LeakIX - Host www.parkemi.com

Domain www.parkemi.com

Sweden

AMAZON-02

Ubuntu

Software information

nginx nginx 1.18.0

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 13.51.122.10
Domain: www.parkemi.com
Port: 443
URL: https://www.parkemi.com

First seen 2025-11-16 16:12
Last seen 2026-01-23 00:46
Open for 67 days

Severity: info
Fingerprint: 5733ddf49ff49cd110a331ecdeba7a39c9405a4755fdb6b6d176405417bf7c49

Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
GET /api/rest/parking-permit/permit
GET /api/rest/parking/check/{licensePlate}/{zoneId}
GET /api/rest/parking/checkgroup/{licensePlate}/{group}
GET /api/rest/parking/checksimple/{licensePlate}/{zoneId}
GET /api/rest/parking/checkstreet/{licensePlate}/{streetId}
GET /api/rest/parking/getlist/{zoneId}
POST /api/rest/guest-tablet/getTabletConfig
POST /api/rest/guest-tablet/registerParking
POST /api/rest/guest-tablet/registerTablet
POST /api/rest/p24/notification
POST /api/rest/parking-guest/entry/create
POST /api/rest/parking-guest/entry/createauto
POST /api/rest/parking-guest/entry/createcomplete
POST /api/rest/parking-permit/setup/{clientId}/update
POST /api/rest/parking-permit/{clientId}/document-link
POST /api/rest/parking-permit/{clientId}/update

Found on 2026-01-23 00:46

Create report

Open service 13.51.122.10:443 · www.parkemi.com

2026-01-23 00:46

HTTP/1.1 200 
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 23 Jan 2026 00:46:43 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 1562
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, PUT, OPTIONS, POST, DELETE, HEAD, PATCH
Access-Control-Allow-Headers: Content-Type, Accept, Remember-Me
Access-Control-Max-Age: 3600
Access-Control-Expose-Headers: Remember-Me
Set-Cookie: JSESSIONID=C27F1C5DB87B654D3D61933BEB6745FA; Path=/; HttpOnly
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY


<!doctype html>
<!--
This file is auto-generated by Vaadin.
-->

<html lang="en" class="notranslate" translate="no">
<head><script initial="">if (!('ResizeObserver' in window)) {    window.location.search='v-r=oldbrowser';}</script><script initial="">window.Vaadin = window.Vaadin || {};window.Vaadin.TypeScript= {};</script><meta name="_csrf_parameter" content="_csrf"><meta name="_csrf_header" content="X-CSRF-TOKEN"><meta name="_csrf" content="5458f6cf-6b84-4e7e-ad48-5478fb2084fa"><base href="."><script type="text/javascript">window.JSCompiler_renameProperty = function(a) { return a;}</script>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <meta name="google" content="notranslate">
  <style>
    body, #outlet {
      height: 100vh;
      width: 100%;
      margin: 0;
    }
  </style>
  <!-- index.ts is included here automatically (either by the dev server or during the build) -->
  
  <script type="module" crossorigin src="./VAADIN/build/indexhtml.eb6933e5.js"></script>
<style>.v-reconnect-dialog,.v-system-error {position: absolute;color: black;background: white;top: 1em;right: 1em;border: 1px solid black;padding: 1em;z-index: 10000;max-width: calc(100vw - 4em);max-height: calc(100vh - 4em);overflow: auto;} .v-system-error {color: indianred;pointer-events: auto;} .v-system-error h3, .v-system-error b {color: red;}</style><style>[hidden] { display: none !important; }</style></head>
<body>
  <!-- This outlet div is where the views are rendered -->
  <div id="outlet"></div>
</body>
</html>

Found 2026-01-23 by HttpPlugin

Create report

Open service 13.51.122.10:443 · www.parkemi.com

2026-01-08 23:37

HTTP/1.1 200 
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 08 Jan 2026 23:37:20 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 1562
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, PUT, OPTIONS, POST, DELETE, HEAD, PATCH
Access-Control-Allow-Headers: Content-Type, Accept, Remember-Me
Access-Control-Max-Age: 3600
Access-Control-Expose-Headers: Remember-Me
Set-Cookie: JSESSIONID=B7E90108BACEAB97F6911E9E860C1445; Path=/; HttpOnly
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY


<!doctype html>
<!--
This file is auto-generated by Vaadin.
-->

<html lang="en" class="notranslate" translate="no">
<head><script initial="">if (!('ResizeObserver' in window)) {    window.location.search='v-r=oldbrowser';}</script><script initial="">window.Vaadin = window.Vaadin || {};window.Vaadin.TypeScript= {};</script><meta name="_csrf_parameter" content="_csrf"><meta name="_csrf_header" content="X-CSRF-TOKEN"><meta name="_csrf" content="702e9bdc-2084-4eee-b715-55869626965c"><base href="."><script type="text/javascript">window.JSCompiler_renameProperty = function(a) { return a;}</script>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <meta name="google" content="notranslate">
  <style>
    body, #outlet {
      height: 100vh;
      width: 100%;
      margin: 0;
    }
  </style>
  <!-- index.ts is included here automatically (either by the dev server or during the build) -->
  
