LeakIX - Host tina.colas.com

Domain tina.colas.com

Germany

Akamai International B.V.

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.50.131.152
Domain: tina.colas.com
Port: 443
URL: https://tina.colas.com

First seen 2025-11-27 07:52
Last seen 2026-02-09 14:16
Open for 74 days

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2026-02-09 14:16

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549427cda4ebb9d8657b29d949ada8daab7bd7839c2

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/agencies
GET /api/agencies/{id}
GET /api/answers
GET /api/answers/{id}
GET /api/availableprofiles
GET /api/categories
GET /api/categories/available-keys
GET /api/categories/key/{key}
GET /api/categories/{id}
GET /api/cultures
GET /api/documents
GET /api/documents/{id}
GET /api/documents/{id}/content
GET /api/predefined-questions
GET /api/predefined-questions/{id}
GET /api/project-specific-questions
GET /api/project-specific-questions/{id}
GET /api/projects
GET /api/projects/{id}
GET /api/reports/export-to-excel
GET /api/reports/{resultId}
GET /api/results
GET /api/results/{id}
GET /api/tags
GET /api/tags/key/{key}
GET /api/tags/{id}
GET /api/user/questions
GET /api/user/questions/{id}
GET /api/users
GET /api/users/{email}
POST /api/agency-sync/trigger
POST /api/answers/reaction
POST /api/documents/cancel-extraction
POST /api/process-answers
POST /api/reports/cancel-excel
POST /api/stop-process-answers
POST /api/user-questions

Found on 2026-01-23 05:04

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549427cda4ebb9d8657b29d949ada8daab739d6cef8

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/agencies
GET /api/agencies/{id}
GET /api/answers
GET /api/answers/{id}
GET /api/documents
GET /api/documents/{id}
GET /api/documents/{id}/content
GET /api/predefined-questions
GET /api/predefined-questions/{id}
GET /api/project-specific-questions
GET /api/project-specific-questions/{id}
GET /api/projects
GET /api/projects/{id}
GET /api/reports/{resultId}
GET /api/results
GET /api/results/{id}
GET /api/users
GET /api/users/{email}
POST /api/answers/reaction
POST /api/process-answers
POST /api/stop-process-answers

Found on 2026-01-16 10:48

Create report

Open service 23.50.131.152:443 · tina.colas.com

2026-01-23 05:04

HTTP/1.1 200 OK
Content-Type: text/html
ETag: "1dc89624ca5bc5f"
Last-Modified: Mon, 19 Jan 2026 16:40:20 GMT
Strict-Transport-Security: max-age=2592000
X-Akamai-Transformed: 9 1709 0 pmb=mRUM,2
Expires: Fri, 23 Jan 2026 05:04:34 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 23 Jan 2026 05:04:34 GMT
Content-Length: 8380
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=41
Server-Timing: origin; dur=12
Server-Timing: ak_p; desc="1769144674711_389224216_2634168319_5320_13606_0_22_-";dur=1

Page title: TINA

<!DOCTYPE html>
<html lang="en" translate="no">

<head>
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />
    <title>TINA</title>
    <base href="/" />
    <link rel="icon" type="image/png" href="favicon.ico" />

    <link href="manifest.json" rel="manifest" />
    <link rel="apple-touch-icon" sizes="512x512" href="icon-512.png" />
    <link rel="apple-touch-icon" sizes="192x192" href="icon-192.png" />
    <link href="css/app.min.css?v=10129" rel="stylesheet" />
    <link href="css/extra.css?v=10129" rel="stylesheet" />

    <link href="https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free/css/all.min.css" rel="stylesheet" />
    <link href="RftGptApp.Client.styles.css" rel="stylesheet">

