LeakIX - Host develop.wastewarrior.chippr.dev

Domain develop.wastewarrior.chippr.dev

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.69.68.45
Domain: develop.wastewarrior.chippr.dev
Port: 80
URL: http://develop.wastewarrior.chippr.dev

First seen 2025-12-10 05:32
Last seen 2026-01-15 23:08
Open for 36 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493bab7fec675f5d1a868cd52b83fb27dd9c264625

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Courses/{id}
DELETE /api/Organization/{organizationId}/members/{userId}
DELETE /api/Products/{id}
GET /api/Courses
GET /api/DiningSections
GET /api/DiningSections/{id}
GET /api/Organization/{organizationId}
GET /api/Organization/{organizationId}/members
GET /api/Products
GET /api/Reservations/public/{token}/reservations
GET /api/Restaurant/{restaurantId}/calendar
GET /api/Restaurant/{restaurantId}/calendar/daterange
GET /api/Restaurant/{restaurantId}/calendar/{calendarItemId}
GET /api/Restaurant/{restaurantId}/dining-table-groups
GET /api/Restaurant/{restaurantId}/dining-table-groups/{id}
GET /api/Restaurant/{restaurantId}/dining-tables
GET /api/Restaurant/{restaurantId}/dining-tables/{id}
GET /api/Restaurant/{restaurantId}/members
GET /api/Restaurant/{restaurantId}/menus
GET /api/Restaurant/{restaurantId}/menus/{id}
GET /api/Restaurant/{restaurantId}/operatingdays
GET /api/Restaurant/{restaurantId}/operatinghours
GET /api/Restaurant/{restaurantId}/reservations
GET /api/Restaurant/{restaurantId}/reservations/reaction-totals
GET /api/Restaurant/{restaurantId}/reservations/table-availability
GET /api/Restaurant/{restaurantId}/reservations/time-availability
GET /api/Restaurant/{restaurantId}/rooms
GET /api/Restaurant/{restaurantId}/rooms/{id}
GET /api/Restaurant/{restaurantId}/settings
GET /api/Restaurant/{restaurantId}/stats/mcm
GET /api/User/current
GET /api/Widget/closed-dates/{restaurantId}
GET /api/Widget/open-dates/{restaurantId}
GET /api/Widget/script
GET /webhooks/Whatsapp
PATCH /api/Message/{messageTrackingId}/opened-at
PATCH /api/Restaurant/{restaurantId}
PATCH /api/Restaurant/{restaurantId}/settings/mcm
PATCH /api/Restaurant/{restaurantId}/settings/notifications
PATCH /api/Restaurant/{restaurantId}/settings/reservations
PATCH /api/Restaurant/{restaurantId}/status
POST /api/Oauth2
POST /api/Oauth2/forgot-password
POST /api/Oauth2/reset-password
POST /api/Organization/{organizationId}/members/user
POST /api/Reservations/public/{token}/reactions
POST /api/Restaurant/{restaurantId}/members/user
POST /api/Restaurant/{restaurantId}/reservations/guest
POST /webhooks/Formitable
PUT /api/Reservations/public/{token}/reactions/{reactionId}
PUT /api/Reservations/public/{token}/reservations/{reservationId}
PUT /api/Restaurant/{restaurantId}/dining-tables/displayorder
PUT /api/Restaurant/{restaurantId}/members/{userId}
PUT /api/Restaurant/{restaurantId}/reservations/{id}

Found on 2026-01-15 23:08

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2026-01-08 23:28

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493bab7fec675f5d1a868cd52b83fb27dd959595c8

