LeakIX - Host indiatimes.com

Domain indiatimes.com

Germany

Akamai International B.V.

Software information

AkamaiGHost

tcp/443 tcp/80

AmazonS3

tcp/443 tcp/80

Bhoot

tcp/443 tcp/80

cloudflare

tcp/443 tcp/80 tcp/8443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 223.165.28.59
Domain: qcsubscription.economictimes.indiatimes.com
Port: 443
URL: https://qcsubscription.economictimes.indiatimes.com

First seen 2025-10-24 05:25
Last seen 2025-12-14 04:19
Open for 50 days

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec75a89cf9e4d10f187f1bfd36e85fe1b03a0f640a

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /admin/getVoucherDetails
GET /admin/getVoucherDetailsCsv
GET /admin/voucherLogs
GET /admin/vouchers
GET /api/entitlements/{access_token}
GET /api/subscription/get
GET /subscription/HibernateException
GET /subscription/JDBCConnectionException
GET /subscription/SQLException
GET /subscription/activationStatus
GET /subscription/allGroup
GET /subscription/api/deal/
GET /subscription/api/deal/eventCode/{eventCode}/isEventCodePresent
GET /subscription/api/deal/getTSourceAndCampaignDetails
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCode
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCodeV1
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plutus
GET /subscription/api/{merchantCode}/{geoRegion}/offerDetails
GET /subscription/benefitActivationStatus
GET /subscription/benefitActivationStatusS2S
GET /subscription/merchant/{merchantCode}/mySubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/V2/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/availBenefit/{initTxn}
GET /subscription/merchant/{merchantCode}/product/{productCode}/cancelReasons
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegionCode}/plan/{planId}/planPriceDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/planDealInfo
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealInfoV2
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planGroupsDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/planCode/{planCode}/dealCode/{dealCode}/planDealDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/V2/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/changeProductVariant
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/findSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/invoice/userDetails
GET /subscription/merchant/{merchantCode}/product/{productCode}/latestSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/onBoardingEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibilityV1
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionExtendOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/userPendingTransaction
GET /subscription/merchant/{merchantCode}/product/{productCode}/v2/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/voucherBenefitDetail
GET /subscription/merchant/{merchantCode}/subscriptionInformation
GET /subscription/merchant/{merchantCode}/v2/mySubscription
GET /subscription/partner/vendor-order
GET /subscription/paymentOrderStatus
GET /subscription/permission-subscription
GET /subscription/redisSnappyJdk
GET /subscription/redisTest
GET /subscription/redisTestSnappyJson
GET /subscription/subscription-permission
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/loginIdentifier/{loginIdentifier}/lastSubscription
GET /subscription/v2/permission-subscription
GET /subscription/v2/subscription-permission
GET /subscription/v3/permission-subscription
GET /subscription/vendorCode/{vendorCode}/orderId/{vendorOrderId}/getTilPartnerStatus
GET /subscription/{merchantCode}/subscriptionSummary
POST /api/merchant/{merchantCode}/product/{productCode}/findLastSubscription
POST /api/payment_trans
POST /api/subscription/receiptUpload
POST /api/subscription/reconcile
POST /api/subscription/redeemVoucher
POST /subscription/V2/paymentPayload
POST /subscription/V2/planChangeOffer
POST /subscription/api/deal/applyDealCode
POST /subscription/api/deal/createDealCodeInCache
POST /subscription/api/deal/upload
POST /subscription/api/deal/uploadDealCodes
POST /subscription/api/{merchantCode}/{productCode}/{geoRegion}/offers
POST /subscription/applysubscriptionExtension
POST /subscription/benefitActivation
POST /subscription/benefitActivationS2S
POST /subscription/changeProductVariant
POST /subscription/gdprUpdate
POST /subscription/guestUserAppSubscriptionDetail
POST /subscription/invoice/userDetails
POST /subscription/mapGroupPlanToRenew
POST /subscription/mapGroupPlanToUpgrade
POST /subscription/mapPlanToRenew
POST /subscription/mapPlanToUpgrade
POST /subscription/merchant/{merchantCode}/product/{productCode}/V2/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/accessPassRetrialPayment
POST /subscription/merchant/{merchantCode}/product/{productCode}/cancel
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/code/{eventCode}/generateAccessPass
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/introPlanEligibilityCheck
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/userPlans
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/v2/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/redeemBenefit/{initTxnId}/{planOfferType}
POST /subscription/merchant/{merchantCode}/product/{productCode}/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/verifiyReceiptAndSubscription
POST /subscription/orders/{platform}/free-trial
POST /subscription/paymentPayload
POST /subscription/planChangeOffer
POST /subscription/planChangePurchase
POST /subscription/promoOfferRequest
POST /subscription/promoSignature
POST /subscription/retrial-payment
POST /subscription/siReMandate
POST /subscription/signature
POST /subscription/sso-uuid
POST /subscription/ssoVerifiedEmail
POST /subscription/tilPartnerSubscription
POST /subscription/unifiedReceiptMapping
POST /subscription/user-payment-link
POST /subscription/userDeviceMapping
POST /subscription/userPay
POST /subscription/{merchantCode}/activateSubscriptionAsBenefit
POST /subscription/{merchantCode}/{productCode}/partnerUserSubscription
POST /subscription/{projectCode}/informGdprStatus
POST /user_subscriptions/api/payment/failTrans
POST /user_subscriptions/api/payment/ok
POST /user_subscriptions/api/payment/pending
PUT /subscription/subPlanPeriod

Found on 2025-12-14 04:19

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec75a89cf9e4d10f187f1bfd36e85fe1b079d4b914

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /admin/getVoucherDetails
GET /admin/getVoucherDetailsCsv
GET /admin/voucherLogs
GET /admin/vouchers
GET /api/entitlements/{access_token}
GET /api/subscription/get
GET /subscription/HibernateException
GET /subscription/JDBCConnectionException
GET /subscription/SQLException
GET /subscription/activationStatus
GET /subscription/allGroup
GET /subscription/api/deal/
GET /subscription/api/deal/eventCode/{eventCode}/isEventCodePresent
GET /subscription/api/deal/getTSourceAndCampaignDetails
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCode
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCodeV1
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plutus
GET /subscription/api/{merchantCode}/{geoRegion}/offerDetails
GET /subscription/benefitActivationStatus
GET /subscription/benefitActivationStatusS2S
GET /subscription/merchant/{merchantCode}/mySubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/V2/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/availBenefit/{initTxn}
GET /subscription/merchant/{merchantCode}/product/{productCode}/cancelReasons
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegionCode}/plan/{planId}/planPriceDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/planDealInfo
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealInfoV2
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planGroupsDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/planCode/{planCode}/dealCode/{dealCode}/planDealDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/V2/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/changeProductVariant
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/findSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/invoice/userDetails
GET /subscription/merchant/{merchantCode}/product/{productCode}/latestSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/onBoardingEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibilityV1
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionExtendOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/userPendingTransaction
GET /subscription/merchant/{merchantCode}/product/{productCode}/v2/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/voucherBenefitDetail
GET /subscription/merchant/{merchantCode}/subscriptionInformation
GET /subscription/merchant/{merchantCode}/v2/mySubscription
GET /subscription/partner/{partnerVendorOrderId}/vendor-order
GET /subscription/paymentOrderStatus
GET /subscription/permission-subscription
GET /subscription/redisSnappyJdk
GET /subscription/redisTest
GET /subscription/redisTestSnappyJson
GET /subscription/subscription-permission
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/loginIdentifier/{loginIdentifier}/lastSubscription
GET /subscription/v2/permission-subscription
GET /subscription/v2/subscription-permission
GET /subscription/v3/permission-subscription
GET /subscription/vendorCode/{vendorCode}/orderId/{vendorOrderId}/getTilPartnerStatus
GET /subscription/{merchantCode}/subscriptionSummary
POST /api/merchant/{merchantCode}/product/{productCode}/findLastSubscription
POST /api/payment_trans
POST /api/subscription/receiptUpload
POST /api/subscription/reconcile
POST /api/subscription/redeemVoucher
POST /subscription/V2/paymentPayload
POST /subscription/V2/planChangeOffer
POST /subscription/api/deal/applyDealCode
POST /subscription/api/deal/createDealCodeInCache
POST /subscription/api/deal/upload
POST /subscription/api/deal/uploadDealCodes
POST /subscription/api/{merchantCode}/{productCode}/{geoRegion}/offers
POST /subscription/applysubscriptionExtension
POST /subscription/benefitActivation
POST /subscription/benefitActivationS2S
POST /subscription/changeProductVariant
POST /subscription/gdprUpdate
POST /subscription/guestUserAppSubscriptionDetail
POST /subscription/invoice/userDetails
POST /subscription/mapGroupPlanToRenew
POST /subscription/mapGroupPlanToUpgrade
POST /subscription/mapPlanToRenew
POST /subscription/mapPlanToUpgrade
POST /subscription/merchant/{merchantCode}/product/{productCode}/V2/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/accessPassRetrialPayment
POST /subscription/merchant/{merchantCode}/product/{productCode}/cancel
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/code/{eventCode}/generateAccessPass
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/introPlanEligibilityCheck
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/userPlans
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/v2/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/redeemBenefit/{initTxnId}/{planOfferType}
POST /subscription/merchant/{merchantCode}/product/{productCode}/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/verifiyReceiptAndSubscription
POST /subscription/orders/{platform}/free-trial
POST /subscription/paymentPayload
POST /subscription/planChangeOffer
POST /subscription/planChangePurchase
POST /subscription/promoOfferRequest
POST /subscription/promoSignature
POST /subscription/retrial-payment
POST /subscription/siReMandate
POST /subscription/signature
POST /subscription/sso-uuid
POST /subscription/ssoVerifiedEmail
POST /subscription/tilPartnerSubscription
POST /subscription/unifiedReceiptMapping
POST /subscription/user-payment-link
POST /subscription/userDeviceMapping
POST /subscription/userPay
POST /subscription/{merchantCode}/activateSubscriptionAsBenefit
POST /subscription/{merchantCode}/{productCode}/partnerUserSubscription
POST /subscription/{projectCode}/informGdprStatus
POST /user_subscriptions/api/payment/failTrans
POST /user_subscriptions/api/payment/ok
POST /user_subscriptions/api/payment/pending
PUT /subscription/subPlanPeriod

Found on 2025-11-24 11:21

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec75a89cf9e4d10f187f1bfd36e85fe1b003ce6921

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /admin/getVoucherDetails
GET /admin/getVoucherDetailsCsv
GET /admin/voucherLogs
GET /admin/vouchers
GET /api/entitlements/{access_token}
GET /api/subscription/get
GET /subscription/HibernateException
GET /subscription/JDBCConnectionException
GET /subscription/SQLException
GET /subscription/activationStatus
GET /subscription/allGroup
GET /subscription/api/deal/
GET /subscription/api/deal/eventCode/{eventCode}/isEventCodePresent
GET /subscription/api/deal/getTSourceAndCampaignDetails
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCode
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCodeV1
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plutus
GET /subscription/api/{merchantCode}/{geoRegion}/offerDetails
GET /subscription/benefitActivationStatus
GET /subscription/benefitActivationStatusS2S
GET /subscription/merchant/{merchantCode}/mySubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/V2/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/availBenefit/{initTxn}
GET /subscription/merchant/{merchantCode}/product/{productCode}/cancelReasons
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegionCode}/plan/{planId}/planPriceDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/planDealInfo
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealInfoV2
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planGroupsDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/planCode/{planCode}/dealCode/{dealCode}/planDealDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/V2/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/changeProductVariant
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/findSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/invoice/userDetails
GET /subscription/merchant/{merchantCode}/product/{productCode}/latestSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/onBoardingEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibilityV1
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionExtendOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/userPendingTransaction
GET /subscription/merchant/{merchantCode}/product/{productCode}/v2/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/voucherBenefitDetail
GET /subscription/merchant/{merchantCode}/subscriptionInformation
GET /subscription/merchant/{merchantCode}/v2/mySubscription
GET /subscription/paymentOrderStatus
GET /subscription/permission-subscription
GET /subscription/redisSnappyJdk
GET /subscription/redisTest
GET /subscription/redisTestSnappyJson
GET /subscription/subscription-permission
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/loginIdentifier/{loginIdentifier}/lastSubscription
GET /subscription/v2/permission-subscription
GET /subscription/v2/subscription-permission
GET /subscription/v3/permission-subscription
GET /subscription/vendorCode/{vendorCode}/orderId/{vendorOrderId}/getTilPartnerStatus
GET /subscription/{merchantCode}/subscriptionSummary
POST /api/merchant/{merchantCode}/product/{productCode}/findLastSubscription
POST /api/payment_trans
POST /api/subscription/receiptUpload
POST /api/subscription/reconcile
POST /api/subscription/redeemVoucher
POST /subscription/V2/paymentPayload
POST /subscription/V2/planChangeOffer
POST /subscription/api/deal/applyDealCode
POST /subscription/api/deal/createDealCodeInCache
POST /subscription/api/deal/upload
POST /subscription/api/deal/uploadDealCodes
POST /subscription/api/{merchantCode}/{productCode}/{geoRegion}/offers
POST /subscription/applysubscriptionExtension
POST /subscription/benefitActivation
POST /subscription/benefitActivationS2S
POST /subscription/changeProductVariant
POST /subscription/gdprUpdate
POST /subscription/guestUserAppSubscriptionDetail
POST /subscription/invoice/userDetails
POST /subscription/mapGroupPlanToRenew
POST /subscription/mapGroupPlanToUpgrade
POST /subscription/mapPlanToRenew
POST /subscription/mapPlanToUpgrade
POST /subscription/merchant/{merchantCode}/product/{productCode}/V2/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/accessPassRetrialPayment
POST /subscription/merchant/{merchantCode}/product/{productCode}/cancel
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/code/{eventCode}/generateAccessPass
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/introPlanEligibilityCheck
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/userPlans
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/v2/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/redeemBenefit/{initTxnId}/{planOfferType}
POST /subscription/merchant/{merchantCode}/product/{productCode}/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/verifiyReceiptAndSubscription
POST /subscription/orders/{platform}/free-trial
POST /subscription/paymentPayload
POST /subscription/planChangeOffer
POST /subscription/planChangePurchase
POST /subscription/promoOfferRequest
POST /subscription/promoSignature
POST /subscription/retrial-payment
POST /subscription/siReMandate
POST /subscription/signature
POST /subscription/sso-uuid
POST /subscription/ssoVerifiedEmail
POST /subscription/tilPartnerSubscription
POST /subscription/unifiedReceiptMapping
POST /subscription/user-payment-link
POST /subscription/userDeviceMapping
POST /subscription/userPay
POST /subscription/{merchantCode}/activateSubscriptionAsBenefit
POST /subscription/{projectCode}/informGdprStatus
POST /user_subscriptions/api/payment/failTrans
POST /user_subscriptions/api/payment/ok
POST /user_subscriptions/api/payment/pending
PUT /subscription/subPlanPeriod

Found on 2025-11-12 07:48

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec75a89cf9e4d10f187f1bfd36e85fe1b030876039

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /admin/getVoucherDetails
GET /admin/getVoucherDetailsCsv
GET /admin/voucherLogs
GET /admin/vouchers
GET /api/entitlements/{access_token}
GET /api/subscription/get
GET /subscription/HibernateException
GET /subscription/JDBCConnectionException
GET /subscription/SQLException
GET /subscription/activationStatus
GET /subscription/allGroup
GET /subscription/api/deal/
GET /subscription/api/deal/eventCode/{eventCode}/isEventCodePresent
GET /subscription/api/deal/getTSourceAndCampaignDetails
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCode
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCodeV1
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plutus
GET /subscription/api/{merchantCode}/{geoRegion}/offerDetails
GET /subscription/benefitActivationStatus
GET /subscription/benefitActivationStatusS2S
GET /subscription/merchant/{merchantCode}/mySubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/V2/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/availBenefit/{initTxn}
GET /subscription/merchant/{merchantCode}/product/{productCode}/cancelReasons
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegionCode}/plan/{planId}/planPriceDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/planDealInfo
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealInfoV2
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planGroupsDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/planCode/{planCode}/dealCode/{dealCode}/planDealDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/changeProductVariant
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/findSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/invoice/userDetails
GET /subscription/merchant/{merchantCode}/product/{productCode}/latestSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/onBoardingEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibilityV1
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionExtendOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/userPendingTransaction
GET /subscription/merchant/{merchantCode}/product/{productCode}/v2/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/voucherBenefitDetail
GET /subscription/merchant/{merchantCode}/subscriptionInformation
GET /subscription/merchant/{merchantCode}/v2/mySubscription
GET /subscription/paymentOrderStatus
GET /subscription/permission-subscription
GET /subscription/redisSnappyJdk
GET /subscription/redisTest
GET /subscription/redisTestSnappyJson
GET /subscription/subscription-permission
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/loginIdentifier/{loginIdentifier}/lastSubscription
GET /subscription/v2/permission-subscription
GET /subscription/v2/subscription-permission
GET /subscription/v3/permission-subscription
GET /subscription/vendorCode/{vendorCode}/orderId/{vendorOrderId}/getTilPartnerStatus
GET /subscription/{merchantCode}/subscriptionSummary
POST /api/merchant/{merchantCode}/product/{productCode}/findLastSubscription
POST /api/payment_trans
POST /api/subscription/receiptUpload
POST /api/subscription/reconcile
POST /api/subscription/redeemVoucher
POST /subscription/V2/paymentPayload
POST /subscription/api/deal/applyDealCode
POST /subscription/api/deal/createDealCodeInCache
POST /subscription/api/deal/upload
POST /subscription/api/deal/uploadDealCodes
POST /subscription/api/{merchantCode}/{productCode}/{geoRegion}/offers
POST /subscription/applysubscriptionExtension
POST /subscription/benefitActivation
POST /subscription/benefitActivationS2S
POST /subscription/changeProductVariant
POST /subscription/gdprUpdate
POST /subscription/guestUserAppSubscriptionDetail
POST /subscription/invoice/userDetails
POST /subscription/mapGroupPlanToRenew
POST /subscription/mapGroupPlanToUpgrade
POST /subscription/mapPlanToRenew
POST /subscription/mapPlanToUpgrade
POST /subscription/merchant/{merchantCode}/product/{productCode}/V2/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/accessPassRetrialPayment
POST /subscription/merchant/{merchantCode}/product/{productCode}/cancel
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/code/{eventCode}/generateAccessPass
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/introPlanEligibilityCheck
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/userPlans
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/v2/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/redeemBenefit/{initTxnId}/{planOfferType}
POST /subscription/merchant/{merchantCode}/product/{productCode}/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/verifiyReceiptAndSubscription
POST /subscription/orders/{platform}/free-trial
POST /subscription/paymentPayload
POST /subscription/planChangeOffer
POST /subscription/planChangePurchase
POST /subscription/promoOfferRequest
POST /subscription/promoSignature
POST /subscription/retrial-payment
POST /subscription/siReMandate
POST /subscription/signature
POST /subscription/sso-uuid
POST /subscription/ssoVerifiedEmail
POST /subscription/tilPartnerSubscription
POST /subscription/unifiedReceiptMapping
POST /subscription/user-payment-link
POST /subscription/userDeviceMapping
POST /subscription/userPay
POST /subscription/{merchantCode}/activateSubscriptionAsBenefit
POST /subscription/{projectCode}/informGdprStatus
POST /user_subscriptions/api/payment/failTrans
POST /user_subscriptions/api/payment/ok
POST /user_subscriptions/api/payment/pending
PUT /subscription/subPlanPeriod

