LeakIX - Host api.sportifyapp.team

Domain api.sportifyapp.team

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.26.2.241
Domain: api.sportifyapp.team
Port: 443
URL: https://api.sportifyapp.team

First seen 2025-11-04 10:44
Last seen 2026-01-09 19:41
Open for 66 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1a8bcc6e5b2036cc076611ccc7a13bf0aa6daaea03f47587f
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
GET /public/email-alias/confirm
GET /public/email/confirm
GET /public/profile
GET /v1/calendars/feed.ics
POST /billing/callback/{id}/acknowledge
POST /public/login/acknowledge
POST /v1/protected/data/import/schedule
POST /v1/protected/data/import/users
POST /v1/protected/file-uploads
POST /v1/protected/push-notification/userId/{userId}
POST /v1/protected/users/group-identities
```
  Found on 2026-01-09 19:41
Create report

Open service 104.26.2.241:443 · api.sportifyapp.team

2026-01-09 19:41

HTTP/1.1 404 Not Found
Date: Fri, 09 Jan 2026 19:42:01 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
access-control-allow-credentials: true
access-control-allow-headers: content-type, access-control-allow-origin, authorization
access-control-allow-methods: GET, POST, OPTIONS
vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VI2%2F0c3vDZeGyRnD%2FLpj7%2BccksD%2BxFaKcYALIup%2F9aHY1G1Gw2BW9KL6347axx9dSdhgn7%2BOvlNQr7nlnSIyEqU%2FsZblErvWrMZbX7b0gU2o%2Bd0%3D"}]}
Server: cloudflare
CF-RAY: 9bb66a5a8a228ea8-AMS


{"timestamp":"2026-01-09T19:42:01.426+00:00","status":404,"error":"Not Found","path":"/"}

Found 2026-01-09 by HttpPlugin

Create report

Open service 2606:4700:20::681a:2f1:80 · api.sportifyapp.team

2026-01-03 19:07

HTTP/1.1 301 Moved Permanently
Date: Sat, 03 Jan 2026 19:07:12 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 17
Connection: close
Location: https://api.sportifyapp.team/
Vary: Accept-Encoding
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=W2qy00Fr8y1KHU5xwn7xq9%2BsyexN5QTG9ilaqb4WRgm68yw1bfqOCSwSzVCL0OlcsdJHaA6K8Gmp2s0AgcBeRX2389Jaf507YMHQOxjto7Alaur0wwwSh7AhKtv0EI0%3D"}]}
Server: cloudflare
CF-RAY: 9b84c716ccb1ca12-SIN


Moved Permanently

Found 2026-01-03 by HttpPlugin

Create report

Open service 104.26.2.241:80 · api.sportifyapp.team

2026-01-03 19:07

HTTP/1.1 301 Moved Permanently
Date: Sat, 03 Jan 2026 19:07:11 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 17
Connection: close
Location: https://api.sportifyapp.team/
Vary: Accept-Encoding
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=caWWFe8nRGXBP8Ztnlc1OdTURBCGIRCkUE%2BwaV1Svm0k2lWhDlAM3ekbNCGBgwAiC9wCZ%2Fgqz2vMfs3sksytQESnlrFBJZ55%2Bwk02ZXGwWOQXL0%3D"}]}
Server: cloudflare
CF-RAY: 9b84c713cca1f8d2-SIN


Moved Permanently

Found 2026-01-03 by HttpPlugin

Create report

Open service 2606:4700:20::681a:2f1:8443 · api.sportifyapp.team

2026-01-03 19:07

HTTP/1.1 522 <none>
Date: Sat, 03 Jan 2026 19:07:31 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9b84c717d9b53a05-YYZ


error code: 522

Found 2026-01-03 by HttpPlugin

Create report

Open service 104.26.3.241:8443 · api.sportifyapp.team

2026-01-03 19:07

HTTP/1.1 522 <none>
Date: Sat, 03 Jan 2026 19:07:31 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9b84c717dca59a3b-FRA


