LeakIX - Host backend.checkme-app.com

Domain backend.checkme-app.com

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 3.33.241.96
Domain: backend.checkme-app.com
Port: 443
URL: https://backend.checkme-app.com

First seen 2025-12-10 00:28
Last seen 2026-01-09 07:56
Open for 30 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 07:56
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 3.33.241.96
Domain: backend.checkme-app.com
Port: 80
URL: http://backend.checkme-app.com

First seen 2025-12-10 00:28
Last seen 2026-01-09 14:33
Open for 30 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 14:33
Create report

Open service 3.33.241.96:80 · backend.checkme-app.com

2026-01-09 14:33

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 23
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 14:34:05 GMT
Etag: W/"17-lV7Tmcrj2KawAGAhZRRrtdNs2qc"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=PZdTSiqxnlc092WAiyLrzXq5HsEd02eKqlLfEDEwV18%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767969245"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=PZdTSiqxnlc092WAiyLrzXq5HsEd02eKqlLfEDEwV18%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767969245"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Welcome to Check-Me API

Found 3 days ago by HttpPlugin

Create report

Open service 3.33.241.96:443 · backend.checkme-app.com

2026-01-09 07:56

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 23
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 07:56:43 GMT
Etag: W/"17-lV7Tmcrj2KawAGAhZRRrtdNs2qc"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=E5sZCXiLgT2iCsT9bmy4iSAS1il11aIJZa0Md%2FFsNyQ%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767945403"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=E5sZCXiLgT2iCsT9bmy4iSAS1il11aIJZa0Md%2FFsNyQ%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767945403"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Welcome to Check-Me API

Found 3 days ago by HttpPlugin

Create report

Open service 3.33.241.96:80 · backend.checkme-app.com

2026-01-02 15:03

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 23
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 15:03:32 GMT
Etag: W/"17-lV7Tmcrj2KawAGAhZRRrtdNs2qc"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=isdfAsskPgP%2F2JnMKwaQ6q8wFFO7tJPVwlB3Vu%2F9nMU%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767366212"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=isdfAsskPgP%2F2JnMKwaQ6q8wFFO7tJPVwlB3Vu%2F9nMU%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767366212"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Welcome to Check-Me API

Found 2026-01-02 by HttpPlugin

Create report

Open service 3.33.241.96:443 · backend.checkme-app.com

2026-01-02 13:17

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 23
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 13:17:56 GMT
Etag: W/"17-lV7Tmcrj2KawAGAhZRRrtdNs2qc"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=jmwtt1Gid1iK8o%2FeTo%2F4UoQ6VglBG2H6Y7DZMOxyFTI%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767359876"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=jmwtt1Gid1iK8o%2FeTo%2F4UoQ6VglBG2H6Y7DZMOxyFTI%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767359876"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Welcome to Check-Me API

Found 2026-01-02 by HttpPlugin

Create report

Open service 3.33.241.96:80 · backend.checkme-app.com

2025-12-23 06:21

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 23
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 06:21:07 GMT
Etag: W/"17-lV7Tmcrj2KawAGAhZRRrtdNs2qc"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=RxheuaHusPo2UHovt1WoWEHyWqII8NBkH4EdQjCLGKU%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766470867"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=RxheuaHusPo2UHovt1WoWEHyWqII8NBkH4EdQjCLGKU%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766470867"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Welcome to Check-Me API

Found 2025-12-23 by HttpPlugin

Create report

Open service 3.33.241.96:443 · backend.checkme-app.com

2025-12-22 15:18

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 23
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 15:18:31 GMT
Etag: W/"17-lV7Tmcrj2KawAGAhZRRrtdNs2qc"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=VF3P17ugGKFkY6%2FTqqquHFX06gobJDsYi3YJ7KXRKFY%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766416711"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=VF3P17ugGKFkY6%2FTqqquHFX06gobJDsYi3YJ7KXRKFY%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766416711"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Welcome to Check-Me API

Found 2025-12-22 by HttpPlugin

Create report

Open service 3.33.241.96:80 · backend.checkme-app.com

2025-12-21 02:49

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 23
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 02:49:27 GMT
Etag: W/"17-lV7Tmcrj2KawAGAhZRRrtdNs2qc"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=46s7TMfcJxoqH4c7IC6Cl6aNI4yPPa9i1NO6D0feUdI%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766285367"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=46s7TMfcJxoqH4c7IC6Cl6aNI4yPPa9i1NO6D0feUdI%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766285367"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Welcome to Check-Me API

Found 2025-12-21 by HttpPlugin

Create report

Open service 3.33.241.96:443 · backend.checkme-app.com

2025-12-20 11:04

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 23
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 11:04:21 GMT
Etag: W/"17-lV7Tmcrj2KawAGAhZRRrtdNs2qc"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=H5ribV6hsYloSzqFhKDnoUqZAtqgnc8WfIA%2BPa8MnpI%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766228661"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=H5ribV6hsYloSzqFhKDnoUqZAtqgnc8WfIA%2BPa8MnpI%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766228661"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Welcome to Check-Me API

Found 2025-12-20 by HttpPlugin

Create report

Open service 3.33.241.96:80 · backend.checkme-app.com

2025-12-19 05:40

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Content-Length: 23
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 05:40:06 GMT
Etag: W/"17-lV7Tmcrj2KawAGAhZRRrtdNs2qc"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=YM8APN9Z78q9pAT95HmbAUvWQCxbW2AF9It7uAjDwpQ%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766122806"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=YM8APN9Z78q9pAT95HmbAUvWQCxbW2AF9It7uAjDwpQ%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766122806"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Welcome to Check-Me API

Found 2025-12-19 by HttpPlugin

Create report

backend.checkme-app.com

Fingerprint:

65c47a0555c62b137f21a507b399fd4fb1d2c24565498a0ae99edcea18ad9dc2

CN:

backend.checkme-app.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-09 23:28

Not after:

2026-03-09 23:28

Domain summary

backend.checkme-app.com 10

1 recorded

IP summary

3.33.241.96 2

1 recorded

Domain backend.checkme-app.com

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

backend.checkme-app.com

Domain summary

IP summary