Domain api-staging.x4tarif.com
The Netherlands
Software information
Kestrel
tcp/443
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-12-20 08:24
Last seen 2026-02-09 17:26
Open for 51 days-
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532cPublic Swagger UI/API detected at path: /swagger/index.html
Found on 2026-02-09 17:26 -
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549653bdf2bd3ac03771289d44eab7770eaaf6beb3bPublic Swagger UI/API detected at path: /swagger/index.html - sample paths: DELETE /ContentManagement/Data/{key}/{language} DELETE /ContentManagement/Templates/File/{key}/{language} DELETE /ContentManagement/Templates/{key}/{language} GET /Account/RequestResetPassword GET /Account/user GET /Admin GET /ContentManagement/Data/{key} GET /ContentManagement/Templates GET /ContentManagement/Templates/{key} GET /ContentManagement/{scope}/Data GET /Data/Schema/{key} GET /Data/Schema/{scheduleId}/{key} GET /Data/Values/{key} GET /Data/Values/{scheduleId}/{key} GET /Data/{scope}/Model/{modelId} GET /Data/{scope}/Schema GET /Data/{scope}/Schema/{scheduleId} GET /Data/{scope}/Values/{scheduleId} GET /Exchange GET /Global/AstagGu GET /Global/Countries GET /Global/Currencies GET /Global/Languages GET /Global/{countryCode}/Search GET /Home GET /Organizations GET /Organizations/Info GET /Organizations/Info/{id} GET /TariffModel GET /TariffModel/Schema/{modelId} GET /TariffModel/{modelId} GET /TariffSchedules GET /TariffSchedules/Simple GET /TariffSchedules/{scheduleId} GET /TariffSchedules/{scheduleId}/{key} GET /TariffTemplates GET /Users GET /Users/Info GET /Users/Info/{id} GET /Users/Invitations POST /Account/Invite POST /Account/Login POST /Account/Register/{tokenString} POST /Admin/Init POST /ContentManagement/{templateKey}/{languageKey}/Upload POST /TariffModel/{modelId}/Calculate POST /TariffSchedules/{scheduleId}/Calculate PUT /Account/ResetPassword PUT /Organizations/Upload PUT /Organizations/{id} PUT /TariffSchedules/{id} PUT /TariffTemplates/Import/{templateKey} PUT /Users/Activate/{id} PUT /Users/Deactivate/{id} PUT /Users/Upload PUT /Users/{id}Found on 2026-01-23 11:23
-
-
Open service 20.50.2.7:443 ยท api-staging.x4tarif.com
2026-01-23 11:23
HTTP/1.1 404 Not Found Content-Length: 0 Connection: close Date: Fri, 23 Jan 2026 11:24:12 GMT Server: Kestrel Request-Context: appId=cid-v1:9b7de3a7-a5c8-48fd-a38c-71a602d7fa50
Found 2026-01-23 by HttpPluginCreate report