error code: 522

Found 2026-01-03 by HttpPlugin

Create report

Open service 2606:4700:20::681a:3f1:80 · api.sportifyapp.team

2026-01-03 19:07

HTTP/1.1 301 Moved Permanently
Date: Sat, 03 Jan 2026 19:07:11 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 17
Connection: close
Location: https://api.sportifyapp.team/
Vary: Accept-Encoding
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=k%2BjL7wYOGH41vNV0LHKpIgd3k%2Bm60EM3Vx%2FCf6%2BhowOURS6PEmIwnMlT9Xg9IN6mBQDKoQmvdLBVynLA2ZFtoCvhRnL6TP3nRv%2FGakSc%2F%2FDavePIirmRJ0BquXK3"}]}
Server: cloudflare
CF-RAY: 9b84c711cd036973-FRA


Moved Permanently

Found 2026-01-03 by HttpPlugin

Create report

Open service 104.26.3.241:80 · api.sportifyapp.team

2026-01-03 19:07

HTTP/1.1 301 Moved Permanently
Date: Sat, 03 Jan 2026 19:07:11 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 17
Connection: close
Location: https://api.sportifyapp.team/
Vary: Accept-Encoding
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=YEGJBcFPntf2HuhFByTUGaXnKbEUwUW09QESQBCTc6alOe80LJZhZFXWrSeVQGyuVVSshmgZnLKHnI5Pak7HFU5llS6qPmnEhmc3ZVqxVWXHl2o%3D"}]}
Server: cloudflare
CF-RAY: 9b84c711a9ce385e-LHR


Moved Permanently

Found 2026-01-03 by HttpPlugin

Create report

Open service 172.67.74.113:443 · api.sportifyapp.team

2026-01-03 19:07

HTTP/1.1 404 Not Found
Date: Sat, 03 Jan 2026 19:07:11 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
access-control-allow-credentials: true
access-control-allow-headers: content-type, access-control-allow-origin, authorization
access-control-allow-methods: GET, POST, OPTIONS
vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fl8HsOBZRIDba9wAJQrbFMKiMEOMmOxAExgK3jhMKtt%2BYu1B%2BPDZ%2FwsCDItKTjAYAjqEWoG0F12O65E3S8weCBiXz3jBL9gq16dka2GWcVv2LuA%3D"}]}
Server: cloudflare
CF-RAY: 9b84c711de86cdc8-LHR


{"timestamp":"2026-01-03T19:07:11.063+00:00","status":404,"error":"Not Found","path":"/"}

Found 2026-01-03 by HttpPlugin

Create report

Open service 2606:4700:20::681a:3f1:443 · api.sportifyapp.team

2026-01-03 19:07

HTTP/1.1 404 Not Found
Date: Sat, 03 Jan 2026 19:07:11 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
access-control-allow-credentials: true
access-control-allow-headers: content-type, access-control-allow-origin, authorization
access-control-allow-methods: GET, POST, OPTIONS
vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=6mIQRB83no5eCZGLGzfFrDh6vZLlfa3XIOxgOMSHTlbwTV1l2ib660ulPFGgjGIxK3W89vJcesHb1l%2FONHDxHrSIOlaNvC%2Bnw%2BxyI%2F5IUfPMvY20oj%2BZT2uCyiRS"}]}
Server: cloudflare
CF-RAY: 9b84c711ef435c56-FRA


{"timestamp":"2026-01-03T19:07:11.103+00:00","status":404,"error":"Not Found","path":"/"}

Found 2026-01-03 by HttpPlugin

Create report

Open service 104.26.2.241:443 · api.sportifyapp.team

2026-01-03 19:07

HTTP/1.1 404 Not Found
Date: Sat, 03 Jan 2026 19:07:11 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
access-control-allow-credentials: true
access-control-allow-headers: content-type, access-control-allow-origin, authorization
access-control-allow-methods: GET, POST, OPTIONS
vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Whkd2RXA3I5rvHBcBT5VFZeyJW9HfHpymkBfzOtGIsDA6Rt1mZrGgDbe5myWHKCZRg0XdNktZGOTmF9SKweBQCSwaMRlIJv718nDxjRg137pRlg%3D"}]}
