LeakIX - Host app.lotusbase.com

Domain app.lotusbase.com

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.50.2.68
Domain: app.lotusbase.com
Port: 443
URL: https://app.lotusbase.com

First seen 2026-01-10 21:27
Last seen 2026-02-09 18:25
Open for 29 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549ee654319c9b5645d70d102c96cef16bfcd17c8b2

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/List/deleteSelected
DELETE /api/List/{id}/person/{personId}
DELETE /api/Organization/{id}/persons/{personId}
DELETE /api/Person/{id}/organizations/{organizationId}
DELETE /api/User/{id}
GET /api/Account/authclientsettings
GET /api/Account/authclientsettings/demo
GET /api/Common/countries
GET /api/Common/gender
GET /api/Common/personimportfields
GET /api/Common/systemdata
GET /api/CustomField
GET /api/Info
GET /api/List
GET /api/List/functions
GET /api/List/{id}
GET /api/Notes
GET /api/Notes/organization/{id}
GET /api/Notes/person/{id}
GET /api/Notes/{id}
GET /api/Organization
GET /api/Organization/customfields
GET /api/Organization/{id}
GET /api/Person
GET /api/Person/customfields
GET /api/Person/{id}
GET /api/Person/{id}/relations/{relationId}
GET /api/Relationship
GET /api/SendEmail/list/{id}
GET /api/User
POST /api/Account/authorize
POST /api/Account/authorize/basic
POST /api/Export/list
POST /api/Export/person-data
POST /api/Export/persons
POST /api/Import/import
POST /api/Import/read-file
POST /api/List/archiveSelected
POST /api/List/unarchiveSelected
POST /api/List/{id}/copy
POST /api/Organization/DeleteSelected
POST /api/Person/DeleteSelected
POST /api/Person/{id}/relations
POST /api/Search
POST /api/Search/all
POST /api/SendEmail/selection
PUT /api/Account/setpassword
PUT /api/CustomField/{id}
PUT /api/List/{id}/addpersons
PUT /api/Organization/{id}/addperson
PUT /api/Person/{id}/addorganization

Found on 2026-02-09 18:25

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035495195586d597fc019d8514f4fd57e585f9f349d22

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/List/{id}/person/{personId}
DELETE /api/Organization/{id}/persons/{personId}
DELETE /api/Person/{id}/organizations/{organizationId}
DELETE /api/User/{id}
GET /api/Account/authclientsettings
GET /api/Account/authclientsettings/demo
GET /api/Common/countries
GET /api/Common/gender
GET /api/Common/personimportfields
GET /api/Common/systemdata
GET /api/CustomField
GET /api/Info
GET /api/List
GET /api/List/functions
GET /api/List/{id}
GET /api/Notes
GET /api/Notes/organization/{id}
GET /api/Notes/person/{id}
GET /api/Notes/{id}
GET /api/Organization
GET /api/Organization/customfields
GET /api/Organization/{id}
GET /api/Person
GET /api/Person/customfields
GET /api/Person/{id}
GET /api/Person/{id}/relations/{relationId}
GET /api/Relationship
GET /api/SendEmail/list/{id}
GET /api/User
POST /api/Account/authorize
POST /api/Account/authorize/basic
POST /api/Export/list
POST /api/Export/person-data
POST /api/Export/persons
POST /api/Import/import
POST /api/Import/read-file
POST /api/List/archiveSelected
POST /api/List/unarchiveSelected
POST /api/List/{id}/copy
POST /api/Organization/DeleteSelected
POST /api/Person/DeleteSelected
POST /api/Person/{id}/relations
POST /api/Search
POST /api/Search/all
POST /api/SendEmail/selection
PUT /api/Account/setpassword
PUT /api/CustomField/{id}
PUT /api/List/{id}/addpersons
PUT /api/Organization/{id}/addperson
PUT /api/Person/{id}/addorganization

Found on 2026-01-23 10:25

Create report

Open service 20.50.2.68:443 · app.lotusbase.com

2026-01-23 10:25

HTTP/1.1 200 OK
Content-Length: 46099
Connection: close
Content-Type: text/html
Date: Fri, 23 Jan 2026 10:25:45 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1dc694ff4852013"
Last-Modified: Tue, 09 Dec 2025 21:08:24 GMT
Strict-Transport-Security: max-age=2592000
Request-Context: appId=cid-v1:581a43cd-86f1-4bd9-9961-5d50d103434e

