LeakIX - Host api.vupt.ai

Domain api.vupt.ai

United States

AMAZON-02

Software information

Vercel

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 216.150.1.1
Domain: api.vupt.ai
Port: 443
URL: https://api.vupt.ai

First seen 2025-11-06 09:57
Last seen 2026-01-10 02:15
Open for 64 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-10 02:15
Create report

Open service 216.150.1.1:443 · api.vupt.ai

2026-01-10 02:15

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Cookie
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sat, 10 Jan 2026 02:15:34 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: Origin
X-Content-Type-Options: nosniff
X-Powered-By: Express
X-Vercel-Cache: MISS
X-Vercel-Id: iad1::iad1::v6fns-1768011334675-aab8bd73cb2a
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2 days ago by HttpPlugin

Create report

Open service 216.150.1.129:443 · api.vupt.ai

2026-01-08 00:15

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Cookie
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Thu, 08 Jan 2026 00:15:32 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: Origin
X-Content-Type-Options: nosniff
X-Powered-By: Express
X-Vercel-Cache: MISS
X-Vercel-Id: sfo1::iad1::6kz95-1767831332618-92cca9e8a7aa
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 216.150.16.129:443 · api.vupt.ai

2026-01-08 00:15

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Cookie
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Thu, 08 Jan 2026 00:15:32 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: Origin
X-Content-Type-Options: nosniff
X-Powered-By: Express
X-Vercel-Cache: MISS
X-Vercel-Id: sin1::iad1::smmfm-1767831332586-d572692855a0
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 216.150.1.129:80 · api.vupt.ai

2026-01-08 00:15

HTTP/1.0 308 Permanent Redirect
Content-Type: text/plain
Location: https://api.vupt.ai/
Refresh: 0;url=https://api.vupt.ai/
server: Vercel


Redirecting...

Found 2026-01-08 by HttpPlugin

Create report

Open service 216.150.16.129:80 · api.vupt.ai

2026-01-08 00:15

HTTP/1.0 308 Permanent Redirect
Content-Type: text/plain
Location: https://api.vupt.ai/
Refresh: 0;url=https://api.vupt.ai/
server: Vercel


Redirecting...

Found 2026-01-08 by HttpPlugin

Create report

Open service 216.150.1.1:443 · api.vupt.ai

2026-01-01 21:59

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Cookie
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Thu, 01 Jan 2026 21:59:49 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: Origin
X-Content-Type-Options: nosniff
X-Powered-By: Express
X-Vercel-Cache: MISS
X-Vercel-Id: fra1::iad1::lkk9n-1767304788979-c50de3ed341a
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-01 by HttpPlugin

Create report

Open service 216.150.1.1:443 · api.vupt.ai

2025-12-30 05:26

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Cookie
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 30 Dec 2025 05:26:09 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: Origin
X-Content-Type-Options: nosniff
X-Powered-By: Express
X-Vercel-Cache: MISS
X-Vercel-Id: fra1::iad1::jfpc8-1767072369028-1d16937a3f6a
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 216.150.1.1:443 · api.vupt.ai

2025-12-22 08:00

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Cookie
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 08:00:33 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: Origin
X-Content-Type-Options: nosniff
X-Powered-By: Express
X-Vercel-Cache: MISS
X-Vercel-Id: fra1::iad1::5fk58-1766390433145-7eeec3b9ea9d
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 216.150.1.1:443 · api.vupt.ai

2025-12-20 06:04

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Cookie
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 06:04:49 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
Vary: Origin
X-Content-Type-Options: nosniff
X-Powered-By: Express
X-Vercel-Cache: MISS
X-Vercel-Id: lhr1::iad1::zbbbj-1766210688973-8b81cc6f5c05
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

api.vupt.ai

Fingerprint:

33ad004bf6b07c4af8b51651d6348f9e6c5e363413c9f670e67b04159f30beb2

CN:

api.vupt.ai

Key:

RSA-2048

Issuer:

R13

Not before:

2026-01-07 23:15

Not after:

2026-04-07 23:15

api.vupt.ai

Fingerprint:

8ee2f54b99be5ab56f85702c609f38703cadf2e7b846629066387d0e9e0b4fcc

CN:

api.vupt.ai

Key:

RSA-2048

Issuer:

R12

Not before:

2025-11-06 08:58

Not after:

2026-02-04 08:58

Domain summary

api.vupt.ai 9

1 recorded

IP summary

216.150.1.1 1 216.150.1.129 1 216.150.16.129 1

3 recorded

Domain api.vupt.ai

United States

Software information

Swagger API description is publicly available

api.vupt.ai

api.vupt.ai

Domain summary

IP summary