Server: cloudflare
CF-RAY: 9b84c712da12a67e-EWR


{"timestamp":"2026-01-03T19:07:11.394+00:00","status":404,"error":"Not Found","path":"/"}

Found 2026-01-03 by HttpPlugin

Create report

Open service 104.26.3.241:443 · api.sportifyapp.team

2026-01-03 19:07

HTTP/1.1 404 Not Found
Date: Sat, 03 Jan 2026 19:07:11 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
access-control-allow-credentials: true
access-control-allow-headers: content-type, access-control-allow-origin, authorization
access-control-allow-methods: GET, POST, OPTIONS
vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=zCC%2BzO%2B7OciQ3wTjHbGGdyTLe%2FIvRp1QFFClLKBrDtfw3x7cyLuMvLW54QYeTlClVaqtUj5ZcLfH63l0v7Zz55hdyioxllFytuDg2KxeU5SleAo%3D"}]}
Server: cloudflare
CF-RAY: 9b84c713ef2b33dc-SJC


{"timestamp":"2026-01-03T19:07:11.714+00:00","status":404,"error":"Not Found","path":"/"}

Found 2026-01-03 by HttpPlugin

Create report

Open service 2606:4700:20::681a:2f1:443 · api.sportifyapp.team

2026-01-03 19:07

HTTP/1.1 404 Not Found
Date: Sat, 03 Jan 2026 19:07:10 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
access-control-allow-credentials: true
access-control-allow-headers: content-type, access-control-allow-origin, authorization
access-control-allow-methods: GET, POST, OPTIONS
vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=MDMDFDJkL2HtaeASdUhIbFEfyUyCSiJWKRO28nUiRV7STmi0ElxvhOjNBBzawATU9Jm0fx31Q2SoVvDgzpSd9aCm7c%2FfJKQ%2FpSr0uEo83P0UBZ2VeurQW60QuyU7Rh8%3D"}]}
Server: cloudflare
CF-RAY: 9b84c711898a7757-AMS


{"timestamp":"2026-01-03T19:07:10.981+00:00","status":404,"error":"Not Found","path":"/"}

Found 2026-01-03 by HttpPlugin

Create report

Open service 2606:4700:20::ac43:4a71:8443 · api.sportifyapp.team

2026-01-03 19:07

HTTP/1.1 522 <none>
Date: Sat, 03 Jan 2026 19:07:31 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9b84c717291cfb8d-AMS


error code: 522

Found 2026-01-03 by HttpPlugin

Create report

Open service 104.26.2.241:8443 · api.sportifyapp.team

2026-01-03 19:07

HTTP/1.1 522 <none>
Date: Sat, 03 Jan 2026 19:07:31 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9b84c7172baed259-FRA


error code: 522

Found 2026-01-03 by HttpPlugin

Create report

Open service 172.67.74.113:80 · api.sportifyapp.team

2026-01-03 19:07

HTTP/1.1 301 Moved Permanently
Date: Sat, 03 Jan 2026 19:07:10 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 17
Connection: close
Location: https://api.sportifyapp.team/
Vary: Accept-Encoding
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Ba1ZlzLPyH9oTLPEnYN6ghq6m5a2B72zCfZYk6dJApUoakpeRT0MUrXy8Fblx5t0K1vO2UJtMiWabaRlOvhsm4Jbho9%2BMS6HgRgZs0xfDj8%2F9Sg%3D"}]}
Server: cloudflare
CF-RAY: 9b84c71088b294c9-LHR


Moved Permanently

Found 2026-01-03 by HttpPlugin

Create report

Open service 2606:4700:20::681a:3f1:8443 · api.sportifyapp.team

2026-01-03 19:07

HTTP/1.1 522 <none>
Date: Sat, 03 Jan 2026 19:07:31 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9b84c71689f6dbdc-FRA


error code: 522

Found 2026-01-03 by HttpPlugin

Create report

Open service 2606:4700:20::ac43:4a71:80 · api.sportifyapp.team

2026-01-03 19:07

HTTP/1.1 301 Moved Permanently
