Heroku
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
GraphQL introspection enabled at /graphql
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3374cb7e7209dfed505e1695c5cf1998d831c5f29
GraphQL introspection enabled at /graphql Types: 1386 (by kind: ENUM: 210, INPUT_OBJECT: 325, INTERFACE: 2, OBJECT: 826, SCALAR: 9, UNION: 14) Operations: - Query: Query | fields: getAccountCourseById, getAllCoursesByUserId, getColleagueCoursesByUserId, getPaginatedAccountCourses, getSuggestedCourseByUserId - Mutation: Mutation | fields: createCourse, deleteCourse, duplicateCourse, publishCourse, updateCourse Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d43b76cb6ad84649ac25bcf0e5bc7031c0e20c0d
GraphQL introspection enabled at /graphql Types: 1381 (by kind: ENUM: 210, INPUT_OBJECT: 320, INTERFACE: 2, OBJECT: 826, SCALAR: 9, UNION: 14) Operations: - Query: Query | fields: getAccountCourseById, getAllCoursesByUserId, getColleagueCoursesByUserId, getPaginatedAccountCourses, getSuggestedCourseByUserId - Mutation: Mutation | fields: createCourse, deleteCourse, duplicateCourse, publishCourse, updateCourse Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c8d06c4f415464dd2244d954bf8abb6560f28c31
GraphQL introspection enabled at /graphql Types: 1376 (by kind: ENUM: 209, INPUT_OBJECT: 320, INTERFACE: 2, OBJECT: 822, SCALAR: 9, UNION: 14) Operations: - Query: Query | fields: getAccountCourseById, getAllCoursesByUserId, getColleagueCoursesByUserId, getPaginatedAccountCourses, getSuggestedCourseByUserId - Mutation: Mutation | fields: createCourse, deleteCourse, duplicateCourse, publishCourse, updateCourse Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3326f790d005dd22f30c5ee06737c505fda118dc7
GraphQL introspection enabled at /graphql Types: 1375 (by kind: ENUM: 208, INPUT_OBJECT: 320, INTERFACE: 2, OBJECT: 822, SCALAR: 9, UNION: 14) Operations: - Query: Query | fields: getAccountCourseById, getAllCoursesByUserId, getColleagueCoursesByUserId, getPaginatedAccountCourses, getSuggestedCourseByUserId - Mutation: Mutation | fields: createCourse, deleteCourse, duplicateCourse, publishCourse, updateCourse Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33cc0b536219405a6eed699014cdbd0eaa18dc876
GraphQL introspection enabled at /graphql Types: 1367 (by kind: ENUM: 205, INPUT_OBJECT: 318, INTERFACE: 2, OBJECT: 819, SCALAR: 9, UNION: 14) Operations: - Query: Query | fields: getAccountCourseById, getAllCoursesByUserId, getColleagueCoursesByUserId, getPaginatedAccountCourses, getSuggestedCourseByUserId - Mutation: Mutation | fields: createCourse, deleteCourse, duplicateCourse, publishCourse, updateCourse Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa362d3ecd286603622ddc4514d4c075f16c4e5adf2
GraphQL introspection enabled at /graphql Types: 1366 (by kind: ENUM: 205, INPUT_OBJECT: 318, INTERFACE: 2, OBJECT: 818, SCALAR: 9, UNION: 14) Operations: - Query: Query | fields: getAccountCourseById, getAllCoursesByUserId, getColleagueCoursesByUserId, getPaginatedAccountCourses, getSuggestedCourseByUserId - Mutation: Mutation | fields: createCourse, deleteCourse, duplicateCourse, publishCourse, updateCourse Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa30bdb9bd0b53ee3147bd5d5f7534f6bf0272cbc20
GraphQL introspection enabled at /graphql Types: 1365 (by kind: ENUM: 204, INPUT_OBJECT: 318, INTERFACE: 2, OBJECT: 818, SCALAR: 9, UNION: 14) Operations: - Query: Query | fields: getAccountCourseById, getAllCoursesByUserId, getColleagueCoursesByUserId, getPaginatedAccountCourses, getSuggestedCourseByUserId - Mutation: Mutation | fields: createCourse, deleteCourse, duplicateCourse, publishCourse, updateCourse Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa335f2197f56a2cb4d8d134c44349209d5744cfbe1
GraphQL introspection enabled at /graphql Types: 1358 (by kind: ENUM: 203, INPUT_OBJECT: 317, INTERFACE: 2, OBJECT: 814, SCALAR: 9, UNION: 13) Operations: - Query: Query | fields: getAccountCourseById, getAllCoursesByUserId, getColleagueCoursesByUserId, getPaginatedAccountCourses, getSuggestedCourseByUserId - Mutation: Mutation | fields: createCourse, deleteCourse, duplicateCourse, publishCourse, updateCourse Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
GraphQL introspection enabled at /graphql
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3374cb7e7209dfed505e1695c5cf1998d831c5f29
GraphQL introspection enabled at /graphql Types: 1386 (by kind: ENUM: 210, INPUT_OBJECT: 325, INTERFACE: 2, OBJECT: 826, SCALAR: 9, UNION: 14) Operations: - Query: Query | fields: getAccountCourseById, getAllCoursesByUserId, getColleagueCoursesByUserId, getPaginatedAccountCourses, getSuggestedCourseByUserId - Mutation: Mutation | fields: createCourse, deleteCourse, duplicateCourse, publishCourse, updateCourse Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d43b76cb6ad84649ac25bcf0e5bc7031c0e20c0d
