LeakIX - Host app.prepfuel.com

Domain app.prepfuel.com

United States

Akamai Connected Cloud

Ubuntu

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

nginx nginx 1.14.0

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 45.33.81.97
Domain: app.prepfuel.com
Port: 443
URL: https://app.prepfuel.com

First seen 2025-10-28 09:56
Last seen 2026-01-09 02:33
Open for 72 days

Severity: info
Fingerprint: 5733ddf49ff49cd110b5863c5761d27de4db3d0fb9d819027336a315ea4073d2

Public Swagger UI/API detected at path: /api-docs/swagger.json - sample paths:
GET /api/admin
GET /api/admin/admins/{id}
GET /api/admin/parents/{id}
GET /api/auth/confirm
GET /api/auth/logout
GET /api/student/reminders
GET /api/student/schedule
GET /api/student/schedule/dashboard
GET /api/test-results/{id}/summary
GET /api/tests-results/{id}
GET /api/tests/
GET /api/tests/test-by-result/{resultId}
GET /api/tests/{id}
GET /api/user/me
POST /api/admin/create-admin
POST /api/admin/create-parent
POST /api/admin/students/:sid/add/parents/:pid
POST /api/auth/forgot-password
POST /api/auth/login
POST /api/auth/register
POST /api/auth/reset-password/{token}
POST /api/student/add-schedule
POST /api/tests-results/create/{testId}
POST /api/tests/store
POST /api/user/create-student
PUT /api/tests-results/{id}

Found on 2026-01-09 02:33

Create report

Open service 45.33.81.97:443 · app.prepfuel.com

2026-01-09 02:33

HTTP/1.1 404 Not Found
Server: nginx/1.14.0 (Ubuntu)
Date: Fri, 09 Jan 2026 02:33:33 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 139
Connection: close
Vary: Accept-Encoding
X-Powered-By: Express
Vary: Origin
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 45.33.81.97:443 · app.prepfuel.com

2026-01-02 00:41

HTTP/1.1 404 Not Found
Server: nginx/1.14.0 (Ubuntu)
Date: Fri, 02 Jan 2026 00:41:57 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 139
Connection: close
Vary: Accept-Encoding
X-Powered-By: Express
Vary: Origin
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 2606:4700:3035::6815:230b:8443 · app.prepfuel.com

2025-12-31 08:11

HTTP/1.1 521 <none>
Date: Wed, 31 Dec 2025 08:11:38 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9b684eadc9e31e26-FRA
alt-svc: h3=":8443"; ma=86400


error code: 521

Found 2025-12-31 by HttpPlugin

Create report

Open service 2606:4700:3037::ac43:a72b:443 · app.prepfuel.com

2025-12-31 08:11

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 08:11:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=7DgLidyWOz9qIi%2BlnvJCb3ZKeBTvhLHW2ImQ6mcSHD8DnMJLV4DtG0EsqLigwkenLCqsIb9Zr4dvQYivO1s9AKnrV3OaKrlebM97%2FYMMhimC%2F15KIqtj6%2Flpk44%3D"}]}
vary: accept-encoding
cf-cache-status: DYNAMIC
CF-RAY: 9b684eadb9e530d0-FRA
alt-svc: h3=":443"; ma=86400

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body bgcolor="white">
<center><h1>403 Forbidden</h1></center>
<hr><center>nginx/1.14.0 (Ubuntu)</center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 172.67.167.43:8443 · app.prepfuel.com