Date: Sat, 03 Jan 2026 19:07:10 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 17
Connection: close
Location: https://api.sportifyapp.team/
Vary: Accept-Encoding
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=z6HRv%2BrfVwN9yfkENnEyjj3acul3pUoUnNrFH2U41vsP8n7S7xx7qnlQFv6QX2sJqnTYGEXEOJo1b2dIsccQQEqBNmRmoPBcuRKQ5mov91vCbQDOVYl6ppzI%2FjesdnM%3D"}]}
Server: cloudflare
CF-RAY: 9b84c710789b199e-FRA


Moved Permanently

Found 2026-01-03 by HttpPlugin

Create report

Open service 104.26.2.241:443 · api.sportifyapp.team

2026-01-02 05:09

HTTP/1.1 404 Not Found
Date: Fri, 02 Jan 2026 05:09:44 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
access-control-allow-credentials: true
access-control-allow-headers: content-type, access-control-allow-origin, authorization
access-control-allow-methods: GET, POST, OPTIONS
vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=k95MDx9EdNL156JpbayPfIy8suldC8OEeQcvVlvnyk3RKdyCopEwRD2TGvJOCLi4JVGdV3DxJ6GL3YJX8jky0EGNR1b36JpPNyIDbjSAZREwDJk%3D"}]}
Server: cloudflare
CF-RAY: 9b77bef46c555e73-EWR


{"timestamp":"2026-01-02T05:09:43.987+00:00","status":404,"error":"Not Found","path":"/"}

Found 2026-01-02 by HttpPlugin

Create report

Open service 104.26.2.241:443 · api.sportifyapp.team

2025-12-22 13:49

HTTP/1.1 404 Not Found
Date: Mon, 22 Dec 2025 13:49:03 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
access-control-allow-credentials: true
access-control-allow-headers: content-type, access-control-allow-origin, authorization
access-control-allow-methods: GET, POST, OPTIONS
vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=0MBu93Jqh01r7%2BZ%2FNDbz2BbJ7qrFLMQW3tGWXW%2Fs80WRVckxzGN2fXgP8U5qNy5WJW1uZ%2FXBEptMkWKB4iYhsqll332TUF6JJmHBLfhoc3fNBAE%3D"}]}
Server: cloudflare
CF-RAY: 9b20148fcd4a0b7f-AMS


{"timestamp":"2025-12-22T13:49:03.385+00:00","status":404,"error":"Not Found","path":"/"}

Found 2025-12-22 by HttpPlugin

Create report

Open service 104.26.2.241:443 · api.sportifyapp.team

2025-12-20 13:22

HTTP/1.1 404 Not Found
Date: Sat, 20 Dec 2025 13:22:52 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
access-control-allow-credentials: true
access-control-allow-headers: content-type, access-control-allow-origin, authorization
access-control-allow-methods: GET, POST, OPTIONS
vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=S8h2lpeBnhm1Z49B8wx%2Fy%2F9XgXK5kk4GDlTpGT2qesMjLm7ZfHjLCrIQOfvXhsbYdluHYubgBsQZ0Jam7gvcA9ukS0ekcDRA4h3EAWGGCq6Z25c%3D"}]}
Server: cloudflare
CF-RAY: 9b0f73757a96afe4-SIN


{"timestamp":"2025-12-20T13:22:52.882+00:00","status":404,"error":"Not Found","path":"/"}

Found 2025-12-20 by HttpPlugin

Create report

sportifyapp.team*.sportifyapp.team

Fingerprint:

4b496ed61449e7a69a6bb9d5b9dc34ffc8a3c67f9ead99d6981968eb1c7a19c0

CN:

sportifyapp.team

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-12-14 10:41

Not after:

2026-03-14 11:40

Domain summary

api.sportifyapp.team 20

1 recorded

IP summary

104.26.2.241 1 2606:4700:20::681a:2f1 1 104.26.3.241 1 2606:4700:20::681a:3f1 1 172.67.74.113 1 2606:4700:20::ac43:4a71 1

6 recorded

Domain api.sportifyapp.team

Software information

Swagger API description is publicly available

sportifyapp.team*.sportifyapp.team

Domain summary

IP summary