Kestrel
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035497337c24f9d927200fa964ce7597a8512692ce68d
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/chief-complaints/batch
DELETE /api/hot-wash/batch
DELETE /api/media
DELETE /api/responders/batch
GET /api/account-requests
GET /api/after-action-report-settings/incidentId/{incidentId}
GET /api/after-action-report-settings/{id}
GET /api/after-action-reports
GET /api/after-action-reports/document
GET /api/after-action-reports/{id}
GET /api/authentication/current-user
GET /api/authentication/organization-request
GET /api/badges/pdf
GET /api/badges/team-badge
GET /api/chief-complaints
GET /api/chief-complaints/{id}
GET /api/family-assistance
GET /api/family-assistance/{id}
GET /api/general-contacts
GET /api/general-contacts/{id}
GET /api/hot-wash
GET /api/hot-wash/{id}
GET /api/incidents
GET /api/incidents/{id}
GET /api/locations
GET /api/locations/{id}
GET /api/map
GET /api/map/statistics
GET /api/map/victims
GET /api/meal-tracking
GET /api/meal-tracking/statistics
GET /api/organization-roles
GET /api/organization-roles/{id}
GET /api/persons
GET /api/persons/{id}
GET /api/responder-time-logs
GET /api/responders
GET /api/responders/team
GET /api/responders/{id}
GET /api/status-map
GET /api/super-admin
GET /api/super-admin/{id}
GET /api/tenant-configurations/{TenantId}
GET /api/tenant-settings/{TenantId}/list
GET /api/tenants
GET /api/tenants/{Id}
GET /api/users
GET /api/users/{id}
POST /api/account-requests/batch
POST /api/after-action-report-settings
POST /api/authentication/login
POST /api/authentication/logout
POST /api/authentication/refresh-token
POST /api/authentication/request-reset
POST /api/authentication/reset
POST /api/meal-tracking/get-by-id
POST /api/media/upload
POST /api/persons/match
POST /api/persons/unmatch
POST /api/super-admin/reset-password
POST /api/tenant-configurations
POST /api/tenant-settings
POST /api/tenants/default-units
POST /api/tenants/status
POST /api/users/batch
POST /api/users/reset-password/batch
PUT /api/persons/connect
PUT /api/users/settings
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035497337c24f9d927200fa964ce7597a8512692ce68d
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/chief-complaints/batch
DELETE /api/hot-wash/batch
DELETE /api/media
DELETE /api/responders/batch
GET /api/account-requests
GET /api/after-action-report-settings/incidentId/{incidentId}
GET /api/after-action-report-settings/{id}
GET /api/after-action-reports
GET /api/after-action-reports/document
GET /api/after-action-reports/{id}
GET /api/authentication/current-user
GET /api/authentication/organization-request
GET /api/badges/pdf
GET /api/badges/team-badge
GET /api/chief-complaints
GET /api/chief-complaints/{id}
GET /api/family-assistance
GET /api/family-assistance/{id}
GET /api/general-contacts
GET /api/general-contacts/{id}
GET /api/hot-wash
GET /api/hot-wash/{id}
GET /api/incidents
GET /api/incidents/{id}
GET /api/locations
GET /api/locations/{id}
GET /api/map
GET /api/map/statistics
GET /api/map/victims
GET /api/meal-tracking
GET /api/meal-tracking/statistics
GET /api/organization-roles
GET /api/organization-roles/{id}
GET /api/persons
GET /api/persons/{id}
GET /api/responder-time-logs
GET /api/responders
GET /api/responders/team
GET /api/responders/{id}
GET /api/status-map
GET /api/super-admin
GET /api/super-admin/{id}
GET /api/tenant-configurations/{TenantId}
GET /api/tenant-settings/{TenantId}/list
GET /api/tenants
GET /api/tenants/{Id}
GET /api/users
GET /api/users/{id}
