Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb44272d9175efb83914c0bc1aafab9d6079859ea4f
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /companies/
GET /companies/{company_pk}/billing/invoices/
GET /companies/{company_pk}/billing/payment-methods/
GET /companies/{company_pk}/billing/subscription/
GET /companies/{company_pk}/cis-payments/
GET /companies/{company_pk}/cis-payments/export/
GET /companies/{company_pk}/cis-payments/stats/
GET /companies/{company_pk}/cis-payments/{id}/
GET /companies/{company_pk}/member-payments/
GET /companies/{company_pk}/member-payments/export/
GET /companies/{company_pk}/member-payments/stats/
GET /companies/{company_pk}/member-payments/{id}/
GET /companies/{company_pk}/members/
GET /companies/{company_pk}/members/export/
GET /companies/{company_pk}/members/{id}/
GET /companies/{company_pk}/members/{id}/projects/
GET /companies/{company_pk}/members/{id}/stats/
GET /companies/{company_pk}/project-roles/
GET /companies/{company_pk}/project-roles/{id}/
GET /companies/{company_pk}/projects/
GET /companies/{company_pk}/projects/export/
GET /companies/{company_pk}/projects/{id}/
GET /companies/{company_pk}/projects/{id}/stats/
GET /companies/{company_pk}/projects/{id}/status/
GET /companies/{company_pk}/projects/{project_pk}/members/
GET /companies/{company_pk}/projects/{project_pk}/members/export/
GET /companies/{company_pk}/projects/{project_pk}/members/{id}/
GET /companies/{company_pk}/roles/
GET /companies/{company_pk}/roles/{id}/
GET /companies/{company_pk}/time-log-events/
GET /companies/{company_pk}/time-log-events/details/
GET /companies/{company_pk}/time-log-events/export/
GET /companies/{company_pk}/time-log-events/{id}/
GET /companies/{company_pk}/time-logs/
GET /companies/{company_pk}/time-logs/export/
GET /companies/{company_pk}/time-logs/stats/
GET /companies/{company_pk}/time-logs/{id}/
GET /companies/{company_pk}/unpaid-time/
GET /companies/{company_pk}/unpaid-time/export/
GET /companies/{company_pk}/unpaid-time/stats/
GET /companies/{company_pk}/visitor-logs/
GET /companies/{company_pk}/visitor-logs/export/
GET /companies/{company_pk}/visitor-logs/{id}/
GET /companies/{company_pk}/visitors/
GET /companies/{company_pk}/visitors/export/
GET /companies/{company_pk}/visitors/{id}/
GET /companies/{company_pk}/visitors/{id}/details/
GET /companies/{id}/
GET /companies/{id}/status/
GET /me/company-invitations/
GET /me/profile/
GET /me/project-invitations/
GET /me/stats/paid/
GET /me/stats/time/
GET /me/stats/unpaid/
GET /me/time-log-events/{id}/
GET /me/time/last-visitor-event/
GET /me/time/logs/
GET /me/time/status/
GET /otp/email_otp/
GET /otp/sms_otp/
GET /versions/
POST /auth/confirm/
POST /auth/login/
POST /auth/register/
POST /auth/resend/
POST /auth/token/blacklist/
POST /auth/token/refresh/
POST /auth/verify/
POST /companies/{company_pk}/billing/customer-portal-session/
POST /companies/{company_pk}/billing/subscription/cancel/
POST /companies/{company_pk}/cis-payments/{id}/register/
POST /companies/{company_pk}/time-log-events/{id}/overtime/
POST /companies/{company_pk}/unpaid-time/register/
POST /me/company-invitations/{id}/accept/
POST /me/company-invitations/{id}/reject/
POST /me/project-invitations/{id}/accept/
POST /me/project-invitations/{id}/reject/
POST /me/time/arrive/
POST /me/time/check-in/
POST /me/time/check-out/
POST /me/time/clock-in/
POST /me/time/clock-out/
POST /me/time/leave/
POST /me/time/request-overtime/
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb44272d9175efb83914c0bc1aafab9d607380e60c8
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /companies/
GET /companies/{company_pk}/billing/invoices/
GET /companies/{company_pk}/billing/payment-methods/
GET /companies/{company_pk}/billing/subscription/
GET /companies/{company_pk}/cis-payments/
GET /companies/{company_pk}/cis-payments/export/
GET /companies/{company_pk}/cis-payments/{id}/
GET /companies/{company_pk}/member-payments/
GET /companies/{company_pk}/member-payments/export/
GET /companies/{company_pk}/member-payments/{id}/
GET /companies/{company_pk}/members/
GET /companies/{company_pk}/members/export/
GET /companies/{company_pk}/members/{id}/
GET /companies/{company_pk}/members/{id}/projects/
GET /companies/{company_pk}/project-roles/
GET /companies/{company_pk}/project-roles/{id}/
GET /companies/{company_pk}/projects/
GET /companies/{company_pk}/projects/export/
GET /companies/{company_pk}/projects/{id}/
GET /companies/{company_pk}/projects/{id}/status/
