cloudflare
tcp/443 tcp/80 tcp/8443
nginx
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b0493600d360f87d6c9dc54a49ccc7331f8ae6857
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /api/v1/interconnection/stage/{id}
DELETE /api/v1/landcontract/stage/{id}
GET /api/v1/bu/isNameExist/{name}
GET /api/v1/bu/{id}
GET /api/v1/country/{id}
GET /api/v1/document
GET /api/v1/document/exists
GET /api/v1/historical-data/dates
GET /api/v1/holiday/template
GET /api/v1/interconnection/isNameExist/{projectId}/{name}
GET /api/v1/interconnection/{id}
GET /api/v1/landcontract/isNameExist/{projectId}/{name}
GET /api/v1/landcontract/{id}
GET /api/v1/pdf/{id}
GET /api/v1/project/financeInfo/budget/template
GET /api/v1/project/isNameExist/{name}
GET /api/v1/project/stages-info
GET /api/v1/project/stages-info/names
GET /api/v1/project/{id}
GET /api/v1/project/{id}/is-deliverabe-link-id-exist
GET /api/v1/project/{id}/is-deliverabe-name-exist
GET /api/v1/project/{id}/map
GET /api/v1/project/{id}/view
GET /api/v1/region/{id}
GET /api/v1/salescluster/{id}
GET /api/v1/spv/{id}
GET /api/v1/statistics/chart
GET /api/v1/statistics/historical-data/chart
GET /api/v1/technology/{id}
GET /api/v1/user/me
GET /api/v1/user/{id}
GET /api/v1/user/{id}/responsible-person
PATCH /api/v1/project/{id}/update-stage
POST /api/v1/bu
POST /api/v1/bu/all
POST /api/v1/bu/all-with-security
POST /api/v1/country
POST /api/v1/country/all
POST /api/v1/excel/historical-data
POST /api/v1/excel/interconnection/costs
POST /api/v1/excel/statistics
POST /api/v1/historical-data/all
POST /api/v1/holiday
POST /api/v1/holiday/all
POST /api/v1/holiday/all/between
POST /api/v1/holiday/xlsx
POST /api/v1/interconnection
POST /api/v1/interconnection/all
POST /api/v1/interconnection/costs/board
POST /api/v1/interconnection/stage
POST /api/v1/interconnection/stages/board
POST /api/v1/landcontract
POST /api/v1/landcontract/all
POST /api/v1/landcontract/stage
POST /api/v1/landcontract/stages/board
POST /api/v1/project
POST /api/v1/project/all
POST /api/v1/project/archive/{id}
POST /api/v1/project/financeInfo/budget
POST /api/v1/project/legalInfo/document
POST /api/v1/project/map
POST /api/v1/project/milestones-info
POST /api/v1/project/sum-fin-info
POST /api/v1/project/unarchive/{id}
POST /api/v1/project/{projectId}/update-deliverables
POST /api/v1/region
POST /api/v1/region/all
POST /api/v1/salescluster
POST /api/v1/salescluster/all
POST /api/v1/spv
POST /api/v1/spv/all
POST /api/v1/spv/all/admin
POST /api/v1/technology/all
POST /api/v1/user/all
POST /api/v1/user/all/responsible-person
POST /api/v1/user/sync
PUT /api/v1/user
Open service 20.90.134.35:443 · natpower.com
2026-01-09 02:47
HTTP/1.1 403 Site Disabled
Content-Length: 1148
Connection: close
Content-Type: text/html
Date: Fri, 09 Jan 2026 02:48:33 GMT
Page title: Web App - Unavailable
<!DOCTYPE html><html><head><title>Web App - Unavailable</title><style type="text/css">html{height:100%;width:100%;}#feature{width:960px;margin:95px auto 0 auto;overflow:auto;}#content{font-family:"Segoe UI";font-weight:normal;font-size:22px;color:#fff;float:left;width:460px;margin-top:68px;margin-left:0px;vertical-align:middle;}#content h1{font-family:"Segoe UI Light";color:#fff;font-weight:normal;font-size:60px;line-height:48pt;width:800px;}p a,p a:visited,p a:active,p a:hover{color:#fff;}</style></head><body bgcolor="#00abec"><div id="feature"><div id="content"><h1 id="unavailable">Error 403 - This web app is stopped.