LeakIX - Host cds-api-dev.booktime.org

Domain cds-api-dev.booktime.org

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.26.2.150
Domain: cds-api-dev.booktime.org
Port: 80
URL: http://cds-api-dev.booktime.org

First seen 2025-12-03 03:09
Last seen 2026-01-09 17:38
Open for 37 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549a1b363f1fe3fe71d80d1060a27d990051065929a

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/age-ratings
GET /api/age-ratings/{id}
GET /api/book-source-types
GET /api/book-source-types/{id}
GET /api/book-types
GET /api/book-types/{id}
GET /api/books
GET /api/books/{id}
GET /api/contributor-multilingual/{contributor_id}
GET /api/contributor-multilingual/{id}
GET /api/contributors
GET /api/contributors/{id}
GET /api/groups
GET /api/groups/{id}
GET /api/languages
GET /api/languages/{id}
GET /api/lookups
GET /api/reading-levels
GET /api/reading-levels/{id}
GET /api/series
GET /api/series/{id}
GET /api/tags
GET /api/tags-multi-language
GET /api/tags-multi-language/{id}
GET /api/tags/{id}
GET /api/user-roles
GET /api/user-roles/by-role/{roleId}
GET /api/user-roles/by-user/{userId}
GET /api/users
POST /api/contributor-multilingual
POST /api/user-roles/unassign

Found on 2026-01-09 17:38

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-12-06 01:44

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.26.3.150
Domain: cds-api-dev.booktime.org
Port: 443
URL: https://cds-api-dev.booktime.org

First seen 2025-12-03 03:09
Last seen 2026-01-09 07:35
Open for 37 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549a1b363f1fe3fe71d80d1060a27d990051065929a

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/age-ratings
GET /api/age-ratings/{id}
GET /api/book-source-types
GET /api/book-source-types/{id}
GET /api/book-types
GET /api/book-types/{id}
GET /api/books
GET /api/books/{id}
GET /api/contributor-multilingual/{contributor_id}
GET /api/contributor-multilingual/{id}
GET /api/contributors
GET /api/contributors/{id}
GET /api/groups
GET /api/groups/{id}
GET /api/languages
GET /api/languages/{id}
GET /api/lookups
GET /api/reading-levels
GET /api/reading-levels/{id}
GET /api/series
GET /api/series/{id}
GET /api/tags
GET /api/tags-multi-language
GET /api/tags-multi-language/{id}
GET /api/tags/{id}
GET /api/user-roles
GET /api/user-roles/by-role/{roleId}
GET /api/user-roles/by-user/{userId}
GET /api/users
POST /api/contributor-multilingual
POST /api/user-roles/unassign

Found on 2026-01-09 07:35

Create report

Open service 104.26.2.150:80 · cds-api-dev.booktime.org

2026-01-09 17:38

HTTP/1.1 404 Not Found
Date: Fri, 09 Jan 2026 17:38:19 GMT
Transfer-Encoding: chunked
Connection: close
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
X-Powered-By: ASP.NET
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=wXisr%2FJbXfpX%2BYapSHZGo4CcWmXhmPRqzIE3SiKgsS4U5%2F2%2FdP2FAumjMtD2dAMp2Wwaks4dMeGZ8Xr%2FHmI6Tl33T9zmY%2FSd3MRRMFiwPzazbf4KxLYu"}]}
CF-RAY: 9bb5b5228bc411fc-YYZ

Found 2026-01-09 by HttpPlugin

Create report

Open service 104.26.3.150:443 · cds-api-dev.booktime.org

2026-01-09 07:35

HTTP/1.1 404 Not Found
Date: Fri, 09 Jan 2026 07:35:14 GMT
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=QX9ykIwbU9C0Zda4LlTHLt4sKVStVnWvXVZ4VvNx10afSAGVi6%2BfpYaItUbU1DvgcKgo5BoPHRuZ8Q6pfI8fZBbvEVxRALfpuEAfpBCrieytNfMaVkWd"}]}
CF-RAY: 9bb241b1b9ad271b-AMS

Found 2026-01-09 by HttpPlugin

Create report

Open service 104.26.2.150:80 · cds-api-dev.booktime.org

2026-01-02 16:56

HTTP/1.1 404 Not Found
Date: Fri, 02 Jan 2026 16:56:52 GMT
Transfer-Encoding: chunked
Connection: close
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
X-Powered-By: ASP.NET
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=bI2T%2BD3QB2GKhu2wpdHS99gSVj%2Bqaa%2BQ0%2F%2FS2EMhhrjZhAek21cLUbxaetbzutVcZr0u2rnWl57d67Rtwrgs7xr2oTWNNpUbf%2FxXYqWz6pZgJXPu4lie"}]}
CF-RAY: 9b7bcac989d24367-EWR

