LeakIX - Host api.staging.wearecareless.com

Domain api.staging.wearecareless.com

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 75.2.43.161
Domain: api.staging.wearecareless.com
Port: 443
URL: https://api.staging.wearecareless.com

First seen 2025-11-17 00:47
Last seen 2026-01-09 18:43
Open for 53 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 18:43
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 75.2.43.161
Domain: api.staging.wearecareless.com
Port: 80
URL: http://api.staging.wearecareless.com

First seen 2025-11-17 00:47
Last seen 2026-01-10 00:18
Open for 53 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-10 00:18
Create report

Open service 75.2.43.161:80 · api.staging.wearecareless.com

2026-01-10 00:18

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Sat, 10 Jan 2026 00:19:16 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=4MfOC%2FuhA3Trb6PiOeq47rZHwb0X465tFmqpmqDM%2Ff8%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768004357"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=4MfOC%2FuhA3Trb6PiOeq47rZHwb0X465tFmqpmqDM%2Ff8%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768004357"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2 days ago by HttpPlugin

Create report

Open service 75.2.43.161:443 · api.staging.wearecareless.com

2026-01-09 18:43

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Fri, 09 Jan 2026 18:43:03 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ip9zdQ64CjukerkwFkfIqKvzdH%2Fuxo%2BLxbkOJ7HKUuI%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767984183"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ip9zdQ64CjukerkwFkfIqKvzdH%2Fuxo%2BLxbkOJ7HKUuI%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767984183"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 3 days ago by HttpPlugin

Create report

Open service 75.2.43.161:80 · api.staging.wearecareless.com

2026-01-02 20:29

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Fri, 02 Jan 2026 20:29:43 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=J3opqecu2XyEvr8qet6sxsxEAeZtu5hrO08wP10PFsA%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767385784"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=J3opqecu2XyEvr8qet6sxsxEAeZtu5hrO08wP10PFsA%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767385784"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2026-01-02 by HttpPlugin

Create report

Open service 75.2.43.161:443 · api.staging.wearecareless.com

2026-01-02 06:09

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Fri, 02 Jan 2026 06:09:39 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=2MKeZLZ8z%2BWmVxNzd2VEXx3x3J20RvmbIQy4rmO2XdM%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767334179"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=2MKeZLZ8z%2BWmVxNzd2VEXx3x3J20RvmbIQy4rmO2XdM%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767334179"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2026-01-02 by HttpPlugin

Create report

Open service 75.2.43.161:443 · api.staging.wearecareless.com

2025-12-30 13:13

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Tue, 30 Dec 2025 13:13:49 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=zntgtpHVCV39WM%2FM0j2Byp3XR%2FKemIWBfS%2BBvgietPY%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767100430"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=zntgtpHVCV39WM%2FM0j2Byp3XR%2FKemIWBfS%2BBvgietPY%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767100430"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2025-12-30 by HttpPlugin

Create report

Open service 75.2.43.161:80 · api.staging.wearecareless.com

2025-12-23 02:47

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Tue, 23 Dec 2025 02:48:02 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=wxXxNuqo59KpEZ3MdVtdHLUsFEuGDI%2F0Efhf410aLoI%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766458083"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=wxXxNuqo59KpEZ3MdVtdHLUsFEuGDI%2F0Efhf410aLoI%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766458083"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2025-12-23 by HttpPlugin

Create report

Open service 75.2.43.161:443 · api.staging.wearecareless.com

2025-12-22 10:56

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Mon, 22 Dec 2025 10:56:06 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=p4GKybANyYFpibJ6%2F5Gv716xjhFWfOMgGJiVTeBm1fc%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766400967"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=p4GKybANyYFpibJ6%2F5Gv716xjhFWfOMgGJiVTeBm1fc%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766400967"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2025-12-22 by HttpPlugin

Create report

Open service 75.2.43.161:80 · api.staging.wearecareless.com

2025-12-21 08:08

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Sun, 21 Dec 2025 08:08:35 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ub%2BMDmMImSElUx7UmlfqOxyXiX%2BgKHR2RdXJFfmVYSw%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766304515"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ub%2BMDmMImSElUx7UmlfqOxyXiX%2BgKHR2RdXJFfmVYSw%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766304515"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2025-12-21 by HttpPlugin

Create report

Open service 75.2.43.161:443 · api.staging.wearecareless.com

2025-12-21 05:07

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Sun, 21 Dec 2025 05:07:33 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=shMvVCcdG61E2%2BLfkxpv8vigYKYRzvrv1%2BoDmXJL7TQ%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766293653"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=shMvVCcdG61E2%2BLfkxpv8vigYKYRzvrv1%2BoDmXJL7TQ%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766293653"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2025-12-21 by HttpPlugin

Create report

Open service 75.2.43.161:80 · api.staging.wearecareless.com

2025-12-19 06:08

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Fri, 19 Dec 2025 06:08:09 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=6yba77larDv21iWhS8286YiV0rNpCBb47SgkX4fSgHY%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766124489"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=6yba77larDv21iWhS8286YiV0rNpCBb47SgkX4fSgHY%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766124489"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2025-12-19 by HttpPlugin

Create report

api.staging.wearecareless.com

Fingerprint:

4b9dfbdc53ee5c1afcae2eaab74131b4b9cdd44e51ef2b75921c92e7fd4c0dc1

CN:

api.staging.wearecareless.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-16 23:47

Not after:

2026-02-14 23:47

Domain summary

api.staging.wearecareless.com 11

1 recorded

IP summary

75.2.43.161 2

1 recorded

Domain api.staging.wearecareless.com

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

api.staging.wearecareless.com

Domain summary

IP summary