</h1><p id="tryAgain">The web app you have attempted to reach is currently stopped and does not accept any requests. Please try to reload the page or visit it again soon.</p><p id="toAdmin">If you are the web app administrator, please find the common 403 error scenarios and resolution <a href="https://go.microsoft.com/fwlink/?linkid=2095007" target="_blank">here</a>. For further troubleshooting tools and recommendations, please visit <a href="https://portal.azure.com/">Azure Portal</a>.</p></div></div></body></html>
Open service 185.203.79.94:443 · api.pms.natpower.com
2026-01-08 22:09
HTTP/1.1 401
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Set-Cookie: JSESSIONID=F8BB444C531C92C0CA98A3292AF09E9C; Path=/; HttpOnly
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: application/json;charset=ISO-8859-1
Transfer-Encoding: chunked
Date: Thu, 08 Jan 2026 22:09:48 GMT
Connection: close
{"errorMessage":"Full authentication is required to access this resource","responseStatus":"UNAUTHORIZED","customParameters":{},"timestamp":"2026-01-08T22:09:48.944446347Z"}
Open service 162.159.134.42:443 · natpower.com
2026-01-03 19:17
HTTP/1.1 200 OK
Date: Sat, 03 Jan 2026 19:17:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
CF-Ray: 9b84d61b8a0c9460-LHR
CF-Cache-Status: HIT
Age: 59441
Cache-Control: public, max-age=0, s-maxage=86400
Last-Modified: Sat, 03 Jan 2026 02:46:46 GMT
Link: <https://natpower.com/wp-json/>; rel="https://api.w.org/", <https://natpower.com/wp-json/wp/v2/pages/4909>; rel="alternate"; title="JSON"; type="application/json", <https://natpower.com/>; rel=shortlink
Vary: Accept-Encoding
Ki-CF-Cache-Status: HIT
X-Content-Type-Options: nosniff
X-Edge-Location-Klb: 1
ki-Cache-Tag: d97e81b4-e13c-437c-8296-2edcf64e167e,fce83ccfcf3067055bf38fbd82d01f7f7311d59b3baf8dab0915380db9d057b5
ki-cache-type: Edge
ki-edge: v=24.0.1;mv=5.0.18
ki-origin: g1p
x-kinsta-cache: HIT
Set-Cookie: __cf_bm=JlYBdEz87Y2cR87FhirJ3yYh5j422CuwZepfPjUHBeQ-1767467847-1.0.1.1-z6NjUfjpT0DHVcIcHU3ntSY6LQPMkNJW5IpOoYTJTDbzRd3mHGZO0qiXcFbqoQ.6PYeJDoFPxEemUUJS4LmXqMi3pR6XxRHuT.LoFWut7KI; path=/; expires=Sat, 03-Jan-26 19:47:27 GMT; domain=.natpower.com; HttpOnly; Secure; SameSite=None
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wtJbZrc2aAS%2BEMobAyAz4Dsn4vy6dyTjPaDT11wiGftLSy5E%2B0NpWadVajNiMNCprVaFS%2FqDl%2FvGxj43JbTch7gS1w%2Bqn6ACoShwlULVyitUmcJufdHe3gJYr9wXhA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
Open service 162.159.134.42:80 · natpower.com
2026-01-03 19:17
HTTP/1.1 301 Moved Permanently
Date: Sat, 03 Jan 2026 19:17:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Location: https://natpower.com/
CF-Ray: 9b84d61b5f66e5e3-FRA
CF-Cache-Status: HIT
Age: 2
Cache-Control: public, max-age=0, s-maxage=900
Vary: Accept-Encoding
Ki-CF-Cache-Status: HIT
X-Content-Type-Options: nosniff
X-Edge-Location-Klb: 1
X-Kinsta-Cache: HIT
X-Redirect-By: WordPress
ki-Cache-Tag: d97e81b4-e13c-437c-8296-2edcf64e167e,fce83ccfcf3067055bf38fbd82d01f7f7311d59b3baf8dab0915380db9d057b5
ki-cache-type: Edge
ki-edge: v=24.0.1;mv=5.0.18
ki-origin: g1p
Set-Cookie: __cf_bm=IW_lJYMFU6rySfiWR4uCGm4uB5GZh1OKpE6k8PmiJq4-1767467846-1.0.1.1-JXjChJ_SvXJp3P1AS8UyN6zt61KdJ8zlTYkKz868ZJj3Xi9LutlhaPLjYqxgmFXxUoMiZct_mn4q0GeamhNutyHkve37slbTa9XqmFg.dfw; path=/; expires=Sat, 03-Jan-26 19:47:26 GMT; domain=.natpower.com; HttpOnly
