LeakIX - Host dbx.so

Domain dbx.so

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.137.138
Domain: cards.dbx.so
Port: 8443
URL: https://cards.dbx.so:8443

First seen 2025-10-27 04:07
Last seen 2026-02-09 17:27
Open for 105 days

Severity: info
Fingerprint: 5733ddf49ff49cd18553ecf70fc7c4dde861ada553f1884f3cfa1da7af101a45

Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
GET /api/v1/fetchBankDetails
GET /api/v1/fetchTransactionStatus/{id}
GET /api/v1/getAccessBenefitForMember
GET /api/v1/getAccessStatusAndCVT
GET /api/v1/getOtp
GET /api/v1/getWalletToBankRequestList
GET /api/vi/mobile/countryCode
GET /api/vi/mobile/currency/flag
GET /api/vi/mobile/fetchBankDetails
GET /api/vi/mobile/getWalletToBankRequestList
GET /webhook_service/depositsTriggerApi
POST /NonKyc/addNonKycUserDetails
POST /NonKyc/updateNonKycUserDetail
POST /api/card/decrypt
POST /api/card/encrypt
POST /api/v1/VtcObtenerMovimientosCuenta
POST /api/v1/VtcObtenerMovimientosCuentaOtros
POST /api/v1/activateCardFirstTime
POST /api/v1/activateReplacedCardFirstTime
POST /api/v1/activeCardDetails
POST /api/v1/addBeneficiary
POST /api/v1/addKycAddressProofDetails
POST /api/v1/addKycIdProofDetails
POST /api/v1/addUserDetails
POST /api/v1/addWalletToBankAcc
POST /api/v1/applyForNewInstantFromPersonalized
POST /api/v1/applyForWallet
POST /api/v1/assignInstantCards
POST /api/v1/assignedCardDetails
POST /api/v1/associatecard
POST /api/v1/cardActivationFirstTime
POST /api/v1/cardDetails
POST /api/v1/cardMonthWiseTransactionDetail
POST /api/v1/cardToCardSelfAccount
POST /api/v1/cardTransactionDetail
POST /api/v1/changePassword
POST /api/v1/checkTrnStatus
POST /api/v1/checkUsername
POST /api/v1/collectInitialCardFee
POST /api/v1/declinedTransactionDetails
POST /api/v1/editWalletToBankAcc
POST /api/v1/enableInstantCard
POST /api/v1/fetchListOfInstantBatch
POST /api/v1/fetchUnassignedKitNumber
POST /api/v1/findProgramForClient
POST /api/v1/generateInstantCards
POST /api/v1/getAccessBenefits
POST /api/v1/getCardBalanceDetail
POST /api/v1/getCardNumber
POST /api/v1/getEncryptedData
POST /api/v1/getKycStatus
POST /api/v1/getMemberDetails
POST /api/v1/getPrefundBalance
POST /api/v1/getRedirectToken
POST /api/v1/getToken
POST /api/v1/getUserByCardNumber
POST /api/v1/insertCodmendo
POST /api/v1/insertDepositData
POST /api/v1/insertRedirectValue
POST /api/v1/loadCard
POST /api/v1/loadCard/{id}
POST /api/v1/loadSelfAccountWallet
POST /api/v1/loadWallet
POST /api/v1/loadWalletToOtherAccount
POST /api/v1/lockUnlockCard
POST /api/v1/login
POST /api/v1/lostStolenCardDetails
POST /api/v1/replacedCardDetails
POST /api/v1/requestForCard
POST /api/v1/requestForWalletToBank
POST /api/v1/resetPassword
POST /api/v1/resetPasswordWithOtp
POST /api/v1/sendEmailForServerMaintenance
POST /api/v1/setPin
POST /api/v1/unsettledMonthWiseCardTransactions
POST /api/v1/updateKycAddressProofDetails
POST /api/v1/updateKycIdProofDetails
POST /api/v1/updateUserDetails
POST /api/v1/walletArrayDetails
POST /api/v1/walletBalance
POST /api/v1/walletDetails
POST /api/v1/walletTransactionDetail
POST /api/v2/getToken
POST /api/vi/mobile/acceptFundToDiffrentWallet
POST /api/vi/mobile/acceptMoneyRequest
POST /api/vi/mobile/acceptSentMoney
POST /api/vi/mobile/activateCardFirstTime
POST /api/vi/mobile/addBeneficiary
POST /api/vi/mobile/addWalletToBankAcc
POST /api/vi/mobile/applyForCard
POST /api/vi/mobile/applyForWallet
POST /api/vi/mobile/assignedCardDetails
POST /api/vi/mobile/cardDetails
POST /api/vi/mobile/cardToCardSelfAccount
POST /api/vi/mobile/changePassword
POST /api/vi/mobile/converstionApi
POST /api/vi/mobile/convertCurrencyWithFees
