LeakIX - Host coremetadataapi.fefundinfo.com

Domain coremetadataapi.fefundinfo.com

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.232.52
Domain: coremetadataapi.fefundinfo.com
Port: 443
URL: https://coremetadataapi.fefundinfo.com

First seen 2025-11-13 13:13
Last seen 2026-02-09 17:47
Open for 88 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb4d8cb068641e2d9fffdccedf39e7ecc227b7bb5f3
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /changesets/{changesetId}
GET /data-update-requests/{requestId}
GET /{correlationId}/ingestion-results
GET /{requestId}/changesets/{changesetId}
GET /{requestId}/field-updates
GET /{requestId}/fields
GET /{requestId}/files
GET /{requestId}/ingestion/errors
GET /{requestId}/request-validations
GET /{requestId}/source-details
GET /{requestId}/traces
POST /data-update-requests
```
  Found on 2026-02-09 17:47
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb4d8cb068641e2d9fffdccedf3121106d8b44ab122
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /changesets/{changesetId}
GET /data-update-requests/{requestId}
GET /{correlationId}/ingestion-results
GET /{requestId}/field-updates
GET /{requestId}/fields
GET /{requestId}/files
GET /{requestId}/ingestion/errors
GET /{requestId}/request-validations
GET /{requestId}/source-details
GET /{requestId}/traces
POST /data-update-requests
```
  Found on 2025-12-26 22:22
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.232.52
Domain: coremetadataapi.fefundinfo.com
Port: 80
URL: http://coremetadataapi.fefundinfo.com

First seen 2025-11-13 13:13
Last seen 2026-01-16 08:48
Open for 63 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb4d8cb068641e2d9fffdccedf39e7ecc227b7bb5f3
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /changesets/{changesetId}
GET /data-update-requests/{requestId}
GET /{correlationId}/ingestion-results
GET /{requestId}/changesets/{changesetId}
GET /{requestId}/field-updates
GET /{requestId}/fields
GET /{requestId}/files
GET /{requestId}/ingestion/errors
GET /{requestId}/request-validations
GET /{requestId}/source-details
GET /{requestId}/traces
POST /data-update-requests
```
  Found on 2026-01-16 08:48
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb4d8cb068641e2d9fffdccedf3121106d8b44ab122
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /changesets/{changesetId}
GET /data-update-requests/{requestId}
GET /{correlationId}/ingestion-results
GET /{requestId}/field-updates
GET /{requestId}/fields
GET /{requestId}/files
GET /{requestId}/ingestion/errors
GET /{requestId}/request-validations
GET /{requestId}/source-details
GET /{requestId}/traces
POST /data-update-requests
```
  Found on 2026-01-02 15:43
Create report

Open service 20.105.232.52:443 · coremetadataapi.fefundinfo.com

2026-01-23 13:49

HTTP/1.1 200 OK
Content-Length: 149794
Connection: close
Content-Type: text/html
Date: Fri, 23 Jan 2026 13:50:06 GMT
Server: Kestrel
Request-Context: appId=cid-v1:22e41da7-0de2-419c-bd92-aedd4173fae0

Page title: Your Azure Function App is up and running.

