LeakIX - Host dev.olympus.brandtech.it

Domain dev.olympus.brandtech.it

The Netherlands

GOOGLE-CLOUD-PLATFORM

Software information

Varnish

tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 151.101.1.91
Domain: dev.olympus.brandtech.it
Port: 443
URL: https://dev.olympus.brandtech.it

First seen 2025-10-21 09:31
Last seen 2026-01-09 08:59
Open for 79 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493b3b7350c601bf50dc6465e0be7b0aadb9b8b4ce

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /
GET /account
GET /api/badges/{catalog}
GET /api/complete-the-look
GET /api/cookie-policy/{catalog}
GET /api/f
GET /api/f/{catalog}
GET /api/f/{catalog}/badges
GET /api/f/{catalog}/complete-the-look
GET /api/f/{catalog}/cookie-policy
GET /api/f/{catalog}/feature-flags
GET /api/f/{catalog}/free-freight-value
GET /api/f/{catalog}/markets
GET /api/f/{catalog}/monitoring
GET /api/f/{catalog}/navigation
GET /api/f/{catalog}/parcel-lab-returns
GET /api/f/{catalog}/product-set
GET /api/f/{catalog}/search-configurations
GET /api/f/{catalog}/shipping-methods
GET /api/f/{catalog}/shop-the-look
GET /api/f/{catalog}/size-guide-settings
GET /api/f/{catalog}/sub-brands
GET /api/f/{catalog}/terms-and-conditions
GET /api/f/{catalog}/translations
GET /api/feature-toggles/{catalog}
GET /api/free-freight/{catalog}
GET /api/geolocation/suggest/{market}
GET /api/markets
GET /api/monitoring
GET /api/navigation/{catalog}
GET /api/parcel-lab-returns
GET /api/product-set
GET /api/search-configurations/{catalog}
GET /api/shipping-methods/{catalog}
GET /api/shop-the-look
GET /api/size-guide-settings/{catalog}
GET /api/subbrands
GET /api/terms-and-conditions/{catalog}
GET /api/translations/{catalog}
GET /login/callback
GET /redirect
GET /redirect/{market}
GET /robots.txt
GET /search
GET /ssr/{rest}
GET /unsubscribe
GET /{catalog}/{path}
GET /{path}

Found on 2026-01-09 08:59

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-11-14 13:07

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 151.101.65.91
Domain: iso.dev.olympus.brandtech.it
Port: 443
URL: https://iso.dev.olympus.brandtech.it

First seen 2025-10-21 09:31
Last seen 2026-01-09 06:02
Open for 79 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 06:02
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 34.91.204.169
Domain: gateway.dev.olympus.brandtech.it
Port: 443
URL: https://gateway.dev.olympus.brandtech.it

First seen 2025-10-20 07:14
Last seen 2026-01-09 08:11
Open for 81 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493b3b7350c601bf50dc6465e0be7b0aadb9b8b4ce

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /
GET /account
GET /api/badges/{catalog}
GET /api/complete-the-look
GET /api/cookie-policy/{catalog}
GET /api/f
GET /api/f/{catalog}
GET /api/f/{catalog}/badges
GET /api/f/{catalog}/complete-the-look
GET /api/f/{catalog}/cookie-policy
GET /api/f/{catalog}/feature-flags
GET /api/f/{catalog}/free-freight-value
GET /api/f/{catalog}/markets
GET /api/f/{catalog}/monitoring
GET /api/f/{catalog}/navigation
GET /api/f/{catalog}/parcel-lab-returns
GET /api/f/{catalog}/product-set
GET /api/f/{catalog}/search-configurations
GET /api/f/{catalog}/shipping-methods
GET /api/f/{catalog}/shop-the-look
GET /api/f/{catalog}/size-guide-settings
GET /api/f/{catalog}/sub-brands
GET /api/f/{catalog}/terms-and-conditions
GET /api/f/{catalog}/translations
GET /api/feature-toggles/{catalog}
GET /api/free-freight/{catalog}
GET /api/geolocation/suggest/{market}
GET /api/markets
GET /api/monitoring
GET /api/navigation/{catalog}
GET /api/parcel-lab-returns
GET /api/product-set
GET /api/search-configurations/{catalog}
GET /api/shipping-methods/{catalog}
GET /api/shop-the-look
GET /api/size-guide-settings/{catalog}
GET /api/subbrands
GET /api/terms-and-conditions/{catalog}
GET /api/translations/{catalog}
GET /login/callback
GET /redirect
GET /redirect/{market}
GET /robots.txt
GET /search
GET /ssr/{rest}
GET /unsubscribe
GET /{catalog}/{path}
GET /{path}

Found on 2026-01-09 08:11

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 34.91.204.169
Domain: content.dev.olympus.brandtech.it
Port: 443
URL: https://content.dev.olympus.brandtech.it

