LeakIX - Host beta.natet.net

Domain beta.natet.net

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 52.223.53.203
Domain: beta.natet.net
Port: 443
URL: https://beta.natet.net

First seen 2025-10-21 22:16
Last seen 2026-01-09 21:04
Open for 79 days

Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e57966ac2bbdfa1390ae1baf5aee586965b7c1c86f

Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
DELETE /api/v1/users/{userId}
GET /api/swish/payment-qr/{token}
GET /api/v1/deliveries
GET /api/v1/deliveries/my
GET /api/v1/deliveries/placed
GET /api/v1/deliveries/secret/{deliverySecret}
GET /api/v1/deliveries/{deliveryId}
GET /api/v1/fiv/delivery-info
GET /api/v1/orders
GET /api/v1/orders/delivered
GET /api/v1/orders/my
GET /api/v1/orders/secret/{pickupSecret}
GET /api/v1/orders/{orderId}
GET /api/v1/products
GET /api/v1/products/{productId}
GET /api/v1/users
GET /api/v1/users/me
GET /api/v1/users/role/{role}
POST /api/auth/signin
POST /api/auth/signup
POST /api/swish/payment-callback
POST /api/v1/deliveries/secret/{deliverySecret}/confirm
POST /api/v1/deliveries/{deliveryId}/cancel
POST /api/v1/fiv/close
POST /api/v1/orders/secret/{pickupSecret}/confirm
POST /api/v1/orders/{orderId}/confirm
POST /api/v1/orders/{orderId}/paymentrequest

Found on 2026-01-09 21:04

Severity: info
Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
Found on 2025-11-05 07:44

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 15.197.253.240
Domain: beta.natet.net
Port: 80
URL: http://beta.natet.net

First seen 2025-10-21 22:16
Last seen 2026-01-09 09:33
Open for 79 days

Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e57966ac2bbdfa1390ae1baf5aee586965b7c1c86f

Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
DELETE /api/v1/users/{userId}
GET /api/swish/payment-qr/{token}
GET /api/v1/deliveries
GET /api/v1/deliveries/my
GET /api/v1/deliveries/placed
GET /api/v1/deliveries/secret/{deliverySecret}
GET /api/v1/deliveries/{deliveryId}
GET /api/v1/fiv/delivery-info
GET /api/v1/orders
GET /api/v1/orders/delivered
GET /api/v1/orders/my
GET /api/v1/orders/secret/{pickupSecret}
GET /api/v1/orders/{orderId}
GET /api/v1/products
GET /api/v1/products/{productId}
GET /api/v1/users
GET /api/v1/users/me
GET /api/v1/users/role/{role}
POST /api/auth/signin
POST /api/auth/signup
POST /api/swish/payment-callback
POST /api/v1/deliveries/secret/{deliverySecret}/confirm
POST /api/v1/deliveries/{deliveryId}/cancel
POST /api/v1/fiv/close
POST /api/v1/orders/secret/{pickupSecret}/confirm
POST /api/v1/orders/{orderId}/confirm
POST /api/v1/orders/{orderId}/paymentrequest

Found on 2026-01-09 09:33

Severity: info
Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
Found on 2025-11-29 09:47

Create report

Open service 52.223.53.203:443 · beta.natet.net

2026-01-09 21:04

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: en
Content-Length: 1177
Content-Type: text/html;charset=UTF-8
Date: Fri, 09 Jan 2026 21:04:25 GMT
Expires: 0
Last-Modified: Tue, 10 Jan 2023 19:20:51 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=kVzyMcSrtYwysYNT1wS4sVpYMoH6kMOr0ySgEnaWmNI%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767992665"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=kVzyMcSrtYwysYNT1wS4sVpYMoH6kMOr0ySgEnaWmNI%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767992665"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close

Page title: Fiskenivattnet

<!doctype html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <meta http-equiv="x-ua-compatible" content="ie=edge">
  <base href="/">
  <title>Fiskenivattnet</title>
  <meta name="description" content="">
  <meta name="viewport" content="width=device-width">
  <!-- Unique commit version -->
  <meta buildNumber="104">

  <link rel="icon" sizes="192x192" type="image/png" href="assets/images/favicon-180x180.png">
  <link rel="icon" sizes="16x16 24x24 32x32 64x64" type="image/x-icon" href="assets/images/favicon-32x32.png">

  <!-- Place favicon.png and apple-touch-icon.png in the root directory -->
</head>
<body>
    <!--[if lt IE 9]>
    <p class="browserupgrade">You are using an <strong>outdated</strong> browser. Please <a href="http://browsehappy.com/">upgrade your browser</a> to improve your experience.</p>
    <![endif]-->
    <navbar></navbar>
    <div id="main" ui-view="">
    </div>
    <footer></footer>
<script type="text/javascript" src="/vendor.6456572ada1d2f9b7cc0.js"></script><script type="text/javascript" src="/polyfills.6456572ada1d2f9b7cc0.js"></script><script type="text/javascript" src="/app.6456572ada1d2f9b7cc0.js"></script></body>
</html>

Found 2026-01-09 by HttpPlugin

Domain beta.natet.net

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

beta.natet.net

Domain summary

IP summary