LeakIX - Host cm-dev-auth.metro.digital

Domain cm-dev-auth.metro.digital

Germany

METRO Digital GmbH

Software information

Kestrel Kestrel

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 164.139.15.63
Domain: cm-dev-auth.metro.digital
Port: 443
URL: https://cm-dev-auth.metro.digital

First seen 2025-11-05 13:05
Last seen 2026-02-09 23:36
Open for 96 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 23:36
Create report

Open service 164.139.15.63:443 · cm-dev-auth.metro.digital

2026-01-23 16:55

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 647
Content-Type: text/html
Date: Fri, 23 Jan 2026 16:55:02 GMT
Etag: "1dc847358c9d787"
Last-Modified: Tue, 13 Jan 2026 09:59:46 GMT
Server: Kestrel
X-Correlation-Id: 3e7723dd-b095-4158-8b53-a2c98b91c12f
Connection: close
Set-Cookie: BIGipServerltmpool-cm-dev-auth-metro-digital-10229-80=!jTQKoLI9W/1xh7jTTgLQLUP9T4ugcEGkAbMDAU4zwd7cQvUcO5le9BveMCX+7owt76BzZ7RnV2Skp1Y=; path=/; Httponly; Secure

Page title: Cash Machine Login

<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><base href="/"/><meta name="description" content="Login page created for Cash Machine Authentication Service."/><link rel="manifest" href="/manifest.json"/><link rel="shortcut icon" href="/favicon.ico"><title>Cash Machine Login</title><script defer="defer" src="/static/js/main.eec9395f.js"></script><link href="/static/css/main.d5d4e61f.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Found 2026-01-23 by HttpPlugin

Create report

Open service 164.139.15.63:443 · cm-dev-auth.metro.digital

2026-01-23 15:17

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 647
Content-Type: text/html
Date: Fri, 23 Jan 2026 15:17:48 GMT
Etag: "1dc847358c9d787"
Last-Modified: Tue, 13 Jan 2026 09:59:46 GMT
Server: Kestrel
X-Correlation-Id: 8951fe88-93c2-4173-9248-b879e1ca2d6e
Connection: close
Set-Cookie: BIGipServerltmpool-cm-dev-auth-metro-digital-10229-80=!+P1iHhD99Mtg5jnTTgLQLUP9T4ugcNGWNhI0a4Rt0K4UDYQ6T5BW3vv9qwgsuVOuAu92UlazDj0lWv8=; path=/; Httponly; Secure

Page title: Cash Machine Login

<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><base href="/"/><meta name="description" content="Login page created for Cash Machine Authentication Service."/><link rel="manifest" href="/manifest.json"/><link rel="shortcut icon" href="/favicon.ico"><title>Cash Machine Login</title><script defer="defer" src="/static/js/main.eec9395f.js"></script><link href="/static/css/main.d5d4e61f.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Found 2026-01-23 by HttpPlugin

Create report

Open service 164.139.15.63:443 · cm-dev-auth.metro.digital

2026-01-10 02:21

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 647
Content-Type: text/html
Date: Sat, 10 Jan 2026 02:21:36 GMT
Etag: "1dc6e60bf51da87"
Last-Modified: Tue, 16 Dec 2025 07:51:12 GMT
Server: Kestrel
X-Correlation-Id: 5d590b45-611c-42d8-95f6-eb150b0d848f
Connection: close
Set-Cookie: BIGipServerltmpool-cm-dev-auth-metro-digital-10229-80=!TIkL9er9EduLX1PTTgLQLUP9T4ugcFI83ykCy69MWhC15CjC9aHKSioJ6papZaehNH1MQb8+FlF5AA8=; path=/; Httponly; Secure

Page title: Cash Machine Login

<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><base href="/"/><meta name="description" content="Login page created for Cash Machine Authentication Service."/><link rel="manifest" href="/manifest.json"/><link rel="shortcut icon" href="/favicon.ico"><title>Cash Machine Login</title><script defer="defer" src="/static/js/main.e621d2fd.js"></script><link href="/static/css/main.d5d4e61f.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 164.139.15.63:443 · cm-dev-auth.metro.digital

2026-01-09 17:11

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 647
Content-Type: text/html
Date: Fri, 09 Jan 2026 17:11:14 GMT
Etag: "1dc6e60bf51da87"
Last-Modified: Tue, 16 Dec 2025 07:51:12 GMT
Server: Kestrel
X-Correlation-Id: c2dee0ab-5b2d-4543-a6d5-e0c454e8062f
Connection: close
Set-Cookie: BIGipServerltmpool-cm-dev-auth-metro-digital-10229-80=!QM/MwGaERmixP0XTTgLQLUP9T4ugcC4LqczcfB0VkbJd5yntgP/lBU6YCnb17vIedRT5+Ulq3WT66Wg=; path=/; Httponly; Secure

Page title: Cash Machine Login

<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><base href="/"/><meta name="description" content="Login page created for Cash Machine Authentication Service."/><link rel="manifest" href="/manifest.json"/><link rel="shortcut icon" href="/favicon.ico"><title>Cash Machine Login</title><script defer="defer" src="/static/js/main.e621d2fd.js"></script><link href="/static/css/main.d5d4e61f.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 164.139.15.63:443 · cm-dev-auth.metro.digital