First seen 2025-12-07 07:45
Last seen 2025-12-30 11:21
Open for 23 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-12-30 11:21
Create report

Open service 34.91.204.169:443 · payload.dev.olympus.brandtech.it

2026-01-11 21:07

HTTP/1.1 404 Not Found
Date: Sun, 11 Jan 2026 21:07:28 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Accept-CH: Sec-CH-Prefers-Color-Scheme
Vary: Sec-CH-Prefers-Color-Scheme, RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Accept-Encoding
Critical-CH: Sec-CH-Prefers-Color-Scheme
X-Powered-By: Next.js, Payload
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Strict-Transport-Security: max-age=31536000; includeSubDomains

Page title: 404: This page could not be found.

<!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-0de69eead8e9143d.js"/><script src="/_next/static/chunks/4bd1b696-cc729d47eba2cee4.js" async=""></script><script src="/_next/static/chunks/5964-b14196516283122f.js" async=""></script><script src="/_next/static/chunks/main-app-7bd318ff7dcde053.js" async=""></script><meta name="robots" content="noindex"/><title>404: This page could not be found.</title><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><div hidden=""><!--$--><!--/$--></div><div style="font-family:system-ui,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&quot;;height:100vh;text-align:center;display:flex;flex-direction:column;align-items:center;justify-content:center"><div><style>body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}</style><h1 class="next-error-h1" style="display:inline-block;margin:0 20px 0 0;padding:0 23px 0 0;font-size:24px;font-weight:500;vertical-align:top;line-height:49px">404</h1><div style="display:inline-block"><h2 style="font-size:14px;font-weight:400;line-height:49px;margin:0">This page could not be found.</h2></div></div></div><!--$--><!--/$--><script src="/_next/static/chunks/webpack-0de69eead8e9143d.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[87555,[],\"\"]\n3:I[31295,[],\"\"]\n4:I[59665,[],\"OutletBoundary\"]\n6:I[74911,[],\"AsyncMetadataOutlet\"]\n8:I[59665,[],\"ViewportBoundary\"]\na:I[59665,[],\"MetadataBoundary\"]\nb:\"$Sreact.suspense\"\nd:I[28393,[],\"\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"rppyNJOE-kpt4FkTW3Yxe\",\"p\":\"\",\"c\":[\"\",\"\"],\"i\":false,\"f\":[[[\"\",{\"children\":[\"/_not-found\",{\"children\":[\"__PAGE__\",{}]}]},\"$undefined\",\"$undefined\",true],[\"\",[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"html\",null,{\"children\":[\"$\",\"body\",null,{\"children\":[\"$\",\"$L2\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L3\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]}]}]]}],{\"children\":[\"/_not-found\",[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L2\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L3\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[\"__PAGE__\",[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"title\",null,{\"children\":\"404: This page could not be found.\"}],[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"padding\":\"0 23px 0 0\",\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\",\"line

Found 7 hours ago by HttpPlugin

Domain dev.olympus.brandtech.it

The Netherlands

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

payload.dev.olympus.brandtech.it

*.iso.dev.olympus.brandtech.it*.iso.test.olympus.brandtech.itbrandtech.itdev.olympus.brandtech.itiso.dev.olympus.brandtech.itiso.test.olympus.brandtech.ittest.olympus.brandtech.it

content.dev.olympus.brandtech.it

gateway.dev.olympus.brandtech.it

*.iso.dev.olympus.brandtech.it*.iso.test.olympus.brandtech.itbrandtech.itdev.olympus.brandtech.itiso.dev.olympus.brandtech.itiso.test.olympus.brandtech.ittest.olympus.brandtech.it

feed.dev.olympus.brandtech.it

jobs.dev.olympus.brandtech.it

*.iso.dev.olympus.brandtech.it*.iso.test.olympus.brandtech.itbrandtech.itdev.olympus.brandtech.itiso.dev.olympus.brandtech.itiso.test.olympus.brandtech.ittest.olympus.brandtech.it

Domain summary

IP summary

.iso.dev.olympus.brandtech.it.iso.test.olympus.brandtech.itbrandtech.itdev.olympus.brandtech.itiso.dev.olympus.brandtech.itiso.test.olympus.brandtech.ittest.olympus.brandtech.it

.iso.dev.olympus.brandtech.it.iso.test.olympus.brandtech.itbrandtech.itdev.olympus.brandtech.itiso.dev.olympus.brandtech.itiso.test.olympus.brandtech.ittest.olympus.brandtech.it

.iso.dev.olympus.brandtech.it.iso.test.olympus.brandtech.itbrandtech.itdev.olympus.brandtech.itiso.dev.olympus.brandtech.itiso.test.olympus.brandtech.ittest.olympus.brandtech.it