LeakIX - Host backend.zapbroker.dev

Domain backend.zapbroker.dev

United States

AMAZON-02

Software information

Vercel

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 64.29.17.65
Domain: backend.zapbroker.dev
Port: 443
URL: https://backend.zapbroker.dev

First seen 2025-10-31 01:16
Last seen 2026-01-08 19:25
Open for 69 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-08 19:25
Create report

Open service 64.29.17.65:443 · backend.zapbroker.dev

2026-01-08 19:25

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 19
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Thu, 08 Jan 2026 19:25:04 GMT
Etag: W/"13-9PKTdB8sMu5+e9byuYpQoJaQd5I"
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Server: Vercel
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 10000
X-Ratelimit-Remaining: 9998
X-Ratelimit-Reset: 1767901203
X-Vercel-Cache: MISS
X-Vercel-Id: fra1::iad1::9fb9j-1767900304037-1dabd6d638ba
X-Xss-Protection: 0
Connection: close


{"status":"online"}

Found 2026-01-08 by HttpPlugin

Create report

Open service 64.29.17.1:80 · backend.zapbroker.dev

2025-12-31 14:43

HTTP/1.0 308 Permanent Redirect
Content-Type: text/plain
Location: https://backend.zapbroker.dev/
Refresh: 0;url=https://backend.zapbroker.dev/
server: Vercel


Redirecting...

Found 2025-12-31 by HttpPlugin

Create report

Open service 216.198.79.1:80 · backend.zapbroker.dev

2025-12-31 14:43

HTTP/1.0 308 Permanent Redirect
Content-Type: text/plain
Location: https://backend.zapbroker.dev/
Refresh: 0;url=https://backend.zapbroker.dev/
server: Vercel


Redirecting...

Found 2025-12-31 by HttpPlugin

Create report

Open service 216.198.79.1:443 · backend.zapbroker.dev

2025-12-31 14:43

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 19
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Wed, 31 Dec 2025 14:43:31 GMT
Etag: W/"13-9PKTdB8sMu5+e9byuYpQoJaQd5I"
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Server: Vercel
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 10000
X-Ratelimit-Remaining: 9998
X-Ratelimit-Reset: 1767193112
X-Vercel-Cache: MISS
X-Vercel-Id: fra1::iad1::qvr5z-1767192211262-7c8f4741fbbc
X-Xss-Protection: 0
Connection: close


{"status":"online"}

Found 2025-12-31 by HttpPlugin

Create report

Open service 64.29.17.1:443 · backend.zapbroker.dev

2025-12-31 14:43

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 19
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Wed, 31 Dec 2025 14:43:32 GMT
Etag: W/"13-9PKTdB8sMu5+e9byuYpQoJaQd5I"
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Server: Vercel
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 10000
X-Ratelimit-Remaining: 9999
X-Ratelimit-Reset: 1767193113
X-Vercel-Cache: MISS
X-Vercel-Id: iad1::iad1::mddnq-1767192211275-1f4b7979cdc9
X-Xss-Protection: 0
Connection: close


{"status":"online"}

Found 2025-12-31 by HttpPlugin

Create report

Open service 64.29.17.65:443 · backend.zapbroker.dev

2025-12-22 15:57

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 19
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Mon, 22 Dec 2025 15:57:58 GMT
Etag: W/"13-9PKTdB8sMu5+e9byuYpQoJaQd5I"
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Server: Vercel
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 10000
X-Ratelimit-Remaining: 9999
X-Ratelimit-Reset: 1766419979
X-Vercel-Cache: MISS
X-Vercel-Id: fra1::iad1::v9276-1766419076555-26e772f362c3
X-Xss-Protection: 0
Connection: close


{"status":"online"}

Found 2025-12-22 by HttpPlugin

Create report

Open service 64.29.17.65:443 · backend.zapbroker.dev

2025-12-20 13:19

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 19
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Sat, 20 Dec 2025 13:19:52 GMT
Etag: W/"13-9PKTdB8sMu5+e9byuYpQoJaQd5I"
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Server: Vercel
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Ratelimit-Limit: 10000
X-Ratelimit-Remaining: 9999
X-Ratelimit-Reset: 1766237693
X-Vercel-Cache: MISS
X-Vercel-Id: lhr1::iad1::rxk2x-1766236791369-c80275fb547d
X-Xss-Protection: 0
Connection: close


{"status":"online"}

Found 2025-12-20 by HttpPlugin

Create report

backend.zapbroker.dev

Fingerprint:

a8f5b67caa5c600435cec34c74998a7be6ba071a61e1669cadb4fdd6129d95b5

CN:

backend.zapbroker.dev

Key:

RSA-2048

Issuer:

R13

Not before:

2025-12-31 13:43

Not after:

2026-03-31 13:43

backend.zapbroker.dev

Fingerprint:

6e86888501662609ea97ff3aeab3ab98af7992e03d7124d1c5de18aa859a57f4

CN:

backend.zapbroker.dev

Key:

RSA-2048

Issuer:

R12

Not before:

2025-10-31 00:17

Not after:

2026-01-29 00:17

Domain summary

backend.zapbroker.dev 7

1 recorded

IP summary

64.29.17.65 1 64.29.17.1 1 216.198.79.1 1

3 recorded

Domain backend.zapbroker.dev

United States

Software information

Swagger API description is publicly available

Create report

Create report

Create report

Create report

Create report

Create report

Create report

backend.zapbroker.dev

backend.zapbroker.dev

Domain summary

IP summary