Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b936c53ec32c1356e8afd8f49e6e3762ce71eb22f
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /bo/user-account/delete-by-owner/{id}
GET /bo/analytics/categories
GET /bo/analytics/kpis
GET /bo/analytics/revenues
GET /bo/analytics/trends
GET /bo/asset_users
GET /bo/asset_users/select
GET /bo/asset_users/{id}
GET /bo/auth
GET /bo/auth/logout
GET /bo/auth/refresh
GET /bo/batch/executions
GET /bo/batch/history/{batchType}
GET /bo/batch/last-execution/{batchType}
GET /bo/batch/recent-failures
GET /bo/batch/transaction-timeout/count
GET /bo/boxs
GET /bo/campaigns
GET /bo/category
GET /bo/companies
GET /bo/companies/names
GET /bo/companies/{id}
GET /bo/customers
GET /bo/customers/by-company/{companyId}
GET /bo/customers/searchBy
GET /bo/customers/{id}
GET /bo/dashboard/allAccountCuNb
GET /bo/dashboard/allAccountSeNb
GET /bo/dashboard/allActifAccountCuNb
GET /bo/dashboard/allActifAccountCuNbByLevel
GET /bo/dashboard/allActifAccountSeNb
GET /bo/dashboard/balance
GET /bo/dashboard/companyNumber
GET /bo/dashboard/nbOrders
GET /bo/dashboard/nbVouchers
GET /bo/dashboard/stats
GET /bo/dashboard/totalAmountByLevel
GET /bo/dashboard/totalAmountBySeller
GET /bo/dashboard/totalCommission
GET /bo/dashboard/totalCommissionCustomer
GET /bo/giftcards
GET /bo/offers
GET /bo/orders
GET /bo/orders/{orderId}
GET /bo/parameters/{name}
GET /bo/pictures/category-icon/{id}
GET /bo/pictures/customer/{id}
GET /bo/pictures/seller-logo/{id}
GET /bo/pictures/{id}
GET /bo/products
GET /bo/products/items
GET /bo/sellers
GET /bo/sellers/searchBy
GET /bo/sellers/{id}
GET /bo/sellers/{id}/chiffre-affaire
GET /bo/sellers/{id}/solde
GET /bo/sponsorship-code
GET /bo/transactions
GET /bo/transactions/per-hour
GET /bo/transactions/totals
GET /bo/transactions/{personId}
GET /bo/user-account
GET /bo/user-account/active-by-owner/{id}
GET /bo/user-account/block-by-owner/{id}
GET /bo/user-account/owner/{ownerId}
GET /bo/user-account/restore-by-owner/{id}
GET /bo/vouchers/{idPerson}/{type}
GET /bo/wallet/customer-solde/{id}
POST /bo/asset_users/password_reset_email
POST /bo/batch/transaction-timeout
POST /bo/batch/voucher-reminders
POST /bo/companies/account-upgrade
POST /bo/companies/vouchers
POST /bo/giftcards/create-batch
POST /bo/giftcards/{id}/destroy
POST /bo/notifications/broadcast
POST /bo/orders/{orderId}/cancel
POST /bo/vouchers
POST /bo/wallet/cashout
PUT /bo/asset_users/block/{id}
PUT /bo/asset_users/password_reset
PUT /bo/asset_users/password_reset/{id}
PUT /bo/asset_users/removed/{id}
PUT /bo/asset_users/unblock/{id}
PUT /bo/companies/update-subscription-status/{levelId}
PUT /bo/offers/{idOffer}
PUT /bo/orders/{orderId}/status
PUT /bo/parameters/{name}/{newValue}
PUT /bo/products/items/{id}
PUT /bo/products/{id}
PUT /bo/sponsorship-code/{idSponsorshipCode}
PUT /bo/transactions/return/{transactionId}
PUT /bo/user-account/block/{id}
PUT /bo/user-account/unblock/{id}
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b936c53ec32c1356e8afd8f49e6e3762c8e22d23c
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /bo/user-account/delete-by-owner/{id}
GET /bo/analytics/categories
GET /bo/analytics/kpis
GET /bo/analytics/revenues
GET /bo/analytics/trends
GET /bo/asset_users
GET /bo/asset_users/select
GET /bo/asset_users/{id}
GET /bo/auth
GET /bo/auth/logout
GET /bo/auth/refresh
GET /bo/batch/executions
GET /bo/batch/history/{batchType}
GET /bo/batch/last-execution/{batchType}
GET /bo/batch/recent-failures
GET /bo/batch/transaction-timeout/count
GET /bo/boxs
GET /bo/category
GET /bo/companies
GET /bo/companies/names
GET /bo/companies/{id}
GET /bo/customers
GET /bo/customers/by-company/{companyId}
GET /bo/customers/searchBy
GET /bo/customers/{id}
GET /bo/dashboard/allAccountCuNb
GET /bo/dashboard/allAccountSeNb
GET /bo/dashboard/allActifAccountCuNb
GET /bo/dashboard/allActifAccountCuNbByLevel
GET /bo/dashboard/allActifAccountSeNb
GET /bo/dashboard/balance
GET /bo/dashboard/companyNumber
GET /bo/dashboard/nbOrders
