LeakIX - Host app.dev.safemepro.com

Domain app.dev.safemepro.com

United States

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Microsoft-IIS 10.0

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.119.16.27
Domain: app.dev.safemepro.com
Port: 443
URL: https://app.dev.safemepro.com

First seen 2025-12-20 15:59
Last seen 2026-01-16 12:16
Open for 26 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-16 12:16
Create report

Open service 20.119.16.27:443 · app.dev.safemepro.com

2026-01-09 08:47

HTTP/1.1 200 OK
Content-Length: 1828
Connection: close
Content-Type: text/html
Date: Fri, 09 Jan 2026 08:48:29 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "1dbc5b02d26e724"
Last-Modified: Thu, 15 May 2025 15:44:00 GMT
Set-Cookie: ARRAffinity=83f477dd416a02e7098af476ed0a948def36416abf80be1822605eec61dab39e;Path=/;HttpOnly;Secure;Domain=app.dev.safemepro.com
Set-Cookie: ARRAffinitySameSite=83f477dd416a02e7098af476ed0a948def36416abf80be1822605eec61dab39e;Path=/;HttpOnly;SameSite=None;Secure;Domain=app.dev.safemepro.com
Request-Context: appId=cid-v1:fde52228-2a01-49aa-a1ec-e64ca3436729
X-Powered-By: ASP.NET

Page title: SafeMe Pro

<!DOCTYPE html>
<html>

<head>
  <!--
    If you are serving your web app in a path other than the root, change the
    href value below to reflect the base path you are serving from.

    The path provided below has to start and end with a slash "/" in order for
    it to work correctly.

    For more details:
    * https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base

    This is a placeholder for base href that will be replaced by the value of
    the `--base-href` argument provided to `flutter build`.
  -->
  <base href="/">

  <meta charset="UTF-8">
  <meta content="IE=Edge" http-equiv="X-UA-Compatible">
  <meta name="description" content="Your readiness tool">

  <!-- iOS meta tags & icons -->
  <meta name="apple-mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-status-bar-style" content="black">
  <meta name="apple-mobile-web-app-title" content="safeme_app">
  <link rel="apple-touch-icon" href="icons/Icon-192.png">

  <!-- Favicon -->
  <link rel="icon" type="image/png" href="favicon.png" />

  <title>SafeMe Pro</title>
  <link rel="manifest" href="manifest.json">
  <!-- This is used by google_maps_flutter package. the key is not a secret so we can leave it here-->
  <script src="https://maps.googleapis.com/maps/api/js?key=AIzaSyAbE6qyL5x3Bgc-BkN8P72mPgVA3J5sV-Y"></script>

</head>

<body>
  <script src="https://cdn.jsdelivr.net/npm/pdfjs-dist@2.12.313/build/pdf.js" type="text/javascript"></script>
  <script type="text/javascript">
    pdfjsLib.GlobalWorkerOptions.workerSrc = "https://cdn.jsdelivr.net/npm/pdfjs-dist@2.12.313/build/pdf.worker.min.js";
    pdfRenderOptions = {
      cMapUrl: 'https://cdn.jsdelivr.net/npm/pdfjs-dist@2.12.313/cmaps/',
      cMapPacked: true,
    }
  </script>
  <script src="flutter_bootstrap.js" async></script>
</body>

</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 20.119.16.27:443 · app.dev.safemepro.com

2026-01-02 08:38

HTTP/1.1 200 OK
Content-Length: 1828
Connection: close
Content-Type: text/html
Date: Fri, 02 Jan 2026 08:38:01 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "1dbc5b02d26e724"
Last-Modified: Thu, 15 May 2025 15:44:00 GMT
Set-Cookie: ARRAffinity=83f477dd416a02e7098af476ed0a948def36416abf80be1822605eec61dab39e;Path=/;HttpOnly;Secure;Domain=app.dev.safemepro.com
Set-Cookie: ARRAffinitySameSite=83f477dd416a02e7098af476ed0a948def36416abf80be1822605eec61dab39e;Path=/;HttpOnly;SameSite=None;Secure;Domain=app.dev.safemepro.com
Request-Context: appId=cid-v1:fde52228-2a01-49aa-a1ec-e64ca3436729
X-Powered-By: ASP.NET

Page title: SafeMe Pro

<!DOCTYPE html>
<html>

<head>
  <!--
    If you are serving your web app in a path other than the root, change the
    href value below to reflect the base path you are serving from.

    The path provided below has to start and end with a slash "/" in order for
    it to work correctly.

