LeakIX - Host app.solaflex.com

Domain app.solaflex.com

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.50
Domain: dev.app.solaflex.com
Port: 443
URL: https://dev.app.solaflex.com

First seen 2026-01-10 12:17
Last seen 2026-02-09 17:40
Open for 30 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 17:40
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.65
Domain: app.solaflex.com
Port: 80
URL: http://app.solaflex.com

First seen 2026-01-10 12:29
Last seen 2026-02-09 08:26
Open for 29 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 08:26
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.65
Domain: app.solaflex.com
Port: 443
URL: https://app.solaflex.com

First seen 2026-01-10 12:29
Last seen 2026-01-16 15:19
Open for 6 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-16 15:19
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.50
Domain: stag.app.solaflex.com
Port: 443
URL: https://stag.app.solaflex.com

First seen 2026-01-10 11:45
Last seen 2026-02-09 18:29
Open for 30 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 18:29
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.50
Domain: test.app.solaflex.com
Port: 443
URL: https://test.app.solaflex.com

First seen 2026-01-10 11:45
Last seen 2026-02-09 18:32
Open for 30 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 18:32
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.50
Domain: test.app.solaflex.com
Port: 80
URL: http://test.app.solaflex.com

First seen 2026-01-10 11:45
Last seen 2026-02-09 18:32
Open for 30 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 18:32
Create report

Open service 20.50.2.50:443 · dev.app.solaflex.com

2026-01-23 13:56

HTTP/1.1 302 Found
Content-Length: 0
Connection: close
Date: Fri, 23 Jan 2026 13:57:30 GMT
Server: Kestrel
Location: /index.html
Strict-Transport-Security: max-age=2592000
Content-Security-Policy: frame-ancestors 'self' https://shop.ceraflex.at https://ceraflex.stag.interad.at https://ceraflex.test.interad.at
X-Correlation-Id: cc7d9f624bf94a3c9c4053076f06cc90

Found 2026-01-23 by HttpPlugin

Create report

Open service 20.50.2.50:443 · stag.app.solaflex.com

2026-01-23 12:59

HTTP/1.1 302 Found
Content-Length: 0
Connection: close
Date: Fri, 23 Jan 2026 12:59:39 GMT
Server: Kestrel
Location: /index.html
Strict-Transport-Security: max-age=2592000
Request-Context: appId=cid-v1:adfdc904-ca84-4571-afde-99e02dd8f08c
Content-Security-Policy: frame-ancestors 'self' https://shop.ceraflex.at https://ceraflex.stag.interad.at https://ceraflex.test.interad.at
X-Correlation-Id: 8f74bdd60f31401a8e46127d542dea66

Found 2026-01-23 by HttpPlugin

Create report

Open service 20.50.2.50:80 · test.app.solaflex.com

2026-01-23 10:19

HTTP/1.1 302 Found
Content-Length: 0
Connection: close
Date: Fri, 23 Jan 2026 10:20:23 GMT
Server: Kestrel
Location: /index.html
Content-Security-Policy: frame-ancestors 'self' https://shop.ceraflex.at https://ceraflex.stag.interad.at https://ceraflex.test.interad.at
X-Correlation-Id: c4eb144400f84eacae6af3661690e157

Found 2026-01-23 by HttpPlugin

Create report

Open service 20.50.2.50:443 · test.app.solaflex.com

2026-01-23 10:19

HTTP/1.1 302 Found
Content-Length: 0
Connection: close
Date: Fri, 23 Jan 2026 10:20:22 GMT
Server: Kestrel
Location: /index.html
Strict-Transport-Security: max-age=2592000
Content-Security-Policy: frame-ancestors 'self' https://shop.ceraflex.at https://ceraflex.stag.interad.at https://ceraflex.test.interad.at
X-Correlation-Id: 88fff7363add401298e2d0459f5e5512

Found 2026-01-23 by HttpPlugin