Found on 2025-11-01 10:56

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec75a89cf9e4d10f187f1bfd36e85fe1b05baaf311

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /admin/getVoucherDetails
GET /admin/getVoucherDetailsCsv
GET /admin/voucherLogs
GET /admin/vouchers
GET /api/entitlements/{access_token}
GET /api/subscription/get
GET /subscription/HibernateException
GET /subscription/JDBCConnectionException
GET /subscription/SQLException
GET /subscription/activationStatus
GET /subscription/allGroup
GET /subscription/api/deal/
GET /subscription/api/deal/eventCode/{eventCode}/isEventCodePresent
GET /subscription/api/deal/getTSourceAndCampaignDetails
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCode
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCodeV1
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plutus
GET /subscription/api/{merchantCode}/{geoRegion}/offerDetails
GET /subscription/benefitActivationStatus
GET /subscription/benefitActivationStatusS2S
GET /subscription/merchant/{merchantCode}/mySubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/availBenefit/{initTxn}
GET /subscription/merchant/{merchantCode}/product/{productCode}/cancelReasons
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegionCode}/plan/{planId}/planPriceDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/planDealInfo
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealInfoV2
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planGroupsDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/planCode/{planCode}/dealCode/{dealCode}/planDealDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/changeProductVariant
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/findSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/invoice/userDetails
GET /subscription/merchant/{merchantCode}/product/{productCode}/latestSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/onBoardingEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibilityV1
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionExtendOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/userPendingTransaction
GET /subscription/merchant/{merchantCode}/product/{productCode}/v2/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/voucherBenefitDetail
GET /subscription/merchant/{merchantCode}/subscriptionInformation
GET /subscription/merchant/{merchantCode}/v2/mySubscription
GET /subscription/paymentOrderStatus
GET /subscription/permission-subscription
GET /subscription/redisSnappyJdk
GET /subscription/redisTest
GET /subscription/redisTestSnappyJson
GET /subscription/subscription-permission
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/loginIdentifier/{loginIdentifier}/lastSubscription
GET /subscription/v2/permission-subscription
GET /subscription/v2/subscription-permission
GET /subscription/v3/permission-subscription
GET /subscription/vendorCode/{vendorCode}/orderId/{vendorOrderId}/getTilPartnerStatus
GET /subscription/{merchantCode}/subscriptionSummary
POST /api/merchant/{merchantCode}/product/{productCode}/findLastSubscription
POST /api/payment_trans
POST /api/subscription/receiptUpload
POST /api/subscription/reconcile
POST /api/subscription/redeemVoucher
POST /subscription/V2/paymentPayload
POST /subscription/api/deal/applyDealCode
POST /subscription/api/deal/createDealCodeInCache
POST /subscription/api/deal/upload
POST /subscription/api/deal/uploadDealCodes
POST /subscription/api/{merchantCode}/{productCode}/{geoRegion}/offers
POST /subscription/applysubscriptionExtension
POST /subscription/benefitActivation
POST /subscription/benefitActivationS2S
POST /subscription/changeProductVariant
POST /subscription/gdprUpdate
POST /subscription/guestUserAppSubscriptionDetail
POST /subscription/invoice/userDetails
POST /subscription/mapGroupPlanToRenew
POST /subscription/mapGroupPlanToUpgrade
POST /subscription/mapPlanToRenew
POST /subscription/mapPlanToUpgrade
POST /subscription/merchant/{merchantCode}/product/{productCode}/accessPassRetrialPayment
POST /subscription/merchant/{merchantCode}/product/{productCode}/cancel
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/code/{eventCode}/generateAccessPass
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/introPlanEligibilityCheck
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/userPlans
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/v2/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/redeemBenefit/{initTxnId}/{planOfferType}
POST /subscription/merchant/{merchantCode}/product/{productCode}/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/verifiyReceiptAndSubscription
POST /subscription/orders/{platform}/free-trial
POST /subscription/paymentPayload
POST /subscription/planChangeOffer
POST /subscription/planChangePurchase
POST /subscription/promoOfferRequest
POST /subscription/promoSignature
POST /subscription/retrial-payment
POST /subscription/siReMandate
POST /subscription/signature
POST /subscription/sso-uuid
POST /subscription/ssoVerifiedEmail
POST /subscription/tilPartnerSubscription
POST /subscription/unifiedReceiptMapping
POST /subscription/user-payment-link
POST /subscription/userDeviceMapping
POST /subscription/userPay
POST /subscription/{merchantCode}/activateSubscriptionAsBenefit
POST /subscription/{projectCode}/informGdprStatus
POST /user_subscriptions/api/payment/failTrans
POST /user_subscriptions/api/payment/ok
POST /user_subscriptions/api/payment/pending
PUT /subscription/subPlanPeriod

Found on 2025-10-30 14:30

Create report

Server vulnerable to Log4J CVE-2021-44228

The reply originated from a backend server, the originating frontend server has been included in the report for reference.

It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.

IP: 103.18.142.28
Domain: pflivefeeds.indiatimes.com
Port: 443
URL: https://pflivefeeds.indiatimes.com

First seen 2021-12-13 08:19

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4b207125482fd8d92673e9a95b310bf2b

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.71249002s
Orignal request was to 103.225.63.37:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e3731323439303032730a4f7269676e616c20726571756573742077617320746f203130332e3232352e36332e33373a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:19

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa45e6133ab6ff9b3114f8859744154a3cc

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 2.085953296s
Orignal request was to 103.225.63.37:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20322e303835393533323936730a4f7269676e616c20726571756573742077617320746f203130332e3232352e36332e33373a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:19

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4373d06f0d5f44026be919d3131d68af4

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 846.610615ms
Orignal request was to 103.225.63.37:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203834362e3631303631356d730a4f7269676e616c20726571756573742077617320746f203130332e3232352e36332e33373a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:19

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4e7a5985bafea3da1255a1364bcb64fcc

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.321868574s
Orignal request was to 103.225.63.37:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e333231383638353734730a4f7269676e616c20726571756573742077617320746f203130332e3232352e36332e33373a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:19

Create report

Server vulnerable to Log4J CVE-2021-44228

The reply originated from a backend server, the originating frontend server has been included in the report for reference.

It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.

IP: 103.18.142.24
Domain: pwa.nbt.indiatimes.com
Port: 443
URL: https://pwa.nbt.indiatimes.com

First seen 2022-01-03 23:47

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4ae65238d7586b72801d519dfa0d7b4b9

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.127172271s
Orignal request was to 23.222.59.57:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e313237313732323731730a4f7269676e616c20726571756573742077617320746f2032332e3232322e35392e35373a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2022-01-03 23:47

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa46dd557a87f31f51b6bf17c4a50c14f65

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.509859786s
Orignal request was to 23.222.59.57:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e353039383539373836730a4f7269676e616c20726571756573742077617320746f2032332e3232322e35392e35373a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2022-01-03 23:47

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa401fecda3937e5f92e94bf0957de7f20f

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.893185309s
Orignal request was to 23.222.59.57:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e383933313835333039730a4f7269676e616c20726571756573742077617320746f2032332e3232322e35392e35373a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2022-01-03 23:47

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4ac386bf75a86b836833caaa178551bc1

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 2.261438627s
Orignal request was to 23.222.59.57:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20322e323631343338363237730a4f7269676e616c20726571756573742077617320746f2032332e3232322e35392e35373a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2022-01-03 23:47

Create report

Server vulnerable to Log4J CVE-2021-44228

The reply originated from a backend server, the originating frontend server has been included in the report for reference.

It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.

IP: 103.18.141.25
Domain: vknotifications.indiatimes.com
Port: 443
URL: https://vknotifications.indiatimes.com

First seen 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa468717e18df189fac8e8bfc3b325956dc

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.675508486s
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e363735353038343836730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4a1bc8c59218aa0e5a70642c0823e139e

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 779.280201ms
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203737392e3238303230316d730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4f6d1883ce19ce41876027cef2edf7d6c

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.176861642s
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e313736383631363432730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa40d64d3078305b2e7e17126fe4fc87900

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.568048221s
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e353638303438323231730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4d254675f48a48baf1b3dee3642fc53e5

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 2.57081578s
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20322e3537303831353738730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4c6768965fedde1f97d4c52ac0626fb12

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 3.071614988s
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20332e303731363134393838730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4f100724ed3a2ebeefafeb389cc396d5a

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 2.076545841s
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20322e303736353435383431730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa452f62745f76f89994224cecc9953d8e4

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 2.173743376s
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20322e313733373433333736730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 223.165.28.45
Domain: oauth2.economictimes.indiatimes.com
Port: 80
URL: http://oauth2.economictimes.indiatimes.com

First seen 2025-11-14 04:53
Last seen 2026-01-09 10:25
Open for 56 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bfa5f004fa4ad61ff6ff787680efa6a2807c540bc

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/status
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
GET /oauth/api/status
POST /api/token/generate
POST /api/token/logout
POST /api/v2/token/generate
POST /oauth/api/merchant/{merchantCode}/krypton/token
POST /oauth/api/merchant/{merchantCode}/token
POST /oauth/api/merchant/{merchantCode}/token/logout
POST /oauth/api/v2/merchant/{merchantCode}/token
PUT /api/blacklist/cache/reload/{secret}
PUT /api/whitelist/cache/reload/{secret}
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2026-01-09 10:25

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec8e81180a976506df5b0372e363e336a735a81760

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2025-11-27 06:43

Severity: info
Fingerprint: 5733ddf49ff49cd18553ecf7bdaa9cb3e345bc4bcbe2c4c4f16b621436354818

Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
GET /api/status
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
GET /oauth/api/status
POST /api/token/generate
POST /api/token/logout
POST /api/v2/token/generate
POST /oauth/api/merchant/{merchantCode}/krypton/token
POST /oauth/api/merchant/{merchantCode}/token
POST /oauth/api/merchant/{merchantCode}/token/logout
POST /oauth/api/v2/merchant/{merchantCode}/token
PUT /api/blacklist/cache/reload/{secret}
PUT /api/whitelist/cache/reload/{secret}
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2025-11-23 10:26

Severity: info
Fingerprint: 5733ddf49ff49cd18553ecf7ca8ceae76968ba00e6fa90c0fbcced32fd04277b

Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2025-11-21 05:55

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 223.165.28.59
Domain: qcsubscription.economictimes.indiatimes.com
Port: 80
URL: http://qcsubscription.economictimes.indiatimes.com

First seen 2025-10-24 05:25
Last seen 2025-12-12 14:24
Open for 49 days

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec75a89cf9e4d10f187f1bfd36e85fe1b03a0f640a

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /admin/getVoucherDetails
GET /admin/getVoucherDetailsCsv
GET /admin/voucherLogs
GET /admin/vouchers
GET /api/entitlements/{access_token}
GET /api/subscription/get
GET /subscription/HibernateException
GET /subscription/JDBCConnectionException
GET /subscription/SQLException
GET /subscription/activationStatus
GET /subscription/allGroup
GET /subscription/api/deal/
GET /subscription/api/deal/eventCode/{eventCode}/isEventCodePresent
GET /subscription/api/deal/getTSourceAndCampaignDetails
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCode
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCodeV1
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plutus
GET /subscription/api/{merchantCode}/{geoRegion}/offerDetails
GET /subscription/benefitActivationStatus
GET /subscription/benefitActivationStatusS2S
GET /subscription/merchant/{merchantCode}/mySubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/V2/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/availBenefit/{initTxn}
GET /subscription/merchant/{merchantCode}/product/{productCode}/cancelReasons
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegionCode}/plan/{planId}/planPriceDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/planDealInfo
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealInfoV2
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planGroupsDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/planCode/{planCode}/dealCode/{dealCode}/planDealDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/V2/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/changeProductVariant
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/findSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/invoice/userDetails
GET /subscription/merchant/{merchantCode}/product/{productCode}/latestSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/onBoardingEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibilityV1
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionExtendOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/userPendingTransaction
GET /subscription/merchant/{merchantCode}/product/{productCode}/v2/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/voucherBenefitDetail
GET /subscription/merchant/{merchantCode}/subscriptionInformation
GET /subscription/merchant/{merchantCode}/v2/mySubscription
GET /subscription/partner/vendor-order
GET /subscription/paymentOrderStatus
GET /subscription/permission-subscription
GET /subscription/redisSnappyJdk
GET /subscription/redisTest
GET /subscription/redisTestSnappyJson
GET /subscription/subscription-permission
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/loginIdentifier/{loginIdentifier}/lastSubscription
GET /subscription/v2/permission-subscription
GET /subscription/v2/subscription-permission
GET /subscription/v3/permission-subscription
GET /subscription/vendorCode/{vendorCode}/orderId/{vendorOrderId}/getTilPartnerStatus
GET /subscription/{merchantCode}/subscriptionSummary
POST /api/merchant/{merchantCode}/product/{productCode}/findLastSubscription
POST /api/payment_trans
POST /api/subscription/receiptUpload
POST /api/subscription/reconcile
POST /api/subscription/redeemVoucher
POST /subscription/V2/paymentPayload
POST /subscription/V2/planChangeOffer
POST /subscription/api/deal/applyDealCode
POST /subscription/api/deal/createDealCodeInCache
POST /subscription/api/deal/upload
POST /subscription/api/deal/uploadDealCodes
POST /subscription/api/{merchantCode}/{productCode}/{geoRegion}/offers
POST /subscription/applysubscriptionExtension
POST /subscription/benefitActivation
POST /subscription/benefitActivationS2S
POST /subscription/changeProductVariant
POST /subscription/gdprUpdate
POST /subscription/guestUserAppSubscriptionDetail
POST /subscription/invoice/userDetails
POST /subscription/mapGroupPlanToRenew
POST /subscription/mapGroupPlanToUpgrade
POST /subscription/mapPlanToRenew
POST /subscription/mapPlanToUpgrade
POST /subscription/merchant/{merchantCode}/product/{productCode}/V2/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/accessPassRetrialPayment
POST /subscription/merchant/{merchantCode}/product/{productCode}/cancel
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/code/{eventCode}/generateAccessPass
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/introPlanEligibilityCheck
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/userPlans
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/v2/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/redeemBenefit/{initTxnId}/{planOfferType}
POST /subscription/merchant/{merchantCode}/product/{productCode}/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/verifiyReceiptAndSubscription
POST /subscription/orders/{platform}/free-trial
POST /subscription/paymentPayload
POST /subscription/planChangeOffer
POST /subscription/planChangePurchase
POST /subscription/promoOfferRequest
POST /subscription/promoSignature
POST /subscription/retrial-payment
POST /subscription/siReMandate
POST /subscription/signature
POST /subscription/sso-uuid
POST /subscription/ssoVerifiedEmail
POST /subscription/tilPartnerSubscription
POST /subscription/unifiedReceiptMapping
POST /subscription/user-payment-link
POST /subscription/userDeviceMapping
POST /subscription/userPay
POST /subscription/{merchantCode}/activateSubscriptionAsBenefit
POST /subscription/{merchantCode}/{productCode}/partnerUserSubscription
POST /subscription/{projectCode}/informGdprStatus
POST /user_subscriptions/api/payment/failTrans
POST /user_subscriptions/api/payment/ok
POST /user_subscriptions/api/payment/pending
PUT /subscription/subPlanPeriod

Found on 2025-12-12 14:24

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec75a89cf9e4d10f187f1bfd36e85fe1b079d4b914

