LeakIX - Host api.bluecargo.io

Domain api.bluecargo.io

United States

AMAZON-02

Software information

CloudFront

tcp/80

awselb awselb 2.0

tcp/443

uvicorn

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 52.32.192.114
Domain: stg.api.bluecargo.io
Port: 443
URL: https://stg.api.bluecargo.io

First seen 2025-10-20 22:34
Last seen 2025-10-28 21:48
Open for 7 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff438305d56a3441ab0aa969a816214922fe557d0606
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /bookings
GET /carriers
GET /carriers/{name}
GET /shipments
GET /shipments/{bill_of_lading}
```
  Found on 2025-10-28 21:48
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 18.173.154.115
Domain: api.bluecargo.io
Port: 443
URL: https://api.bluecargo.io

First seen 2025-10-20 22:34
Last seen 2026-01-09 22:17
Open for 80 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff438305d56a3441ab0aa969a816214922fe557d0606
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /bookings
GET /carriers
GET /carriers/{name}
GET /shipments
GET /shipments/{bill_of_lading}
```
  Found on 2026-01-09 22:17
Create report

Open service 18.173.154.115:443 · api.bluecargo.io

2026-01-09 22:17

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Content-Length: 179
Connection: close
Date: Fri, 09 Jan 2026 22:17:14 GMT
server: uvicorn
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
vary: origin
apigw-requestid: W8Cwrgs9yK4EJOg=
X-Cache: Error from cloudfront
Via: 1.1 667b60dd320c04dc9adf041517122fc2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: K8LuRAvQoRf78lfwXEz4jvQRz9SUrcjS9bEd09MfmbjnvLf9JPZY3g==
Vary: Origin

Page title: Not Found


<!doctype html>
<html lang="en">
<head>
  <title>Not Found</title>
</head>
<body>
  <h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 13.32.121.66:80 · api.bluecargo.io

2026-01-06 13:13

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Tue, 06 Jan 2026 13:13:23 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 5743d3ff81b625f69ad8b8e32fc9c412.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: HMUxw1l63iE5c-tSTPD7mONwGFQF-r7hvK6ojc7nGlaDabCQYVT4RQ==
Vary: Origin

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: HMUxw1l63iE5c-tSTPD7mONwGFQF-r7hvK6ojc7nGlaDabCQYVT4RQ==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-06 by HttpPlugin

Create report

Open service 13.32.121.116:443 · api.bluecargo.io

2026-01-06 13:13

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Content-Length: 179
Connection: close
Date: Tue, 06 Jan 2026 13:13:24 GMT
server: uvicorn
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
vary: origin
apigw-requestid: Ww6SNi2FSK4EMGQ=
X-Cache: Error from cloudfront
Via: 1.1 5743d3ff81b625f69ad8b8e32fc9c412.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: noxJosVOhCjBm37tTJZR7PIGcPyr6dSxVLg34IXnrXikjaTuV9Hgvg==
Vary: Origin

Page title: Not Found


<!doctype html>
<html lang="en">
<head>
  <title>Not Found</title>
</head>
<body>
  <h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>

Found 2026-01-06 by HttpPlugin

Create report

Open service 13.32.121.66:443 · api.bluecargo.io

2026-01-06 13:13

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Content-Length: 179
Connection: close
Date: Tue, 06 Jan 2026 13:13:24 GMT
server: uvicorn
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
vary: origin
apigw-requestid: Ww6SRhwQSK4EJ3A=
X-Cache: Error from cloudfront
Via: 1.1 cb0a9b0d01a1b0cc9278d9875ce23c92.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: MlskehKlwqM9s7pRZB9dhk3in4rY4j4P6sNKHhUPVnsXR3Y83fuikA==
Vary: Origin

Page title: Not Found


<!doctype html>
<html lang="en">
<head>
  <title>Not Found</title>
</head>
<body>
  <h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>

