LeakIX - Host api.smsalmak.com.tr

Domain api.smsalmak.com.tr

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.164.162
Domain: api.smsalmak.com.tr
Port: 443
URL: https://api.smsalmak.com.tr

First seen 2025-10-16 04:13
Last seen 2026-02-05 04:01
Open for 111 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd110b5863cbd85ff8cde75d183537ed33ed503a34704855729
```
Public Swagger UI/API detected at path: /api-docs/swagger.json - sample paths:
DELETE /v1/buy/{id}/ban
DELETE /v1/buy/{id}/cancel
GET /v1/countries
GET /v1/platforms
GET /v1/recreate/{id}
GET /v1/services
GET /v1/transactions/{id}
POST /v1/buy
```
  Found on 2026-02-05 04:01
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.21.74.237
Domain: api.smsalmak.com.tr
Port: 80
URL: http://api.smsalmak.com.tr

First seen 2025-10-16 04:13
Last seen 2026-02-05 04:01
Open for 111 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd110b5863cbd85ff8cde75d183537ed33ed503a34704855729
```
Public Swagger UI/API detected at path: /api-docs/swagger.json - sample paths:
DELETE /v1/buy/{id}/ban
DELETE /v1/buy/{id}/cancel
GET /v1/countries
GET /v1/platforms
GET /v1/recreate/{id}
GET /v1/services
GET /v1/transactions/{id}
POST /v1/buy
```
  Found on 2026-02-05 04:01
Create report

Open service 172.67.164.162:443 · api.smsalmak.com.tr

2026-01-23 14:19

HTTP/1.1 404 Not Found
Date: Fri, 23 Jan 2026 14:19:25 GMT
Content-Type: application/json
Content-Length: 22
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: *
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=svU6%2B6rBv8qTMKj8FyPlNxLTKIUJkXV1%2BrwMT4siXWpQiDwnyumXFGYZQcbzARc3sKXgz5RHWoKPr0uqC%2Fc2H8%2BbQOFXG0upjQI9yBjrtI%2FM0iM%3D"}]}
CF-RAY: 9c27ed0dbd7a989c-FRA
alt-svc: h3=":443"; ma=86400


{"message":"notFound"}

Found 2026-01-23 by HttpPlugin

Create report

Open service 172.67.164.162:443 · api.smsalmak.com.tr

2026-01-09 17:34

HTTP/1.1 404 Not Found
Date: Fri, 09 Jan 2026 17:34:07 GMT
Content-Type: application/json
Content-Length: 22
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: *
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=8,cfOrigin;dur=277
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=jX6obO8op%2B7qZWIHoV3yGf65mPP%2Bvso5HyOJYOFSnaBTGNNczBuNd5PT%2Fkt2dM5xOCFSA2sfy8%2FX0mPrW6%2FJXT%2BxFbfAcGzXEY58n6QrkABZBWQ%3D"}]}
CF-RAY: 9bb5af00df0ee702-YYZ
alt-svc: h3=":443"; ma=86400


{"message":"notFound"}

Found 2026-01-09 by HttpPlugin

Create report

Open service 104.21.74.237:80 · api.smsalmak.com.tr

2026-01-09 00:54

HTTP/1.1 404 Not Found
Date: Fri, 09 Jan 2026 00:54:54 GMT
Content-Type: application/json
Content-Length: 22
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: *
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=13,cfOrigin;dur=145
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Z6XNhwOnNxBFc%2Bcf8hprjmWI8ptMx0RrK7JUzQEJE0ULzWmkRzvWeVrwjsi6F%2B0G7L4qX9jNYL1NmB2SdJU%2BUuFGszWmFDRtib4d1EsOsONfczk%3D"}]}
CF-RAY: 9baff74ffb97964a-YYZ
alt-svc: h3=":443"; ma=86400


{"message":"notFound"}

Found 2026-01-09 by HttpPlugin

Create report

Open service 104.21.74.237:80 · api.smsalmak.com.tr

2026-01-01 23:45

HTTP/1.1 404 Not Found
Date: Thu, 01 Jan 2026 23:45:19 GMT
Content-Type: application/json
Content-Length: 22
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: *
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=5bTGF0WqqVL7btKtDe2c0rUZJ5raP79qHLcpaO1c6nWNYUMww43wPPrsYisDnAx01wA77Tp8D5CtGMlLwF8ozRvudlNowAY15MDWm0bWuZtOMI0%3D"}]}
CF-RAY: 9b75e3c21e59d9d6-FRA
alt-svc: h3=":443"; ma=86400


{"message":"notFound"}

Found 2026-01-01 by HttpPlugin

Create report

Open service 104.21.74.237:80 · api.smsalmak.com.tr

2025-12-22 08:28

HTTP/1.1 404 Not Found
Date: Mon, 22 Dec 2025 08:28:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 22
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: *
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Q5ZnNUfPKWB2fAUYniqvipFfTqf4b4Fz39%2F7CyewWj4HiPxkWX88XeuVIZeR5WqduT%2FJyc4z0Zdx0xxmkYQxzILrhBOvlEiSh3n7fst0YKk0kvk%3D"}]}
CF-RAY: 9b1e3ea5cffb12fa-AMS
alt-svc: h3=":443"; ma=86400


{"message":"notFound"}

Found 2025-12-22 by HttpPlugin

Create report

smsalmak.com.tr*.smsalmak.com.tr

Fingerprint:

35b53bd83c83758579ca76fe79626b45e8cebe3dfdc47ea7b0236e1735a3105d

CN:

smsalmak.com.tr

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-12-16 06:40

Not after:

2026-03-16 07:38

Domain summary

api.smsalmak.com.tr 6

1 recorded

IP summary

172.67.164.162 2 104.21.74.237 1

2 recorded

Domain api.smsalmak.com.tr

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Create report

Create report

Create report

Create report

Create report

smsalmak.com.tr*.smsalmak.com.tr

Domain summary

IP summary