Domain shopify-papi.golo.dev
United States
AMAZON-02
Software information

Heroku

tcp/443 tcp/80

  • GraphQL introspection is enabled.
    First seen 2025-11-14 04:03
    Last seen 2026-01-02 06:35
    Open for 49 days

    • Severity: medium
      Fingerprint: c2db3a1c40d490db1a0bbaa3c08d6242153a8e525bcfb8b34e57377890cc1eea

      GraphQL introspection enabled at /graphql
Types: 103 (by kind: ENUM: 13, INPUT_OBJECT: 24, INTERFACE: 1, OBJECT: 56, SCALAR: 9)
Operations:
- Query: Query | fields: behavioralQuiz, behavioralQuizCategories, behavioralQuizQuestions, files, filesShopify
- Mutation: Mutation | fields: activateUser, createBehavioralQuiz, createFileShopify, createHealthAssessment, createUser
Directives: deprecated, include, skip, specifiedBy (total: 4)
      Found on 2026-01-02 06:35
      123.9 kBytes
    Create report
  • GraphQL introspection is enabled.
    First seen 2025-11-14 04:03
    Last seen 2026-01-02 04:30
    Open for 49 days

    • Severity: medium
      Fingerprint: c2db3a1c40d490db1a0bbaa3c08d6242153a8e525bcfb8b34e57377890cc1eea

      GraphQL introspection enabled at /graphql
Types: 103 (by kind: ENUM: 13, INPUT_OBJECT: 24, INTERFACE: 1, OBJECT: 56, SCALAR: 9)
Operations:
- Query: Query | fields: behavioralQuiz, behavioralQuizCategories, behavioralQuizQuestions, files, filesShopify
- Mutation: Mutation | fields: activateUser, createBehavioralQuiz, createFileShopify, createHealthAssessment, createUser
Directives: deprecated, include, skip, specifiedBy (total: 4)
      Found on 2026-01-02 04:30
      123.9 kBytes
    Create report

  • Open service 15.197.149.68:80 · shopify-papi.golo.dev

    2026-01-09 10:42 

    HTTP/1.1 200 OK
Content-Length: 4
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 09 Jan 2026 10:43:36 GMT
Etag: W/"4-GFsrnlc8j3YCIwFhiLr2WzbbD0I"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=FDCaO5tXHLeD5ItpHZXPHkCahHmKCqbz7LwBOFtuuDM%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767955416"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=FDCaO5tXHLeD5ItpHZXPHkCahHmKCqbz7LwBOFtuuDM%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767955416"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 10
X-Ratelimit-Remaining: 9
X-Ratelimit-Reset: 60
X-Request-Id: 33d1a8cb-3afa-4a18-85e1-3259504a3cf2
X-Robots-Tag: noindex
X-Xss-Protection: 0
Connection: close


Pong
    Found 3 days ago by HttpPlugin
    Create report

  • Open service 76.223.57.73:443 · shopify-papi.golo.dev

    2026-01-09 07:09 

    HTTP/1.1 200 OK
Content-Length: 4
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 09 Jan 2026 07:09:42 GMT
Etag: W/"4-GFsrnlc8j3YCIwFhiLr2WzbbD0I"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=DOhBNVFSYEZ8qZtfY%2F1xUb2AUuLG1cQZzC5fG%2BAmt2g%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767942582"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=DOhBNVFSYEZ8qZtfY%2F1xUb2AUuLG1cQZzC5fG%2BAmt2g%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767942582"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 10
X-Ratelimit-Remaining: 9
X-Ratelimit-Reset: 60
X-Request-Id: 5fa89d0a-5cf5-4395-9658-4c71e8e9f223
X-Robots-Tag: noindex
X-Xss-Protection: 0
Connection: close


Pong
    Found 3 days ago by HttpPlugin
    Create report

  • Open service 76.223.57.73:443 · shopify-papi.golo.dev

    2026-01-02 06:35 

    HTTP/1.1 200 OK
Content-Length: 4
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 02 Jan 2026 06:35:36 GMT
Etag: W/"4-GFsrnlc8j3YCIwFhiLr2WzbbD0I"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=c7mmjI1JZL7uPt%2FJ%2BioNBXLE223QEZycydDNd4y4HIQ%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767335736"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=c7mmjI1JZL7uPt%2FJ%2BioNBXLE223QEZycydDNd4y4HIQ%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767335736"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 10
X-Ratelimit-Remaining: 9
X-Ratelimit-Reset: 60
X-Request-Id: f52be5ff-c6aa-4e2e-9916-d16191b7ceee
X-Robots-Tag: noindex
X-Xss-Protection: 0
Connection: close


Pong
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 76.223.57.73:443 · shopify-papi.golo.dev

    2025-12-22 22:33 

    HTTP/1.1 200 OK
Content-Length: 4
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Mon, 22 Dec 2025 22:33:19 GMT
Etag: W/"4-GFsrnlc8j3YCIwFhiLr2WzbbD0I"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=CvK9%2F3rwyXdp8%2FBbOd1IGr0c7iqDUfF7Lgznf7TJQWw%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766442799"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=CvK9%2F3rwyXdp8%2FBbOd1IGr0c7iqDUfF7Lgznf7TJQWw%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766442799"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 10
X-Ratelimit-Remaining: 9
X-Ratelimit-Reset: 60
X-Request-Id: 6c95f297-4ed3-4e12-a525-f61f4dd3604a
X-Robots-Tag: noindex
X-Xss-Protection: 0
Connection: close