    For more details:
    * https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base

    This is a placeholder for base href that will be replaced by the value of
    the `--base-href` argument provided to `flutter build`.
  -->
  <base href="/">

  <meta charset="UTF-8">
  <meta content="IE=Edge" http-equiv="X-UA-Compatible">
  <meta name="description" content="Your readiness tool">

  <!-- iOS meta tags & icons -->
  <meta name="apple-mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-status-bar-style" content="black">
  <meta name="apple-mobile-web-app-title" content="safeme_app">
  <link rel="apple-touch-icon" href="icons/Icon-192.png">

  <!-- Favicon -->
  <link rel="icon" type="image/png" href="favicon.png" />

  <title>SafeMe Pro</title>
  <link rel="manifest" href="manifest.json">
  <!-- This is used by google_maps_flutter package. the key is not a secret so we can leave it here-->
  <script src="https://maps.googleapis.com/maps/api/js?key=AIzaSyAbE6qyL5x3Bgc-BkN8P72mPgVA3J5sV-Y"></script>

</head>

<body>
  <script src="https://cdn.jsdelivr.net/npm/pdfjs-dist@2.12.313/build/pdf.js" type="text/javascript"></script>
  <script type="text/javascript">
    pdfjsLib.GlobalWorkerOptions.workerSrc = "https://cdn.jsdelivr.net/npm/pdfjs-dist@2.12.313/build/pdf.worker.min.js";
    pdfRenderOptions = {
      cMapUrl: 'https://cdn.jsdelivr.net/npm/pdfjs-dist@2.12.313/cmaps/',
      cMapPacked: true,
    }
  </script>
  <script src="flutter_bootstrap.js" async></script>
</body>

</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 20.119.16.27:443 · app.dev.safemepro.com

2025-12-22 16:19

HTTP/1.1 200 OK
Content-Length: 1828
Connection: close
Content-Type: text/html
Date: Mon, 22 Dec 2025 16:19:46 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "1dbc5b02d26e724"
Last-Modified: Thu, 15 May 2025 15:44:00 GMT
Set-Cookie: ARRAffinity=83f477dd416a02e7098af476ed0a948def36416abf80be1822605eec61dab39e;Path=/;HttpOnly;Secure;Domain=app.dev.safemepro.com
Set-Cookie: ARRAffinitySameSite=83f477dd416a02e7098af476ed0a948def36416abf80be1822605eec61dab39e;Path=/;HttpOnly;SameSite=None;Secure;Domain=app.dev.safemepro.com
Request-Context: appId=cid-v1:fde52228-2a01-49aa-a1ec-e64ca3436729
X-Powered-By: ASP.NET

Page title: SafeMe Pro

<!DOCTYPE html>
<html>

<head>
  <!--
    If you are serving your web app in a path other than the root, change the
    href value below to reflect the base path you are serving from.

    The path provided below has to start and end with a slash "/" in order for
    it to work correctly.

    For more details:
    * https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base

    This is a placeholder for base href that will be replaced by the value of
    the `--base-href` argument provided to `flutter build`.
  -->
  <base href="/">

  <meta charset="UTF-8">
  <meta content="IE=Edge" http-equiv="X-UA-Compatible">
  <meta name="description" content="Your readiness tool">

  <!-- iOS meta tags & icons -->
  <meta name="apple-mobile-web-app-capable" content="yes">
  <meta name="apple-mobile-web-app-status-bar-style" content="black">
  <meta name="apple-mobile-web-app-title" content="safeme_app">
  <link rel="apple-touch-icon" href="icons/Icon-192.png">

  <!-- Favicon -->
  <link rel="icon" type="image/png" href="favicon.png" />

  <title>SafeMe Pro</title>
  <link rel="manifest" href="manifest.json">
  <!-- This is used by google_maps_flutter package. the key is not a secret so we can leave it here-->
  <script src="https://maps.googleapis.com/maps/api/js?key=AIzaSyAbE6qyL5x3Bgc-BkN8P72mPgVA3J5sV-Y"></script>

</head>

<body>
  <script src="https://cdn.jsdelivr.net/npm/pdfjs-dist@2.12.313/build/pdf.js" type="text/javascript"></script>
  <script type="text/javascript">
    pdfjsLib.GlobalWorkerOptions.workerSrc = "https://cdn.jsdelivr.net/npm/pdfjs-dist@2.12.313/build/pdf.worker.min.js";
    pdfRenderOptions = {
      cMapUrl: 'https://cdn.jsdelivr.net/npm/pdfjs-dist@2.12.313/cmaps/',
      cMapPacked: true,
    }
  </script>
  <script src="flutter_bootstrap.js" async></script>
</body>

</html>

Found 2025-12-22 by HttpPlugin

Create report

app.dev.safemepro.com

Fingerprint:

763df2bbe63091b3565147a185ceb671f12fa67a0aec9ece6fea84611d0549e8

CN:

app.dev.safemepro.com

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2025-12-14 00:00

Not after:

2026-04-14 23:59

Domain summary

app.dev.safemepro.com 3

1 recorded

IP summary

20.119.16.27 2

1 recorded

Domain app.dev.safemepro.com

United States

Software information

Swagger API description is publicly available

Create report

Create report

Create report

app.dev.safemepro.com

Domain summary

IP summary