LeakIX - Host siesta.jum-dev.com

Domain siesta.jum-dev.com

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: siesta.jum-dev.com
Port: 443
URL: https://siesta.jum-dev.com

First seen 2025-11-23 00:21
Last seen 2026-01-09 04:57
Open for 47 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 04:57
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 35.71.145.101
Domain: siesta.jum-dev.com
Port: 80
URL: http://siesta.jum-dev.com

First seen 2025-11-23 00:21
Last seen 2026-01-09 03:36
Open for 47 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 03:36
Create report

Open service 13.248.132.87:443 · siesta.jum-dev.com

2026-01-09 04:57

HTTP/1.1 401 Unauthorized
Access-Control-Allow-Origin: *
Content-Length: 24
Content-Security-Policy: script-src 'self' 'nonce-4660074b206efa7ab9a7401c1c0cdd253d78be2f1f317c0ed8f8191aad79aaeb';default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 09 Jan 2026 04:58:01 GMT
Etag: W/"18-XPDV80vbMk4yY1/PADG4jYM4rSI"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=jmp1%2FK8OSuHtUY%2B7d5nlB3uYAZxICKEyG%2B2xazhxQHY%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767934681"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=jmp1%2FK8OSuHtUY%2B7d5nlB3uYAZxICKEyG%2B2xazhxQHY%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767934681"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


{"error":"Unauthorized"}

Found 2026-01-09 by HttpPlugin

Create report

Open service 35.71.145.101:80 · siesta.jum-dev.com

2026-01-09 03:36

HTTP/1.1 301 Moved Permanently
Access-Control-Allow-Origin: *
Content-Length: 61
Content-Security-Policy: script-src 'self' 'nonce-9cf3aebf41e12ae3b93f7e851d18e134086698b3288ffd0a2a4e9c6d92b44553';default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/plain; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 09 Jan 2026 03:37:56 GMT
Location: https://siesta.jum-dev.com/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=D%2FSJzWnZwFIqRVeDfVj0DdLzcb7eY0ioP8M%2FhE0pnHA%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767929876"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=D%2FSJzWnZwFIqRVeDfVj0DdLzcb7eY0ioP8M%2FhE0pnHA%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767929876"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Vary: Accept
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


Moved Permanently. Redirecting to https://siesta.jum-dev.com/

Found 2026-01-09 by HttpPlugin

Create report

Open service 13.248.132.87:443 · siesta.jum-dev.com

2026-01-02 12:15

HTTP/1.1 401 Unauthorized
Access-Control-Allow-Origin: *
Content-Length: 24
Content-Security-Policy: script-src 'self' 'nonce-38bb6def672b68ba69971c352e7913c6b6bc2ef072c3a2fd401b89a7b3370268';default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 02 Jan 2026 12:15:51 GMT
Etag: W/"18-XPDV80vbMk4yY1/PADG4jYM4rSI"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=1TQ694pVaC8PBpz6N4nthaTmk4Km7eSx6TDOuwHku1M%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767356151"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=1TQ694pVaC8PBpz6N4nthaTmk4Km7eSx6TDOuwHku1M%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767356151"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


{"error":"Unauthorized"}

Found 2026-01-02 by HttpPlugin

Create report

Open service 35.71.145.101:80 · siesta.jum-dev.com

2026-01-02 09:37

HTTP/1.1 301 Moved Permanently
Access-Control-Allow-Origin: *
Content-Length: 61
Content-Security-Policy: script-src 'self' 'nonce-05475c5b55331a932c17dc8fa420d342a5fb320804aa20349076fc44783f0d92';default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/plain; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 02 Jan 2026 09:37:03 GMT
Location: https://siesta.jum-dev.com/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=t9BeJWtge0xhOaHl9%2FTEoYz9XrthB9lD6S72MhKe8pc%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767346623"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=t9BeJWtge0xhOaHl9%2FTEoYz9XrthB9lD6S72MhKe8pc%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767346623"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Vary: Accept
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


Moved Permanently. Redirecting to https://siesta.jum-dev.com/

Found 2026-01-02 by HttpPlugin

Create report

Open service 13.248.132.87:443 · siesta.jum-dev.com

2025-12-30 13:26

HTTP/1.1 401 Unauthorized
Access-Control-Allow-Origin: *
Content-Length: 24
Content-Security-Policy: script-src 'self' 'nonce-596e8cc657a674feb1d6961dc787860dbca186b0e2a97f9c0bb832bc0aa088a5';default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Tue, 30 Dec 2025 13:26:19 GMT
Etag: W/"18-XPDV80vbMk4yY1/PADG4jYM4rSI"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=aFBADaJIbP7IKwnJvoNnANQeGJbwJyDJ91b7vQCA3RM%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767101179"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=aFBADaJIbP7IKwnJvoNnANQeGJbwJyDJ91b7vQCA3RM%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767101179"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