GET /companies/{company_pk}/projects/{project_pk}/members/
GET /companies/{company_pk}/projects/{project_pk}/members/export/
GET /companies/{company_pk}/projects/{project_pk}/members/{id}/
GET /companies/{company_pk}/roles/
GET /companies/{company_pk}/roles/{id}/
GET /companies/{company_pk}/time-log-events/
GET /companies/{company_pk}/time-log-events/details/
GET /companies/{company_pk}/time-log-events/export/
GET /companies/{company_pk}/time-log-events/{id}/
GET /companies/{company_pk}/time-logs/
GET /companies/{company_pk}/time-logs/export/
GET /companies/{company_pk}/time-logs/{id}/
GET /companies/{company_pk}/unpaid-time/
GET /companies/{company_pk}/unpaid-time/export/
GET /companies/{company_pk}/visitor-logs/
GET /companies/{company_pk}/visitor-logs/export/
GET /companies/{company_pk}/visitor-logs/{id}/
GET /companies/{company_pk}/visitors/
GET /companies/{company_pk}/visitors/export/
GET /companies/{company_pk}/visitors/{id}/
GET /companies/{company_pk}/visitors/{id}/details/
GET /companies/{id}/
GET /companies/{id}/status/
GET /me/company-invitations/
GET /me/profile/
GET /me/project-invitations/
GET /me/time-log-events/{id}/
GET /me/time/last-visitor-event/
GET /me/time/logs/
GET /me/time/status/
GET /otp/email_otp/
GET /otp/sms_otp/
GET /versions/
POST /auth/confirm/
POST /auth/login/
POST /auth/register/
POST /auth/resend/
POST /auth/token/blacklist/
POST /auth/token/refresh/
POST /auth/verify/
POST /companies/{company_pk}/billing/customer-portal-session/
POST /companies/{company_pk}/billing/subscription/cancel/
POST /companies/{company_pk}/cis-payments/{id}/register/
POST /companies/{company_pk}/time-log-events/{id}/overtime/
POST /companies/{company_pk}/unpaid-time/register/
POST /me/company-invitations/{id}/accept/
POST /me/company-invitations/{id}/reject/
POST /me/project-invitations/{id}/accept/
POST /me/project-invitations/{id}/reject/
POST /me/time/arrive/
POST /me/time/check-in/
POST /me/time/check-out/
POST /me/time/clock-in/
POST /me/time/clock-out/
POST /me/time/leave/
POST /me/time/request-overtime/
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb44272d9175efb83914c0bc1aafab9d6079859ea4f
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /companies/
GET /companies/{company_pk}/billing/invoices/
GET /companies/{company_pk}/billing/payment-methods/
GET /companies/{company_pk}/billing/subscription/
GET /companies/{company_pk}/cis-payments/
GET /companies/{company_pk}/cis-payments/export/
GET /companies/{company_pk}/cis-payments/stats/
GET /companies/{company_pk}/cis-payments/{id}/
GET /companies/{company_pk}/member-payments/
GET /companies/{company_pk}/member-payments/export/
GET /companies/{company_pk}/member-payments/stats/
GET /companies/{company_pk}/member-payments/{id}/
GET /companies/{company_pk}/members/
GET /companies/{company_pk}/members/export/
GET /companies/{company_pk}/members/{id}/
GET /companies/{company_pk}/members/{id}/projects/
GET /companies/{company_pk}/members/{id}/stats/
GET /companies/{company_pk}/project-roles/
GET /companies/{company_pk}/project-roles/{id}/
GET /companies/{company_pk}/projects/
GET /companies/{company_pk}/projects/export/
GET /companies/{company_pk}/projects/{id}/
GET /companies/{company_pk}/projects/{id}/stats/
GET /companies/{company_pk}/projects/{id}/status/
GET /companies/{company_pk}/projects/{project_pk}/members/
GET /companies/{company_pk}/projects/{project_pk}/members/export/
GET /companies/{company_pk}/projects/{project_pk}/members/{id}/
GET /companies/{company_pk}/roles/
GET /companies/{company_pk}/roles/{id}/
GET /companies/{company_pk}/time-log-events/
GET /companies/{company_pk}/time-log-events/details/
GET /companies/{company_pk}/time-log-events/export/
GET /companies/{company_pk}/time-log-events/{id}/
GET /companies/{company_pk}/time-logs/
GET /companies/{company_pk}/time-logs/export/
GET /companies/{company_pk}/time-logs/stats/
GET /companies/{company_pk}/time-logs/{id}/
GET /companies/{company_pk}/unpaid-time/
GET /companies/{company_pk}/unpaid-time/export/
GET /companies/{company_pk}/unpaid-time/stats/
GET /companies/{company_pk}/visitor-logs/
GET /companies/{company_pk}/visitor-logs/export/
GET /companies/{company_pk}/visitor-logs/{id}/
GET /companies/{company_pk}/visitors/
GET /companies/{company_pk}/visitors/export/
GET /companies/{company_pk}/visitors/{id}/
GET /companies/{company_pk}/visitors/{id}/details/
GET /companies/{id}/
GET /companies/{id}/status/
GET /me/company-invitations/
