Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb4b7d192f0a75c5c315c01d24f3e886a34939ab995
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /api/admin/users
GET /api/orders/{orderNumber}
GET /api/products
POST /api/login
POST /api/logout
POST /api/orders
PUT /api/admin/users/{userId}
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb4b7d192f0a75c5c315c01d24f3e886a34939ab995
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /api/admin/users
GET /api/orders/{orderNumber}
GET /api/products
POST /api/login
POST /api/logout
POST /api/orders
PUT /api/admin/users/{userId}
Open service 75.2.60.68:80 · api.d-s-2.com
2026-01-09 21:33
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0
Content-Length: 758
Content-Type: text/html; charset=UTF-8
Date: Fri, 09 Jan 2026 21:34:54 GMT
Etag: W/"2f6-189ae34db98"
Last-Modified: Mon, 31 Jul 2023 23:07:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ZjyLecE5LqRr8NOhUkcKN7%2BO%2FlktnanTKeWUW9IePzM%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767994494"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ZjyLecE5LqRr8NOhUkcKN7%2BO%2FlktnanTKeWUW9IePzM%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767994494"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title></title>
</head>
<body>
<div id="app"></div>
<script src="main.js"></script>
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bulma@0.8.0/css/bulma.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/css/all.css"
integrity="sha256-46qynGAkLSFpVbEBog43gvNhfrOj+BmwXdxFgVK/Kvc=" crossorigin="anonymous" />
<style>
ul {
list-style: revert;
list-style-position: inside;
}
h1,
h2,
h3,
h4,
h5,
h6 {
font-size: revert;
margin: 10px 0 !important;
}
pre {
margin: 10px 0 !important;
}
p {
margin: 10px 0;
}
</style>
</body>
</html>
Open service 35.71.179.82:443 · api.d-s-2.com
2026-01-09 17:32
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0
Content-Length: 758
Content-Type: text/html; charset=UTF-8
Date: Fri, 09 Jan 2026 17:32:03 GMT
Etag: W/"2f6-189ae34db98"
Last-Modified: Mon, 31 Jul 2023 23:07:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=di4F7qfO%2FZ8K7aCqe1zCtRg%2Ff8Gqw1ZSv9bHNZUlLl4%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767979923"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=di4F7qfO%2FZ8K7aCqe1zCtRg%2Ff8Gqw1ZSv9bHNZUlLl4%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767979923"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title></title>
</head>
<body>
<div id="app"></div>
<script src="main.js"></script>
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bulma@0.8.0/css/bulma.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/css/all.css"
integrity="sha256-46qynGAkLSFpVbEBog43gvNhfrOj+BmwXdxFgVK/Kvc=" crossorigin="anonymous" />
<style>
ul {
list-style: revert;
list-style-position: inside;
}
h1,
h2,
h3,
h4,
h5,
h6 {
font-size: revert;
margin: 10px 0 !important;
}
pre {
margin: 10px 0 !important;
}
p {
margin: 10px 0;
}
</style>
</body>
</html>
Open service 75.2.60.68:80 · api.d-s-2.com
2026-01-02 12:52
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0
Content-Length: 758
Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Jan 2026 12:52:46 GMT
Etag: W/"2f6-189ae34db98"
Last-Modified: Mon, 31 Jul 2023 23:07:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=zithvse1EgQ4fvB%2BNuiXQHOTqiNcP5Rr00LJMcJqQxc%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767358366"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=zithvse1EgQ4fvB%2BNuiXQHOTqiNcP5Rr00LJMcJqQxc%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767358366"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title></title>
</head>
<body>
<div id="app"></div>
<script src="main.js"></script>
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bulma@0.8.0/css/bulma.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/css/all.css"
integrity="sha256-46qynGAkLSFpVbEBog43gvNhfrOj+BmwXdxFgVK/Kvc=" crossorigin="anonymous" />
<style>
ul {
list-style: revert;
list-style-position: inside;
}
h1,
h2,
h3,
h4,
h5,
h6 {
font-size: revert;
margin: 10px 0 !important;
}
pre {
margin: 10px 0 !important;
}
p {
margin: 10px 0;
}
</style>
</body>
</html>
