LeakIX - Host tb-contentful-api.thebump.com

Domain tb-contentful-api.thebump.com

Germany

Akamai International B.V.

Software information

awselb awselb 2.0

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 34.199.47.233
Domain: tb-contentful-api.thebump.com
Port: 443
URL: https://tb-contentful-api.thebump.com

First seen 2025-11-07 12:42
Last seen 2026-01-26 10:03
Open for 79 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43bfddc5801de00a711de00a711de00a711de00a71
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /health
POST /v1/contentful
```
  Found on 2026-01-26 10:03
Create report

Open service 2.16.183.6:80 · tb-contentful-api.thebump.com

2026-01-26 10:03

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Location: https://tb-contentful-api.thebump.com/
Expires: Mon, 26 Jan 2026 10:03:59 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Mon, 26 Jan 2026 10:03:59 GMT
Connection: close
Server-Timing: cdn-cache; desc=HIT
Server-Timing: edge; dur=1
Server-Timing: ak_p; desc="1769421839439_34610630_2521255030_11_1800_17_0_-";dur=1

Found 2026-01-26 by HttpPlugin

Create report

Open service 2a02:26f0:3500:18::1724:a296:80 · tb-contentful-api.thebump.com

2026-01-26 10:03

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Location: https://tb-contentful-api.thebump.com/
Expires: Mon, 26 Jan 2026 10:03:59 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Mon, 26 Jan 2026 10:03:59 GMT
Connection: close
Server-Timing: cdn-cache; desc=HIT
Server-Timing: edge; dur=1
Server-Timing: ak_p; desc="1769421839332_388276374_776295136_13_1953_151_0_-";dur=1

Found 2026-01-26 by HttpPlugin

Create report

Open service 2a02:26f0:3500:18::1724:a296:443 · tb-contentful-api.thebump.com

2026-01-26 10:03

HTTP/1.1 404 Not Found
Content-Type: application/json; charset=utf-8
Content-Length: 60
Vary: origin
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Strict-Transport-Security: max-age=31536000
Expires: Mon, 26 Jan 2026 10:03:37 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Mon, 26 Jan 2026 10:03:37 GMT
Connection: close
Server-Timing: cdn-cache; desc=HIT
Server-Timing: edge; dur=1
Server-Timing: ak_p; desc="1769421817611_388276382_537555229_14_1507_0_4_-";dur=1


{"statusCode":404,"error":"Not Found","message":"Not Found"}

Found 2026-01-26 by HttpPlugin

Create report

Open service 2.16.183.9:80 · tb-contentful-api.thebump.com

2026-01-26 10:03

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Location: https://tb-contentful-api.thebump.com/
Expires: Mon, 26 Jan 2026 10:03:59 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Mon, 26 Jan 2026 10:03:59 GMT
Connection: close
Server-Timing: cdn-cache; desc=HIT
Server-Timing: edge; dur=1
Server-Timing: ak_p; desc="1769421839834_34610633_3034854607_7_907_94_0_-";dur=1

Found 2026-01-26 by HttpPlugin

Create report

Open service 2.16.183.9:443 · tb-contentful-api.thebump.com

2026-01-26 10:03

HTTP/1.1 404 Not Found
Content-Type: application/json; charset=utf-8
Content-Length: 60
Vary: origin
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Strict-Transport-Security: max-age=31536000
Expires: Mon, 26 Jan 2026 10:03:37 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Mon, 26 Jan 2026 10:03:37 GMT
Connection: close
Server-Timing: cdn-cache; desc=HIT
Server-Timing: edge; dur=1
Server-Timing: ak_p; desc="1769421817638_34610630_2521024623_11_1029_17_20_-";dur=1


{"statusCode":404,"error":"Not Found","message":"Not Found"}

Found 2026-01-26 by HttpPlugin

Create report

Open service 2a02:26f0:3500:18::1724:a29e:443 · tb-contentful-api.thebump.com

2026-01-26 10:03

HTTP/1.1 404 Not Found
Content-Type: application/json; charset=utf-8
Content-Length: 60
Vary: origin
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Strict-Transport-Security: max-age=31536000
