Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb44272d9175efb83914c0bc1aafab9d6079859ea4f
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /companies/
GET /companies/{company_pk}/billing/invoices/
GET /companies/{company_pk}/billing/payment-methods/
GET /companies/{company_pk}/billing/subscription/
GET /companies/{company_pk}/cis-payments/
GET /companies/{company_pk}/cis-payments/export/
GET /companies/{company_pk}/cis-payments/stats/
GET /companies/{company_pk}/cis-payments/{id}/
GET /companies/{company_pk}/member-payments/
GET /companies/{company_pk}/member-payments/export/
GET /companies/{company_pk}/member-payments/stats/
GET /companies/{company_pk}/member-payments/{id}/
GET /companies/{company_pk}/members/
GET /companies/{company_pk}/members/export/
GET /companies/{company_pk}/members/{id}/
GET /companies/{company_pk}/members/{id}/projects/
GET /companies/{company_pk}/members/{id}/stats/
GET /companies/{company_pk}/project-roles/
GET /companies/{company_pk}/project-roles/{id}/
GET /companies/{company_pk}/projects/
GET /companies/{company_pk}/projects/export/
GET /companies/{company_pk}/projects/{id}/
GET /companies/{company_pk}/projects/{id}/stats/
GET /companies/{company_pk}/projects/{id}/status/
GET /companies/{company_pk}/projects/{project_pk}/members/
GET /companies/{company_pk}/projects/{project_pk}/members/export/
GET /companies/{company_pk}/projects/{project_pk}/members/{id}/
GET /companies/{company_pk}/roles/
GET /companies/{company_pk}/roles/{id}/
GET /companies/{company_pk}/time-log-events/
GET /companies/{company_pk}/time-log-events/details/
GET /companies/{company_pk}/time-log-events/export/
GET /companies/{company_pk}/time-log-events/{id}/
GET /companies/{company_pk}/time-logs/
GET /companies/{company_pk}/time-logs/export/
GET /companies/{company_pk}/time-logs/stats/
GET /companies/{company_pk}/time-logs/{id}/
GET /companies/{company_pk}/unpaid-time/
GET /companies/{company_pk}/unpaid-time/export/
GET /companies/{company_pk}/unpaid-time/stats/
GET /companies/{company_pk}/visitor-logs/
GET /companies/{company_pk}/visitor-logs/export/
GET /companies/{company_pk}/visitor-logs/{id}/
GET /companies/{company_pk}/visitors/
GET /companies/{company_pk}/visitors/export/
GET /companies/{company_pk}/visitors/{id}/
GET /companies/{company_pk}/visitors/{id}/details/
GET /companies/{id}/
GET /companies/{id}/status/
GET /me/company-invitations/
GET /me/profile/
GET /me/project-invitations/
GET /me/stats/paid/
GET /me/stats/time/
GET /me/stats/unpaid/
GET /me/time-log-events/{id}/
GET /me/time/last-visitor-event/
GET /me/time/logs/
GET /me/time/status/
GET /otp/email_otp/
GET /otp/sms_otp/
GET /versions/
POST /auth/confirm/
POST /auth/login/
POST /auth/register/
POST /auth/resend/
POST /auth/token/blacklist/
POST /auth/token/refresh/
POST /auth/verify/
POST /companies/{company_pk}/billing/customer-portal-session/
POST /companies/{company_pk}/billing/subscription/cancel/
POST /companies/{company_pk}/cis-payments/{id}/register/
POST /companies/{company_pk}/time-log-events/{id}/overtime/
POST /companies/{company_pk}/unpaid-time/register/
POST /me/company-invitations/{id}/accept/
POST /me/company-invitations/{id}/reject/
POST /me/project-invitations/{id}/accept/
POST /me/project-invitations/{id}/reject/
POST /me/time/arrive/
POST /me/time/check-in/
POST /me/time/check-out/
POST /me/time/clock-in/
POST /me/time/clock-out/
POST /me/time/leave/
POST /me/time/request-overtime/
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb44272d9175efb83914c0bc1aafab9d607380e60c8
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /companies/
GET /companies/{company_pk}/billing/invoices/
GET /companies/{company_pk}/billing/payment-methods/
GET /companies/{company_pk}/billing/subscription/
GET /companies/{company_pk}/cis-payments/
GET /companies/{company_pk}/cis-payments/export/
GET /companies/{company_pk}/cis-payments/{id}/