2025-12-31 08:11

HTTP/1.1 521 <none>
Date: Wed, 31 Dec 2025 08:11:38 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9b684eac8b89d360-FRA
alt-svc: h3=":8443"; ma=86400


error code: 521

Found 2025-12-31 by HttpPlugin

Create report

Open service 104.21.35.11:8443 · app.prepfuel.com

2025-12-31 08:11

HTTP/1.1 521 <none>
Date: Wed, 31 Dec 2025 08:11:38 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9b684eac3a2d8871-LHR
alt-svc: h3=":8443"; ma=86400


error code: 521

Found 2025-12-31 by HttpPlugin

Create report

Open service 2606:4700:3037::ac43:a72b:8443 · app.prepfuel.com

2025-12-31 08:11

HTTP/1.1 521 <none>
Date: Wed, 31 Dec 2025 08:11:38 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9b684eac3967d399-FRA
alt-svc: h3=":8443"; ma=86400


error code: 521

Found 2025-12-31 by HttpPlugin

Create report

Open service 2606:4700:3035::6815:230b:443 · app.prepfuel.com

2025-12-31 08:11

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 08:11:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qbgV7yNBbVWL0ovXpFrzUMgcVLNcTR8QyMtQZYVXBqIcyDaApmQPGqRv3pao55sVRIux7EsxQhSTKcB%2Fn2RygjAfxOBOtzEyaqQXQ9Ki3df2AYvfpV%2BZmWgoMNM%3D"}]}
vary: accept-encoding
cf-cache-status: DYNAMIC
CF-RAY: 9b684eac3fe70368-FRA
alt-svc: h3=":443"; ma=86400

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body bgcolor="white">
<center><h1>403 Forbidden</h1></center>
<hr><center>nginx/1.14.0 (Ubuntu)</center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 2606:4700:3037::ac43:a72b:80 · app.prepfuel.com

2025-12-31 08:11

HTTP/1.1 301 Moved Permanently
Date: Wed, 31 Dec 2025 08:11:38 GMT
Content-Length: 0
Connection: close
Location: https://app.prepfuel.com/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Q8WJ4dSbGzHP79wlDjL5xH2xeyAuTn49S8SVmrU2rQfHUeKoQQDWfm8IuuOX1hLdnPvkEfiR3r89aiusiCYokBO5DYaCeVm2lebyt%2Fiq54qVgH0Tqv%2BJObMgk7Y%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9b684eaae9af9290-FRA
alt-svc: h3=":443"; ma=86400

Found 2025-12-31 by HttpPlugin

Create report

Open service 2606:4700:3035::6815:230b:80 · app.prepfuel.com

2025-12-31 08:11

HTTP/1.1 301 Moved Permanently
Date: Wed, 31 Dec 2025 08:11:38 GMT
Content-Length: 0
Connection: close
Location: https://app.prepfuel.com/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Ui%2FstjRPZoU%2Fxa%2FYCXeQAaNz13CRBnokp71YZDCEehB4U9wQxdIMmvrR0ttlMviHstjpnx4D%2BReAHOf%2FHPynkKO5kmhaKHkkQTCo717Ld%2BszYID9yJ9S4wiAVDw%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9b684eaaebe4973c-FRA
alt-svc: h3=":443"; ma=86400

Found 2025-12-31 by HttpPlugin

Create report

Open service 172.67.167.43:443 · app.prepfuel.com

2025-12-31 08:11

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 08:11:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=C0WuJIiDset38jw5qm9RCW%2B9S8geLnzgxE5slGW%2FyxjQXwubxJ6mCdl9Pim%2Fse%2FKKeBdnwD2tvfZglhkr7QnG3dPCqMS3XyUHovq6FtuUnI%3D"}]}
vary: accept-encoding
cf-cache-status: DYNAMIC
CF-RAY: 9b684eab8a18dcce-FRA
alt-svc: h3=":443"; ma=86400

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body bgcolor="white">
<center><h1>403 Forbidden</h1></center>
<hr><center>nginx/1.14.0 (Ubuntu)</center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 172.67.167.43:80 · app.prepfuel.com

2025-12-31 08:11

HTTP/1.1 301 Moved Permanently
Date: Wed, 31 Dec 2025 08:11:38 GMT
Content-Length: 0
Connection: close
Location: https://app.prepfuel.com/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=3Dyer4eni5R6ObWnAVXmY3YH66hmhTGLaZIiOeh9paz1%2FSJ0lOc5o%2Ft13DlGQWNSHLTADx%2BBHxMng3Ijw0JN5Z76k%2BK0RuqLd6pWxj4yDeo%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9b684eaaeb5ed212-FRA
alt-svc: h3=":443"; ma=86400

