LeakIX - Host 2.16.183.88

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.183.88
Domain: api-operationsuite.iberostar.com
Port: 443
URL: https://api-operationsuite.iberostar.com

First seen 2025-10-20 11:01
Last seen 2026-02-05 04:04
Open for 107 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035491b013c7176e8b0ebab108bc53e70686c9f672dcc

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/AzureStorage/Blob/GetFileBytes
GET /api/AzureStorage/Blob/GetFileUrl
GET /api/Booking/Search
GET /api/Guest/Search
GET /api/Hotel
GET /api/Hotel/{id}
GET /api/Login/msal/{appName}/{token}
GET /api/Login/token/{appName}/{token}
GET /api/Notification/GetAllByPermission
GET /api/Notification/Role/GetRoles
GET /api/User/SearchByApp
POST /api/AzureStorage/Blob/SaveFile
POST /api/Booking/Send
POST /api/Booking/SendForDevelop
POST /api/DocumentType/GetAll
POST /api/Email/Send
POST /api/Login/refresh
POST /api/NewHotel/FindReservationAdvance
POST /api/Notification/Add
POST /api/Notification/MultiRead
POST /api/QR/GenerateQR

Found on 2026-02-05 04:04

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.183.88
Domain: regalos-api-operationsuite.iberostar.com
Port: 443
URL: https://regalos-api-operationsuite.iberostar.com

First seen 2025-10-20 11:01
Last seen 2026-02-05 04:04
Open for 107 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549e07578625b39122eb3e20e286a78456e38377247

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Gift/Delete/{id}
DELETE /api/GiftCost/Delete/{id}
DELETE /api/GiftType/RemoveGiftType/{id}
DELETE /api/GiftType/{id}/RemoveUsers
DELETE /api/SalesPoint/RemoveSalePoint/{id}
DELETE /api/SalesPoint/{id}/RemoveUsers
DELETE /api/Template/RemoveTemplate/{idTemplate}
DELETE /api/Template/{idTemplate}/RemoveGifts
DELETE /api/Texts/Delete/{id}
GET /api/Gift/GetAllGifts
GET /api/Gift/GetDetailsById/{id}
GET /api/Gift/GetGiftsByType/{idGiftType}
GET /api/Gift/ListByFilter
GET /api/GiftCost/GetAllByGiftId/{id}
GET /api/GiftCost/GetAllForCompensation
GET /api/GiftCost/GetDetails/{id}
GET /api/GiftStock/GetByFilter
GET /api/GiftStock/GetByFilterMobile
GET /api/GiftStock/GetDetailsById/{id}
GET /api/GiftStock/GetGroupByBooking
GET /api/GiftType/GetAll
GET /api/GiftType/GetDetails/{id}
GET /api/GiftType/GetUsers/{id}
GET /api/GiftType/ListByFilter
GET /api/Hotel/GetAll
GET /api/Hotel/GetAllByUser/{id}
GET /api/Hotel/GetDetails/{id}
GET /api/Hotel/GetDetailsBy/{hotelCode}
GET /api/Hotel/ListByFilter/{id}
GET /api/Login/{token}
GET /api/SalesPoint/GetAll
GET /api/SalesPoint/GetAllByHotel/{hotelId}
GET /api/SalesPoint/GetAllByUser/{id}
GET /api/SalesPoint/GetAppUsers/{appId}
GET /api/SalesPoint/GetDetails/{id}
GET /api/SalesPoint/GetExternals
GET /api/SalesPoint/GetInternalsByHotels
GET /api/SalesPoint/ListByFilter/{id}
GET /api/SalesPoint/{id}/GetGifts
GET /api/Template/GetAll
GET /api/Template/GetDetails/{idTemplate}
GET /api/Template/GetGifts/{idTemplate}
GET /api/Template/ListByFilter
GET /api/Texts/GetAll
GET /api/Texts/GetBy/{id}
POST /api/Booking/Compensation
POST /api/Booking/Send
POST /api/Gift/SaveGift
POST /api/GiftCost/Save
POST /api/GiftStock/GenerateStock
POST /api/GiftStock/LapsedNotUsedStock/{bookingId}
POST /api/GiftStock/ResetStock
POST /api/GiftType/Save
POST /api/GiftType/{id}/AddUsers
POST /api/SalesPoint/Save
POST /api/Template/Clone/{idTemplate}
POST /api/Template/Save
POST /api/Template/{idTemplate}/AddGifts
POST /api/Texts/Save
PUT /api/Gift/SaveGift/{id}
PUT /api/GiftCost/Save/{id}
PUT /api/GiftStock/CancelStock
PUT /api/GiftStock/DeliverStock
PUT /api/GiftStock/RedeemedStock
PUT /api/GiftStock/RestoreInitialStatus
PUT /api/GiftType/Save/{id}
PUT /api/Hotel/SetConcierge
PUT /api/SalesPoint/Save/{id}
PUT /api/SalesPoint/{id}/AddGifts
PUT /api/SalesPoint/{id}/AddUsers
PUT /api/SalesPoint/{id}/RemoveGifts
PUT /api/Template/Save/{idTemplate}
PUT /api/Texts/Save/{id}