GraphQL introspection enabled at /graphql Types: 1381 (by kind: ENUM: 210, INPUT_OBJECT: 320, INTERFACE: 2, OBJECT: 826, SCALAR: 9, UNION: 14) Operations: - Query: Query | fields: getAccountCourseById, getAllCoursesByUserId, getColleagueCoursesByUserId, getPaginatedAccountCourses, getSuggestedCourseByUserId - Mutation: Mutation | fields: createCourse, deleteCourse, duplicateCourse, publishCourse, updateCourse Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3c8d06c4f415464dd2244d954bf8abb6560f28c31
GraphQL introspection enabled at /graphql Types: 1376 (by kind: ENUM: 209, INPUT_OBJECT: 320, INTERFACE: 2, OBJECT: 822, SCALAR: 9, UNION: 14) Operations: - Query: Query | fields: getAccountCourseById, getAllCoursesByUserId, getColleagueCoursesByUserId, getPaginatedAccountCourses, getSuggestedCourseByUserId - Mutation: Mutation | fields: createCourse, deleteCourse, duplicateCourse, publishCourse, updateCourse Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3326f790d005dd22f30c5ee06737c505fda118dc7
GraphQL introspection enabled at /graphql Types: 1375 (by kind: ENUM: 208, INPUT_OBJECT: 320, INTERFACE: 2, OBJECT: 822, SCALAR: 9, UNION: 14) Operations: - Query: Query | fields: getAccountCourseById, getAllCoursesByUserId, getColleagueCoursesByUserId, getPaginatedAccountCourses, getSuggestedCourseByUserId - Mutation: Mutation | fields: createCourse, deleteCourse, duplicateCourse, publishCourse, updateCourse Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa33cc0b536219405a6eed699014cdbd0eaa18dc876
GraphQL introspection enabled at /graphql Types: 1367 (by kind: ENUM: 205, INPUT_OBJECT: 318, INTERFACE: 2, OBJECT: 819, SCALAR: 9, UNION: 14) Operations: - Query: Query | fields: getAccountCourseById, getAllCoursesByUserId, getColleagueCoursesByUserId, getPaginatedAccountCourses, getSuggestedCourseByUserId - Mutation: Mutation | fields: createCourse, deleteCourse, duplicateCourse, publishCourse, updateCourse Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa362d3ecd286603622ddc4514d4c075f16c4e5adf2
GraphQL introspection enabled at /graphql Types: 1366 (by kind: ENUM: 205, INPUT_OBJECT: 318, INTERFACE: 2, OBJECT: 818, SCALAR: 9, UNION: 14) Operations: - Query: Query | fields: getAccountCourseById, getAllCoursesByUserId, getColleagueCoursesByUserId, getPaginatedAccountCourses, getSuggestedCourseByUserId - Mutation: Mutation | fields: createCourse, deleteCourse, duplicateCourse, publishCourse, updateCourse Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa30bdb9bd0b53ee3147bd5d5f7534f6bf0272cbc20
GraphQL introspection enabled at /graphql Types: 1365 (by kind: ENUM: 204, INPUT_OBJECT: 318, INTERFACE: 2, OBJECT: 818, SCALAR: 9, UNION: 14) Operations: - Query: Query | fields: getAccountCourseById, getAllCoursesByUserId, getColleagueCoursesByUserId, getPaginatedAccountCourses, getSuggestedCourseByUserId - Mutation: Mutation | fields: createCourse, deleteCourse, duplicateCourse, publishCourse, updateCourse Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa335f2197f56a2cb4d8d134c44349209d5744cfbe1
GraphQL introspection enabled at /graphql Types: 1358 (by kind: ENUM: 203, INPUT_OBJECT: 317, INTERFACE: 2, OBJECT: 814, SCALAR: 9, UNION: 13) Operations: - Query: Query | fields: getAccountCourseById, getAllCoursesByUserId, getColleagueCoursesByUserId, getPaginatedAccountCourses, getSuggestedCourseByUserId - Mutation: Mutation | fields: createCourse, deleteCourse, duplicateCourse, publishCourse, updateCourse Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Open service 99.83.185.157:80 · test-api.allgravy.com
2026-01-10 01:57
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 63
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Date: Sat, 10 Jan 2026 01:58:17 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Expect-Ct: max-age=0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=p5VCRHtm7wBfCzg%2BFCT9dFHUiFKtpuXFMX2nfvpAE1k%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1768010297"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=p5VCRHtm7wBfCzg%2BFCT9dFHUiFKtpuXFMX2nfvpAE1k%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1768010297"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 300
X-Ratelimit-Remaining: 299
X-Ratelimit-Reset: 1768010391
X-Xss-Protection: 0
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 15.197.253.240:443 · test-api.allgravy.com
2026-01-10 01:56
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 63
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Date: Sat, 10 Jan 2026 01:56:19 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Expect-Ct: max-age=0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2FjEz6X2tQ5d6v2NWHtRPkEmiSHeFdtHH%2FVyAKGQEueE%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1768010179"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2FjEz6X2tQ5d6v2NWHtRPkEmiSHeFdtHH%2FVyAKGQEueE%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1768010179"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 300