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Courses/{id}
DELETE /api/Organization/{organizationId}/members/{userId}
DELETE /api/Products/{id}
GET /api/Courses
GET /api/DiningSections
GET /api/DiningSections/{id}
GET /api/Organization/{organizationId}
GET /api/Organization/{organizationId}/members
GET /api/Products
GET /api/Reservations/public/{token}/reservations
GET /api/Restaurant/{restaurantId}/calendar
GET /api/Restaurant/{restaurantId}/calendar/daterange
GET /api/Restaurant/{restaurantId}/calendar/{calendarItemId}
GET /api/Restaurant/{restaurantId}/dining-table-groups
GET /api/Restaurant/{restaurantId}/dining-table-groups/{id}
GET /api/Restaurant/{restaurantId}/dining-tables
GET /api/Restaurant/{restaurantId}/dining-tables/{id}
GET /api/Restaurant/{restaurantId}/members
GET /api/Restaurant/{restaurantId}/menus
GET /api/Restaurant/{restaurantId}/menus/{id}
GET /api/Restaurant/{restaurantId}/operatingdays
GET /api/Restaurant/{restaurantId}/operatinghours
GET /api/Restaurant/{restaurantId}/reservations
GET /api/Restaurant/{restaurantId}/reservations/daily-counts
GET /api/Restaurant/{restaurantId}/reservations/reaction-totals
GET /api/Restaurant/{restaurantId}/reservations/table-availability
GET /api/Restaurant/{restaurantId}/reservations/time-availability
GET /api/Restaurant/{restaurantId}/rooms
GET /api/Restaurant/{restaurantId}/rooms/{id}
GET /api/Restaurant/{restaurantId}/settings
GET /api/Restaurant/{restaurantId}/stats/mcm
GET /api/User/current
GET /api/Widget/closed-dates/{restaurantId}
GET /api/Widget/open-dates/{restaurantId}
GET /api/Widget/script
GET /webhooks/Whatsapp
PATCH /api/Message/{messageTrackingId}/opened-at
PATCH /api/Restaurant/{restaurantId}
PATCH /api/Restaurant/{restaurantId}/settings/mcm
PATCH /api/Restaurant/{restaurantId}/settings/notifications
PATCH /api/Restaurant/{restaurantId}/settings/reservations
PATCH /api/Restaurant/{restaurantId}/status
POST /api/Oauth2
POST /api/Oauth2/forgot-password
POST /api/Oauth2/reset-password
POST /api/Organization/{organizationId}/members/user
POST /api/Reservations/public/{token}/reactions
POST /api/Restaurant/{restaurantId}/members/user
POST /api/Restaurant/{restaurantId}/reservations/guest
POST /webhooks/Formitable
PUT /api/Reservations/public/{token}/reactions/{reactionId}
PUT /api/Reservations/public/{token}/reservations/{reservationId}
PUT /api/Restaurant/{restaurantId}/dining-tables/displayorder
PUT /api/Restaurant/{restaurantId}/members/{userId}
PUT /api/Restaurant/{restaurantId}/reservations/{id}

Found on 2025-12-26 05:10

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.69.68.45
Domain: develop.wastewarrior.chippr.dev
Port: 443
URL: https://develop.wastewarrior.chippr.dev

First seen 2025-12-10 05:32
Last seen 2026-01-23 12:56
Open for 44 days

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2026-01-23 12:56

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493bab7fec675f5d1a868cd52b83fb27dd959595c8

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Courses/{id}
DELETE /api/Organization/{organizationId}/members/{userId}
DELETE /api/Products/{id}
GET /api/Courses
GET /api/DiningSections
GET /api/DiningSections/{id}
GET /api/Organization/{organizationId}
GET /api/Organization/{organizationId}/members
GET /api/Products
GET /api/Reservations/public/{token}/reservations
GET /api/Restaurant/{restaurantId}/calendar
GET /api/Restaurant/{restaurantId}/calendar/daterange
GET /api/Restaurant/{restaurantId}/calendar/{calendarItemId}
GET /api/Restaurant/{restaurantId}/dining-table-groups
GET /api/Restaurant/{restaurantId}/dining-table-groups/{id}
GET /api/Restaurant/{restaurantId}/dining-tables
GET /api/Restaurant/{restaurantId}/dining-tables/{id}
GET /api/Restaurant/{restaurantId}/members
GET /api/Restaurant/{restaurantId}/menus
GET /api/Restaurant/{restaurantId}/menus/{id}
GET /api/Restaurant/{restaurantId}/operatingdays
GET /api/Restaurant/{restaurantId}/operatinghours
GET /api/Restaurant/{restaurantId}/reservations
GET /api/Restaurant/{restaurantId}/reservations/daily-counts
GET /api/Restaurant/{restaurantId}/reservations/reaction-totals
GET /api/Restaurant/{restaurantId}/reservations/table-availability
GET /api/Restaurant/{restaurantId}/reservations/time-availability
GET /api/Restaurant/{restaurantId}/rooms
GET /api/Restaurant/{restaurantId}/rooms/{id}
GET /api/Restaurant/{restaurantId}/settings
GET /api/Restaurant/{restaurantId}/stats/mcm
GET /api/User/current
GET /api/Widget/closed-dates/{restaurantId}
GET /api/Widget/open-dates/{restaurantId}
GET /api/Widget/script
GET /webhooks/Whatsapp
PATCH /api/Message/{messageTrackingId}/opened-at
PATCH /api/Restaurant/{restaurantId}
PATCH /api/Restaurant/{restaurantId}/settings/mcm
PATCH /api/Restaurant/{restaurantId}/settings/notifications
PATCH /api/Restaurant/{restaurantId}/settings/reservations
PATCH /api/Restaurant/{restaurantId}/status
POST /api/Oauth2
POST /api/Oauth2/forgot-password
POST /api/Oauth2/reset-password
POST /api/Organization/{organizationId}/members/user
POST /api/Reservations/public/{token}/reactions
POST /api/Restaurant/{restaurantId}/members/user
POST /api/Restaurant/{restaurantId}/reservations/guest
POST /webhooks/Formitable
PUT /api/Reservations/public/{token}/reactions/{reactionId}
PUT /api/Reservations/public/{token}/reservations/{reservationId}
PUT /api/Restaurant/{restaurantId}/dining-tables/displayorder
PUT /api/Restaurant/{restaurantId}/members/{userId}
PUT /api/Restaurant/{restaurantId}/reservations/{id}