POST /api/account-requests/batch
POST /api/after-action-report-settings
POST /api/authentication/login
POST /api/authentication/logout
POST /api/authentication/refresh-token
POST /api/authentication/request-reset
POST /api/authentication/reset
POST /api/meal-tracking/get-by-id
POST /api/media/upload
POST /api/persons/match
POST /api/persons/unmatch
POST /api/super-admin/reset-password
POST /api/tenant-configurations
POST /api/tenant-settings
POST /api/tenants/default-units
POST /api/tenants/status
POST /api/users/batch
POST /api/users/reset-password/batch
PUT /api/persons/connect
PUT /api/users/settings
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035497337c24f9d927200fa964ce7597a8512692ce68d
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/chief-complaints/batch
DELETE /api/hot-wash/batch
DELETE /api/media
DELETE /api/responders/batch
GET /api/account-requests
GET /api/after-action-report-settings/incidentId/{incidentId}
GET /api/after-action-report-settings/{id}
GET /api/after-action-reports
GET /api/after-action-reports/document
GET /api/after-action-reports/{id}
GET /api/authentication/current-user
GET /api/authentication/organization-request
GET /api/badges/pdf
GET /api/badges/team-badge
GET /api/chief-complaints
GET /api/chief-complaints/{id}
GET /api/family-assistance
GET /api/family-assistance/{id}
GET /api/general-contacts
GET /api/general-contacts/{id}
GET /api/hot-wash
GET /api/hot-wash/{id}
GET /api/incidents
GET /api/incidents/{id}
GET /api/locations
GET /api/locations/{id}
GET /api/map
GET /api/map/statistics
GET /api/map/victims
GET /api/meal-tracking
GET /api/meal-tracking/statistics
GET /api/organization-roles
GET /api/organization-roles/{id}
GET /api/persons
GET /api/persons/{id}
GET /api/responder-time-logs
GET /api/responders
GET /api/responders/team
GET /api/responders/{id}
GET /api/status-map
GET /api/super-admin
GET /api/super-admin/{id}
GET /api/tenant-configurations/{TenantId}
GET /api/tenant-settings/{TenantId}/list
GET /api/tenants
GET /api/tenants/{Id}
GET /api/users
GET /api/users/{id}
POST /api/account-requests/batch
POST /api/after-action-report-settings
POST /api/authentication/login
POST /api/authentication/logout
POST /api/authentication/refresh-token
POST /api/authentication/request-reset
POST /api/authentication/reset
POST /api/meal-tracking/get-by-id
POST /api/media/upload
POST /api/persons/match
POST /api/persons/unmatch
POST /api/super-admin/reset-password
POST /api/tenant-configurations
POST /api/tenant-settings
POST /api/tenants/default-units
POST /api/tenants/status
POST /api/users/batch
POST /api/users/reset-password/batch
PUT /api/persons/connect
PUT /api/users/settings
Open service 20.4.244.223:443 · www.emcplatforms.com
2026-01-11 10:11
HTTP/1.1 200 OK Content-Length: 1363 Connection: close Content-Type: text/html Date: Sun, 11 Jan 2026 10:12:34 GMT Cache-Control: public, must-revalidate, max-age=30 ETag: "88529318" Last-Modified: Fri, 06 Jun 2025 16:00:02 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off Content-Security-Policy: default-src 'self' https: 'unsafe-eval' 'unsafe-inline'; worker-src 'self' blob: https:; child-src 'self' blob: https:; img-src 'self' https: blob: data:; connect-src 'self' https:; object-src 'none' Page title: EMC <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="EMC"/><link rel="apple-touch-icon" href="/apple-touch-icon.png" sizes="180x180"/><link rel="icon" href="/favicon-32x32.png" sizes="32x32"/><link rel="icon" href="/favicon-16x16.png" sizes="16x16"/><link