Found 2025-12-31 by HttpPlugin

Create report

Open service 104.21.35.11:443 · app.prepfuel.com

2025-12-31 08:11

HTTP/1.1 403 Forbidden
Date: Wed, 31 Dec 2025 08:11:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=48AxhGvO%2BmBeofvI9B8mSkb8VbmL3avTiSgam%2BXU8M7Wxh0eEv16GalZUvF08scsAEeW%2Fq6btp6dqLb34hoin6wHTdbds75GYlF4N9MIh9Q%3D"}]}
vary: accept-encoding
cf-cache-status: DYNAMIC
CF-RAY: 9b684eac7843a592-FRA
alt-svc: h3=":443"; ma=86400

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body bgcolor="white">
<center><h1>403 Forbidden</h1></center>
<hr><center>nginx/1.14.0 (Ubuntu)</center>
</body>
</html>

Found 2025-12-31 by HttpPlugin

Create report

Open service 104.21.35.11:80 · app.prepfuel.com

2025-12-31 08:11

HTTP/1.1 301 Moved Permanently
Date: Wed, 31 Dec 2025 08:11:38 GMT
Content-Length: 0
Connection: close
Location: https://app.prepfuel.com/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=6sFubnOYymTQ0FW%2Frn5q5x%2F3awcsp9QNKMuzSkfxHQeTl9w0ttsXM7wmhdfgNfObEylj2uAUPMWFrxTZoMu3LEgXLodxXMcRHDHXr3nJB3o%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9b684eaabc1ef79e-FRA
alt-svc: h3=":443"; ma=86400

Found 2025-12-31 by HttpPlugin

Create report

Open service 45.33.81.97:443 · app.prepfuel.com

2025-12-30 07:58

HTTP/1.1 404 Not Found
Server: nginx/1.14.0 (Ubuntu)
Date: Tue, 30 Dec 2025 07:58:23 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 139
Connection: close
Vary: Accept-Encoding
X-Powered-By: Express
Vary: Origin
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 45.33.81.97:443 · app.prepfuel.com

2025-12-23 02:00

HTTP/1.1 404 Not Found
Server: nginx/1.14.0 (Ubuntu)
Date: Tue, 23 Dec 2025 02:00:32 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 139
Connection: close
Vary: Accept-Encoding
X-Powered-By: Express
Vary: Origin
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 45.33.81.97:443 · app.prepfuel.com

2025-12-20 21:54

HTTP/1.1 404 Not Found
Server: nginx/1.14.0 (Ubuntu)
Date: Sat, 20 Dec 2025 21:54:03 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 139
Connection: close
Vary: Accept-Encoding
X-Powered-By: Express
Vary: Origin
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

app.prepfuel.com

Fingerprint:

368125dbb6ad43345d5be18d14b6bc48b15b7caae801a614441fe6f063727766

CN:

app.prepfuel.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-12-27 08:12

Not after:

2026-03-27 08:12

prepfuel.com*.prepfuel.com

Fingerprint:

8ef00e8291f63c8a4dd5edf4e313c1dc7523c992a8b32ae57e3007a4e9d646f5

CN:

prepfuel.com

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-11-12 00:19

Not after:

2026-02-10 01:18

app.prepfuel.com

Fingerprint:

754bd2a3ff4a84b029f08f95d19ab34437fb1e308376268613b00eb6228a17a0

CN:

app.prepfuel.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-10-28 08:57

Not after:

2026-01-26 08:57

Domain summary

app.prepfuel.com 17

1 recorded

IP summary

45.33.81.97 2 2606:4700:3035::6815:230b 1 2606:4700:3037::ac43:a72b 1 172.67.167.43 1 104.21.35.11 1

5 recorded

© 2026 LeakIX v2.0.49
About LeakIX - Credits - Take-down and blacklist requests - Security issues - Terms and conditions - Cookie policy - Legal notice