LeakIX - Host dev.api.sonik.fm

Domain dev.api.sonik.fm

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 76.223.57.73
Domain: dev.api.sonik.fm
Port: 80
URL: http://dev.api.sonik.fm

First seen 2025-11-24 03:06
Last seen 2026-01-10 02:34
Open for 46 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-10 02:34
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 76.223.57.73
Domain: dev.api.sonik.fm
Port: 443
URL: https://dev.api.sonik.fm

First seen 2025-11-24 03:06
Last seen 2026-01-10 02:05
Open for 46 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-10 02:05
Create report

Open service 76.223.57.73:80 · dev.api.sonik.fm

2026-01-10 02:34

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Set-Cookie
Content-Length: 204
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sat, 10 Jan 2026 02:35:29 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 1000
Ratelimit-Policy: 1000;w=60
Ratelimit-Remaining: 999
Ratelimit-Reset: 7
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=WQQaV%2BLAzq%2F%2B0hi%2BeZPHGRbpDdH7KigvZgxC1pyj5xE%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1768012529"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=WQQaV%2BLAzq%2F%2B0hi%2BeZPHGRbpDdH7KigvZgxC1pyj5xE%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1768012529"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Error: ENOENT: no such file or directory, stat &#39;/app/dist/index.html&#39;</pre>
</body>
</html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 76.223.57.73:443 · dev.api.sonik.fm

2026-01-10 02:05

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Set-Cookie
Content-Length: 204
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sat, 10 Jan 2026 02:05:51 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 1000
Ratelimit-Policy: 1000;w=60
Ratelimit-Remaining: 998
Ratelimit-Reset: 45
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=s3z3KYgyuD3b7Q3Tc5ZsGEXPGQMUTmLsTYSPGW7iv9k%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1768010751"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=s3z3KYgyuD3b7Q3Tc5ZsGEXPGQMUTmLsTYSPGW7iv9k%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1768010751"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Error: ENOENT: no such file or directory, stat &#39;/app/dist/index.html&#39;</pre>
</body>
</html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 76.223.57.73:443 · dev.api.sonik.fm

2026-01-02 23:55

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Set-Cookie
Content-Length: 204
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 23:55:30 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 1000
Ratelimit-Policy: 1000;w=60
Ratelimit-Remaining: 998
Ratelimit-Reset: 7
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=xNi63iKSpTFBMEBN63GGpNYgSa%2B6UphbglnYxkoUqTU%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767398130"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=xNi63iKSpTFBMEBN63GGpNYgSa%2B6UphbglnYxkoUqTU%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767398130"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Error: ENOENT: no such file or directory, stat &#39;/app/dist/index.html&#39;</pre>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 76.223.57.73:80 · dev.api.sonik.fm

2026-01-02 22:53

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Set-Cookie
Content-Length: 204
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 22:53:54 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 1000
Ratelimit-Policy: 1000;w=60
Ratelimit-Remaining: 998
Ratelimit-Reset: 43
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=NCVT%2BIy6udqq6WndTbXYCd%2FAYtRyqEc7FWTtOEQGSSY%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767394434"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=NCVT%2BIy6udqq6WndTbXYCd%2FAYtRyqEc7FWTtOEQGSSY%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767394434"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Error: ENOENT: no such file or directory, stat &#39;/app/dist/index.html&#39;</pre>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 76.223.57.73:443 · dev.api.sonik.fm

2025-12-23 09:57

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Set-Cookie
Content-Length: 204
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 09:57:35 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 1000
Ratelimit-Policy: 1000;w=60
Ratelimit-Remaining: 998
Ratelimit-Reset: 29
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=51p4ofoKEIdB80SavAP2UtrVuTAoQoUpkW%2FcWrAyeTc%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766483855"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=51p4ofoKEIdB80SavAP2UtrVuTAoQoUpkW%2FcWrAyeTc%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766483855"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Error: ENOENT: no such file or directory, stat &#39;/app/dist/index.html&#39;</pre>
</body>
</html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 76.223.57.73:80 · dev.api.sonik.fm