<script>(window.BOOMR_mq=window.BOOMR_mq||[]).push(["addVar",{"rua.upush":"false","rua.cpush":"false","rua.upre":"false","rua.cpre":"false","rua.uprl":"false","rua.cprl":"false","rua.cprf":"false","rua.trans":"","rua.cook":"false","rua.ims":"false","rua.ufprl":"false","rua.cfprl":"false","rua.isuxp":"false","rua.texp":"norulematch","rua.ceh":"false","rua.ueh":"false","rua.ieh.st":"0"}]);</script>
                              <script>!function(e){var n="https://s.go-mpulse.net/boomerang/";if("False"=="True")e.BOOMR_config=e.BOOMR_config||{},e.BOOMR_config.PageParams=e.BOOMR_config.PageParams||{},e.BOOMR_config.PageParams.pci=!0,n="https://s2.go-mpulse.net/boomerang/";if(window.BOOMR_API_key="ARV5K-MD7Y7-F4P3N-SZDZV-X9G9M",function(){function e(){if(!o){var e=document.createElement("script");e.id="boomr-scr-as",e.src=window.BOOMR.url,e.async=!0,i.parentNode.appendChild(e),o=!0}}function t(e){o=!0;var n,t,a,r,d=document,O=window;if(window.BOOMR.snippetMethod=e?"if":"i",t=function(e,n){var t=d.createElement("script");t.id=n||"boomr-if-as",t.src=window.BOOMR.url,BOOMR_lstart=(new Date).getTime(),e=e||d.body,e.appendChild(t)},!window.addEventListener&&window.attachEvent&&navigator.userAgent.match(/MSIE [67]\./))return window.BOOMR.snippetMethod="s",void t(i.parentNode,"boomr-async");a=document.createElement("IFRAME"),a.src="about:blank",a.title="",a.role="presentation",a.loading="eager",r=(a.frameElement||a).style,r.width=0,r.height=0,r.border=0,r.display="none",i.parentNode.appendChild(a);try{O=a.contentWindow,d=O.document.open()}catch(_){n=document.domain,a.src="javascript:var d=document.open();d.domain='"+n+"';void(0);",O=a.contentWindow,d=O.document.open()}if(n)d._boomrl=function(){this.domain=n,t()},d.write("<bo"+"dy onload='document._boomrl();'>");else if(O._boomrl=function(){t()},O.addEventListener)O.addEventListener("load",O._boomrl,!1);else if(O.attachEvent)O.attachEvent("onload",O._boomrl);d.close()}function a(e){window.BOOMR_onload=e&&e.timeStamp||(new Date).getTime()}if(!window.BOOMR||!window.BOOMR.version&&!window.BOOMR.snippetExecuted){window.BOOMR=window.BOOMR||{},window.BOOMR.snippetStart=(new Date).getTime(),window.BOOMR.snippetExecuted=!0,window.BOOMR.snippetVersion=12,window.BOOMR.url=n+"ARV5K-MD7Y7-F4P3N-SZDZV-X9G9M";var i=document.currentScript||document.getElementsByTagName("script")[0],o=!1,r=document.createElement("link");if(r.relList&&"function"==typeof r.relList.supports&&r.relList.supports("preload")&&"as"in r)window.BOOMR.snippetMethod="p",r.href=window.BOOMR.url,r.rel="preload",r.as="script",r.addEventListener("load",e),r.addEventListener("error",function(){t(!0)}),setTimeout(function(){if(!o)t(!0)},3e3),BOOMR_lstart=(new Date).getTime(),i.parentNode.appendChild(r);else t(!1);if(window.addEventListener)window.addEventListener("load",a,!1);else if(window.attachEvent)window.attachEvent("onload",a)}}(),"".length>0)if(e&&"performance"in e&&e.performance&&"function"==typeof e.performance.setResourceTimingBufferSize)e.performance.setResourceTimingBufferSize();!function(){if(BOOMR=e.BOOMR||{},BOOMR.plugins=BOOMR.plugins||{},!BOOMR.plugins.AK){var n=""=="true"?1:0,t="",a="z6nmk4ixgkbzq2ltafra-f-c338f3451-clientnsv4-s.akamaihd.net",i="false"=="true"?2:1,o={"ak.v":"39","ak.cp":"1424414","ak.ai":parseInt("1097509",10),"ak.ol":"