Found on 2026-02-05 04:04

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-11-12 10:39

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.110.240.89
Domain: sentryuclickservice.sentry.com
Port: 443
URL: https://sentryuclickservice.sentry.com

First seen 2025-11-18 11:40
Last seen 2026-02-01 18:54
Open for 75 days

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2026-02-01 18:54
Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354931fd5de531fd5de531fd5de531fd5de531fd5de5
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /RecordClick
```
Found on 2026-01-27 10:44
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d6092dd6ee892dd6ee892dd6ee892dd6ee892dd6ee8
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /RecordClick
```
Found on 2026-01-27 10:44

Create report

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 2.16.183.88
Domain: lt-api.engager.ecbsn.com
Port: 443
URL: https://lt-api.engager.ecbsn.com

First seen 2025-11-19 00:26
Last seen 2026-01-15 20:05
Open for 57 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3adde4e1b28842759adebfcdfa3c7c9e4a3c7c9e4

GraphQL introspection enabled at /graphql
Types: 96 (by kind: ENUM: 13, INTERFACE: 2, OBJECT: 69, SCALAR: 10, UNION: 2)
Operations:
- Query: Query | fields: viewer
Directives: defer, deprecated, include, skip (total: 4)

Found on 2026-01-15 20:05

109.3 kBytes

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.20.142.9
Domain: sape-api-selfservice.citbank.com
Port: 443
URL: https://sape-api-selfservice.citbank.com

First seen 2025-10-14 15:00
Last seen 2025-12-16 14:03
Open for 62 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549a4839f52f19e383c83da541842e1354edab959f6

