LeakIX - Host api.10spot.app

Domain api.10spot.app

United States

GOOGLE

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 142.251.141.83
Domain: stage.api.10spot.app
Port: 80
URL: http://stage.api.10spot.app

First seen 2025-10-16 01:31
Last seen 2026-02-05 04:30
Open for 112 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6751f3f7e4dfa79e3f7bffddf

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/campaigns/{campaignID}
GET /v1/campaigns/{campaignID}/rewards
GET /v1/campaigns/{campaignID}/rewards/{rewardID}
GET /v1/cities
GET /v1/companies/{companyID}
GET /v1/companies/{companyID}/balance
GET /v1/companies/{companyID}/campaigns
GET /v1/companies/{companyID}/transactions
GET /v1/events/search
GET /v1/events/top-picks
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/public/neighborhoods/{slug}/nearby
GET /v1/public/places/{placeSlug}/vouchers
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/me/birthday
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/campaigns/{campaignID}/rewards/batch
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/recommended-items/{id}/like
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
POST /v1/webhooks/clerk
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-02-05 04:30

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d63bd7d28f5

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/top-picks
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/public/places/{placeSlug}/vouchers
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-23 01:47

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d636df4a563

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/public/widget/{slug}
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-16 08:04

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d6349c0bab6

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-09 05:53

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43c8a751edcec62eb00485bd3ed03552fcd8ae5277

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2025-12-19 05:40

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43c8a751edcec62eb00485bd3ed03552fcab6d9bb9

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/public/events
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2025-11-28 22:11

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43c8a751edcec62eb00485bd3ed03552fc49ed02bc

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/password-reset/send-link
POST /v1/public/events
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2025-11-16 13:24

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 142.250.201.83
Domain: api.10spot.app
Port: 80
URL: http://api.10spot.app

First seen 2025-10-15 19:11
Last seen 2026-02-07 04:12
Open for 114 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6751f3f7e4dfa79e3f7bffddf

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/campaigns/{campaignID}
GET /v1/campaigns/{campaignID}/rewards
GET /v1/campaigns/{campaignID}/rewards/{rewardID}
GET /v1/cities
GET /v1/companies/{companyID}
GET /v1/companies/{companyID}/balance
GET /v1/companies/{companyID}/campaigns
GET /v1/companies/{companyID}/transactions
GET /v1/events/search
GET /v1/events/top-picks
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/public/neighborhoods/{slug}/nearby
GET /v1/public/places/{placeSlug}/vouchers
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/me/birthday
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/campaigns/{campaignID}/rewards/batch
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/recommended-items/{id}/like
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
POST /v1/webhooks/clerk
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-02-07 04:12

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d63bd7d28f5

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/top-picks
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/public/places/{placeSlug}/vouchers
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-31 14:04

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d636df4a563

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/public/widget/{slug}
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-16 13:12

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d6349c0bab6

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-09 07:17

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43c8a751edcec62eb00485bd3ed03552fcd8ae5277

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2025-12-18 16:55

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43c8a751edcec62eb00485bd3ed03552fcab6d9bb9

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/public/events
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2025-11-28 22:17

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43c8a751edcec62eb00485bd3ed03552fc49ed02bc

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/password-reset/send-link
POST /v1/public/events
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2025-11-22 16:23

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 142.251.141.83
Domain: dev.api.10spot.app
Port: 80
URL: http://dev.api.10spot.app

First seen 2025-10-16 01:30
Last seen 2026-02-07 16:47
Open for 114 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d63bd7d28f5

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/top-picks
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/public/places/{placeSlug}/vouchers
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-02-07 16:47

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d636df4a563

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/public/widget/{slug}
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-23 16:13

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d6349c0bab6

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-09 20:03

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43c8a751edcec62eb00485bd3ed03552fcd8ae5277

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-02 17:54

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43c8a751edcec62eb00485bd3ed03552fc49ed02bc

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/password-reset/send-link
POST /v1/public/events
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2025-11-28 20:23

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 74.125.29.121
Domain: api.10spot.app
Port: 443
URL: https://api.10spot.app

First seen 2025-10-19 22:13
Last seen 2026-01-31 14:04
Open for 103 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d63bd7d28f5

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/top-picks
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/public/places/{placeSlug}/vouchers
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-31 14:04

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d636df4a563

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/public/widget/{slug}
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-16 13:12

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d6349c0bab6

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-09 07:17

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43c8a751edcec62eb00485bd3ed03552fcd8ae5277

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2025-12-18 16:55

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43c8a751edcec62eb00485bd3ed03552fcab6d9bb9

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/public/events
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2025-11-28 11:00

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43c8a751edcec62eb00485bd3ed03552fc49ed02bc

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/password-reset/send-link
POST /v1/public/events
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2025-11-22 12:55

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 142.251.141.83
Domain: dev.api.10spot.app
Port: 443
URL: https://dev.api.10spot.app

First seen 2025-10-26 16:18
Last seen 2026-01-31 20:19
Open for 97 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d63bd7d28f5

