Heroku
tcp/443 tcp/80
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db84e0e35084e0e35084e0e35084e0e35084e0e35084e0e350
GraphQL introspection enabled at /api
Severity: medium
Fingerprint: c2db3a1c40d490db84e0e350a4e8dfe077e673646964483bf26eb1c736ae8494
GraphQL introspection enabled at /api Types: 90 (by kind: ENUM: 2, INPUT_OBJECT: 6, INTERFACE: 9, OBJECT: 45, SCALAR: 7, UNION: 21) Operations: - Query: Query | fields: entries, entry, entryCount, ping, privacyEntries - Mutation: Mutation | fields: ping Directives: deprecated, formatDateTime, include, markdown, money, parseRefs, skip, stripTags, transform, trim (total: 10)
Open service 99.83.217.1:80 · www.zipnet.nl
2026-01-12 04:14
HTTP/1.1 301 Moved Permanently
Content-Length: 162
Content-Type: text/html
Date: Mon, 12 Jan 2026 04:15:30 GMT
Location: https://www.zipnet.nl/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=J99OOg6f4c0bUSq7jrRwUvoD%2FjgTjzkCOu77BkHgypI%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768191330"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=J99OOg6f4c0bUSq7jrRwUvoD%2FjgTjzkCOu77BkHgypI%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768191330"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Page title: 301 Moved Permanently
<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>
Open service 75.2.43.161:80 · www.zipnet.nl
2026-01-12 04:14
HTTP/1.1 301 Moved Permanently
Content-Length: 162
Content-Type: text/html
Date: Mon, 12 Jan 2026 04:15:30 GMT
Location: https://www.zipnet.nl/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=J99OOg6f4c0bUSq7jrRwUvoD%2FjgTjzkCOu77BkHgypI%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768191330"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=J99OOg6f4c0bUSq7jrRwUvoD%2FjgTjzkCOu77BkHgypI%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768191330"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Page title: 301 Moved Permanently
<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>
Open service 76.223.11.49:80 · www.zipnet.nl
2026-01-12 04:14
HTTP/1.1 301 Moved Permanently
Content-Length: 162
Content-Type: text/html
Date: Mon, 12 Jan 2026 04:15:30 GMT
Location: https://www.zipnet.nl/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=J99OOg6f4c0bUSq7jrRwUvoD%2FjgTjzkCOu77BkHgypI%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768191330"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=J99OOg6f4c0bUSq7jrRwUvoD%2FjgTjzkCOu77BkHgypI%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768191330"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Page title: 301 Moved Permanently
<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>
Open service 75.2.43.161:443 · www.zipnet.nl
2026-01-12 04:14
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/html; charset=UTF-8
Date: Mon, 12 Jan 2026 04:14:30 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=5jmFK%2BVUHsUNYChrrnPswtM9J%2FzwKWHr4x9nC5ngs%2BQ%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768191270"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=5jmFK%2BVUHsUNYChrrnPswtM9J%2FzwKWHr4x9nC5ngs%2BQ%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768191270"
Server: Heroku
Set-Cookie: CRAFT_CSRF_TOKEN=64be613bef61dad6a9234d4d816e806e645d6de7f2827609e8e15d1e1fce7edba%3A2%3A%7Bi%3A0%3Bs%3A16%3A%22CRAFT_CSRF_TOKEN%22%3Bi%3A1%3Bs%3A40%3A%22oYP8BNu5ueQvJUVUmq7tQeOiNwt3lLnxU1M91ib_%22%3B%7D; path=/; secure; HttpOnly
Via: 1.1 heroku-router
Connection: close
Transfer-Encoding: chunked
Open service 15.197.129.158:443 · www.zipnet.nl
2026-01-12 04:14
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/html; charset=UTF-8
Date: Mon, 12 Jan 2026 04:14:30 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=sDzGuWUInukEHsSzMwxty9rhC3RnQ8CpRX2%2F2XVjvJI%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768191269"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=sDzGuWUInukEHsSzMwxty9rhC3RnQ8CpRX2%2F2XVjvJI%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768191269"