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/AccountClosure/GetAccountClosureSwitch
GET /api/AccountClosure/GetExistingAccountsForClosure
GET /api/AccountClosure/GetExternalAccountsForClosure
GET /api/AccountClosure/IsAccountClosureSwitchEnabled
GET /api/AppHelper/DeleteSession
GET /api/AppHelper/GetAnalyticsGuid
GET /api/AppHelper/GetCookieAttributes
GET /api/AppHelper/IsExistingCustomer
GET /api/AppHelper/IsSSOUserFlag
GET /api/Applicant/GetCustomerDetails
GET /api/Applicant/GetFakeSSNList
GET /api/Beneficiary/GetAllExistingAccounts
GET /api/Beneficiary/GetAllExistingAccountsAndBeneficiaries
GET /api/Beneficiary/GetSingleExistingAccountBeneficiaries
GET /api/CustomerRetentionOffer/GetCustomerRetentionOfferDetails
GET /api/CustomerRetentionOffer/UpdateOfferStatusAccepted
GET /api/ErrorLog/EndSesion
GET /api/ExistingCustomerDashboard/GetExistingCustomerAccounts
GET /api/ExistingCustomerDashboard/GetExistingCustomerDashboardInfo
GET /api/ExistingCustomerDashboard/GetExistingCustomerDocuments
GET /api/ExistingCustomerDashboard/GetExistingOAODocuments
GET /api/ExistingCustomerDashboard/GetFile
GET /api/ExistingCustomerDashboard/GetFileContent
GET /api/ExistingCustomerDashboard/ProductDisclosureDocument
GET /api/ExistingCustomerDashboard/PromotionDisclosureDocument
GET /api/Lookup/GetCustomerLookup
GET /api/Lookup/GetDocumentCategories
GET /api/MaturingCD/GetCDProducts
GET /api/MaturingCD/GetCdAccountDetails
GET /api/MaturingCD/GetCustomerforAgreements
GET /api/MaturingCD/GetExistingCustomerDetails
GET /api/MaturingCD/GetExistingInternalCDAccounts
GET /api/MaturingCD/GetExistingSavingsAccounts
GET /api/MaturingCD/GetRecentMailAddressByAccountNumber
GET /api/MaturingCD/GetTransferOptions
GET /api/MaturingCD/IsManageCDOn
GET /api/MaturingCD/IsUserHaveExternalAccounts
GET /api/Offer/GetAllOfferCategories
GET /api/Offer/GetAllOffers
GET /api/Offer/GetOffer
GET /api/SSP/GetIsD1Flag
GET /api/Schedule/GetAssetsLiabilitiesAndAccounts
GET /api/Schedule/GetCustomerScheduleInfo
GET /api/Schedule/LookupDetails
GET /api/Schedule/ScheduleConfirmation
GET /api/Schedule/TestAuth
GET /api/SelfService/GetDeepLinkAccountNumber
GET /api/SelfService/GetExistingCustomerSelfServiceInfo
GET /api/SelfService/GetFISDownStatus
GET /api/SelfService/GetMobilePartnerOfferExternalBrowserSwitch
GET /api/SelfService/GetWireTransferSwitch
GET /api/SelfService/PreMaintenanceSwitch
GET /api/Status/GetAppHealthCheck
GET /api/Status/GetWealthInternalAppHealthCheck
GET /api/Status/GetWealthInternalAppHealthCheckViaProxyService
GET /api/WireTransfer/CheckWireRequestCompleteStatus
GET /api/WireTransfer/GetDocumentGuid
GET /api/WireTransfer/GetExistingAccountsForWireTransfer
GET /api/WireTransfer/GetExternalBankDetailsByRoutingNumber
GET /api/WireTransfer/GetWireDate
GET /api/WireTransfer/GetWireFeeConfigurations
GET /api/WireTransfer/GetWireTransferPurposes
GET /api/WireTransfer/GetWireTransferRecipients
POST /OAOSSO/Auth
POST /OAOSSO/Consumer
POST /api/AccountClosure/BadMailCodeInquiryForMailACheck
POST /api/AccountClosure/ConfirmAccountClosure
POST /api/AppHelper/ExtendSession
POST /api/Beneficiary/AddBeneficiariesToAccountAsync
POST /api/Beneficiary/RemoveBeneficiaryFromAccount
POST /api/Beneficiary/ValidApplicantAddress
POST /api/Beneficiary/ValidateBeneficiaryNameSSNDOB
POST /api/ErrorLog/LogError
POST /api/ExistingCustomerDashboard/DeleteCustomerDocument
POST /api/ExistingCustomerDashboard/InitiateBannerOfferOAORequest
POST /api/ExistingCustomerDashboard/InitiateOAORequest
POST /api/ExistingCustomerDashboard/InitiateWealthOAORequest
POST /api/ExistingCustomerDashboard/UploadCustomerDocuments
POST /api/MaturingCD/ConfirmExistingSavingsTransfer
POST /api/MaturingCD/InitializeNewAccountInternalTransfer
POST /api/MaturingCD/MaturingCDRetention
POST /api/MaturingCD/RenegotiateMaturingCD
POST /api/MaturingCD/SaveMailACheck
POST /api/MaturingCD/SaveManageCDRequest
POST /api/MaturingCD/UpdateBackupWithholding
POST /api/MaturingCD/UpdateESignPrivacyNoticeConsumerReportFlag
POST /api/MaturingCD/UpdateEsignConsent
POST /api/Offer/OfferEventUpdate
POST /api/SSP/CeBMobileAuth
POST /api/SSP/DigitalAuth
POST /api/SSP/GetAccountClosureOffers
POST /api/SSP/GetCustomerOffers
POST /api/SSP/GetCustomerRetentionOffers
POST /api/SSP/OAOSSPAuth
POST /api/SSP/SetAccountClosureOfferStatus
POST /api/SSP/SetRetentionOfferTransferStatus
POST /api/SSP/ValidateSAML
POST /api/SSPActivityLog/InsertSSPActivityLog
POST /api/Schedule/Assets
POST /api/Schedule/Liabilities
POST /api/Schedule/RiskToleranceAndRetirement
POST /api/Schedule/ScheduleInfo
POST /api/SmartSaver/GetSmartSavingsProjection
POST /api/SmartSaver/SaveSmartSaverEnrollmentInfo
POST /api/Splash/AddSplashCustomers
POST /api/Splash/AddSplashPages
POST /api/Splash/AddSplashPresentationStatus
POST /api/Wealth/SaveWealthContactForm
POST /api/WireTransfer/DeleteWireTransferRecipient
POST /api/WireTransfer/GenerateOTP
POST /api/WireTransfer/GetCustomerPhoneNumbers
POST /api/WireTransfer/InitWireTransfer
POST /api/WireTransfer/SaveWireTransferRecipient
POST /api/WireTransfer/UpdateDisclosure
POST /api/WireTransfer/UpdateWireTransferRecipient
POST /api/WireTransfer/VerifyOTP

