Host 23.36.162.149
Germany
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
IP: 23.36.162.149
Domain: energymea.economictimes.indiatimes.com
Port: 443
URL: https://energymea.economictimes.indiatimes.comFirst seen 2025-10-29 11:15
Last seen 2026-02-09 07:59
Open for 102 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2Public Swagger UI/API detected at path: /swagger.json - sample paths: GET /v1/{portal}/{entity}/details/{course_id} GET /v1/{portal}/{entity}/{type}/{region}Found on 2026-02-09 07:59
-
-
Open service 23.36.162.149:443 · energymea.economictimes.indiatimes.com
2026-02-09 07:59
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 09 Feb 2026 07:59:47 GMT Content-Language: en Access-Control-Allow-Credentials: true X-Frame-Options: sameorigin Strict-Transport-Security: max-age=25920000; includeSubdomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Expires: Mon, 09 Feb 2026 07:59:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 09 Feb 2026 07:59:48 GMT Alt-Svc: h3=":443"; ma=93600 Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: energymea_pop_user_sub=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: ab-chdk1=A; expires=Sun, 10-May-2026 07:59:48 GMT x-frame-options: SAMEORIGIN
Found 20 hours ago by HttpPluginCreate report
-
Open service 23.36.162.149:443 · energymea.economictimes.indiatimes.com
2026-01-09 17:48
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Access-Control-Allow-Origin: * Last-Modified: Fri, 09 Jan 2026 17:46:36 GMT Content-Language: en Access-Control-Allow-Credentials: true X-Frame-Options: sameorigin Strict-Transport-Security: max-age=25920000; includeSubdomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Expires: Fri, 09 Jan 2026 17:48:29 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 09 Jan 2026 17:48:29 GMT Alt-Svc: h3=":443"; ma=93600 Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: ab-chdk1=B; expires=Thu, 09-Apr-2026 17:48:29 GMT x-frame-options: SAMEORIGIN
Found 2026-01-09 by HttpPluginCreate report
-
Open service 23.36.162.149:443 · energymea.economictimes.indiatimes.com
2026-01-02 10:20
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Access-Control-Allow-Origin: * Last-Modified: Fri, 02 Jan 2026 10:20:10 GMT X-Cool: 55.27 Content-Language: en Access-Control-Allow-Credentials: true X-Frame-Options: sameorigin Strict-Transport-Security: max-age=25920000; includeSubdomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Expires: Fri, 02 Jan 2026 10:20:52 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 02 Jan 2026 10:20:52 GMT Alt-Svc: h3=":443"; ma=93600 Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: ab-chdk1=B; expires=Thu, 02-Apr-2026 10:20:52 GMT x-frame-options: SAMEORIGIN
Found 2026-01-02 by HttpPluginCreate report
-
Open service 23.36.162.149:443 · energymea.economictimes.indiatimes.com
2025-12-22 21:40
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 22 Dec 2025 21:40:05 GMT X-Cool: 22.55 Content-Language: en Access-Control-Allow-Credentials: true X-Frame-Options: sameorigin Strict-Transport-Security: max-age=25920000; includeSubdomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Expires: Mon, 22 Dec 2025 21:40:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 21:40:39 GMT Alt-Svc: h3=":443"; ma=93600 Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: ab-chdk1=B; expires=Sun, 22-Mar-2026 21:40:39 GMT x-frame-options: SAMEORIGIN
Found 2025-12-22 by HttpPluginCreate report