X-Ratelimit-Remaining: 298
X-Ratelimit-Reset: 1768010271
X-Xss-Protection: 0
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 15.197.253.240:443 · test-api.allgravy.com
2026-01-03 00:09
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 63
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Date: Sat, 03 Jan 2026 00:09:14 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Expect-Ct: max-age=0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=uttVQ%2BJx%2BWH6LL6pSOrVlI6tmQ5gz3DDmBcC%2BiEwrGc%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767398954"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=uttVQ%2BJx%2BWH6LL6pSOrVlI6tmQ5gz3DDmBcC%2BiEwrGc%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767398954"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 300
X-Ratelimit-Remaining: 298
X-Ratelimit-Reset: 1767398988
X-Xss-Protection: 0
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 99.83.185.157:80 · test-api.allgravy.com
2026-01-03 00:07
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 63
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Date: Sat, 03 Jan 2026 00:07:59 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Expect-Ct: max-age=0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=O7CyuDA0J2hm6JqkdvKpRC7V%2FsHUCs9bKzHSx6cqyhY%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767398879"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=O7CyuDA0J2hm6JqkdvKpRC7V%2FsHUCs9bKzHSx6cqyhY%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767398879"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 300
X-Ratelimit-Remaining: 298
X-Ratelimit-Reset: 1767398988
X-Xss-Protection: 0
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 99.83.185.157:80 · test-api.allgravy.com
2025-12-23 03:41
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 63
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Date: Tue, 23 Dec 2025 03:41:42 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Expect-Ct: max-age=0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=9fbtGPjEKm3S1gaSGhkGPHecFkmSsfmt3uH1MJuAAsk%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766461302"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=9fbtGPjEKm3S1gaSGhkGPHecFkmSsfmt3uH1MJuAAsk%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766461302"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 300
X-Ratelimit-Remaining: 298
X-Ratelimit-Reset: 1766461421
X-Xss-Protection: 0
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 15.197.253.240:443 · test-api.allgravy.com
2025-12-23 03:38
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 63
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Date: Tue, 23 Dec 2025 03:38:16 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Expect-Ct: max-age=0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=OTyml0pMT0yWZih9wlLGzgt2pZ%2BF40WZePXsjJTGTBs%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766461096"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=OTyml0pMT0yWZih9wlLGzgt2pZ%2BF40WZePXsjJTGTBs%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766461096"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 300
X-Ratelimit-Remaining: 298
X-Ratelimit-Reset: 1766461181
X-Xss-Protection: 0
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 15.197.253.240:443 · test-api.allgravy.com
2025-12-20 16:48
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 63
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Date: Sat, 20 Dec 2025 16:48:24 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Expect-Ct: max-age=0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=qDQk3QXBx53BK9%2FkCgPSu688pUT0jbTLaWfth6hzRiE%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766249304"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=qDQk3QXBx53BK9%2FkCgPSu688pUT0jbTLaWfth6hzRiE%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766249304"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 300
X-Ratelimit-Remaining: 298
X-Ratelimit-Reset: 1766249360
X-Xss-Protection: 0
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 99.83.185.157:80 · test-api.allgravy.com
2025-12-20 16:45
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 63
Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Date: Sat, 20 Dec 2025 16:45:59 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Expect-Ct: max-age=0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=2NgHdDGDj3S2MP%2FyyCUU11XYSeKCoslU13TuArvcXeU%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766249159"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=2NgHdDGDj3S2MP%2FyyCUU11XYSeKCoslU13TuArvcXeU%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766249159"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 300
X-Ratelimit-Remaining: 298
X-Ratelimit-Reset: 1766249240
X-Xss-Protection: 0
Connection: close
{"message":"Cannot GET /","error":"Not Found","statusCode":404}