href="https://cdn-uicons.flaticon.com/2.5.1/uicons-solid-rounded/css/uicons-solid-rounded.css" rel="stylesheet"/><link href="https://cdn-uicons.flaticon.com/2.5.1/uicons-solid-straight/css/uicons-solid-straight.css" rel="stylesheet"/><link href="https://cdn-uicons.flaticon.com/2.5.1/uicons-regular-straight/css/uicons-regular-straight.css" rel="stylesheet"/><link href="https://cdn-uicons.flaticon.com/2.5.1/uicons-brands/css/uicons-brands.css" rel="stylesheet"/><link rel="icon" href="/android-chrome-512x512.png" sizes="512x512"/><link rel="icon" href="/android-chrome-192x192.png" sizes="192x192"/><link rel="manifest" href="/manifest.json"/><title>EMC</title><script defer="defer" src="/static/js/main.3345f9bc.js"></script><link href="/static/css/main.a7014e2d.css" rel="stylesheet"></head><body class="emc"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Open service 20.4.244.223:80 · www.emcplatforms.com
2026-01-11 10:11
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Sun, 11 Jan 2026 10:12:36 GMT Location: https://www.emcplatforms.com/
Open service 20.12.97.102:443 · emcplatforms.com
2026-01-11 01:10
HTTP/1.1 200 OK Content-Length: 1363 Connection: close Content-Type: text/html Date: Sun, 11 Jan 2026 01:11:26 GMT Cache-Control: public, must-revalidate, max-age=30 ETag: "88529318" Last-Modified: Fri, 06 Jun 2025 16:00:02 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off Content-Security-Policy: default-src 'self' https: 'unsafe-eval' 'unsafe-inline'; worker-src 'self' blob: https:; child-src 'self' blob: https:; img-src 'self' https: blob: data:; connect-src 'self' https:; object-src 'none' Page title: EMC <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="EMC"/><link rel="apple-touch-icon" href="/apple-touch-icon.png" sizes="180x180"/><link rel="icon" href="/favicon-32x32.png" sizes="32x32"/><link rel="icon" href="/favicon-16x16.png" sizes="16x16"/><link href="https://cdn-uicons.flaticon.com/2.5.1/uicons-solid-rounded/css/uicons-solid-rounded.css" rel="stylesheet"/><link href="https://cdn-uicons.flaticon.com/2.5.1/uicons-solid-straight/css/uicons-solid-straight.css" rel="stylesheet"/><link href="https://cdn-uicons.flaticon.com/2.5.1/uicons-regular-straight/css/uicons-regular-straight.css" rel="stylesheet"/><link href="https://cdn-uicons.flaticon.com/2.5.1/uicons-brands/css/uicons-brands.css" rel="stylesheet"/><link rel="icon" href="/android-chrome-512x512.png" sizes="512x512"/><link rel="icon" href="/android-chrome-192x192.png" sizes="192x192"/><link rel="manifest" href="/manifest.json"/><title>EMC</title><script defer="defer" src="/static/js/main.3345f9bc.js"></script><link href="/static/css/main.a7014e2d.css" rel="stylesheet"></head><body class="emc"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Open service 20.12.97.102:80 · emcplatforms.com
2026-01-11 01:10
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Sun, 11 Jan 2026 01:11:25 GMT Location: https://emcplatforms.com/
Open service 74.179.233.107:443 · api.emcplatforms.com
2026-01-10 00:36
HTTP/1.1 404 Not Found content-length: 0 date: Sat, 10 Jan 2026 00:36:05 GMT server: Kestrel request-context: appId=cid-v1:c12d5971-8ef4-434b-88b7-0c720c43bb99 connection: close
Open service 48.217.128.10:443 · api-dev.emcplatforms.com
2026-01-09 21:42
HTTP/1.1 404 Not Found content-length: 0 date: Fri, 09 Jan 2026 21:42:55 GMT server: Kestrel request-context: appId=cid-v1:a788c8f1-b8e2-4dd1-bc82-0f7cd8e81ce6 connection: close
Open service 40.90.241.107:443 · api-uat.emcplatforms.com
2026-01-09 13:50