GET /companies/{company_pk}/member-payments/
GET /companies/{company_pk}/member-payments/export/
GET /companies/{company_pk}/member-payments/{id}/
GET /companies/{company_pk}/members/
GET /companies/{company_pk}/members/export/
GET /companies/{company_pk}/members/{id}/
GET /companies/{company_pk}/members/{id}/projects/
GET /companies/{company_pk}/project-roles/
GET /companies/{company_pk}/project-roles/{id}/
GET /companies/{company_pk}/projects/
GET /companies/{company_pk}/projects/export/
GET /companies/{company_pk}/projects/{id}/
GET /companies/{company_pk}/projects/{id}/status/
GET /companies/{company_pk}/projects/{project_pk}/members/
GET /companies/{company_pk}/projects/{project_pk}/members/export/
GET /companies/{company_pk}/projects/{project_pk}/members/{id}/
GET /companies/{company_pk}/roles/
GET /companies/{company_pk}/roles/{id}/
GET /companies/{company_pk}/time-log-events/
GET /companies/{company_pk}/time-log-events/details/
GET /companies/{company_pk}/time-log-events/export/
GET /companies/{company_pk}/time-log-events/{id}/
GET /companies/{company_pk}/time-logs/
GET /companies/{company_pk}/time-logs/export/
GET /companies/{company_pk}/time-logs/{id}/
GET /companies/{company_pk}/unpaid-time/
GET /companies/{company_pk}/unpaid-time/export/
GET /companies/{company_pk}/visitor-logs/
GET /companies/{company_pk}/visitor-logs/export/
GET /companies/{company_pk}/visitor-logs/{id}/
GET /companies/{company_pk}/visitors/
GET /companies/{company_pk}/visitors/export/
GET /companies/{company_pk}/visitors/{id}/
GET /companies/{company_pk}/visitors/{id}/details/
GET /companies/{id}/
GET /companies/{id}/status/
GET /me/company-invitations/
GET /me/profile/
GET /me/project-invitations/
GET /me/time-log-events/{id}/
GET /me/time/last-visitor-event/
GET /me/time/logs/
GET /me/time/status/
GET /otp/email_otp/
GET /otp/sms_otp/
GET /versions/
POST /auth/confirm/
POST /auth/login/
POST /auth/register/
POST /auth/resend/
POST /auth/token/blacklist/
POST /auth/token/refresh/
POST /auth/verify/
POST /companies/{company_pk}/billing/customer-portal-session/
POST /companies/{company_pk}/billing/subscription/cancel/
POST /companies/{company_pk}/cis-payments/{id}/register/
POST /companies/{company_pk}/time-log-events/{id}/overtime/
POST /companies/{company_pk}/unpaid-time/register/
POST /me/company-invitations/{id}/accept/
POST /me/company-invitations/{id}/reject/
POST /me/project-invitations/{id}/accept/
POST /me/project-invitations/{id}/reject/
POST /me/time/arrive/
POST /me/time/check-in/
POST /me/time/check-out/
POST /me/time/clock-in/
POST /me/time/clock-out/
POST /me/time/leave/
POST /me/time/request-overtime/
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb44272d9175efb83914c0bc1aafab9d607308adc73
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /companies/
GET /companies/{company_pk}/billing/invoices/
GET /companies/{company_pk}/billing/payment-methods/
GET /companies/{company_pk}/billing/subscription/
GET /companies/{company_pk}/cis-payments/
GET /companies/{company_pk}/cis-payments/{id}/
GET /companies/{company_pk}/member-payments/
GET /companies/{company_pk}/member-payments/{id}/
GET /companies/{company_pk}/members/
GET /companies/{company_pk}/members/export/
GET /companies/{company_pk}/members/{id}/
GET /companies/{company_pk}/members/{id}/projects/
GET /companies/{company_pk}/project-roles/
GET /companies/{company_pk}/project-roles/{id}/
GET /companies/{company_pk}/projects/
GET /companies/{company_pk}/projects/export/
GET /companies/{company_pk}/projects/{id}/
GET /companies/{company_pk}/projects/{id}/status/
GET /companies/{company_pk}/projects/{project_pk}/members/
GET /companies/{company_pk}/projects/{project_pk}/members/export/
GET /companies/{company_pk}/projects/{project_pk}/members/{id}/
GET /companies/{company_pk}/roles/
GET /companies/{company_pk}/roles/{id}/
GET /companies/{company_pk}/time-log-events/
GET /companies/{company_pk}/time-log-events/details/
