Microsoft-IIS 10.0
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549777dd9fba11b515af14cdc809c0206c3e278c254
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/ping
GET /api/ping/auth
GET /api/v1/ftp/pending-files
GET /api/v1/ftp/test
GET /api/v1/me
GET /api/v1/passwords
GET /api/v1/passwords/{passwordType}
GET /api/v1/passwords/{passwordType}/raw
GET /api/v1/persons/{pnr}
GET /api/v1/persons/{pnr}/subscription
GET /api/v1/webhooks
GET /api/v1/webhooks/{webhookId}
POST /api/v1/tenants
Open service 52.232.33.202:443 ยท tubex-dev.easysure.dk
2026-01-23 06:38
HTTP/1.1 200 OK
Connection: close
Content-Type: text/html; charset=utf-8
Date: Fri, 23 Jan 2026 06:38:58 GMT
Server: Microsoft-IIS/10.0
Set-Cookie: ARRAffinity=6f95561cfe194ab785bf0104a6428524416b6cd132e814ef578926274e96c4be;Path=/;HttpOnly;Secure;Domain=tubex-dev.easysure.dk
Set-Cookie: ARRAffinitySameSite=6f95561cfe194ab785bf0104a6428524416b6cd132e814ef578926274e96c4be;Path=/;HttpOnly;SameSite=None;Secure;Domain=tubex-dev.easysure.dk
Transfer-Encoding: chunked
Request-Context: appId=cid-v1:582d984f-343f-4e2e-9a2b-1efea59cbccd
X-Powered-By: ASP.NET
Page title: Tubex - Welcome
<!DOCTYPE html>
<html>
<head>
<title>Tubex - Welcome</title>
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Poppins:300,400,500,600,700|Roboto:300,400,500,600,700">
<link href="https://webstatic.pi-applications.dk/themes/metronic1/assets/plugins/global/plugins.bundle.css" rel="stylesheet" type="text/css" />
<link href="https://webstatic.pi-applications.dk/themes/metronic1/assets/css/style.bundle.css" rel="stylesheet" type="text/css" />
<link href="https://webstatic.pi-applications.dk/themes/metronic1/assets/css/skins/header/base/light.css" rel="stylesheet" type="text/css" />
<link href="https://webstatic.pi-applications.dk/themes/metronic1/assets/css/skins/header/menu/light.css" rel="stylesheet" type="text/css" />
<link href="https://webstatic.pi-applications.dk/themes/metronic1/assets/css/skins/brand/dark.css" rel="stylesheet" type="text/css" />
<link href="https://webstatic.pi-applications.dk/themes/metronic1/assets/css/skins/aside/dark.css" rel="stylesheet" type="text/css" />
<link href="https://webstatic.pi-applications.dk/themes/metronic1/assets/css/pages/error/error-1.css" rel="stylesheet" type="text/css" />
</head>
<body class="kt-quick-panel--right kt-demo-panel--right kt-offcanvas-panel--right kt-header--fixed kt-header-mobile--fixed kt-subheader--enabled kt-subheader--fixed kt-subheader--solid kt-aside--enabled kt-aside--fixed kt-page--loading">
<div class="kt-grid kt-grid--ver kt-grid--root">
<div class="kt-grid__item kt-grid__item--fluid kt-grid kt-error-v1" style="background-image: url(https://webstatic.pi-applications.dk/themes/metronic1/assets/media/error/bg1.jpg);">
<div class="kt-error-v1__container">
<h1 class="kt-error-v1__number">Tubex</h1>
<p class="kt-error-v1__desc">
<a href="/swagger">API documentation</a><br />
<small>Version 1.18.0-ci.27 (#35652)</small><br />
<small>Environment DEV</small>
</p>
</div>
</div>
</div>
<script>
var KTAppOptions = {
"colors": {
"state": {
"brand": "#5d78ff",
"dark": "#282a3c",
"light": "#ffffff",
"primary": "#5867dd",
"success": "#34bfa3",
"info": "#36a3f7",
"warning": "#ffb822",
"danger": "#fd3995"
},
"base": {
"label": [
"#c5cbe3",
"#a1a8c3",
"#3d4465",
"#3e4466"
],
"shape": [
"#f0f3ff",
"#d9dffa",
"#afb4d4",
"#646c9a"
]
}
}
};
</script>
<script src="https://webstatic.pi-applications.dk/themes/metronic1/assets/plugins/global/plugins.bundle.js" type="text/javascript"></script>
<script src="https://webstatic.pi-applications.dk/themes/metronic1/assets/js/scripts.bundle.js" type="text/javascript"></script>
</body>
</html>