Server: Heroku
Set-Cookie: CRAFT_CSRF_TOKEN=c22135a062bdf468ae0923998d7f3e040ba364369726c229051f8e6af07870eea%3A2%3A%7Bi%3A0%3Bs%3A16%3A%22CRAFT_CSRF_TOKEN%22%3Bi%3A1%3Bs%3A40%3A%22b7KNoHirQGVvJNhbCTKBkfUA1SeK1RECAoBsBqkL%22%3B%7D; path=/; secure; HttpOnly
Via: 1.1 heroku-router
Connection: close
Transfer-Encoding: chunked
Open service 99.83.217.1:443 · www.zipnet.nl
2026-01-12 04:14
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/html; charset=UTF-8
Date: Mon, 12 Jan 2026 04:14:29 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=sDzGuWUInukEHsSzMwxty9rhC3RnQ8CpRX2%2F2XVjvJI%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768191269"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=sDzGuWUInukEHsSzMwxty9rhC3RnQ8CpRX2%2F2XVjvJI%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768191269"
Server: Heroku
Set-Cookie: CRAFT_CSRF_TOKEN=42b76b884ddd31e21038bd53f0ec37b14c245d75d6dfa6c2bec1e656085d845ea%3A2%3A%7Bi%3A0%3Bs%3A16%3A%22CRAFT_CSRF_TOKEN%22%3Bi%3A1%3Bs%3A40%3A%22veADhikZ05iOOw_2UU2rfYa3vqhJTY6P5k8pyfi-%22%3B%7D; path=/; secure; HttpOnly
Via: 1.1 heroku-router
Connection: close
Transfer-Encoding: chunked
Open service 76.223.11.49:443 · www.zipnet.nl
2026-01-12 04:14
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/html; charset=UTF-8
Date: Mon, 12 Jan 2026 04:14:30 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=sDzGuWUInukEHsSzMwxty9rhC3RnQ8CpRX2%2F2XVjvJI%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768191269"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=sDzGuWUInukEHsSzMwxty9rhC3RnQ8CpRX2%2F2XVjvJI%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768191269"
Server: Heroku
Set-Cookie: CRAFT_CSRF_TOKEN=dc750a4fd61d2b923a91000fd687e3469daae4dabe1ed563247b114821c4c163a%3A2%3A%7Bi%3A0%3Bs%3A16%3A%22CRAFT_CSRF_TOKEN%22%3Bi%3A1%3Bs%3A40%3A%22DilHCipYW_YAQ10-ro4s9CSi9g4dwbGFzRbtoxQ1%22%3B%7D; path=/; secure; HttpOnly
Via: 1.1 heroku-router
Connection: close
Transfer-Encoding: chunked
Open service 15.197.129.158:80 · www.zipnet.nl
2026-01-12 04:14
HTTP/1.1 301 Moved Permanently
Content-Length: 162
Content-Type: text/html
Date: Mon, 12 Jan 2026 04:15:30 GMT
Location: https://www.zipnet.nl/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=J99OOg6f4c0bUSq7jrRwUvoD%2FjgTjzkCOu77BkHgypI%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768191330"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=J99OOg6f4c0bUSq7jrRwUvoD%2FjgTjzkCOu77BkHgypI%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768191330"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
Page title: 301 Moved Permanently
<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>
Open service 15.197.129.158:443 · www.zipnet.nl
2026-01-09 20:07
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/html; charset=UTF-8
Date: Fri, 09 Jan 2026 20:07:20 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=P7Zr3ZsZzKq2Rkd9DEptxXHo0%2Bsldl9zWqxnefSDFqQ%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767989239"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=P7Zr3ZsZzKq2Rkd9DEptxXHo0%2Bsldl9zWqxnefSDFqQ%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767989239"
Server: Heroku
Set-Cookie: CRAFT_CSRF_TOKEN=ae39d2e2917d00b5b963cb264e91ac50dc627a54e1239c5a54be76468479c519a%3A2%3A%7Bi%3A0%3Bs%3A16%3A%22CRAFT_CSRF_TOKEN%22%3Bi%3A1%3Bs%3A40%3A%22YC-Yzb9ZPj0N8miHjKTzcLed-bXytkKJx3TrnOJG%22%3B%7D; path=/; secure; HttpOnly
Via: 1.1 heroku-router
Connection: close
Transfer-Encoding: chunked
Open service 15.197.129.158:443 · www.zipnet.nl
2026-01-03 01:00
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/html; charset=UTF-8