Open service 35.71.179.82:443 · api.d-s-2.com
2026-01-02 08:58
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0
Content-Length: 758
Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Jan 2026 08:58:35 GMT
Etag: W/"2f6-189ae34db98"
Last-Modified: Mon, 31 Jul 2023 23:07:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=o8GXF8V9I5H0yDi5%2BmAmbCeOgh%2BgsiKKPaZVeedW%2FYE%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767344315"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=o8GXF8V9I5H0yDi5%2BmAmbCeOgh%2BgsiKKPaZVeedW%2FYE%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767344315"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title></title>
</head>
<body>
<div id="app"></div>
<script src="main.js"></script>
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bulma@0.8.0/css/bulma.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/css/all.css"
integrity="sha256-46qynGAkLSFpVbEBog43gvNhfrOj+BmwXdxFgVK/Kvc=" crossorigin="anonymous" />
<style>
ul {
list-style: revert;
list-style-position: inside;
}
h1,
h2,
h3,
h4,
h5,
h6 {
font-size: revert;
margin: 10px 0 !important;
}
pre {
margin: 10px 0 !important;
}
p {
margin: 10px 0;
}
</style>
</body>
</html>
Open service 35.71.179.82:443 · api.d-s-2.com
2025-12-22 21:32
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0
Content-Length: 758
Content-Type: text/html; charset=UTF-8
Date: Mon, 22 Dec 2025 21:32:01 GMT
Etag: W/"2f6-189ae34db98"
Last-Modified: Mon, 31 Jul 2023 23:07:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=2oldXkxpWrIlWs0mjHtgRTRaJRH6MyXMel1ttDGKDlk%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766439121"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=2oldXkxpWrIlWs0mjHtgRTRaJRH6MyXMel1ttDGKDlk%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766439121"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title></title>
</head>
<body>
<div id="app"></div>
<script src="main.js"></script>
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bulma@0.8.0/css/bulma.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/css/all.css"
integrity="sha256-46qynGAkLSFpVbEBog43gvNhfrOj+BmwXdxFgVK/Kvc=" crossorigin="anonymous" />
<style>
ul {
list-style: revert;
list-style-position: inside;
}
h1,
h2,
h3,
h4,
h5,
h6 {
font-size: revert;
margin: 10px 0 !important;
}
pre {
margin: 10px 0 !important;
}
p {
margin: 10px 0;
}
</style>
</body>
</html>
Open service 75.2.60.68:80 · api.d-s-2.com
2025-12-22 18:22
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0
Content-Length: 758
Content-Type: text/html; charset=UTF-8
Date: Mon, 22 Dec 2025 18:22:34 GMT
Etag: W/"2f6-189ae34db98"
Last-Modified: Mon, 31 Jul 2023 23:07:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=g7QqS54RVoL5XrK1M2drQTCHbQb2%2BYUI8Iy1RmWA2FQ%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766427754"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=g7QqS54RVoL5XrK1M2drQTCHbQb2%2BYUI8Iy1RmWA2FQ%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766427754"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title></title>
</head>
<body>
<div id="app"></div>
<script src="main.js"></script>
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bulma@0.8.0/css/bulma.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/css/all.css"
integrity="sha256-46qynGAkLSFpVbEBog43gvNhfrOj+BmwXdxFgVK/Kvc=" crossorigin="anonymous" />
<style>
ul {
list-style: revert;
list-style-position: inside;
}
h1,
h2,
h3,
h4,
h5,
h6 {
font-size: revert;
margin: 10px 0 !important;
}
pre {
margin: 10px 0 !important;
}
p {
margin: 10px 0;
}
</style>
</body>
</html>
Open service 35.71.179.82:443 · api.d-s-2.com
2025-12-20 22:48
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0
Content-Length: 758
Content-Type: text/html; charset=UTF-8
Date: Sat, 20 Dec 2025 22:48:15 GMT
Etag: W/"2f6-189ae34db98"
Last-Modified: Mon, 31 Jul 2023 23:07:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=gyQ28MjBE5%2FndOY1DNKvTNw8fKCHynd8OrC5nZ0JDFE%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766270895"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=gyQ28MjBE5%2FndOY1DNKvTNw8fKCHynd8OrC5nZ0JDFE%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766270895"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title></title>
