LeakIX - Host api.vya.care

Domain api.vya.care

United States

AMAZON-02

Software information

heroku-router

tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 35.71.179.82
Domain: api.vya.care
Port: 80
URL: http://api.vya.care

First seen 2025-12-09 01:01
- Severity: info
  Fingerprint: 5733ddf49ff49cd151e75e4ba7b746818cdd1680fde9e20986f4e957a7865b97
```
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/ancillaryCost/{id}
GET /api/ancillaryCost/{orgId}/org
GET /api/organization
GET /api/v1/organization/serviceTemplates/{id}
GET /api/v1/organization/{organizationId}/serviceTemplates
GET /api/v1/organization/{organizationId}/services
GET /api/v1/patient
GET /api/v1/patient/{organizationId}/organization
GET /api/v1/patient/{uuid}
GET /api/v1/serviceTemplates/{orgid}
GET /api/v1/serviceTemplates/{uuid}/id
GET /api/v1/services/{serviceId}
POST /api/ancillaryCost
POST /api/v1/organization/serviceTemplates
POST /api/v1/organization/services
POST /api/v1/patient/{organizationId}/upload
POST /api/v1/serviceTemplates
POST /api/webhook
```
  Found on 2025-12-09 01:01
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 75.2.60.68
Domain: api.vya.care
Port: 443
URL: https://api.vya.care

First seen 2025-12-09 01:01
- Severity: info
  Fingerprint: 5733ddf49ff49cd151e75e4ba7b746818cdd1680fde9e20986f4e957a7865b97
```
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/ancillaryCost/{id}
GET /api/ancillaryCost/{orgId}/org
GET /api/organization
GET /api/v1/organization/serviceTemplates/{id}
GET /api/v1/organization/{organizationId}/serviceTemplates
GET /api/v1/organization/{organizationId}/services
GET /api/v1/patient
GET /api/v1/patient/{organizationId}/organization
GET /api/v1/patient/{uuid}
GET /api/v1/serviceTemplates/{orgid}
GET /api/v1/serviceTemplates/{uuid}/id
GET /api/v1/services/{serviceId}
POST /api/ancillaryCost
POST /api/v1/organization/serviceTemplates
POST /api/v1/organization/services
POST /api/v1/patient/{organizationId}/upload
POST /api/v1/serviceTemplates
POST /api/webhook
```
  Found on 2025-12-09 01:01
Create report

Open service 35.71.179.82:80 · api.vya.care

2026-01-08 19:09

HTTP/1.1 404 Not Found
Content-Length: 548
Cache-Control: no-cache, no-store
Content-Type: text/html; charset=utf-8
Date: 2026-01-08 19:10:19.307154022 +0000 UTC
Server: heroku-router

Page title: No such app

<!DOCTYPE html>
<html>
  <head>
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta charset="utf-8">
    <title>No such app</title>
    <style media="screen">
      html,body,iframe {
        margin: 0;
        padding: 0;
      }
      html,body {
        height: 100%;
        overflow: hidden;
      }
      iframe {
        width: 100%;
        height: 100%;
        border: 0;
      }
    </style>
  </head>
  <body>
    <iframe src="//www.herokucdn.com/error-pages/no-such-app.html"></iframe>
  </body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 35.71.179.82:80 · api.vya.care

2026-01-01 20:01

HTTP/1.1 404 Not Found
Content-Length: 548
Cache-Control: no-cache, no-store
Content-Type: text/html; charset=utf-8
Date: 2026-01-01 20:01:20.28965927 +0000 UTC
Server: heroku-router

Page title: No such app

<!DOCTYPE html>
<html>
  <head>
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta charset="utf-8">
    <title>No such app</title>
    <style media="screen">
      html,body,iframe {
        margin: 0;
        padding: 0;
      }
      html,body {
        height: 100%;
        overflow: hidden;
      }
      iframe {
        width: 100%;
        height: 100%;
        border: 0;
      }
    </style>
  </head>
  <body>
    <iframe src="//www.herokucdn.com/error-pages/no-such-app.html"></iframe>
  </body>
</html>

Found 2026-01-01 by HttpPlugin

Create report

Open service 35.71.179.82:80 · api.vya.care

2025-12-30 04:08

HTTP/1.1 404 Not Found
Content-Length: 548
Cache-Control: no-cache, no-store
Content-Type: text/html; charset=utf-8
Date: 2025-12-30 04:08:40.59563534 +0000 UTC
Server: heroku-router

Page title: No such app

<!DOCTYPE html>
<html>
  <head>
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta charset="utf-8">
    <title>No such app</title>
    <style media="screen">
      html,body,iframe {
        margin: 0;
        padding: 0;
      }
      html,body {
        height: 100%;
        overflow: hidden;
      }
      iframe {
        width: 100%;
        height: 100%;
        border: 0;
      }
    </style>
  </head>
  <body>
    <iframe src="//www.herokucdn.com/error-pages/no-such-app.html"></iframe>
  </body>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 35.71.179.82:80 · api.vya.care

2025-12-22 04:54

HTTP/1.1 404 Not Found
Content-Length: 548
Cache-Control: no-cache, no-store
Content-Type: text/html; charset=utf-8
Date: 2025-12-22 04:54:05.925242989 +0000 UTC
Server: heroku-router

Page title: No such app

<!DOCTYPE html>
<html>
  <head>
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta charset="utf-8">
    <title>No such app</title>
    <style media="screen">
      html,body,iframe {
        margin: 0;
        padding: 0;
      }
      html,body {
        height: 100%;
        overflow: hidden;
      }
      iframe {
        width: 100%;
        height: 100%;
        border: 0;
      }
    </style>
  </head>
  <body>
    <iframe src="//www.herokucdn.com/error-pages/no-such-app.html"></iframe>
  </body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 35.71.179.82:80 · api.vya.care

2025-12-20 04:53

HTTP/1.1 404 Not Found
Content-Length: 548
Cache-Control: no-cache, no-store
Content-Type: text/html; charset=utf-8
Date: 2025-12-20 04:53:09.254899571 +0000 UTC
Server: heroku-router

Page title: No such app

<!DOCTYPE html>
<html>
  <head>
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta charset="utf-8">
    <title>No such app</title>
    <style media="screen">
      html,body,iframe {
        margin: 0;
        padding: 0;
      }
      html,body {
        height: 100%;
        overflow: hidden;
      }
      iframe {
        width: 100%;
        height: 100%;
        border: 0;
      }
    </style>
  </head>
  <body>
    <iframe src="//www.herokucdn.com/error-pages/no-such-app.html"></iframe>
  </body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

Domain summary

api.vya.care 6

1 recorded

IP summary

35.71.179.82 2 75.2.60.68 1

2 recorded

Domain api.vya.care

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Create report

Create report

Create report

Create report

Create report

Domain summary

IP summary