LeakIX - Host recallapi-prodtest.tradesolution.no

Domain recallapi-prodtest.tradesolution.no

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.68
Domain: recallapi-prodtest.tradesolution.no
Port: 443
URL: https://recallapi-prodtest.tradesolution.no

First seen 2026-01-10 22:45
Last seen 2026-02-02 12:45
Open for 22 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035499487f24f02bb9c78984440b37d40fb4772d8061c

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Mottaker/Sak/{sakId}
GET /api/Mottaker/Sak/{sakId}/Dialog
GET /api/Produkteier/Sak/{sakId}
GET /api/Produkteier/Sak/{sakId}/Dialog
GET /api/SakWizard/ExecuteSakTestCommand/{commandSessionId}
GET /api/SakWizard/Files/GetUploadSas
GET /api/SakWizard/GetAttachments
GET /api/SakWizard/GetMottakerListItems
GET /api/SakWizard/LastSakKontakter/{produktEierGln}/produkteier
GET /api/SakWizard/ProduktSearch
GET /api/SakWizard/ProduktSearchEpd
GET /api/SakWizard/Sak/{tag}
GET /api/SakerList/ByMottaker/{tsKundeId}/ProduktEierList
GET /api/SakerList/ByProduktEier/{id}/MottakereList
GET /api/User/AccessModel
GET /api/User/MottakerList
GET /api/User/ProduktEierList
GET /api/User/getRecallUser
POST /api/Mottaker/Sak/{sakId}/Dialog/SendMessage
POST /api/Produkteier/Sak/Add
POST /api/Produkteier/Sak/{sakId}/Dialog/SendMessage
POST /api/SakWizard/CommandCompleted/{commandSessionId}
POST /api/SakWizard/Files/UploadSuccess
POST /api/SakWizard/GrossistSearch
POST /api/SakWizard/HandleSakCommand/{commandName}
POST /api/SakWizard/HandleSakCommandArray
POST /api/SakWizard/KundeSearch
POST /api/SakWizard/SendPdfToEmails
POST /api/SakerList/ByMottaker/{tsKundeId}
POST /api/SakerList/ByProduktEier/{gln}
PUT /api/Mottaker/Sak/{sakId}/statusKode/{statusKode}/Update
PUT /api/Produkteier/Sak/{sakId}/Update/{updateCode}

Found on 2026-02-02 12:45

Create report

Open service 20.50.2.68:443 · recallapi-prodtest.tradesolution.no

2026-01-22 19:41

HTTP/1.1 302 Found
Content-Length: 0
Connection: close
Date: Thu, 22 Jan 2026 19:41:34 GMT
Server: Kestrel
Location: /swagger
Request-Context: appId=cid-v1:12d49249-f02c-4608-b3cd-b9f7cfdc985c

Found 2026-01-22 by HttpPlugin

Create report

Open service 20.50.2.68:80 · recallapi-prodtest.tradesolution.no

2026-01-10 22:45

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Sat, 10 Jan 2026 22:46:13 GMT
Location: https://recallapi-prodtest.tradesolution.no/

Found 2026-01-10 by HttpPlugin

Create report

Open service 20.50.2.68:443 · recallapi-prodtest.tradesolution.no

2026-01-10 22:45

HTTP/1.1 302 Found
Content-Length: 0
Connection: close
Date: Sat, 10 Jan 2026 22:46:11 GMT
Server: Kestrel
Location: /swagger
Request-Context: appId=cid-v1:12d49249-f02c-4608-b3cd-b9f7cfdc985c

Found 2026-01-10 by HttpPlugin

Create report

*.tradesolution.notradesolution.no

Fingerprint:

06925097de03bcfa6043cccfde2dab5d872af84f61eafdc46d98d397194500e9

CN:

*.tradesolution.no

Key:

RSA-2048

Issuer:

Go Daddy Secure Certificate Authority - G2

Not before:

2025-08-27 20:14

Not after:

2026-09-27 08:56

Domain summary

recallapi-prodtest.tradesolution.no 3

1 recorded

IP summary

20.50.2.68 2

1 recorded