HTTP/1.1 404 Not Found content-length: 0 date: Fri, 09 Jan 2026 13:51:00 GMT server: Kestrel request-context: appId=cid-v1:c12d5971-8ef4-434b-88b7-0c720c43bb99 connection: close
Open service 51.105.228.104:443 · www.emcplatforms.com
2026-01-05 02:03
HTTP/1.1 200 OK Content-Length: 1363 Connection: close Content-Type: text/html Date: Mon, 05 Jan 2026 02:03:24 GMT Cache-Control: public, must-revalidate, max-age=30 ETag: "88529318" Last-Modified: Fri, 06 Jun 2025 16:00:02 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off Content-Security-Policy: default-src 'self' https: 'unsafe-eval' 'unsafe-inline'; worker-src 'self' blob: https:; child-src 'self' blob: https:; img-src 'self' https: blob: data:; connect-src 'self' https:; object-src 'none' Page title: EMC <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="EMC"/><link rel="apple-touch-icon" href="/apple-touch-icon.png" sizes="180x180"/><link rel="icon" href="/favicon-32x32.png" sizes="32x32"/><link rel="icon" href="/favicon-16x16.png" sizes="16x16"/><link href="https://cdn-uicons.flaticon.com/2.5.1/uicons-solid-rounded/css/uicons-solid-rounded.css" rel="stylesheet"/><link href="https://cdn-uicons.flaticon.com/2.5.1/uicons-solid-straight/css/uicons-solid-straight.css" rel="stylesheet"/><link href="https://cdn-uicons.flaticon.com/2.5.1/uicons-regular-straight/css/uicons-regular-straight.css" rel="stylesheet"/><link href="https://cdn-uicons.flaticon.com/2.5.1/uicons-brands/css/uicons-brands.css" rel="stylesheet"/><link rel="icon" href="/android-chrome-512x512.png" sizes="512x512"/><link rel="icon" href="/android-chrome-192x192.png" sizes="192x192"/><link rel="manifest" href="/manifest.json"/><title>EMC</title><script defer="defer" src="/static/js/main.3345f9bc.js"></script><link href="/static/css/main.a7014e2d.css" rel="stylesheet"></head><body class="emc"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Open service 20.12.97.102:80 · emcplatforms.com
2026-01-05 02:03
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Mon, 05 Jan 2026 02:03:24 GMT Location: https://emcplatforms.com/
Open service 51.105.228.104:80 · www.emcplatforms.com
2026-01-05 02:03
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Mon, 05 Jan 2026 02:03:24 GMT Location: https://www.emcplatforms.com/
Open service 20.12.97.102:443 · emcplatforms.com
2026-01-05 02:03
HTTP/1.1 200 OK Content-Length: 1363 Connection: close Content-Type: text/html Date: Mon, 05 Jan 2026 02:03:24 GMT Cache-Control: public, must-revalidate, max-age=30 ETag: "88529318" Last-Modified: Fri, 06 Jun 2025 16:00:02 GMT Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Referrer-Policy: same-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-DNS-Prefetch-Control: off Content-Security-Policy: default-src 'self' https: 'unsafe-eval' 'unsafe-inline'; worker-src 'self' blob: https:; child-src 'self' blob: https:; img-src 'self' https: blob: data:; connect-src 'self' https:; object-src 'none' Page title: EMC <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="EMC"/><link rel="apple-touch-icon" href="/apple-touch-icon.png" sizes="180x180"/><link rel="icon" href="/favicon-32x32.png" sizes="32x32"/><link rel="icon" href="/favicon-16x16.png" sizes="16x16"/><link href="https://cdn-uicons.flaticon.com/2.5.1/uicons-solid-rounded/css/uicons-solid-rounded.css" rel="stylesheet"/><link href="https://cdn-uicons.flaticon.com/2.5.1/uicons-solid-straight/css/uicons-solid-straight.css" rel="stylesheet"/><link href="https://cdn-uicons.flaticon.com/2.5.1/uicons-regular-straight/css/uicons-regular-straight.css" rel="stylesheet"/><link href="https://cdn-uicons.flaticon.com/2.5.1/uicons-brands/css/uicons-brands.css" rel="stylesheet"/><link rel="icon" href="/android-chrome-512x512.png" sizes="512x512"/><link rel="icon" href="/android-chrome-192x192.png" sizes="192x192"/><link rel="manifest" href="/manifest.json"/><title>EMC</title><script defer="defer" src="/static/js/main.3345f9bc.js"></script><link href="/static/css/main.a7014e2d.css" rel="stylesheet"></head><body class="emc"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