Page title: Lotusbase

<!doctype html>
<html lang="en" data-critters-container>
<head><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<style type="text/css">@font-face{font-family:'Material Icons';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2) format('woff2');}.material-icons{font-family:'Material Icons';font-weight:normal;font-style:normal;font-size:24px;line-height:1;letter-spacing:normal;text-transform:none;display:inline-block;white-space:nowrap;word-wrap:normal;direction:ltr;-webkit-font-feature-settings:'liga';-webkit-font-smoothing:antialiased;}</style>
<style type="text/css">@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;src:url(https://fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBHMdazTgWw.woff2) format('woff2');unicode-range:U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;src:url(https://fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBHMdazTgWw.woff2) format('woff2');unicode-range:U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;src:url(https://fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBHMdazTgWw.woff2) format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;src:url(https://fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBHMdazTgWw.woff2) format('woff2');unicode-range:U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;src:url(https://fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBHMdazTgWw.woff2) format('woff2');unicode-range:U+0302-0303, U+0305, U+0307-0308, U+0310, U+0312, U+0315, U+031A, U+0326-0327, U+032C, U+032F-0330, U+0332-0333, U+0338, U+033A, U+0346, U+034D, U+0391-03A1, U+03A3-03A9, U+03B1-03C9, U+03D1, U+03D5-03D6, U+03F0-03F1, U+03F4-03F5, U+2016-2017, U+2034-2038, U+203C, U+2040, U+2043, U+2047, U+2050, U+2057, U+205F, U+2070-2071, U+2074-208E, U+2090-209C, U+20D0-20DC, U+20E1, U+20E5-20EF, U+2100-2112, U+2114-2115, U+2117-2121, U+2123-214F, U+2190, U+2192, U+2194-21AE, U+21B0-21E5, U+21F1-21F2, U+21F4-2211, U+2213-2214, U+2216-22FF, U+2308-230B, U+2310, U+2319, U+231C-2321, U+2336-237A, U+237C, U+2395, U+239B-23B7, U+23D0, U+23DC-23E1, U+2474-2475, U+25AF, U+25B3, U+25B7, U+25BD, U+25C1, U+25CA, U+25CC, U+25FB, U+266D-266F, U+27C0-27FF, U+2900-2AFF, U+2B0E-2B11, U+2B30-2B4C, U+2BFE, U+3030, U+FF5B, U+FF5D, U+1D400-1D7FF, U+1EE00-1EEFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;src:url(https://fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBHMdazTgWw.woff2) format('woff2');unicode-range:U+0001-000C, U+000E-001F, U+007F-009F, U+20DD-20E0, U+20E2-20E4, U+2150-218F, U+2190, U+2192, U+2194-2199, U+21AF, U+21E6-21F0, U+21F3, U+2218-2219, U+2299, U+22C4-22C6, U+2300-243F, U+2440-244A, U+2460-24FF, U+25A0-27BF, U+2800-28FF, U+2921-2922, U+2981, U+29BF, U+29EB, U+2B00-2BFF, U+4DC0-4DFF, U+FFF9-FFFB, U+10140-1018E, U+10190-1019C, U+101A0, U+101D0-101FD, U+102E0-102FB, U+10E60-10E7E, U+1D2C0-1D2D3, U+1D2E0-1D37F, U+1F000-1F0FF, U+1F100-1F1AD, U+1F1E6-1F1FF, U+1F30D-1F30F, U+1F315, U+1F31C, U+1F31E, U+1F320-1F32C, U+1F336, U+1F378, U+1F37D, U+1F382, U+1F393-1F39F, U+1F3A7-1F3A8, U+1F3AC-1F3AF, U+1F3C2, U+1F3C4-1F3C6, U+1F3CA-1F3CE, U+1F3D4-1F3E0, U+1F3ED, U+1F3F1-1F3F3, U+1F3F5-1F3F7, U+1F408, U+1F415, U+1F41F, U+1F426, U+1F43F, U+1F441-1F442, U+1F444, U+1F446-1F449, U+1F44C-1F44E, U+1F453, U+1F46A, U+1F47D, U+1F4A3, U+1F4B0, U+1F4B3, U+1F4B9, U+1F4BB, U+1F4BF, U+1F4C8-1F4CB, U+1F4D6, U+1F4DA, U+1F4DF, U+1F4E3-1F4E6, U+1F4EA-1F4ED, U+1F4F7, U+1F4F9-1F4FB, U+1F4FD-1F4FE, U+1F503, U+1F507-1F50B, U+1F50D, U+1F512-1F513, U+1F53E-1F54A, U+1F54F-1F5FA, U+1F6

Found 2026-01-23 by HttpPlugin

Create report

Open service 20.50.2.68:443 · app.lotusbase.com

2026-01-10 21:27

HTTP/1.1 200 OK
Content-Length: 46099
Connection: close
Content-Type: text/html
Date: Sat, 10 Jan 2026 21:28:25 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1dc694ff4852013"
Last-Modified: Tue, 09 Dec 2025 21:08:24 GMT
Strict-Transport-Security: max-age=2592000
Request-Context: appId=cid-v1:581a43cd-86f1-4bd9-9961-5d50d103434e