Found 2026-01-02 by HttpPlugin

Create report

Open service 104.26.3.150:443 · cds-api-dev.booktime.org

2026-01-02 06:03

HTTP/1.1 404 Not Found
Date: Fri, 02 Jan 2026 06:03:49 GMT
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=3MdAfUkLv3mQOrx74awGbdSncmwQLa%2BaZHCmZRL9dRn2v1mnb%2BQbAmyWxbjy44fZfIFsNCsJX8yL20JO6E%2Bwx0hUQwznBCk3TykzYjtgpUXlmqP4O7jA"}]}
CF-RAY: 9b780e29383f53a3-LHR

Found 2026-01-02 by HttpPlugin

Create report

Open service 104.26.2.150:80 · cds-api-dev.booktime.org

2025-12-30 14:03

HTTP/1.1 404 Not Found
Date: Tue, 30 Dec 2025 14:03:53 GMT
Transfer-Encoding: chunked
Connection: close
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
X-Powered-By: ASP.NET
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=8j2MsIk41sEvFuA6F%2Fa1l%2BOahbAX0uND60GkDCnxuv3fwEleFCqRKTOKR0qZEQv%2F4H%2BqnmQGVDCe2kEFer3TjOSBdI4uZ5votc8kfFx6qAtaJEGWUUyy"}]}
CF-RAY: 9b621542fb7a1d8e-FRA

Found 2025-12-30 by HttpPlugin

Create report

Open service 104.26.3.150:443 · cds-api-dev.booktime.org

2025-12-22 20:59

HTTP/1.1 404 Not Found
Date: Mon, 22 Dec 2025 20:59:56 GMT
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=hVAIyrOxJnTlgtyWqDEFDKabY%2BCg3mUzeTEK7sI7AKPCK3DR2xrArtJQx3qd5gAAbfwAZmpkmZTcTlK2foYTr7NGVtCoyrXe9nDkFHJlYeW%2BvBPVdoil"}]}
CF-RAY: 9b228bb75feeb8ed-AMS

Found 2025-12-22 by HttpPlugin

Create report

Open service 104.26.2.150:80 · cds-api-dev.booktime.org

2025-12-22 15:28

HTTP/1.1 404 Not Found
Date: Mon, 22 Dec 2025 15:28:08 GMT
Transfer-Encoding: chunked
Connection: close
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
X-Powered-By: ASP.NET
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=3TrDkt1AL5Y%2BiBplfwXQAtGU3%2Bqw1FVIXdP5ERwrx8Km52i0MnEYlGeNNoJRh7aN6VreLVEvMrrE0mCbfTWwZcEZgDYuUUOK8Dt4bbf9VeTfZGF7nOXJ"}]}
CF-RAY: 9b20a5adebafabf1-YYZ

Found 2025-12-22 by HttpPlugin

Create report

Open service 104.26.3.150:443 · cds-api-dev.booktime.org

2025-12-21 00:37

HTTP/1.1 404 Not Found
Date: Sun, 21 Dec 2025 00:37:03 GMT
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CeUVlnmse3Wx0JXQhIPCyPvAGUqB1DuWzCwjypcuKosRx48ifK1cuIjAIDL1Fth7BXnMpDfh7LSMDkQa%2BNN39KYCBfY4f%2FANU4PsiQ%2Fh%2F2OXma8T1fO%2B"}]}
CF-RAY: 9b134f010af1b8ba-AMS

Found 2025-12-21 by HttpPlugin

Create report

Open service 104.26.2.150:80 · cds-api-dev.booktime.org

2025-12-20 18:30

HTTP/1.1 404 Not Found
Date: Sat, 20 Dec 2025 18:30:26 GMT
Transfer-Encoding: chunked
Connection: close
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
X-Powered-By: ASP.NET
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=iMm%2BcxXfcB17I5IUR9UA6cSSVa2G%2BKwy%2B1mpOMs32apXeDJR9fl87E%2F6KjBap%2BwIDibbPsdjRNzp%2BR7DX6FccQ2hQvnY8nVhM3A%2FG64GUj8muZsEvBDv"}]}
CF-RAY: 9b1135fceda6abbb-YYZ

Found 2025-12-20 by HttpPlugin

Create report

cds-api-dev.booktime.org

Fingerprint:

eeec0f691965579476a8ac4291ff9c87abe39f70e5149d59564ebc3ca1039439

CN:

cds-api-dev.booktime.org

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-12-03 02:09

Not after:

2026-03-03 03:09

Domain summary

cds-api-dev.booktime.org 11

1 recorded

IP summary

104.26.2.150 1 104.26.3.150 1

2 recorded