LeakIX - Host v-api.staging.lightbeans.com

Domain v-api.staging.lightbeans.com

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.248.244.96
Domain: v-api.staging.lightbeans.com
Port: 80
URL: http://v-api.staging.lightbeans.com

First seen 2025-11-22 01:03
Last seen 2026-01-09 16:18
Open for 48 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1d83dc3bfd83dc3bfd83dc3bfd83dc3bfd83dc3bfd83dc3bf
```
Public Swagger UI/API detected at path: /swagger/swagger-ui.html
```
  Found on 2026-01-09 16:18
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 35.71.179.82
Domain: v-api.staging.lightbeans.com
Port: 443
URL: https://v-api.staging.lightbeans.com

First seen 2025-11-22 01:03
Last seen 2026-01-09 16:18
Open for 48 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1d83dc3bfd83dc3bfd83dc3bfd83dc3bfd83dc3bfd83dc3bf
```
Public Swagger UI/API detected at path: /swagger/swagger-ui.html
```
  Found on 2026-01-09 16:18
Create report

Open service 13.248.244.96:80 · v-api.staging.lightbeans.com

2026-01-09 16:18

HTTP/1.1 200 OK
Content-Length: 21
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 16:19:45 GMT
Etag: W/"15-IyfVlmlIrryFONEQD3KHP5u5FMU"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=x60raWMjJjUZiGOVLdzeOPz1c1%2BfjTooC%2BWiksOdIDk%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767975585"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=x60raWMjJjUZiGOVLdzeOPz1c1%2BfjTooC%2BWiksOdIDk%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767975585"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Viewer API is working

Found 2026-01-09 by HttpPlugin

Create report

Open service 35.71.179.82:443 · v-api.staging.lightbeans.com

2026-01-09 16:18

HTTP/1.1 200 OK
Content-Length: 21
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 16:18:44 GMT
Etag: W/"15-IyfVlmlIrryFONEQD3KHP5u5FMU"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=AreF6%2FHTeuruTg5qZmxbX6NB4i2Y34fwcsfzOg7qvUQ%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767975524"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=AreF6%2FHTeuruTg5qZmxbX6NB4i2Y34fwcsfzOg7qvUQ%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767975524"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Viewer API is working

Found 2026-01-09 by HttpPlugin

Create report

Open service 35.71.179.82:443 · v-api.staging.lightbeans.com

2026-01-02 21:53

HTTP/1.1 200 OK
Content-Length: 21
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 21:53:15 GMT
Etag: W/"15-IyfVlmlIrryFONEQD3KHP5u5FMU"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Eliq8AyrtWSLIT8JnFnKuP5hOlgH7dNpXfUIy4spjbE%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767390795"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Eliq8AyrtWSLIT8JnFnKuP5hOlgH7dNpXfUIy4spjbE%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767390795"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Viewer API is working

Found 2026-01-02 by HttpPlugin

Create report

Open service 13.248.244.96:80 · v-api.staging.lightbeans.com

2026-01-02 21:53

HTTP/1.1 200 OK
Content-Length: 21
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 21:53:16 GMT
Etag: W/"15-IyfVlmlIrryFONEQD3KHP5u5FMU"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=6p4Pwfp8xUzMVDWCewXzaHJt7Q17PRBk%2BzigIpO%2Fm74%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767390796"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=6p4Pwfp8xUzMVDWCewXzaHJt7Q17PRBk%2BzigIpO%2Fm74%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767390796"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Viewer API is working

Found 2026-01-02 by HttpPlugin

Create report

Open service 13.248.244.96:80 · v-api.staging.lightbeans.com

2025-12-22 21:35

HTTP/1.1 200 OK
Content-Length: 21
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 21:35:22 GMT
Etag: W/"15-IyfVlmlIrryFONEQD3KHP5u5FMU"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2BYWd3nf%2FvLtXO3gjnoyyzRiuxbhaz2w%2Fr3akV4BdevM%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766439322"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2BYWd3nf%2FvLtXO3gjnoyyzRiuxbhaz2w%2Fr3akV4BdevM%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766439322"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Viewer API is working

Found 2025-12-22 by HttpPlugin

Create report

Open service 35.71.179.82:443 · v-api.staging.lightbeans.com

2025-12-22 21:35

HTTP/1.1 200 OK
Content-Length: 21
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 21:35:19 GMT
Etag: W/"15-IyfVlmlIrryFONEQD3KHP5u5FMU"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=rRCD%2FHB0%2FCHbjjED8wl5kpxQSWIVxfnwqf38oyaOhwg%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766439319"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=rRCD%2FHB0%2FCHbjjED8wl5kpxQSWIVxfnwqf38oyaOhwg%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766439319"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Viewer API is working

Found 2025-12-22 by HttpPlugin

Create report

Open service 35.71.179.82:443 · v-api.staging.lightbeans.com

2025-12-20 20:49

HTTP/1.1 200 OK
Content-Length: 21
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 20:49:10 GMT
Etag: W/"15-IyfVlmlIrryFONEQD3KHP5u5FMU"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=TxJsyFWMvDvyTIwzRXMD0qfOyuAAIFbkKf6oU5P9n6Q%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766263750"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=TxJsyFWMvDvyTIwzRXMD0qfOyuAAIFbkKf6oU5P9n6Q%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766263750"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Viewer API is working

Found 2025-12-20 by HttpPlugin

Create report

Open service 13.248.244.96:80 · v-api.staging.lightbeans.com

2025-12-20 20:49

HTTP/1.1 200 OK
Content-Length: 21
Content-Type: text/html; charset=utf-8
Date: Sat, 20 Dec 2025 20:49:13 GMT
Etag: W/"15-IyfVlmlIrryFONEQD3KHP5u5FMU"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2Fbu%2B3aJchkqa0JsWXSPCwgfs8%2F4k8S8%2Foe8ixkZgYQw%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766263753"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2Fbu%2B3aJchkqa0JsWXSPCwgfs8%2F4k8S8%2Foe8ixkZgYQw%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766263753"
Server: Heroku
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


Viewer API is working

Found 2025-12-20 by HttpPlugin

Create report

v-api.staging.lightbeans.com

Fingerprint:

9df81f31903f4f49e291f43f27bf382c8f111ce41ba33ca339a27966e3fcccfa

CN:

v-api.staging.lightbeans.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-11-22 00:05

Not after:

2026-02-20 00:05

Domain summary

v-api.staging.lightbeans.com 9

1 recorded

IP summary

13.248.244.96 1 35.71.179.82 1

2 recorded

Domain v-api.staging.lightbeans.com

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

v-api.staging.lightbeans.com

Domain summary

IP summary