Found on 2025-12-16 14:03

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549a4839f52f19e383c83da541842e1354e86da6127

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/AccountClosure/GetAccountClosureSwitch
GET /api/AccountClosure/GetExistingAccountsForClosure
GET /api/AccountClosure/GetExternalAccountsForClosure
GET /api/AccountClosure/IsAccountClosureSwitchEnabled
GET /api/AppHelper/DeleteSession
GET /api/AppHelper/GetAnalyticsGuid
GET /api/AppHelper/GetCookieAttributes
GET /api/AppHelper/IsExistingCustomer
GET /api/AppHelper/IsSSOUserFlag
GET /api/Applicant/GetCustomerDetails
GET /api/Applicant/GetFakeSSNList
GET /api/Beneficiary/GetAllExistingAccounts
GET /api/Beneficiary/GetAllExistingAccountsAndBeneficiaries
GET /api/Beneficiary/GetSingleExistingAccountBeneficiaries
GET /api/CustomerRetentionOffer/GetCustomerRetentionOfferDetails
GET /api/CustomerRetentionOffer/UpdateOfferStatusAccepted
GET /api/ErrorLog/EndSesion
GET /api/ExistingCustomerDashboard/GetExistingCustomerAccounts
GET /api/ExistingCustomerDashboard/GetExistingCustomerDashboardInfo
GET /api/ExistingCustomerDashboard/GetExistingCustomerDocuments
GET /api/ExistingCustomerDashboard/GetExistingOAODocuments
GET /api/ExistingCustomerDashboard/GetFile
GET /api/ExistingCustomerDashboard/ProductDisclosureDocument
GET /api/ExistingCustomerDashboard/PromotionDisclosureDocument
GET /api/Lookup/GetCustomerLookup
GET /api/Lookup/GetDocumentCategories
GET /api/MaturingCD/GetCDProducts
GET /api/MaturingCD/GetCdAccountDetails
GET /api/MaturingCD/GetCustomerforAgreements
GET /api/MaturingCD/GetExistingCustomerDetails
GET /api/MaturingCD/GetExistingInternalCDAccounts
GET /api/MaturingCD/GetExistingSavingsAccounts
GET /api/MaturingCD/GetRecentMailAddressByAccountNumber
GET /api/MaturingCD/GetTransferOptions
GET /api/MaturingCD/IsManageCDOn
GET /api/MaturingCD/IsUserHaveExternalAccounts
GET /api/Offer/GetAllOfferCategories
GET /api/Offer/GetAllOffers
GET /api/Offer/GetOffer
GET /api/SSP/GetIsD1Flag
GET /api/Schedule/GetAssetsLiabilitiesAndAccounts
GET /api/Schedule/GetCustomerScheduleInfo
GET /api/Schedule/LookupDetails
GET /api/Schedule/ScheduleConfirmation
GET /api/Schedule/TestAuth
GET /api/SelfService/GetDeepLinkAccountNumber
GET /api/SelfService/GetExistingCustomerSelfServiceInfo
GET /api/SelfService/GetFISDownStatus
GET /api/SelfService/GetMobilePartnerOfferExternalBrowserSwitch
GET /api/SelfService/GetWireTransferSwitch
GET /api/SelfService/PreMaintenanceSwitch
GET /api/Status/GetAppHealthCheck
GET /api/Status/GetWealthInternalAppHealthCheck
GET /api/Status/GetWealthInternalAppHealthCheckViaProxyService
GET /api/WireTransfer/CheckWireRequestCompleteStatus
GET /api/WireTransfer/GetDocumentGuid
GET /api/WireTransfer/GetExistingAccountsForWireTransfer
GET /api/WireTransfer/GetExternalBankDetailsByRoutingNumber
GET /api/WireTransfer/GetWireDate
GET /api/WireTransfer/GetWireFeeConfigurations
GET /api/WireTransfer/GetWireTransferPurposes
GET /api/WireTransfer/GetWireTransferRecipients
POST /OAOSSO/Auth
POST /OAOSSO/Consumer
POST /api/AccountClosure/BadMailCodeInquiryForMailACheck
POST /api/AccountClosure/ConfirmAccountClosure
POST /api/AppHelper/ExtendSession