Pong
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 15.197.149.68:80 · shopify-papi.golo.dev

    2025-12-22 19:03 

    HTTP/1.1 200 OK
Content-Length: 4
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Mon, 22 Dec 2025 19:03:08 GMT
Etag: W/"4-GFsrnlc8j3YCIwFhiLr2WzbbD0I"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=d8%2BVwypIG1BJLwkr6DWtmff9c%2FDOc3vJlCTIq7OlCZc%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766430188"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=d8%2BVwypIG1BJLwkr6DWtmff9c%2FDOc3vJlCTIq7OlCZc%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766430188"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 10
X-Ratelimit-Remaining: 9
X-Ratelimit-Reset: 60
X-Request-Id: ad70bd7a-f40d-436c-ad2f-def59d44d0c8
X-Robots-Tag: noindex
X-Xss-Protection: 0
Connection: close


Pong
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 76.223.57.73:443 · shopify-papi.golo.dev

    2025-12-21 02:48 

    HTTP/1.1 200 OK
Content-Length: 4
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Sun, 21 Dec 2025 02:48:46 GMT
Etag: W/"4-GFsrnlc8j3YCIwFhiLr2WzbbD0I"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=s0OiFUULYb%2F9WoJuxX1N378cDzMAbTBPuvvjjQ96gBY%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766285326"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=s0OiFUULYb%2F9WoJuxX1N378cDzMAbTBPuvvjjQ96gBY%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766285326"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 10
X-Ratelimit-Remaining: 9
X-Ratelimit-Reset: 60
X-Request-Id: 2e9d0f80-8dd1-4b37-ad42-745e2afd4406
X-Robots-Tag: noindex
X-Xss-Protection: 0
Connection: close


Pong
    Found 2025-12-21 by HttpPlugin
    Create report

  • Open service 15.197.149.68:80 · shopify-papi.golo.dev

    2025-12-20 19:43 

    HTTP/1.1 200 OK
Content-Length: 4
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Sat, 20 Dec 2025 19:43:26 GMT
Etag: W/"4-GFsrnlc8j3YCIwFhiLr2WzbbD0I"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=VNLA3BmtKUj7aUl2MJL746VWErjBcEQO7nLAqQWQU24%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766259806"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=VNLA3BmtKUj7aUl2MJL746VWErjBcEQO7nLAqQWQU24%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766259806"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 10
X-Ratelimit-Remaining: 9
X-Ratelimit-Reset: 60
X-Request-Id: f9c8ab6c-7336-4569-a43e-6d53c8cc81d4
X-Robots-Tag: noindex
X-Xss-Protection: 0
Connection: close


Pong
    Found 2025-12-20 by HttpPlugin
    Create report

  • Open service 76.223.57.73:443 · shopify-papi.golo.dev

    2025-12-19 03:47 

    HTTP/1.1 200 OK
Content-Length: 4
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 19 Dec 2025 03:47:27 GMT
Etag: W/"4-GFsrnlc8j3YCIwFhiLr2WzbbD0I"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=CTFRS6WM6n9RK3XOWaJEwC%2FxLZqiyq834co3DQksqss%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766116047"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=CTFRS6WM6n9RK3XOWaJEwC%2FxLZqiyq834co3DQksqss%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766116047"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 10
X-Ratelimit-Remaining: 9
X-Ratelimit-Reset: 60
X-Request-Id: 24a2f8bb-6dda-4bf4-9740-806d73290d30
X-Robots-Tag: noindex
X-Xss-Protection: 0
Connection: close


Pong
    Found 2025-12-19 by HttpPlugin
    Create report

  • Open service 15.197.149.68:80 · shopify-papi.golo.dev

    2025-12-19 01:36 

    HTTP/1.1 200 OK
Content-Length: 4
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 19 Dec 2025 01:36:51 GMT
Etag: W/"4-GFsrnlc8j3YCIwFhiLr2WzbbD0I"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=FIlOLvsle%2BtPeQ80sVhc76TeUrjGrPR%2F3kEOmgQCvmQ%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766108211"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=FIlOLvsle%2BtPeQ80sVhc76TeUrjGrPR%2F3kEOmgQCvmQ%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766108211"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 10
X-Ratelimit-Remaining: 9
X-Ratelimit-Reset: 60
X-Request-Id: fe216709-510f-4fe8-b797-0906bf2fac83
X-Robots-Tag: noindex
X-Xss-Protection: 0
Connection: close


Pong
    Found 2025-12-19 by HttpPlugin
    Create report
shopify-papi.golo.dev
Fingerprint:
c38d33da7a06794440e2bad1bd0d917d141e988da24a4f9b0685ba56dc23ffbe
CN:
shopify-papi.golo.dev
Key:
RSA-2048
Issuer:
R13
Not before:
2025-11-14 03:04
Not after:
2026-02-12 03:04
Domain summary

shopify-papi.golo.dev 10

1 recorded
IP summary

15.197.149.68 1 76.223.57.73 1

2 recorded

© 2026 LeakIX v2.0.49
About LeakIX - Credits - Take-down and blacklist requests - Security issues - Terms and conditions - Cookie policy - Legal notice