LeakIX - Host nw-staging-squad7.distrito.me

Domain nw-staging-squad7.distrito.me

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 15.197.149.68
Domain: nw-staging-squad7.distrito.me
Port: 443
URL: https://nw-staging-squad7.distrito.me

First seen 2025-10-28 01:19
Last seen 2026-01-09 13:41
Open for 73 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035492a638c2b4ae496154db5dc356a503ea36e7c4bf7

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /v1/Challenge/goal/delete/{goalId}
DELETE /v1/Challenge/{id}/ChallengeSolution
DELETE /v1/ChallengeQuestions/{Id}
GET /v1/Attachment/Find/{uuid}
GET /v1/Attachment/UpdateUUIDs
GET /v1/Attachment/{id}
GET /v1/Challenge
GET /v1/Challenge/ChallengeSolution/Company/Count
GET /v1/Challenge/Counts
GET /v1/Challenge/Drafts
GET /v1/Challenge/WithMySolutions
GET /v1/Challenge/goal
GET /v1/Challenge/{challengeId}/ChallengeSolution/Enterprise/{enterpriseId}
GET /v1/Challenge/{challengeId}/ChallengeSolution/{id}
GET /v1/Challenge/{challengeId}/ChallengeSolutions
GET /v1/Challenge/{id}
GET /v1/ChallengeQuestions/{challengeId}
GET /v1/Contest
GET /v1/Contest/find
GET /v1/Contest/list-companies-with-contest
GET /v1/Contest/{id}
GET /v1/ContestEvaluatorsGroup
GET /v1/ContestEvaluatorsGroup/{id}
GET /v1/ContestExportExcel/{companyId}
GET /v1/ContestIdea
GET /v1/ContestIdea/ExcelExport/{contestId}
GET /v1/ContestIdea/{id}
GET /v1/ContestManagementDashboard/{companyId}
GET /v1/ContestUserIdeaCriteriaEvaluation
GET /v1/ContestWinner
GET /v1/ContestWinner/{id}
GET /v1/CsatResearch
GET /v1/CsatResearch/FromCurrentUser
GET /v1/IdeaEvaluation
GET /v1/IdeaEvaluation/{id}
GET /v1/ParticipantsGroup
GET /v1/ParticipantsGroup/searchUsersToParticipantsGroup/users
GET /v1/ParticipantsGroup/{id}
GET /v1/QA/ChallengeListByDate
GET /v1/QA/PublishAllChallenges
GET /v1/QA/challenge-solution-data
GET /v1/QA/find-csat_research/{id}
GET /v1/QA/pending-migrations
GET /v1/QA/qa-challenge
GET /v1/QA/qa-challenge-solution-company-update
GET /v1/QA/qa-logos
GET /v1/QA/testexxx
GET /v1/WorkerHistory/clear
GET /v1/WorkerHistory/list
POST /v1/Challenge/ChallengesByGoalIds
POST /v1/Challenge/UpdateCompanyLogo
POST /v1/Challenge/challenge-fix-company-duplicate
POST /v1/Challenge/companies/count
POST /v1/Challenge/goal/count
POST /v1/Challenge/{challengeId}/ChallengeSolution
POST /v1/Challenge/{challengeId}/ChallengeSolution/{id}/addAttachments
POST /v1/Challenge/{challengeId}/ChallengeSolution/{id}/changeStatus/{status}
POST /v1/Challenge/{id}/finish
POST /v1/ChallengeQuestions
POST /v1/Contest/contest-fix-company-duplicate
POST /v1/Contest/favorite-contest
POST /v1/Contest/{id}/finish
POST /v1/ContestIdea/Excel-idea
POST /v1/ContestIdea/favorite-idea
POST /v1/ContestIdea/like-idea
POST /v1/ContestIdeaUserAdherence
POST /v1/ContestUserIdeaCriteria/{id}
POST /v1/Job/RunJobs
POST /v1/ParticipantsGroup/searchUsersIds
POST /v1/Pipefy/GetPreferencesStatus
POST /v1/Pipefy/SetupPipes
POST /v1/QA/Challenge/{id}/{status}
POST /v1/QA/ChallengeDates
POST /v1/QA/Contest/{id}/{status}
POST /v1/QA/ContestDates
POST /v1/QA/clean-challenge-with-truncate-cascade
POST /v1/QA/clean-contest-with-truncate-cascade
POST /v1/QA/clean-tag-with-truncate-cascade
POST /v1/QA/create-challenges
POST /v1/QA/create-contests
POST /v1/QA/delete-batch-challenges-by-id
POST /v1/QA/delete-batch-contests-by-id
POST /v1/QA/delete-lp-user/{email}
POST /v1/QA/{contestID}/create-contest-ideas
PUT /v1/Challenge/UpdateChallengeCompany
PUT /v1/Challenge/{challengeId}/ChallengeSolution/{id}/updateAttachments
PUT /v1/Challenge/{id}/updateChallengePublished

Found on 2026-01-09 13:41

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-12-11 13:39

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 15.197.149.68
Domain: nw-staging-squad7.distrito.me
Port: 80
URL: http://nw-staging-squad7.distrito.me

