LeakIX - Host payment-sandbox.traxia.cloud

Domain payment-sandbox.traxia.cloud

Singapore

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Microsoft-IIS 10.0

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.67.63.90
Domain: payment-sandbox.traxia.cloud
Port: 443
URL: https://payment-sandbox.traxia.cloud

First seen 2025-12-25 07:30
Last seen 2026-02-01 22:20
Open for 38 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354913846f0e67b5a2613bc7cc4ea881296a4abae066

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/credit-card/cancel/{id}
GET /api/credit-card/check/{id}
GET /api/credit-card/refund/{id}
GET /api/order/authorize
GET /api/order/lookup
GET /api/order/product
GET /api/order/retrieve
GET /api/order/status
GET /api/settlement/check-transaction/{id}
POST /api/credit-card/charge
POST /api/credit-card/snap
POST /api/disburse/bank
POST /api/disburse/ewallet
POST /api/ewallet/dana
POST /api/ewallet/gopay
POST /api/ewallet/ovo
POST /api/ewallet/shopeepay
POST /api/order/create
POST /api/qris/charge
POST /api/retail/charge
POST /api/settlement/settle
POST /api/virtual-account/bca
POST /api/virtual-account/bni
POST /api/virtual-account/bri
POST /api/virtual-account/danamon
POST /api/virtual-account/mandiri
POST /api/virtual-account/permata

Found on 2026-02-01 22:20

Create report

Open service 13.67.63.90:443 · payment-sandbox.traxia.cloud

2026-01-08 22:35

HTTP/1.1 404 Not Found
Content-Length: 0
Connection: close
Date: Thu, 08 Jan 2026 22:36:25 GMT
Server: Microsoft-IIS/10.0
Set-Cookie: ARRAffinity=db8b43a1f74b7929a21f90db2f7543bf89a63261ba47d2dc4da530aec375a3a1;Path=/;HttpOnly;Secure;Domain=payment-sandbox.traxia.cloud
Set-Cookie: ARRAffinitySameSite=db8b43a1f74b7929a21f90db2f7543bf89a63261ba47d2dc4da530aec375a3a1;Path=/;HttpOnly;SameSite=None;Secure;Domain=payment-sandbox.traxia.cloud
X-Powered-By: ASP.NET

Found 2026-01-08 by HttpPlugin

Create report

Open service 13.67.63.90:443 · payment-sandbox.traxia.cloud

2026-01-01 21:18

HTTP/1.1 404 Not Found
Content-Length: 0
Connection: close
Date: Thu, 01 Jan 2026 21:18:43 GMT
Server: Microsoft-IIS/10.0
Set-Cookie: ARRAffinity=db8b43a1f74b7929a21f90db2f7543bf89a63261ba47d2dc4da530aec375a3a1;Path=/;HttpOnly;Secure;Domain=payment-sandbox.traxia.cloud
Set-Cookie: ARRAffinitySameSite=db8b43a1f74b7929a21f90db2f7543bf89a63261ba47d2dc4da530aec375a3a1;Path=/;HttpOnly;SameSite=None;Secure;Domain=payment-sandbox.traxia.cloud
X-Powered-By: ASP.NET

Found 2026-01-01 by HttpPlugin

Create report

payment-sandbox.traxia.cloud

Fingerprint:

3fd03e829f7f85a756b741cf65022fbf8dc2402dae7959f4a0550f6dee7ac903

CN:

payment-sandbox.traxia.cloud

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2025-12-25 00:00

Not after:

2026-04-14 23:59

Domain summary

payment-sandbox.traxia.cloud 2

1 recorded

IP summary

13.67.63.90 2

1 recorded