LeakIX - Host service.uniproof.com.br

Domain service.uniproof.com.br

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 3.33.161.45
Domain: service.uniproof.com.br
Port: 443
URL: https://service.uniproof.com.br

First seen 2025-11-18 00:29
Last seen 2026-01-08 23:45
Open for 51 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1a8bcc6e560adb0b460adb0b460adb0b460adb0b460adb0b4
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
GET /
```
  Found on 2026-01-08 23:45
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2025-12-12 15:25
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 3.33.161.45
Domain: service.uniproof.com.br
Port: 80
URL: http://service.uniproof.com.br

First seen 2025-11-18 00:29
Last seen 2026-01-09 18:25
Open for 52 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1a8bcc6e560adb0b460adb0b460adb0b460adb0b460adb0b4
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
GET /
```
  Found on 2026-01-09 18:25
Create report

Open service 3.33.161.45:80 · service.uniproof.com.br

2026-01-09 18:25

HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Fri, 09 Jan 2026 18:26:17 GMT
Expires: 0
Location: https://uniproof.com.br
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=XSJaskq21jcIA8%2BF%2F6WjdjIHw%2BUyzbDp4Ojeu%2BPBo40%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767983177"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=XSJaskq21jcIA8%2BF%2F6WjdjIHw%2BUyzbDp4Ojeu%2BPBo40%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767983177"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close

Found 2026-01-09 by HttpPlugin

Create report

Open service 3.33.161.45:443 · service.uniproof.com.br

2026-01-08 23:45

HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Thu, 08 Jan 2026 23:45:51 GMT
Expires: 0
Location: https://uniproof.com.br
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=3GkEd4UrTizlLFlVPrU7VF8qzgvzzNtIg11vuaS0wxc%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767915951"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=3GkEd4UrTizlLFlVPrU7VF8qzgvzzNtIg11vuaS0wxc%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767915951"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close

Found 2026-01-08 by HttpPlugin

Create report

Open service 3.33.161.45:80 · service.uniproof.com.br

2026-01-02 06:43

HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Fri, 02 Jan 2026 06:43:04 GMT
Expires: 0
Location: https://uniproof.com.br
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=WVxfFP1CQMoYlW%2BxO%2FPfIr2mH3n6VUukoWNRN0vmhfQ%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767336184"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=WVxfFP1CQMoYlW%2BxO%2FPfIr2mH3n6VUukoWNRN0vmhfQ%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767336184"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close

Found 2026-01-02 by HttpPlugin

Create report

Open service 3.33.161.45:443 · service.uniproof.com.br

2026-01-01 21:56

HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Thu, 01 Jan 2026 21:56:21 GMT
Expires: 0
Location: https://uniproof.com.br
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=omYDJVJgDKE5h6AikA4NcY0br16m6j4Wq0i8xQ74GTA%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767304581"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=omYDJVJgDKE5h6AikA4NcY0br16m6j4Wq0i8xQ74GTA%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767304581"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close

Found 2026-01-01 by HttpPlugin

Create report

Open service 3.33.161.45:80 · service.uniproof.com.br

2025-12-30 11:14

HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Tue, 30 Dec 2025 11:14:38 GMT
Expires: 0
Location: https://uniproof.com.br
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=TfAXiFQgtk0tf3OBmLvNsXXD5PiQXgz8rrfA2i5ijEQ%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767093278"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=TfAXiFQgtk0tf3OBmLvNsXXD5PiQXgz8rrfA2i5ijEQ%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767093278"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close

Found 2025-12-30 by HttpPlugin

Create report

Open service 3.33.161.45:443 · service.uniproof.com.br

2025-12-30 06:39

HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Tue, 30 Dec 2025 06:39:39 GMT
Expires: 0
Location: https://uniproof.com.br
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ZG2mdV88XoYkS%2FyCBgV97ububeWpWjCmerFG%2BdIYS%2Fc%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1767076779"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ZG2mdV88XoYkS%2FyCBgV97ububeWpWjCmerFG%2BdIYS%2Fc%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1767076779"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close

Found 2025-12-30 by HttpPlugin

Create report

Open service 3.33.161.45:443 · service.uniproof.com.br

2025-12-22 14:12

HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Mon, 22 Dec 2025 14:12:16 GMT
Expires: 0
Location: https://uniproof.com.br
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=9r%2FVBKWAxv4gWW6rjQURyHTlw0QiP%2BcqOSq8Umw03c0%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766412736"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=9r%2FVBKWAxv4gWW6rjQURyHTlw0QiP%2BcqOSq8Umw03c0%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766412736"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close

Found 2025-12-22 by HttpPlugin

Create report

Open service 3.33.161.45:80 · service.uniproof.com.br

2025-12-22 12:53

HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Mon, 22 Dec 2025 12:53:12 GMT
Expires: 0
Location: https://uniproof.com.br
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2FwX8m6LPyLfSfzfqsOpM%2BdigbDEz1c28qMucjgrjCw0%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766407992"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2FwX8m6LPyLfSfzfqsOpM%2BdigbDEz1c28qMucjgrjCw0%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766407992"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close

Found 2025-12-22 by HttpPlugin

Create report

Open service 3.33.161.45:443 · service.uniproof.com.br

2025-12-20 14:00

HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Sat, 20 Dec 2025 14:00:05 GMT
Expires: 0
Location: https://uniproof.com.br
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Plhmj%2F6SQunRzgXtALlPFh%2Fbxkh1C2n3kOipkjCm1cA%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766239205"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Plhmj%2F6SQunRzgXtALlPFh%2Fbxkh1C2n3kOipkjCm1cA%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766239205"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close

Found 2025-12-20 by HttpPlugin

Create report

Open service 3.33.161.45:80 · service.uniproof.com.br

2025-12-20 09:39

HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 0
Date: Sat, 20 Dec 2025 09:39:27 GMT
Expires: 0
Location: https://uniproof.com.br
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2F3Y3SSmcMfairgLo2Lsb3%2FhG71tY735AFKNPBjxumCo%3D\u0026sid=67ff5de4-ad2b-4112-9289-cf96be89efed\u0026ts=1766223567"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2F3Y3SSmcMfairgLo2Lsb3%2FhG71tY735AFKNPBjxumCo%3D&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&ts=1766223567"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Connection: close

Found 2025-12-20 by HttpPlugin

Create report

service.uniproof.com.br

Fingerprint:

c355c11fb92118e4ccc309c3e4310a142c21e8978db59f4ab133d5f23b8ba25e

CN:

service.uniproof.com.br

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-17 23:30

Not after:

2026-02-15 23:30

Domain summary

service.uniproof.com.br 12

1 recorded

IP summary

3.33.161.45 2

1 recorded

Domain service.uniproof.com.br

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

service.uniproof.com.br

Domain summary

IP summary