Found 2026-01-06 by HttpPlugin

Create report

Open service 13.32.121.106:80 · api.bluecargo.io

2026-01-06 13:13

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Tue, 06 Jan 2026 13:13:22 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 ec85113c6ed859938b3fcfa19bc035f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: 2j9KqbJ164TS_eLmH-gNZ_BN3TkFNlpkUdU0Q5XZ0YNtgJ9HaLtsUQ==
Vary: Origin

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: 2j9KqbJ164TS_eLmH-gNZ_BN3TkFNlpkUdU0Q5XZ0YNtgJ9HaLtsUQ==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-06 by HttpPlugin

Create report

Open service 13.32.121.109:80 · api.bluecargo.io

2026-01-06 13:13

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Tue, 06 Jan 2026 13:13:22 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 d7433132a7c6595c9aab2dc2272e7060.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: G6EgJpdA1nwQESBAdYGyuKniHz46X05QOgkURbcPoMHgzvpkeDJbMA==
Vary: Origin

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: G6EgJpdA1nwQESBAdYGyuKniHz46X05QOgkURbcPoMHgzvpkeDJbMA==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-06 by HttpPlugin

Create report

Open service 13.32.121.106:443 · api.bluecargo.io

2026-01-06 13:13

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Content-Length: 179
Connection: close
Date: Tue, 06 Jan 2026 13:13:24 GMT
server: uvicorn
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
vary: origin
apigw-requestid: Ww6SSgsKSK4EM5Q=
X-Cache: Error from cloudfront
Via: 1.1 bc0a0f9f99d36a68240a31a25e39addc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: Z_0Cs4ULXVYtZKj4w_QyDJBZkIL4RZQQ0pcEDRHc0EmXpRJ-U9aZbQ==
Vary: Origin

Page title: Not Found


<!doctype html>
<html lang="en">
<head>
  <title>Not Found</title>
</head>
<body>
  <h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>

Found 2026-01-06 by HttpPlugin

Create report

Open service 13.32.121.116:80 · api.bluecargo.io

2026-01-06 13:13

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Tue, 06 Jan 2026 13:13:23 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 d954dd318e06aa0e69375f36dcd819de.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: 5itgeZqwk4uDtNVV8g_Ig41HifqvNO4T6F_Xb8npWMQYfwacaxK9XA==
Vary: Origin

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: 5itgeZqwk4uDtNVV8g_Ig41HifqvNO4T6F_Xb8npWMQYfwacaxK9XA==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2026-01-06 by HttpPlugin

Create report

Open service 13.32.121.109:443 · api.bluecargo.io

2026-01-06 13:13

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Content-Length: 179
Connection: close
Date: Tue, 06 Jan 2026 13:13:24 GMT
server: uvicorn
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
vary: origin
apigw-requestid: Ww6SNjGxyK4EM9g=
X-Cache: Error from cloudfront
Via: 1.1 fd4a8fa7c304171992e7f22fc8894904.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P1
X-Amz-Cf-Id: 9aWAg-aOGWT0HFbrQ1SJRMwCWr8sT7Jgv-L_Sua04kA14G_uz2SDlQ==
Vary: Origin

Page title: Not Found


<!doctype html>
<html lang="en">
<head>
  <title>Not Found</title>
</head>
<body>
  <h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>

Found 2026-01-06 by HttpPlugin

Create report

Open service 18.173.154.115:443 · api.bluecargo.io

2026-01-02 20:35

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Content-Length: 179
Connection: close
Date: Fri, 02 Jan 2026 20:35:37 GMT
server: uvicorn
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
vary: origin
apigw-requestid: WkvUDj4MyK4EJVQ=
X-Cache: Error from cloudfront
Via: 1.1 7ad01e16cb039e6f25a50f4e294fd0ae.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: 7IzIYo5aW3GhahSgkhb9G4RuVerdAhB7XVnYxIA4ydUvOFMUKtt1Eg==
Vary: Origin