2025-12-23 08:37

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Set-Cookie
Content-Length: 204
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 08:37:51 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 1000
Ratelimit-Policy: 1000;w=60
Ratelimit-Remaining: 998
Ratelimit-Reset: 12
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=a53l%2FhZC0xCcKi5qwfPx6D9eW%2FCb6RK5doZ4fCCm2ko%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766479071"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=a53l%2FhZC0xCcKi5qwfPx6D9eW%2FCb6RK5doZ4fCCm2ko%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766479071"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Error: ENOENT: no such file or directory, stat &#39;/app/dist/index.html&#39;</pre>
</body>
</html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 76.223.57.73:443 · dev.api.sonik.fm

2025-12-21 09:43

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Set-Cookie
Content-Length: 204
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 09:43:58 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 1000
Ratelimit-Policy: 1000;w=60
Ratelimit-Remaining: 998
Ratelimit-Reset: 9
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=sUw7uc92y%2F52RLFT4F9dkWsJdxgG8%2F6TqIESTdq%2FVJM%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766310238"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=sUw7uc92y%2F52RLFT4F9dkWsJdxgG8%2F6TqIESTdq%2FVJM%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766310238"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Error: ENOENT: no such file or directory, stat &#39;/app/dist/index.html&#39;</pre>
</body>
</html>

Found 2025-12-21 by HttpPlugin

Create report

Open service 76.223.57.73:80 · dev.api.sonik.fm

2025-12-21 06:40

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Set-Cookie
Content-Length: 204
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 06:40:17 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 1000
Ratelimit-Policy: 1000;w=60
Ratelimit-Remaining: 998
Ratelimit-Reset: 51
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2BVVSBK7LpDhqdRceLTNUxlCDhcObwvhXYmhvbdfnnFQ%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766299217"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2BVVSBK7LpDhqdRceLTNUxlCDhcObwvhXYmhvbdfnnFQ%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766299217"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Error: ENOENT: no such file or directory, stat &#39;/app/dist/index.html&#39;</pre>
</body>
</html>

Found 2025-12-21 by HttpPlugin

Create report

Open service 76.223.57.73:443 · dev.api.sonik.fm

2025-12-19 11:08

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Set-Cookie
Content-Length: 204
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 11:08:20 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 1000
Ratelimit-Policy: 1000;w=60
Ratelimit-Remaining: 998
Ratelimit-Reset: 48
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=RXz9qVqMv3eLeKINhz%2Fjh8t5ro02zFGVbHVOnhq049o%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766142500"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=RXz9qVqMv3eLeKINhz%2Fjh8t5ro02zFGVbHVOnhq049o%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766142500"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Error: ENOENT: no such file or directory, stat &#39;/app/dist/index.html&#39;</pre>
</body>
</html>

Found 2025-12-19 by HttpPlugin

Create report

Open service 76.223.57.73:80 · dev.api.sonik.fm

2025-12-19 02:03

HTTP/1.1 404 Not Found
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: Set-Cookie
Content-Length: 204
Content-Security-Policy: default-src 'none'
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 02:03:07 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Ratelimit-Limit: 1000
Ratelimit-Policy: 1000;w=60
Ratelimit-Remaining: 998
Ratelimit-Reset: 2
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=I%2BuJeMtNfj2%2FMdtQA9diUhlUQp5WFLldlznUrRxk04Y%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766109787"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=I%2BuJeMtNfj2%2FMdtQA9diUhlUQp5WFLldlznUrRxk04Y%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766109787"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Powered-By: Express
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Error: ENOENT: no such file or directory, stat &#39;/app/dist/index.html&#39;</pre>
</body>
</html>

Found 2025-12-19 by HttpPlugin

Create report

dev.api.sonik.fm

Fingerprint:

d69d7bfe2c725e722f084bad6f5352286a02df863f82052104369b598e9f9d89

CN:

dev.api.sonik.fm

Key:

RSA-2048

Issuer:

R12

Not before:

2025-11-24 02:07

Not after:

2026-02-22 02:07

Domain summary

dev.api.sonik.fm 11

1 recorded

IP summary

76.223.57.73 2

1 recorded

Domain dev.api.sonik.fm

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

dev.api.sonik.fm

Domain summary

IP summary