</head>
<body>
<div id="app"></div>
<script src="main.js"></script>
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bulma@0.8.0/css/bulma.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/css/all.css"
integrity="sha256-46qynGAkLSFpVbEBog43gvNhfrOj+BmwXdxFgVK/Kvc=" crossorigin="anonymous" />
<style>
ul {
list-style: revert;
list-style-position: inside;
}
h1,
h2,
h3,
h4,
h5,
h6 {
font-size: revert;
margin: 10px 0 !important;
}
pre {
margin: 10px 0 !important;
}
p {
margin: 10px 0;
}
</style>
</body>
</html>
Open service 75.2.60.68:80 · api.d-s-2.com
2025-12-20 22:48
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0
Content-Length: 758
Content-Type: text/html; charset=UTF-8
Date: Sat, 20 Dec 2025 22:48:17 GMT
Etag: W/"2f6-189ae34db98"
Last-Modified: Mon, 31 Jul 2023 23:07:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=bjqDMggqNTs64Wkc5mrDpT7V33CX7LUy%2BgoA2IkCCwQ%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766270897"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=bjqDMggqNTs64Wkc5mrDpT7V33CX7LUy%2BgoA2IkCCwQ%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766270897"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title></title>
</head>
<body>
<div id="app"></div>
<script src="main.js"></script>
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bulma@0.8.0/css/bulma.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/css/all.css"
integrity="sha256-46qynGAkLSFpVbEBog43gvNhfrOj+BmwXdxFgVK/Kvc=" crossorigin="anonymous" />
<style>
ul {
list-style: revert;
list-style-position: inside;
}
h1,
h2,
h3,
h4,
h5,
h6 {
font-size: revert;
margin: 10px 0 !important;
}
pre {
margin: 10px 0 !important;
}
p {
margin: 10px 0;
}
</style>
</body>
</html>
Open service 75.2.60.68:80 · api.d-s-2.com
2025-12-19 02:12
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0
Content-Length: 758
Content-Type: text/html; charset=UTF-8
Date: Fri, 19 Dec 2025 02:12:09 GMT
Etag: W/"2f6-189ae34db98"
Last-Modified: Mon, 31 Jul 2023 23:07:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=CySSN4JDKp9mvcVXuBfqNmlvCvL%2Bb51f%2BC272AJnQDE%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766110329"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=CySSN4JDKp9mvcVXuBfqNmlvCvL%2Bb51f%2BC272AJnQDE%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766110329"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title></title>
</head>
<body>
<div id="app"></div>
<script src="main.js"></script>
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bulma@0.8.0/css/bulma.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/css/all.css"
integrity="sha256-46qynGAkLSFpVbEBog43gvNhfrOj+BmwXdxFgVK/Kvc=" crossorigin="anonymous" />
<style>
ul {
list-style: revert;
list-style-position: inside;
}
h1,
h2,
h3,
h4,
h5,
h6 {
font-size: revert;
margin: 10px 0 !important;
}
pre {
margin: 10px 0 !important;
}
p {
margin: 10px 0;
}
</style>
</body>
</html>
Open service 35.71.179.82:443 · api.d-s-2.com
2025-12-19 02:12
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0
Content-Length: 758
Content-Type: text/html; charset=UTF-8
Date: Fri, 19 Dec 2025 02:12:06 GMT
Etag: W/"2f6-189ae34db98"
Last-Modified: Mon, 31 Jul 2023 23:07:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=6EPgUAYEx2v4sAVWRm2ef4XoySX5kFygzafY3bkNwi4%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766110326"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=6EPgUAYEx2v4sAVWRm2ef4XoySX5kFygzafY3bkNwi4%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766110326"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title></title>
</head>
<body>
<div id="app"></div>
<script src="main.js"></script>
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bulma@0.8.0/css/bulma.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.11.2/css/all.css"
integrity="sha256-46qynGAkLSFpVbEBog43gvNhfrOj+BmwXdxFgVK/Kvc=" crossorigin="anonymous" />
<style>
ul {
list-style: revert;
list-style-position: inside;
}
h1,
h2,
h3,
h4,
h5,
h6 {
font-size: revert;
margin: 10px 0 !important;
}
pre {
margin: 10px 0 !important;
}
p {
margin: 10px 0;
}
</style>
</body>
</html>