  <script type="module" crossorigin src="./VAADIN/build/indexhtml.eb6933e5.js"></script>
<style>.v-reconnect-dialog,.v-system-error {position: absolute;color: black;background: white;top: 1em;right: 1em;border: 1px solid black;padding: 1em;z-index: 10000;max-width: calc(100vw - 4em);max-height: calc(100vh - 4em);overflow: auto;} .v-system-error {color: indianred;pointer-events: auto;} .v-system-error h3, .v-system-error b {color: red;}</style><style>[hidden] { display: none !important; }</style></head>
<body>
  <!-- This outlet div is where the views are rendered -->
  <div id="outlet"></div>
</body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 13.51.122.10:443 · www.parkemi.com

2026-01-02 02:18

HTTP/1.1 200 
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 02 Jan 2026 02:18:53 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 1562
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, PUT, OPTIONS, POST, DELETE, HEAD, PATCH
Access-Control-Allow-Headers: Content-Type, Accept, Remember-Me
Access-Control-Max-Age: 3600
Access-Control-Expose-Headers: Remember-Me
Set-Cookie: JSESSIONID=60B7A4876546B1B8521417ECDBC8BA00; Path=/; HttpOnly
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY


<!doctype html>
<!--
This file is auto-generated by Vaadin.
-->

<html lang="en" class="notranslate" translate="no">
<head><script initial="">if (!('ResizeObserver' in window)) {    window.location.search='v-r=oldbrowser';}</script><script initial="">window.Vaadin = window.Vaadin || {};window.Vaadin.TypeScript= {};</script><meta name="_csrf_parameter" content="_csrf"><meta name="_csrf_header" content="X-CSRF-TOKEN"><meta name="_csrf" content="92e495d6-62e8-4930-976b-fbd237b8f204"><base href="."><script type="text/javascript">window.JSCompiler_renameProperty = function(a) { return a;}</script>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <meta name="google" content="notranslate">
  <style>
    body, #outlet {
      height: 100vh;
      width: 100%;
      margin: 0;
    }
  </style>
  <!-- index.ts is included here automatically (either by the dev server or during the build) -->
  
  <script type="module" crossorigin src="./VAADIN/build/indexhtml.eb6933e5.js"></script>
<style>.v-reconnect-dialog,.v-system-error {position: absolute;color: black;background: white;top: 1em;right: 1em;border: 1px solid black;padding: 1em;z-index: 10000;max-width: calc(100vw - 4em);max-height: calc(100vh - 4em);overflow: auto;} .v-system-error {color: indianred;pointer-events: auto;} .v-system-error h3, .v-system-error b {color: red;}</style><style>[hidden] { display: none !important; }</style></head>
<body>
  <!-- This outlet div is where the views are rendered -->
  <div id="outlet"></div>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 13.51.122.10:443 · www.parkemi.com

2025-12-23 05:50

HTTP/1.1 200 
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 23 Dec 2025 05:50:05 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 1562
Connection: close
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, PUT, OPTIONS, POST, DELETE, HEAD, PATCH
Access-Control-Allow-Headers: Content-Type, Accept, Remember-Me
Access-Control-Max-Age: 3600
Access-Control-Expose-Headers: Remember-Me
Set-Cookie: JSESSIONID=00D904254B55384A7469E62F2749ECAA; Path=/; HttpOnly
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY


<!doctype html>
<!--
This file is auto-generated by Vaadin.
-->

<html lang="en" class="notranslate" translate="no">
<head><script initial="">if (!('ResizeObserver' in window)) {    window.location.search='v-r=oldbrowser';}</script><script initial="">window.Vaadin = window.Vaadin || {};window.Vaadin.TypeScript= {};</script><meta name="_csrf_parameter" content="_csrf"><meta name="_csrf_header" content="X-CSRF-TOKEN"><meta name="_csrf" content="f1a146d7-5006-41b2-a693-b04d246550b7"><base href="."><script type="text/javascript">window.JSCompiler_renameProperty = function(a) { return a;}</script>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <meta name="google" content="notranslate">
  <style>
    body, #outlet {
      height: 100vh;
      width: 100%;
      margin: 0;
    }
  </style>
  <!-- index.ts is included here automatically (either by the dev server or during the build) -->
  
  <script type="module" crossorigin src="./VAADIN/build/indexhtml.eb6933e5.js"></script>
<style>.v-reconnect-dialog,.v-system-error {position: absolute;color: black;background: white;top: 1em;right: 1em;border: 1px solid black;padding: 1em;z-index: 10000;max-width: calc(100vw - 4em);max-height: calc(100vh - 4em);overflow: auto;} .v-system-error {color: indianred;pointer-events: auto;} .v-system-error h3, .v-system-error b {color: red;}</style><style>[hidden] { display: none !important; }</style></head>
<body>
  <!-- This outlet div is where the views are rendered -->
  <div id="outlet"></div>
</body>
</html>

Found 2025-12-23 by HttpPlugin

Create report

www.parkemi.com

Fingerprint:

f78eceaf929adaf1efd53878687bfce2a5923e129a12460c27476130341767a8

CN:

www.parkemi.com

Key:

ECDSA-256

Issuer:

Not before:

2026-01-15 17:18

Not after:

2026-04-15 17:18

www.parkemi.com

Fingerprint:

2d0e9a346a85582c92c8dfa740d1247578b85985ad43d19609dce6929af98f4b

CN:

www.parkemi.com

Key:

ECDSA-256

Issuer:

Not before:

2025-11-16 15:12

Not after:

2026-02-14 15:12

Domain summary

www.parkemi.com 4

1 recorded

IP summary

13.51.122.10 2

1 recorded