Host 23.32.238.106
Germany
Software information
AkamaiGHost
tcp/80
AmazonS3
tcp/443
Microsoft-IIS 10.0
tcp/443
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
IP: 23.32.238.106
Domain: oms-kroger-webapp-da-classic-api-prod.przone.net
Port: 443
URL: https://oms-kroger-webapp-da-classic-api-prod.przone.netFirst seen 2025-11-11 15:10
Last seen 2026-02-07 21:55
Open for 88 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549e200343f12bfa821a53c7b954ce2cc18d5afd82fPublic Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /api/account/subscription/info GET /api/account/user/get GET /api/dac GET /api/dacs GET /api/dacs/bydivision GET /api/dacs/{adId} GET /api/dacs/{adId}/offers/{offerId} GET /api/dacs/{adId}/pages/{pageId} GET /api/dacs/{adId}/search GET /api/events/adtitle GET /api/events/byweek GET /api/events/groupedbyweek GET /api/events/{eventId}/dac GET /api/events/{eventId}/dac/event/division GET /api/events/{eventId}/dac/event/storeNumbers GET /api/events/{eventId}/dac/eventOffers GET /api/events/{eventId}/dac/offerDetails GET /api/events/{eventId}/dac/pages GET /api/events/{eventId}/dac/pages/{pageId} GET /api/events/{eventId}/offers GET /api/module GET /api/portal/SiteSettings/key GET /api/portal/images POST /api/dacs/saveLogs POST /api/events/create POST /api/events/update POST /api/events/{eventId}/dac/codesheet POST /api/events/{eventId}/dac/page/create POST /api/events/{eventId}/dac/page/pageOrder POST /api/events/{eventId}/dac/page/update POST /api/events/{eventId}/dac/page/updatePageContent POST /api/events/{eventId}/dac/page/updatePageStore POST /api/events/{eventId}/dac/pages/bulk POST /api/events/{eventId}/dac/pages/status POST /api/events/{eventId}/dac/pages/{pageId}/file POST /api/events/{eventId}/dac/publish POST /api/events/{eventId}/dac/unpublish POST /api/portal/file-upload POST /api/portal/files-uploadFound on 2026-02-07 21:55
-
-
Open service 23.32.238.106:443 · 9uwkdk.top
2026-01-24 00:08
HTTP/1.1 200 OK Server: X Content-Type: text/html Content-Length: 2921 Last-Modified: Tue, 23 Dec 2025 03:09:06 GMT ETag: "694a07d2-b69" Access-Control-Max-Age: 864000 Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: * Accept-Ranges: bytes Expires: Sat, 24 Jan 2026 00:08:30 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 24 Jan 2026 00:08:30 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600 Connection: close Access-Control-Allow-Headers: * Access-Control-Allow-Methods: * Access-Control-Allow-Origin: * Page title: 茶颜悦色 <!doctype html><html lang="cn"><head><meta charset="UTF-8"/><meta content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0" name="viewport"/><link rel="icon" href="/favicon.ico" id="favicon"/><link rel="manifest" href="/manifest.json"/><link rel="apple-touch-icon" href="/icons/apple-icon.png"/><title>茶颜悦色</title><meta name="referrer" content="always"/><meta name="robots" content="index, follow"/><meta name="googlebot" content="index, follow"/><meta name="apple-touch-fullscreen" content="yes"><meta name="mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-capable" content="yes"/><meta name="apple-mobile-web-app-status-bar-style" content="black-translucent"/><meta name="apple-mobile-web-app-capable" content="yes"><script>window._MICHAT = window._MICHAT || function () { (_MICHAT.a = _MICHAT.a || []).push(arguments) }; _MICHAT("accountid", 146557); _MICHAT("domain", "kf.jieyouwu.com"); (function (m, d, q, j, s) { j = d.createElement(q),s = d.getElementsByTagName(q)[0]; j.async = true; j.charset ="UTF-8"; j.src = ("https:" == document.location.protocol ? "https://" : "http://") + "kf.jieyouwu.com/Web/JS/mivisit.js?_=t"; s.parentNode.insertBefore(j, s); })(window, document, "script");</script><script>var _paq = window._paq = window._paq || []; /* tracker methods like "setCustomDimension" should be called before "trackPageView" */ _paq.push(['setCustomDimension', 1, window.location.hostname.replace("www.", "")]); //qz24.app、gjtv8.vip、gjtv2.app… _paq.push(['trackPageView']); 主域名(不带参数，不带www) _paq.push(['trackPageView']); _paq.push(['enableLinkTracking']); (function () { var u = "https://mt.n3fxk.top/"; _paq.push(['setTrackerUrl', u + 'matomo.php']); _paq.push(['setSiteId', '31']); //目前分配的埋点编号如下：ONE游戏落地页=28，ONE游戏H5=27，ONE游戏PC=26，ONE游戏色站简约H5=25，ONE游戏导航页=29 var d = document, g = d.createElement('script'), s = d.getElementsByTagName('script')[0]; g.async = true; g.src = u + 'matomo.js'; s.parentNode.insertBefore(g, s); })();</script><noscript><p><img src="https://mt.n3fxk.top/matomo.php?idsite=27&rec=1" style="border:0" alt=""/></p></noscript><script type="module" crossorigin src="/static/index.6c6f73be.js"></script><link rel="stylesheet" href="/static/index.364c5a05.css"></head><body><div id="app"><style>.app-preloader{display:flex;flex-direction:column;align-items:center;justify-content:center;position:absolute;top:0;right:0;bottom:0;left:0;z-index:2;background:#fff3fb;color:#999}.app-preloader.light{background-color:#fff;color:#ddd}#MICHAT-FLOAT-WRAP{bottom:130px}</style><div class="app-preloader"><div class="app-preloader__label">Loading...</div></div></div></body></html>Found 2026-01-24 by HttpPluginCreate report
-
Open service 23.32.238.106:80 · 9uwkdk.top
2026-01-24 00:08
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://9uwkdk.top/ Expires: Sat, 24 Jan 2026 00:08:51 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 24 Jan 2026 00:08:51 GMT Connection: close Access-Control-Allow-Headers: * Access-Control-Allow-Methods: * Access-Control-Allow-Origin: *
Found 2026-01-24 by HttpPluginCreate report
-
Open service 23.32.238.106:443 · cdn.tuttosport.com
2026-01-11 12:00
HTTP/1.1 403 Forbidden x-amz-bucket-region: eu-west-1 x-amz-request-id: MXRTEJ1AVEJ3T0H7 x-amz-id-2: 4IzKDyWYpTnFW6GEc4O18CYz74Jr+Wqzluo6w2hjj7qdqVW0uvIRsJSKrMhPUsQslvxObX1Cyqbx6qhHdbJENbwaAKnw9EG3 Content-Type: application/xml Server: AmazonS3 Content-Length: 263 Cache-Control: max-age=2592000 Expires: Tue, 10 Feb 2026 12:00:04 GMT Date: Sun, 11 Jan 2026 12:00:04 GMT Connection: close Access-Control-Expose-Headers: Date,Etag,Cache-Control,Last-Modified,Akamai-Request-BC Access-Control-Allow-Headers: Content-Type,Origin,Accept,Cache-Control,skipjwtinterceptor Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * <?xml version="1.0" encoding="UTF-8"?> <Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>MXRTEJ1AVEJ3T0H7</RequestId><HostId>4IzKDyWYpTnFW6GEc4O18CYz74Jr+Wqzluo6w2hjj7qdqVW0uvIRsJSKrMhPUsQslvxObX1Cyqbx6qhHdbJENbwaAKnw9EG3</HostId></Error>
Found 2026-01-11 by HttpPluginCreate report
-
Open service 23.32.238.106:80 · cdn.tuttosport.com
2026-01-11 12:00
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://cdn.tuttosport.com/ Cache-Control: max-age=2592000 Expires: Tue, 10 Feb 2026 12:00:45 GMT Date: Sun, 11 Jan 2026 12:00:45 GMT Connection: close Access-Control-Expose-Headers: Date,Etag,Cache-Control,Last-Modified,Akamai-Request-BC Access-Control-Allow-Headers: Content-Type,Origin,Accept,Cache-Control,skipjwtinterceptor Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: *
Found 2026-01-11 by HttpPluginCreate report
-
Open service 23.32.238.106:443 · oms-kroger-webapp-da-classic-api-prod.przone.net
2026-01-09 12:46
HTTP/1.1 404 Not Found Content-Length: 0 Server: Microsoft-IIS/10.0 Request-Context: appId=cid-v1:e7669b0a-0160-4f89-968e-e278407ba1eb X-Powered-By: ASP.NET Date: Fri, 09 Jan 2026 12:46:50 GMT Connection: close Set-Cookie: ARRAffinity=62db18380e813d82256176a1fd6543a43d6a734e299ceadd8b272cc06a84c6bf;Path=/;HttpOnly;Secure;Domain=oms-kroger-webapp-da-classic-api-prod.przone.net Set-Cookie: ARRAffinitySameSite=62db18380e813d82256176a1fd6543a43d6a734e299ceadd8b272cc06a84c6bf;Path=/;HttpOnly;SameSite=None;Secure;Domain=oms-kroger-webapp-da-classic-api-prod.przone.net Access-Control-Allow-Origin: *
Found 2026-01-09 by HttpPluginCreate report
-
Open service 23.32.238.106:443 · oms-kroger-webapp-da-classic-api-prod.przone.net
2026-01-02 01:44
HTTP/1.1 404 Not Found Content-Length: 0 Server: Microsoft-IIS/10.0 Request-Context: appId=cid-v1:e7669b0a-0160-4f89-968e-e278407ba1eb X-Powered-By: ASP.NET Date: Fri, 02 Jan 2026 01:44:42 GMT Connection: close Access-Control-Allow-Origin: *
Found 2026-01-02 by HttpPluginCreate report
-
Open service 23.32.238.106:443 · oms-kroger-webapp-da-classic-api-prod.przone.net
2025-12-22 08:15
HTTP/1.1 404 Not Found Content-Length: 0 Server: Microsoft-IIS/10.0 Request-Context: appId=cid-v1:e7669b0a-0160-4f89-968e-e278407ba1eb X-Powered-By: ASP.NET Date: Mon, 22 Dec 2025 08:15:26 GMT Connection: close Access-Control-Allow-Origin: *
Found 2025-12-22 by HttpPluginCreate report