LeakIX - Host twrgroup.ph

Domain twrgroup.ph

Singapore

SQUIXA PTY LIMITED

Software information

nginx nginx 1.22.1

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 207.120.36.170
Domain: www.twrgroup.ph
Port: 443
URL: https://www.twrgroup.ph

First seen 2025-10-22 22:08
Last seen 2025-10-30 19:04
Open for 7 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /coupons
GET /coupons/hascoupon
GET /coupons/verify
GET /language
```
  Found on 2025-10-30 19:04
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 45.154.183.183
Domain: twrgroup.ph
Port: 443
URL: https://twrgroup.ph

First seen 2025-10-22 21:57
Last seen 2025-11-01 21:12
Open for 9 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /coupons
GET /coupons/hascoupon
GET /coupons/verify
GET /language
```
  Found on 2025-11-01 21:12
Create report

Open service 146.190.93.238:80 · traefik.twrgroup.ph

2026-01-02 13:56

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Fri, 02 Jan 2026 13:57:00 GMT
Content-Length: 19
Connection: close


404 page not found

Found 2026-01-02 by HttpPlugin

Create report

Open service 146.190.93.238:443 · traefik.twrgroup.ph

2026-01-02 13:56

HTTP/1.1 401 Unauthorized
Content-Type: text/plain
Www-Authenticate: Basic realm="traefik"
Date: Fri, 02 Jan 2026 13:57:00 GMT
Content-Length: 17
Connection: close


401 Unauthorized

Found 2026-01-02 by HttpPlugin

Create report

Open service 146.190.93.238:80 · erp.twrgroup.ph

2026-01-02 13:56

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Fri, 02 Jan 2026 13:57:00 GMT
Content-Length: 19
Connection: close


404 page not found

Found 2026-01-02 by HttpPlugin

Create report

Open service 146.190.93.238:443 · erp.twrgroup.ph

2026-01-02 13:56

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 13:57:01 GMT
Link: </assets/frappe/dist/css/website.bundle.23QHLVGR.css>; rel=preload; as=style,</assets/erpnext/dist/css/erpnext-web.bundle.2FDEJO4C.css>; rel=preload; as=style,</assets/frappe/dist/css/login.bundle.HUV75OZN.css>; rel=preload; as=style,</assets/frappe/dist/js/frappe-web.bundle.PC22MWJB.js>; rel=preload; as=script,</website_script.js>; rel=preload; as=script,</assets/erpnext/dist/js/erpnext-web.bundle.J4A2DQB4.js>; rel=preload; as=script
Referrer-Policy: same-origin, strict-origin-when-cross-origin
Server: nginx/1.22.1
Set-Cookie: sid=Guest; Expires=Fri, 09 Jan 2026 15:57:01 GMT; Max-Age=612000; HttpOnly; Path=/; SameSite=Lax
Set-Cookie: system_user=no; Path=/; SameSite=Lax
Set-Cookie: full_name=Guest; Path=/; SameSite=Lax
Set-Cookie: user_id=Guest; Path=/; SameSite=Lax
Set-Cookie: user_image=; Path=/; SameSite=Lax
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-From-Cache: False
X-Page-Name: login
X-Xss-Protection: 1; mode=block
Connection: close
Transfer-Encoding: chunked

Found 2026-01-02 by HttpPlugin

Create report

Open service 45.154.183.183:443 · twrgroup.ph

2025-12-30 06:08

HTTP/1.1 403 Forbidden
Date: Tue, 30 Dec 2025 06:08:05 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 48024133
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 7157110bd733bb45224e9ae7de3e873e

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 207.120.36.170:443 · www.twrgroup.ph

2025-12-22 07:46

HTTP/1.1 403 Forbidden
Date: Mon, 22 Dec 2025 07:46:21 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 8782986
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: ef8cd8648e0cfd42f1e0d3f0b7fc9267

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 45.154.183.183:443 · twrgroup.ph

2025-12-22 06:43

HTTP/1.1 403 Forbidden
Date: Mon, 22 Dec 2025 06:43:14 GMT
Content-Type: text/html
Content-Length: 118
Connection: close
X-Varnish: 22435843
Age: 0
Via: 1.1 varnish (Varnish/6.3)
section-io-cache: Miss
section-io-id: 082f761d4054fe40f8ec12e3740538f3

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
</body>
</html>

Found 2025-12-22 by HttpPlugin