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /admin/getVoucherDetails
GET /admin/getVoucherDetailsCsv
GET /admin/voucherLogs
GET /admin/vouchers
GET /api/entitlements/{access_token}
GET /api/subscription/get
GET /subscription/HibernateException
GET /subscription/JDBCConnectionException
GET /subscription/SQLException
GET /subscription/activationStatus
GET /subscription/allGroup
GET /subscription/api/deal/
GET /subscription/api/deal/eventCode/{eventCode}/isEventCodePresent
GET /subscription/api/deal/getTSourceAndCampaignDetails
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCode
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCodeV1
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plutus
GET /subscription/api/{merchantCode}/{geoRegion}/offerDetails
GET /subscription/benefitActivationStatus
GET /subscription/benefitActivationStatusS2S
GET /subscription/merchant/{merchantCode}/mySubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/V2/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/availBenefit/{initTxn}
GET /subscription/merchant/{merchantCode}/product/{productCode}/cancelReasons
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegionCode}/plan/{planId}/planPriceDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/planDealInfo
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealInfoV2
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planGroupsDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/planCode/{planCode}/dealCode/{dealCode}/planDealDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/V2/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/changeProductVariant
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/findSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/invoice/userDetails
GET /subscription/merchant/{merchantCode}/product/{productCode}/latestSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/onBoardingEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibilityV1
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionExtendOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/userPendingTransaction
GET /subscription/merchant/{merchantCode}/product/{productCode}/v2/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/voucherBenefitDetail
GET /subscription/merchant/{merchantCode}/subscriptionInformation
GET /subscription/merchant/{merchantCode}/v2/mySubscription
GET /subscription/partner/{partnerVendorOrderId}/vendor-order
GET /subscription/paymentOrderStatus
GET /subscription/permission-subscription
GET /subscription/redisSnappyJdk
GET /subscription/redisTest
GET /subscription/redisTestSnappyJson
GET /subscription/subscription-permission
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/loginIdentifier/{loginIdentifier}/lastSubscription
GET /subscription/v2/permission-subscription
GET /subscription/v2/subscription-permission
GET /subscription/v3/permission-subscription
GET /subscription/vendorCode/{vendorCode}/orderId/{vendorOrderId}/getTilPartnerStatus
GET /subscription/{merchantCode}/subscriptionSummary
POST /api/merchant/{merchantCode}/product/{productCode}/findLastSubscription
POST /api/payment_trans
POST /api/subscription/receiptUpload
POST /api/subscription/reconcile
POST /api/subscription/redeemVoucher
POST /subscription/V2/paymentPayload
POST /subscription/V2/planChangeOffer
POST /subscription/api/deal/applyDealCode
POST /subscription/api/deal/createDealCodeInCache
POST /subscription/api/deal/upload
POST /subscription/api/deal/uploadDealCodes
POST /subscription/api/{merchantCode}/{productCode}/{geoRegion}/offers
POST /subscription/applysubscriptionExtension
POST /subscription/benefitActivation
POST /subscription/benefitActivationS2S
POST /subscription/changeProductVariant
POST /subscription/gdprUpdate
POST /subscription/guestUserAppSubscriptionDetail
POST /subscription/invoice/userDetails
POST /subscription/mapGroupPlanToRenew
POST /subscription/mapGroupPlanToUpgrade
POST /subscription/mapPlanToRenew
POST /subscription/mapPlanToUpgrade
POST /subscription/merchant/{merchantCode}/product/{productCode}/V2/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/accessPassRetrialPayment
POST /subscription/merchant/{merchantCode}/product/{productCode}/cancel
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/code/{eventCode}/generateAccessPass
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/introPlanEligibilityCheck
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/userPlans
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/v2/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/redeemBenefit/{initTxnId}/{planOfferType}
POST /subscription/merchant/{merchantCode}/product/{productCode}/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/verifiyReceiptAndSubscription
POST /subscription/orders/{platform}/free-trial
POST /subscription/paymentPayload
POST /subscription/planChangeOffer
POST /subscription/planChangePurchase
POST /subscription/promoOfferRequest
POST /subscription/promoSignature
POST /subscription/retrial-payment
POST /subscription/siReMandate
POST /subscription/signature
POST /subscription/sso-uuid
POST /subscription/ssoVerifiedEmail
POST /subscription/tilPartnerSubscription
POST /subscription/unifiedReceiptMapping
POST /subscription/user-payment-link
POST /subscription/userDeviceMapping
POST /subscription/userPay
POST /subscription/{merchantCode}/activateSubscriptionAsBenefit
POST /subscription/{merchantCode}/{productCode}/partnerUserSubscription
POST /subscription/{projectCode}/informGdprStatus
POST /user_subscriptions/api/payment/failTrans
POST /user_subscriptions/api/payment/ok
POST /user_subscriptions/api/payment/pending
PUT /subscription/subPlanPeriod

Found on 2025-11-16 17:51

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec75a89cf9e4d10f187f1bfd36e85fe1b003ce6921

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /admin/getVoucherDetails
GET /admin/getVoucherDetailsCsv
GET /admin/voucherLogs
GET /admin/vouchers
GET /api/entitlements/{access_token}
GET /api/subscription/get
GET /subscription/HibernateException
GET /subscription/JDBCConnectionException
GET /subscription/SQLException
GET /subscription/activationStatus
GET /subscription/allGroup
GET /subscription/api/deal/
GET /subscription/api/deal/eventCode/{eventCode}/isEventCodePresent
GET /subscription/api/deal/getTSourceAndCampaignDetails
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCode
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCodeV1
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plutus
GET /subscription/api/{merchantCode}/{geoRegion}/offerDetails
GET /subscription/benefitActivationStatus
GET /subscription/benefitActivationStatusS2S
GET /subscription/merchant/{merchantCode}/mySubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/V2/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/availBenefit/{initTxn}
GET /subscription/merchant/{merchantCode}/product/{productCode}/cancelReasons
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegionCode}/plan/{planId}/planPriceDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/planDealInfo
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealInfoV2
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planGroupsDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/planCode/{planCode}/dealCode/{dealCode}/planDealDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/V2/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/changeProductVariant
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/findSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/invoice/userDetails
GET /subscription/merchant/{merchantCode}/product/{productCode}/latestSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/onBoardingEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibilityV1
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionExtendOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/userPendingTransaction
GET /subscription/merchant/{merchantCode}/product/{productCode}/v2/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/voucherBenefitDetail
GET /subscription/merchant/{merchantCode}/subscriptionInformation
GET /subscription/merchant/{merchantCode}/v2/mySubscription
GET /subscription/paymentOrderStatus
GET /subscription/permission-subscription
GET /subscription/redisSnappyJdk
GET /subscription/redisTest
GET /subscription/redisTestSnappyJson
GET /subscription/subscription-permission
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/loginIdentifier/{loginIdentifier}/lastSubscription
GET /subscription/v2/permission-subscription
GET /subscription/v2/subscription-permission
GET /subscription/v3/permission-subscription
GET /subscription/vendorCode/{vendorCode}/orderId/{vendorOrderId}/getTilPartnerStatus
GET /subscription/{merchantCode}/subscriptionSummary
POST /api/merchant/{merchantCode}/product/{productCode}/findLastSubscription
POST /api/payment_trans
POST /api/subscription/receiptUpload
POST /api/subscription/reconcile
POST /api/subscription/redeemVoucher
POST /subscription/V2/paymentPayload
POST /subscription/V2/planChangeOffer
POST /subscription/api/deal/applyDealCode
POST /subscription/api/deal/createDealCodeInCache
POST /subscription/api/deal/upload
POST /subscription/api/deal/uploadDealCodes
POST /subscription/api/{merchantCode}/{productCode}/{geoRegion}/offers
POST /subscription/applysubscriptionExtension
POST /subscription/benefitActivation
POST /subscription/benefitActivationS2S
POST /subscription/changeProductVariant
POST /subscription/gdprUpdate
POST /subscription/guestUserAppSubscriptionDetail
POST /subscription/invoice/userDetails
POST /subscription/mapGroupPlanToRenew
POST /subscription/mapGroupPlanToUpgrade
POST /subscription/mapPlanToRenew
POST /subscription/mapPlanToUpgrade
POST /subscription/merchant/{merchantCode}/product/{productCode}/V2/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/accessPassRetrialPayment
POST /subscription/merchant/{merchantCode}/product/{productCode}/cancel
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/code/{eventCode}/generateAccessPass
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/introPlanEligibilityCheck
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/userPlans
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/v2/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/redeemBenefit/{initTxnId}/{planOfferType}
POST /subscription/merchant/{merchantCode}/product/{productCode}/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/verifiyReceiptAndSubscription
POST /subscription/orders/{platform}/free-trial
POST /subscription/paymentPayload
POST /subscription/planChangeOffer
POST /subscription/planChangePurchase
POST /subscription/promoOfferRequest
POST /subscription/promoSignature
POST /subscription/retrial-payment
POST /subscription/siReMandate
POST /subscription/signature
POST /subscription/sso-uuid
POST /subscription/ssoVerifiedEmail
POST /subscription/tilPartnerSubscription
POST /subscription/unifiedReceiptMapping
POST /subscription/user-payment-link
POST /subscription/userDeviceMapping
POST /subscription/userPay
POST /subscription/{merchantCode}/activateSubscriptionAsBenefit
POST /subscription/{projectCode}/informGdprStatus
POST /user_subscriptions/api/payment/failTrans
POST /user_subscriptions/api/payment/ok
POST /user_subscriptions/api/payment/pending
PUT /subscription/subPlanPeriod

Found on 2025-11-12 13:08

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec75a89cf9e4d10f187f1bfd36e85fe1b030876039

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /admin/getVoucherDetails
GET /admin/getVoucherDetailsCsv
GET /admin/voucherLogs
GET /admin/vouchers
GET /api/entitlements/{access_token}
GET /api/subscription/get
GET /subscription/HibernateException
GET /subscription/JDBCConnectionException
GET /subscription/SQLException
GET /subscription/activationStatus
GET /subscription/allGroup
GET /subscription/api/deal/
GET /subscription/api/deal/eventCode/{eventCode}/isEventCodePresent
GET /subscription/api/deal/getTSourceAndCampaignDetails
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCode
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCodeV1
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plutus
GET /subscription/api/{merchantCode}/{geoRegion}/offerDetails
GET /subscription/benefitActivationStatus
GET /subscription/benefitActivationStatusS2S
GET /subscription/merchant/{merchantCode}/mySubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/V2/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/availBenefit/{initTxn}
GET /subscription/merchant/{merchantCode}/product/{productCode}/cancelReasons
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegionCode}/plan/{planId}/planPriceDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/planDealInfo
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealInfoV2
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planGroupsDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/planCode/{planCode}/dealCode/{dealCode}/planDealDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/changeProductVariant
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/findSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/invoice/userDetails
GET /subscription/merchant/{merchantCode}/product/{productCode}/latestSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/onBoardingEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibilityV1
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionExtendOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/userPendingTransaction
GET /subscription/merchant/{merchantCode}/product/{productCode}/v2/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/voucherBenefitDetail
GET /subscription/merchant/{merchantCode}/subscriptionInformation
GET /subscription/merchant/{merchantCode}/v2/mySubscription
GET /subscription/paymentOrderStatus
GET /subscription/permission-subscription
GET /subscription/redisSnappyJdk
GET /subscription/redisTest
GET /subscription/redisTestSnappyJson
GET /subscription/subscription-permission
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/loginIdentifier/{loginIdentifier}/lastSubscription
GET /subscription/v2/permission-subscription
GET /subscription/v2/subscription-permission
GET /subscription/v3/permission-subscription
GET /subscription/vendorCode/{vendorCode}/orderId/{vendorOrderId}/getTilPartnerStatus
GET /subscription/{merchantCode}/subscriptionSummary
POST /api/merchant/{merchantCode}/product/{productCode}/findLastSubscription
POST /api/payment_trans
POST /api/subscription/receiptUpload
POST /api/subscription/reconcile
POST /api/subscription/redeemVoucher
POST /subscription/V2/paymentPayload
POST /subscription/api/deal/applyDealCode
POST /subscription/api/deal/createDealCodeInCache
POST /subscription/api/deal/upload
POST /subscription/api/deal/uploadDealCodes
POST /subscription/api/{merchantCode}/{productCode}/{geoRegion}/offers
POST /subscription/applysubscriptionExtension
POST /subscription/benefitActivation
POST /subscription/benefitActivationS2S
POST /subscription/changeProductVariant
POST /subscription/gdprUpdate
POST /subscription/guestUserAppSubscriptionDetail
POST /subscription/invoice/userDetails
POST /subscription/mapGroupPlanToRenew
POST /subscription/mapGroupPlanToUpgrade
POST /subscription/mapPlanToRenew
POST /subscription/mapPlanToUpgrade
POST /subscription/merchant/{merchantCode}/product/{productCode}/V2/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/accessPassRetrialPayment
POST /subscription/merchant/{merchantCode}/product/{productCode}/cancel
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/code/{eventCode}/generateAccessPass
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/introPlanEligibilityCheck
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/userPlans
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/v2/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/redeemBenefit/{initTxnId}/{planOfferType}
POST /subscription/merchant/{merchantCode}/product/{productCode}/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/verifiyReceiptAndSubscription
POST /subscription/orders/{platform}/free-trial
POST /subscription/paymentPayload
POST /subscription/planChangeOffer
POST /subscription/planChangePurchase
POST /subscription/promoOfferRequest
POST /subscription/promoSignature
POST /subscription/retrial-payment
POST /subscription/siReMandate
POST /subscription/signature
POST /subscription/sso-uuid
POST /subscription/ssoVerifiedEmail
POST /subscription/tilPartnerSubscription
POST /subscription/unifiedReceiptMapping
POST /subscription/user-payment-link
POST /subscription/userDeviceMapping
POST /subscription/userPay
POST /subscription/{merchantCode}/activateSubscriptionAsBenefit
POST /subscription/{projectCode}/informGdprStatus
POST /user_subscriptions/api/payment/failTrans
POST /user_subscriptions/api/payment/ok
POST /user_subscriptions/api/payment/pending
PUT /subscription/subPlanPeriod

Found on 2025-11-01 19:38

Create report

Server vulnerable to Log4J CVE-2021-44228

The reply originated from a backend server, the originating frontend server has been included in the report for reference.

It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.

IP: 103.18.142.24
Domain: mfapps.economictimes.indiatimes.com
Port: 443
URL: https://mfapps.economictimes.indiatimes.com

First seen 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa41a68ec4a20585cfcdd17adabee8f5f34

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.408918568s
Orignal request was to 223.165.28.49:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e343038393138353638730a4f7269676e616c20726571756573742077617320746f203232332e3136352e32382e34393a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4e6a8d7cf9782a2e1d65d672439693278

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.873208288s
Orignal request was to 223.165.28.49:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e383733323038323838730a4f7269676e616c20726571756573742077617320746f203232332e3136352e32382e34393a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa41690d3b9fd5dae37a103aeae2e8de381

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 2.30924904s
Orignal request was to 223.165.28.49:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20322e3330393234393034730a4f7269676e616c20726571756573742077617320746f203232332e3136352e32382e34393a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4bb5bf9f716d0e5d9d524298c10a3ce14

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 2.865045386s
Orignal request was to 223.165.28.49:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20322e383635303435333836730a4f7269676e616c20726571756573742077617320746f203232332e3136352e32382e34393a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.212
Domain: oauth.economictimes.indiatimes.com
Port: 80
URL: http://oauth.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-01-09 10:59
Open for 86 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bfa5f004fa4ad61ff6ff787680efa6a2807c540bc

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/status
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
GET /oauth/api/status
POST /api/token/generate
POST /api/token/logout
POST /api/v2/token/generate
POST /oauth/api/merchant/{merchantCode}/krypton/token
POST /oauth/api/merchant/{merchantCode}/token
POST /oauth/api/merchant/{merchantCode}/token/logout
POST /oauth/api/v2/merchant/{merchantCode}/token
PUT /api/blacklist/cache/reload/{secret}
PUT /api/whitelist/cache/reload/{secret}
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2026-01-09 10:59

Severity: info
Fingerprint: 5733ddf49ff49cd18553ecf7ca8ceae76968ba00e6fa90c0fbcced32fd04277b

Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2025-11-16 22:15

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec8e81180a976506df5b0372e363e336a735a81760

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2025-11-12 16:08

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.208
Domain: oauth.economictimes.indiatimes.com
Port: 443
URL: https://oauth.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-01-09 10:59
Open for 86 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bfa5f004fa4ad61ff6ff787680efa6a2807c540bc

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/status
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
GET /oauth/api/status
POST /api/token/generate
POST /api/token/logout
POST /api/v2/token/generate
POST /oauth/api/merchant/{merchantCode}/krypton/token
POST /oauth/api/merchant/{merchantCode}/token
POST /oauth/api/merchant/{merchantCode}/token/logout
POST /oauth/api/v2/merchant/{merchantCode}/token
PUT /api/blacklist/cache/reload/{secret}
PUT /api/whitelist/cache/reload/{secret}
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2026-01-09 10:59

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec8e81180a976506df5b0372e363e336a735a81760

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2025-11-26 19:11

Severity: info
Fingerprint: 5733ddf49ff49cd18553ecf7ca8ceae76968ba00e6fa90c0fbcced32fd04277b

Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2025-11-20 17:38

Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 23.36.162.135
Domain: newscard.indiatimes.com
Port: 443
URL: https://newscard.indiatimes.com