Expires: Mon, 26 Jan 2026 10:03:38 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Mon, 26 Jan 2026 10:03:38 GMT
Connection: close
Server-Timing: cdn-cache; desc=HIT
Server-Timing: edge; dur=1
Server-Timing: ak_p; desc="1769421817911_388276382_537555583_15_1864_149_152_-";dur=1


{"statusCode":404,"error":"Not Found","message":"Not Found"}

Found 2026-01-26 by HttpPlugin

Create report

Open service 2a02:26f0:3500:18::1724:a29e:80 · tb-contentful-api.thebump.com

2026-01-26 10:03

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Location: https://tb-contentful-api.thebump.com/
Expires: Mon, 26 Jan 2026 10:03:59 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Mon, 26 Jan 2026 10:03:59 GMT
Connection: close
Server-Timing: cdn-cache; desc=HIT
Server-Timing: edge; dur=1
Server-Timing: ak_p; desc="1769421839866_388276382_537572834_12_1685_99_0_-";dur=1

Found 2026-01-26 by HttpPlugin

Create report

Open service 2.16.183.6:443 · tb-contentful-api.thebump.com

2026-01-26 10:03

HTTP/1.1 404 Not Found
Content-Type: application/json; charset=utf-8
Content-Length: 60
Vary: origin
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: WWW-Authenticate,Server-Authorization
Strict-Transport-Security: max-age=31536000
Expires: Mon, 26 Jan 2026 10:03:37 GMT
Cache-Control: max-age=0, no-cache
Pragma: no-cache
Date: Mon, 26 Jan 2026 10:03:37 GMT
Connection: close
Server-Timing: cdn-cache; desc=HIT
Server-Timing: edge; dur=14
Server-Timing: origin; dur=0
Server-Timing: ak_p; desc="1769421817586_34610630_2521024194_1392_1560_8_27_-";dur=1


{"statusCode":404,"error":"Not Found","message":"Not Found"}

Found 2026-01-26 by HttpPlugin

Create report

Open service 34.199.47.233:443 · tb-contentful-api.thebump.com

2026-01-08 23:08

HTTP/1.1 404 Not Found
Server: awselb/2.0
Date: Thu, 08 Jan 2026 23:08:29 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 156
Connection: close

Page title: 404 No Such Service

<!DOCTYPE html>
<html>
<head><title>404 No Such Service</title></head>
<body bgcolor="white">
<center><h1>404 No Such Service</h1></center>
</body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 34.199.47.233:443 · tb-contentful-api.thebump.com

2025-12-22 09:10

HTTP/1.1 404 Not Found
Server: awselb/2.0
Date: Mon, 22 Dec 2025 09:10:58 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 156
Connection: close

Page title: 404 No Such Service

<!DOCTYPE html>
<html>
<head><title>404 No Such Service</title></head>
<body bgcolor="white">
<center><h1>404 No Such Service</h1></center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

admin-shop.thebump.comavatars.thebump.comcore-api.thebump.comevents.thebump.comk8s-registry-api.thebump.comk8s-www.thebump.comm.thebump.comperks-api.thebump.complanning.thebump.compreschooler.thebump.comregistry.thebump.comsearch.thebump.comshop.thebump.comstatic.thebump.comtb-babynames-api.thebump.comtb-contentful-api.thebump.comtb-member-api.thebump.comthebump.comuw.thebump.comwww.thebump.com

Fingerprint:

fe98c3e829f39f8db5e3c4db7f2c1bd7968b3c0cc0233ff37eb1370eff7bbd46

CN:

www.thebump.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-07 11:43

Not after:

2026-02-05 11:43

*.rdmhacjfng390.us-east-1.cs.amazonlightsail.com

Fingerprint:

80c88174024cbad28a7e55d42817d2532ba6af60afd71f16d5f184d6a56c5237

CN:

*.rdmhacjfng390.us-east-1.cs.amazonlightsail.com

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M04

Not before:

2025-12-07 00:00

Not after:

2027-01-05 23:59

Domain summary

tb-contentful-api.thebump.com 10

1 recorded

IP summary

2.16.183.6 1 2a02:26f0:3500:18::1724:a296 1 2.16.183.9 1 2a02:26f0:3500:18::1724:a29e 1 34.199.47.233 1

5 recorded

Domain tb-contentful-api.thebump.com

Germany

Software information

Swagger API description is publicly available

*.rdmhacjfng390.us-east-1.cs.amazonlightsail.com

Domain summary

IP summary