GET /me/profile/
GET /me/project-invitations/
GET /me/stats/paid/
GET /me/stats/time/
GET /me/stats/unpaid/
GET /me/time-log-events/{id}/
GET /me/time/last-visitor-event/
GET /me/time/logs/
GET /me/time/status/
GET /otp/email_otp/
GET /otp/sms_otp/
GET /versions/
POST /auth/confirm/
POST /auth/login/
POST /auth/register/
POST /auth/resend/
POST /auth/token/blacklist/
POST /auth/token/refresh/
POST /auth/verify/
POST /companies/{company_pk}/billing/customer-portal-session/
POST /companies/{company_pk}/billing/subscription/cancel/
POST /companies/{company_pk}/cis-payments/{id}/register/
POST /companies/{company_pk}/time-log-events/{id}/overtime/
POST /companies/{company_pk}/unpaid-time/register/
POST /me/company-invitations/{id}/accept/
POST /me/company-invitations/{id}/reject/
POST /me/project-invitations/{id}/accept/
POST /me/project-invitations/{id}/reject/
POST /me/time/arrive/
POST /me/time/check-in/
POST /me/time/check-out/
POST /me/time/clock-in/
POST /me/time/clock-out/
POST /me/time/leave/
POST /me/time/request-overtime/
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb44272d9175efb83914c0bc1aafab9d607380e60c8
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /companies/
GET /companies/{company_pk}/billing/invoices/
GET /companies/{company_pk}/billing/payment-methods/
GET /companies/{company_pk}/billing/subscription/
GET /companies/{company_pk}/cis-payments/
GET /companies/{company_pk}/cis-payments/export/
GET /companies/{company_pk}/cis-payments/{id}/
GET /companies/{company_pk}/member-payments/
GET /companies/{company_pk}/member-payments/export/
GET /companies/{company_pk}/member-payments/{id}/
GET /companies/{company_pk}/members/
GET /companies/{company_pk}/members/export/
GET /companies/{company_pk}/members/{id}/
GET /companies/{company_pk}/members/{id}/projects/
GET /companies/{company_pk}/project-roles/
GET /companies/{company_pk}/project-roles/{id}/
GET /companies/{company_pk}/projects/
GET /companies/{company_pk}/projects/export/
GET /companies/{company_pk}/projects/{id}/
GET /companies/{company_pk}/projects/{id}/status/
GET /companies/{company_pk}/projects/{project_pk}/members/
GET /companies/{company_pk}/projects/{project_pk}/members/export/
GET /companies/{company_pk}/projects/{project_pk}/members/{id}/
GET /companies/{company_pk}/roles/
GET /companies/{company_pk}/roles/{id}/
GET /companies/{company_pk}/time-log-events/
GET /companies/{company_pk}/time-log-events/details/
GET /companies/{company_pk}/time-log-events/export/
GET /companies/{company_pk}/time-log-events/{id}/
GET /companies/{company_pk}/time-logs/
GET /companies/{company_pk}/time-logs/export/
GET /companies/{company_pk}/time-logs/{id}/
GET /companies/{company_pk}/unpaid-time/
GET /companies/{company_pk}/unpaid-time/export/
GET /companies/{company_pk}/visitor-logs/
GET /companies/{company_pk}/visitor-logs/export/
GET /companies/{company_pk}/visitor-logs/{id}/
GET /companies/{company_pk}/visitors/
GET /companies/{company_pk}/visitors/export/
GET /companies/{company_pk}/visitors/{id}/
GET /companies/{company_pk}/visitors/{id}/details/
GET /companies/{id}/
GET /companies/{id}/status/
GET /me/company-invitations/
GET /me/profile/
GET /me/project-invitations/
GET /me/time-log-events/{id}/
GET /me/time/last-visitor-event/
GET /me/time/logs/
GET /me/time/status/
GET /otp/email_otp/
GET /otp/sms_otp/
GET /versions/
POST /auth/confirm/
POST /auth/login/
POST /auth/register/
POST /auth/resend/
POST /auth/token/blacklist/
POST /auth/token/refresh/
POST /auth/verify/
POST /companies/{company_pk}/billing/customer-portal-session/
POST /companies/{company_pk}/billing/subscription/cancel/
POST /companies/{company_pk}/cis-payments/{id}/register/
POST /companies/{company_pk}/time-log-events/{id}/overtime/
POST /companies/{company_pk}/unpaid-time/register/
POST /me/company-invitations/{id}/accept/
POST /me/company-invitations/{id}/reject/
POST /me/project-invitations/{id}/accept/
POST /me/project-invitations/{id}/reject/
POST /me/time/arrive/
POST /me/time/check-in/
POST /me/time/check-out/
POST /me/time/clock-in/
POST /me/time/clock-out/
POST /me/time/leave/
POST /me/time/request-overtime/
Open service 99.83.217.1:80 · ccapi-staging.constructioncure.com
2026-01-09 13:53
