service 35.71.150.51:443 · operator.work-clo.com
2025-12-23 04:10
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Content-Length: 890
Content-Type: text/html; charset=UTF-8
Date: Tue, 23 Dec 2025 04:10:45 GMT
Etag: W/"37a-18e42d25f38"
Last-Modified: Fri, 15 Mar 2024 15:54:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=7ToiWRRZUpfUtUIWkfziXYxqO4qBEs3FjLtDdDO63jg%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766463045"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=7ToiWRRZUpfUtUIWkfziXYxqO4qBEs3FjLtDdDO63jg%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766463045"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: WorkClout | Operator Portal
<!doctype html>
<html lang="en">
<head>
<title>WorkClout | Operator Portal</title>
<meta charset="utf-8">
<!-- <meta name="viewport" content="width=device-width, initial-scale=1"> -->
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />
<link rel="shortcut icon" id="favicon" href="/assets/favicon/favicon.ico" type="image/png">
<link rel="apple-touch-icon" sizes="180x180" href="/assets/favicon/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="/assets/favicon/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="/assets/favicon/favicon-16x16.png">
<link rel="mask-icon" href="/assets/favicon/safari-pinned-tab.svg" color="#365aef">
</head>
<body>
<div id="app"></div>
<script type="text/javascript" src="/app.87b6257424e6ab33fd77.min.js"></script></body>
</html>
Open service 13.248.131.213:80 · operator.work-clo.com
2025-12-22 09:56
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Content-Length: 890
Content-Type: text/html; charset=UTF-8
Date: Mon, 22 Dec 2025 09:56:49 GMT
Etag: W/"37a-18e42d25f38"
Last-Modified: Fri, 15 Mar 2024 15:54:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=RTOWqtwGHSVAU3x2qrdz39OjKwufX6BeCNOVHUJ7UW0%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766397409"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=RTOWqtwGHSVAU3x2qrdz39OjKwufX6BeCNOVHUJ7UW0%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766397409"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: WorkClout | Operator Portal
<!doctype html>
<html lang="en">
<head>
<title>WorkClout | Operator Portal</title>
<meta charset="utf-8">
<!-- <meta name="viewport" content="width=device-width, initial-scale=1"> -->
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />
<link rel="shortcut icon" id="favicon" href="/assets/favicon/favicon.ico" type="image/png">
<link rel="apple-touch-icon" sizes="180x180" href="/assets/favicon/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="/assets/favicon/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="/assets/favicon/favicon-16x16.png">
<link rel="mask-icon" href="/assets/favicon/safari-pinned-tab.svg" color="#365aef">
</head>
<body>
<div id="app"></div>
<script type="text/javascript" src="/app.87b6257424e6ab33fd77.min.js"></script></body>
</html>
Open service 35.71.150.51:443 · operator.work-clo.com
2025-12-21 01:13
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Content-Length: 890
Content-Type: text/html; charset=UTF-8
Date: Sun, 21 Dec 2025 01:13:56 GMT
Etag: W/"37a-18e42d25f38"
Last-Modified: Fri, 15 Mar 2024 15:54:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=i2qlv%2BzIYwtSPGoCndi7WemDUiHt3BE5OGZSebPXRt0%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766279636"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=i2qlv%2BzIYwtSPGoCndi7WemDUiHt3BE5OGZSebPXRt0%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766279636"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: WorkClout | Operator Portal
<!doctype html>
<html lang="en">
<head>
<title>WorkClout | Operator Portal</title>
<meta charset="utf-8">
<!-- <meta name="viewport" content="width=device-width, initial-scale=1"> -->
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />
<link rel="shortcut icon" id="favicon" href="/assets/favicon/favicon.ico" type="image/png">
<link rel="apple-touch-icon" sizes="180x180" href="/assets/favicon/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="/assets/favicon/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="/assets/favicon/favicon-16x16.png">
<link rel="mask-icon" href="/assets/favicon/safari-pinned-tab.svg" color="#365aef">
</head>
<body>
<div id="app"></div>
<script type="text/javascript" src="/app.87b6257424e6ab33fd77.min.js"></script></body>
</html>
Open service 13.248.131.213:80 · operator.work-clo.com
2025-12-20 08:14
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Content-Length: 890
Content-Type: text/html; charset=UTF-8
Date: Sat, 20 Dec 2025 08:14:10 GMT
Etag: W/"37a-18e42d25f38"
Last-Modified: Fri, 15 Mar 2024 15:54:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=NOpdyPbQqoGkwzDH6H%2F2JHCQ%2Fd%2BDwvAIwfwBTQMGSks%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766218450"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=NOpdyPbQqoGkwzDH6H%2F2JHCQ%2Fd%2BDwvAIwfwBTQMGSks%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766218450"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
Page title: WorkClout | Operator Portal
<!doctype html>
<html lang="en">
<head>
<title>WorkClout | Operator Portal</title>
<meta charset="utf-8">
<!-- <meta name="viewport" content="width=device-width, initial-scale=1"> -->
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />
<link rel="shortcut icon" id="favicon" href="/assets/favicon/favicon.ico" type="image/png">
<link rel="apple-touch-icon" sizes="180x180" href="/assets/favicon/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="/assets/favicon/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="/assets/favicon/favicon-16x16.png">
<link rel="mask-icon" href="/assets/favicon/safari-pinned-tab.svg" color="#365aef">
</head>
<body>
<div id="app"></div>
<script type="text/javascript" src="/app.87b6257424e6ab33fd77.min.js"></script></body>
</html>