GET /companies/{company_pk}/time-log-events/export/
GET /companies/{company_pk}/time-log-events/{id}/
GET /companies/{company_pk}/time-logs/
GET /companies/{company_pk}/time-logs/export/
GET /companies/{company_pk}/time-logs/{id}/
GET /companies/{company_pk}/unpaid-time/
GET /companies/{company_pk}/visitor-logs/
GET /companies/{company_pk}/visitor-logs/export/
GET /companies/{company_pk}/visitor-logs/{id}/
GET /companies/{company_pk}/visitors/
GET /companies/{company_pk}/visitors/export/
GET /companies/{company_pk}/visitors/{id}/
GET /companies/{company_pk}/visitors/{id}/details/
GET /companies/{id}/
GET /companies/{id}/status/
GET /me/company-invitations/
GET /me/profile/
GET /me/project-invitations/
GET /me/time-log-events/{id}/
GET /me/time/last-visitor-event/
GET /me/time/logs/
GET /me/time/status/
GET /otp/email_otp/
GET /otp/sms_otp/
GET /versions/
POST /auth/confirm/
POST /auth/login/
POST /auth/register/
POST /auth/resend/
POST /auth/token/blacklist/
POST /auth/token/refresh/
POST /auth/verify/
POST /companies/{company_pk}/billing/customer-portal-session/
POST /companies/{company_pk}/billing/subscription/cancel/
POST /companies/{company_pk}/cis-payments/{id}/register/
POST /companies/{company_pk}/time-log-events/{id}/overtime/
POST /companies/{company_pk}/unpaid-time/register/
POST /me/company-invitations/{id}/accept/
POST /me/company-invitations/{id}/reject/
POST /me/project-invitations/{id}/accept/
POST /me/project-invitations/{id}/reject/
POST /me/time/arrive/
POST /me/time/check-in/
POST /me/time/check-out/
POST /me/time/clock-in/
POST /me/time/clock-out/
POST /me/time/leave/
POST /me/time/request-overtime/
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb44272d9175efb83914c0bc1aafab9d6079859ea4f
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /companies/
GET /companies/{company_pk}/billing/invoices/
GET /companies/{company_pk}/billing/payment-methods/
GET /companies/{company_pk}/billing/subscription/
GET /companies/{company_pk}/cis-payments/
GET /companies/{company_pk}/cis-payments/export/
GET /companies/{company_pk}/cis-payments/stats/
GET /companies/{company_pk}/cis-payments/{id}/
GET /companies/{company_pk}/member-payments/
GET /companies/{company_pk}/member-payments/export/
GET /companies/{company_pk}/member-payments/stats/
GET /companies/{company_pk}/member-payments/{id}/
GET /companies/{company_pk}/members/
GET /companies/{company_pk}/members/export/
GET /companies/{company_pk}/members/{id}/
GET /companies/{company_pk}/members/{id}/projects/
GET /companies/{company_pk}/members/{id}/stats/
GET /companies/{company_pk}/project-roles/
GET /companies/{company_pk}/project-roles/{id}/
GET /companies/{company_pk}/projects/
GET /companies/{company_pk}/projects/export/
GET /companies/{company_pk}/projects/{id}/
GET /companies/{company_pk}/projects/{id}/stats/
GET /companies/{company_pk}/projects/{id}/status/
GET /companies/{company_pk}/projects/{project_pk}/members/
GET /companies/{company_pk}/projects/{project_pk}/members/export/
GET /companies/{company_pk}/projects/{project_pk}/members/{id}/
GET /companies/{company_pk}/roles/
GET /companies/{company_pk}/roles/{id}/
GET /companies/{company_pk}/time-log-events/
GET /companies/{company_pk}/time-log-events/details/
GET /companies/{company_pk}/time-log-events/export/
GET /companies/{company_pk}/time-log-events/{id}/
GET /companies/{company_pk}/time-logs/
GET /companies/{company_pk}/time-logs/export/
GET /companies/{company_pk}/time-logs/stats/
GET /companies/{company_pk}/time-logs/{id}/
GET /companies/{company_pk}/unpaid-time/
GET /companies/{company_pk}/unpaid-time/export/
GET /companies/{company_pk}/unpaid-time/stats/
GET /companies/{company_pk}/visitor-logs/
GET /companies/{company_pk}/visitor-logs/export/
GET /companies/{company_pk}/visitor-logs/{id}/
GET /companies/{company_pk}/visitors/
GET /companies/{company_pk}/visitors/export/
GET /companies/{company_pk}/visitors/{id}/