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l8zNTywpSq4if4zp2SH2DB2opnvlrje48X2Ke7VEshuMch%2Fvlh5pIGfsKCwDT59%2BAe%2FYpHxqP%2F76e7NWNq4yu%2BJiw0mLG1loOJeJqp6APpPezZ1G6Hjdi%2FIgUS%2FCqw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
Open service 162.159.134.42:8443 · natpower.com
2026-01-03 19:17
HTTP/1.1 403 Forbidden
Date: Sat, 03 Jan 2026 19:17:26 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 4514
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Set-Cookie: __cf_bm=mWo1ULNPno3zF9S0DRyk_f_0NltxKaQchwtoN_nqmc4-1767467846-1.0.1.1-Bz8Gn0U5_6AyCze7hcW96t1Pwe3ENPMfdk72ERw1izbF2NthD_BKzxst5jWEs9NGnc3F1RJqUF2wOsIGQkLkqkoH.XWSeG.qyXwztNOQMBI; path=/; expires=Sat, 03-Jan-26 19:47:26 GMT; domain=.natpower.com; HttpOnly; Secure; SameSite=None
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=76zGI24A92M5D41c3XpEokMP8hMvHseVzjRzUmErsPUsB5gJ%2BIRufXbWiPkjapXPXBHSLPu9a2HSgylkQUVwNhn5hOLhBSkqLCSXqUshxPbihQ1pRZQ%2FllfpAhhUFA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 9b84d61ade3d5d8d-FRA
alt-svc: h3=":8443"; ma=86400
Page title: Attention Required! | Cloudflare
<!DOCTYPE html>
<!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]-->
<head>
<title>Attention Required! | Cloudflare</title>
<meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>
<!--[if gte IE 10]><!-->
<script>
if (!navigator.cookieEnabled) {
window.addEventListener('DOMContentLoaded', function () {
var cookieEl = document.getElementById('cookie-alert');
cookieEl.style.display = 'block';
})
}
</script>
<!--<![endif]-->
</head>
<body>
<div id="cf-wrapper">
<div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable cookies.</div>
<div id="cf-error-details" class="cf-error-details-wrapper">
<div class="cf-wrapper cf-header cf-error-overview">
<h1 data-translate="block_headline">Sorry, you have been blocked</h1>
<h2 class="cf-subheadline"><span data-translate="unable_to_access">You are unable to access</span> kinsta.cloud</h2>
</div><!-- /.header -->
<div class="cf-section cf-highlight">
<div class="cf-wrapper">
<div class="cf-screenshot-container cf-screenshot-full">
<span class="cf-no-screenshot error"></span>
</div>
</div>
</div><!-- /.captcha-container -->
<div class="cf-section cf-wrapper">
<div class="cf-columns two">
<div class="cf-column">
<h2 data-translate="blocked_why_headline">Why have I been blocked?</h2>
<p data-translate="blocked_why_detail">This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.</p>
</div>
<div class="cf-column">
<h2 data-translate="blocked_resolve_headline">What can I do to resolve this?</h2>
<p data-translate="blocked_resolve_detail">You can email the site owner to let them know you were blocked. Please include what you were doing when this page came up and the Cloudflare Ray ID found at the bottom of this page.</p>
</div>
</div>
</div><!-- /.section -->
<div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
<p class="text-13">
<span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9b84d61ade3d5d8d</strong></span>
<span class="cf-footer-separator sm:hidden">•</span>
<span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
Your IP:
<button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
<span class="hidden" id="cf-footer-ip">138.68.86.32</span>
<span class="cf-footer-separator sm:hidden">•</span>
</span>
<span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">Cloudflare</a></span>
</p>
<script>(function(){function d(){var b=a.getElementById("cf-footer-item-ip"),c=a.getElementById("cf-footer-ip-reveal");b&&"classList"in b&&(b.classList
