Host 2.21.239.24
Germany
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-11-28 21:58
Last seen 2026-02-11 08:02
Open for 74 days-
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532cPublic Swagger UI/API detected at path: /swagger/index.html
Found on 2026-02-11 08:02
-
-
Open service 2.21.239.24:443 · destinycard.com
2026-01-23 18:43
HTTP/1.1 403 Forbidden Mime-Version: 1.0 Content-Type: text/html Content-Length: 363 Cache-Control: max-age=60 Expires: Fri, 23 Jan 2026 18:44:37 GMT Date: Fri, 23 Jan 2026 18:43:37 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Strict-Transport-Security: max-age=15768000 Server-Timing: ak_p; desc="1769193817563_1600490702_128761108_11_2187_0_4_-";dur=1 Page title: Access Denied <HTML><HEAD> <TITLE>Access Denied</TITLE> </HEAD><BODY> <H1>Access Denied</H1> You don't have permission to access "http://destinycard.com/" on this server.<P> Reference #18.ce8c655f.1769193817.7acbd14 <P>https://errors.edgesuite.net/18.ce8c655f.1769193817.7acbd14</P> </BODY> </HTML>
Found 2026-01-23 by HttpPluginCreate report
-
Open service 2.21.239.24:80 · destinycard.com
2026-01-23 18:43
HTTP/1.1 403 Forbidden Mime-Version: 1.0 Content-Type: text/html Content-Length: 363 Cache-Control: max-age=60 Expires: Fri, 23 Jan 2026 18:44:59 GMT Date: Fri, 23 Jan 2026 18:43:59 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1769193839443_1600490712_148649040_10_2574_1_0_-";dur=1 Page title: Access Denied <HTML><HEAD> <TITLE>Access Denied</TITLE> </HEAD><BODY> <H1>Access Denied</H1> You don't have permission to access "http://destinycard.com/" on this server.<P> Reference #18.d88c655f.1769193839.8dc3450 <P>https://errors.edgesuite.net/18.d88c655f.1769193839.8dc3450</P> </BODY> </HTML>
Found 2026-01-23 by HttpPluginCreate report
-
Open service 2.21.239.24:443 · test1.dpg.datanext.nl
2026-01-23 13:23
HTTP/1.1 200 OK Content-Type: text/html ETag: "1dc8a26a96ab802" Last-Modified: Tue, 20 Jan 2026 16:05:57 GMT X-Dnx-Versioninfo: bedfab4c33e7a4ccf32772cd07ce67591e15f061; Tue, 20 Jan 2026 16:06:44 GMT Expires: Fri, 23 Jan 2026 13:23:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 23 Jan 2026 13:23:47 GMT Content-Length: 6274 Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-Cache-Status: NotCacheable from child Page title: DNX 3.0 <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>DNX 3.0</title> <meta name="viewport" content="width=device-width, initial-scale=1"> <link href="data:image/x-icon;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQEAYAAABPYyMiAAAABmJLR0T///////8JWPfcAAAACXBIWXMAAABIAAAASABGyWs+AAAAF0lEQVRIx2NgGAWjYBSMglEwCkbBSAcACBAAAeaR9cIAAAAASUVORK5CYII=" rel="icon" type="image/x-icon" /> <base href="/" /> <meta name="description" value="DNX Root" /> <meta name="api_base_url" content="/api" /> <meta name="customer" content="DPG" value="DPG" /> <meta name="g_tag" value="" /> <meta name="g_tag_manager" value="" /> <meta name="importmap-type" content="systemjs-importmap" /> <link rel="preconnect" href="https://fonts.googleapis.com"> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> <link rel="preload" as="style" crossorigin="anonymous" href="https://fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600&family=Barlow:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600&family=Open+Sans:wght@1&display=swap" /> <link rel="stylesheet" crossorigin="anonymous" href="https://fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600&family=Barlow:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600&family=Open+Sans:wght@1&display=swap" /> <script>Window.runtime={ "_env": "live", "_urls": { "app": "http://localhost:8081", "api": "http://dnx30.datanext.nl/api" }, "_brand": "dpg", "_app": "app-full", "_buildTime": "2026.0120.1605.0", "_settings": { "urls": { "app": "http://localhost:8081", "api": "http://dnx30.datanext.nl/api" }, "branding": { "title": "DPG Media Group" } }, "apps": { "app-customer-manager": { "icon": "customers", "color": "#2783C6", "title": "Customer