POST /api/vi/mobile/createPassword
POST /api/vi/mobile/downloadUserTransactioonList
POST /api/vi/mobile/downloadUserWalletTransactioonList
POST /api/vi/mobile/editWalletToBankAcc
POST /api/vi/mobile/generatePdfTrcn
POST /api/vi/mobile/getAcceptMoneyRequest
POST /api/vi/mobile/getAcceptSentMoney
POST /api/vi/mobile/getAssignedWalletList
POST /api/vi/mobile/getCardBalanceDetails
POST /api/vi/mobile/getCardHolderName
POST /api/vi/mobile/getCardList
POST /api/vi/mobile/getCardMonthWiseTransactions
POST /api/vi/mobile/getCardTransactionDetails
POST /api/vi/mobile/getClientDetails
POST /api/vi/mobile/getCountryData
POST /api/vi/mobile/getListOfPhysicalCardArrays
POST /api/vi/mobile/getListOfVirtualCardArrays
POST /api/vi/mobile/getMemberDetails
POST /api/vi/mobile/getTransactionFees
POST /api/vi/mobile/getUserKycDetails
POST /api/vi/mobile/getWalletArrayDetails
POST /api/vi/mobile/getWalletArrayList
POST /api/vi/mobile/getWalletBalance
POST /api/vi/mobile/getWalletDetails
POST /api/vi/mobile/getWalletTransactionDetails
POST /api/vi/mobile/getw2wRequestMoney
POST /api/vi/mobile/getw2wTransferMoneyRequest
POST /api/vi/mobile/home
POST /api/vi/mobile/instantTransferValidation
POST /api/vi/mobile/loadSelfAccountWallet
POST /api/vi/mobile/loadWalletToOtherAccount
POST /api/vi/mobile/lockUnlockCard
POST /api/vi/mobile/login
POST /api/vi/mobile/logout
POST /api/vi/mobile/recoverPassword
POST /api/vi/mobile/registerUserDetails
POST /api/vi/mobile/registerWithRestDetails
POST /api/vi/mobile/rejectOthersWalletFund
POST /api/vi/mobile/rejectRequestWalletFund
POST /api/vi/mobile/requestForCard
POST /api/vi/mobile/requestForWalletToBank
POST /api/vi/mobile/resetPassword
POST /api/vi/mobile/searchBeneficiary
POST /api/vi/mobile/sendFirstTimeMobileOtp
POST /api/vi/mobile/sendFundToDiffrentCurrencyWallet
POST /api/vi/mobile/sendMobileOtp
POST /api/vi/mobile/sendOtp
POST /api/vi/mobile/setPin
POST /api/vi/mobile/updateCardNickName
POST /api/vi/mobile/updateKycAddressProofDetails
POST /api/vi/mobile/updateKycIdProofDetails
POST /api/vi/mobile/updateUserDetails
POST /api/vi/mobile/uploadProfileImage
POST /api/vi/mobile/userAddKycAddressProofDetails
POST /api/vi/mobile/userAddKycIdProofDetails
POST /api/vi/mobile/userLogin
POST /api/vi/mobile/userRegister
POST /api/vi/mobile/validateInvitationCode
POST /api/vi/mobile/validateMobileOtp
POST /api/vi/mobile/validateOtp
POST /api/vi/mobile/verifyInviteCode
POST /api/vi/mobile/w2cTransferMoney
POST /api/vi/mobile/w2wRequestMoney
POST /api/vi/mobile/w2wTransferMoney
POST /webhook_service/mastercard/authorization/request

Found on 2026-02-09 17:27

Create report

Open service 172.67.137.138:8443 · cards.dbx.so

2026-01-23 14:15

HTTP/1.1 404 Not Found
Date: Fri, 23 Jan 2026 14:15:52 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Vary: accept-encoding,origin,access-control-request-headers,access-control-request-method,accept-encoding
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Expires: 0
Pragma: no-cache
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=f%2BC8wXcshybgx9SRhXSBkr%2F0UyEkV%2BdJCiLnUVhq6Sh%2FSKxzQiCTYXNh07NmfvS35XvjruTf2uS5ljLqFUJxBSpi4XxkRTCIm84VCA%3D%3D"}]}
cf-cache-status: DYNAMIC
Server: cloudflare
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=14,cfOrigin;dur=549
CF-RAY: 9c27e7d74d8d4167-LHR
alt-svc: h3=":8443"; ma=86400


{"timestamp":"2026-01-23T14:15:51.830+0000","status":404,"error":"Not Found","message":"No message available","path":"/"}

Found 2026-01-23 by HttpPlugin

Domain dbx.so

Software information

Swagger API description is publicly available

cards.dbx.so

dbx.so*.dbx.so

dbx.so*.dbx.so

Domain summary

IP summary