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Fri, 09 Jan 2026 13:54:42 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=8FI%2BcJSNQJ7iuyMV3P5z13GEIT%2F5zLUP0M3T5SHc2N4%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767966882"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=8FI%2BcJSNQJ7iuyMV3P5z13GEIT%2F5zLUP0M3T5SHc2N4%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767966882"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 99.83.217.1:443 · ccapi-staging.constructioncure.com
2026-01-09 01:31
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Fri, 09 Jan 2026 01:31:18 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=MFzxJ6RShTwrIdfrr7giyrfY5AsYdWkYIa5119chCfo%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767922278"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=MFzxJ6RShTwrIdfrr7giyrfY5AsYdWkYIa5119chCfo%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767922278"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 99.83.217.1:80 · ccapi-staging.constructioncure.com
2026-01-02 13:26
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Fri, 02 Jan 2026 13:26:23 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=4cP9pl%2Fzho%2FrriFbcjN%2BqTqxBP0K4T8BZ0d4kkdFUCw%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767360383"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=4cP9pl%2Fzho%2FrriFbcjN%2BqTqxBP0K4T8BZ0d4kkdFUCw%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767360383"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 99.83.217.1:443 · ccapi-staging.constructioncure.com
2026-01-02 01:49
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Fri, 02 Jan 2026 01:49:16 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=MueFQg2g8gBvqP4fagKG5mf1rfjcRA0Wed2cO5VgA0U%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767318556"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=MueFQg2g8gBvqP4fagKG5mf1rfjcRA0Wed2cO5VgA0U%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767318556"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 99.83.217.1:443 · ccapi-staging.constructioncure.com
2025-12-30 09:11
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Tue, 30 Dec 2025 09:11:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=kdg8LFqabrUHMFWpQgbRMSFI9DtBjEYfMy2JsS70oPE%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767085887"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=kdg8LFqabrUHMFWpQgbRMSFI9DtBjEYfMy2JsS70oPE%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767085887"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 99.83.217.1:443 · ccapi-staging.constructioncure.com
2025-12-23 03:30
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Tue, 23 Dec 2025 03:30:18 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=rqqlE3s0Yp5zwLi6DyKqJIQNsJBIIOTUzcJ6ENAJ5QI%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766460618"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=rqqlE3s0Yp5zwLi6DyKqJIQNsJBIIOTUzcJ6ENAJ5QI%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766460618"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 99.83.217.1:80 · ccapi-staging.constructioncure.com
2025-12-22 17:48
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Mon, 22 Dec 2025 17:48:17 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=mKHNCPGDb6jLeiE%2FAd2xLwP5r4Ky8jINtTNdylzZp%2FI%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766425697"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=mKHNCPGDb6jLeiE%2FAd2xLwP5r4Ky8jINtTNdylzZp%2FI%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766425697"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 99.83.217.1:80 · ccapi-staging.constructioncure.com
2025-12-20 19:51
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Sat, 20 Dec 2025 19:51:29 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=x92l3%2BeTEWGOQZMlVNLsQbmIk6slnNSv6hi8P9dnkqk%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766260289"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=x92l3%2BeTEWGOQZMlVNLsQbmIk6slnNSv6hi8P9dnkqk%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766260289"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 99.83.217.1:443 · ccapi-staging.constructioncure.com
2025-12-20 16:56
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Sat, 20 Dec 2025 16:56:12 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=UYF64rySYcfGYlI97zsK%2B%2BD05IbW%2Fc%2BAFAINFfpDg0Q%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766249772"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=UYF64rySYcfGYlI97zsK%2B%2BD05IbW%2Fc%2BAFAINFfpDg0Q%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766249772"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>