First seen 2022-11-03 11:14
Last seen 2023-10-26 17:58
Open for 357 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c47dfe71947dfe719d66dae01978badf690133e3b68c14227
```
Found 16 files trough .DS_Store spidering:

/img
/img/logo.png
/img/operate-at-the-edges.png
/newscardhds
/newscardhds/img
/newscards
/newscards/edit
/newscards/img
/newscards/img/background-color.png
/newscards/img/cover.png
/newscards/img/cta.png
/newscards/img/live.png
/newscards/img/loader.png
/newscards/img/new-cta.png
/newscards/img/Newscard Documentation 3
/newscards/img/write-once-distribute-everywhere.png
```
  Found on 2023-10-26 17:58
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814eb40dc2bac41b82d7702e1ba44f6b28df
```
Found 6 files trough .DS_Store spidering:

/img
/img/logo.png
/img/operate-at-the-edges.png
/newscardhds
/newscardhds/img
/newscards
```
  Found on 2023-02-22 06:07
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d80e49b1ccaf06877954314412b8d383ca
```
Found 8 files trough .DS_Store spidering:

/img
/img/logo.png
/img/operate-at-the-edges.png
/newscardhds
/newscardhds/img
/newscards
/newscards/edit
/newscards/img
```
  Found on 2023-02-22 06:07
Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

This information can be very useful if the application is sent sensitive information as GET requests. If you monitor this page you might be able to find CSRF tokens, API keys, hidden paths, and other sensitive information being sent to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 223.165.24.194
Domain: etw.economictimes.indiatimes.com
Port: 80
URL: http://etw.economictimes.indiatimes.com

First seen 2023-02-20 12:32
Last seen 2023-07-20 13:13
Open for 150 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318943a3c28943a3c23f32b0d0

Apache Status

Apache Server Status for etw.economictimes.indiatimes.com (via 172.24.35.45)

Server Version: Apache/2.4.6 (CentOS) mod_jk/1.2.42
Server MPM: prefork
Server Built: Nov 14 2016 18:04:44

Current Time: Thursday, 20-Jul-2023 18:43:32 IST
Restart Time: Saturday, 12-Feb-2022 08:05:29 IST
Parent Server Config. Generation: 524
Parent Server MPM Generation: 523
Server uptime:  523 days 10 hours 38 minutes 2 seconds
Server load: 0.06 0.03 0.05
Total accesses: 42218206 - Total Traffic: 139.2 GB
CPU Usage: u26.94 s19.71 cu0 cs0 - .000103% CPU load
.934 requests/sec - 3304 B/second - 3539 B/request
1 requests currently being processed, 7 idle workers
______W_........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-523174960/6909/4993353_
4.260100.011.2916929.07
172.24.22.101172.24.35.45:80GET /ETWealth/login HTTP/1.1

1-523174970/6909/5005094_
4.30000.011.3916602.62
172.24.22.122172.24.35.45:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

2-523174980/6928/4961561_
4.40190.012.0816550.86
172.29.89.101172.24.35.45:80GET /ETWealth/login HTTP/1.1

3-523175490/6921/4919498_
4.20000.011.9416852.77
172.24.22.123172.24.35.45:80GET /v2/_catalog HTTP/1.1

4-523298910/6830/4465885_
4.24100.011.0915099.62
172.24.22.117172.24.35.45:80GET /about HTTP/1.1

5-523174990/6911/4930552_
4.30100.011.3616291.50
172.24.22.119172.24.35.45:80GET /debug/default/view?panel=config HTTP/1.1

6-523175000/6922/3933256W
4.22000.011.5613206.25
172.24.22.110172.24.35.45:80GET /server-status HTTP/1.1

7-5231152220/502/3234990_
0.27190.00.9610865.29
172.24.22.101172.24.35.45:80GET /ETWealth/login HTTP/1.1

8-522-0/0/1435722.
4.985426900.00.004775.79
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

9-513-0/0/1779907.
1.2583205000.00.005973.53
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

10-409-0/0/1712573.
2.80981686900.00.006125.32
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

11-409-0/0/342817.
2.16981686900.00.001231.63
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

12-395-0/0/267189.
0.431102874900.00.001078.83
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

13-395-0/0/154370.
0.001103681400.00.00563.12
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

14-395-0/0/43071.
0.431102874900.00.00195.39
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

15-395-0/0/28390.
0.001103681300.00.00114.68
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

16-58-0/0/2890.
0.024019965700.00.006.78
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

17-21-0/0/9.
0.004340516400.00.000.19
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

18-8-0/0/8.
0.004453139600.00.000.20
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

19-8-0/0/18.
0.014453135800.00.001.35
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

20-8-0/0/7033.
4.374446411000.00.0053.82
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

21-8-0/0/15.
0.014453136300.00.001.18
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

22-8-0/0/5.
0.004453138300.00.000.21
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot

Found on 2023-07-20 13:13

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318943a3c28943a3c2c6c993ef

Apache Status

Apache Server Status for etw.economictimes.indiatimes.com (via 172.24.35.45)

Server Version: Apache/2.4.6 (CentOS) mod_jk/1.2.42
Server MPM: prefork
Server Built: Nov 14 2016 18:04:44

Current Time: Wednesday, 03-May-2023 19:03:21 IST
Restart Time: Saturday, 12-Feb-2022 08:05:29 IST
Parent Server Config. Generation: 446
Parent Server MPM Generation: 445
Server uptime:  445 days 10 hours 57 minutes 51 seconds
Server load: 0.00 0.01 0.05
Total accesses: 36104726 - Total Traffic: 123.7 GB
CPU Usage: u27.8 s20.93 cu0 cs0 - .000127% CPU load
.938 requests/sec - 3450 B/second - 3678 B/request
1 requests currently being processed, 7 idle workers
___W____........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-445746120/6526/4243644_
3.86000.018.5114883.80
172.24.22.125172.24.35.45:80GET /s/439313e24323e2536313e2332323/_/;/META-INF/maven/com.atla

1-445746130/6522/4255500_
3.82000.014.4114703.59
172.24.22.121172.24.35.45:80GET /info.php HTTP/1.1

2-445746140/6527/4211644_
3.84000.018.3414637.88
172.24.22.112172.24.35.45:80GET /.vscode/sftp.json HTTP/1.1

3-445748600/6521/4170678W
3.83000.019.5714969.86
172.24.22.115172.24.35.45:80GET /server-status HTTP/1.1

4-445788890/6510/3722966_
3.82000.015.5413037.35
172.24.22.120172.24.35.45:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

5-445746150/6544/4180786_
3.85000.015.4814429.93
172.24.22.116172.24.35.45:80GET /.env HTTP/1.1

6-445746160/6534/3183314_
3.84000.015.2611319.49
172.24.22.106172.24.35.45:80GET /telescope/requests HTTP/1.1

7-445180390/6062/2644320_
3.58000.016.079268.97
172.24.22.123172.24.35.45:80GET /debug/default/view?panel=config HTTP/1.1

8-444-0/0/1175252.
4.385665800.00.004090.36
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

9-444-0/0/1758234.
3.685665800.00.005934.18
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

10-409-0/0/1712573.
2.80307885800.00.006125.32
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

11-409-0/0/342817.
2.16307885800.00.001231.63
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

12-395-0/0/267189.
0.43429073800.00.001078.83
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

13-395-0/0/154370.
0.00429880300.00.00563.12
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

14-395-0/0/43071.
0.43429073800.00.00195.39
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

15-395-0/0/28390.
0.00429880200.00.00114.68
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

16-58-0/0/2890.
0.023346164600.00.006.78
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

17-21-0/0/9.
0.003666715300.00.000.19
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

18-8-0/0/8.
0.003779338500.00.000.20
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

19-8-0/0/18.
0.013779334700.00.001.35
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

20-8-0/0/7033.
4.373772609900.00.0053.82
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

21-8-0/0/15.
0.013779335200.00.001.18
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

22-8-0/0/5.
0.003779337200.00.000.21
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot

Found on 2023-05-03 13:33

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb318943a3c28943a3c220fdb362

Apache Status

Apache Server Status for etw.economictimes.indiatimes.com (via 172.24.35.45)

Server Version: Apache/2.4.6 (CentOS) mod_jk/1.2.42
Server MPM: prefork
Server Built: Nov 14 2016 18:04:44

Current Time: Monday, 20-Feb-2023 18:02:39 IST
Restart Time: Saturday, 12-Feb-2022 08:05:29 IST
Parent Server Config. Generation: 374
Parent Server MPM Generation: 373
Server uptime:  373 days 9 hours 57 minutes 9 seconds
Server load: 0.00 0.02 0.05
Total accesses: 30447060 - Total Traffic: 107.3 GB
CPU Usage: u17.67 s13.2 cu0 cs0 - 9.57e-5% CPU load
.944 requests/sec - 3571 B/second - 3784 B/request
3 requests currently being processed, 7 idle workers
WW_W______......................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-373964740/5779/3577379_
3.15000.039.3312905.48
172.24.22.108172.24.35.45:80GET /.env HTTP/1.1

1-373964780/5776/3592755_
3.11000.019.6912701.66
172.24.22.115172.24.35.45:80GET /.vscode/sftp.json HTTP/1.1

2-373971330/5773/3549366_
3.16000.064.7412729.52
172.24.22.122172.24.35.45:80GET /?rest_route=/wp/v2/users/ HTTP/1.1

3-373964760/5788/3514917W
3.20000.053.2312950.05
172.24.22.103172.24.35.45:80GET /server-status HTTP/1.1

4-373964770/5771/3065128_
3.15000.022.3111155.25
172.24.22.112172.24.35.45:80GET / HTTP/1.1

5-373964790/5772/3524954_
3.18000.020.3612582.70
172.24.22.118172.24.35.45:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

6-3731109880/5674/2544037_
3.06000.032.089315.50
172.24.22.125172.24.35.45:80GET /.git/config HTTP/1.1

7-373277230/3679/2056041_
2.03000.029.447448.67
172.24.22.106172.24.35.45:80GET /debug/default/view?panel=config HTTP/1.1

8-373464470/2168/887318_
1.22000.033.883234.50
172.24.22.124172.24.35.45:80GET /info.php HTTP/1.1

9-373464530/2169/1650874_
1.200110.012.755660.53
172.24.22.101172.24.35.45:80GET /ETWealth/login HTTP/1.1

10-356-0/0/1677737.
0.00149256500.00.006055.28
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

11-347-0/0/309526.
0.00224791100.00.001152.01
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

12-347-0/0/266439.
0.00224791000.00.001075.80
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

13-347-0/0/149904.
0.00224790900.00.00554.90
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

14-347-0/0/42321.
0.00224790800.00.00192.54
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

15-347-0/0/28389.
0.00224790700.00.00114.68
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

16-58-0/0/2890.
0.022723720400.00.006.78
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

17-21-0/0/9.
0.003044271100.00.000.19
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

18-8-0/0/8.
0.003156894300.00.000.20
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

19-8-0/0/18.
0.013156890500.00.001.35
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

20-8-0/0/7033.
4.373150165700.00.0053.82
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

21-8-0/0/15.
0.013156891000.00.001.18
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0

22-8-0/0/5.
0.003156893000.00.000.21
127.0.0.1172.24.35.45:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot

Found on 2023-02-20 12:32

Create report

Apache server-status page is publicly available

The server-status page (usually /server-status) allows server administrators to find out how well their server is performing.

This is a HTML page that gives the current server statistics such as the server version, up time,cpu, ram, and information about requests made to the server.

https://medium.com/@ghostlulzhacks/apache-server-status-a70abed83f5a

IP: 223.165.24.194
Domain: etw.economictimes.indiatimes.com
Port: 443
URL: https://etw.economictimes.indiatimes.com

First seen 2023-02-20 12:32
Last seen 2023-07-20 13:13
Open for 150 days

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31b8a264a5b8a264a5d69b4561

Apache Status

Apache Server Status for etw.economictimes.indiatimes.com (via 172.29.13.30)

Server Version: Apache/2.4.6 (CentOS) mod_jk/1.2.42
Server MPM: prefork
Server Built: Nov 14 2016 18:04:44

Current Time: Thursday, 20-Jul-2023 18:43:33 IST
Restart Time: Thursday, 28-Apr-2022 19:49:54 IST
Parent Server Config. Generation: 449
Parent Server MPM Generation: 448
Server uptime:  447 days 22 hours 53 minutes 38 seconds
Server load: 0.00 0.09 0.46
Total accesses: 38959165 - Total Traffic: 121.8 GB
CPU Usage: u38.52 s38.25 cu0 cs0 - .000198% CPU load
1.01 requests/sec - 3379 B/second - 3357 B/request
1 requests currently being processed, 8 idle workers
______W__.......................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-448554560/6588/4734079_
7.30100.028.8515133.47
172.24.22.101172.29.13.30:80GET /.vscode/sftp.json HTTP/1.1

1-448554530/6572/4735733_
7.20100.029.6915096.33
172.24.22.107172.29.13.30:80GET /about HTTP/1.1

2-448554550/6585/4721252_
7.65100.027.3514919.49
172.24.22.109172.29.13.30:80GET /debug/default/view?panel=config HTTP/1.1

3-448554570/6593/4644612_
7.39000.028.5215014.07
172.24.22.110172.29.13.30:80GET /v2/_catalog HTTP/1.1

4-448572770/6557/4486656_
7.162100.027.0114067.06
172.24.22.101172.29.13.30:80GET /ETWealth/login HTTP/1.1

5-448554590/6573/4716066_
7.26000.027.6315159.91
172.24.22.105172.29.13.30:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

6-448572780/6569/4421110W
7.20000.033.5113678.32
172.24.22.116172.29.13.30:80GET /server-status HTTP/1.1

7-4481108590/6169/3855851_
6.792110.029.9312847.74
172.24.22.101172.29.13.30:80GET /ETWealth/login HTTP/1.1

8-448701900/4930/1971245_
5.81200.024.836353.71
172.24.22.104172.29.13.30:80GET /version HTTP/1.1

9-442-0/0/296432.
1.1548771000.00.00899.32
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

10-359-0/0/41182.
4.45765687100.00.00124.68
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

11-298-0/0/323388.
3.311292889100.00.001394.63
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

12-92-0/0/8821.
2.083072603000.00.0038.50
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

13-92-0/0/2732.
2.023072603000.00.0022.63
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

14-92-0/0/2.
0.003075268600.00.000.00
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

15-92-0/0/1.
0.003075268500.00.000.00
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

16-92-0/0/1.
0.003075268400.00.000.00
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

17-92-0/0/1.
0.003075268300.00.000.00
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

18-92-0/0/1.
0.003075268200.00.000.00
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot

Found on 2023-07-20 13:13

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31b8a264a5b8a264a5558a7390

Apache Status

Apache Server Status for etw.economictimes.indiatimes.com (via 172.29.13.30)

Server Version: Apache/2.4.6 (CentOS) mod_jk/1.2.42
Server MPM: prefork
Server Built: Nov 14 2016 18:04:44

Current Time: Wednesday, 03-May-2023 19:03:24 IST
Restart Time: Thursday, 28-Apr-2022 19:49:54 IST
Parent Server Config. Generation: 371
Parent Server MPM Generation: 370
Server uptime:  369 days 23 hours 13 minutes 29 seconds
Server load: 0.08 0.03 0.06
Total accesses: 32176524 - Total Traffic: 105.3 GB
CPU Usage: u37.37 s35.52 cu0 cs0 - .000228% CPU load
1.01 requests/sec - 3536 B/second - 3512 B/request
2 requests currently being processed, 6 idle workers
W____W__........................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-3701304590/7182/3926525_
5.92000.011.0413069.60
172.24.22.125172.29.13.30:80GET /info.php HTTP/1.1

1-3701304571/7188/3928121K
6.01000.411.0413025.00
172.24.22.103172.29.13.30:80GET /debug/default/view?panel=config HTTP/1.1

2-3701304580/7172/3913526_
5.93000.010.9912922.95
172.24.22.109172.29.13.30:80GET /.vscode/sftp.json HTTP/1.1

3-3701304600/7161/3837104_
5.91000.011.0313006.91
172.24.22.117172.29.13.30:80GET /telescope/requests HTTP/1.1

4-37023780/7156/3679899_
5.95000.010.9812053.81
172.24.22.101172.29.13.30:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

5-3701304610/7176/3908691W
5.89000.011.0213097.46
172.24.22.107172.29.13.30:80GET /server-status HTTP/1.1

6-37042250/7134/3619018_
5.90000.010.9811755.80
172.24.22.125172.29.13.30:80GET /?rest_route=/wp/v2/users/ HTTP/1.1

7-370198780/5974/3151127_
4.96000.09.1711032.50
172.24.22.107172.29.13.30:80GET /.git/config HTTP/1.1

8-369-0/0/1588441.
7.215564200.00.005445.76
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

9-367-0/0/247945.
7.3522862200.00.00808.74
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

10-359-0/0/41182.
4.4591886200.00.00124.68
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

11-298-0/0/323388.
3.31619088200.00.001394.63
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

12-92-0/0/8821.
2.082398802100.00.0038.50
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

13-92-0/0/2732.
2.022398802100.00.0022.63
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

14-92-0/0/2.
0.002401467700.00.000.00
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

15-92-0/0/1.
0.002401467600.00.000.00
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

16-92-0/0/1.
0.002401467500.00.000.00
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

17-92-0/0/1.
0.002401467400.00.000.00
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

18-92-0/0/1.
0.002401467300.00.000.00
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot

Found on 2023-05-03 13:33

Severity: medium
Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31b8a264a5b8a264a518996140

Apache Status

Apache Server Status for etw.economictimes.indiatimes.com (via 172.29.13.30)

Server Version: Apache/2.4.6 (CentOS) mod_jk/1.2.42
Server MPM: prefork
Server Built: Nov 14 2016 18:04:44

