LeakIX - Host dev-api.artodo.io

Domain dev-api.artodo.io

United States

AMAZON-02

Software information

Heroku

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.217.1
Domain: dev-api.artodo.io
Port: 80
URL: http://dev-api.artodo.io

First seen 2025-12-05 21:03
Last seen 2025-12-24 15:34
Open for 18 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2025-12-24 15:34
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 76.223.11.49
Domain: dev-api.artodo.io
Port: 443
URL: https://dev-api.artodo.io

First seen 2025-12-05 21:03
Last seen 2026-01-09 06:09
Open for 34 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 06:09
Create report

Open service 76.223.11.49:443 · dev-api.artodo.io

2026-01-09 06:09

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Authorization,lang
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 06:10:03 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=EC17lLkwff8kDDTdmA%2F%2BNhjJaog%2FTlYB8VNIn%2FIATeY%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767939003"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=EC17lLkwff8kDDTdmA%2F%2BNhjJaog%2FTlYB8VNIn%2FIATeY%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767939003"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 76.223.11.49:443 · dev-api.artodo.io

2026-01-02 06:48

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Authorization,lang
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 06:48:56 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=vRJWh4yEyms4S7KuxY1J0M%2BSN7hlzajwGsnwGvb546M%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767336535"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=vRJWh4yEyms4S7KuxY1J0M%2BSN7hlzajwGsnwGvb546M%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767336535"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 76.223.11.49:443 · dev-api.artodo.io

2025-12-30 10:14

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Authorization,lang
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 30 Dec 2025 10:14:38 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=zLJI1CPezqnIuSS1htSC1do1nbK3QGYfBjD%2BD2MK7t4%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767089677"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=zLJI1CPezqnIuSS1htSC1do1nbK3QGYfBjD%2BD2MK7t4%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767089677"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 76.223.11.49:443 · dev-api.artodo.io

2025-12-23 05:56

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Authorization,lang
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 05:56:27 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=3TKh7ONzO5we%2FJOAJRJ6slIldDUoQqssshISJA2xf0U%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766469387"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=3TKh7ONzO5we%2FJOAJRJ6slIldDUoQqssshISJA2xf0U%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766469387"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 76.223.11.49:443 · dev-api.artodo.io

2025-12-20 13:35

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Authorization,lang
Content-Length: 139
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 13:36:01 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=70G3BLjbzaB5PoTqNUib2wxiSpYNQs9%2FBFyPiZZQGd4%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766237761"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=70G3BLjbzaB5PoTqNUib2wxiSpYNQs9%2FBFyPiZZQGd4%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766237761"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

dev-api.artodo.io

Fingerprint:

e9005d6f630b4227a3c61515644c3b09e4a9f5f53b2daf2b70c69d0f2c5d2395

CN:

dev-api.artodo.io

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-05 20:03

Not after:

2026-03-05 20:03

Domain summary

dev-api.artodo.io 6

1 recorded

IP summary

76.223.11.49 2 99.83.217.1 1

2 recorded

Domain dev-api.artodo.io

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Create report

Create report

Create report

Create report

Create report

dev-api.artodo.io

Domain summary

IP summary