Manager", "permission": "customerManager", "permissionId": "e994acbd-9ea3-4ae3-8a06-80000fcee316", "providesVuexModule": true, "bundle": "app-customer-manager", "name": "app-customer-manager" }, "app-dashboards": { "icon": "graph-pie", "color": "#baea17", "title": "Dashboards", "permissionId": "dashboards", "providesVuexModule": true, "bundle": "app-dashboards", "name": "app-dashboards" }, "app-full": { "bundle": "app-full", "name": "app-full", "title": "app-full", "active": true }, "app-journey-composer": { "icon": "journey", "title": "Journey Composer", "color": "#D21460", "permission": "journeyComposer", "permissionId": "c631638b-067a-42ed-b9a1-9e273aee0b45", "bundle": "app-journey-composer", "name": "app-journey-composer" }, "app-emdm": { "icon": "template", "color": "#9f0bdabd", "bundle": "app-emdm", "name": "app-emdm", "title": "EM/DM template editor" } } } __VUE_PROD_DEVTOOLS__ = false </script> <script type="systemjs-importmap">{"imports":{ "single-spa": "/lib/spa.js", "vue": "/lib/vue.js", "vue-router": "/lib/vue-router.js", "pinia": "/lib/pinia.js", "@dnx/theme": "/assets/theme.json", "@dnx/bootstrap": "./modules/bootstrap/bootstrap.js", "app-emdm": "./modules/app-emdm/app-emdm.js", "app-customer-manager": "./modules/app-customer-manager/app-customer-manager.js", "app-journey-composer": "./modules/app-journey-composer/app-journey-composer.js", "@dnx/widgets": "./modules/widgets/widgets.js", "app-dashboards": "./modules/app-dashboards/app-dashboards.js", "app-full": "./modules/app-full/app-full.js", "@dnx/core": "./modules/core/core.js" } }</script> <script src="lib/system.js"></script> <script src="api/scripts/resources.js"></script> </head> <body> <noscript> You need to enable JavaScript to run this apFound 2026-01-23 by HttpPluginCreate report
-
Open service 2.21.239.24:443 · ipay.com.kh
2026-01-11 14:04
HTTP/1.1 200 OK x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: DENY Content-Type: text/html;charset=UTF-8 Content-Language: en x-envoy-upstream-service-time: 3 Expires: Sun, 11 Jan 2026 14:04:11 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 11 Jan 2026 14:04:11 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: JSESSIONID=DEAEDDA2DDBB25317CE26D4DE4F48242; Path=/; Secure; HttpOnly Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.d88c655f.1768140251.27520f96 Akamai-Cache-Status: NotCacheable from child Akamai-GRN: 0.d88c655f.1768140251.27520f96 Page title: iPay - The Platform Beyond Payments <!DOCTYPE html> <html lang="en" class="no-js home"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <!-- <meta name="viewport" content="width=device-width, initial-scale=1"> --> <!-- <meta name="viewport" content="width=device-width, target-densitydpi=160dpi, initial-scale=1" /> --> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"> <title>iPay - The Platform Beyond Payments</title> <meta name="description" content="Real-Time Payment Platform For Everyone"> <meta name="keywords" content="ipay"> <meta name="author" content="iPay"> <!-- <link rel="shortcut icon" type="image/x-icon" href="favicon.ico"> --> <!-- Favicon --> <link rel="shortcut icon" type="image/x-icon" href="resources/img/favicon.png" /> <!-- Bootstrap Core CSS --> <link href="resources/vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet"> <!-- Custom Fonts --> <link href="resources/vendor/font-awesome/css/font-awesome.min.css" rel="stylesheet" type="text/css"> <!-- Plugin CSS --> <link href="resources/vendor/magnific-popup/magnific-popup.css" rel="stylesheet"> <!--feature slider css--> <script type="text/javascript" src="resources/js/modernizr.custom.28468.js"></script> <!--fulls screen popup--> <!-- <noscript> <link rel="stylesheet" type="text/css" href="resources/css/nojs.css" /> </noscript> --> <!--form style css--> <link rel="stylesheet" type="text/css" href="resources/css/normalize.css" /> <!--[if IE]> <script src="//html5shiv.googlecode.com/svn/trunk/html5.js"></script> <![endif]--> <!-- <link type="text/css" rel="stylesheet" href="css/featherlight.min.css" /> --> <link href="resources/css/lightgallery.css" rel="stylesheet"> <link href="resources/css/full-slider.css" rel="stylesheet"> <!-- <link rel="shortcut icon" type="image/x-icon" href="favicon.ico"> --> <!-- <link rel="icon" type="image/png" href="favicon-32x32.png" sizes="32x32" /> --> <!