{"error":"Unauthorized"}

Found 2025-12-30 by HttpPlugin

Create report

Open service 35.71.145.101:80 · siesta.jum-dev.com

2025-12-22 18:37

HTTP/1.1 301 Moved Permanently
Access-Control-Allow-Origin: *
Content-Length: 61
Content-Security-Policy: script-src 'self' 'nonce-139b8854d51d8ffa91883be89ca774cde797bd0517c578c2025e9d4600948657';default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/plain; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Mon, 22 Dec 2025 18:37:10 GMT
Location: https://siesta.jum-dev.com/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=mlMiUPaCpTiTdjOqOj3%2FXyP4HD%2FHXsC2sHBVX0%2Fbl8g%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766428630"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=mlMiUPaCpTiTdjOqOj3%2FXyP4HD%2FHXsC2sHBVX0%2Fbl8g%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766428630"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Vary: Accept
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


Moved Permanently. Redirecting to https://siesta.jum-dev.com/

Found 2025-12-22 by HttpPlugin

Create report

Open service 13.248.132.87:443 · siesta.jum-dev.com

2025-12-22 14:37

HTTP/1.1 401 Unauthorized
Access-Control-Allow-Origin: *
Content-Length: 24
Content-Security-Policy: script-src 'self' 'nonce-9a7ef0e5b6d36e4247ec27823f2df7531b27893a87731e256afdf3449fc1d342';default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Mon, 22 Dec 2025 14:37:12 GMT
Etag: W/"18-XPDV80vbMk4yY1/PADG4jYM4rSI"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=gWVIyQ%2FlMySdM9hqiSxBCcQJjs9b%2FKSUT0716lllUJk%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766414232"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=gWVIyQ%2FlMySdM9hqiSxBCcQJjs9b%2FKSUT0716lllUJk%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766414232"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


{"error":"Unauthorized"}

Found 2025-12-22 by HttpPlugin

Create report

Open service 13.248.132.87:443 · siesta.jum-dev.com

2025-12-20 12:43

HTTP/1.1 401 Unauthorized
Access-Control-Allow-Origin: *
Content-Length: 24
Content-Security-Policy: script-src 'self' 'nonce-8aba6ffbd1fbc5dd5e7edb6ab587f2e03cb1aa49535085a165d66b66f834f3b2';default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Sat, 20 Dec 2025 12:43:33 GMT
Etag: W/"18-XPDV80vbMk4yY1/PADG4jYM4rSI"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=jDymE3dlKF0zfKwJhsBJmIOE68MIOTKNIVZ1mfR70Ic%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766234613"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=jDymE3dlKF0zfKwJhsBJmIOE68MIOTKNIVZ1mfR70Ic%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766234613"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


{"error":"Unauthorized"}

Found 2025-12-20 by HttpPlugin

Create report

Open service 35.71.145.101:80 · siesta.jum-dev.com

2025-12-19 02:32

HTTP/1.1 301 Moved Permanently
Access-Control-Allow-Origin: *
Content-Length: 61
Content-Security-Policy: script-src 'self' 'nonce-5af82ebe5f8e0dd9fd4c314e048f33cf5713c43beabc2b1a1a7854f6c03c3b1d';default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: text/plain; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 19 Dec 2025 02:32:26 GMT
Location: https://siesta.jum-dev.com/
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=DeZpCHcM4HpQ0lIQiKeTkVDm8BJvmskdc5xZ4syiBV0%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766111546"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=DeZpCHcM4HpQ0lIQiKeTkVDm8BJvmskdc5xZ4syiBV0%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766111546"
Server: Heroku
Strict-Transport-Security: max-age=15552000; includeSubDomains
Vary: Accept
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0
Connection: close


Moved Permanently. Redirecting to https://siesta.jum-dev.com/

Found 2025-12-19 by HttpPlugin

Create report

siesta.jum-dev.com

Fingerprint:

f04e71324fd7c2e235ad62e69fce054f347bb12e24ad5d49f65f48971af20600

CN:

siesta.jum-dev.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-22 23:22

Not after:

2026-02-20 23:22

Domain summary

siesta.jum-dev.com 10

1 recorded

IP summary

13.248.132.87 1 35.71.145.101 1

2 recorded

Domain siesta.jum-dev.com

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

siesta.jum-dev.com

Domain summary

IP summary