Current Time: Monday, 20-Feb-2023 18:02:44 IST
Restart Time: Thursday, 28-Apr-2022 19:49:54 IST
Parent Server Config. Generation: 299
Parent Server MPM Generation: 298
Server uptime:  297 days 22 hours 12 minutes 50 seconds
Server load: 2.29 1.59 0.83
Total accesses: 25922134 - Total Traffic: 89.9 GB
CPU Usage: u24.71 s20.47 cu0 cs0 - .000176% CPU load
1.01 requests/sec - 3749 B/second - 3723 B/request
2 requests currently being processed, 8 idle workers
___.W____.W_....................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqConnChildSlotClientVHostRequest

0-298694010/6515/3189652_
4.830110.040.1311141.88
172.24.22.101172.29.13.30:80GET /ETWealth/login HTTP/1.1

1-298689400/6538/3191265_
5.210110.033.3211187.32
172.24.22.101172.29.13.30:80GET /ETWealth/login HTTP/1.1

2-298689450/6522/3176568_
5.89000.033.7611073.83
172.24.22.122172.29.13.30:80GET / HTTP/1.1

3-298-0/0/3103568.
4.602800.00.0011138.31
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

4-298689430/6526/2948098W
4.68000.051.4810161.47
172.24.22.117172.29.13.30:80GET /server-status HTTP/1.1

5-298947650/6316/3172261_
4.420110.032.8211277.77
172.29.89.101172.29.13.30:80GET /ETWealth/login HTTP/1.1

6-298689420/6534/2887214_
5.390110.029.599996.81
172.29.89.101172.29.13.30:80GET /ETWealth/login HTTP/1.1

7-298331680/2945/2474894_
2.20000.06.039235.14
172.24.22.102172.29.13.30:80GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

8-298922960/2566/1211789_
1.93000.04.724578.18
172.24.22.114172.29.13.30:80GET /telescope/requests HTTP/1.1

9-298-0/0/202556.
1.902900.00.00708.95
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

10-29826261/4/32687C
0.03000.50.0193.17
172.24.22.118172.29.13.30:80GET /s/439313e24323e2536313e2332323/_/;/META-INF/maven/com.atla

11-29826470/4/320024_
0.00000.00.011388.97
172.24.22.111172.29.13.30:80GET /?rest_route=/wp/v2/users/ HTTP/1.1

12-92-0/0/8821.
2.081776358100.00.0038.50
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

13-92-0/0/2732.
2.021776358100.00.0022.63
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

14-92-0/0/2.
0.001779023700.00.000.00
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

15-92-0/0/1.
0.001779023600.00.000.00
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

16-92-0/0/1.
0.001779023500.00.000.00
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

17-92-0/0/1.
0.001779023400.00.000.00
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0

18-92-0/0/1.
0.001779023300.00.000.00
127.0.0.1172.29.13.30:80OPTIONS * HTTP/1.0


  
 SrvChild Server number - generation
 PIDOS process ID
 AccNumber of accesses this connection / this child / this slot
 MMode of operation
CPUCPU usage, number of seconds
SSSeconds since beginning of most recent request
 ReqMilliseconds required to process most recent request
 ConnKilobytes transferred this connection
 ChildMegabytes transferred this child
 SlotTotal megabytes transferred this slot

Found on 2023-02-20 12:32

Create report

Server vulnerable to Log4J CVE-2021-44228

The reply originated from a backend server, the originating frontend server has been included in the report for reference.

It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.

IP: 103.18.142.29
Domain: energy.economictimes.indiatimes.com
Port: 443
URL: https://energy.economictimes.indiatimes.com

First seen 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa46669809b839189a32804a682dc898c02

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 834.338371ms
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203833342e3333383337316d730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa44cbc5a88436efabcb56670eb742cf10a

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 6.238495ms
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20362e3233383439356d730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4bf14a4c338347a1b96ecbb4abab8cd06

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 430.382954ms
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203433302e3338323935346d730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Create report

Server vulnerable to Log4J CVE-2021-44228

The reply originated from a backend server, the originating frontend server has been included in the report for reference.

It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.

IP: 103.18.142.30
Domain: mcxlivefeeds.indiatimes.com
Port: 443
URL: https://mcxlivefeeds.indiatimes.com

First seen 2021-12-13 08:19

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4fdb6ba648ebf57659856fe4077f88bf6

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 1.755072915s
Orignal request was to 103.225.63.41:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20312e373535303732393135730a4f7269676e616c20726571756573742077617320746f203130332e3232352e36332e34313a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:19

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4694f2a36ad77bd2bf30b7bba25ca1412

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 2.299874979s
Orignal request was to 103.225.63.41:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20322e323939383734393739730a4f7269676e616c20726571756573742077617320746f203130332e3232352e36332e34313a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:19

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa449e9e453dc198c42f955d5e54e38a3f6

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 2.723729007s
Orignal request was to 103.225.63.41:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20322e373233373239303037730a4f7269676e616c20726571756573742077617320746f203130332e3232352e36332e34313a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:19

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4858c5735501130b029487c77ab746662

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 3.264459754s
Orignal request was to 103.225.63.41:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b20332e323634343539373534730a4f7269676e616c20726571756573742077617320746f203130332e3232352e36332e34313a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:19

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.206.12
Domain: subscriptions-bff.indiatimes.com
Port: 80
URL: http://subscriptions-bff.indiatimes.com

First seen 2025-12-19 03:59
Last seen 2026-02-09 15:26
Open for 52 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b772e411a2412be60d4b6003c58474d8c0bcfaef5

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /ab/{merchant}/{product}/{platform}/{region}/config
GET /co-branding/{merchant}/{product}/{platform}/{region}/partnerInfo
GET /epaper/user-preferences/{paperType}
GET /mysubs/{merchant}/{platform}/{region}
GET /mysubs/{merchant}/{platform}/{region}/v3
GET /plans/{merchant}/{product}/{platform}/{region}/planGroups
GET /plans/{merchant}/{product}/{platform}/{region}/planGroups/v2
GET /plans/{merchant}/{product}/{platform}/{region}/renewPlans
GET /plans/{merchant}/{product}/{platform}/{region}/static/mandateInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/paymentStatusInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/planInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/planInfo/v2
GET /plans/{merchant}/{product}/{platform}/{region}/upgradePlans
GET /plans/{merchant}/{product}/{platform}/{region}/upgradePlans/v3
GET /secure/panel/benefits-view-config/load

Found on 2026-02-09 15:26

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b772e411a2412be60d4b6003c58474d8c8efdbc07

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /ab/{merchant}/{product}/{platform}/{region}/config
GET /co-branding/{merchant}/{product}/{platform}/{region}/partnerInfo
GET /epaper/user-preferences/{paperType}
GET /mysubs/{merchant}/{platform}/{region}
GET /plans/{merchant}/{product}/{platform}/{region}/planGroups
GET /plans/{merchant}/{product}/{platform}/{region}/planGroups/v2
GET /plans/{merchant}/{product}/{platform}/{region}/renewPlans
GET /plans/{merchant}/{product}/{platform}/{region}/static/mandateInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/paymentStatusInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/planInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/planInfo/v2
GET /plans/{merchant}/{product}/{platform}/{region}/upgradePlans
GET /plans/{merchant}/{product}/{platform}/{region}/upgradePlans/v3
GET /secure/panel/benefits-view-config/load

Found on 2026-01-16 18:43

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b772e411a2412be60d4b6003c58474d8ca6ebbb65

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /ab/{merchant}/{product}/{platform}/{region}/config
GET /co-branding/{merchant}/{product}/{platform}/{region}/partnerInfo
GET /epaper/user-preferences/{paperType}
GET /mysubs/{merchant}/{platform}/{region}
GET /plans/{merchant}/{product}/{platform}/{region}/planGroups
GET /plans/{merchant}/{product}/{platform}/{region}/planGroups/v2
GET /plans/{merchant}/{product}/{platform}/{region}/renewPlans
GET /plans/{merchant}/{product}/{platform}/{region}/static/mandateInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/paymentStatusInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/planInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/planInfo/v2
GET /plans/{merchant}/{product}/{platform}/{region}/upgradePlans
GET /secure/panel/benefits-view-config/load

Found on 2025-12-26 21:12

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.206.9
Domain: subscriptions-bff.indiatimes.com
Port: 443
URL: https://subscriptions-bff.indiatimes.com

First seen 2025-12-19 03:59
Last seen 2026-02-09 04:04
Open for 52 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b772e411a2412be60d4b6003c58474d8c0bcfaef5

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /ab/{merchant}/{product}/{platform}/{region}/config
GET /co-branding/{merchant}/{product}/{platform}/{region}/partnerInfo
GET /epaper/user-preferences/{paperType}
GET /mysubs/{merchant}/{platform}/{region}
GET /mysubs/{merchant}/{platform}/{region}/v3
GET /plans/{merchant}/{product}/{platform}/{region}/planGroups
GET /plans/{merchant}/{product}/{platform}/{region}/planGroups/v2
GET /plans/{merchant}/{product}/{platform}/{region}/renewPlans
GET /plans/{merchant}/{product}/{platform}/{region}/static/mandateInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/paymentStatusInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/planInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/planInfo/v2
GET /plans/{merchant}/{product}/{platform}/{region}/upgradePlans
GET /plans/{merchant}/{product}/{platform}/{region}/upgradePlans/v3
GET /secure/panel/benefits-view-config/load

Found on 2026-02-09 04:04

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b772e411a2412be60d4b6003c58474d8c8efdbc07

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /ab/{merchant}/{product}/{platform}/{region}/config
GET /co-branding/{merchant}/{product}/{platform}/{region}/partnerInfo
GET /epaper/user-preferences/{paperType}
GET /mysubs/{merchant}/{platform}/{region}
GET /plans/{merchant}/{product}/{platform}/{region}/planGroups
GET /plans/{merchant}/{product}/{platform}/{region}/planGroups/v2
GET /plans/{merchant}/{product}/{platform}/{region}/renewPlans
GET /plans/{merchant}/{product}/{platform}/{region}/static/mandateInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/paymentStatusInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/planInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/planInfo/v2
GET /plans/{merchant}/{product}/{platform}/{region}/upgradePlans
GET /plans/{merchant}/{product}/{platform}/{region}/upgradePlans/v3
GET /secure/panel/benefits-view-config/load

Found on 2026-01-16 04:35

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b772e411a2412be60d4b6003c58474d8ca6ebbb65

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /ab/{merchant}/{product}/{platform}/{region}/config
GET /co-branding/{merchant}/{product}/{platform}/{region}/partnerInfo
GET /epaper/user-preferences/{paperType}
GET /mysubs/{merchant}/{platform}/{region}
GET /plans/{merchant}/{product}/{platform}/{region}/planGroups
GET /plans/{merchant}/{product}/{platform}/{region}/planGroups/v2
GET /plans/{merchant}/{product}/{platform}/{region}/renewPlans
GET /plans/{merchant}/{product}/{platform}/{region}/static/mandateInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/paymentStatusInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/planInfo
GET /plans/{merchant}/{product}/{platform}/{region}/static/planInfo/v2
GET /plans/{merchant}/{product}/{platform}/{region}/upgradePlans
GET /secure/panel/benefits-view-config/load

Found on 2025-12-26 23:30

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 223.165.28.45
Domain: oauth2.economictimes.indiatimes.com
Port: 443
URL: https://oauth2.economictimes.indiatimes.com

First seen 2025-11-14 04:53
Last seen 2026-01-09 18:59
Open for 56 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bfa5f004fa4ad61ff6ff787680efa6a2807c540bc

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/status
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
GET /oauth/api/status
POST /api/token/generate
POST /api/token/logout
POST /api/v2/token/generate
POST /oauth/api/merchant/{merchantCode}/krypton/token
POST /oauth/api/merchant/{merchantCode}/token
POST /oauth/api/merchant/{merchantCode}/token/logout
POST /oauth/api/v2/merchant/{merchantCode}/token
PUT /api/blacklist/cache/reload/{secret}
PUT /api/whitelist/cache/reload/{secret}
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2026-01-09 18:59

Severity: info
Fingerprint: 5733ddf49ff49cd18553ecf7ca8ceae76968ba00e6fa90c0fbcced32fd04277b

Public Swagger UI/API detected at path: /swagger-ui.html - sample paths:
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2025-11-23 10:26

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 223.165.24.247
Domain: license.indiatimes.com
Port: 80
URL: http://license.indiatimes.com

First seen 2025-07-29 11:41
Last seen 2026-02-09 07:16
Open for 194 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a7803489
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = https://github.com/toibrowser/til-licensing.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2026-02-09 07:16
  
  233 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522344d1348
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = git@bitbucket.org:times_internet/til-licensing.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2025-12-13 17:16
  
  236 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 223.165.24.247
Domain: license.indiatimes.com
Port: 443
URL: https://license.indiatimes.com

First seen 2025-07-29 11:41
Last seen 2026-01-16 08:41
Open for 170 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522a7803489
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = https://github.com/toibrowser/til-licensing.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2026-01-16 08:41
  
  233 Bytes
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522344d1348
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = git@bitbucket.org:times_internet/til-licensing.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2025-12-14 04:36
  
  236 Bytes
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.238.100.54
Domain: qa-oauth.economictimes.indiatimes.com
Port: 80
URL: http://qa-oauth.economictimes.indiatimes.com

First seen 2025-11-14 04:53
Last seen 2025-12-22 11:40
Open for 38 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bfa5f004fa4ad61ff6ff787680efa6a2807c540bc

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/status
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
GET /oauth/api/status
POST /api/token/generate
POST /api/token/logout
POST /api/v2/token/generate
POST /oauth/api/merchant/{merchantCode}/krypton/token
POST /oauth/api/merchant/{merchantCode}/token
POST /oauth/api/merchant/{merchantCode}/token/logout
POST /oauth/api/v2/merchant/{merchantCode}/token
PUT /api/blacklist/cache/reload/{secret}
PUT /api/whitelist/cache/reload/{secret}
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2025-12-22 11:40

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bfa5f004fbc324af87ca3055e742cdb83682e8707

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/status
GET /auth/{merchantCode}/featureAcess
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
GET /oauth/api/status
POST /api/token/generate
POST /api/token/logout
POST /api/v2/token/generate
POST /oauth/api/merchant/{merchantCode}/krypton/token
POST /oauth/api/merchant/{merchantCode}/token
POST /oauth/api/merchant/{merchantCode}/token/logout
POST /oauth/api/v2/merchant/{merchantCode}/token
PUT /api/blacklist/cache/reload/{secret}
PUT /api/whitelist/cache/reload/{secret}
PUT /auth/{merchantCode}/updateSsoDetails

Found on 2025-11-23 07:13

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.198
Domain: enterpriseai.economictimes.indiatimes.com
Port: 443
URL: https://enterpriseai.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-02-09 17:37
Open for 73 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 17:37
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 184.31.95.79
Domain: bfsi.economictimes.indiatimes.com
Port: 443
URL: https://bfsi.economictimes.indiatimes.com

First seen 2025-11-16 06:44
Last seen 2026-02-09 13:16
Open for 85 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 13:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 92.122.106.222
Domain: b2bimg.economictimes.indiatimes.com
Port: 443
URL: https://b2bimg.economictimes.indiatimes.com

First seen 2025-12-01 06:12
Last seen 2026-02-09 12:12
Open for 70 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 12:12
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.208
Domain: cfo-preprod.economictimes.indiatimes.com
Port: 443
URL: https://cfo-preprod.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-02-09 10:39
Open for 73 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 10:39
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.208
Domain: brandequity-preprod.economictimes.indiatimes.com
Port: 443
URL: https://brandequity-preprod.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-02-09 10:39
Open for 73 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 10:39
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.198
Domain: supplychain-preprod.economictimes.indiatimes.com
Port: 443
URL: https://supplychain-preprod.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-02-09 10:39
Open for 73 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 10:39
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.198
Domain: energymea-preprod.economictimes.indiatimes.com
Port: 443
URL: https://energymea-preprod.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-02-09 10:18
Open for 72 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 10:18
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.198
Domain: auto-preprod.economictimes.indiatimes.com
Port: 443
URL: https://auto-preprod.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-02-09 10:18
Open for 72 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 10:18
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.196
Domain: sustainability.economictimes.indiatimes.com
Port: 443
URL: https://sustainability.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-02-09 08:42
Open for 117 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 08:42
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.212
Domain: agri-preprod.economictimes.indiatimes.com
Port: 443
URL: https://agri-preprod.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-02-09 08:42
Open for 117 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 08:42
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.36.162.147
Domain: timeslearn.indiatimes.com
Port: 443
URL: https://timeslearn.indiatimes.com

First seen 2025-10-24 05:44
Last seen 2026-02-09 07:12
Open for 108 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 07:12
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.38.98.228
Domain: techmonk-preprod.economictimes.indiatimes.com
Port: 443
URL: https://techmonk-preprod.economictimes.indiatimes.com

First seen 2025-12-04 04:20
Last seen 2026-02-09 06:30
Open for 67 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 06:30
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.208
Domain: telecom-preprod.economictimes.indiatimes.com
Port: 443
URL: https://telecom-preprod.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-02-09 04:36
Open for 72 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 04:36
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.209
Domain: gcc.economictimes.indiatimes.com
Port: 443
URL: https://gcc.economictimes.indiatimes.com

First seen 2025-11-10 05:42
Last seen 2026-02-09 04:23
Open for 90 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 04:23
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.17.100.227
Domain: manufacturing.economictimes.indiatimes.com
Port: 443
URL: https://manufacturing.economictimes.indiatimes.com

First seen 2025-12-02 06:39
Last seen 2026-02-09 02:40
Open for 68 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 02:40
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: drones.economictimes.indiatimes.com
Port: 80
URL: http://drones.economictimes.indiatimes.com

