Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 35.71.150.51:443 · api.neem.ws
2026-01-09 13:06
HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 13:06:31 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit: limit=100, remaining=98, reset=898
Ratelimit-Policy: 100;w=900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=pMwXXpaYHS4vy31qkOajT5dkfI%2BwLGjwMzbdk01YbTM%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767963991"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=pMwXXpaYHS4vy31qkOajT5dkfI%2BwLGjwMzbdk01YbTM%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767963991"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 3.33.161.45:80 · api.neem.ws
2026-01-09 04:31
HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 04:32:49 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit: limit=100, remaining=98, reset=840
Ratelimit-Policy: 100;w=900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=G2ivsClBY1Sjq%2FS0ZlWqoQUZFq6BOAM4%2B%2Fbt2WCq9QA%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767933169"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=G2ivsClBY1Sjq%2FS0ZlWqoQUZFq6BOAM4%2B%2Fbt2WCq9QA%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767933169"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 35.71.150.51:443 · api.neem.ws
2026-01-02 07:45
HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 07:45:33 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit: limit=100, remaining=98, reset=900
Ratelimit-Policy: 100;w=900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=To1VUQjL1SrFF9mEIShab3YyaVyuA2HK0bxaGVLqelc%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767339933"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=To1VUQjL1SrFF9mEIShab3YyaVyuA2HK0bxaGVLqelc%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767339933"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 3.33.161.45:80 · api.neem.ws
2026-01-02 04:50
HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 04:51:02 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit: limit=100, remaining=98, reset=900
Ratelimit-Policy: 100;w=900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=QwEJO%2BwG9FeAEPr6MGKkLf40p0Uq5t%2F%2FllYAS46eI5U%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767329462"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=QwEJO%2BwG9FeAEPr6MGKkLf40p0Uq5t%2F%2FllYAS46eI5U%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767329462"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 3.33.161.45:80 · api.neem.ws
2025-12-30 14:42
HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 30 Dec 2025 14:42:06 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit: limit=100, remaining=98, reset=900
Ratelimit-Policy: 100;w=900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=SQmAz%2FUAVIjxXUUaLFWPpwC2Y34gZ3uGV68DEYywnQ0%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767105726"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=SQmAz%2FUAVIjxXUUaLFWPpwC2Y34gZ3uGV68DEYywnQ0%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767105726"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 35.71.150.51:443 · api.neem.ws
2025-12-23 05:40
HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 05:40:51 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit: limit=100, remaining=98, reset=900
Ratelimit-Policy: 100;w=900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=6unGFifOaeD933lh%2BGccy8FPJhkS8JbccFuZAx1Sdto%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766468451"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=6unGFifOaeD933lh%2BGccy8FPJhkS8JbccFuZAx1Sdto%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766468451"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 3.33.161.45:80 · api.neem.ws
2025-12-22 10:49
HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 10:49:31 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit: limit=100, remaining=98, reset=900
Ratelimit-Policy: 100;w=900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=vqMZt6vBmS4aA7KofGPvSjMY5szhIJqqOKjnCeHY08M%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766400571"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=vqMZt6vBmS4aA7KofGPvSjMY5szhIJqqOKjnCeHY08M%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766400571"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 3.33.161.45:80 · api.neem.ws
2025-12-21 10:49
HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 10:49:52 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit: limit=100, remaining=98, reset=900
Ratelimit-Policy: 100;w=900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=LEMMvWKn6r0DK%2BUmKjchr7VzxYwvBOsFapPJTZlSTpk%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766314192"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=LEMMvWKn6r0DK%2BUmKjchr7VzxYwvBOsFapPJTZlSTpk%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766314192"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 35.71.150.51:443 · api.neem.ws
2025-12-20 14:02
HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 14:02:26 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit: limit=100, remaining=98, reset=900
Ratelimit-Policy: 100;w=900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=45fDKxEDEj1bHNSr12EfYOUzDD3Q8jqxwYH7w6vAS2Q%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766239346"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=45fDKxEDEj1bHNSr12EfYOUzDD3Q8jqxwYH7w6vAS2Q%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766239346"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 3.33.161.45:80 · api.neem.ws
2025-12-19 08:42
HTTP/1.1 404 Not Found
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 08:42:37 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit: limit=100, remaining=98, reset=900
Ratelimit-Policy: 100;w=900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=2wraQuuE%2Bun2Wi2dXEwYApP52pMgyQNjQWQcWkOvtIE%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766133757"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=2wraQuuE%2Bun2Wi2dXEwYApP52pMgyQNjQWQcWkOvtIE%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766133757"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>