LeakIX - Host api.mytwido.com

Domain api.mytwido.com

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.185.157
Domain: api.mytwido.com
Port: 443
URL: https://api.mytwido.com

First seen 2025-11-05 00:51
Last seen 2026-01-09 19:34
Open for 65 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-01-09 19:34
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 15.197.253.240
Domain: api.mytwido.com
Port: 80
URL: http://api.mytwido.com

First seen 2025-11-05 00:51
Last seen 2026-01-09 21:51
Open for 65 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-01-09 21:51
Create report

Open service 15.197.253.240:80 · api.mytwido.com

2026-01-09 21:51

HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Fri, 09 Jan 2026 21:52:25 GMT
Expires: 0
Pragma: no-cache
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 84
Connection: close


{"timestamp":1767995545462,"status":404,"error":"Not Found","message":"","path":"/"}

Found 2026-01-09 by HttpPlugin

Create report

Open service 99.83.185.157:443 · api.mytwido.com

2026-01-09 19:34

HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Fri, 09 Jan 2026 19:34:52 GMT
Expires: 0
Pragma: no-cache
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 84
Connection: close


{"timestamp":1767987292726,"status":404,"error":"Not Found","message":"","path":"/"}

Found 2026-01-09 by HttpPlugin

Create report

Open service 3.33.249.164:443 · api.mytwido.com

2026-01-04 01:09

HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Sun, 04 Jan 2026 01:09:10 GMT
Expires: 0
Pragma: no-cache
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 84
Connection: close


{"timestamp":1767488950985,"status":404,"error":"Not Found","message":"","path":"/"}

Found 2026-01-04 by HttpPlugin

Create report

Open service 3.33.249.164:80 · api.mytwido.com

2026-01-04 01:09

HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Sun, 04 Jan 2026 01:09:12 GMT
Expires: 0
Pragma: no-cache
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 84
Connection: close


{"timestamp":1767488952927,"status":404,"error":"Not Found","message":"","path":"/"}

Found 2026-01-04 by HttpPlugin

Create report

Open service 99.83.185.157:80 · api.mytwido.com

2026-01-04 01:09

HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Sun, 04 Jan 2026 01:09:12 GMT
Expires: 0
Pragma: no-cache
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 84
Connection: close


{"timestamp":1767488952727,"status":404,"error":"Not Found","message":"","path":"/"}

Found 2026-01-04 by HttpPlugin

Create report

Open service 99.83.185.157:443 · api.mytwido.com

2026-01-04 01:09

HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Sun, 04 Jan 2026 01:09:09 GMT
Expires: 0
Pragma: no-cache
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 84
Connection: close


{"timestamp":1767488950029,"status":404,"error":"Not Found","message":"","path":"/"}

Found 2026-01-04 by HttpPlugin

Create report

Open service 52.223.53.203:443 · api.mytwido.com

2026-01-04 01:09

HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Sun, 04 Jan 2026 01:09:09 GMT
Expires: 0
Pragma: no-cache
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 84
Connection: close


{"timestamp":1767488949706,"status":404,"error":"Not Found","message":"","path":"/"}

Found 2026-01-04 by HttpPlugin

Create report

Open service 15.197.253.240:443 · api.mytwido.com

2026-01-04 01:09

HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Sun, 04 Jan 2026 01:09:09 GMT
Expires: 0
Pragma: no-cache
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 84
Connection: close


{"timestamp":1767488949699,"status":404,"error":"Not Found","message":"","path":"/"}

Found 2026-01-04 by HttpPlugin

Create report

Open service 15.197.253.240:80 · api.mytwido.com

2026-01-02 06:06

HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Fri, 02 Jan 2026 06:06:07 GMT
Expires: 0
Pragma: no-cache
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 84
Connection: close


{"timestamp":1767333968858,"status":404,"error":"Not Found","message":"","path":"/"}

Found 2026-01-02 by HttpPlugin

Create report

Open service 99.83.185.157:443 · api.mytwido.com

2025-12-30 14:18

HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Tue, 30 Dec 2025 14:18:25 GMT
Expires: 0
Pragma: no-cache
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 84
Connection: close


{"timestamp":1767104305603,"status":404,"error":"Not Found","message":"","path":"/"}

Found 2025-12-30 by HttpPlugin

Create report

Open service 15.197.253.240:80 · api.mytwido.com

2025-12-30 13:26

HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Tue, 30 Dec 2025 13:26:57 GMT
Expires: 0
Pragma: no-cache
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 84
Connection: close


{"timestamp":1767101218492,"status":404,"error":"Not Found","message":"","path":"/"}

Found 2025-12-30 by HttpPlugin

Create report

Open service 99.83.185.157:443 · api.mytwido.com

2025-12-22 12:51

HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Mon, 22 Dec 2025 12:51:44 GMT
Expires: 0
Pragma: no-cache
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 84
Connection: close


{"timestamp":1766407905907,"status":404,"error":"Not Found","message":"","path":"/"}

Found 2025-12-22 by HttpPlugin

Create report

Open service 99.83.185.157:443 · api.mytwido.com

2025-12-20 15:54

HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Sat, 20 Dec 2025 15:54:27 GMT
Expires: 0
Pragma: no-cache
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 84
Connection: close


{"timestamp":1766246068168,"status":404,"error":"Not Found","message":"","path":"/"}

Found 2025-12-20 by HttpPlugin

Create report

Open service 15.197.253.240:80 · api.mytwido.com

2025-12-20 12:45

HTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Sat, 20 Dec 2025 12:45:09 GMT
Expires: 0
Pragma: no-cache
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Content-Length: 84
Connection: close


{"timestamp":1766234710362,"status":404,"error":"Not Found","message":"","path":"/"}

Found 2025-12-20 by HttpPlugin

Create report

api.mytwido.com

Fingerprint:

ee900be3bfd9a0b4210a2371bb20ed5f0deea2423bbed10512e00a030a35b662

CN:

api.mytwido.com

Key:

RSA-2048

Issuer:

R12

Not before:

2026-01-04 00:09

Not after:

2026-04-04 00:09

api.mytwido.com

Fingerprint:

129e59a77a7e5bc9368887b12ae9be0fd1dad1b71a13522329bc2d9bd8192f5c

CN:

api.mytwido.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-04 23:53

Not after:

2026-02-02 23:53

Domain summary

api.mytwido.com 15

1 recorded

IP summary

15.197.253.240 1 99.83.185.157 1 3.33.249.164 1 52.223.53.203 1

4 recorded

Domain api.mytwido.com

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

api.mytwido.com

api.mytwido.com

Domain summary

IP summary