LeakIX - Host test.api.sinatec.2digits.dev

Domain test.api.sinatec.2digits.dev

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.232.48
Domain: test.api.sinatec.2digits.dev
Port: 443
URL: https://test.api.sinatec.2digits.dev

First seen 2026-01-04 12:47
Last seen 2026-02-02 12:42
Open for 28 days

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2026-02-02 12:42

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035497e2d5e86cb25b78f40388e170a4c4036026e79e2

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /orders/lines/backorder
GET /Misc/franco
GET /Prepr/productgroups
GET /Prepr/products
GET /Products/id/{slug}
GET /Products/{id}
GET /me
GET /me/company
GET /me/company/orderlists
GET /me/company/orderlists/{id}
GET /me/company/orders
GET /me/company/orders/backorder
GET /me/company/orders/recent
GET /me/company/quotations
GET /me/company/roles/custom
GET /me/company/users/{id}
GET /me/session
GET /orders
GET /orders/{id}
POST /Misc/ktype/by/cartype
POST /Misc/ktype/by/licenseplate
POST /Registration
POST /Registration/complete
POST /Registration/validate
POST /auth/forgot
POST /auth/login
POST /auth/logout
POST /auth/reset
POST /auth/reset/validate
POST /me/company/reports
POST /me/company/reports/search
POST /me/company/users
POST /me/verify
POST /orders/import
POST /orders/import/orderlist
POST /orders/lines
POST /orders/payment
POST /orders/payment/webhook
POST /orders/save
POST /quotations/externalquotation
PUT /me/company/orderlists/{id}/items/{itemId}
PUT /me/password
PUT /orders/lines/{id}

Found on 2026-01-17 01:33

Create report

Open service 20.105.232.48:443 · test.api.sinatec.2digits.dev

2026-01-22 19:47

HTTP/1.1 400 Bad Request
Connection: close
Content-Type: application/json; charset=utf-8
Date: Thu, 22 Jan 2026 19:47:59 GMT
Server: Kestrel
Transfer-Encoding: chunked
Request-Context: appId=cid-v1:ae2c2e41-1630-4095-ac6c-89704cfc152a


{"code":"InvalidOrigin","description":"The request header 'X-Origin' is either missing or invalid","additional":[]}

Found 2026-01-22 by HttpPlugin

Create report

Open service 20.105.232.48:80 · test.api.sinatec.2digits.dev

2026-01-12 14:23

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Mon, 12 Jan 2026 14:24:38 GMT
Location: https://test.api.sinatec.2digits.dev/

Found 2026-01-12 by HttpPlugin

Create report

Open service 20.105.232.48:443 · test.api.sinatec.2digits.dev

2026-01-12 14:23

HTTP/1.1 400 Bad Request
Connection: close
Content-Type: application/json; charset=utf-8
Date: Mon, 12 Jan 2026 14:24:38 GMT
Server: Kestrel
Transfer-Encoding: chunked
Request-Context: appId=cid-v1:ae2c2e41-1630-4095-ac6c-89704cfc152a


{"code":"InvalidOrigin","description":"The request header 'X-Origin' is either missing or invalid","additional":[]}

Found 2026-01-12 by HttpPlugin

Create report

test.api.sinatec.2digits.dev

Fingerprint:

7905b9298546603dea034242bc829c60f0101f40934fa995813be09a197600a7

CN:

test.api.sinatec.2digits.dev

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2026-01-04 00:00

Not after:

2026-04-14 23:59

Domain summary

test.api.sinatec.2digits.dev 4

1 recorded

IP summary

20.105.232.48 2

1 recorded