POST /api/Beneficiary/AddBeneficiariesToAccountAsync
POST /api/Beneficiary/RemoveBeneficiaryFromAccount
POST /api/Beneficiary/ValidApplicantAddress
POST /api/Beneficiary/ValidateBeneficiaryNameSSNDOB
POST /api/ErrorLog/LogError
POST /api/ExistingCustomerDashboard/DeleteCustomerDocument
POST /api/ExistingCustomerDashboard/InitiateBannerOfferOAORequest
POST /api/ExistingCustomerDashboard/InitiateOAORequest
POST /api/ExistingCustomerDashboard/InitiateWealthOAORequest
POST /api/ExistingCustomerDashboard/UploadCustomerDocuments
POST /api/MaturingCD/ConfirmExistingSavingsTransfer
POST /api/MaturingCD/InitializeNewAccountInternalTransfer
POST /api/MaturingCD/MaturingCDRetention
POST /api/MaturingCD/RenegotiateMaturingCD
POST /api/MaturingCD/SaveMailACheck
POST /api/MaturingCD/SaveManageCDRequest
POST /api/MaturingCD/UpdateBackupWithholding
POST /api/MaturingCD/UpdateESignPrivacyNoticeConsumerReportFlag
POST /api/MaturingCD/UpdateEsignConsent
POST /api/Offer/OfferEventUpdate
POST /api/SSP/CeBMobileAuth
POST /api/SSP/DigitalAuth
POST /api/SSP/GetAccountClosureOffers
POST /api/SSP/GetCustomerOffers
POST /api/SSP/GetCustomerRetentionOffers
POST /api/SSP/OAOSSPAuth
POST /api/SSP/SetAccountClosureOfferStatus
POST /api/SSP/SetRetentionOfferTransferStatus
POST /api/SSP/ValidateSAML
POST /api/SSPActivityLog/InsertSSPActivityLog
POST /api/Schedule/Assets
POST /api/Schedule/Liabilities
POST /api/Schedule/RiskToleranceAndRetirement
POST /api/Schedule/ScheduleInfo
POST /api/SmartSaver/GetSmartSavingsProjection
POST /api/SmartSaver/SaveSmartSaverEnrollmentInfo
POST /api/Splash/AddSplashCustomers
POST /api/Splash/AddSplashPages
POST /api/Splash/AddSplashPresentationStatus
POST /api/Wealth/SaveWealthContactForm
POST /api/WireTransfer/DeleteWireTransferRecipient
POST /api/WireTransfer/GenerateOTP
POST /api/WireTransfer/GetCustomerPhoneNumbers
POST /api/WireTransfer/InitWireTransfer
POST /api/WireTransfer/SaveWireTransferRecipient
POST /api/WireTransfer/UpdateDisclosure
POST /api/WireTransfer/UpdateWireTransferRecipient
POST /api/WireTransfer/VerifyOTP

Found on 2025-11-23 10:00

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.183.88
Domain: fr-pp-sre-1.c1.usge1.turbonomic.prep.ibmforusgov.com
Port: 443
URL: https://fr-pp-sre-1.c1.usge1.turbonomic.prep.ibmforusgov.com

First seen 2025-10-15 15:39
Last seen 2025-11-12 12:06
Open for 27 days

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-11-12 12:06

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.183.88
Domain: fr-pp-sre-2.c1.usge1.turbonomic.prep.ibmforusgov.com
Port: 443
URL: https://fr-pp-sre-2.c1.usge1.turbonomic.prep.ibmforusgov.com

First seen 2025-11-12 08:47

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-11-12 08:47

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 2.16.183.88
Domain: workplaceconsulting-xqa.com
Port: 443
URL: https://workplaceconsulting-xqa.com

First seen 2025-11-06 10:39

Severity: info
Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
Found on 2025-11-06 10:39

Create report

Host 2.16.183.88

Germany

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

GraphQL introspection is enabled.

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Domain summary