LeakIX - Host platform-courier-api.mottu.cloud

Domain platform-courier-api.mottu.cloud

United States

GOOGLE-CLOUD-PLATFORM

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 35.238.232.9
Domain: platform-courier-api.mottu.cloud
Port: 443
URL: https://platform-courier-api.mottu.cloud

First seen 2025-11-20 09:20
Last seen 2026-01-23 08:25
Open for 63 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354977ca33874d52570a6665b719b143756e032f33c4

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/v1/agency/{id}/labels
DELETE /api/v1/dispatch-metadata/{id}
DELETE /api/v1/dispatch/{id}
GET /api/v1/agency
GET /api/v1/courier
GET /api/v1/dispatch
GET /api/v1/dispatch-event
GET /api/v1/dispatch-metadata
GET /api/v1/integration-token
GET /api/v1/integration-token/{name}
GET /api/v1/postalcode
GET /api/v1/uniquecode/codes
POST /api/v1/file-manager/upload
POST /api/v1/uniquecode/check-usage
POST /api/v1/uniquecode/consume
POST /api/v1/uniquecode/generate-pattern
PUT /api/v1/agency/labels
PUT /api/v1/dispatch-event/schedule-update
PUT /api/v1/dispatch-metadata/upsert
PUT /api/v1/dispatch/send
PUT /api/v1/dispatch/upsert
PUT /api/v1/dispatch/{id}/send

Found on 2026-01-23 08:25

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354977ca33874d52570a6665b719b143756e8e9c194c

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/v1/agency/{id}/labels
DELETE /api/v1/dispatch-metadata/{id}
DELETE /api/v1/dispatch/{id}
GET /api/v1/agency
GET /api/v1/courier
GET /api/v1/dispatch
GET /api/v1/dispatch-event
GET /api/v1/dispatch-metadata
GET /api/v1/integration-token
GET /api/v1/integration-token/{name}
GET /api/v1/postalcode
GET /api/v1/uniquecode/codes
POST /api/v1/file-manager/upload
POST /api/v1/uniquecode/check-usage
POST /api/v1/uniquecode/consume
POST /api/v1/uniquecode/generate-pattern
PUT /api/v1/agency/labels
PUT /api/v1/dispatch-event/schedule-update
PUT /api/v1/dispatch-metadata/upsert
PUT /api/v1/dispatch/upsert
PUT /api/v1/dispatch/{id}/send

Found on 2026-01-02 21:07

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354977ca33874d52570a6665b719b143756ec298f1b9

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/v1/agency/{id}/labels
DELETE /api/v1/dispatch-metadata/{id}
DELETE /api/v1/dispatch/{id}
GET /api/v1/agency
GET /api/v1/courier
GET /api/v1/dispatch
GET /api/v1/dispatch-event
GET /api/v1/dispatch-metadata
GET /api/v1/file-manager/redirect/{id}
GET /api/v1/postalcode
POST /api/v1/file-manager/upload
PUT /api/v1/agency/labels
PUT /api/v1/dispatch-event/schedule-update
PUT /api/v1/dispatch-metadata/upsert
PUT /api/v1/dispatch/upsert
PUT /api/v1/dispatch/{id}/send

Found on 2025-12-27 03:26

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354977ca33874d52570a6665b719b143756e62fd3dd8

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/v1/agency/{id}/labels
DELETE /api/v1/dispatch-metadata/{id}
DELETE /api/v1/dispatch/{id}
GET /api/v1/agency
GET /api/v1/dispatch
GET /api/v1/dispatch-event
GET /api/v1/dispatch-metadata
GET /api/v1/file-manager/redirect/{id}
GET /api/v1/postalcode
POST /api/v1/file-manager/upload
PUT /api/v1/agency/labels
PUT /api/v1/dispatch-event/schedule-update
PUT /api/v1/dispatch-metadata/upsert
PUT /api/v1/dispatch/upsert
PUT /api/v1/dispatch/{id}/send

Found on 2025-11-24 14:39

Create report

Open service 35.238.232.9:443 · platform-courier-api.mottu.cloud

2026-01-23 08:25

HTTP/1.1 404 Not Found
Date: Fri, 23 Jan 2026 08:25:08 GMT
Content-Length: 0
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubDomains

Found 2026-01-23 by HttpPlugin

Create report

*.mottu.cloudmottu.cloud

Fingerprint:

81b13eb598db28b2436f2538e233d20a14acb792aff3cdfdc596a1545c9c59cd

CN:

*.mottu.cloud

Key:

RSA-2048

Issuer:

R12

Not before:

2026-01-20 03:32

Not after:

2026-04-20 03:32

Domain summary

platform-courier-api.mottu.cloud 4

1 recorded

IP summary

35.238.232.9 2

1 recorded