<!DOCTYPE html>
<html>
<head>
    <title>Your Azure Function App is up and running.</title>
    <style type="text/css">
        @font-face {
            font-family: 'SegoeLight';
            src: url(//:) format('no404'), url(data:font/woff;charset=utf-8;base64,d09GRgABAAAAAFbcABAAAAAAjewAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABGRlRNAAABbAAAABsAAAAcWqtaPUdERUYAAAGIAAAAHQAAACABGAADT1MvMgAAAagAAABYAAAAYGrqcLZjbWFwAAACAAAAAaIAAAIKczqUA2N2dCAAAAOkAAAATAAAAEwOEAwRZnBnbQAAA/AAAAGxAAACZQ+0L6dnYXNwAAAFpAAAAAwAAAAMAAMAB2dseWYAAAWwAABJAAAAe3CDYeDNaGVhZAAATrAAAAAxAAAANvjlJxhoaGVhAABO5AAAACAAAAAkDm4GkWhtdHgAAE8EAAACNgAAA6yU7F4gbG9jYQAAUTwAAAHOAAAB2DtSXCptYXhwAABTDAAAACAAAAAgAg8B1G5hbWUAAFMsAAAA5wAAAZ4hIT5EcG9zdAAAVBQAAAH4AAAC+Je8aS1wcmVwAABWDAAAAM8AAAFulHbF13jaY2BgYGQAguP/NtwH0SfDQtZA6Y0AWbsHmQB42mNgZGBg4ANiCQYQYGIA8V8BSRYwjwEADksBHAAAAHjaY2BmfsOow8DKwMI6i9WYgYFhBYRmkmZIY0rjYGLiZmZiYWVhYmJewMC03oFBIZoBCnyDFRSAlMJvFra0f2kMDOzpTJxAgfkgORYG1lkgOQZGAGSzDHF42mNgYGBmgGAZBkYgycDIAuQxgvksDC+AtBmDApAlxlDH8J/RkDGYsYLpGNMtpjssbCwcLGEsEQpcCiIKUgpyCkoKagr6ClYK8QprFJUeMPxm+s3y/z9QvwLDAqC+IAx9DAoCChIKMlB9lnB9jCB9/x//P/R/4v/C/77/GP6+/fvmj9of1d/ffn99cPLBkQcHHxx4sPfBrgebHqx80PrA8v4Rheesz1mfQdxPDmBkY4BrZmQCEkzoCoBBxMLKxs7BycXNw8vHLyAoJCwiKiYuISklLSMrJ6+gqKSsoqqmrqGppa2jq6dvYGhkbGJqZm5haWVtY2tn7+Do5Ozi6ubu4enl7ePr5x8QGBQcEhoWHhEZFR0TGxefkMjQ1t7ZPXnGvMWLlixbunzl6lVr1q5ft2Hj5q1btu3Yvmf33n0MRSmpmfcrFhZkPyvLYuiYxVDMwJBeDnZdTg3Dil2NyXkgdm7tg6Sm1umHj1y/cefuzVs7GQ4eZXj66PGLlwyVt+8xtPQ093b1T5jYN3Uaw5Q5c2cfOnaikIHheBVQIwDe55fTAAD+KQAABAAFmgXpAFQAIQAnAFMAWgBbAFwAYABiAGYAeQCYAGMAXABjAGcAbABwAHcAgQCFAIsAmgBOAEkAVgBRAF4AagBMAEcARABYeNpdUbtOW0EQ3Q0PA4HE2CA52hSzmZAC74U2SCCuLsLIdmM5QtqNXORiXMAHUCBRg/ZrBmgoU6RNg5ALJD6BT4iUmTWJojQ7O7NzzpkzS8qRqndpveepcxZI4W6DZpt+J6TaRYAH0vWNRkbawSMtNjN65bp9v4/BZjTlThpAec9bykNG006gFu25fzI/g+E+/8s8B4OWZpqeWmchPYTAfDNuafA1o1l3/UFfsTpcDQaGFNNU3PXHVMr/luZcbRm2NjOad3AhIj+YBmhqrY1A0586pHo+jmIJcvlsrA0mpqw/yURwYTJd1VQtM752cJ/sLDrYpEpz4AEOsFWegofjowmF9C2JMktDhIPYKjFCxCSHQk45d7I/KVA+koQxb5LSzrhhrYFx5DUwqM3THL7MZlPbW4cwfhFH8N0vxpIOPrKhNkaE2I5YCmACkZBRVb6hxnMviwG51P4zECVgefrtXycCrTs2ES9lbZ1jjBWCnt823/llxd2qXOdFobt3VTVU6ZTmQy9n3+MRT4+F4aCx4M3nfX+jQO0NixsNmgPBkN6N3v/RWnXEVd4LH9lvNbOxFgAAAAAAAAIABAAC//8AA3jaxX0JfBRV8v97fcx99RyZ3MlkcgAhCcwQwogIKguoyCIbkUXEyH2oCAjKsojIIiIiIoqIiKjIIrps92RUjIhBLvEGJayLeCsGFd1d1pVjOv+q93omw6G7+/v//p8/fDLT83qm+7169aq+Va+qmgjkdkLE24WjRCRmUk3ihJJKTXK3quYajbpbqWqpUUmLJmW3qpJHk2mlJma3alZaSbp0jSohpSykhG4XSfJ2gehEOJr03k6PEkIE8l7bUTpDXgXXdZMLSVzC69o8rXFBJJVU9dSo5hbNmdeKf43UabZUasTbqilwA0IVrybZYjGiCTbFq5JYl640LEbFkvLabt2jkayA30QHDrVNipZUV5eUdOlCl0vmE/U1JeGqqnBJDdz7WfEDQWL3NpPuJG6CW6pCNCF7iE2qVEmEjUpuSUhe0g0aYGCUViYI+2SMDW/I/k4MtDXoOryIH9Btem+6Da5fS2ZLs+H6eaSI9iTxAFw/7s/OiUajca9AKht9WcHc0mBUUywwNk9+UWkwojprGmWL1YHNLmgW3AWF0EzV4hotRCvV7rlNF9z/98UkUGlT/dUu1d4sa4H84y7V1tx0wdK/z8UTspoNZ8xwJgfPmJpl1eRppKYcX2WjwF5lfFXNnkaLORsObJ5Gqy0AB3ZPo8Puhy+42auHvfrwFb+Txb4DvwqyX8E1c9l14FQ+nmosSH2hEL/QWISvImk0mW32avhH+2RTQTaZLVab3eH2+PyBrGB2Tm5+QWFR9c/8U/vkIpFDYsgcEsM+9lcXYn9Rkf3J8CZN0H8YSAu8+pdDBw/Vj+HLlz6aPVA/6KMlwwYPo85hg39Lfcl5A6ljoBjX1w/Sp9Kl+DeIDh9EV+nj8G+Qvp4OB54UyRNtNeIc0yBSQEpJJZlE4iJwpUqimkVuVcsjcdFiq2zsIwpW4NDONaqjRZUjWkhpVUMeZIu44C6MRCKJMsYocaIE4VO8zIo/KvNbK9Uyj9YRGDhPadWqgIs0iwjsKwP7lgXCtSUVtVlRpZoCD9fVRgORYKA8rBRSYGbRBa9ZRVS5AE6WC3WDtixe+eedd6gPDVp5/fhHN9/7TOvk349YPGjazddJ+/cOHjdKGDr1yal3vR58PlE5/vzk42Ofnn7PVrmDcu+EYfMGP5Q86F943QhY1UQmQ9o+lnX5eWInQeDVChIlr5N4Pq7Eakur2qFGK4E3UqN54c1Ro5kssN671ahii+b2tqpuj5YDo8mG8Wd7tAAcWqHV6tGK4LASDis9Wi4frprn0brCYRks4VrOzXVlH/8BmVZSc6rVvGo1x6Nly8fxi7nycaER+CPPYASqZefAiveSWEwNKJrDFItpebmKtzG/pEN1aRDEQIdqOF9UBu0OLxyJ1hiKhAxxIJaYgILRSHegnximp4mKzHN0zar4yw+vUF9YNn3BvKnT5t0+fbR4bcOghxubV2DjtDvnTZ0+73bhg9cf//P2Vzet3issfnjRvJWr5y9ZemK2/OKJX7/+uPbqjj9B+z2rF85b+cgfltzH+GpJ22F5thwHGpeTGnKMxPM4XzH+0qrl1rgTRIRWIgN9u9SophatUmHksyHN4LCME9UDhx6PFuRUbyTZQRCLebmtSFuk6Xsd9l2FNHWpxKN2bAZiqvnNakeQAR0JLNB8T6MvPw8WaIC95uIrnq3As3E4VXx38d1hk0vxAqFjam4sDmfwA42R56kvkJtf0dFYn/SMz2yaispgUkSnhU9KCUxKo8nmCcKnLl1DFaYQEN1T1k54cxbtXhcVzFbK+DqM80BJhcRmQ/p22x79yHvf0oFP7Fy9dN36+ApaMsfSYH6MKqc2b1p02zVT7xSG6olF+v5X/vjllv0fbKD+B156ZPG2J29btO2Kx/Tvmn7S/

Found 2026-01-23 by HttpPlugin

Create report

Open service 20.105.232.52:80 · coremetadataapi.fefundinfo.com

2026-01-23 11:38

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Fri, 23 Jan 2026 11:39:29 GMT
Location: https://coremetadataapi.fefundinfo.com/

Found 2026-01-23 by HttpPlugin

Create report

coremetadataapi.fefundinfo.com

Fingerprint:

5a12026964b465bd50c2dbc86995170979e508d04e5a39e45d7e1de51847a49a

CN:

coremetadataapi.fefundinfo.com

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2025-11-13 00:00

Not after:

2026-04-14 23:59

Domain summary

coremetadataapi.fefundinfo.com 5

1 recorded

IP summary

20.105.232.52 2

1 recorded

Domain coremetadataapi.fefundinfo.com

The Netherlands

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Create report

Create report

coremetadataapi.fefundinfo.com

Domain summary

IP summary