Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e5563eb92b778c5aa30de6f200c5ead5203e87ef70
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
GET /bridge-metrics
GET /contracts
GET /contracts/{address}/on-chain-metrics
GET /contributions
GET /github-metrics/{organization}/{name}
GET /npm-downloads/{name}
GET /projects
GET /projects/{id}
GET /projects/{id}/social-metrics
GET /tweet-counts
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e5563eb92b778c5aa30de6f200c5ead5203e87ef70
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
GET /bridge-metrics
GET /contracts
GET /contracts/{address}/on-chain-metrics
GET /contributions
GET /github-metrics/{organization}/{name}
GET /npm-downloads/{name}
GET /projects
GET /projects/{id}
GET /projects/{id}/social-metrics
GET /tweet-counts
Open service 99.83.185.157:443 · api.starknet-db.com
2026-01-10 00:11
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Sat, 10 Jan 2026 00:11:37 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=vnIDvWGJ05TgJd5rE11xWVIHGjc2TOgcxsxIJtBgFG4%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1768003897"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=vnIDvWGJ05TgJd5rE11xWVIHGjc2TOgcxsxIJtBgFG4%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1768003897"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 71
Connection: close
{"timestamp":1768003897321,"status":404,"error":"Not Found","path":"/"}
Open service 3.33.249.164:80 · api.starknet-db.com
2026-01-09 07:16
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Fri, 09 Jan 2026 07:18:00 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=IivpUceablaOlr7vtQsxk9w2O5%2FtpdOZvWHdicUK57s%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767943080"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=IivpUceablaOlr7vtQsxk9w2O5%2FtpdOZvWHdicUK57s%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767943080"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 71
Connection: close
{"timestamp":1767943080809,"status":404,"error":"Not Found","path":"/"}
Open service 99.83.185.157:443 · api.starknet-db.com
2026-01-02 20:35
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Fri, 02 Jan 2026 20:35:41 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=2u3zYhyw5W9QKomrCXytUCJLMAvSZ7tz2pL1BDwISjc%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767386141"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=2u3zYhyw5W9QKomrCXytUCJLMAvSZ7tz2pL1BDwISjc%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767386141"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 71
Connection: close
{"timestamp":1767386141616,"status":404,"error":"Not Found","path":"/"}
Open service 3.33.249.164:80 · api.starknet-db.com
2026-01-02 06:27
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Fri, 02 Jan 2026 06:27:22 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=9Ovu0mlkJ6Cjr4ZiiHPbcB6Oo5XhDNirqzsAUuUq8d4%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767335242"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=9Ovu0mlkJ6Cjr4ZiiHPbcB6Oo5XhDNirqzsAUuUq8d4%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767335242"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 71
Connection: close
{"timestamp":1767335242687,"status":404,"error":"Not Found","path":"/"}
Open service 99.83.185.157:443 · api.starknet-db.com
2025-12-23 02:35
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Tue, 23 Dec 2025 02:35:51 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=5YP%2BjsrLQi1G5Fb0HV2paPl0GXDfdC4YjmlAFs4eydE%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766457351"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=5YP%2BjsrLQi1G5Fb0HV2paPl0GXDfdC4YjmlAFs4eydE%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766457351"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 71
Connection: close
{"timestamp":1766457351090,"status":404,"error":"Not Found","path":"/"}
Open service 3.33.249.164:80 · api.starknet-db.com
2025-12-22 12:40
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Mon, 22 Dec 2025 12:40:31 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Zvgor0r75ErVkfutOuDlhIwCwjl3QVmWmsI8ozV8b30%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766407231"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Zvgor0r75ErVkfutOuDlhIwCwjl3QVmWmsI8ozV8b30%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766407231"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 71
Connection: close
{"timestamp":1766407231695,"status":404,"error":"Not Found","path":"/"}
Open service 99.83.185.157:443 · api.starknet-db.com
2025-12-21 08:17
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Sun, 21 Dec 2025 08:17:39 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Gu%2FX6lI8emlVbHJ3YJqtuJVs%2BhA6UIMIQQORcd0GqO4%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766305059"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Gu%2FX6lI8emlVbHJ3YJqtuJVs%2BhA6UIMIQQORcd0GqO4%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766305059"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 71
Connection: close
{"timestamp":1766305059209,"status":404,"error":"Not Found","path":"/"}
Open service 3.33.249.164:80 · api.starknet-db.com
2025-12-20 10:21
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Sat, 20 Dec 2025 10:21:09 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=nda2f55xUCor8reVOZudpJY69Av%2FNUu7r2nFqauwXq4%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766226069"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=nda2f55xUCor8reVOZudpJY69Av%2FNUu7r2nFqauwXq4%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766226069"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 71
Connection: close
{"timestamp":1766226069070,"status":404,"error":"Not Found","path":"/"}
Open service 99.83.185.157:443 · api.starknet-db.com
2025-12-19 05:55
HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Fri, 19 Dec 2025 05:55:24 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=XKxroDI1V5iiP0CxgJivZqAmNulnn3wOze2HcAx%2BEzE%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766123724"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=XKxroDI1V5iiP0CxgJivZqAmNulnn3wOze2HcAx%2BEzE%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766123724"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 71
Connection: close
{"timestamp":1766123724303,"status":404,"error":"Not Found","path":"/"}