Found 2026-01-23 by HttpPlugin

Create report

Open service 23.50.131.152:443 · tina.colas.com

2026-01-09 14:20

HTTP/1.1 200 OK
Content-Type: text/html
ETag: "1dbb9cfdfb34253"
Last-Modified: Wed, 30 Apr 2025 13:00:40 GMT
Strict-Transport-Security: max-age=2592000
Request-Context: appId=cid-v1:ccf9969f-cc67-473c-ba62-a84b16637d93
X-Akamai-Transformed: 9 1711 0 pmb=mRUM,2
Expires: Fri, 09 Jan 2026 14:20:06 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Jan 2026 14:20:06 GMT
Content-Length: 8371
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=11
Server-Timing: origin; dur=6
Server-Timing: ak_p; desc="1767968406519_389224216_139230400_1752_6912_145_291_-";dur=1

Page title: TINA

<!DOCTYPE html>
<html lang="en" translate="no">

<head>
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />
    <title>TINA</title>
    <base href="/" />
    <link rel="icon" type="image/png" href="favicon.ico" />

    <link href="manifest.json" rel="manifest" />
    <link rel="apple-touch-icon" sizes="512x512" href="icon-512.png" />
    <link rel="apple-touch-icon" sizes="192x192" href="icon-192.png" />
    <link href="css/app.min.css?v=10129" rel="stylesheet" />
    <link href="css/extra.css?v=10129" rel="stylesheet" />

    <link href="https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free/css/all.min.css" rel="stylesheet" />
    <link href="RftGptApp.Client.styles.css" rel="stylesheet">

<script>(window.BOOMR_mq=window.BOOMR_mq||[]).push(["addVar",{"rua.upush":"false","rua.cpush":"false","rua.upre":"false","rua.cpre":"false","rua.uprl":"false","rua.cprl":"false","rua.cprf":"false","rua.trans":"","rua.cook":"false","rua.ims":"false","rua.ufprl":"false","rua.cfprl":"false","rua.isuxp":"false","rua.texp":"norulematch","rua.ceh":"false","rua.ueh":"false","rua.ieh.st":"0"}]);</script>
                              <script>!function(e){var n="https://s.go-mpulse.net/boomerang/";if("False"=="True")e.BOOMR_config=e.BOOMR_config||{},e.BOOMR_config.PageParams=e.BOOMR_config.PageParams||{},e.BOOMR_config.PageParams.pci=!0,n="https://s2.go-mpulse.net/boomerang/";if(window.BOOMR_API_key="ARV5K-MD7Y7-F4P3N-SZDZV-X9G9M",function(){function e(){if(!o){var e=document.createElement("script");e.id="boomr-scr-as",e.src=window.BOOMR.url,e.async=!0,i.parentNode.appendChild(e),o=!0}}function t(e){o=!0;var n,t,a,r,d=document,O=window;if(window.BOOMR.snippetMethod=e?"if":"i",t=function(e,n){var t=d.createElement("script");t.id=n||"boomr-if-as",t.src=window.BOOMR.url,BOOMR_lstart=(new Date).getTime(),e=e||d.body,e.appendChild(t)},!window.addEventListener&&window.attachEvent&&navigator.userAgent.match(/MSIE [67]\./))return window.BOOMR.snippetMethod="s",void t(i.parentNode,"boomr-async");a=document.createElement("IFRAME"),a.src="about:blank",a.title="",a.role="presentation",a.loading="eager",r=(a.frameElement||a).style,r.width=0,r.height=0,r.border=0,r.display="none",i.parentNode.appendChild(a);try{O=a.contentWindow,d=O.document.open()}catch(_){n=document.domain,a.src="javascript:var d=document.open();d.domain='"+n+"';void(0);",O=a.contentWindow,d=O.document.open()}if(n)d._boomrl=function(){this.domain=n,t()},d.write("<bo"+"dy onload='document._boomrl();'>");else if(O._boomrl=function(){t()},O.addEventListener)O.addEventListener("load",O._boomrl,!1);else if(O.attachEvent)O.attachEvent("onload",O._boomrl);d.close()}function a(e){window.BOOMR_onload=e&&e.timeStamp||(new Date).getTime()}if(!window.BOOMR||!window.BOOMR.version&&!window.BOOMR.snippetExecuted){window.BOOMR=window.BOOMR||{},window.BOOMR.snippetStart=(new Date).getTime(),window.BOOMR.snippetExecuted=!0,window.BOOMR.snippetVersion=12,window.BOOMR.url=n+"ARV5K-MD7Y7-F4P3N-SZDZV-X9G9M";var i=document.currentScript||document.getElementsByTagName("script")[0],o=!1,r=document.createElement("link");if(r.relList&&"function"==typeof r.relList.supports&&r.relList.supports("preload")&&"as"in r)window.BOOMR.snippetMethod="p",r.href=window.BOOMR.url,r.rel="preload",r.as="script",r.addEventListener("load",e),r.addEventListener("error",function(){t(!0)}),setTimeout(function(){if(!o)t(!0)},3e3),BOOMR_lstart=(new Date).getTime(),i.parentNode.appendChild(r);else t(!1);if(window.addEventListener)window.addEventListener("load",a,!1);else if(window.attachEvent)window.attachEvent("onload",a)}}(),"".length>0)if(e&&"performance"in e&&e.performance&&"function"==typeof e.performance.setResourceTimingBufferSize)e.performance.setResourceTimingBufferSize();!function(){if(BOOMR=e.BOOMR||{},BOOMR.plugins=BOOMR.plugins||{},!BOOMR.plugins.AK){var n=""=="true"?1:0,t="",a="ial5vuaxgkbzq2lbb2la-f-0ca73fb30-clientnsv4-s.akamaihd.net",i="false"=="true"?2:1,o={"ak.v":"39","ak.cp":"1424414","ak.ai":parseInt("1097509",10),"ak.ol":"

