LeakIX - Host staging-api.somosbob.com

Domain staging-api.somosbob.com

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 35.71.145.101
Domain: staging-api.somosbob.com
Port: 443
URL: https://staging-api.somosbob.com

First seen 2025-11-15 02:20
Last seen 2026-01-09 23:20
Open for 55 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 23:20
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.132.87
Domain: staging-api.somosbob.com
Port: 80
URL: http://staging-api.somosbob.com

First seen 2025-11-15 02:20
Last seen 2026-01-09 07:44
Open for 55 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-09 07:44
Create report

Open service 35.71.145.101:443 · staging-api.somosbob.com

2026-01-09 23:20

HTTP/1.1 500 Internal Server Error
Access-Control-Allow-Origin: *
Content-Length: 10
Date: Fri, 09 Jan 2026 23:20:33 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Cuaf79lWxaj2ZntZPEm22AcuspOv0WfQV5ceU7BSHv8%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1768000833"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Cuaf79lWxaj2ZntZPEm22AcuspOv0WfQV5ceU7BSHv8%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1768000833"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Content-Type: text/plain; charset=utf-8
Connection: close


undefined

Found 3 days ago by HttpPlugin

Create report

Open service 13.248.132.87:80 · staging-api.somosbob.com

2026-01-09 07:44

HTTP/1.1 500 Internal Server Error
Access-Control-Allow-Origin: *
Content-Length: 10
Date: Fri, 09 Jan 2026 07:45:43 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=eicntvyjSIe7Es3NscD0p1G08mVltUAlttfS4s6Wk9Y%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767944743"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=eicntvyjSIe7Es3NscD0p1G08mVltUAlttfS4s6Wk9Y%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767944743"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Content-Type: text/plain; charset=utf-8
Connection: close


undefined

Found 2026-01-09 by HttpPlugin

Create report

Open service 13.248.132.87:80 · staging-api.somosbob.com

2026-01-02 13:36

HTTP/1.1 500 Internal Server Error
Access-Control-Allow-Origin: *
Content-Length: 10
Date: Fri, 02 Jan 2026 13:36:59 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=d7v2dieLm2MYPVZ5Kuu8zhoXVzNO5dTxaGH9UE2DKNE%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767361019"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=d7v2dieLm2MYPVZ5Kuu8zhoXVzNO5dTxaGH9UE2DKNE%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767361019"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Content-Type: text/plain; charset=utf-8
Connection: close


undefined

Found 2026-01-02 by HttpPlugin

Create report

Open service 35.71.145.101:443 · staging-api.somosbob.com

2026-01-02 12:39

HTTP/1.1 500 Internal Server Error
Access-Control-Allow-Origin: *
Content-Length: 10
Date: Fri, 02 Jan 2026 12:39:39 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=qtmQ9HIgfd%2B73HMPk6TCnjAFW%2F84WirvSW9fYOKQ%2BOo%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767357579"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=qtmQ9HIgfd%2B73HMPk6TCnjAFW%2F84WirvSW9fYOKQ%2BOo%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767357579"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Content-Type: text/plain; charset=utf-8
Connection: close


undefined

Found 2026-01-02 by HttpPlugin

Create report

Open service 13.248.132.87:80 · staging-api.somosbob.com

2025-12-22 20:54

HTTP/1.1 500 Internal Server Error
Access-Control-Allow-Origin: *
Content-Length: 10
Date: Mon, 22 Dec 2025 20:54:34 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=3S0lJUNYfMPDgfpqEfBYCSDLMJkG1KE504Dh2e%2FOlAA%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766436874"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=3S0lJUNYfMPDgfpqEfBYCSDLMJkG1KE504Dh2e%2FOlAA%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766436874"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Content-Type: text/plain; charset=utf-8
Connection: close


undefined

Found 2025-12-22 by HttpPlugin

Create report

Open service 35.71.145.101:443 · staging-api.somosbob.com

2025-12-22 18:00

HTTP/1.1 500 Internal Server Error
Access-Control-Allow-Origin: *
Content-Length: 10
Date: Mon, 22 Dec 2025 18:00:28 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=JPK%2BgU0aj3xNAYNJwHEj56CXodDQKIP12hCeo5Kk2E8%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766426428"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=JPK%2BgU0aj3xNAYNJwHEj56CXodDQKIP12hCeo5Kk2E8%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766426428"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Content-Type: text/plain; charset=utf-8
Connection: close


undefined

Found 2025-12-22 by HttpPlugin

Create report

Open service 13.248.132.87:80 · staging-api.somosbob.com

2025-12-20 23:56

HTTP/1.1 500 Internal Server Error
Access-Control-Allow-Origin: *
Content-Length: 10
Date: Sat, 20 Dec 2025 23:57:01 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=iOQSu6g1LRPVwnQuG8LE2J819b1fNoTJSQjNw5STRmE%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766275021"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=iOQSu6g1LRPVwnQuG8LE2J819b1fNoTJSQjNw5STRmE%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766275021"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Content-Type: text/plain; charset=utf-8
Connection: close


undefined

Found 2025-12-20 by HttpPlugin

Create report

Open service 35.71.145.101:443 · staging-api.somosbob.com

2025-12-20 20:39

HTTP/1.1 500 Internal Server Error
Access-Control-Allow-Origin: *
Content-Length: 10
Date: Sat, 20 Dec 2025 20:39:32 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=R3xDz2MqurunTs7y1WLabaVneRXprIGbHoQRBnqPslI%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1766263172"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=R3xDz2MqurunTs7y1WLabaVneRXprIGbHoQRBnqPslI%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1766263172"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Content-Type: text/plain; charset=utf-8
Connection: close


undefined

Found 2025-12-20 by HttpPlugin

Create report

staging-api.somosbob.com

Fingerprint:

07ead692b15f432206ff0f5289402c844a9bd94eeb82349ec0220c2c988d0e9e

CN:

staging-api.somosbob.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-11-15 01:21

Not after:

2026-02-13 01:21

Domain summary

staging-api.somosbob.com 9

1 recorded

IP summary

35.71.145.101 1 13.248.132.87 1

2 recorded

Domain staging-api.somosbob.com

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

staging-api.somosbob.com

Domain summary

IP summary