Found on 2026-01-02 23:45

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493bab7fec675f5d1a868cd52b83fb27dd9c264625

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Courses/{id}
DELETE /api/Organization/{organizationId}/members/{userId}
DELETE /api/Products/{id}
GET /api/Courses
GET /api/DiningSections
GET /api/DiningSections/{id}
GET /api/Organization/{organizationId}
GET /api/Organization/{organizationId}/members
GET /api/Products
GET /api/Reservations/public/{token}/reservations
GET /api/Restaurant/{restaurantId}/calendar
GET /api/Restaurant/{restaurantId}/calendar/daterange
GET /api/Restaurant/{restaurantId}/calendar/{calendarItemId}
GET /api/Restaurant/{restaurantId}/dining-table-groups
GET /api/Restaurant/{restaurantId}/dining-table-groups/{id}
GET /api/Restaurant/{restaurantId}/dining-tables
GET /api/Restaurant/{restaurantId}/dining-tables/{id}
GET /api/Restaurant/{restaurantId}/members
GET /api/Restaurant/{restaurantId}/menus
GET /api/Restaurant/{restaurantId}/menus/{id}
GET /api/Restaurant/{restaurantId}/operatingdays
GET /api/Restaurant/{restaurantId}/operatinghours
GET /api/Restaurant/{restaurantId}/reservations
GET /api/Restaurant/{restaurantId}/reservations/reaction-totals
GET /api/Restaurant/{restaurantId}/reservations/table-availability
GET /api/Restaurant/{restaurantId}/reservations/time-availability
GET /api/Restaurant/{restaurantId}/rooms
GET /api/Restaurant/{restaurantId}/rooms/{id}
GET /api/Restaurant/{restaurantId}/settings
GET /api/Restaurant/{restaurantId}/stats/mcm
GET /api/User/current
GET /api/Widget/closed-dates/{restaurantId}
GET /api/Widget/open-dates/{restaurantId}
GET /api/Widget/script
GET /webhooks/Whatsapp
PATCH /api/Message/{messageTrackingId}/opened-at
PATCH /api/Restaurant/{restaurantId}
PATCH /api/Restaurant/{restaurantId}/settings/mcm
PATCH /api/Restaurant/{restaurantId}/settings/notifications
PATCH /api/Restaurant/{restaurantId}/settings/reservations
PATCH /api/Restaurant/{restaurantId}/status
POST /api/Oauth2
POST /api/Oauth2/forgot-password
POST /api/Oauth2/reset-password
POST /api/Organization/{organizationId}/members/user
POST /api/Reservations/public/{token}/reactions
POST /api/Restaurant/{restaurantId}/members/user
POST /api/Restaurant/{restaurantId}/reservations/guest
POST /webhooks/Formitable
PUT /api/Reservations/public/{token}/reactions/{reactionId}
PUT /api/Reservations/public/{token}/reservations/{reservationId}
PUT /api/Restaurant/{restaurantId}/dining-tables/displayorder
PUT /api/Restaurant/{restaurantId}/members/{userId}
PUT /api/Restaurant/{restaurantId}/reservations/{id}

Found on 2025-12-16 22:34

Create report

Open service 13.69.68.45:443 · develop.wastewarrior.chippr.dev

2026-01-23 12:56

HTTP/1.1 200 OK
Connection: close
Content-Type: text/html
Date: Fri, 23 Jan 2026 12:57:10 GMT
Server: Kestrel
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Transfer-Encoding: chunked
Request-Context: appId=cid-v1:0c7735de-f629-4ef2-afe1-4518e218d683
Request-Context: appId=cid-v1:

Page title: 
			Waste Warrior - Help jij in de strijd tegen voedselverspilling?
		