GET /companies/{company_pk}/visitors/{id}/details/
GET /companies/{id}/
GET /companies/{id}/status/
GET /me/company-invitations/
GET /me/profile/
GET /me/project-invitations/
GET /me/stats/paid/
GET /me/stats/time/
GET /me/stats/unpaid/
GET /me/time-log-events/{id}/
GET /me/time/last-visitor-event/
GET /me/time/logs/
GET /me/time/status/
GET /otp/email_otp/
GET /otp/sms_otp/
GET /versions/
POST /auth/confirm/
POST /auth/login/
POST /auth/register/
POST /auth/resend/
POST /auth/token/blacklist/
POST /auth/token/refresh/
POST /auth/verify/
POST /companies/{company_pk}/billing/customer-portal-session/
POST /companies/{company_pk}/billing/subscription/cancel/
POST /companies/{company_pk}/cis-payments/{id}/register/
POST /companies/{company_pk}/time-log-events/{id}/overtime/
POST /companies/{company_pk}/unpaid-time/register/
POST /me/company-invitations/{id}/accept/
POST /me/company-invitations/{id}/reject/
POST /me/project-invitations/{id}/accept/
POST /me/project-invitations/{id}/reject/
POST /me/time/arrive/
POST /me/time/check-in/
POST /me/time/check-out/
POST /me/time/clock-in/
POST /me/time/clock-out/
POST /me/time/leave/
POST /me/time/request-overtime/
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb44272d9175efb83914c0bc1aafab9d607380e60c8
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /companies/
GET /companies/{company_pk}/billing/invoices/
GET /companies/{company_pk}/billing/payment-methods/
GET /companies/{company_pk}/billing/subscription/
GET /companies/{company_pk}/cis-payments/
GET /companies/{company_pk}/cis-payments/export/
GET /companies/{company_pk}/cis-payments/{id}/
GET /companies/{company_pk}/member-payments/
GET /companies/{company_pk}/member-payments/export/
GET /companies/{company_pk}/member-payments/{id}/
GET /companies/{company_pk}/members/
GET /companies/{company_pk}/members/export/
GET /companies/{company_pk}/members/{id}/
GET /companies/{company_pk}/members/{id}/projects/
GET /companies/{company_pk}/project-roles/
GET /companies/{company_pk}/project-roles/{id}/
GET /companies/{company_pk}/projects/
GET /companies/{company_pk}/projects/export/
GET /companies/{company_pk}/projects/{id}/
GET /companies/{company_pk}/projects/{id}/status/
GET /companies/{company_pk}/projects/{project_pk}/members/
GET /companies/{company_pk}/projects/{project_pk}/members/export/
GET /companies/{company_pk}/projects/{project_pk}/members/{id}/
GET /companies/{company_pk}/roles/
GET /companies/{company_pk}/roles/{id}/
GET /companies/{company_pk}/time-log-events/
GET /companies/{company_pk}/time-log-events/details/
GET /companies/{company_pk}/time-log-events/export/
GET /companies/{company_pk}/time-log-events/{id}/
GET /companies/{company_pk}/time-logs/
GET /companies/{company_pk}/time-logs/export/
GET /companies/{company_pk}/time-logs/{id}/
GET /companies/{company_pk}/unpaid-time/
GET /companies/{company_pk}/unpaid-time/export/
GET /companies/{company_pk}/visitor-logs/
GET /companies/{company_pk}/visitor-logs/export/
GET /companies/{company_pk}/visitor-logs/{id}/
GET /companies/{company_pk}/visitors/
GET /companies/{company_pk}/visitors/export/
GET /companies/{company_pk}/visitors/{id}/
GET /companies/{company_pk}/visitors/{id}/details/
GET /companies/{id}/
GET /companies/{id}/status/
GET /me/company-invitations/
GET /me/profile/
GET /me/project-invitations/
GET /me/time-log-events/{id}/
GET /me/time/last-visitor-event/
GET /me/time/logs/
GET /me/time/status/
GET /otp/email_otp/
GET /otp/sms_otp/
GET /versions/
POST /auth/confirm/
POST /auth/login/
POST /auth/register/
POST /auth/resend/
POST /auth/token/blacklist/
POST /auth/token/refresh/
POST /auth/verify/
POST /companies/{company_pk}/billing/customer-portal-session/
POST /companies/{company_pk}/billing/subscription/cancel/
POST /companies/{company_pk}/cis-payments/{id}/register/
POST /companies/{company_pk}/time-log-events/{id}/overtime/
POST /companies/{company_pk}/unpaid-time/register/