Open service 74.179.233.107:443 · api.emcplatforms.com
2026-01-02 19:33
HTTP/1.1 404 Not Found content-length: 0 date: Fri, 02 Jan 2026 19:33:27 GMT server: Kestrel request-context: appId=cid-v1:c12d5971-8ef4-434b-88b7-0c720c43bb99 connection: close
Open service 40.90.241.107:443 · api-uat.emcplatforms.com
2026-01-02 19:19
HTTP/1.1 404 Not Found content-length: 0 date: Fri, 02 Jan 2026 19:19:27 GMT server: Kestrel request-context: appId=cid-v1:c12d5971-8ef4-434b-88b7-0c720c43bb99 connection: close
Open service 48.217.128.10:443 · api-dev.emcplatforms.com
2026-01-02 16:46
HTTP/1.1 404 Not Found content-length: 0 date: Fri, 02 Jan 2026 16:46:44 GMT server: Kestrel request-context: appId=cid-v1:a788c8f1-b8e2-4dd1-bc82-0f7cd8e81ce6 connection: close
Open service 48.217.128.10:443 · api-dev.emcplatforms.com
2025-12-30 14:17
HTTP/1.1 404 Not Found content-length: 0 date: Tue, 30 Dec 2025 14:17:49 GMT server: Kestrel request-context: appId=cid-v1:a788c8f1-b8e2-4dd1-bc82-0f7cd8e81ce6 connection: close
Open service 74.179.233.107:443 · api.emcplatforms.com
2025-12-23 09:17
HTTP/1.1 404 Not Found content-length: 0 date: Tue, 23 Dec 2025 09:17:11 GMT server: Kestrel request-context: appId=cid-v1:c12d5971-8ef4-434b-88b7-0c720c43bb99 connection: close
Open service 48.217.128.10:443 · api-dev.emcplatforms.com
2025-12-23 05:08
HTTP/1.1 404 Not Found content-length: 0 date: Tue, 23 Dec 2025 05:08:39 GMT server: Kestrel request-context: appId=cid-v1:a788c8f1-b8e2-4dd1-bc82-0f7cd8e81ce6 connection: close
Open service 40.90.241.107:443 · api-uat.emcplatforms.com
2025-12-23 04:57
HTTP/1.1 404 Not Found content-length: 0 date: Tue, 23 Dec 2025 04:57:56 GMT server: Kestrel request-context: appId=cid-v1:c12d5971-8ef4-434b-88b7-0c720c43bb99 connection: close
Open service 74.179.233.107:443 · api.emcplatforms.com
2025-12-21 05:44
HTTP/1.1 404 Not Found content-length: 0 date: Sun, 21 Dec 2025 05:44:04 GMT server: Kestrel request-context: appId=cid-v1:c12d5971-8ef4-434b-88b7-0c720c43bb99 connection: close
Open service 40.90.241.107:443 · api-uat.emcplatforms.com
2025-12-21 01:57
HTTP/1.1 404 Not Found content-length: 0 date: Sun, 21 Dec 2025 01:57:51 GMT server: Kestrel request-context: appId=cid-v1:c12d5971-8ef4-434b-88b7-0c720c43bb99 connection: close
Open service 48.217.128.10:443 · api-dev.emcplatforms.com
2025-12-20 15:36
HTTP/1.1 404 Not Found content-length: 0 date: Sat, 20 Dec 2025 15:36:12 GMT server: Kestrel request-context: appId=cid-v1:a788c8f1-b8e2-4dd1-bc82-0f7cd8e81ce6 connection: close
Open service 74.179.233.107:443 · api.emcplatforms.com
2025-12-19 07:39
HTTP/1.1 404 Not Found content-length: 0 date: Fri, 19 Dec 2025 07:39:13 GMT server: Kestrel request-context: appId=cid-v1:c12d5971-8ef4-434b-88b7-0c720c43bb99 connection: close
Open service 40.90.241.107:443 · api-uat.emcplatforms.com
2025-12-19 04:49
HTTP/1.1 404 Not Found content-length: 0 date: Fri, 19 Dec 2025 04:49:13 GMT server: Kestrel request-context: appId=cid-v1:c12d5971-8ef4-434b-88b7-0c720c43bb99 connection: close