<!DOCTYPE html>
<html lang="nl">
	<head>
		<meta charset="utf-8" />
		<link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png" />
		<link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" />
		<link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" />
		<link rel="icon" href="/favicon.ico" />
		<meta name="viewport" content="width=device-width, initial-scale=1" />
		<meta name="theme-color" content="#000000" />
		<link rel="canonical" href="https://waste-warrior.com/" />
		<meta
			property="og:title"
			content="Waste Warrior | Samen met restaurants tegen voedselverspilling"
			data-rh="true" />
		<meta
			property="og:description"
			content="Waste Warrior biedt een intuïtief platform voor restaurants en cateraars om gastvoorkeuren vooraf te verzamelen en voedselverspilling te verminderen."
			data-rh="true" />
		<meta property="og:type" content="website" data-rh="true" />
		<meta
			property="og:url"
			content="https://waste-warrior.com/"
			data-rh="true" />
		<meta property="og:site_name" content="Waste Warrior" data-rh="true" />
		<meta property="og:image" content="/images/WW-logo.png" data-rh="true" />
		<meta name="twitter:card" content="summary_large_image" />
		<meta
			name="twitter:title"
			content="Waste Warrior | Samen met restaurants tegen voedselverspilling" />
		<meta
			name="twitter:description"
			content="Samen met restaurants en gasten voedselverspilling verminderen via slimme reserveringen en voorkeuren." />
		<meta name="twitter:image" content="/images/WW-logo.png" />
		<link rel="manifest" href="/manifest.json" />
		<title>
			Waste Warrior - Help jij in de strijd tegen voedselverspilling?
		</title>
		<link rel="icon" type="image/png" href="/images/WW-logo.png" />
		<meta
			name="description"
			content="Samen met restaurants en cateraars tegen voedselverspilling: Waste Warrior verzamelt gastvoorkeuren vooraf, optimaliseert reserveringen en vermindert kosten." />
		<meta
			name="keywords"
			content="Waste Warrior, voedselverspilling, restaurants, cateraars, reserveringssysteem, gastvoorkeuren, duurzaamheid" />
		<script type="application/ld+json">
			{
				"@context": "https://schema.org",
				"@type": "Organization",
				"name": "Waste Warrior",
				"url": "https://waste-warrior.com/",
				"logo": "https://waste-warrior.com/images/WW-logo.png",
				"description": "Waste Warrior helpt restaurants en cateraars om gastvoorkeuren vooraf te verzamelen en voedselverspilling te verminderen.",
				"contactPoint": [
					{
						"@type": "ContactPoint",
						"contactType": "customer support",
						"telephone": "+31 6 117 58 189",
						"email": "info@waste-warrior.com",
						"areaServed": "NL",
						"availableLanguage": ["nl", "en"]
					}
				]
			}
		</script>
		<script>
			(function (h, o, t, j, a, r) {
				h.hj =
					h.hj ||
					function () {
						(h.hj.q = h.hj.q || []).push(arguments);
					};
				h._hjSettings = { hjid: 6552454, hjsv: 6 };
				a = o.getElementsByTagName("head")[0];
				r = o.createElement("script");
				r.async = 1;
				r.src = t + h._hjSettings.hjid + j + h._hjSettings.hjsv;
				a.appendChild(r);
			})(window, document, "https://static.hotjar.com/c/hotjar-", ".js?sv=");
		</script>
		<script type="module" crossorigin src="/assets/index-b5e7bce9.js"></script>
		<link rel="stylesheet" href="/assets/index-00e03b76.css">
		<link rel="sitemap" type="application/xml" title="Sitemap" href="/sitemap.xml">
	</head>

	<body>
		<noscript>You need to enable JavaScript to run this app.</noscript>
		<div id="root" class="flex column"></div>
		
	</body>
</html>

Found 2026-01-23 by HttpPlugin

Create report

Open service 13.69.68.45:443 · develop.wastewarrior.chippr.dev

2026-01-10 02:10

HTTP/1.1 200 OK
Connection: close
Content-Type: text/html
Date: Sat, 10 Jan 2026 02:11:03 GMT
Server: Kestrel
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Transfer-Encoding: chunked
Request-Context: appId=cid-v1:0c7735de-f629-4ef2-afe1-4518e218d683
Request-Context: appId=cid-v1:

Page title: 
			Waste Warrior - Help jij in de strijd tegen voedselverspilling?
		