Found 2026-01-09 by HttpPlugin

Create report

Open service 23.50.131.152:443 · tina.colas.com

2026-01-02 15:15

HTTP/1.1 200 OK
Content-Type: text/html
ETag: "1dbb9cfdfb34253"
Last-Modified: Wed, 30 Apr 2025 13:00:40 GMT
Strict-Transport-Security: max-age=2592000
Request-Context: appId=cid-v1:ccf9969f-cc67-473c-ba62-a84b16637d93
X-Akamai-Transformed: 9 1711 0 pmb=mRUM,2
Expires: Fri, 02 Jan 2026 15:15:29 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 02 Jan 2026 15:15:29 GMT
Content-Length: 8371
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=31
Server-Timing: origin; dur=28
Server-Timing: ak_p; desc="1767366929516_389224207_1173029587_5882_7881_0_3_-";dur=1

Page title: TINA

<!DOCTYPE html>
<html lang="en" translate="no">

<head>
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />
    <title>TINA</title>
    <base href="/" />
    <link rel="icon" type="image/png" href="favicon.ico" />

    <link href="manifest.json" rel="manifest" />
    <link rel="apple-touch-icon" sizes="512x512" href="icon-512.png" />
    <link rel="apple-touch-icon" sizes="192x192" href="icon-192.png" />
    <link href="css/app.min.css?v=10129" rel="stylesheet" />
    <link href="css/extra.css?v=10129" rel="stylesheet" />

    <link href="https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free/css/all.min.css" rel="stylesheet" />
    <link href="RftGptApp.Client.styles.css" rel="stylesheet">

