LeakIX - Host builder-api.local.fr

Domain builder-api.local.fr

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 75.2.43.161
Domain: builder-api.local.fr
Port: 80
URL: http://builder-api.local.fr

First seen 2025-10-25 13:26
Last seen 2026-01-09 21:00
Open for 76 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 21:00
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.217.1
Domain: builder-api.local.fr
Port: 443
URL: https://builder-api.local.fr

First seen 2025-10-25 13:26
Last seen 2026-01-09 14:50
Open for 76 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 14:50
Create report

Open service 75.2.43.161:80 · builder-api.local.fr

2026-01-09 21:00

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 39
Content-Type: application/json; charset=utf-8
Date: Fri, 09 Jan 2026 21:02:00 GMT
Etag: W/"27-wG50BJHPsaTlqhfvZxED8x2Rivs"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=dIhtn4l3xLv%2Bm9hvVHd7APyua8fx4uqEl6VxyNfXbBA%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767992520"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=dIhtn4l3xLv%2Bm9hvVHd7APyua8fx4uqEl6VxyNfXbBA%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767992520"
Server: Heroku
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","status":404}

Found 2026-01-09 by HttpPlugin

Create report

Open service 99.83.217.1:443 · builder-api.local.fr

2026-01-09 14:50

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 39
Content-Type: application/json; charset=utf-8
Date: Fri, 09 Jan 2026 14:50:36 GMT
Etag: W/"27-wG50BJHPsaTlqhfvZxED8x2Rivs"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=4BuEVP%2F1JIKgtgSaPhZH0TiYpbI9l5ShDBGLHRFWLxo%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767970236"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=4BuEVP%2F1JIKgtgSaPhZH0TiYpbI9l5ShDBGLHRFWLxo%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767970236"
Server: Heroku
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","status":404}

Found 2026-01-09 by HttpPlugin

Create report

Open service 75.2.43.161:80 · builder-api.local.fr

2026-01-02 16:29

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 39
Content-Type: application/json; charset=utf-8
Date: Fri, 02 Jan 2026 16:29:29 GMT
Etag: W/"27-wG50BJHPsaTlqhfvZxED8x2Rivs"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=wbnch7gW0myo7dbDfiQc7tSR0QxL6QO9o4ohow2JOBs%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767371369"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=wbnch7gW0myo7dbDfiQc7tSR0QxL6QO9o4ohow2JOBs%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767371369"
Server: Heroku
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","status":404}

Found 2026-01-02 by HttpPlugin

Create report

Open service 99.83.217.1:443 · builder-api.local.fr

2026-01-02 14:47

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 39
Content-Type: application/json; charset=utf-8
Date: Fri, 02 Jan 2026 14:47:23 GMT
Etag: W/"27-wG50BJHPsaTlqhfvZxED8x2Rivs"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=NVwmtzIcoV%2Bk%2F7%2BgVD10Z1rx11hLH2YjLHMZRpiYLKk%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767365243"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=NVwmtzIcoV%2Bk%2F7%2BgVD10Z1rx11hLH2YjLHMZRpiYLKk%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767365243"
Server: Heroku
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","status":404}

Found 2026-01-02 by HttpPlugin

Create report

Open service 75.2.43.161:80 · builder-api.local.fr

2025-12-23 06:17

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 39
Content-Type: application/json; charset=utf-8
Date: Tue, 23 Dec 2025 06:17:36 GMT
Etag: W/"27-wG50BJHPsaTlqhfvZxED8x2Rivs"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=H5czzl4IiaKAp2BKytWqWL0hxrh1jn23ZxKqhhOUHfQ%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766470656"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=H5czzl4IiaKAp2BKytWqWL0hxrh1jn23ZxKqhhOUHfQ%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766470656"
Server: Heroku
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","status":404}

