AkamaiGHost
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354989a81d26552aa9655531d4b52248ce606672ed53
Public Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /Branch/GetAllBranches GET /Country/GetAllCountries GET /Customer/GetAllCustomers GET /Customer/GetCustomersPriviliges GET /Policy/GetLOBs GET /Request/GetRequestAttachmentBase64 GET /Request/GetRequestAttachments GET /Request/GetRequestTypes GET /api/Report/GetSOALevels GET /api/User/GenerateAuthenticatorQrCode GET /api/User/GetAllUsers GET /api/User/GetLogs GET /api/User/SendOTP POST /Customer/InsertCustomers POST /Email/SendEmail POST /Home/GetCardCounts POST /Logger/LogCritical POST /Logger/LogError POST /Logger/LogInformation POST /Logger/LogWarning POST /Policy/GetPoliciesAttachmentBase64 POST /Policy/GetPoliciesAttachments POST /Policy/GetPoliciesByPrivileges POST /Policy/GetPoliciesTreeView POST /Policy/GetPolicyDetails POST /Request/AddRequest POST /Request/AddRequestAttachments POST /Request/GetRequestTemplate POST /Request/GetRequestsByPolicyId POST /Request/GetRequestsByPrivileges POST /api/Document/GetFinancialDocumentAttachment POST /api/Document/GetFinancialDocumentsData POST /api/Document/GetPortalDocumentAttachment POST /api/Document/GetPortalDocumentsData POST /api/Report/GetAttachmentBase64 POST /api/Report/GetInsurerInvoiceReportData POST /api/Report/GetStatementOfAccountReportData POST /api/User/Authenticate POST /api/User/DeleteUser POST /api/User/EnableTwoFactorAuth POST /api/User/GetUsersByPrivileges POST /api/User/LockUser POST /api/User/Logout POST /api/User/Refresh POST /api/User/RegisterUser POST /api/User/ResetAuthenticator POST /api/User/ResetPassword POST /api/User/SendResetPasswordEmail POST /api/User/UnlockUser POST /api/User/UpdateUser POST /api/User/ValidateOTP POST /api/User/VerifyTwoFactorCode
Open service 95.100.110.14:443 · acecpbe.ace-gallagher.com
2026-01-08 21:29
HTTP/1.1 403 Forbidden Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 383 Expires: Thu, 08 Jan 2026 21:29:25 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 21:29:25 GMT Connection: close Strict-Transport-Security: max-age=15768000 Page title: Access Denied <HTML><HEAD> <TITLE>Access Denied</TITLE> </HEAD><BODY> <H1>Access Denied</H1> You don't have permission to access "http://acecpbe.ace-gallagher.com/" on this server.<P> Reference #18.10d91102.1767907765.587586b5 <P>https://errors.edgesuite.net/18.10d91102.1767907765.587586b5</P> </BODY> </HTML>
Open service 95.100.110.14:443 · acecpbe.ace-gallagher.com
2026-01-01 21:40
HTTP/1.1 403 Forbidden Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 383 Expires: Thu, 01 Jan 2026 21:40:53 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 01 Jan 2026 21:40:53 GMT Connection: close Strict-Transport-Security: max-age=15768000 Page title: Access Denied <HTML><HEAD> <TITLE>Access Denied</TITLE> </HEAD><BODY> <H1>Access Denied</H1> You don't have permission to access "http://acecpbe.ace-gallagher.com/" on this server.<P> Reference #18.10d91102.1767303653.e30339b1 <P>https://errors.edgesuite.net/18.10d91102.1767303653.e30339b1</P> </BODY> </HTML>