GET /bo/dashboard/nbVouchers
GET /bo/dashboard/stats
GET /bo/dashboard/totalAmountByLevel
GET /bo/dashboard/totalAmountBySeller
GET /bo/dashboard/totalCommission
GET /bo/dashboard/totalCommissionCustomer
GET /bo/giftcards
GET /bo/offers
GET /bo/orders
GET /bo/orders/{orderId}
GET /bo/parameters/{name}
GET /bo/pictures/category-icon/{id}
GET /bo/pictures/customer/{id}
GET /bo/pictures/seller-logo/{id}
GET /bo/pictures/{id}
GET /bo/products
GET /bo/products/items
GET /bo/sellers
GET /bo/sellers/searchBy
GET /bo/sellers/{id}
GET /bo/sellers/{id}/chiffre-affaire
GET /bo/sellers/{id}/solde
GET /bo/sponsorship-code
GET /bo/transactions
GET /bo/transactions/per-hour
GET /bo/transactions/totals
GET /bo/transactions/{personId}
GET /bo/user-account
GET /bo/user-account/active-by-owner/{id}
GET /bo/user-account/block-by-owner/{id}
GET /bo/user-account/owner/{ownerId}
GET /bo/user-account/restore-by-owner/{id}
GET /bo/vouchers/{idPerson}/{type}
GET /bo/wallet/customer-solde/{id}
POST /bo/asset_users/password_reset_email
POST /bo/batch/transaction-timeout
POST /bo/batch/voucher-reminders
POST /bo/companies/account-upgrade
POST /bo/companies/vouchers
POST /bo/giftcards/create-batch
POST /bo/giftcards/{id}/destroy
POST /bo/orders/{orderId}/cancel
POST /bo/vouchers
POST /bo/wallet/cashout
PUT /bo/asset_users/block/{id}
PUT /bo/asset_users/password_reset
PUT /bo/asset_users/password_reset/{id}
PUT /bo/asset_users/removed/{id}
PUT /bo/asset_users/unblock/{id}
PUT /bo/companies/update-subscription-status/{levelId}
PUT /bo/offers/{idOffer}
PUT /bo/orders/{orderId}/status
PUT /bo/parameters/{name}/{newValue}
PUT /bo/products/items/{id}
PUT /bo/products/{id}
PUT /bo/sponsorship-code/{idSponsorshipCode}
PUT /bo/transactions/return/{transactionId}
PUT /bo/user-account/block/{id}
PUT /bo/user-account/unblock/{id}
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b936c53ec32c1356e8afd8f49e6e3762ce71eb22f
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /bo/user-account/delete-by-owner/{id}
GET /bo/analytics/categories
GET /bo/analytics/kpis
GET /bo/analytics/revenues
GET /bo/analytics/trends
GET /bo/asset_users
GET /bo/asset_users/select
GET /bo/asset_users/{id}
GET /bo/auth
GET /bo/auth/logout
GET /bo/auth/refresh
GET /bo/batch/executions
GET /bo/batch/history/{batchType}
GET /bo/batch/last-execution/{batchType}
GET /bo/batch/recent-failures
GET /bo/batch/transaction-timeout/count
GET /bo/boxs
GET /bo/campaigns
GET /bo/category
GET /bo/companies
GET /bo/companies/names
GET /bo/companies/{id}
GET /bo/customers
GET /bo/customers/by-company/{companyId}
GET /bo/customers/searchBy
GET /bo/customers/{id}
GET /bo/dashboard/allAccountCuNb
GET /bo/dashboard/allAccountSeNb
GET /bo/dashboard/allActifAccountCuNb
GET /bo/dashboard/allActifAccountCuNbByLevel
GET /bo/dashboard/allActifAccountSeNb
GET /bo/dashboard/balance
GET /bo/dashboard/companyNumber
GET /bo/dashboard/nbOrders
GET /bo/dashboard/nbVouchers
GET /bo/dashboard/stats
GET /bo/dashboard/totalAmountByLevel
GET /bo/dashboard/totalAmountBySeller
GET /bo/dashboard/totalCommission
GET /bo/dashboard/totalCommissionCustomer
GET /bo/giftcards
GET /bo/offers
GET /bo/orders
GET /bo/orders/{orderId}
GET /bo/parameters/{name}
GET /bo/pictures/category-icon/{id}
GET /bo/pictures/customer/{id}
GET /bo/pictures/seller-logo/{id}
GET /bo/pictures/{id}
GET /bo/products
GET /bo/products/items
GET /bo/sellers
GET /bo/sellers/searchBy
GET /bo/sellers/{id}
GET /bo/sellers/{id}/chiffre-affaire
GET /bo/sellers/{id}/solde
GET /bo/sponsorship-code
GET /bo/transactions
GET /bo/transactions/per-hour
GET /bo/transactions/totals
GET /bo/transactions/{personId}
GET /bo/user-account
GET /bo/user-account/active-by-owner/{id}
GET /bo/user-account/block-by-owner/{id}
GET /bo/user-account/owner/{ownerId}
GET /bo/user-account/restore-by-owner/{id}
GET /bo/vouchers/{idPerson}/{type}
GET /bo/wallet/customer-solde/{id}
POST /bo/asset_users/password_reset_email
POST /bo/batch/transaction-timeout
POST /bo/batch/voucher-reminders
