LeakIX - Host nexus-training-dev.icelanddev.net

Domain nexus-training-dev.icelanddev.net

Germany

Akamai International B.V.

Software information

AkamaiGHost

tcp/80

Kestrel Kestrel

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.50.131.155
Domain: nexus-training-dev.icelanddev.net
Port: 443
URL: https://nexus-training-dev.icelanddev.net

First seen 2025-10-30 00:03
Last seen 2026-01-23 10:49
Open for 85 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-23 10:49
Create report

Open service 23.50.131.155:443 · nexus-training-dev.icelanddev.net

2026-01-23 10:49

HTTP/1.1 200 OK
Content-Length: 355
Content-Type: text/html
Server: Kestrel
Accept-Ranges: bytes
ETag: "1dbf0d82ad89363"
Last-Modified: Wed, 09 Jul 2025 13:48:36 GMT
request-context: appId=cid-v1:f2ddd958-a1e9-4012-9052-c4237cf774f6
Date: Fri, 23 Jan 2026 10:49:14 GMT
Connection: close
Set-Cookie: acaAffinity="576530860892ee67"; Path=/; HttpOnly; SameSite=None; Secure;
Feature-Policy: accelerometer 'self'; camera 'self'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'self'
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Origin: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: upgrade-insecure-requests

Page title: Vue App

<!doctype html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Vue App</title><script defer="defer" src="/js/app.f0bcc24d.js"></script><link href="/css/app.a0108ae7.css" rel="stylesheet"></head><body><div id="app"></div></body></html>

Found 2026-01-23 by HttpPlugin

Create report

Open service 23.50.131.155:443 · nexus-training-dev.icelanddev.net

2026-01-09 16:53

HTTP/1.1 200 OK
Content-Length: 355
Content-Type: text/html
Server: Kestrel
Accept-Ranges: bytes
ETag: "1dbf0d82ad89363"
Last-Modified: Wed, 09 Jul 2025 13:48:36 GMT
request-context: appId=cid-v1:f2ddd958-a1e9-4012-9052-c4237cf774f6
Date: Fri, 09 Jan 2026 16:53:51 GMT
Connection: close
Set-Cookie: acaAffinity="155c7b89c36134fc"; Path=/; HttpOnly; SameSite=None; Secure;
Feature-Policy: accelerometer 'self'; camera 'self'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'self'
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Origin: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: upgrade-insecure-requests

Page title: Vue App

<!doctype html><html lang=""><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Vue App</title><script defer="defer" src="/js/app.f0bcc24d.js"></script><link href="/css/app.a0108ae7.css" rel="stylesheet"></head><body><div id="app"></div></body></html>

Found 2026-01-09 by HttpPlugin