LeakIX - Host digisofra.com

Domain digisofra.com

United States

CLOUDFLARENET

Software information

CloudFront

tcp/80

cloudflare

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 188.114.97.3
Domain: api-prod.digisofra.com
Port: 443
URL: https://api-prod.digisofra.com

First seen 2025-12-12 07:59
Last seen 2026-01-09 02:53
Open for 27 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035491641b84cbb9f8e7e605c1b81c19c71448d86014f

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/v1/restaurants/{restaurantId}/ingredients/{id}
GET /api/v1/Identity/userinfo
GET /api/v1/currencies/all
GET /api/v1/customer/restaurants/slug
GET /api/v1/customer/restaurants/{slug}/items
GET /api/v1/customer/restaurants/{slug}/settings
GET /api/v1/languages
GET /api/v1/locations/city/{countryId}
GET /api/v1/locations/country
GET /api/v1/locations/district/{cityId}
GET /api/v1/profile
GET /api/v1/restaurants
GET /api/v1/restaurants/{restaurantId}
GET /api/v1/restaurants/{restaurantId}/categories
GET /api/v1/restaurants/{restaurantId}/categories/{categoryId}
GET /api/v1/restaurants/{restaurantId}/design
GET /api/v1/restaurants/{restaurantId}/feedback
GET /api/v1/restaurants/{restaurantId}/info
GET /api/v1/restaurants/{restaurantId}/ingredients
GET /api/v1/restaurants/{restaurantId}/invoice
GET /api/v1/restaurants/{restaurantId}/languages
GET /api/v1/restaurants/{restaurantId}/menu-editor/count
GET /api/v1/restaurants/{restaurantId}/menu-editor/items
GET /api/v1/restaurants/{restaurantId}/menu-editor/items/search/menu
GET /api/v1/restaurants/{restaurantId}/menu-editor/items/search/{menuId}
GET /api/v1/restaurants/{restaurantId}/menu-editor/items/{itemId}
GET /api/v1/restaurants/{restaurantId}/menus
GET /api/v1/restaurants/{restaurantId}/menus/{menuId}
GET /api/v1/restaurants/{restaurantId}/menus/{menuId}/search
GET /api/v1/restaurants/{restaurantId}/price-settings
GET /api/v1/restaurants/{restaurantId}/products
GET /api/v1/restaurants/{restaurantId}/products/{productId}
GET /api/v1/restaurants/{restaurantId}/qrinfo
GET /api/v1/restaurants/{restaurantId}/slug
GET /api/v1/restaurants/{restaurantId}/translate-editor/items
GET /api/v1/restaurants/{restaurantId}/translate-editor/items/{itemId}
GET /api/v1/restaurants/{restaurantId}/welcome-message
PATCH /api/v1/restaurants/{restaurantId}/categories/{categoryId}/status
PATCH /api/v1/restaurants/{restaurantId}/check-slug
PATCH /api/v1/restaurants/{restaurantId}/general-info
PATCH /api/v1/restaurants/{restaurantId}/menus/{menuId}/status
PATCH /api/v1/restaurants/{restaurantId}/products/{productId}/price
PATCH /api/v1/restaurants/{restaurantId}/products/{productId}/status
PATCH /api/v1/restaurants/{restaurantId}/social-medias
PATCH /api/v1/restaurants/{restaurantId}/translate-editor/strings
POST /api/v1/Identity/login
POST /api/v1/Identity/refresh-token
POST /api/v1/Identity/register
POST /api/v1/Media/Upload
POST /api/v1/contact
POST /api/v1/currencies
POST /api/v1/customer/restaurants/{slug}/feedback
POST /api/v1/profile/change-password
POST /api/v1/restaurants/{restaurantId}/example-menu
POST /api/v1/restaurants/{restaurantId}/example-menu/include
POST /api/v1/restaurants/{restaurantId}/example-menu/include-manuel
POST /api/v1/restaurants/{restaurantId}/menu-editor/move
POST /api/v1/restaurants/{restaurantId}/menus/export
POST /api/v1/restaurants/{restaurantId}/menus/import

Found on 2026-01-09 02:53

Create report

Open service 18.239.69.123:443 · qr.digisofra.com

2026-01-12 21:27

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Date: Mon, 12 Jan 2026 21:27:28 GMT
x-powered-by: Next.js
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Link: </_next/static/media/3703c28dcda155b1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/e4af272ccee01ff0-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 2837e32f921e7e7517dd6f5461c37dfa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 2wrGmktZxgzbxAwiQx30NPXx0XA2TcojjXaeFUVnRm1dnMJ_LGa7Nw==

