LeakIX - Host noloshop.it

Domain noloshop.it

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Microsoft-IIS 10.0

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.69.68.12
Domain: noloshop.it
Port: 443
URL: https://noloshop.it

First seen 2025-11-11 03:21
Last seen 2026-02-09 16:25
Open for 90 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549a4a4a1edc7334eb4b1bb8f61cf25ee48733ba5cb

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Shop/{codiceNoleggio}/Transazioni/{id}
GET /api/Backend/Movimenti
GET /api/Backend/Occupazioni
GET /api/Backend/Transazioni
GET /api/Management/CurrentLog
GET /api/Management/GetLog/{data}
GET /api/Phoenix/{codNoleggio}/ack
GET /api/Phoenix/{codNoleggio}/nack
GET /api/Shop/{codiceNoleggio}/DatiNoleggio
GET /api/Shop/{codiceNoleggio}/Reparti
GET /api/Shop/{codiceNoleggio}/testperformance
GET /api/Sia/test
GET /api/Sia/{codScuola}/ack
GET /api/XPay/{lingua}/{codNoleggio}/esito
PATCH /api/Backend/Transazioni/{codTransazione}/conferma
POST /api/Axepta/{codScuola}/ack/{orderId}
POST /api/Backend/DatiCompleti
POST /api/Backend/Movimenti/Resync
POST /api/Shop/{codiceNoleggio}/Carrello
POST /api/XPay/confermamanuale
POST /api/XPay/{codNoleggio}/esito

Found on 2026-02-09 16:25

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549a4a4a1edc7334eb4b1bb8f61cf25ee4831b5850c

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Shop/{codiceNoleggio}/Transazioni/{id}
GET /api/Backend/Movimenti
GET /api/Backend/Occupazioni
GET /api/Backend/Transazioni
GET /api/Management/CurrentLog
GET /api/Management/GetLog/{data}
GET /api/Phoenix/{codNoleggio}/ack
GET /api/Phoenix/{codNoleggio}/nack
GET /api/Shop/{codiceNoleggio}/DatiNoleggio
GET /api/Shop/{codiceNoleggio}/Reparti
GET /api/Shop/{codiceNoleggio}/testperformance
GET /api/Sia/test
GET /api/Sia/{codScuola}/ack
GET /api/XPay/{lingua}/{codNoleggio}/esito
PATCH /api/Backend/Transazioni/{codTransazione}/conferma
POST /api/Backend/DatiCompleti
POST /api/Backend/Movimenti/Resync
POST /api/Shop/{codiceNoleggio}/Carrello
POST /api/XPay/confermamanuale
POST /api/XPay/{codNoleggio}/esito

Found on 2025-11-22 16:56

Create report

Open service 13.69.68.12:443 · noloshop.it

2026-01-23 07:26

HTTP/1.1 200 OK
Content-Length: 3257
Connection: close
Content-Type: text/html
Date: Fri, 23 Jan 2026 07:26:53 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "1dc735d8c7677b9"
Last-Modified: Mon, 22 Dec 2025 16:10:54 GMT
Set-Cookie: ARRAffinity=31557c18eff5e78af03c329674b133b55ee89d29f4ad5c40f07d1b3aa03a1d1d;Path=/;HttpOnly;Secure;Domain=noloshop.it
Set-Cookie: ARRAffinitySameSite=31557c18eff5e78af03c329674b133b55ee89d29f4ad5c40f07d1b3aa03a1d1d;Path=/;HttpOnly;SameSite=None;Secure;Domain=noloshop.it
Request-Context: appId=cid-v1:e3fa9119-d534-4100-aa39-bd3093fc71d2
X-Powered-By: ASP.NET

Page title: NoloShop

<!doctype html><html><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="height=device-height,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=no,target-densitydpi=device-dpi"><meta name="theme-color" content="#000000"/><meta name="description" content="Web site created using create-react-app"/><link rel="apple-touch-icon" href="/skiicon.png"/><link rel="manifest" href="/manifest.json"/><link href="https://fonts.googleapis.com/css?family=Jura" rel="stylesheet"><title>NoloShop</title><link href="/static/css/2.7f54b963.chunk.css" rel="stylesheet"><link href="/static/css/main.2c295efc.chunk.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root" style="height:100%"></div><script>!function(e){function r(r){for(var n,a,i=r[0],c=r[1],l=r[2],f=0,s=[];f<i.length;f++)a=i[f],Object.prototype.hasOwnProperty.call(o,a)&&o[a]&&s.push(o[a][0]),o[a]=0;for(n in c)Object.prototype.hasOwnProperty.call(c,n)&&(e[n]=c[n]);for(p&&p(r);s.length;)s.shift()();return u.push.apply(u,l||[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,i=1;i<t.length;i++){var c=t[i];0!==o[c]&&(n=!1)}n&&(u.splice(r--,1),e=a(a.s=t[0]))}return e}var n={},o={1:0},u=[];function a(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,a),t.l=!0,t.exports}a.e=function(e){var r=[],t=o[e];if(0!==t)if(t)r.push(t[2]);else{var n=new Promise((function(r,n){t=o[e]=[r,n]}));r.push(t[2]=n);var u,i=document.createElement("script");i.charset="utf-8",i.timeout=120,a.nc&&i.setAttribute("nonce",a.nc),i.src=function(e){return a.p+"static/js/"+({}[e]||e)+"."+{3:"599648e7"}[e]+".chunk.js"}(e);var c=new Error;u=function(r){i.onerror=i.onload=null,clearTimeout(l);var t=o[e];if(0!==t){if(t){var n=r&&("load"===r.type?"missing":r.type),u=r&&r.target&&r.target.src;c.message="Loading chunk "+e+" failed.\n("+n+": "+u+")",c.name="ChunkLoadError",c.type=n,c.request=u,t[1](c)}o[e]=void 0}};var l=setTimeout((function(){u({type:"timeout",target:i})}),12e4);i.onerror=i.onload=u,document.head.appendChild(i)}return Promise.all(r)},a.m=e,a.c=n,a.d=function(e,r,t){a.o(e,r)||Object.defineProperty(e,r,{enumerable:!0,get:t})},a.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},a.t=function(e,r){if(1&r&&(e=a(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null);if(a.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&r&&"string"!=typeof e)for(var n in e)a.d(t,n,function(r){return e[r]}.bind(null,n));return t},a.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return a.d(r,"a",r),r},a.o=function(e,r){return Object.prototype.hasOwnProperty.call(e,r)},a.p="/",a.oe=function(e){throw console.error(e),e};var i=this.webpackJsonpnpapp=this.webpackJsonpnpapp||[],c=i.push.bind(i);i.push=r,i=i.slice();for(var l=0;l<i.length;l++)r(i[l]);var p=c;t()}([])</script><script src="/static/js/2.055c90f1.chunk.js"></script><script src="/static/js/main.46e39ff5.chunk.js"></script></body></html>

Found 2026-01-23 by HttpPlugin

Create report

noloshop.it

Fingerprint:

b9ead3df1575a0420e10f2becdc35eb8e12534ab8b22149f920c97fbcdd9880a

CN:

noloshop.it

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2025-11-11 00:00

Not after:

2026-04-14 23:59

Domain summary

noloshop.it 2

1 recorded

IP summary

13.69.68.12 2

1 recorded