First seen 2025-10-28 01:19
Last seen 2026-01-09 20:48
Open for 73 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035492a638c2b4ae496154db5dc356a503ea36e7c4bf7

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /v1/Challenge/goal/delete/{goalId}
DELETE /v1/Challenge/{id}/ChallengeSolution
DELETE /v1/ChallengeQuestions/{Id}
GET /v1/Attachment/Find/{uuid}
GET /v1/Attachment/UpdateUUIDs
GET /v1/Attachment/{id}
GET /v1/Challenge
GET /v1/Challenge/ChallengeSolution/Company/Count
GET /v1/Challenge/Counts
GET /v1/Challenge/Drafts
GET /v1/Challenge/WithMySolutions
GET /v1/Challenge/goal
GET /v1/Challenge/{challengeId}/ChallengeSolution/Enterprise/{enterpriseId}
GET /v1/Challenge/{challengeId}/ChallengeSolution/{id}
GET /v1/Challenge/{challengeId}/ChallengeSolutions
GET /v1/Challenge/{id}
GET /v1/ChallengeQuestions/{challengeId}
GET /v1/Contest
GET /v1/Contest/find
GET /v1/Contest/list-companies-with-contest
GET /v1/Contest/{id}
GET /v1/ContestEvaluatorsGroup
GET /v1/ContestEvaluatorsGroup/{id}
GET /v1/ContestExportExcel/{companyId}
GET /v1/ContestIdea
GET /v1/ContestIdea/ExcelExport/{contestId}
GET /v1/ContestIdea/{id}
GET /v1/ContestManagementDashboard/{companyId}
GET /v1/ContestUserIdeaCriteriaEvaluation
GET /v1/ContestWinner
GET /v1/ContestWinner/{id}
GET /v1/CsatResearch
GET /v1/CsatResearch/FromCurrentUser
GET /v1/IdeaEvaluation
GET /v1/IdeaEvaluation/{id}
GET /v1/ParticipantsGroup
GET /v1/ParticipantsGroup/searchUsersToParticipantsGroup/users
GET /v1/ParticipantsGroup/{id}
GET /v1/QA/ChallengeListByDate
GET /v1/QA/PublishAllChallenges
GET /v1/QA/challenge-solution-data
GET /v1/QA/find-csat_research/{id}
GET /v1/QA/pending-migrations
GET /v1/QA/qa-challenge
GET /v1/QA/qa-challenge-solution-company-update
GET /v1/QA/qa-logos
GET /v1/QA/testexxx
GET /v1/WorkerHistory/clear
GET /v1/WorkerHistory/list
POST /v1/Challenge/ChallengesByGoalIds
POST /v1/Challenge/UpdateCompanyLogo
POST /v1/Challenge/challenge-fix-company-duplicate
POST /v1/Challenge/companies/count
POST /v1/Challenge/goal/count
POST /v1/Challenge/{challengeId}/ChallengeSolution
POST /v1/Challenge/{challengeId}/ChallengeSolution/{id}/addAttachments
POST /v1/Challenge/{challengeId}/ChallengeSolution/{id}/changeStatus/{status}
POST /v1/Challenge/{id}/finish
POST /v1/ChallengeQuestions
POST /v1/Contest/contest-fix-company-duplicate
POST /v1/Contest/favorite-contest
POST /v1/Contest/{id}/finish
POST /v1/ContestIdea/Excel-idea
POST /v1/ContestIdea/favorite-idea
POST /v1/ContestIdea/like-idea
POST /v1/ContestIdeaUserAdherence
POST /v1/ContestUserIdeaCriteria/{id}
POST /v1/Job/RunJobs
POST /v1/ParticipantsGroup/searchUsersIds
POST /v1/Pipefy/GetPreferencesStatus
POST /v1/Pipefy/SetupPipes
POST /v1/QA/Challenge/{id}/{status}
POST /v1/QA/ChallengeDates
POST /v1/QA/Contest/{id}/{status}
POST /v1/QA/ContestDates
POST /v1/QA/clean-challenge-with-truncate-cascade
POST /v1/QA/clean-contest-with-truncate-cascade
POST /v1/QA/clean-tag-with-truncate-cascade
POST /v1/QA/create-challenges
POST /v1/QA/create-contests
POST /v1/QA/delete-batch-challenges-by-id
POST /v1/QA/delete-batch-contests-by-id
POST /v1/QA/delete-lp-user/{email}
POST /v1/QA/{contestID}/create-contest-ideas
PUT /v1/Challenge/UpdateChallengeCompany
PUT /v1/Challenge/{challengeId}/ChallengeSolution/{id}/updateAttachments
PUT /v1/Challenge/{id}/updateChallengePublished

