AkamaiGHost
tcp/80
Microsoft-IIS 10.0
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549293c5c5040a52e36fd856f3686df88b6e39bedc0
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /Auth/login
GET /Auth/logout
GET /api/Api/transactioncomplete/{success}
GET /api/ApplicationConfig
GET /api/Calendar/year/{calendarYear}
GET /api/PublishMarketingCalendar/getLiveCalendar/{retailYear}
GET /api/PublishMarketingCalendar/getProposedCalendar/{retailYear}
GET /api/SandboxCalendar/new_year
GET /api/SandboxCalendar/validate/{year}
GET /api/SandboxCalendar/year/{calendarYear}
GET /api/SandboxCalendar/years
GET /api/TaskAndNotification
GET /api/User
GET /api/calendar/calendardays
GET /api/calendar/getAllFuturePublishedCalendarPhases
GET /api/calendar/getcurrent
GET /api/calendar/retailweeks
GET /api/calendar/transactioncomplete/{success}
GET /api/jobs/transactioncomplete/{success}
GET /api/phaselookup/phases/future
GET /api/phaselookup/transactioncomplete/{success}
POST /api/Api
POST /api/PublishMarketingCalendar/publishCalendar
POST /api/SandboxCalendar/year
POST /api/calendar
POST /api/jobs
POST /api/jobs/calendar/bankholidays
POST /api/jobs/calendar/update
POST /api/jobs/general/applyretentionpolicy
POST /api/phaselookup
PUT /api/SandboxCalendar/cycle
PUT /api/SandboxCalendar/phase
Open service 2.16.204.72:443 · axiomdevcalendar.icelanddev.net
2026-01-23 02:22
HTTP/1.1 302 Moved Temporarily Content-Length: 0 Server: Microsoft-IIS/10.0 Location: https://axiomdevcalendar.icelanddev.net/Account/SignIn/?origin=%2F Request-Context: appId=cid-v1:142239ce-f137-41e3-b8b8-e635b43da551 X-Powered-By: ASP.NET Expires: Fri, 23 Jan 2026 02:22:43 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 23 Jan 2026 02:22:43 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=16 Server-Timing: origin; dur=13 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: upgrade-insecure-requests Server-Timing: ak_p; desc="1769134963513_34610504_1052711709_2901_4742_151_156_-";dur=1
Open service 2.16.204.72:443 · axiomdevcalendar.icelanddev.net
2026-01-10 02:51
HTTP/1.1 302 Moved Temporarily Content-Length: 0 Server: Microsoft-IIS/10.0 Location: https://axiomdevcalendar.icelanddev.net/Account/SignIn/?origin=%2F Request-Context: appId=cid-v1:142239ce-f137-41e3-b8b8-e635b43da551 X-Powered-By: ASP.NET Expires: Sat, 10 Jan 2026 02:51:58 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 10 Jan 2026 02:51:58 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=152 Server-Timing: origin; dur=99 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: upgrade-insecure-requests Server-Timing: ak_p; desc="1768013518474_34610525_325901409_25095_5677_148_185_-";dur=1
Open service 2.16.204.72:80 · axiomdevcalendar.icelanddev.net
2026-01-08 00:04
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://axiomdevcalendar.icelanddev.net/ Expires: Thu, 08 Jan 2026 00:05:11 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 00:05:11 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Content-Security-Policy: upgrade-insecure-requests Server-Timing: ak_p; desc="1767830711680_34610504_123445665_10_4904_82_0_-";dur=1
Open service 2a02:26f0:2780:67::217:e3a0:443 · axiomdevcalendar.icelanddev.net
2026-01-08 00:04
HTTP/1.1 302 Moved Temporarily Content-Length: 0 Server: Microsoft-IIS/10.0 Location: https://axiomdevcalendar.icelanddev.net/Account/SignIn/?origin=%2F Request-Context: appId=cid-v1:142239ce-f137-41e3-b8b8-e635b43da551 X-Powered-By: ASP.NET Expires: Thu, 08 Jan 2026 00:04:33 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 00:04:33 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=187 Server-Timing: origin; dur=15 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: upgrade-insecure-requests Server-Timing: ak_p; desc="1767830673167_34915488_4050804284_20125_3086_80_84_-";dur=1