Date: Sat, 03 Jan 2026 01:00:40 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Qura6KhuJ7Gs3l9qrZckyQmaQa9U9ARGmZ1AHpPKmVA%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767402040"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Qura6KhuJ7Gs3l9qrZckyQmaQa9U9ARGmZ1AHpPKmVA%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767402040"
Server: Heroku
Set-Cookie: CRAFT_CSRF_TOKEN=e5ee887e24a7695c1f24b0fa5f18a6a9193a69dbf6d9a65d413feda6a3bfcdbba%3A2%3A%7Bi%3A0%3Bs%3A16%3A%22CRAFT_CSRF_TOKEN%22%3Bi%3A1%3Bs%3A40%3A%22Xw9WVrTZy8BViFWUvQpqQHHgxl5MGCy9M3veuVlj%22%3B%7D; path=/; secure; HttpOnly
Via: 1.1 heroku-router
Connection: close
Transfer-Encoding: chunked
Open service 15.197.129.158:443 · www.zipnet.nl
2025-12-30 14:57
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/html; charset=UTF-8
Date: Tue, 30 Dec 2025 14:57:17 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=hodoZq3dD4Lqfl9nK5djE7aAVeKu8qNBHeRcaF%2FNAVo%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767106636"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=hodoZq3dD4Lqfl9nK5djE7aAVeKu8qNBHeRcaF%2FNAVo%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767106636"
Server: Heroku
Set-Cookie: CRAFT_CSRF_TOKEN=158510e9c75223cfecfa4487b69e53710fa4279b8496064bde884413d4539338a%3A2%3A%7Bi%3A0%3Bs%3A16%3A%22CRAFT_CSRF_TOKEN%22%3Bi%3A1%3Bs%3A40%3A%22o9zu98H4RRviBDuSNh6P2deag9DwCAgRFYX5q8zm%22%3B%7D; path=/; secure; HttpOnly
Via: 1.1 heroku-router
Connection: close
Transfer-Encoding: chunked
Open service 15.197.129.158:443 · www.zipnet.nl
2025-12-22 10:22
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/html; charset=UTF-8
Date: Mon, 22 Dec 2025 10:22:24 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=qajgUNky2mokIw1XiFxeteYL83bljXF0Op09uLOVhDY%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766398944"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=qajgUNky2mokIw1XiFxeteYL83bljXF0Op09uLOVhDY%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766398944"
Server: Heroku
Set-Cookie: CRAFT_CSRF_TOKEN=f4d1e2ac651a6e5a540e3dac2e3c693c9b9e204a460a59d1ee60ba53ad302ee2a%3A2%3A%7Bi%3A0%3Bs%3A16%3A%22CRAFT_CSRF_TOKEN%22%3Bi%3A1%3Bs%3A40%3A%22g_iZEldl0r6lSE5jWD5XYkYbCdyQLzZ8ar1Ecp4e%22%3B%7D; path=/; secure; HttpOnly
Via: 1.1 heroku-router
Connection: close
Transfer-Encoding: chunked
Open service 15.197.129.158:443 · www.zipnet.nl
2025-12-21 11:13
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/html; charset=UTF-8
Date: Sun, 21 Dec 2025 11:13:25 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=fcYE3iBnGquZKST0FY0hU7SaSEikmxTTgab3K6F3GP4%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766315605"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=fcYE3iBnGquZKST0FY0hU7SaSEikmxTTgab3K6F3GP4%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766315605"
Server: Heroku
Set-Cookie: CRAFT_CSRF_TOKEN=da57477b7ccb18be9dd69a01381a6c085254d13517617fa3bda3939a0e6498bba%3A2%3A%7Bi%3A0%3Bs%3A16%3A%22CRAFT_CSRF_TOKEN%22%3Bi%3A1%3Bs%3A40%3A%22xbeus1xHPF-TfBJsFgTapzjVO87M2b-UqTM5Z3BN%22%3B%7D; path=/; secure; HttpOnly
Via: 1.1 heroku-router
Connection: close
Transfer-Encoding: chunked
Open service 15.197.129.158:443 · www.zipnet.nl
2025-12-19 07:38
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/html; charset=UTF-8
Date: Fri, 19 Dec 2025 07:38:30 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=uzyLMu3ehP1WC0TrTQ%2F9oAV43FeHFGj88SDIAvCvKAM%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766129910"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=uzyLMu3ehP1WC0TrTQ%2F9oAV43FeHFGj88SDIAvCvKAM%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766129910"
Server: Heroku
Set-Cookie: CRAFT_CSRF_TOKEN=26a13f5da41007365e0959c682e4c7a89657d17656886303358eae3ae0641dd3a%3A2%3A%7Bi%3A0%3Bs%3A16%3A%22CRAFT_CSRF_TOKEN%22%3Bi%3A1%3Bs%3A40%3A%2272eY5YuXgMrnmTQMpXouevKW83-i-_7XT7cEeZsU%22%3B%7D; path=/; secure; HttpOnly
Via: 1.1 heroku-router
Connection: close
Transfer-Encoding: chunked