POST /bo/companies/account-upgrade
POST /bo/companies/vouchers
POST /bo/giftcards/create-batch
POST /bo/giftcards/{id}/destroy
POST /bo/notifications/broadcast
POST /bo/orders/{orderId}/cancel
POST /bo/vouchers
POST /bo/wallet/cashout
PUT /bo/asset_users/block/{id}
PUT /bo/asset_users/password_reset
PUT /bo/asset_users/password_reset/{id}
PUT /bo/asset_users/removed/{id}
PUT /bo/asset_users/unblock/{id}
PUT /bo/companies/update-subscription-status/{levelId}
PUT /bo/offers/{idOffer}
PUT /bo/orders/{orderId}/status
PUT /bo/parameters/{name}/{newValue}
PUT /bo/products/items/{id}
PUT /bo/products/{id}
PUT /bo/sponsorship-code/{idSponsorshipCode}
PUT /bo/transactions/return/{transactionId}
PUT /bo/user-account/block/{id}
PUT /bo/user-account/unblock/{id}
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b936c53ec32c1356e8afd8f49e6e3762c8e22d23c
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /bo/user-account/delete-by-owner/{id}
GET /bo/analytics/categories
GET /bo/analytics/kpis
GET /bo/analytics/revenues
GET /bo/analytics/trends
GET /bo/asset_users
GET /bo/asset_users/select
GET /bo/asset_users/{id}
GET /bo/auth
GET /bo/auth/logout
GET /bo/auth/refresh
GET /bo/batch/executions
GET /bo/batch/history/{batchType}
GET /bo/batch/last-execution/{batchType}
GET /bo/batch/recent-failures
GET /bo/batch/transaction-timeout/count
GET /bo/boxs
GET /bo/category
GET /bo/companies
GET /bo/companies/names
GET /bo/companies/{id}
GET /bo/customers
GET /bo/customers/by-company/{companyId}
GET /bo/customers/searchBy
GET /bo/customers/{id}
GET /bo/dashboard/allAccountCuNb
GET /bo/dashboard/allAccountSeNb
GET /bo/dashboard/allActifAccountCuNb
GET /bo/dashboard/allActifAccountCuNbByLevel
GET /bo/dashboard/allActifAccountSeNb
GET /bo/dashboard/balance
GET /bo/dashboard/companyNumber
GET /bo/dashboard/nbOrders
GET /bo/dashboard/nbVouchers
GET /bo/dashboard/stats
GET /bo/dashboard/totalAmountByLevel
GET /bo/dashboard/totalAmountBySeller
GET /bo/dashboard/totalCommission
GET /bo/dashboard/totalCommissionCustomer
GET /bo/giftcards
GET /bo/offers
GET /bo/orders
GET /bo/orders/{orderId}
GET /bo/parameters/{name}
GET /bo/pictures/category-icon/{id}
GET /bo/pictures/customer/{id}
GET /bo/pictures/seller-logo/{id}
GET /bo/pictures/{id}
GET /bo/products
GET /bo/products/items
GET /bo/sellers
GET /bo/sellers/searchBy
GET /bo/sellers/{id}
GET /bo/sellers/{id}/chiffre-affaire
GET /bo/sellers/{id}/solde
GET /bo/sponsorship-code
GET /bo/transactions
GET /bo/transactions/per-hour
GET /bo/transactions/totals
GET /bo/transactions/{personId}
GET /bo/user-account
GET /bo/user-account/active-by-owner/{id}
GET /bo/user-account/block-by-owner/{id}
GET /bo/user-account/owner/{ownerId}
GET /bo/user-account/restore-by-owner/{id}
GET /bo/vouchers/{idPerson}/{type}
GET /bo/wallet/customer-solde/{id}
POST /bo/asset_users/password_reset_email
POST /bo/batch/transaction-timeout
POST /bo/batch/voucher-reminders
POST /bo/companies/account-upgrade
POST /bo/companies/vouchers
POST /bo/giftcards/create-batch
POST /bo/giftcards/{id}/destroy
POST /bo/orders/{orderId}/cancel
POST /bo/vouchers
POST /bo/wallet/cashout
PUT /bo/asset_users/block/{id}
PUT /bo/asset_users/password_reset
PUT /bo/asset_users/password_reset/{id}
PUT /bo/asset_users/removed/{id}
PUT /bo/asset_users/unblock/{id}
PUT /bo/companies/update-subscription-status/{levelId}
PUT /bo/offers/{idOffer}
PUT /bo/orders/{orderId}/status
PUT /bo/parameters/{name}/{newValue}
PUT /bo/products/items/{id}
PUT /bo/products/{id}
PUT /bo/sponsorship-code/{idSponsorshipCode}
PUT /bo/transactions/return/{transactionId}
PUT /bo/user-account/block/{id}
PUT /bo/user-account/unblock/{id}
Open service 75.2.60.68:443 · api.bo.wellywork.com
2026-01-09 17:35
HTTP/1.1 401 Unauthorized
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: en
Content-Length: 722
Content-Type: text/html;charset=utf-8
