Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 75.2.60.68:443 · api.studly.co
2026-01-09 17:01
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 17:01:55 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 100
Ratelimit-Policy: 100;w=900
Ratelimit-Remaining: 99
Ratelimit-Reset: 900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=G%2F2RpbQLgAaPWLu3XRu8t9Qo5f3u8Wy2WHca%2FRMaR2g%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767978115"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=G%2F2RpbQLgAaPWLu3XRu8t9Qo5f3u8Wy2WHca%2FRMaR2g%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767978115"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 75.2.60.68:80 · api.studly.co
2026-01-09 06:43
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 06:44:24 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 100
Ratelimit-Policy: 100;w=900
Ratelimit-Remaining: 99
Ratelimit-Reset: 900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=HLqeVpxF6OAB0mBi2tY%2F7fJzWQeSvvQFzPnvn1CHiaE%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767941064"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=HLqeVpxF6OAB0mBi2tY%2F7fJzWQeSvvQFzPnvn1CHiaE%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767941064"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 75.2.60.68:443 · api.studly.co
2026-01-02 23:35
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 23:35:53 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 100
Ratelimit-Policy: 100;w=900
Ratelimit-Remaining: 99
Ratelimit-Reset: 900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=EoFPI%2FzT9iFiGKQau47A0skQFaXmBjaly2Ky5mVyIi0%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767396953"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=EoFPI%2FzT9iFiGKQau47A0skQFaXmBjaly2Ky5mVyIi0%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767396953"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 75.2.60.68:80 · api.studly.co
2026-01-02 02:36
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 02:36:58 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 100
Ratelimit-Policy: 100;w=900
Ratelimit-Remaining: 99
Ratelimit-Reset: 900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=FAhcmC0GpACjLoXd1ewe4MHZPFehH%2Bi7S%2BinNrnrj0E%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767321418"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=FAhcmC0GpACjLoXd1ewe4MHZPFehH%2Bi7S%2BinNrnrj0E%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767321418"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 75.2.60.68:443 · api.studly.co
2025-12-30 09:27
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 30 Dec 2025 09:27:33 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 100
Ratelimit-Policy: 100;w=900
Ratelimit-Remaining: 99
Ratelimit-Reset: 900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=2HXXi7zO4cdOYrWhCO0kWq0mktkalmZW9pU8zWJ9VRc%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767086853"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=2HXXi7zO4cdOYrWhCO0kWq0mktkalmZW9pU8zWJ9VRc%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767086853"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 75.2.60.68:443 · api.studly.co
2025-12-23 05:08
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 05:08:49 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 100
Ratelimit-Policy: 100;w=900
Ratelimit-Remaining: 99
Ratelimit-Reset: 900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=xvlH6t0kARq05I2H1TBIh9eVmG6St1RN3aRNyPlYUJs%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766466529"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=xvlH6t0kARq05I2H1TBIh9eVmG6St1RN3aRNyPlYUJs%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766466529"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 75.2.60.68:80 · api.studly.co
2025-12-23 02:46
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 02:47:03 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 100
Ratelimit-Policy: 100;w=900
Ratelimit-Remaining: 99
Ratelimit-Reset: 900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ARBGwEhXe5%2BWZuB9wkV%2FhKQfzv%2FMQkPEg86awi%2BDoUk%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766458023"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ARBGwEhXe5%2BWZuB9wkV%2FhKQfzv%2FMQkPEg86awi%2BDoUk%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766458023"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 75.2.60.68:443 · api.studly.co
2025-12-21 09:44
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 09:44:57 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 100
Ratelimit-Policy: 100;w=900
Ratelimit-Remaining: 99
Ratelimit-Reset: 900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=YkvgYUcZkz%2BdlhoXAoVSQW81X0DobP1UphX55kiHWgc%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766310297"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=YkvgYUcZkz%2BdlhoXAoVSQW81X0DobP1UphX55kiHWgc%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766310297"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 75.2.60.68:80 · api.studly.co
2025-12-20 18:15
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 18:15:31 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 100
Ratelimit-Policy: 100;w=900
Ratelimit-Remaining: 99
Ratelimit-Reset: 900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=yDN%2F5qJgIxZmsItaube5liabWlUNl6LylHNmklmc3rM%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766254531"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=yDN%2F5qJgIxZmsItaube5liabWlUNl6LylHNmklmc3rM%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766254531"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 75.2.60.68:443 · api.studly.co
2025-12-19 00:47
HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 00:47:40 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 100
Ratelimit-Policy: 100;w=900
Ratelimit-Remaining: 99
Ratelimit-Reset: 900
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=xv84kGL8CyiW8WejUnWyaACcvGPRkVzYa1ycrM6QZKU%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766105260"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=xv84kGL8CyiW8WejUnWyaACcvGPRkVzYa1ycrM6QZKU%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766105260"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>