First seen 2025-12-24 11:39
Last seen 2026-02-08 22:13
Open for 46 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-08 22:13
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.214
Domain: globaltownhall.economictimes.indiatimes.com
Port: 443
URL: https://globaltownhall.economictimes.indiatimes.com

First seen 2025-10-14 23:11
Last seen 2026-02-08 22:12
Open for 116 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-08 22:12
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: biotech.economictimes.indiatimes.com
Port: 443
URL: https://biotech.economictimes.indiatimes.com

First seen 2025-12-24 11:39
Last seen 2026-02-05 05:24
Open for 42 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: vconfex.economictimes.indiatimes.com
Port: 443
URL: https://vconfex.economictimes.indiatimes.com

First seen 2025-10-24 05:44
Last seen 2026-02-03 14:01
Open for 102 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-03 14:01
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: sme.economictimes.indiatimes.com
Port: 443
URL: https://sme.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-03 04:49
Open for 55 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-03 04:49
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.17.100.178
Domain: hr.economictimes.indiatimes.com
Port: 443
URL: https://hr.economictimes.indiatimes.com

First seen 2025-12-01 06:35
Last seen 2026-02-02 10:43
Open for 63 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-02 10:43
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.225.62.154
Domain: payment-qa.economictimes.indiatimes.com
Port: 443
URL: https://payment-qa.economictimes.indiatimes.com

First seen 2025-11-14 04:53
Last seen 2026-02-02 10:33
Open for 80 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-02-02 10:33
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: tech.economictimes.indiatimes.com
Port: 80
URL: http://tech.economictimes.indiatimes.com

First seen 2025-11-14 04:53
Last seen 2026-02-02 10:33
Open for 80 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-02 10:33
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: www.vconfex.economictimes.indiatimes.com
Port: 443
URL: https://www.vconfex.economictimes.indiatimes.com

First seen 2025-11-11 00:18
Last seen 2026-02-02 09:55
Open for 83 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-02 09:55
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.17.100.227
Domain: pharma.economictimes.indiatimes.com
Port: 443
URL: https://pharma.economictimes.indiatimes.com

First seen 2025-12-01 06:35
Last seen 2026-02-01 17:55
Open for 62 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-01 17:55
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.18.142.230
Domain: subscriptionsmisc.economictimes.indiatimes.com
Port: 443
URL: https://subscriptionsmisc.economictimes.indiatimes.com

First seen 2025-12-19 03:59
Last seen 2025-12-21 04:34
Open for 2 days

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec75a89cf9e4d10f187f1bfd36e85fe1b03a0f640a

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /admin/getVoucherDetails
GET /admin/getVoucherDetailsCsv
GET /admin/voucherLogs
GET /admin/vouchers
GET /api/entitlements/{access_token}
GET /api/subscription/get
GET /subscription/HibernateException
GET /subscription/JDBCConnectionException
GET /subscription/SQLException
GET /subscription/activationStatus
GET /subscription/allGroup
GET /subscription/api/deal/
GET /subscription/api/deal/eventCode/{eventCode}/isEventCodePresent
GET /subscription/api/deal/getTSourceAndCampaignDetails
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCode
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCodeV1
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plutus
GET /subscription/api/{merchantCode}/{geoRegion}/offerDetails
GET /subscription/benefitActivationStatus
GET /subscription/benefitActivationStatusS2S
GET /subscription/merchant/{merchantCode}/mySubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/V2/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/availBenefit/{initTxn}
GET /subscription/merchant/{merchantCode}/product/{productCode}/cancelReasons
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegionCode}/plan/{planId}/planPriceDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/planDealInfo
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealInfoV2
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planGroupsDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/planCode/{planCode}/dealCode/{dealCode}/planDealDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/V2/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/changeProductVariant
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/findSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/invoice/userDetails
GET /subscription/merchant/{merchantCode}/product/{productCode}/latestSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/onBoardingEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibilityV1
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionExtendOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/userPendingTransaction
GET /subscription/merchant/{merchantCode}/product/{productCode}/v2/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/voucherBenefitDetail
GET /subscription/merchant/{merchantCode}/subscriptionInformation
GET /subscription/merchant/{merchantCode}/v2/mySubscription
GET /subscription/partner/vendor-order
GET /subscription/paymentOrderStatus
GET /subscription/permission-subscription
GET /subscription/redisSnappyJdk
GET /subscription/redisTest
GET /subscription/redisTestSnappyJson
GET /subscription/subscription-permission
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/loginIdentifier/{loginIdentifier}/lastSubscription
GET /subscription/v2/permission-subscription
GET /subscription/v2/subscription-permission
GET /subscription/v3/permission-subscription
GET /subscription/vendorCode/{vendorCode}/orderId/{vendorOrderId}/getTilPartnerStatus
GET /subscription/{merchantCode}/subscriptionSummary
POST /api/merchant/{merchantCode}/product/{productCode}/findLastSubscription
POST /api/payment_trans
POST /api/subscription/receiptUpload
POST /api/subscription/reconcile
POST /api/subscription/redeemVoucher
POST /subscription/V2/paymentPayload
POST /subscription/V2/planChangeOffer
POST /subscription/api/deal/applyDealCode
POST /subscription/api/deal/createDealCodeInCache
POST /subscription/api/deal/upload
POST /subscription/api/deal/uploadDealCodes
POST /subscription/api/{merchantCode}/{productCode}/{geoRegion}/offers
POST /subscription/applysubscriptionExtension
POST /subscription/benefitActivation
POST /subscription/benefitActivationS2S
POST /subscription/changeProductVariant
POST /subscription/gdprUpdate
POST /subscription/guestUserAppSubscriptionDetail
POST /subscription/invoice/userDetails
POST /subscription/mapGroupPlanToRenew
POST /subscription/mapGroupPlanToUpgrade
POST /subscription/mapPlanToRenew
POST /subscription/mapPlanToUpgrade
POST /subscription/merchant/{merchantCode}/product/{productCode}/V2/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/accessPassRetrialPayment
POST /subscription/merchant/{merchantCode}/product/{productCode}/cancel
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/code/{eventCode}/generateAccessPass
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/introPlanEligibilityCheck
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/userPlans
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/v2/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/redeemBenefit/{initTxnId}/{planOfferType}
POST /subscription/merchant/{merchantCode}/product/{productCode}/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/verifiyReceiptAndSubscription
POST /subscription/orders/{platform}/free-trial
POST /subscription/paymentPayload
POST /subscription/planChangeOffer
POST /subscription/planChangePurchase
POST /subscription/promoOfferRequest
POST /subscription/promoSignature
POST /subscription/retrial-payment
POST /subscription/siReMandate
POST /subscription/signature
POST /subscription/sso-uuid
POST /subscription/ssoVerifiedEmail
POST /subscription/tilPartnerSubscription
POST /subscription/unifiedReceiptMapping
POST /subscription/user-payment-link
POST /subscription/userDeviceMapping
POST /subscription/userPay
POST /subscription/{merchantCode}/activateSubscriptionAsBenefit
POST /subscription/{merchantCode}/{productCode}/partnerUserSubscription
POST /subscription/{projectCode}/informGdprStatus
POST /user_subscriptions/api/payment/failTrans
POST /user_subscriptions/api/payment/ok
POST /user_subscriptions/api/payment/pending
PUT /subscription/subPlanPeriod

Found on 2025-12-21 04:34

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: sports.economictimes.indiatimes.com
Port: 80
URL: http://sports.economictimes.indiatimes.com

First seen 2025-11-24 19:26
Last seen 2025-12-06 12:48
Open for 11 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2025-12-06 12:48
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: sports.economictimes.indiatimes.com
Port: 443
URL: https://sports.economictimes.indiatimes.com

First seen 2025-11-24 19:26
Last seen 2025-12-06 12:48
Open for 11 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2025-12-06 12:48
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.208
Domain: csr.economictimes.indiatimes.com
Port: 443
URL: https://csr.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2025-11-30 13:52
Open for 2 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2025-11-30 13:52
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 92.122.106.222
Domain: realty.economictimes.indiatimes.com
Port: 443
URL: https://realty.economictimes.indiatimes.com

First seen 2025-12-01 06:12
Last seen 2026-02-09 17:56
Open for 70 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 17:56
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 92.122.106.222
Domain: retail.economictimes.indiatimes.com
Port: 443
URL: https://retail.economictimes.indiatimes.com

First seen 2025-12-01 06:12
Last seen 2026-02-09 17:56
Open for 70 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 17:56
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 92.122.106.222
Domain: ciso.economictimes.indiatimes.com
Port: 443
URL: https://ciso.economictimes.indiatimes.com

First seen 2025-12-01 06:12
Last seen 2026-02-09 17:56
Open for 70 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 17:56
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.208
Domain: hospitality-preprod.economictimes.indiatimes.com
Port: 443
URL: https://hospitality-preprod.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-02-09 16:24
Open for 73 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 16:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.17.100.226
Domain: legal.economictimes.indiatimes.com
Port: 443
URL: https://legal.economictimes.indiatimes.com

First seen 2025-12-01 06:35
Last seen 2026-02-09 16:14
Open for 70 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 16:14
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.17.100.178
Domain: travel.economictimes.indiatimes.com
Port: 443
URL: https://travel.economictimes.indiatimes.com

First seen 2025-12-01 06:35
Last seen 2026-02-09 16:14
Open for 70 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 16:14
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.36.162.157
Domain: nivabupa.indiatimes.com
Port: 443
URL: https://nivabupa.indiatimes.com

First seen 2025-10-24 05:44
Last seen 2026-02-09 14:38
Open for 108 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 14:38
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.196
Domain: crypto-preprod.economictimes.indiatimes.com
Port: 443
URL: https://crypto-preprod.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-02-09 14:35
Open for 117 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 14:35
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: water.economictimes.indiatimes.com
Port: 443
URL: https://water.economictimes.indiatimes.com

First seen 2025-12-01 06:35
Last seen 2026-02-09 13:47
Open for 70 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 13:47
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.209
Domain: education.economictimes.indiatimes.com
Port: 443
URL: https://education.economictimes.indiatimes.com

First seen 2025-11-10 05:42
Last seen 2026-02-09 13:26
Open for 91 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 13:26
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 92.122.106.222
Domain: energy.economictimes.indiatimes.com
Port: 443
URL: https://energy.economictimes.indiatimes.com

First seen 2025-12-01 06:12
Last seen 2026-02-09 10:57
Open for 70 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 10:57
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: www.vconfex.economictimes.indiatimes.com
Port: 80
URL: http://www.vconfex.economictimes.indiatimes.com

First seen 2025-10-30 05:49
Last seen 2026-02-09 06:46
Open for 102 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 06:46
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.206.29
Domain: payment.economictimes.indiatimes.com
Port: 443
URL: https://payment.economictimes.indiatimes.com

First seen 2025-11-14 04:53
Last seen 2026-02-09 02:54
Open for 86 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-02-09 02:54
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.212
Domain: hrsea.economictimes.indiatimes.com
Port: 443
URL: https://hrsea.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-02-09 02:32
Open for 116 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 02:32
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: devices.economictimes.indiatimes.com
Port: 443
URL: https://devices.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: metaverse.economictimes.indiatimes.com
Port: 80
URL: http://metaverse.economictimes.indiatimes.com

First seen 2025-12-24 11:39
Last seen 2026-02-05 05:24
Open for 42 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.208
Domain: crypto.economictimes.indiatimes.com
Port: 443
URL: https://crypto.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-02-05 05:24
Open for 112 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: productmanagement.economictimes.indiatimes.com
Port: 443
URL: https://productmanagement.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: mobility.economictimes.indiatimes.com
Port: 80
URL: http://mobility.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: luxury.economictimes.indiatimes.com
Port: 443
URL: https://luxury.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: recycle.economictimes.indiatimes.com
Port: 80
URL: http://recycle.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: food.economictimes.indiatimes.com
Port: 80
URL: http://food.economictimes.indiatimes.com

First seen 2025-12-24 11:39
Last seen 2026-02-05 05:24
Open for 42 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: trade.economictimes.indiatimes.com
Port: 443
URL: https://trade.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: spatial.economictimes.indiatimes.com
Port: 443
URL: https://spatial.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: equity.economictimes.indiatimes.com
Port: 443
URL: https://equity.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: food.economictimes.indiatimes.com
Port: 443
URL: https://food.economictimes.indiatimes.com

First seen 2025-12-24 11:39
Last seen 2026-02-05 05:24
Open for 42 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: sme.economictimes.indiatimes.com
Port: 80
URL: http://sme.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: recycle.economictimes.indiatimes.com
Port: 443
URL: https://recycle.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: productmanagement.economictimes.indiatimes.com
Port: 80
URL: http://productmanagement.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: robotics.economictimes.indiatimes.com
Port: 80
URL: http://robotics.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-03 04:49
Open for 55 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-03 04:49
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: construction.economictimes.indiatimes.com
Port: 443
URL: https://construction.economictimes.indiatimes.com

First seen 2025-12-01 06:35
Last seen 2026-01-23 09:53
Open for 53 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-01-23 09:53
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.17.100.185
Domain: toievents.indiatimes.com
Port: 443
URL: https://toievents.indiatimes.com

First seen 2025-12-02 06:39
Last seen 2026-01-23 06:07
Open for 51 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-01-23 06:07
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.206.16
Domain: subscriptions.economictimes.indiatimes.com
Port: 443
URL: https://subscriptions.economictimes.indiatimes.com

First seen 2025-12-19 03:59
Last seen 2025-12-21 05:39
Open for 2 days

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec75a89cf9e4d10f187f1bfd36e85fe1b03a0f640a

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /admin/getVoucherDetails
GET /admin/getVoucherDetailsCsv
GET /admin/voucherLogs
GET /admin/vouchers
GET /api/entitlements/{access_token}
GET /api/subscription/get
GET /subscription/HibernateException
GET /subscription/JDBCConnectionException
GET /subscription/SQLException
GET /subscription/activationStatus
GET /subscription/allGroup
GET /subscription/api/deal/
GET /subscription/api/deal/eventCode/{eventCode}/isEventCodePresent
GET /subscription/api/deal/getTSourceAndCampaignDetails
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCode
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCodeV1
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plutus
GET /subscription/api/{merchantCode}/{geoRegion}/offerDetails
GET /subscription/benefitActivationStatus
GET /subscription/benefitActivationStatusS2S
GET /subscription/merchant/{merchantCode}/mySubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/V2/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/availBenefit/{initTxn}
GET /subscription/merchant/{merchantCode}/product/{productCode}/cancelReasons
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegionCode}/plan/{planId}/planPriceDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/planDealInfo
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealInfoV2
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planGroupsDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/planCode/{planCode}/dealCode/{dealCode}/planDealDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/V2/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/changeProductVariant
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/findSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/invoice/userDetails
GET /subscription/merchant/{merchantCode}/product/{productCode}/latestSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/onBoardingEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibilityV1
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionExtendOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/userPendingTransaction
GET /subscription/merchant/{merchantCode}/product/{productCode}/v2/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/voucherBenefitDetail
GET /subscription/merchant/{merchantCode}/subscriptionInformation
GET /subscription/merchant/{merchantCode}/v2/mySubscription
GET /subscription/partner/vendor-order
GET /subscription/paymentOrderStatus
GET /subscription/permission-subscription
GET /subscription/redisSnappyJdk
GET /subscription/redisTest
GET /subscription/redisTestSnappyJson
GET /subscription/subscription-permission
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/loginIdentifier/{loginIdentifier}/lastSubscription
GET /subscription/v2/permission-subscription
GET /subscription/v2/subscription-permission
GET /subscription/v3/permission-subscription
GET /subscription/vendorCode/{vendorCode}/orderId/{vendorOrderId}/getTilPartnerStatus
GET /subscription/{merchantCode}/subscriptionSummary
POST /api/merchant/{merchantCode}/product/{productCode}/findLastSubscription
POST /api/payment_trans
POST /api/subscription/receiptUpload
POST /api/subscription/reconcile
POST /api/subscription/redeemVoucher
POST /subscription/V2/paymentPayload
POST /subscription/V2/planChangeOffer
POST /subscription/api/deal/applyDealCode
POST /subscription/api/deal/createDealCodeInCache
POST /subscription/api/deal/upload
POST /subscription/api/deal/uploadDealCodes
POST /subscription/api/{merchantCode}/{productCode}/{geoRegion}/offers
POST /subscription/applysubscriptionExtension
POST /subscription/benefitActivation
POST /subscription/benefitActivationS2S
POST /subscription/changeProductVariant
POST /subscription/gdprUpdate
POST /subscription/guestUserAppSubscriptionDetail
POST /subscription/invoice/userDetails
POST /subscription/mapGroupPlanToRenew
POST /subscription/mapGroupPlanToUpgrade
POST /subscription/mapPlanToRenew
POST /subscription/mapPlanToUpgrade
POST /subscription/merchant/{merchantCode}/product/{productCode}/V2/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/accessPassRetrialPayment
POST /subscription/merchant/{merchantCode}/product/{productCode}/cancel
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/code/{eventCode}/generateAccessPass
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/introPlanEligibilityCheck
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/userPlans
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/v2/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/redeemBenefit/{initTxnId}/{planOfferType}
POST /subscription/merchant/{merchantCode}/product/{productCode}/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/verifiyReceiptAndSubscription
POST /subscription/orders/{platform}/free-trial
POST /subscription/paymentPayload
POST /subscription/planChangeOffer
POST /subscription/planChangePurchase
POST /subscription/promoOfferRequest
POST /subscription/promoSignature
POST /subscription/retrial-payment
POST /subscription/siReMandate
POST /subscription/signature
POST /subscription/sso-uuid
POST /subscription/ssoVerifiedEmail
POST /subscription/tilPartnerSubscription
POST /subscription/unifiedReceiptMapping
POST /subscription/user-payment-link
POST /subscription/userDeviceMapping
POST /subscription/userPay
POST /subscription/{merchantCode}/activateSubscriptionAsBenefit
POST /subscription/{merchantCode}/{productCode}/partnerUserSubscription
POST /subscription/{projectCode}/informGdprStatus
POST /user_subscriptions/api/payment/failTrans
POST /user_subscriptions/api/payment/ok
POST /user_subscriptions/api/payment/pending
PUT /subscription/subPlanPeriod