Date: Fri, 09 Jan 2026 17:35:22 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=2KlTjh5IcFlwpUHPH%2F%2F06oYI80S0EgROiOVr9a5KjAo%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767980122"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=2KlTjh5IcFlwpUHPH%2F%2F06oYI80S0EgROiOVr9a5KjAo%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767980122"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Page title: HTTP Status 401 – Unauthorized
<!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 401 – Unauthorized</h1><hr class="line" /><p><b>Type</b> Status Report</p><p><b>Message</b> Access Denied</p><p><b>Description</b> The request has not been applied to the target resource because it lacks valid authentication credentials for that resource.</p><hr class="line" /><h3>Apache Tomcat/10.1.17</h3></body></html>
Open service 75.2.60.68:80 · api.bo.wellywork.com
2026-01-09 10:55
HTTP/1.1 401 Unauthorized
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: en
Content-Length: 722
Content-Type: text/html;charset=utf-8
Date: Fri, 09 Jan 2026 10:56:47 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=c4vw%2BJJ1H8XVZlHxTroHHgFcVjE1k0oTAI976ySeSM8%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767956207"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=c4vw%2BJJ1H8XVZlHxTroHHgFcVjE1k0oTAI976ySeSM8%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767956207"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Page title: HTTP Status 401 – Unauthorized
<!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 401 – Unauthorized</h1><hr class="line" /><p><b>Type</b> Status Report</p><p><b>Message</b> Access Denied</p><p><b>Description</b> The request has not been applied to the target resource because it lacks valid authentication credentials for that resource.</p><hr class="line" /><h3>Apache Tomcat/10.1.17</h3></body></html>
Open service 75.2.60.68:443 · api.bo.wellywork.com
2026-01-02 17:03
HTTP/1.1 401 Unauthorized
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: en
Content-Length: 722
Content-Type: text/html;charset=utf-8
Date: Fri, 02 Jan 2026 17:03:28 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=0odEDRxeLuUJZwZ50W3NUPMyikYSUZbqOD5wOSOPa0c%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767373408"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=0odEDRxeLuUJZwZ50W3NUPMyikYSUZbqOD5wOSOPa0c%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767373408"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Page title: HTTP Status 401 – Unauthorized
<!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 401 – Unauthorized</h1><hr class="line" /><p><b>Type</b> Status Report</p><p><b>Message</b> Access Denied</p><p><b>Description</b> The request has not been applied to the target resource because it lacks valid authentication credentials for that resource.</p><hr class="line" /><h3>Apache Tomcat/10.1.17</h3></body></html>
Open service 75.2.60.68:80 · api.bo.wellywork.com
2026-01-02 14:45
HTTP/1.1 401 Unauthorized
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: en
Content-Length: 722
Content-Type: text/html;charset=utf-8
Date: Fri, 02 Jan 2026 14:45:46 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ZyAUZ8OEJ9bqCKIOaiZQvb2LM1N%2BYqmFi6aH69vEJeY%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767365146"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ZyAUZ8OEJ9bqCKIOaiZQvb2LM1N%2BYqmFi6aH69vEJeY%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767365146"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Page title: HTTP Status 401 – Unauthorized
<!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 401 – Unauthorized</h1><hr class="line" /><p><b>Type</b> Status Report</p><p><b>Message</b> Access Denied</p><p><b>Description</b> The request has not been applied to the target resource because it lacks valid authentication credentials for that resource.</p><hr class="line" /><h3>Apache Tomcat/10.1.17</h3></body></html>
Open service 75.2.60.68:443 · api.bo.wellywork.com
2025-12-30 12:52
HTTP/1.1 401 Unauthorized
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: en
Content-Length: 722