Open service 185.203.79.94:443 · api.pms.natpower.com
2026-01-02 11:55
HTTP/1.1 401
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Set-Cookie: JSESSIONID=9E860FE92A65A605373D60CA8C7F2F86; Path=/; HttpOnly
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: application/json;charset=ISO-8859-1
Transfer-Encoding: chunked
Date: Fri, 02 Jan 2026 11:55:28 GMT
Connection: close
{"errorMessage":"Full authentication is required to access this resource","responseStatus":"UNAUTHORIZED","customParameters":{},"timestamp":"2026-01-02T11:55:28.977032044Z"}
Open service 20.90.134.35:443 · natpower.com
2026-01-02 00:19
HTTP/1.1 200 OK Connection: close Content-Type: text/html; charset=UTF-8 Date: Fri, 02 Jan 2026 00:19:43 GMT Server: nginx Transfer-Encoding: chunked Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Powered-By: PHP/8.3.26 Link: <https://natpower.com/wp-json/>; rel="https://api.w.org/" Link: <https://natpower.com/wp-json/wp/v2/pages/4909>; rel="alternate"; title="JSON"; type="application/json" Link: <https://natpower.com/>; rel=shortlink X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self)
Open service 20.90.134.35:443 · natpower.com
2025-12-30 08:30
HTTP/1.1 200 OK Connection: close Content-Type: text/html; charset=UTF-8 Date: Tue, 30 Dec 2025 08:30:23 GMT Server: nginx Transfer-Encoding: chunked Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Powered-By: PHP/8.3.26 Link: <https://natpower.com/wp-json/>; rel="https://api.w.org/" Link: <https://natpower.com/wp-json/wp/v2/pages/4909>; rel="alternate"; title="JSON"; type="application/json" Link: <https://natpower.com/>; rel=shortlink X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self)
Open service 185.203.79.94:443 · api.pms.natpower.com
2025-12-22 16:54
HTTP/1.1 401
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Set-Cookie: JSESSIONID=0FFEF9B4D126696F424F0CECE9ADE4D3; Path=/; HttpOnly
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: application/json;charset=ISO-8859-1
Transfer-Encoding: chunked
Date: Mon, 22 Dec 2025 16:54:31 GMT
Connection: close
{"errorMessage":"Full authentication is required to access this resource","responseStatus":"UNAUTHORIZED","customParameters":{},"timestamp":"2025-12-22T16:54:32.290117551Z"}
Open service 185.203.79.94:443 · api.pms.natpower.com
2025-12-20 15:06
HTTP/1.1 401
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Set-Cookie: JSESSIONID=B4EFBFA303D6920CCC9098A897B3094C; Path=/; HttpOnly
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: application/json;charset=ISO-8859-1
Transfer-Encoding: chunked
Date: Sat, 20 Dec 2025 15:06:48 GMT
Connection: close
{"errorMessage":"Full authentication is required to access this resource","responseStatus":"UNAUTHORIZED","customParameters":{},"timestamp":"2025-12-20T15:06:48.618063963Z"}
Open service 20.90.134.35:443 · natpower.com
2025-12-20 13:50
HTTP/1.1 200 OK Connection: close Content-Type: text/html; charset=UTF-8 Date: Sat, 20 Dec 2025 13:50:42 GMT Server: nginx Transfer-Encoding: chunked Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Powered-By: PHP/8.3.26 Link: <https://natpower.com/wp-json/>; rel="https://api.w.org/" Link: <https://natpower.com/wp-json/wp/v2/pages/4909>; rel="alternate"; title="JSON"; type="application/json" Link: <https://natpower.com/>; rel=shortlink X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin Permissions-Policy: geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self)