Open service 2.16.204.93:80 · axiomdevcalendar.icelanddev.net
2026-01-08 00:04
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://axiomdevcalendar.icelanddev.net/ Expires: Thu, 08 Jan 2026 00:05:13 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 00:05:13 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Content-Security-Policy: upgrade-insecure-requests Server-Timing: ak_p; desc="1767830713860_34610525_4220795308_9_5193_17_0_-";dur=1
Open service 2a02:26f0:2780:67::217:e389:80 · axiomdevcalendar.icelanddev.net
2026-01-08 00:04
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://axiomdevcalendar.icelanddev.net/ Expires: Thu, 08 Jan 2026 00:05:13 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 00:05:13 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Content-Security-Policy: upgrade-insecure-requests Server-Timing: ak_p; desc="1767830713816_34915465_49539172_8_3124_12_0_-";dur=1
Open service 2a02:26f0:2780:67::217:e3a0:80 · axiomdevcalendar.icelanddev.net
2026-01-08 00:04
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://axiomdevcalendar.icelanddev.net/ Expires: Thu, 08 Jan 2026 00:05:10 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 00:05:10 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Content-Security-Policy: upgrade-insecure-requests Server-Timing: ak_p; desc="1767830710737_34915488_4050857406_8_3495_1_0_-";dur=1
Open service 2.16.204.93:443 · axiomdevcalendar.icelanddev.net
2026-01-08 00:04
HTTP/1.1 302 Moved Temporarily Content-Length: 0 Server: Microsoft-IIS/10.0 Location: https://axiomdevcalendar.icelanddev.net/Account/SignIn/?origin=%2F Request-Context: appId=cid-v1:142239ce-f137-41e3-b8b8-e635b43da551 X-Powered-By: ASP.NET Expires: Thu, 08 Jan 2026 00:04:34 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 00:04:34 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=15 Server-Timing: origin; dur=46 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: upgrade-insecure-requests Server-Timing: ak_p; desc="1767830673962_34610525_4220693968_6049_5222_83_87_-";dur=1
Open service 2.16.204.72:443 · axiomdevcalendar.icelanddev.net
2026-01-08 00:04
HTTP/1.1 302 Moved Temporarily Content-Length: 0 Server: Microsoft-IIS/10.0 Location: https://axiomdevcalendar.icelanddev.net/Account/SignIn/?origin=%2F Request-Context: appId=cid-v1:142239ce-f137-41e3-b8b8-e635b43da551 X-Powered-By: ASP.NET Expires: Thu, 08 Jan 2026 00:04:34 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 00:04:34 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=224 Server-Timing: origin; dur=45 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: upgrade-insecure-requests Server-Timing: ak_p; desc="1767830673987_34610504_123337066_26871_4872_97_99_-";dur=1
Open service 2a02:26f0:2780:67::217:e389:443 · axiomdevcalendar.icelanddev.net
2026-01-08 00:04
HTTP/1.1 302 Moved Temporarily Content-Length: 0 Server: Microsoft-IIS/10.0 Location: https://axiomdevcalendar.icelanddev.net/Account/SignIn/?origin=%2F Request-Context: appId=cid-v1:142239ce-f137-41e3-b8b8-e635b43da551 X-Powered-By: ASP.NET Expires: Thu, 08 Jan 2026 00:04:32 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 08 Jan 2026 00:04:32 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=13 Server-Timing: origin; dur=145 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: upgrade-insecure-requests Server-Timing: ak_p; desc="1767830672749_34915465_49472922_15832_3091_1_3_-";dur=1