Vercel
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
GraphQL introspection enabled at /api/graphql
Open service 216.150.16.129:443 · promarin.app
2026-01-09 03:17
HTTP/1.1 200 OK Accept-Ch: Sec-CH-Prefers-Color-Scheme Age: 0 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Critical-Ch: Sec-CH-Prefers-Color-Scheme Date: Fri, 09 Jan 2026 03:17:32 GMT Link: <https://promarin.app/en>; rel="alternate"; hreflang="en", <https://promarin.app/>; rel="alternate"; hreflang="de", <https://promarin.app/nl>; rel="alternate"; hreflang="nl", <https://promarin.app/>; rel="alternate"; hreflang="x-default" Link: </_next/static/media/028c0d39d2e8f589-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/395b532b21ad250c-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/5b01f339abf2f1a5.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/8ab8e79d8aec96b6-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/c64bc2c0f61b0cf2-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/3ba7e7b0e946cd62.css>; rel=preload; as="style", </_next/static/css/c944c112613b2185.css>; rel=preload; as="style", </_next/static/css/34daaa51324022bb.css>; rel=preload; as="style" Server: Vercel Set-Cookie: NEXT_LOCALE=de; Path=/; SameSite=lax Set-Cookie: authjs.member-csrf-token=52ec566bec322d8ade79063fcc69e97d16958bfa82fdf601278412ac4e58cf16%7Cae9c8f21764cf050ad0b06b8e023161bfa31ed426546c1f8eaca5df6251f3848; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: authjs.member-callback-url=https%3A%2F%2Fpromarin.app; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: NEXT_LOCALE=de; Path=/; SameSite=lax Strict-Transport-Security: max-age=63072000 Vary: Sec-CH-Prefers-Color-Scheme X-Matched-Path: /[locale] X-Powered-By: Next.js, Payload X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::wz6zn-1767928652086-eeb57df9b2fc Connection: close Transfer-Encoding: chunked
Open service 216.150.16.129:443 · promarin.app
2026-01-02 06:35
HTTP/1.1 200 OK Accept-Ch: Sec-CH-Prefers-Color-Scheme Age: 0 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Critical-Ch: Sec-CH-Prefers-Color-Scheme Date: Fri, 02 Jan 2026 06:35:54 GMT Link: <https://promarin.app/en>; rel="alternate"; hreflang="en", <https://promarin.app/>; rel="alternate"; hreflang="de", <https://promarin.app/nl>; rel="alternate"; hreflang="nl", <https://promarin.app/>; rel="alternate"; hreflang="x-default" Link: </_next/static/media/028c0d39d2e8f589-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/395b532b21ad250c-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/5b01f339abf2f1a5.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/8ab8e79d8aec96b6-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/c64bc2c0f61b0cf2-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/3ba7e7b0e946cd62.css>; rel=preload; as="style", </_next/static/css/c944c112613b2185.css>; rel=preload; as="style", </_next/static/css/34daaa51324022bb.css>; rel=preload; as="style" Server: Vercel Set-Cookie: NEXT_LOCALE=de; Path=/; SameSite=lax Set-Cookie: authjs.member-csrf-token=861186b20df840b4843921b2496192f451b0b4f23ae27fe25bff063c73d98b81%7C8099c1fcadf8c8ed470f8d63c889e5059f2172abff29814bba48620ad215676d; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: authjs.member-callback-url=https%3A%2F%2Fpromarin.app; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: NEXT_LOCALE=de; Path=/; SameSite=lax Strict-Transport-Security: max-age=63072000 Vary: Sec-CH-Prefers-Color-Scheme X-Matched-Path: /[locale] X-Powered-By: Next.js, Payload X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::jhwx4-1767335752940-e64132a521c4 Connection: close Transfer-Encoding: chunked
Open service 216.150.16.129:443 · promarin.app
2025-12-22 19:41
HTTP/1.1 200 OK Accept-Ch: Sec-CH-Prefers-Color-Scheme Age: 0 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Critical-Ch: Sec-CH-Prefers-Color-Scheme Date: Mon, 22 Dec 2025 19:41:33 GMT Link: <https://promarin.app/en>; rel="alternate"; hreflang="en", <https://promarin.app/>; rel="alternate"; hreflang="de", <https://promarin.app/nl>; rel="alternate"; hreflang="nl", <https://promarin.app/>; rel="alternate"; hreflang="x-default" Link: </_next/static/media/028c0d39d2e8f589-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/395b532b21ad250c-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/5b01f339abf2f1a5.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/8ab8e79d8aec96b6-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/c64bc2c0f61b0cf2-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/3ba7e7b0e946cd62.css>; rel=preload; as="style", </_next/static/css/c944c112613b2185.css>; rel=preload; as="style", </_next/static/css/34daaa51324022bb.css>; rel=preload; as="style" Server: Vercel Set-Cookie: NEXT_LOCALE=de; Path=/; SameSite=lax Set-Cookie: authjs.member-csrf-token=966e871fa8f9438c72a6f0120fca6a5cbb499bd652e2645e10643ea3344c6880%7C428ad6c462aaeedaa00615e04becc2ade36b2dba512c1631ad18b1adc3bbfad6; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: authjs.member-callback-url=https%3A%2F%2Fpromarin.app; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: NEXT_LOCALE=de; Path=/; SameSite=lax Strict-Transport-Security: max-age=63072000 Vary: Sec-CH-Prefers-Color-Scheme X-Matched-Path: /[locale] X-Powered-By: Next.js, Payload X-Vercel-Cache: MISS X-Vercel-Id: fra1::fra1::jvttc-1766432492907-c10145272496 Connection: close Transfer-Encoding: chunked
Open service 216.150.16.129:443 · promarin.app
2025-12-20 23:45
HTTP/1.1 200 OK Accept-Ch: Sec-CH-Prefers-Color-Scheme Age: 0 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Critical-Ch: Sec-CH-Prefers-Color-Scheme Date: Sat, 20 Dec 2025 23:45:32 GMT Link: <https://promarin.app/en>; rel="alternate"; hreflang="en", <https://promarin.app/>; rel="alternate"; hreflang="de", <https://promarin.app/nl>; rel="alternate"; hreflang="nl", <https://promarin.app/>; rel="alternate"; hreflang="x-default" Link: </_next/static/media/028c0d39d2e8f589-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/395b532b21ad250c-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/5b01f339abf2f1a5.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/8ab8e79d8aec96b6-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/c64bc2c0f61b0cf2-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/3ba7e7b0e946cd62.css>; rel=preload; as="style", </_next/static/css/c944c112613b2185.css>; rel=preload; as="style", </_next/static/css/34daaa51324022bb.css>; rel=preload; as="style" Server: Vercel Set-Cookie: NEXT_LOCALE=de; Path=/; SameSite=lax Set-Cookie: authjs.member-csrf-token=e40d09091923ae89ed84371fdfcc803ef2c602e20269a46c171c4e725938d297%7C1ac367b2e8b05797e25e33322b9f62bab300ce3b5477f30740a6bf783302060a; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: authjs.member-callback-url=https%3A%2F%2Fpromarin.app; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: NEXT_LOCALE=de; Path=/; SameSite=lax Strict-Transport-Security: max-age=63072000 Vary: Sec-CH-Prefers-Color-Scheme X-Matched-Path: /[locale] X-Powered-By: Next.js, Payload X-Vercel-Cache: MISS X-Vercel-Id: fra1::fra1::j2s6l-1766274330817-4bf8050aee25 Connection: close Transfer-Encoding: chunked