Page title: Not Found


<!doctype html>
<html lang="en">
<head>
  <title>Not Found</title>
</head>
<body>
  <h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 18.173.154.115:443 · api.bluecargo.io

2025-12-22 19:43

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Content-Length: 179
Connection: close
Date: Mon, 22 Dec 2025 19:43:04 GMT
server: uvicorn
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
vary: origin
apigw-requestid: WAXTVg9aSK4EJ8Q=
X-Cache: Error from cloudfront
Via: 1.1 595547cdc2fce94aba8498c84797701a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: bIIob6GtTUkB7cw01Qw4NtSbjye5vrlKLW21a9_UjqzZIZY9BjS0dw==
Vary: Origin

Page title: Not Found


<!doctype html>
<html lang="en">
<head>
  <title>Not Found</title>
</head>
<body>
  <h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 52.32.192.114:443 · stg.api.bluecargo.io

2025-12-22 08:45

HTTP/1.1 418 
Server: awselb/2.0
Date: Mon, 22 Dec 2025 08:45:30 GMT
Content-Length: 36
Connection: close
Content-Type: application/json


{"status":418,"name":"I'm a teapot"}

Found 2025-12-22 by HttpPlugin

Create report

Open service 18.173.154.115:443 · api.bluecargo.io

2025-12-20 19:46

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Content-Length: 179
Connection: close
Date: Sat, 20 Dec 2025 19:46:56 GMT
server: uvicorn
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
vary: origin
apigw-requestid: V5x_nitdyK4EJyg=
X-Cache: Error from cloudfront
Via: 1.1 5951b29f5460c0b6d21eb11bce7b8168.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: yPojls06BRp-sJ5fL3tbE70bUHdI4qZ5oUpvE6fwpsz3cqyQXgL-lw==
Vary: Origin

Page title: Not Found


<!doctype html>
<html lang="en">
<head>
  <title>Not Found</title>
</head>
<body>
  <h1>Not Found</h1><p>The requested resource was not found on this server.</p>
</body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

Open service 52.32.192.114:443 · stg.api.bluecargo.io

2025-12-20 09:26

HTTP/1.1 404 Not Found
Date: Sat, 20 Dec 2025 09:26:31 GMT
Content-Type: application/json
Content-Length: 22
Connection: close
server: uvicorn


{"detail":"Not Found"}

Found 2025-12-20 by HttpPlugin

Create report

.cloud-prod.bluecargo.io.bluecargo.io

Fingerprint:

b88768f4c253531798dba6aa376786f9f1d5e08f7dfec33e46a668bb11a441c0

CN:

*.cloud-prod.bluecargo.io

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M03

Not before:

2025-09-03 00:00

Not after:

2026-10-02 23:59

fq6.floqast.engineering*.fq6.floqast.engineering

Fingerprint:

9938201041fe76c5fc8ec5e3ebdd671aedd04992f9757b7a36c52c3c5ce16b6b

CN:

fq6.floqast.engineering

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M04

Not before:

2025-09-26 00:00

Not after:

2026-10-24 23:59

*.crewai.comcrewai.com

Fingerprint:

36dac69bcd6db246a17a213c02c36889beca280e1197adcea9f2631a2a012e88

CN:

*.crewai.com

Key:

ECDSA-256

Issuer:

Sectigo ECC Domain Validation Secure Server CA

Not before:

2025-03-05 00:00

Not after:

2026-03-09 23:59

Domain summary

api.bluecargo.io 12 stg.api.bluecargo.io 2

2 recorded

IP summary

52.32.192.114 2 18.173.154.115 1 13.32.121.66 1 13.32.121.116 1 13.32.121.106 1 13.32.121.109 1

6 recorded

Domain api.bluecargo.io

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

*.cloud-prod.bluecargo.io*.bluecargo.io

fq6.floqast.engineering*.fq6.floqast.engineering

*.crewai.comcrewai.com

Domain summary

IP summary

.cloud-prod.bluecargo.io.bluecargo.io