LeakIX - Host api.directappli.com

Domain api.directappli.com

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 75.2.97.79
Domain: api.directappli.com
Port: 443
URL: https://api.directappli.com

First seen 2025-10-21 00:30
Last seen 2026-01-10 02:17
Open for 81 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-10 02:17
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 35.71.145.101
Domain: api.directappli.com
Port: 80
URL: http://api.directappli.com

First seen 2025-10-21 00:30
Last seen 2026-01-10 01:09
Open for 81 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-10 01:09
Create report

Open service 75.2.97.79:443 · api.directappli.com

2026-01-10 02:17

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sat, 10 Jan 2026 02:17:16 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=RUXGdsXDINNQJl8Kghq3fC5L0iF8ARTk1dOGArljDcw%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1768011436"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=RUXGdsXDINNQJl8Kghq3fC5L0iF8ARTk1dOGArljDcw%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1768011436"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2 days ago by HttpPlugin

Create report

Open service 35.71.145.101:80 · api.directappli.com

2026-01-10 01:09

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sat, 10 Jan 2026 01:10:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=jELpDqU%2BvymWGaBrLQEKvSKRdZdvOLXbVT1OExtzjQg%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1768007427"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=jELpDqU%2BvymWGaBrLQEKvSKRdZdvOLXbVT1OExtzjQg%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1768007427"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 3 days ago by HttpPlugin

Create report

Open service 75.2.97.79:443 · api.directappli.com

2026-01-02 23:36

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 23:36:23 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=wZDYOunmpKN7K%2B6AR3g3OGrw4axQnAWr5HhegRlCCQs%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767396983"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=wZDYOunmpKN7K%2B6AR3g3OGrw4axQnAWr5HhegRlCCQs%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767396983"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 35.71.145.101:80 · api.directappli.com

2026-01-02 18:28

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 18:28:58 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=5mIQsgsIryi2u34zHTFC8Ghy9VAiQl99BQhUqYJgFqQ%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767378538"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=5mIQsgsIryi2u34zHTFC8Ghy9VAiQl99BQhUqYJgFqQ%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767378538"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 75.2.97.79:443 · api.directappli.com

2025-12-23 09:47

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 09:47:02 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2BxuuWFhUH9ZLVbGEUTosBZ%2Bv%2BlD6OmqfCUyrT8JuHkk%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766483222"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2BxuuWFhUH9ZLVbGEUTosBZ%2Bv%2BlD6OmqfCUyrT8JuHkk%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766483222"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 35.71.145.101:80 · api.directappli.com

2025-12-22 10:24

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 10:24:55 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Q3fc6aeBlurqJ1mF8QGAfdqazPR0rqOImRaRHGGIhSM%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766399095"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Q3fc6aeBlurqJ1mF8QGAfdqazPR0rqOImRaRHGGIhSM%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766399095"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 35.71.145.101:80 · api.directappli.com

2025-12-21 11:08

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 11:08:35 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=1SxycD%2FyPNYO7fxaE338Dd9%2BokoijU%2BqzJSwvX9Ygw4%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766315315"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=1SxycD%2FyPNYO7fxaE338Dd9%2BokoijU%2BqzJSwvX9Ygw4%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766315315"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-21 by HttpPlugin

Create report

Open service 75.2.97.79:443 · api.directappli.com

2025-12-21 04:22

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 04:22:00 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=q0dWkEkmWiO1i%2FhgsYyppJSwP45%2BoTBw%2FmSbVyjZrBk%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766290920"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=q0dWkEkmWiO1i%2FhgsYyppJSwP45%2BoTBw%2FmSbVyjZrBk%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766290920"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-21 by HttpPlugin