Found on 2025-12-21 05:39

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.18.142.230
Domain: subscriptionsmisc.economictimes.indiatimes.com
Port: 80
URL: http://subscriptionsmisc.economictimes.indiatimes.com

First seen 2025-12-19 03:59
Last seen 2025-12-21 05:39
Open for 2 days

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec75a89cf9e4d10f187f1bfd36e85fe1b03a0f640a

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /admin/getVoucherDetails
GET /admin/getVoucherDetailsCsv
GET /admin/voucherLogs
GET /admin/vouchers
GET /api/entitlements/{access_token}
GET /api/subscription/get
GET /subscription/HibernateException
GET /subscription/JDBCConnectionException
GET /subscription/SQLException
GET /subscription/activationStatus
GET /subscription/allGroup
GET /subscription/api/deal/
GET /subscription/api/deal/eventCode/{eventCode}/isEventCodePresent
GET /subscription/api/deal/getTSourceAndCampaignDetails
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCode
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCodeV1
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plutus
GET /subscription/api/{merchantCode}/{geoRegion}/offerDetails
GET /subscription/benefitActivationStatus
GET /subscription/benefitActivationStatusS2S
GET /subscription/merchant/{merchantCode}/mySubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/V2/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/availBenefit/{initTxn}
GET /subscription/merchant/{merchantCode}/product/{productCode}/cancelReasons
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegionCode}/plan/{planId}/planPriceDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/planDealInfo
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealInfoV2
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planGroupsDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/planCode/{planCode}/dealCode/{dealCode}/planDealDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/V2/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/changeProductVariant
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/findSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/invoice/userDetails
GET /subscription/merchant/{merchantCode}/product/{productCode}/latestSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/onBoardingEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibilityV1
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionExtendOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/userPendingTransaction
GET /subscription/merchant/{merchantCode}/product/{productCode}/v2/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/voucherBenefitDetail
GET /subscription/merchant/{merchantCode}/subscriptionInformation
GET /subscription/merchant/{merchantCode}/v2/mySubscription
GET /subscription/partner/vendor-order
GET /subscription/paymentOrderStatus
GET /subscription/permission-subscription
GET /subscription/redisSnappyJdk
GET /subscription/redisTest
GET /subscription/redisTestSnappyJson
GET /subscription/subscription-permission
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/loginIdentifier/{loginIdentifier}/lastSubscription
GET /subscription/v2/permission-subscription
GET /subscription/v2/subscription-permission
GET /subscription/v3/permission-subscription
GET /subscription/vendorCode/{vendorCode}/orderId/{vendorOrderId}/getTilPartnerStatus
GET /subscription/{merchantCode}/subscriptionSummary
POST /api/merchant/{merchantCode}/product/{productCode}/findLastSubscription
POST /api/payment_trans
POST /api/subscription/receiptUpload
POST /api/subscription/reconcile
POST /api/subscription/redeemVoucher
POST /subscription/V2/paymentPayload
POST /subscription/V2/planChangeOffer
POST /subscription/api/deal/applyDealCode
POST /subscription/api/deal/createDealCodeInCache
POST /subscription/api/deal/upload
POST /subscription/api/deal/uploadDealCodes
POST /subscription/api/{merchantCode}/{productCode}/{geoRegion}/offers
POST /subscription/applysubscriptionExtension
POST /subscription/benefitActivation
POST /subscription/benefitActivationS2S
POST /subscription/changeProductVariant
POST /subscription/gdprUpdate
POST /subscription/guestUserAppSubscriptionDetail
POST /subscription/invoice/userDetails
POST /subscription/mapGroupPlanToRenew
POST /subscription/mapGroupPlanToUpgrade
POST /subscription/mapPlanToRenew
POST /subscription/mapPlanToUpgrade
POST /subscription/merchant/{merchantCode}/product/{productCode}/V2/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/accessPassRetrialPayment
POST /subscription/merchant/{merchantCode}/product/{productCode}/cancel
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/code/{eventCode}/generateAccessPass
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/introPlanEligibilityCheck
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/userPlans
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/v2/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/redeemBenefit/{initTxnId}/{planOfferType}
POST /subscription/merchant/{merchantCode}/product/{productCode}/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/verifiyReceiptAndSubscription
POST /subscription/orders/{platform}/free-trial
POST /subscription/paymentPayload
POST /subscription/planChangeOffer
POST /subscription/planChangePurchase
POST /subscription/promoOfferRequest
POST /subscription/promoSignature
POST /subscription/retrial-payment
POST /subscription/siReMandate
POST /subscription/signature
POST /subscription/sso-uuid
POST /subscription/ssoVerifiedEmail
POST /subscription/tilPartnerSubscription
POST /subscription/unifiedReceiptMapping
POST /subscription/user-payment-link
POST /subscription/userDeviceMapping
POST /subscription/userPay
POST /subscription/{merchantCode}/activateSubscriptionAsBenefit
POST /subscription/{merchantCode}/{productCode}/partnerUserSubscription
POST /subscription/{projectCode}/informGdprStatus
POST /user_subscriptions/api/payment/failTrans
POST /user_subscriptions/api/payment/ok
POST /user_subscriptions/api/payment/pending
PUT /subscription/subPlanPeriod

Found on 2025-12-21 05:39

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: facilities.economictimes.indiatimes.com
Port: 443
URL: https://facilities.economictimes.indiatimes.com

First seen 2025-11-24 19:26
Last seen 2025-12-06 12:48
Open for 11 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2025-12-06 12:48
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: steel.economictimes.indiatimes.com
Port: 80
URL: http://steel.economictimes.indiatimes.com

First seen 2025-11-24 19:26
Last seen 2025-12-04 17:40
Open for 9 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2025-12-04 17:40
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 2.16.186.208
Domain: newscard.indiatimes.com
Port: 443
URL: https://newscard.indiatimes.com