-- Bootstrap Core CSS --> <link href="resources/vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet"> <!-- Custom Fonts --> <link href="resources/vendor/font-awesome/css/font-awesome.min.css" rel="stylesheet" type="text/css"> <link href="https://fonts.googleapis.com/css?family=Lato:300,400,700,900" rel="stylesheet"> <!-- Theme CSS --> <link href="resources/css/creative.min.css" rel="stylesheet"> <link href="resources/css/main.css" rel="stylesheet"> <link href="resources/css/animate.min.css" rel="stylesheet"> <link href="resources/css/hover-min.css" rel="stylesheet"> <link rel="stylesheet" type="text/css" href="resources/css/component.css" /> <link rel="stylesheet" href="resources/css/keyframes.css"> <link rel="stylesheet" href="resources/css/pageTransitions.css"> <link rel="stylesheet" type="text/css" href="resources/css/YouTubePopUp.css"> <link rel="stylesheet" type="text/css" href="resources/css/normalize.css" /> <link href="resources/css/media.css" rel="stylesheet"> <!-- HTML5 Shim and Respond.js IE8 support of HTML5 elements and media queries --> <!-- WARNING: Respond.js doesn't work if you view the page via file:// --> <!--[if lt IE 9]> <script src="//oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script> <script src="//oss.maxcdn.com/libs/respond.js/1.4.2/respond.min.js"></script> <![endif]--> <!-- jQuery --> <script src="https://code.jquery.com/jquery.js"></script> <script src="resources/js/modernizr.custom.js"></script> <script src="resources/js/modernizr.js"></script> <!--Main Menu File--> <link rel="stylesheet" type="text/css" media="all" href="resources/css/webslidemenu.css" /> <script type="text/javascript" src="resources/js/webslidemenu.js"></script> <!--Main Menu File--> <!-- <script src="//ajax.googleapFound 2026-01-11 by HttpPluginCreate report
-
Open service 2.21.239.24:80 · ipay.com.kh
2026-01-11 14:04
HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: https://ipay.com.kh/ Expires: Sun, 11 Jan 2026 14:04:51 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 11 Jan 2026 14:04:51 GMT Connection: close Akamai-GRN: 0.d88c655f.1768140291.27534d82 Akamai-Cache-Status: NotCacheable from child Akamai-GRN: 0.d88c655f.1768140291.27534d82
Found 2026-01-11 by HttpPluginCreate report
-
Open service 2.21.239.24:443 · requirements.robotics.abb.com
2026-01-10 08:43
HTTP/1.1 302 Moved Temporarily Content-Length: 0 Location: https://login.microsoftonline.com/372ee9e0-9ce0-4033-a64a-c07073a91ecd/oauth2/authorize?response_type=code&client_id=31d95d12-0c8f-4405-b85c-f95351a74688&scope=openid&nonce=4f3a478c-a1e5-4ac9-ab6a-cbd9953bfcf4&redirect_uri=https%3a%2f%2frequirements.robotics.abb.com%2f&state=AppProxyState%3a%7b%22InvalidTokenRetry%22%3anull%2c%22IsMsofba%22%3afalse%2c%22OriginalRawUrl%22%3a%22https%3a%5c%2f%5c%2frequirements.robotics.abb.com%5c%2f%22%2c%22RequestProfileId%22%3anull%2c%22SessionId%22%3a%22bb849eec-ff69-4411-ab25-50d2673305ad%22%7d%23EndOfStateParam%23&client-request-id=bb849eec-ff69-4411-ab25-50d2673305ad&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d x-ms-proxy-app-id: 31d95d12-0c8f-4405-b85c-f95351a74688 x-ms-proxy-group-id: 5be71a1a-9a99-459a-be17-2628e946f3f1 x-ms-proxy-subscription-id: 372ee9e0-9ce0-4033-a64a-c07073a91ecd x-ms-proxy-transaction-id: 4f3a478c-a1e5-4ac9-ab6a-cbd9953bfcf4 x-ms-proxy-service-name: proxy-appproxy-DWC-FRA03P-3 x-ms-proxy-data-center: DWC Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.2,"failure_fraction":1.0} Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://ffde.nelreports.net/api/report?cat=proxy-appproxy-DWC-FRA03P-3"}]} Date: Sat, 10 Jan 2026 08:43:25 GMT Connection: close Set-Cookie: AzureAppProxyPreauthSessionCookie_31d95d12-0c8f-4405-b85c-f95351a74688_bb849eec-ff69-4411-ab25-50d2673305ad_1.4=MGD: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; expires=Sat, 10 Jan 2026 08:53:25 GMT; path=/; Secure; SameSite=None Set-Cookie: AzureAppProxyAnalyticCookie_31d95d12-0c8f-4405-b85c-f95351a74688_https_1.3=MGD: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; path=/; Secure; SameSite=NoneFound 2026-01-10 by HttpPluginCreate report