<!DOCTYPE html>
<html lang="nl">
	<head>
		<meta charset="utf-8" />
		<link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png" />
		<link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" />
		<link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" />
		<link rel="icon" href="/favicon.ico" />
		<meta name="viewport" content="width=device-width, initial-scale=1" />
		<meta name="theme-color" content="#000000" />
		<link rel="canonical" href="https://waste-warrior.com/" />
		<meta
			property="og:title"
			content="Waste Warrior | Samen met restaurants tegen voedselverspilling"
			data-rh="true" />
		<meta
			property="og:description"
			content="Waste Warrior biedt een intuïtief platform voor restaurants en cateraars om gastvoorkeuren vooraf te verzamelen en voedselverspilling te verminderen."
			data-rh="true" />
		<meta property="og:type" content="website" data-rh="true" />
		<meta
			property="og:url"
			content="https://waste-warrior.com/"
			data-rh="true" />
		<meta property="og:site_name" content="Waste Warrior" data-rh="true" />
		<meta property="og:image" content="/images/WW-logo.png" data-rh="true" />
		<meta name="twitter:card" content="summary_large_image" />
		<meta
			name="twitter:title"
			content="Waste Warrior | Samen met restaurants tegen voedselverspilling" />
		<meta
			name="twitter:description"
			content="Samen met restaurants en gasten voedselverspilling verminderen via slimme reserveringen en voorkeuren." />
		<meta name="twitter:image" content="/images/WW-logo.png" />
		<link rel="manifest" href="/manifest.json" />
		<title>
			Waste Warrior - Help jij in de strijd tegen voedselverspilling?
		</title>
		<link rel="icon" type="image/png" href="/images/WW-logo.png" />
		<meta
			name="description"
			content="Samen met restaurants en cateraars tegen voedselverspilling: Waste Warrior verzamelt gastvoorkeuren vooraf, optimaliseert reserveringen en vermindert kosten." />
		<meta
			name="keywords"
			content="Waste Warrior, voedselverspilling, restaurants, cateraars, reserveringssysteem, gastvoorkeuren, duurzaamheid" />
		<script type="application/ld+json">
			{
				"@context": "https://schema.org",
				"@type": "Organization",
				"name": "Waste Warrior",
				"url": "https://waste-warrior.com/",
				"logo": "https://waste-warrior.com/images/WW-logo.png",
				"description": "Waste Warrior helpt restaurants en cateraars om gastvoorkeuren vooraf te verzamelen en voedselverspilling te verminderen.",
				"contactPoint": [
					{
						"@type": "ContactPoint",
						"contactType": "customer support",
						"telephone": "+31 6 117 58 189",
						"email": "info@waste-warrior.com",
						"areaServed": "NL",
						"availableLanguage": ["nl", "en"]
					}
				]
			}
		</script>
		<script>
			(function (h, o, t, j, a, r) {
				h.hj =
					h.hj ||
					function () {
						(h.hj.q = h.hj.q || []).push(arguments);
					};
				h._hjSettings = { hjid: 6552454, hjsv: 6 };
				a = o.getElementsByTagName("head")[0];
				r = o.createElement("script");
				r.async = 1;
				r.src = t + h._hjSettings.hjid + j + h._hjSettings.hjsv;
				a.appendChild(r);
			})(window, document, "https://static.hotjar.com/c/hotjar-", ".js?sv=");
		</script>
		<script type="module" crossorigin src="/assets/index-b5e7bce9.js"></script>
		<link rel="stylesheet" href="/assets/index-00e03b76.css">
		<link rel="sitemap" type="application/xml" title="Sitemap" href="/sitemap.xml">
	</head>

	<body>
		<noscript>You need to enable JavaScript to run this app.</noscript>
		<div id="root" class="flex column"></div>
		
	</body>
</html>

Found 2026-01-10 by HttpPlugin

Create report

develop.wastewarrior.chippr.dev

Fingerprint:

cc58c144cd31d515a99347651b02bf0a7bd428ef4c1f640520c2c1011f9c060e

CN:

develop.wastewarrior.chippr.dev

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2025-12-10 00:00

Not after:

2026-04-14 23:59

Domain summary

develop.wastewarrior.chippr.dev 7

1 recorded

IP summary

13.69.68.45 2

1 recorded