Page title: DigiSofraDigiSofra

<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="/_next/static/css/9105980065679743.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/e397f34cf59e0e62.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-621dddf4c40de7f5.js"/><script src="/_next/static/chunks/4bd1b696-31d8346a6247a9fc.js" async=""></script><script src="/_next/static/chunks/684-97c0cf19b63204a0.js" async=""></script><script src="/_next/static/chunks/main-app-e61789e440ae6b7e.js" async=""></script><script src="/_next/static/chunks/983-23b206cf183a1766.js" async=""></script><script src="/_next/static/chunks/app/layout-ff914dcfab1c4711.js" async=""></script><script src="/_next/static/chunks/app/error-c72878dda0508191.js" async=""></script><script src="/_next/static/chunks/874-be64e897f51474d4.js" async=""></script><script src="/_next/static/chunks/app/%5B...slug%5D/not-found-f10a9e8de0a39a8a.js" async=""></script><meta name="next-size-adjust" content=""/><title>DigiSofra</title><title>DigiSofra</title><meta name="description" content="Sofra&#x27;n Şık Menün Tık"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body class="min-h-screen font-sans antialiased __variable_f367f3" style="height:calc(var(--vh, 1vh) * 100)"><div data-overlay-container="true"><script>((e,t,r,n,o,a,i,s)=>{let l=document.documentElement,u=["light","dark"];function c(t){var r;(Array.isArray(e)?e:[e]).forEach(e=>{let r="class"===e,n=r&&a?o.map(e=>a[e]||e):o;r?(l.classList.remove(...n),l.classList.add(a&&a[t]?a[t]:t)):l.setAttribute(e,t)}),r=t,s&&u.includes(r)&&(l.style.colorScheme=r)}if(n)c(n);else try{let e=localStorage.getItem(t)||r,n=i&&"system"===e?window.matchMedia("(prefers-color-scheme: dark)").matches?"dark":"light":e;c(n)}catch(e){}})("class","theme","dark",null,["light","dark"],null,true,true)</script><div class="flex items-center justify-center h-screen"><p>QR kodu tarayarak restoran menüsüne erişebilirsiniz</p></div><!--$--><!--/$--><!--$--><!--/$--><section class="Toastify" aria-live="polite" aria-atomic="false" aria-relevant="additions text" aria-label="Notifications Alt+T"></section></div><script src="/_next/static/chunks/webpack-621dddf4c40de7f5.js" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[45348,[\"983\",\"static/chunks/983-23b206cf183a1766.js\",\"177\",\"static/chunks/app/layout-ff914dcfab1c4711.js\"],\"Providers\"]\n3:I[87555,[],\"\"]\n4:I[96678,[\"39\",\"static/chunks/app/error-c72878dda0508191.js\"],\"default\"]\n5:I[31295,[],\"\"]\n6:I[6874,[\"874\",\"static/chunks/874-be64e897f51474d4.js\",\"271\",\"static/chunks/app/%5B...slug%5D/not-found-f10a9e8de0a39a8a.js\"],\"\"]\n7:I[38543,[\"983\",\"static/chunks/983-23b206cf183a1766.js\",\"177\",\"static/chunks/app/layout-ff914dcfab1c4711.js\"],\"ToastContainer\"]\n9:I[59665,[],\"MetadataBoundary\"]\nb:I[59665,[],\"OutletBoundary\"]\ne:I[74911,[],\"AsyncMetadataOutlet\"]\n10:I[59665,[],\"ViewportBoundary\"]\n12:I[26614,[],\"\"]\n13:\"$Sreact.suspense\"\n14:I[74911,[],\"AsyncMetadata\"]\n:HL[\"/_next/static/media/3703c28dcda155b1-s.p.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/media/e4af272ccee01ff0-s.p.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/css/9105980065679743.css\",\"style\"]\n:HL[\"/_next/static/css/e397f34cf59e0e62.css\",\"style\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"dr0hNw9AiRtHSvHDha2WB\",\"p\":\"\",\"c\":[\"\",\"\"],\"i\":false,\"f\":[[[\"\",{\"children\":[\"__PAGE__\",{}]},\"$undefined\",\"$undefined\",true],[\"\",[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/st

Found 2 days ago by HttpPlugin

Domain digisofra.com

United States

Software information

Swagger API description is publicly available

*.qr.digisofra.comqr.digisofra.com

digisofra.com*.digisofra.com

*.digisofra.comdigisofra.com

Domain summary

IP summary