POST /me/company-invitations/{id}/accept/
POST /me/company-invitations/{id}/reject/
POST /me/project-invitations/{id}/accept/
POST /me/project-invitations/{id}/reject/
POST /me/time/arrive/
POST /me/time/check-in/
POST /me/time/check-out/
POST /me/time/clock-in/
POST /me/time/clock-out/
POST /me/time/leave/
POST /me/time/request-overtime/
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb44272d9175efb83914c0bc1aafab9d607308adc73
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /companies/
GET /companies/{company_pk}/billing/invoices/
GET /companies/{company_pk}/billing/payment-methods/
GET /companies/{company_pk}/billing/subscription/
GET /companies/{company_pk}/cis-payments/
GET /companies/{company_pk}/cis-payments/{id}/
GET /companies/{company_pk}/member-payments/
GET /companies/{company_pk}/member-payments/{id}/
GET /companies/{company_pk}/members/
GET /companies/{company_pk}/members/export/
GET /companies/{company_pk}/members/{id}/
GET /companies/{company_pk}/members/{id}/projects/
GET /companies/{company_pk}/project-roles/
GET /companies/{company_pk}/project-roles/{id}/
GET /companies/{company_pk}/projects/
GET /companies/{company_pk}/projects/export/
GET /companies/{company_pk}/projects/{id}/
GET /companies/{company_pk}/projects/{id}/status/
GET /companies/{company_pk}/projects/{project_pk}/members/
GET /companies/{company_pk}/projects/{project_pk}/members/export/
GET /companies/{company_pk}/projects/{project_pk}/members/{id}/
GET /companies/{company_pk}/roles/
GET /companies/{company_pk}/roles/{id}/
GET /companies/{company_pk}/time-log-events/
GET /companies/{company_pk}/time-log-events/details/
GET /companies/{company_pk}/time-log-events/export/
GET /companies/{company_pk}/time-log-events/{id}/
GET /companies/{company_pk}/time-logs/
GET /companies/{company_pk}/time-logs/export/
GET /companies/{company_pk}/time-logs/{id}/
GET /companies/{company_pk}/unpaid-time/
GET /companies/{company_pk}/visitor-logs/
GET /companies/{company_pk}/visitor-logs/export/
GET /companies/{company_pk}/visitor-logs/{id}/
GET /companies/{company_pk}/visitors/
GET /companies/{company_pk}/visitors/export/
GET /companies/{company_pk}/visitors/{id}/
GET /companies/{company_pk}/visitors/{id}/details/
GET /companies/{id}/
GET /companies/{id}/status/
GET /me/company-invitations/
GET /me/profile/
GET /me/project-invitations/
GET /me/time-log-events/{id}/
GET /me/time/last-visitor-event/
GET /me/time/logs/
GET /me/time/status/
GET /otp/email_otp/
GET /otp/sms_otp/
GET /versions/
POST /auth/confirm/
POST /auth/login/
POST /auth/register/
POST /auth/resend/
POST /auth/token/blacklist/
POST /auth/token/refresh/
POST /auth/verify/
POST /companies/{company_pk}/billing/customer-portal-session/
POST /companies/{company_pk}/billing/subscription/cancel/
POST /companies/{company_pk}/cis-payments/{id}/register/
POST /companies/{company_pk}/time-log-events/{id}/overtime/
POST /companies/{company_pk}/unpaid-time/register/
POST /me/company-invitations/{id}/accept/
POST /me/company-invitations/{id}/reject/
POST /me/project-invitations/{id}/accept/
POST /me/project-invitations/{id}/reject/
POST /me/time/arrive/
POST /me/time/check-in/
POST /me/time/check-out/
POST /me/time/clock-in/
POST /me/time/clock-out/
POST /me/time/leave/
POST /me/time/request-overtime/
Open service 75.2.43.161:443 · ccapi.constructioncure.com
2026-01-09 23:25
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Fri, 09 Jan 2026 23:25:37 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=f8fOSzPWDZYxaMIA85wrdbk8hBBrWhiaRwYrgbDvpqQ%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768001137"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=f8fOSzPWDZYxaMIA85wrdbk8hBBrWhiaRwYrgbDvpqQ%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768001137"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 75.2.43.161:80 · ccapi.constructioncure.com
2026-01-09 02:36