2026-01-02 23:28

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 647
Content-Type: text/html
Date: Fri, 02 Jan 2026 23:28:01 GMT
Etag: "1dc6e60bf51da87"
Last-Modified: Tue, 16 Dec 2025 07:51:12 GMT
Server: Kestrel
X-Correlation-Id: 65db5c24-e378-47b1-9665-b5c1cd224b51
Connection: close
Set-Cookie: BIGipServerltmpool-cm-dev-auth-metro-digital-10229-80=!25qfje1v9h0TFVLTTgLQLUP9T4ugcEpd89r3pBaAUVOZ5OitBWc3pMcNAv4voTIBpizS0T952q5eW/g=; path=/; Httponly; Secure

Page title: Cash Machine Login

<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><base href="/"/><meta name="description" content="Login page created for Cash Machine Authentication Service."/><link rel="manifest" href="/manifest.json"/><link rel="shortcut icon" href="/favicon.ico"><title>Cash Machine Login</title><script defer="defer" src="/static/js/main.e621d2fd.js"></script><link href="/static/css/main.d5d4e61f.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 164.139.15.63:443 · cm-dev-auth.metro.digital

2026-01-02 07:12

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 647
Content-Type: text/html
Date: Fri, 02 Jan 2026 07:12:17 GMT
Etag: "1dc6e60bf51da87"
Last-Modified: Tue, 16 Dec 2025 07:51:12 GMT
Server: Kestrel
X-Correlation-Id: 39af4e15-ab05-443a-b134-f20d966da53a
Connection: close
Set-Cookie: BIGipServerltmpool-cm-dev-auth-metro-digital-10229-80=!8AQnnd4gbz0Mq/3TTgLQLUP9T4ugcEXITce4/+9b5HgklkqX3Fp4eguqMwnYKQXw6zuRkvScu+mYvjU=; path=/; Httponly; Secure

Page title: Cash Machine Login

<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><base href="/"/><meta name="description" content="Login page created for Cash Machine Authentication Service."/><link rel="manifest" href="/manifest.json"/><link rel="shortcut icon" href="/favicon.ico"><title>Cash Machine Login</title><script defer="defer" src="/static/js/main.e621d2fd.js"></script><link href="/static/css/main.d5d4e61f.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 164.139.15.63:443 · cm-dev-auth.metro.digital

2025-12-23 01:21

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 647
Content-Type: text/html
Date: Tue, 23 Dec 2025 01:21:40 GMT
Etag: "1dc6e60bf51da87"
Last-Modified: Tue, 16 Dec 2025 07:51:12 GMT
Server: Kestrel
X-Correlation-Id: 1f7c7fe0-fc27-4863-81e0-42ce18afa91b
Connection: close
Set-Cookie: BIGipServerltmpool-cm-dev-auth-metro-digital-10229-80=!I+VVG4pFe7kCnujTTgLQLUP9T4ugcDvGPt5VfqeBy1fV7UG8Tkdmtbd8jLgYYQ9hYyHr38/ofnfJvKY=; path=/; Httponly; Secure

Page title: Cash Machine Login

<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><base href="/"/><meta name="description" content="Login page created for Cash Machine Authentication Service."/><link rel="manifest" href="/manifest.json"/><link rel="shortcut icon" href="/favicon.ico"><title>Cash Machine Login</title><script defer="defer" src="/static/js/main.e621d2fd.js"></script><link href="/static/css/main.d5d4e61f.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 164.139.15.63:443 · cm-dev-auth.metro.digital

2025-12-23 00:25

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 647
Content-Type: text/html
Date: Tue, 23 Dec 2025 00:25:16 GMT
Etag: "1dc6e60bf51da87"
Last-Modified: Tue, 16 Dec 2025 07:51:12 GMT
Server: Kestrel
X-Correlation-Id: cbbcfb59-d0e8-4a5f-bd19-b0060a3fa4f4
Connection: close
Set-Cookie: BIGipServerltmpool-cm-dev-auth-metro-digital-10229-80=!GGYFy6USZ0+HRknTTgLQLUP9T4ugcOwIAOy+sor9oBN9983TaNu+X1USc1DNdIvm8T1ezMZLWMHUY3M=; path=/; Httponly; Secure

Page title: Cash Machine Login

<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><base href="/"/><meta name="description" content="Login page created for Cash Machine Authentication Service."/><link rel="manifest" href="/manifest.json"/><link rel="shortcut icon" href="/favicon.ico"><title>Cash Machine Login</title><script defer="defer" src="/static/js/main.e621d2fd.js"></script><link href="/static/css/main.d5d4e61f.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Found 2025-12-23 by HttpPlugin

Create report

cm-dev-auth.metro.digital

Fingerprint:

32d68f40222f25f77623cb5557e9c10a2fd253cd7736522192a09f051c794456

CN:

cm-dev-auth.metro.digital

Key:

RSA-2048

Issuer:

R12

Not before:

2026-01-21 12:07

Not after:

2026-04-21 12:07

cm-dev-auth.metro.digital

Fingerprint:

461955aacc63ab1c97e24007b36ac2e8d5704409303312407982e3641a76899a

CN:

cm-dev-auth.metro.digital

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-05 12:07

Not after:

2026-02-03 12:07

Domain summary

cm-dev-auth.metro.digital 8

1 recorded

IP summary

164.139.15.63 2

1 recorded

Domain cm-dev-auth.metro.digital

Germany

Software information

Swagger API description is publicly available

cm-dev-auth.metro.digital

cm-dev-auth.metro.digital

Domain summary

IP summary