Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43339d009ac8efbf1e464fa51b06df62d2a3c86c38
Public Swagger UI/API detected at path: /swagger.json - sample paths: POST /v2/AddressVerification POST /v2/AutoComplete POST /v2/CSVBuilder POST /v2/MLSDetail POST /v2/MLSSearch POST /v2/PropGPT POST /v2/PropertyAvm POST /v2/PropertyDetail POST /v2/PropertyDetailBulk POST /v2/PropertySearch POST /v2/Reports/Documents POST /v2/Reports/PropertyLiens POST /v2/Reports/PropertyReports POST /v3/PropertyComps
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43339d009ac8efbf1e464fa51b06df62d2a3c86c38
Public Swagger UI/API detected at path: /swagger.json - sample paths: POST /v2/AddressVerification POST /v2/AutoComplete POST /v2/CSVBuilder POST /v2/MLSDetail POST /v2/MLSSearch POST /v2/PropGPT POST /v2/PropertyAvm POST /v2/PropertyDetail POST /v2/PropertyDetailBulk POST /v2/PropertySearch POST /v2/Reports/Documents POST /v2/Reports/PropertyLiens POST /v2/Reports/PropertyReports POST /v3/PropertyComps
Open service 3.33.241.96:80 · proxy.realestateapi.com
2026-01-09 20:35
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache
Content-Length: 18
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 20:36:48 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Fa6EmB%2FA1T3trRd4s%2BzGZ8bmiDa1YnXHi6lYOF4AS0Y%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767991008"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Fa6EmB%2FA1T3trRd4s%2BzGZ8bmiDa1YnXHi6lYOF4AS0Y%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767991008"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
REAPI Proxy Server
Open service 13.248.213.92:443 · proxy.realestateapi.com
2026-01-09 04:57
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache
Content-Length: 18
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 04:57:54 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=gIru7BdfwvC4%2FymEF9RFWYFuFqLs0BDYrAg1v4uDk%2B8%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767934674"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=gIru7BdfwvC4%2FymEF9RFWYFuFqLs0BDYrAg1v4uDk%2B8%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767934674"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
REAPI Proxy Server
Open service 3.33.241.96:80 · proxy.realestateapi.com
2026-01-03 00:31
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache
Content-Length: 18
Content-Type: text/html; charset=utf-8
Date: Sat, 03 Jan 2026 00:31:49 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=VEg5egxLv519xC%2FRZxCAS82%2F%2FcN09Qi5ds857OYiKkY%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767400309"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=VEg5egxLv519xC%2FRZxCAS82%2F%2FcN09Qi5ds857OYiKkY%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767400309"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
REAPI Proxy Server
Open service 13.248.213.92:443 · proxy.realestateapi.com
2026-01-02 12:15
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache
Content-Length: 18
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 12:15:59 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Im6J7BGFy9pJjcjuo7Zzb8TNr6MnwdGtQwpqTGoDHsk%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767356159"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Im6J7BGFy9pJjcjuo7Zzb8TNr6MnwdGtQwpqTGoDHsk%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767356159"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
REAPI Proxy Server
Open service 13.248.213.92:443 · proxy.realestateapi.com
2025-12-30 13:26
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache
Content-Length: 18
Content-Type: text/html; charset=utf-8
Date: Tue, 30 Dec 2025 13:26:06 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=i8M%2F1lLDDuRMLX7n8byeB7Ta2%2BWPJSG9daYYmpiOfdw%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767101166"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=i8M%2F1lLDDuRMLX7n8byeB7Ta2%2BWPJSG9daYYmpiOfdw%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767101166"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
REAPI Proxy Server
Open service 3.33.241.96:80 · proxy.realestateapi.com
2025-12-23 09:30
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache
Content-Length: 18
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 09:30:51 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ai81bLB2wILOfvXJLJF6RS9%2Bmm7yoVBvhmu5JANSRuM%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766482251"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ai81bLB2wILOfvXJLJF6RS9%2Bmm7yoVBvhmu5JANSRuM%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766482251"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
REAPI Proxy Server
Open service 13.248.213.92:443 · proxy.realestateapi.com
2025-12-22 14:37
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache
Content-Length: 18
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 14:37:31 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=xYHJ5mXnpHZ5JF5Fo8TudW%2B19Wv%2BiWi720pvli2JDVA%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766414251"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=xYHJ5mXnpHZ5JF5Fo8TudW%2B19Wv%2BiWi720pvli2JDVA%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766414251"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
REAPI Proxy Server
Open service 3.33.241.96:80 · proxy.realestateapi.com
2025-12-21 11:32
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache
Content-Length: 18
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 11:32:32 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=4m5Z2f37WFW10EV4sZZFjWifDJI34QXDo2ric9QjrK0%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766316752"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=4m5Z2f37WFW10EV4sZZFjWifDJI34QXDo2ric9QjrK0%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766316752"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
REAPI Proxy Server
Open service 13.248.213.92:443 · proxy.realestateapi.com
2025-12-20 12:42
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache
Content-Length: 18
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 12:42:55 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=hA%2BUDSz%2FI5Of4NWcbX3%2FqGr5PBTVhBw37Dsvj80pvuo%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766234575"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=hA%2BUDSz%2FI5Of4NWcbX3%2FqGr5PBTVhBw37Dsvj80pvuo%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766234575"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
REAPI Proxy Server
Open service 3.33.241.96:80 · proxy.realestateapi.com
2025-12-19 07:10
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache
Content-Length: 18
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 07:11:00 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Tc3lr8FpwX0Q36u%2FQt6Hvw79d9hp6Eg9lJ5fgblOUHg%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766128260"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Tc3lr8FpwX0Q36u%2FQt6Hvw79d9hp6Eg9lJ5fgblOUHg%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766128260"
Server: Heroku
Via: 1.1 heroku-router
Connection: close
REAPI Proxy Server