Found on 2026-01-09 20:48

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-11-05 15:46

Create report

Open service 15.197.149.68:80 · nw-staging-squad7.distrito.me

2026-01-09 20:48

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Fri, 09 Jan 2026 20:49:14 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=1U06SNb4i%2BrzRi0oGUDP0oFi8NDq1MlKyeTrCOJvZFA%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767991754"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=1U06SNb4i%2BrzRi0oGUDP0oFi8NDq1MlKyeTrCOJvZFA%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767991754"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2 days ago by HttpPlugin

Create report

Open service 15.197.149.68:443 · nw-staging-squad7.distrito.me

2026-01-09 13:41

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Fri, 09 Jan 2026 13:41:42 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=sjXhD8HTtRy6MwMjHpLkeoAc2OnlTrcDsiMq47Oq%2Fgw%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767966102"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=sjXhD8HTtRy6MwMjHpLkeoAc2OnlTrcDsiMq47Oq%2Fgw%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767966102"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2 days ago by HttpPlugin

Create report

Open service 15.197.149.68:80 · nw-staging-squad7.distrito.me

2026-01-03 00:17

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Sat, 03 Jan 2026 00:17:29 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2Bv0vwdCawxOppGHywuC8KQkWyW9nyAemy1%2FvATd5sxw%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767399449"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2Bv0vwdCawxOppGHywuC8KQkWyW9nyAemy1%2FvATd5sxw%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767399449"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2026-01-03 by HttpPlugin

Create report

Open service 15.197.149.68:443 · nw-staging-squad7.distrito.me

2026-01-02 02:46

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Fri, 02 Jan 2026 02:46:11 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ypYv4lFl3lq4DIaMcplzBRbY7Ju2HM%2F7xx8doa5xILo%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1767321971"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ypYv4lFl3lq4DIaMcplzBRbY7Ju2HM%2F7xx8doa5xILo%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1767321971"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2026-01-02 by HttpPlugin

Create report

Open service 15.197.149.68:443 · nw-staging-squad7.distrito.me

2025-12-23 01:47

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Tue, 23 Dec 2025 01:47:12 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=XsebatS9U37QwZ7%2FL2flMIHNOlGqgKDsGUaonn55OXQ%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766454433"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=XsebatS9U37QwZ7%2FL2flMIHNOlGqgKDsGUaonn55OXQ%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766454433"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2025-12-23 by HttpPlugin

Create report

Open service 15.197.149.68:80 · nw-staging-squad7.distrito.me

2025-12-22 17:31

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Mon, 22 Dec 2025 17:31:34 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=4Qx3YRbdhcDF38rILvCFK5aALp4DNt6%2BH0st3FRv70M%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766424695"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=4Qx3YRbdhcDF38rILvCFK5aALp4DNt6%2BH0st3FRv70M%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766424695"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2025-12-22 by HttpPlugin

Create report

Open service 15.197.149.68:80 · nw-staging-squad7.distrito.me

2025-12-20 21:22

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Sat, 20 Dec 2025 21:22:13 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=rFKqdbk6iUjxCBgvB1BSJGUiKxhzmBEAV9BqAxVSsa8%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766265733"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=rFKqdbk6iUjxCBgvB1BSJGUiKxhzmBEAV9BqAxVSsa8%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766265733"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2025-12-20 by HttpPlugin

Create report

Open service 15.197.149.68:443 · nw-staging-squad7.distrito.me

2025-12-20 10:44

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Sat, 20 Dec 2025 10:44:10 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=FUi%2FeYjeSkNI4zO1TE6hBRxMxiG0Z9TmxTEaQ9vfAj4%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766227451"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=FUi%2FeYjeSkNI4zO1TE6hBRxMxiG0Z9TmxTEaQ9vfAj4%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766227451"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2025-12-20 by HttpPlugin

Create report

Open service 15.197.149.68:443 · nw-staging-squad7.distrito.me

2025-12-19 10:40

HTTP/1.1 404 Not Found
Content-Length: 0
Date: Fri, 19 Dec 2025 10:40:19 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=lK6sCBGnQQ4m9N0kHmLtJkEWckEzeEYwL5hVrjQv2CA%3D\u0026sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6\u0026ts=1766140820"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=lK6sCBGnQQ4m9N0kHmLtJkEWckEzeEYwL5hVrjQv2CA%3D&sid=929419e7-33ea-4e2f-85f0-7d8b7cd5cbd6&ts=1766140820"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Found 2025-12-19 by HttpPlugin

Create report

nw-staging-squad7.distrito.me

Fingerprint:

35a3527d81fd4d9fd05c6d76e8335e2189db5af8e58c03bda973829f1143b4da

CN:

nw-staging-squad7.distrito.me

Key:

RSA-2048

Issuer:

R13

Not before:

2025-12-27 23:30

Not after:

2026-03-27 23:30

nw-staging-squad7.distrito.me

Fingerprint:

7bd143118f5782b7173149a1488fa9cfd900dbab6deabf0e0576b711db745249

CN:

nw-staging-squad7.distrito.me

Key:

RSA-2048

Issuer:

R12

Not before:

2025-10-28 00:21

Not after:

2026-01-26 00:21

Domain summary

nw-staging-squad7.distrito.me 12

1 recorded

IP summary

15.197.149.68 2

1 recorded