LeakIX - Host api.savr.one

Domain api.savr.one

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: api.savr.one
Port: 443
URL: https://api.savr.one

First seen 2025-12-03 00:26
Last seen 2026-01-09 13:08
Open for 37 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 13:08
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.151.71
Domain: api.savr.one
Port: 80
URL: http://api.savr.one

First seen 2025-12-03 00:26
Last seen 2026-01-09 10:44
Open for 37 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 10:44
Create report

Open service 13.248.132.87:443 · api.savr.one

2026-01-09 13:08

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 13:08:58 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=UM%2BObZpHUvGYiUs%2FkTlL45wDjVU3NFoDkfP0EHgGcck%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767964138"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=UM%2BObZpHUvGYiUs%2FkTlL45wDjVU3NFoDkfP0EHgGcck%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767964138"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


hello world

Found 2026-01-09 by HttpPlugin

Create report

Open service 99.83.151.71:80 · api.savr.one

2026-01-09 10:44

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 10:45:09 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=79IMmMvKH2ti7ckhqAwh%2B%2Bp8lijzwQlsf5SWQ7cyfMA%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767955509"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=79IMmMvKH2ti7ckhqAwh%2B%2Bp8lijzwQlsf5SWQ7cyfMA%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767955509"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


hello world

Found 2026-01-09 by HttpPlugin

Create report

Open service 13.248.132.87:443 · api.savr.one

2026-01-02 07:42

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 07:42:52 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=oW5mtduKs7UD7TlopNnq4KRXOST60MjTQ%2BaOOaLWyao%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767339772"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=oW5mtduKs7UD7TlopNnq4KRXOST60MjTQ%2BaOOaLWyao%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767339772"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


hello world

Found 2026-01-02 by HttpPlugin

Create report

Open service 99.83.151.71:80 · api.savr.one

2026-01-02 04:27

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 04:27:30 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=7gcGCboqx%2BeKMQEj%2FsFDe%2FacmSmiiPrkzEQDSPCdiyc%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767328050"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=7gcGCboqx%2BeKMQEj%2FsFDe%2FacmSmiiPrkzEQDSPCdiyc%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767328050"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


hello world

Found 2026-01-02 by HttpPlugin

Create report

Open service 13.248.132.87:443 · api.savr.one

2025-12-25 05:37

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Thu, 25 Dec 2025 05:37:29 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=DrVwMNPEyF1TqEwe%2Fko6CTdJQTw5gN%2BLJDmtNihADCs%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766641049"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=DrVwMNPEyF1TqEwe%2Fko6CTdJQTw5gN%2BLJDmtNihADCs%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766641049"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


hello world

Found 2025-12-25 by HttpPlugin

Create report

Open service 13.248.132.87:443 · api.savr.one

2025-12-23 05:53

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 05:53:06 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=s4oxPLtjjs8K%2BfF8taFUB1AYGpGKMMQoe2JgVfMsBDQ%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766469186"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=s4oxPLtjjs8K%2BfF8taFUB1AYGpGKMMQoe2JgVfMsBDQ%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766469186"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


hello world

Found 2025-12-23 by HttpPlugin

Create report

Open service 99.83.151.71:80 · api.savr.one

2025-12-22 19:08

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 19:08:56 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=nqN5WCyo9ZFiZjo6TI4fhuPFZ1%2BMRhHKERyDDbD1Vm8%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766430536"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=nqN5WCyo9ZFiZjo6TI4fhuPFZ1%2BMRhHKERyDDbD1Vm8%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766430536"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


hello world

Found 2025-12-22 by HttpPlugin

Create report

Open service 99.83.151.71:80 · api.savr.one

2025-12-20 19:29

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 19:29:28 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=6SshtNfY%2BQtuOv%2BimZeG11cIqDCwIiuS9JWi9JX7j04%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766258968"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=6SshtNfY%2BQtuOv%2BimZeG11cIqDCwIiuS9JWi9JX7j04%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766258968"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


hello world

Found 2025-12-20 by HttpPlugin

Create report

Open service 13.248.132.87:443 · api.savr.one

2025-12-20 13:42

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 13:42:42 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=MxwRjGzKFfxEC%2BAPajEtjtoefXBboRJLgmkWLMp9SRY%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766238162"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=MxwRjGzKFfxEC%2BAPajEtjtoefXBboRJLgmkWLMp9SRY%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766238162"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


hello world

Found 2025-12-20 by HttpPlugin

Create report

Open service 99.83.151.71:80 · api.savr.one

2025-12-19 01:59

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 11
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 01:59:14 GMT
Etag: W/"b-Kq5sNclPz7QV2+lfQIuc6R7oRu0"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=z1NgTwvH3oKpQ6i42vAbd0tzWVg8WtdPGIswpENIhxs%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766109554"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=z1NgTwvH3oKpQ6i42vAbd0tzWVg8WtdPGIswpENIhxs%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766109554"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


hello world

Found 2025-12-19 by HttpPlugin

Create report

api.savr.one

Fingerprint:

797492ffcc5c25d2c4396a9b1240b0107d9f82d0a2b1c63c14cf9cccef1ed7a9

CN:

api.savr.one

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-02 23:27

Not after:

2026-03-02 23:27

Domain summary

api.savr.one 11

1 recorded

IP summary

13.248.132.87 1 99.83.151.71 1

2 recorded

Domain api.savr.one

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

api.savr.one

Domain summary

IP summary