Page title: Lotusbase

<!doctype html>
<html lang="en" data-critters-container>
<head><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<style type="text/css">@font-face{font-family:'Material Icons';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2) format('woff2');}.material-icons{font-family:'Material Icons';font-weight:normal;font-style:normal;font-size:24px;line-height:1;letter-spacing:normal;text-transform:none;display:inline-block;white-space:nowrap;word-wrap:normal;direction:ltr;-webkit-font-feature-settings:'liga';-webkit-font-smoothing:antialiased;}</style>
<style type="text/css">@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;src:url(https://fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBHMdazTgWw.woff2) format('woff2');unicode-range:U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;src:url(https://fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBHMdazTgWw.woff2) format('woff2');unicode-range:U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;src:url(https://fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBHMdazTgWw.woff2) format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;src:url(https://fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBHMdazTgWw.woff2) format('woff2');unicode-range:U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;src:url(https://fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBHMdazTgWw.woff2) format('woff2');unicode-range:U+0302-0303, U+0305, U+0307-0308, U+0310, U+0312, U+0315, U+031A, U+0326-0327, U+032C, U+032F-0330, U+0332-0333, U+0338, U+033A, U+0346, U+034D, U+0391-03A1, U+03A3-03A9, U+03B1-03C9, U+03D1, U+03D5-03D6, U+03F0-03F1, U+03F4-03F5, U+2016-2017, U+2034-2038, U+203C, U+2040, U+2043, U+2047, U+2050, U+2057, U+205F, U+2070-2071, U+2074-208E, U+2090-209C, U+20D0-20DC, U+20E1, U+20E5-20EF, U+2100-2112, U+2114-2115, U+2117-2121, U+2123-214F, U+2190, U+2192, U+2194-21AE, U+21B0-21E5, U+21F1-21F2, U+21F4-2211, U+2213-2214, U+2216-22FF, U+2308-230B, U+2310, U+2319, U+231C-2321, U+2336-237A, U+237C, U+2395, U+239B-23B7, U+23D0, U+23DC-23E1, U+2474-2475, U+25AF, U+25B3, U+25B7, U+25BD, U+25C1, U+25CA, U+25CC, U+25FB, U+266D-266F, U+27C0-27FF, U+2900-2AFF, U+2B0E-2B11, U+2B30-2B4C, U+2BFE, U+3030, U+FF5B, U+FF5D, U+1D400-1D7FF, U+1EE00-1EEFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;src:url(https://fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBHMdazTgWw.woff2) format('woff2');unicode-range:U+0001-000C, U+000E-001F, U+007F-009F, U+20DD-20E0, U+20E2-20E4, U+2150-218F, U+2190, U+2192, U+2194-2199, U+21AF, U+21E6-21F0, U+21F3, U+2218-2219, U+2299, U+22C4-22C6, U+2300-243F, U+2440-244A, U+2460-24FF, U+25A0-27BF, U+2800-28FF, U+2921-2922, U+2981, U+29BF, U+29EB, U+2B00-2BFF, U+4DC0-4DFF, U+FFF9-FFFB, U+10140-1018E, U+10190-1019C, U+101A0, U+101D0-101FD, U+102E0-102FB, U+10E60-10E7E, U+1D2C0-1D2D3, U+1D2E0-1D37F, U+1F000-1F0FF, U+1F100-1F1AD, U+1F1E6-1F1FF, U+1F30D-1F30F, U+1F315, U+1F31C, U+1F31E, U+1F320-1F32C, U+1F336, U+1F378, U+1F37D, U+1F382, U+1F393-1F39F, U+1F3A7-1F3A8, U+1F3AC-1F3AF, U+1F3C2, U+1F3C4-1F3C6, U+1F3CA-1F3CE, U+1F3D4-1F3E0, U+1F3ED, U+1F3F1-1F3F3, U+1F3F5-1F3F7, U+1F408, U+1F415, U+1F41F, U+1F426, U+1F43F, U+1F441-1F442, U+1F444, U+1F446-1F449, U+1F44C-1F44E, U+1F453, U+1F46A, U+1F47D, U+1F4A3, U+1F4B0, U+1F4B3, U+1F4B9, U+1F4BB, U+1F4BF, U+1F4C8-1F4CB, U+1F4D6, U+1F4DA, U+1F4DF, U+1F4E3-1F4E6, U+1F4EA-1F4ED, U+1F4F7, U+1F4F9-1F4FB, U+1F4FD-1F4FE, U+1F503, U+1F507-1F50B, U+1F50D, U+1F512-1F513, U+1F53E-1F54A, U+1F54F-1F5FA, U+1F6

Found 2026-01-10 by HttpPlugin

Create report

Open service 20.50.2.68:80 · app.lotusbase.com

2026-01-10 21:27

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Sat, 10 Jan 2026 21:28:26 GMT
Location: https://app.lotusbase.com/

Found 2026-01-10 by HttpPlugin

Create report

app.lotusbase.com

Fingerprint:

5ff5707ca084533900bb71be32570881e423432a738cf0de0a908e7cdc2482d4

CN:

app.lotusbase.com

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2026-01-10 00:00

Not after:

2026-04-14 23:59

app.lotusbase.com

Fingerprint:

45a942dc71dd4443f90f2cc0d6ca0d6199eef29b730e98aab9c9b292d2a6a8ab

CN:

app.lotusbase.com

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2025-08-23 00:00

Not after:

2026-02-23 23:59

Domain summary

app.lotusbase.com 4

1 recorded

IP summary

20.50.2.68 2

1 recorded