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/top-picks
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/public/places/{placeSlug}/vouchers
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-31 20:19

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d636df4a563

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/public/widget/{slug}
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-16 08:11

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d6349c0bab6

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-09 11:35

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43c8a751edcec62eb00485bd3ed03552fcd8ae5277

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-02 03:07

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43c8a751edcec62eb00485bd3ed03552fc49ed02bc

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/password-reset/send-link
POST /v1/public/events
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2025-11-28 09:05

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 142.251.141.83
Domain: stage.api.10spot.app
Port: 443
URL: https://stage.api.10spot.app

First seen 2025-12-11 15:20
Last seen 2026-02-05 04:30
Open for 55 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6751f3f7e4dfa79e3f7bffddf

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/campaigns/{campaignID}
GET /v1/campaigns/{campaignID}/rewards
GET /v1/campaigns/{campaignID}/rewards/{rewardID}
GET /v1/cities
GET /v1/companies/{companyID}
GET /v1/companies/{companyID}/balance
GET /v1/companies/{companyID}/campaigns
GET /v1/companies/{companyID}/transactions
GET /v1/events/search
GET /v1/events/top-picks
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/public/neighborhoods/{slug}/nearby
GET /v1/public/places/{placeSlug}/vouchers
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/me/birthday
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/campaigns/{campaignID}/rewards/batch
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/recommended-items/{id}/like
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
POST /v1/webhooks/clerk
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-02-05 04:30

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d636df4a563

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/public/widget/{slug}
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-16 11:01

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff435b30d2876b2bebe6f0acd2f887b67d6349c0bab6

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/admin/places/{placeID}/voucher-redemptions
GET /v1/admin/sms-subscriber
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/public/neighborhoods
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/admin/sms/send-picks
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2026-01-09 07:42

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43c8a751edcec62eb00485bd3ed03552fcd8ae5277

Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/cities
GET /v1/events/search
GET /v1/events/{eventID}
GET /v1/favorites/place
GET /v1/favorites/place/{placeID}
GET /v1/followers
GET /v1/following
GET /v1/ledger
GET /v1/ledger/{placeID}
GET /v1/neighborhoods
GET /v1/neighborhoods/by-city-state
GET /v1/neighborhoods/{neighborhoodID}/places-to-follow
GET /v1/notifications
GET /v1/notifications/has-new
GET /v1/notifications/unread-count
GET /v1/places
GET /v1/places/{placeID}
GET /v1/places/{placeID}/events
GET /v1/places/{placeID}/recommended-items
GET /v1/places/{placeID}/redeem-history
GET /v1/places/{placeID}/vouchers
GET /v1/places/{placeID}/wallet
GET /v1/public/events
GET /v1/search
GET /v1/search/map
GET /v1/tags/groups
GET /v1/tenspot/messages
GET /v1/tenspot/suggested-places
GET /v1/tenspot/suggested-users
GET /v1/tenspot/wallet
GET /v1/tenspot/{userID}/received-history
GET /v1/tenspot/{userID}/sent-history
GET /v1/users/current
GET /v1/users/push-notifications
GET /v1/users/welcome-message
GET /v1/users/{userID}/recommended-packages
GET /v1/users/{userID}/suggested-users
GET /v1/verify/resend
GET /v1/voucher
GET /v1/voucher/{voucherID}
PATCH /v1/tenspot/{tenspotID}/is-seen
PATCH /v1/users/update
POST /api/sms-signup
POST /v1/accounts/signup
POST /v1/events/feed
POST /v1/events/save
POST /v1/followers/{followedID}
POST /v1/notifications/mark-all-read
POST /v1/password-reset/send-link
POST /v1/reminders
POST /v1/send-ten-suggested/places
POST /v1/send-ten-suggested/users
POST /v1/sms/inbound
POST /v1/sms/send-picks
POST /v1/tenspot
POST /v1/tenspot/redeem
POST /v1/users/delete
POST /v1/users/login
POST /v1/users/push-notifications/test
POST /v1/users/register-device-token
POST /v1/users/signup
POST /v1/users/verify
POST /v1/voucher/{voucherID}/claim
POST /v1/voucher/{voucherID}/redeem
PUT /v1/notifications/{notificationID}/is-new
PUT /v1/notifications/{notificationID}/is-read

Found on 2025-12-19 05:40

Create report

Open service 142.250.186.147:80 · dev.api.10spot.app

2026-01-23 16:13

HTTP/1.1 404 Not Found
content-type: text/plain; charset=utf-8
vary: Origin
x-content-type-options: nosniff
x-cloud-trace-context: 85eaa382fa3243c32e699bb624c7e439;o=1
date: Fri, 23 Jan 2026 16:13:43 GMT
server: Google Frontend
Content-Length: 10
Connection: close


Not Found

Found 2026-01-23 by HttpPlugin

Domain api.10spot.app

United States

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

dev.api.10spot.app

stage.api.10spot.app

api.10spot.app

Domain summary

IP summary