Domain admin.mrdoctor.com.br
Brazil
Software information
Microsoft-IIS 10.0
tcp/443
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2026-01-14 11:47
Last seen 2026-02-02 12:59
Open for 19 days-
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532cPublic Swagger UI/API detected at path: /swagger/index.html
Found on 2026-02-02 12:59
-
-
Open service 191.235.90.70:443 · admin.mrdoctor.com.br
2026-01-22 19:27
HTTP/1.1 200 OK Content-Length: 1688 Connection: close Content-Type: text/html Date: Thu, 22 Jan 2026 19:27:52 GMT Server: Microsoft-IIS/10.0 Accept-Ranges: bytes ETag: "1dc0663b146aa98" Last-Modified: Tue, 05 Aug 2025 23:50:16 GMT Set-Cookie: ARRAffinity=6d7641038bd0c35b7a533611db4ed7e97794a43782cc876a1e95d1a7c4df6688;Path=/;HttpOnly;Secure;Domain=admin.mrdoctor.com.br Set-Cookie: ARRAffinitySameSite=6d7641038bd0c35b7a533611db4ed7e97794a43782cc876a1e95d1a7c4df6688;Path=/;HttpOnly;SameSite=None;Secure;Domain=admin.mrdoctor.com.br Strict-Transport-Security: max-age=2592000 X-Powered-By: ASP.NET Page title: Mr.Doctor - Sistema para Gerenciamento de Clínicas <!doctype html> <html lang="pt-BR" dir="ltr"> <head> <meta charset="utf-8"> <title>Mr.Doctor - Sistema para Gerenciamento de Clínicas</title> <base href="/"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" name="viewport"> <meta name="author" content=""> <meta name="description" content=""> <link rel="shortcut icon" type="image/x-icon" href="assets/images/favicon.png"> <!-- Fontes --> <link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet"> <!-- <link href="https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap" rel="stylesheet"> --> <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.8.2/css/all.css" integrity="sha384-oS3vJWv+0UjzBfQzYUhtDYW+Pj2yciDJxpsK1OYPAYjqT085Qq/1cq5FLXAZQ7Ay" crossorigin="anonymous"> <link type="text/css" rel="stylesheet" media="screen,projection" href="assets/flaticon/flaticon.css" /> <link rel="stylesheet" href="styles.bca25e962570eb2462a8.css"></head> <body> <app-root></app-root> <script src="runtime-es2015.bc2605eda0b28c791dec.js" type="module"></script><script src="runtime-es5.bc2605eda0b28c791dec.js" nomodule defer></script><script src="polyfills-es5.264f1fcc8ec66a7a1f22.js" nomodule defer></script><script src="polyfills-es2015.875e4ccc05c3886b5614.js" type="module"></script><script src="scripts.7cd50282395bd7da0bed.js" defer></script><script src="main-es2015.b0b74625869bdedd428e.js" type="module"></script><script src="main-es5.b0b74625869bdedd428e.js" nomodule defer></script></body> </html>
Found 2026-01-22 by HttpPluginCreate report