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Fri, 09 Jan 2026 02:37:52 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=F9mXrMy935i1lZO8qHcQqGnJYV6LGZjkqTzY0pw%2Bgl8%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767926272"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=F9mXrMy935i1lZO8qHcQqGnJYV6LGZjkqTzY0pw%2Bgl8%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767926272"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 75.2.43.161:80 · ccapi.constructioncure.com
2026-01-02 00:36
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Fri, 02 Jan 2026 00:36:29 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ffpKkDMC6iB6YHM3UxUtmqXSdVLBYbx4c7wCGGzn7G8%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767314189"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ffpKkDMC6iB6YHM3UxUtmqXSdVLBYbx4c7wCGGzn7G8%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767314189"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 75.2.43.161:443 · ccapi.constructioncure.com
2025-12-30 10:36
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Tue, 30 Dec 2025 10:36:52 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=T9%2FONATugiqPFeH%2BwMhfBxBS%2FJ58ZWOxvMokbz6NOQs%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767091012"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=T9%2FONATugiqPFeH%2BwMhfBxBS%2FJ58ZWOxvMokbz6NOQs%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767091012"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 75.2.43.161:80 · ccapi.constructioncure.com
2025-12-30 08:09
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Tue, 30 Dec 2025 08:09:35 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=N%2Fzy6YB9rHGNj4o3ZHvpp29kVTP1ujpls4XcSs8%2FSwA%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767082175"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=N%2Fzy6YB9rHGNj4o3ZHvpp29kVTP1ujpls4XcSs8%2FSwA%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767082175"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 75.2.43.161:443 · ccapi.constructioncure.com
2025-12-23 08:31
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Tue, 23 Dec 2025 08:31:19 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=wFTcj9W2P81v%2BOrg4u1R2nndm5otWduFEboeyICl1K8%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766478679"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=wFTcj9W2P81v%2BOrg4u1R2nndm5otWduFEboeyICl1K8%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766478679"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 75.2.43.161:80 · ccapi.constructioncure.com
2025-12-23 01:24
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Tue, 23 Dec 2025 01:24:41 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=MqpOssEUbPSvHMXlN%2FyPLruUZCz5QG%2FqlObRmPsMTiQ%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766453081"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=MqpOssEUbPSvHMXlN%2FyPLruUZCz5QG%2FqlObRmPsMTiQ%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766453081"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>
Open service 75.2.43.161:443 · ccapi.constructioncure.com
2025-12-21 10:27
HTTP/1.1 404 Not Found
Content-Length: 179
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Date: Sun, 21 Dec 2025 10:27:52 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Referrer-Policy: same-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=kOEZMP5mM1Hhslam8nRtXsAAAiSTz4LGWbxJpdiq7E4%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766312872"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=kOEZMP5mM1Hhslam8nRtXsAAAiSTz4LGWbxJpdiq7E4%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766312872"
Server: Heroku
Vary: origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Connection: close
Page title: Not Found
<!doctype html>
<html lang="en">
<head>
<title>Not Found</title>
</head>
<body>
<h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>