Content-Type: text/html;charset=utf-8
Date: Tue, 30 Dec 2025 12:52:21 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=xAWanz4%2B21fNEDLlwVYTUQnIcBy%2FtgNz2BHz%2B8HvqNk%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767099141"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=xAWanz4%2B21fNEDLlwVYTUQnIcBy%2FtgNz2BHz%2B8HvqNk%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767099141"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Page title: HTTP Status 401 – Unauthorized
<!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 401 – Unauthorized</h1><hr class="line" /><p><b>Type</b> Status Report</p><p><b>Message</b> Access Denied</p><p><b>Description</b> The request has not been applied to the target resource because it lacks valid authentication credentials for that resource.</p><hr class="line" /><h3>Apache Tomcat/10.1.17</h3></body></html>
Open service 75.2.60.68:80 · api.bo.wellywork.com
2025-12-23 00:28
HTTP/1.1 401 Unauthorized
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: en
Content-Length: 722
Content-Type: text/html;charset=utf-8
Date: Tue, 23 Dec 2025 00:28:51 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=hJc7VsWfOcH113EHEV7Mnu6QhADhpVPjMhfTOWr0dg4%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766449731"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=hJc7VsWfOcH113EHEV7Mnu6QhADhpVPjMhfTOWr0dg4%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766449731"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Page title: HTTP Status 401 – Unauthorized
<!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 401 – Unauthorized</h1><hr class="line" /><p><b>Type</b> Status Report</p><p><b>Message</b> Access Denied</p><p><b>Description</b> The request has not been applied to the target resource because it lacks valid authentication credentials for that resource.</p><hr class="line" /><h3>Apache Tomcat/10.1.17</h3></body></html>
Open service 75.2.60.68:443 · api.bo.wellywork.com
2025-12-22 15:56
HTTP/1.1 401 Unauthorized
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: en
Content-Length: 722
Content-Type: text/html;charset=utf-8
Date: Mon, 22 Dec 2025 15:56:11 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=uxhNYrxJPZZTEPohxxZudr6D58Q%2F2axPXq8ypS3d8No%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766418971"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=uxhNYrxJPZZTEPohxxZudr6D58Q%2F2axPXq8ypS3d8No%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766418971"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Page title: HTTP Status 401 – Unauthorized
<!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 401 – Unauthorized</h1><hr class="line" /><p><b>Type</b> Status Report</p><p><b>Message</b> Access Denied</p><p><b>Description</b> The request has not been applied to the target resource because it lacks valid authentication credentials for that resource.</p><hr class="line" /><h3>Apache Tomcat/10.1.17</h3></body></html>
Open service 75.2.60.68:80 · api.bo.wellywork.com
2025-12-19 08:31
HTTP/1.1 401 Unauthorized
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: en
Content-Length: 722
Content-Type: text/html;charset=utf-8
Date: Fri, 19 Dec 2025 08:31:43 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=f%2BgwVHJIP7clhhEwIzwDH1E1Jm8kTztG4w2eLoL2K4I%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766133103"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=f%2BgwVHJIP7clhhEwIzwDH1E1Jm8kTztG4w2eLoL2K4I%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766133103"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close
Page title: HTTP Status 401 – Unauthorized
<!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 401 – Unauthorized</h1><hr class="line" /><p><b>Type</b> Status Report</p><p><b>Message</b> Access Denied</p><p><b>Description</b> The request has not been applied to the target resource because it lacks valid authentication credentials for that resource.</p><hr class="line" /><h3>Apache Tomcat/10.1.17</h3></body></html>