<script>(window.BOOMR_mq=window.BOOMR_mq||[]).push(["addVar",{"rua.upush":"false","rua.cpush":"false","rua.upre":"false","rua.cpre":"false","rua.uprl":"false","rua.cprl":"false","rua.cprf":"false","rua.trans":"","rua.cook":"false","rua.ims":"false","rua.ufprl":"false","rua.cfprl":"false","rua.isuxp":"false","rua.texp":"norulematch","rua.ceh":"false","rua.ueh":"false","rua.ieh.st":"0"}]);</script>
                              <script>!function(e){var n="https://s.go-mpulse.net/boomerang/";if("False"=="True")e.BOOMR_config=e.BOOMR_config||{},e.BOOMR_config.PageParams=e.BOOMR_config.PageParams||{},e.BOOMR_config.PageParams.pci=!0,n="https://s2.go-mpulse.net/boomerang/";if(window.BOOMR_API_key="ARV5K-MD7Y7-F4P3N-SZDZV-X9G9M",function(){function e(){if(!o){var e=document.createElement("script");e.id="boomr-scr-as",e.src=window.BOOMR.url,e.async=!0,i.parentNode.appendChild(e),o=!0}}function t(e){o=!0;var n,t,a,r,d=document,O=window;if(window.BOOMR.snippetMethod=e?"if":"i",t=function(e,n){var t=d.createElement("script");t.id=n||"boomr-if-as",t.src=window.BOOMR.url,BOOMR_lstart=(new Date).getTime(),e=e||d.body,e.appendChild(t)},!window.addEventListener&&window.attachEvent&&navigator.userAgent.match(/MSIE [67]\./))return window.BOOMR.snippetMethod="s",void t(i.parentNode,"boomr-async");a=document.createElement("IFRAME"),a.src="about:blank",a.title="",a.role="presentation",a.loading="eager",r=(a.frameElement||a).style,r.width=0,r.height=0,r.border=0,r.display="none",i.parentNode.appendChild(a);try{O=a.contentWindow,d=O.document.open()}catch(_){n=document.domain,a.src="javascript:var d=document.open();d.domain='"+n+"';void(0);",O=a.contentWindow,d=O.document.open()}if(n)d._boomrl=function(){this.domain=n,t()},d.write("<bo"+"dy onload='document._boomrl();'>");else if(O._boomrl=function(){t()},O.addEventListener)O.addEventListener("load",O._boomrl,!1);else if(O.attachEvent)O.attachEvent("onload",O._boomrl);d.close()}function a(e){window.BOOMR_onload=e&&e.timeStamp||(new Date).getTime()}if(!window.BOOMR||!window.BOOMR.version&&!window.BOOMR.snippetExecuted){window.BOOMR=window.BOOMR||{},window.BOOMR.snippetStart=(new Date).getTime(),window.BOOMR.snippetExecuted=!0,window.BOOMR.snippetVersion=12,window.BOOMR.url=n+"ARV5K-MD7Y7-F4P3N-SZDZV-X9G9M";var i=document.currentScript||document.getElementsByTagName("script")[0],o=!1,r=document.createElement("link");if(r.relList&&"function"==typeof r.relList.supports&&r.relList.supports("preload")&&"as"in r)window.BOOMR.snippetMethod="p",r.href=window.BOOMR.url,r.rel="preload",r.as="script",r.addEventListener("load",e),r.addEventListener("error",function(){t(!0)}),setTimeout(function(){if(!o)t(!0)},3e3),BOOMR_lstart=(new Date).getTime(),i.parentNode.appendChild(r);else t(!1);if(window.addEventListener)window.addEventListener("load",a,!1);else if(window.attachEvent)window.attachEvent("onload",a)}}(),"".length>0)if(e&&"performance"in e&&e.performance&&"function"==typeof e.performance.setResourceTimingBufferSize)e.performance.setResourceTimingBufferSize();!function(){if(BOOMR=e.BOOMR||{},BOOMR.plugins=BOOMR.plugins||{},!BOOMR.plugins.AK){var n=""=="true"?1:0,t="",a="uropjbaxgkbzq2kx4eiq-f-5af352d48-clientnsv4-s.akamaihd.net",i="false"=="true"?2:1,o={"ak.v":"39","ak.cp":"1424414","ak.ai":parseInt("1097509",10),"ak.ol":"

Found 2026-01-02 by HttpPlugin