LeakIX - Host api.immigrationbrief.com

Domain api.immigrationbrief.com

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 76.223.57.73
Domain: api.immigrationbrief.com
Port: 80
URL: http://api.immigrationbrief.com

First seen 2025-12-08 00:10
Last seen 2026-01-09 07:36
Open for 32 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 07:36
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.213.92
Domain: api.immigrationbrief.com
Port: 443
URL: https://api.immigrationbrief.com

First seen 2025-12-08 00:10
Last seen 2026-01-09 07:36
Open for 32 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 07:36
Create report

Open service 76.223.57.73:80 · api.immigrationbrief.com

2026-01-09 07:36

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 29
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 09 Jan 2026 07:37:39 GMT
Etag: W/"1d-3B/Vf+pesqN3j2bW5Y8yN+ES/Qo"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=imKivxcIsuI6OWiHF5JE2KfBPzJBGkmFQCtIf7DzwCc%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767944259"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=imKivxcIsuI6OWiHF5JE2KfBPzJBGkmFQCtIf7DzwCc%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767944259"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


Welcome to Immigration Brief!

Found 2026-01-09 by HttpPlugin

Create report

Open service 13.248.213.92:443 · api.immigrationbrief.com

2026-01-09 07:36

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 29
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 09 Jan 2026 07:36:37 GMT
Etag: W/"1d-3B/Vf+pesqN3j2bW5Y8yN+ES/Qo"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=2BrFq1sozLRjRBD7PmxEXIeIrX10eF7E8ineshYp7%2B8%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767944197"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=2BrFq1sozLRjRBD7PmxEXIeIrX10eF7E8ineshYp7%2B8%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767944197"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


Welcome to Immigration Brief!

Found 2026-01-09 by HttpPlugin

Create report

Open service 13.248.213.92:443 · api.immigrationbrief.com

2026-01-02 06:02

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 29
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 02 Jan 2026 06:02:20 GMT
Etag: W/"1d-3B/Vf+pesqN3j2bW5Y8yN+ES/Qo"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=N60%2BYBpG9JzcIsrwy2dFlo2QQbjgUzxubMBOsfIXEPM%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767333740"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=N60%2BYBpG9JzcIsrwy2dFlo2QQbjgUzxubMBOsfIXEPM%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767333740"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


Welcome to Immigration Brief!

Found 2026-01-02 by HttpPlugin

Create report

Open service 76.223.57.73:80 · api.immigrationbrief.com

2026-01-02 06:02

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 29
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 02 Jan 2026 06:02:21 GMT
Etag: W/"1d-3B/Vf+pesqN3j2bW5Y8yN+ES/Qo"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=fZmgB%2B8jlVuuwRuJ0C2%2B6sfDq%2FC7HmIc0jHDDR0ZjVA%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767333741"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=fZmgB%2B8jlVuuwRuJ0C2%2B6sfDq%2FC7HmIc0jHDDR0ZjVA%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767333741"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


Welcome to Immigration Brief!

Found 2026-01-02 by HttpPlugin

Create report

Open service 76.223.57.73:80 · api.immigrationbrief.com

2025-12-22 21:03

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 29
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Mon, 22 Dec 2025 21:03:12 GMT
Etag: W/"1d-3B/Vf+pesqN3j2bW5Y8yN+ES/Qo"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=1Zf7kuhAQOp9tYECG5QfeYrvxP16B24%2FqPELfXj%2BaSE%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766437392"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=1Zf7kuhAQOp9tYECG5QfeYrvxP16B24%2FqPELfXj%2BaSE%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766437392"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


Welcome to Immigration Brief!

Found 2025-12-22 by HttpPlugin

Create report

Open service 13.248.213.92:443 · api.immigrationbrief.com

2025-12-22 21:03

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 29
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Mon, 22 Dec 2025 21:03:06 GMT
Etag: W/"1d-3B/Vf+pesqN3j2bW5Y8yN+ES/Qo"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=SRpGWK9xtJvuQ3NhS%2B1fD%2FS1%2F1keqlOendLDGpF0PMA%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766437386"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=SRpGWK9xtJvuQ3NhS%2B1fD%2FS1%2F1keqlOendLDGpF0PMA%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766437386"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


Welcome to Immigration Brief!

Found 2025-12-22 by HttpPlugin

Create report

Open service 13.248.213.92:443 · api.immigrationbrief.com

2025-12-21 00:33

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 29
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Sun, 21 Dec 2025 00:33:22 GMT
Etag: W/"1d-3B/Vf+pesqN3j2bW5Y8yN+ES/Qo"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=HJzw572K9YRzYLIsBkVODOmUK%2F%2FDBJ5pcdGgRC9VqOg%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766277202"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=HJzw572K9YRzYLIsBkVODOmUK%2F%2FDBJ5pcdGgRC9VqOg%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766277202"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


Welcome to Immigration Brief!

Found 2025-12-21 by HttpPlugin

Create report

Open service 76.223.57.73:80 · api.immigrationbrief.com

2025-12-21 00:33

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 29
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Sun, 21 Dec 2025 00:33:22 GMT
Etag: W/"1d-3B/Vf+pesqN3j2bW5Y8yN+ES/Qo"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=HJzw572K9YRzYLIsBkVODOmUK%2F%2FDBJ5pcdGgRC9VqOg%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766277202"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=HJzw572K9YRzYLIsBkVODOmUK%2F%2FDBJ5pcdGgRC9VqOg%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766277202"
Server: Heroku
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


Welcome to Immigration Brief!

Found 2025-12-21 by HttpPlugin

Create report

api.immigrationbrief.com

Fingerprint:

c42d3daf88df82fa0ead7b4e871ba32e0eaa80cd066d90c7837097ca1ddf68bb

CN:

api.immigrationbrief.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-07 23:11

Not after:

2026-03-07 23:11

Domain summary

api.immigrationbrief.com 9

1 recorded

IP summary

76.223.57.73 1 13.248.213.92 1

2 recorded

Domain api.immigrationbrief.com

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

api.immigrationbrief.com

Domain summary

IP summary