LeakIX - Host backend.harvest.graindata.com

Domain backend.harvest.graindata.com

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.217.1
Domain: backend.harvest.graindata.com
Port: 443
URL: https://backend.harvest.graindata.com

First seen 2025-11-18 00:08
Last seen 2026-01-10 01:09
Open for 53 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f61fc931f61fc931f61fc931f61fc931f61fc931f61fc931
```
Public Swagger UI/API detected at path: /api/swagger.json
```
  Found on 2026-01-10 01:09
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 76.223.11.49
Domain: backend.harvest.graindata.com
Port: 80
URL: http://backend.harvest.graindata.com

First seen 2025-11-18 00:08
Last seen 2026-01-09 14:56
Open for 52 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f61fc931f61fc931f61fc931f61fc931f61fc931f61fc931
```
Public Swagger UI/API detected at path: /api/swagger.json
```
  Found on 2026-01-09 14:56
Create report

Open service 99.83.217.1:443 · backend.harvest.graindata.com

2026-01-10 01:09

HTTP/1.1 404 Not Found
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Sat, 10 Jan 2026 01:09:29 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=FJxErkhKQp7Q46NcnZ4drI56DzyLDfutZ1OAA2HTCk4%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1768007369"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=FJxErkhKQp7Q46NcnZ4drI56DzyLDfutZ1OAA2HTCk4%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1768007369"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 3 days ago by HttpPlugin

Create report

Open service 76.223.11.49:80 · backend.harvest.graindata.com

2026-01-09 14:56

HTTP/1.1 404 Not Found
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 14:57:26 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=uYTvjq%2FH0BeDdcDF1R3vOmGOGBHSeAmQonJrXHjwchQ%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767970646"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=uYTvjq%2FH0BeDdcDF1R3vOmGOGBHSeAmQonJrXHjwchQ%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767970646"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 3 days ago by HttpPlugin

Create report

Open service 99.83.217.1:443 · backend.harvest.graindata.com

2026-01-02 18:28

HTTP/1.1 404 Not Found
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 18:28:51 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Y2vPOJJqscpnsqCfvLAF8dKwDZ590eMVg%2Fg4WTek8Tw%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767378531"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Y2vPOJJqscpnsqCfvLAF8dKwDZ590eMVg%2Fg4WTek8Tw%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767378531"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 76.223.11.49:80 · backend.harvest.graindata.com

2026-01-02 17:57

HTTP/1.1 404 Not Found
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 17:57:34 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Yqc7wJWBVtXp%2B5NvZ%2B4HPxctfRHf%2BzyE6JY9wkdi0y0%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767376654"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Yqc7wJWBVtXp%2B5NvZ%2B4HPxctfRHf%2BzyE6JY9wkdi0y0%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767376654"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 76.223.11.49:80 · backend.harvest.graindata.com

2025-12-23 08:45

HTTP/1.1 404 Not Found
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 08:45:53 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=tE%2FY6hGQGgYe3ZEuJw8H%2FnDcSG3pQvkLcTnw9ujFSfo%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766479553"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=tE%2FY6hGQGgYe3ZEuJw8H%2FnDcSG3pQvkLcTnw9ujFSfo%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766479553"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 99.83.217.1:443 · backend.harvest.graindata.com

2025-12-22 10:25

HTTP/1.1 404 Not Found
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 10:25:01 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=7i0wzSU1voislC0IBzudZe%2F6hCjKLD9Ge6uJ0j97j78%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766399101"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=7i0wzSU1voislC0IBzudZe%2F6hCjKLD9Ge6uJ0j97j78%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766399101"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 76.223.11.49:80 · backend.harvest.graindata.com

2025-12-21 11:08

HTTP/1.1 404 Not Found
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 11:08:10 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ylLyhSSIDIjayjVUlu1Fd7kPa4izY9i8uHAXcEpLfMs%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766315290"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ylLyhSSIDIjayjVUlu1Fd7kPa4izY9i8uHAXcEpLfMs%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766315290"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-21 by HttpPlugin

Create report

Open service 99.83.217.1:443 · backend.harvest.graindata.com

2025-12-21 11:08

HTTP/1.1 404 Not Found
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 11:08:06 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=zBxpbeZn0omuoJ2rzlm%2B5X1phtvAhkyHF4mByuLDC2o%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766315286"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=zBxpbeZn0omuoJ2rzlm%2B5X1phtvAhkyHF4mByuLDC2o%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766315286"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-21 by HttpPlugin

Create report

Open service 76.223.11.49:80 · backend.harvest.graindata.com

2025-12-19 07:55

HTTP/1.1 404 Not Found
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 07:55:11 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=19IlLXDmoLWqQ4tUmJLompOoniFBAJbth592Y%2FwiFM4%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766130911"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=19IlLXDmoLWqQ4tUmJLompOoniFBAJbth592Y%2FwiFM4%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766130911"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-19 by HttpPlugin

Create report

Open service 99.83.217.1:443 · backend.harvest.graindata.com

2025-12-19 07:55

HTTP/1.1 404 Not Found
Content-Length: 139
Content-Security-Policy: default-src 'self'
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 07:55:08 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=29UNIRq0%2B3MMeXF3NDnl5RshGOsEbjSy%2FMRLCkY2bi8%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766130908"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=29UNIRq0%2B3MMeXF3NDnl5RshGOsEbjSy%2FMRLCkY2bi8%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766130908"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-19 by HttpPlugin

Create report

backend.harvest.graindata.com

Fingerprint:

0cb4aa661fcbf7f9e9a00021b902810333bd7ee94f7911a09af403655c8eb247

CN:

backend.harvest.graindata.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-17 23:10

Not after:

2026-02-15 23:10

Domain summary

backend.harvest.graindata.com 11

1 recorded

IP summary

99.83.217.1 1 76.223.11.49 1

2 recorded

Domain backend.harvest.graindata.com

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

backend.harvest.graindata.com

Domain summary

IP summary