Found 2025-12-23 by HttpPlugin

Create report

Open service 99.83.217.1:443 · builder-api.local.fr

2025-12-23 06:02

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 39
Content-Type: application/json; charset=utf-8
Date: Tue, 23 Dec 2025 06:02:48 GMT
Etag: W/"27-wG50BJHPsaTlqhfvZxED8x2Rivs"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=7YCc9gjucxv6AMnZhfc1gZd%2FhhbXhPFQ7gsDVW0Sz6o%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766469768"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=7YCc9gjucxv6AMnZhfc1gZd%2FhhbXhPFQ7gsDVW0Sz6o%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766469768"
Server: Heroku
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","status":404}

Found 2025-12-23 by HttpPlugin

Create report

Open service 99.83.217.1:443 · builder-api.local.fr

2025-12-21 03:35

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 39
Content-Type: application/json; charset=utf-8
Date: Sun, 21 Dec 2025 03:35:44 GMT
Etag: W/"27-wG50BJHPsaTlqhfvZxED8x2Rivs"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=NZ3sielGfM4hgKFP%2Bpd8LfNunXF6nam2kiAGMtXxuaY%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766288144"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=NZ3sielGfM4hgKFP%2Bpd8LfNunXF6nam2kiAGMtXxuaY%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766288144"
Server: Heroku
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","status":404}

Found 2025-12-21 by HttpPlugin

Create report

Open service 75.2.43.161:80 · builder-api.local.fr

2025-12-20 23:07

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 39
Content-Type: application/json; charset=utf-8
Date: Sat, 20 Dec 2025 23:07:05 GMT
Etag: W/"27-wG50BJHPsaTlqhfvZxED8x2Rivs"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=TNU95%2BE4bCUJEhnGs31iUDUVqGm%2FjBtIpntjO5CKNb0%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766272025"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=TNU95%2BE4bCUJEhnGs31iUDUVqGm%2FjBtIpntjO5CKNb0%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766272025"
Server: Heroku
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","status":404}

Found 2025-12-20 by HttpPlugin

Create report

Open service 99.83.217.1:443 · builder-api.local.fr

2025-12-19 05:09

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 39
Content-Type: application/json; charset=utf-8
Date: Fri, 19 Dec 2025 05:09:46 GMT
Etag: W/"27-wG50BJHPsaTlqhfvZxED8x2Rivs"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=2n3Xa3R9ixWY4F%2F%2FR04ngvkH3ReM1rafmLw2T0JrZ3U%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766120986"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=2n3Xa3R9ixWY4F%2F%2FR04ngvkH3ReM1rafmLw2T0JrZ3U%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766120986"
Server: Heroku
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","status":404}

Found 2025-12-19 by HttpPlugin

Create report

Open service 75.2.43.161:80 · builder-api.local.fr

2025-12-19 01:37

HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Content-Length: 39
Content-Type: application/json; charset=utf-8
Date: Fri, 19 Dec 2025 01:37:41 GMT
Etag: W/"27-wG50BJHPsaTlqhfvZxED8x2Rivs"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=vEmRpvyomo9x6puMKKs9a%2BvwM32CwrxaH7TSdLeRuLE%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766108261"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=vEmRpvyomo9x6puMKKs9a%2BvwM32CwrxaH7TSdLeRuLE%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766108261"
Server: Heroku
Vary: Accept-Encoding
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","status":404}

Found 2025-12-19 by HttpPlugin

Create report

builder-api.local.fr

Fingerprint:

f3240f4e5a5d427f0a15a392caa1401ed1728ccfb9cb9f89960e8ca022cd7858

CN:

builder-api.local.fr

Key:

RSA-2048

Issuer:

R12

Not before:

2025-11-28 23:47

Not after:

2026-02-26 23:47

Domain summary

builder-api.local.fr 11

1 recorded

IP summary

75.2.43.161 1 99.83.217.1 1

2 recorded

Domain builder-api.local.fr

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

builder-api.local.fr

Domain summary

IP summary