First seen 2022-08-18 08:00
Last seen 2023-10-26 17:58
Open for 434 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522fab53e60
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	ignorecase = true
	precomposeunicode = true
[remote "origin"]
	url = git@bitbucket.org:times_internet/cardcms-static-website.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "main"]
	remote = origin
	merge = refs/heads/main
```
  Found on 2023-10-26 17:58
  
  325 Bytes
Create report
Leak detected by FirebaseHttpPlugin

No description available

IP: 95.100.142.147
Domain: geoapi.indiatimes.com
Port: 443
URL: https://geoapi.indiatimes.com/.json

First seen 2021-07-29 12:35
Last seen 2022-04-29 17:20
Open for 274 days
- Fingerprint: b17be75321b5afb667b5b6ca67b5b6ca67b5b6ca67b5b6ca67b5b6ca67b5b6ca
```
{ "CountryCode":"NL","region_code":"","city":"AMSTERDAM", "Continent":"EU"  }
```
  Found on 2021-07-29 12:35
  
  77 Bytes
Create report

Leak detected by FirebaseHttpPlugin

No description available

IP: 95.100.142.147
Domain: langnetstorage.indiatimes.com
Port: 443
URL: https://langnetstorage.indiatimes.com/.json

First seen 2021-07-29 12:36
Last seen 2022-03-07 08:57
Open for 220 days

Fingerprint: b17be75321b5afb45cf433455cf433455cf433455cf433455cf433455cf43345

{"order":["category","region"],"items":{"category":{"label":"CATEGORY","order":["GEN","SC","ST"],"items":{"GEN":{"value":"GEN","cns":[1,5,8,9,12,13,14,16,17,18,19,20,21,22,23,24,25,28,29,31,32,33,34,35,36,38,39,40,41,42,43,44,48,49,50,61,63,64,75,76,77,79,80,81]},"SC":{"value":"SC","cns":[15,26,27,30,37,47,65,74,78]},"ST":{"value":"ST","cns":[2,3,4,6,7,10,11,45,46,51,52,53,54,55,56,57,58,59,60,62,66,67,68,69,70,71,72,73]}}},"region":[]}}

Found on 2021-07-29 12:36

441 Bytes

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: hotelier.economictimes.indiatimes.com
Port: 443
URL: https://hotelier.economictimes.indiatimes.com

First seen 2025-12-01 06:35
Last seen 2026-02-09 17:20
Open for 70 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 17:20
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.206.29
Domain: payment.economictimes.indiatimes.com
Port: 80
URL: http://payment.economictimes.indiatimes.com

First seen 2025-11-14 04:53
Last seen 2026-02-09 16:27
Open for 87 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-02-09 16:27
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.18.142.16
Domain: etservices2.indiatimes.com
Port: 80
URL: http://etservices2.indiatimes.com

First seen 2025-11-14 04:53
Last seen 2026-02-09 16:27
Open for 87 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd151e75e4b5704d33ed5001064463d20ca85885d264b7bccb8
```
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /all/report/consentCountsByProductCode
GET /all/tenants
GET /test/shard/key
GET /{tenant}/consent
GET /{tenant}/consent/download/all/{apiKey}
GET /{tenant}/consent/jsonp
GET /{tenant}/report/consentCountsByProductCode
POST /{tenant}/ccpaconsent
POST /{tenant}/ccpaconsent/get
POST /{tenant}/consent/get
POST /{tenant}/consent/get/jsonp
POST /{tenant}/data/download
POST /{tenant}/save
```
  Found on 2026-02-09 16:27
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.225.62.154
Domain: payment-qa.economictimes.indiatimes.com
Port: 80
URL: http://payment-qa.economictimes.indiatimes.com

First seen 2025-11-14 04:53
Last seen 2026-02-09 16:27
Open for 87 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-02-09 16:27
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.198
Domain: legal-preprod.economictimes.indiatimes.com
Port: 443
URL: https://legal-preprod.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-02-09 16:12
Open for 73 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 16:12
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.18.142.16
Domain: etservices2.indiatimes.com
Port: 443
URL: https://etservices2.indiatimes.com

First seen 2025-11-14 04:53
Last seen 2026-02-09 16:06
Open for 87 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd151e75e4b5704d33ed5001064463d20ca85885d264b7bccb8
```
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /all/report/consentCountsByProductCode
GET /all/tenants
GET /test/shard/key
GET /{tenant}/consent
GET /{tenant}/consent/download/all/{apiKey}
GET /{tenant}/consent/jsonp
GET /{tenant}/report/consentCountsByProductCode
POST /{tenant}/ccpaconsent
POST /{tenant}/ccpaconsent/get
POST /{tenant}/consent/get
POST /{tenant}/consent/get/jsonp
POST /{tenant}/data/download
POST /{tenant}/save
```
  Found on 2026-02-09 16:06
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 184.30.216.251
Domain: masterclass.economictimes.indiatimes.com
Port: 443
URL: https://masterclass.economictimes.indiatimes.com

First seen 2025-12-01 04:42
Last seen 2026-02-09 13:04
Open for 70 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 13:04
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: construction.economictimes.indiatimes.com
Port: 80
URL: http://construction.economictimes.indiatimes.com

First seen 2025-12-01 06:35
Last seen 2026-02-09 07:44
Open for 70 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 07:44
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: water.economictimes.indiatimes.com
Port: 80
URL: http://water.economictimes.indiatimes.com

First seen 2025-12-01 06:35
Last seen 2026-02-09 07:27
Open for 70 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 07:27
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.208
Domain: b2b-preprod.economictimes.indiatimes.com
Port: 443
URL: https://b2b-preprod.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-02-09 05:37
Open for 72 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 05:37
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.198
Domain: bfsi-preprod.economictimes.indiatimes.com
Port: 443
URL: https://bfsi-preprod.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-02-09 05:37
Open for 72 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 05:37
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.198
Domain: education-preprod.economictimes.indiatimes.com
Port: 443
URL: https://education-preprod.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-02-09 05:37
Open for 72 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 05:37
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.208
Domain: realty-preprod.economictimes.indiatimes.com
Port: 443
URL: https://realty-preprod.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-02-09 05:37
Open for 72 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 05:37
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.198
Domain: supplychain.economictimes.indiatimes.com
Port: 443
URL: https://supplychain.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-02-09 05:37
Open for 72 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 05:37
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 92.122.106.222
Domain: health.economictimes.indiatimes.com
Port: 443
URL: https://health.economictimes.indiatimes.com

First seen 2025-12-01 06:12
Last seen 2026-02-09 01:49
Open for 69 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 01:49
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.208
Domain: infra.economictimes.indiatimes.com
Port: 443
URL: https://infra.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-02-09 01:25
Open for 116 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 01:25
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.196
Domain: chemicals-preprod.economictimes.indiatimes.com
Port: 443
URL: https://chemicals-preprod.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-02-09 01:25
Open for 116 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 01:25
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.38.98.217
Domain: techmonk.economictimes.indiatimes.com
Port: 443
URL: https://techmonk.economictimes.indiatimes.com

First seen 2025-12-04 04:20
Last seen 2026-02-09 01:19
Open for 66 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 01:19
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: live.economictimes.indiatimes.com
Port: 80
URL: http://live.economictimes.indiatimes.com

First seen 2025-12-02 06:39
Last seen 2026-02-08 23:35
Open for 68 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-08 23:35
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 92.122.106.222
Domain: cfo.economictimes.indiatimes.com
Port: 443
URL: https://cfo.economictimes.indiatimes.com

First seen 2025-12-01 06:12
Last seen 2026-02-08 23:32
Open for 69 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-08 23:32
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 92.122.106.222
Domain: cio.economictimes.indiatimes.com
Port: 443
URL: https://cio.economictimes.indiatimes.com

First seen 2025-12-01 06:12
Last seen 2026-02-08 21:55
Open for 69 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-08 21:55
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: vconfex.economictimes.indiatimes.com
Port: 80
URL: http://vconfex.economictimes.indiatimes.com

First seen 2025-10-24 05:44
Last seen 2026-02-08 19:29
Open for 107 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-08 19:29
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.53.42.193
Domain: government.economictimes.indiatimes.com
Port: 443
URL: https://government.economictimes.indiatimes.com

First seen 2025-12-02 06:13
Last seen 2026-02-08 19:14
Open for 68 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-08 19:14
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: esports.economictimes.indiatimes.com
Port: 443
URL: https://esports.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: security.economictimes.indiatimes.com
Port: 443
URL: https://security.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: spatial.economictimes.indiatimes.com
Port: 80
URL: http://spatial.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: jewellery.economictimes.indiatimes.com
Port: 80
URL: http://jewellery.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: startups.economictimes.indiatimes.com
Port: 443
URL: https://startups.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: mobility.economictimes.indiatimes.com
Port: 443
URL: https://mobility.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: robotics.economictimes.indiatimes.com
Port: 443
URL: https://robotics.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: climate.economictimes.indiatimes.com
Port: 80
URL: http://climate.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.17.100.171
Domain: agriculture.economictimes.indiatimes.com
Port: 443
URL: https://agriculture.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: trade.economictimes.indiatimes.com
Port: 80
URL: http://trade.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: shipping.economictimes.indiatimes.com
Port: 443
URL: https://shipping.economictimes.indiatimes.com

First seen 2025-12-01 06:35
Last seen 2026-02-01 22:33
Open for 62 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-01 22:33
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.208
Domain: ai-preprod.economictimes.indiatimes.com
Port: 443
URL: https://ai-preprod.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-01-23 15:48
Open for 56 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-01-23 15:48
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.238.101.61
Domain: auto-stage.economictimes.indiatimes.com
Port: 443
URL: https://auto-stage.economictimes.indiatimes.com

First seen 2025-10-30 05:49
Last seen 2026-01-23 14:50
Open for 85 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-01-23 14:50
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 223.165.31.153
Domain: events-stage.economictimes.indiatimes.com
Port: 80
URL: http://events-stage.economictimes.indiatimes.com

First seen 2025-11-17 05:42
Last seen 2026-01-23 08:38
Open for 67 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-01-23 08:38
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: facilities.economictimes.indiatimes.com
Port: 80
URL: http://facilities.economictimes.indiatimes.com

First seen 2025-11-24 19:26
Last seen 2025-12-06 12:48
Open for 11 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2025-12-06 12:48
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: electronics.economictimes.indiatimes.com
Port: 443
URL: https://electronics.economictimes.indiatimes.com

First seen 2025-12-01 06:35
Last seen 2025-12-06 12:48
Open for 5 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2025-12-06 12:48
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: electronics.economictimes.indiatimes.com
Port: 80
URL: http://electronics.economictimes.indiatimes.com

First seen 2025-12-01 06:35
Last seen 2025-12-06 12:48
Open for 5 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2025-12-06 12:48
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: freshers.economictimes.indiatimes.com
Port: 80
URL: http://freshers.economictimes.indiatimes.com

First seen 2025-11-24 19:26
Last seen 2025-12-04 17:40
Open for 9 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2025-12-04 17:40
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: steel.economictimes.indiatimes.com
Port: 443
URL: https://steel.economictimes.indiatimes.com

First seen 2025-11-28 11:08
Last seen 2025-12-04 17:40
Open for 6 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2025-12-04 17:40
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 92.122.106.222
Domain: telecom.economictimes.indiatimes.com
Port: 443
URL: https://telecom.economictimes.indiatimes.com

First seen 2025-12-01 06:12
Last seen 2026-02-09 15:30
Open for 70 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 15:30
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 92.122.106.222
Domain: brandequity.economictimes.indiatimes.com
Port: 443
URL: https://brandequity.economictimes.indiatimes.com

First seen 2025-12-01 06:12
Last seen 2026-02-09 15:30
Open for 70 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 15:30
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.208
Domain: ciosea.economictimes.indiatimes.com
Port: 443
URL: https://ciosea.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-02-09 14:32
Open for 117 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 14:32
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.212
Domain: sustainability-preprod.economictimes.indiatimes.com
Port: 443
URL: https://sustainability-preprod.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-02-09 14:32
Open for 117 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 14:32
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.17.100.185
Domain: www.growfast.indiatimes.com
Port: 443
URL: https://www.growfast.indiatimes.com

First seen 2025-12-02 06:39
Last seen 2026-02-09 14:10
Open for 69 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 14:10
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.36.162.149
Domain: energymea.economictimes.indiatimes.com
Port: 443
URL: https://energymea.economictimes.indiatimes.com

First seen 2025-10-29 11:15
Last seen 2026-02-09 07:59
Open for 102 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 07:59
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.212
Domain: hrme.economictimes.indiatimes.com
Port: 443
URL: https://hrme.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-02-09 07:43
Open for 117 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 07:43
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.198
Domain: infra-preprod.economictimes.indiatimes.com
Port: 443
URL: https://infra-preprod.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-02-09 05:27
Open for 72 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 05:27
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: shipping.economictimes.indiatimes.com
Port: 80
URL: http://shipping.economictimes.indiatimes.com

First seen 2025-12-01 06:35
Last seen 2026-02-09 03:11
Open for 69 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 03:11
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.198
Domain: pharma-preprod.economictimes.indiatimes.com
Port: 443
URL: https://pharma-preprod.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-02-09 02:21
Open for 72 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 02:21
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.17.100.226
Domain: hospitality.economictimes.indiatimes.com
Port: 443
URL: https://hospitality.economictimes.indiatimes.com

First seen 2025-12-01 06:35
Last seen 2026-02-09 01:53
Open for 69 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 01:53
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.220
Domain: agriculture-preprod.economictimes.indiatimes.com
Port: 443
URL: https://agriculture-preprod.economictimes.indiatimes.com

First seen 2025-12-03 05:32
Last seen 2026-02-09 01:52
Open for 67 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 01:52
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: devices.economictimes.indiatimes.com
Port: 80
URL: http://devices.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-09 01:16
Open for 61 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 01:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: esports.economictimes.indiatimes.com
Port: 80
URL: http://esports.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-09 01:16
Open for 61 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 01:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: hotelier.economictimes.indiatimes.com
Port: 80
URL: http://hotelier.economictimes.indiatimes.com

First seen 2025-12-01 06:35
Last seen 2026-02-09 00:21
Open for 69 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-09 00:21
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 92.122.106.222
Domain: auto.economictimes.indiatimes.com
Port: 443
URL: https://auto.economictimes.indiatimes.com

First seen 2025-12-01 06:12
Last seen 2026-02-08 21:44
Open for 69 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-08 21:44
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.213
Domain: b2b.economictimes.indiatimes.com
Port: 443
URL: https://b2b.economictimes.indiatimes.com

First seen 2025-11-13 05:53
Last seen 2026-02-08 21:31
Open for 87 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-08 21:31
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.212
Domain: chemicals.economictimes.indiatimes.com
Port: 443
URL: https://chemicals.economictimes.indiatimes.com

First seen 2025-10-15 05:36
Last seen 2026-02-08 20:18
Open for 116 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-08 20:18
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: startups.economictimes.indiatimes.com
Port: 80
URL: http://startups.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-08 20:18
Open for 61 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-08 20:18
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: biotech.economictimes.indiatimes.com
Port: 80
URL: http://biotech.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-08 20:18
Open for 61 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-08 20:18
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: equity.economictimes.indiatimes.com
Port: 80
URL: http://equity.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-08 20:18
Open for 61 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-08 20:18
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: luxury.economictimes.indiatimes.com
Port: 80
URL: http://luxury.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-08 20:18
Open for 61 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-08 20:18
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.204.205
Domain: enterpriseai-preprod.economictimes.indiatimes.com
Port: 443
URL: https://enterpriseai-preprod.economictimes.indiatimes.com

First seen 2025-10-16 05:51
Last seen 2026-02-08 20:18
Open for 115 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-08 20:18
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: drones.economictimes.indiatimes.com
Port: 443
URL: https://drones.economictimes.indiatimes.com

First seen 2025-12-24 11:39
Last seen 2026-02-05 05:24
Open for 42 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: climate.economictimes.indiatimes.com
Port: 443
URL: https://climate.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: metaverse.economictimes.indiatimes.com
Port: 443
URL: https://metaverse.economictimes.indiatimes.com

First seen 2025-12-09 11:00
Last seen 2026-02-05 05:24
Open for 57 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-05 05:24
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: tech.economictimes.indiatimes.com
Port: 443
URL: https://tech.economictimes.indiatimes.com

First seen 2025-11-14 04:53
Last seen 2026-02-01 19:59
Open for 79 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-02-01 19:59
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 223.165.31.153
Domain: events-stage.economictimes.indiatimes.com
Port: 443
URL: https://events-stage.economictimes.indiatimes.com

First seen 2025-11-17 05:42
Last seen 2026-01-29 23:42
Open for 73 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-01-29 23:42
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: live.economictimes.indiatimes.com
Port: 443
URL: https://live.economictimes.indiatimes.com

First seen 2025-12-02 06:39
Last seen 2026-01-29 21:57
Open for 58 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-01-29 21:57
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.36.162.147
Domain: timeslearn-stage.indiatimes.com
Port: 443
URL: https://timeslearn-stage.indiatimes.com

First seen 2025-10-24 05:44
Last seen 2026-01-29 16:07
Open for 97 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-01-29 16:07
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.238.101.61
Domain: brandequity-stage.economictimes.indiatimes.com
Port: 443
URL: https://brandequity-stage.economictimes.indiatimes.com

First seen 2025-11-27 06:12
Last seen 2026-01-16 12:51
Open for 50 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-01-16 12:51
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.245.198
Domain: government-preprod.economictimes.indiatimes.com
Port: 443
URL: https://government-preprod.economictimes.indiatimes.com

First seen 2025-11-28 10:28
Last seen 2026-01-16 02:47
Open for 48 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2026-01-16 02:47
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.206.15
Domain: subscriptions.economictimes.indiatimes.com
Port: 80
URL: http://subscriptions.economictimes.indiatimes.com

First seen 2025-12-19 03:59
Last seen 2025-12-22 22:37
Open for 3 days

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ec75a89cf9e4d10f187f1bfd36e85fe1b03a0f640a

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /admin/getVoucherDetails
GET /admin/getVoucherDetailsCsv
GET /admin/voucherLogs
GET /admin/vouchers
GET /api/entitlements/{access_token}
GET /api/subscription/get
GET /subscription/HibernateException
GET /subscription/JDBCConnectionException
GET /subscription/SQLException
GET /subscription/activationStatus
GET /subscription/allGroup
GET /subscription/api/deal/
GET /subscription/api/deal/eventCode/{eventCode}/isEventCodePresent
GET /subscription/api/deal/getTSourceAndCampaignDetails
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCode
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/dealCode/{dealCode}/geoRegion/{geoRegion}/verifyDealCodeV1
GET /subscription/api/deal/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plutus
GET /subscription/api/{merchantCode}/{geoRegion}/offerDetails
GET /subscription/benefitActivationStatus
GET /subscription/benefitActivationStatusS2S
GET /subscription/merchant/{merchantCode}/mySubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/V2/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/availBenefit/{initTxn}
GET /subscription/merchant/{merchantCode}/product/{productCode}/cancelReasons
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegionCode}/plan/{planId}/planPriceDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/planDealInfo
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planDealInfoV2
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/dealCode/{dealCode}/ts/{tsourceCode}/camp/{campCode}/planGroupsDealData
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/planCode/{planCode}/dealCode/{dealCode}/planDealDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/V2/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/changeProductVariant
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/geoRegionCode/{geoRegionCode}/planChangeOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/findSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/initTrans/{initTransactionId}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/invoice/userDetails
GET /subscription/merchant/{merchantCode}/product/{productCode}/latestSubscription
GET /subscription/merchant/{merchantCode}/product/{productCode}/onBoardingEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/planRenewalOffers
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibility
GET /subscription/merchant/{merchantCode}/product/{productCode}/promoCode/{promoCode}/geoRegion/{geoRegion}/iosPromoEligibilityV1
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/subscriptionExtendOffer
GET /subscription/merchant/{merchantCode}/product/{productCode}/transactionStatus
GET /subscription/merchant/{merchantCode}/product/{productCode}/userPendingTransaction
GET /subscription/merchant/{merchantCode}/product/{productCode}/v2/subscriptionDetail
GET /subscription/merchant/{merchantCode}/product/{productCode}/voucherBenefitDetail
GET /subscription/merchant/{merchantCode}/subscriptionInformation
GET /subscription/merchant/{merchantCode}/v2/mySubscription
GET /subscription/partner/vendor-order
GET /subscription/paymentOrderStatus
GET /subscription/permission-subscription
GET /subscription/redisSnappyJdk
GET /subscription/redisTest
GET /subscription/redisTestSnappyJson
GET /subscription/subscription-permission
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/plans
GET /subscription/v2/merchant/{merchantCode}/product/{productCode}/loginIdentifier/{loginIdentifier}/lastSubscription
GET /subscription/v2/permission-subscription
GET /subscription/v2/subscription-permission
GET /subscription/v3/permission-subscription
GET /subscription/vendorCode/{vendorCode}/orderId/{vendorOrderId}/getTilPartnerStatus
GET /subscription/{merchantCode}/subscriptionSummary
POST /api/merchant/{merchantCode}/product/{productCode}/findLastSubscription
POST /api/payment_trans
POST /api/subscription/receiptUpload
POST /api/subscription/reconcile
POST /api/subscription/redeemVoucher
POST /subscription/V2/paymentPayload
POST /subscription/V2/planChangeOffer
POST /subscription/api/deal/applyDealCode
POST /subscription/api/deal/createDealCodeInCache
POST /subscription/api/deal/upload
POST /subscription/api/deal/uploadDealCodes
POST /subscription/api/{merchantCode}/{productCode}/{geoRegion}/offers
POST /subscription/applysubscriptionExtension
POST /subscription/benefitActivation
POST /subscription/benefitActivationS2S
POST /subscription/changeProductVariant
POST /subscription/gdprUpdate
POST /subscription/guestUserAppSubscriptionDetail
POST /subscription/invoice/userDetails
POST /subscription/mapGroupPlanToRenew
POST /subscription/mapGroupPlanToUpgrade
POST /subscription/mapPlanToRenew
POST /subscription/mapPlanToUpgrade
POST /subscription/merchant/{merchantCode}/product/{productCode}/V2/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/accessPassRetrialPayment
POST /subscription/merchant/{merchantCode}/product/{productCode}/cancel
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/code/{eventCode}/generateAccessPass
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/introPlanEligibilityCheck
POST /subscription/merchant/{merchantCode}/product/{productCode}/geoRegion/{geoRegion}/userPlans
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/plan/{planCode}/geoRegion/{geoRegion}/v2/initiateTransaction
POST /subscription/merchant/{merchantCode}/product/{productCode}/redeemBenefit/{initTxnId}/{planOfferType}
POST /subscription/merchant/{merchantCode}/product/{productCode}/renewalOrder
POST /subscription/merchant/{merchantCode}/product/{productCode}/verifiyReceiptAndSubscription
POST /subscription/orders/{platform}/free-trial
POST /subscription/paymentPayload
POST /subscription/planChangeOffer
POST /subscription/planChangePurchase
POST /subscription/promoOfferRequest
POST /subscription/promoSignature
POST /subscription/retrial-payment
POST /subscription/siReMandate
POST /subscription/signature
POST /subscription/sso-uuid
POST /subscription/ssoVerifiedEmail
POST /subscription/tilPartnerSubscription
POST /subscription/unifiedReceiptMapping
POST /subscription/user-payment-link
POST /subscription/userDeviceMapping
POST /subscription/userPay
POST /subscription/{merchantCode}/activateSubscriptionAsBenefit
POST /subscription/{merchantCode}/{productCode}/partnerUserSubscription
POST /subscription/{projectCode}/informGdprStatus
POST /user_subscriptions/api/payment/failTrans
POST /user_subscriptions/api/payment/ok
POST /user_subscriptions/api/payment/pending
PUT /subscription/subPlanPeriod

Found on 2025-12-22 22:37

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.238.100.54
Domain: qa-oauth.economictimes.indiatimes.com
Port: 443
URL: https://qa-oauth.economictimes.indiatimes.com

First seen 2025-11-27 06:12
Last seen 2025-12-22 11:40
Open for 25 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd151e75e4bfa5f004fa4ad61ff6ff787680efa6a2807c540bc
```
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /api/status
GET /auth/{merchantCode}/logout
GET /auth/{merchantCode}/oauthDetails
GET /auth/{merchantCode}/subStatus
GET /auth/{merchantCode}/subStatusDetails
GET /auth/{merchantCode}/userToken
GET /oauth/api/status
POST /api/token/generate
POST /api/token/logout
POST /api/v2/token/generate
POST /oauth/api/merchant/{merchantCode}/krypton/token
POST /oauth/api/merchant/{merchantCode}/token
POST /oauth/api/merchant/{merchantCode}/token/logout
POST /oauth/api/v2/merchant/{merchantCode}/token
PUT /api/blacklist/cache/reload/{secret}
PUT /api/whitelist/cache/reload/{secret}
PUT /auth/{merchantCode}/updateSsoDetails
```
  Found on 2025-12-22 11:40
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 103.10.76.148
Domain: freshers.economictimes.indiatimes.com
Port: 443
URL: https://freshers.economictimes.indiatimes.com

First seen 2025-11-24 19:26
Last seen 2025-12-06 05:27
Open for 11 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
```
  Found on 2025-12-06 05:27
Create report

Leak detected by FirebaseHttpPlugin

No description available

IP: 95.100.142.147
Domain: toibnews.timesofindia.indiatimes.com
Port: 443
URL: https://toibnews.timesofindia.indiatimes.com/.json

First seen 2021-07-29 12:36
Last seen 2022-04-29 17:20
Open for 274 days

Fingerprint: b17be75321b5afb45cf433455cf433455cf433455cf433455cf433455cf43345

{"order":["category","region"],"items":{"category":{"label":"CATEGORY","order":["GEN","SC","ST"],"items":{"GEN":{"value":"GEN","cns":[1,5,8,9,12,13,14,16,17,18,19,20,21,22,23,24,25,28,29,31,32,33,34,35,36,38,39,40,41,42,43,44,48,49,50,61,63,64,75,76,77,79,80,81]},"SC":{"value":"SC","cns":[15,26,27,30,37,47,65,74,78]},"ST":{"value":"ST","cns":[2,3,4,6,7,10,11,45,46,51,52,53,54,55,56,57,58,59,60,62,66,67,68,69,70,71,72,73]}}},"region":[]}}

Found on 2021-07-29 12:36

441 Bytes

Create report

Server vulnerable to Log4J CVE-2021-44228

The reply originated from a backend server, the originating frontend server has been included in the report for reference.

It is critical to patch log4j or the application using since the issues is exploited in the wild and leads to RCE.

IP: 103.18.142.29
Domain: esnotifications.indiatimes.com
Port: 443
URL: https://esnotifications.indiatimes.com

First seen 2021-12-13 08:20

Severity: critical
Fingerprint: aff4d642200b0639f8880459ed3e1aa4c5a34a502bc84f54a60751133b74e68a

Received reply after a Log4j payload from this host
Ping was received because of X-Forwared-Host
Reply took 892.320144ms
Orignal request was to 23.222.64.106:443
This event's HTTP and SSL details are preserved from the orignal request.

Orignal reply:
5265636569766564207265706c792061667465722061204c6f67346a207061796c6f61642066726f6d207468697320686f73740a50696e67207761732072656365697665642062656361757365206f6620582d466f7277617265642d486f73740a5265706c7920746f6f6b203839322e3332303134346d730a4f7269676e616c20726571756573742077617320746f2032332e3232322e36342e3130363a3434330a54686973206576656e742773204854545020616e642053534c2064657461696c7320617265207072657365727665642066726f6d20746865206f7269676e616c20726571756573742e0a

Found on 2021-12-13 08:20

Create report

Open service 104.102.13.6:443 · static.vk.indiatimes.com

2026-02-09 13:16

HTTP/1.1 404 Not Found
Content-Type: text/html
Content-Length: 29
Cache-Control: max-age=0
Expires: Mon, 09 Feb 2026 13:16:39 GMT
Date: Mon, 09 Feb 2026 13:16:39 GMT
Connection: close
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET,POST
Access-Control-Allow-Origin: *


This content is not available

Found 5 hours ago by HttpPlugin

Domain indiatimes.com

Germany

Software information

Swagger API description is publicly available

Server vulnerable to Log4J CVE-2021-44228

Server vulnerable to Log4J CVE-2021-44228

Server vulnerable to Log4J CVE-2021-44228

Swagger API description is publicly available

Swagger API description is publicly available

Server vulnerable to Log4J CVE-2021-44228

Swagger API description is publicly available

Swagger API description is publicly available

MacOS file listing through .DS_Store file

Apache server-status page is publicly available

Apache server-status page is publicly available

Server vulnerable to Log4J CVE-2021-44228

Server vulnerable to Log4J CVE-2021-44228

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Git configuration and history exposed

Git configuration and history exposed

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available