LeakIX - Host dotconnect.vc

Domain dotconnect.vc

United States

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Caddy

tcp/443 tcp/80

Kestrel Kestrel

tcp/443

cloudflare

tcp/443 tcp/80 tcp/8443

nginx nginx

tcp/443

nginx nginx 1.25.3

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 34.116.159.62
Domain: dev.data.analytics.dotconnect.vc
Port: 443
URL: https://dev.data.analytics.dotconnect.vc

First seen 2025-10-25 10:16
Last seen 2026-01-16 08:24
Open for 82 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354972994ef423d327490876e8d14775b9d017145965

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /GetDeploymentDescriptorsRequest
GET /GetGeospatialRevisionDataFileUploadInfoRequest
GET /GetGeospatialRevisionDataRequest
GET /GetGeospatialRevisionsRequest
GET /GetOperatorsRequest
GET /GetWarsawNoticeRequest
GET /GetWarsawPaymentsRequest
GET /GetWarsawResidentsRequest
GET /GetWarsawSignsRequest
GET /PerformWarsawDatabaseSyncRequest
GET /QueryAlprDeviceRecognitionsRequest
GET /QueryDeviceScanningSessionsRequest
GET /QueryGpsDataRequest
GET /QueryNegativePolygonsRequest
GET /QueryParkingPolygonsRequest
GET /QueryRfidDeviceRecognitionsRequest
GET /QueryRoadSignDeviceRecognitionsRequest
GET /QueryStreetsRequest
GET /QueryVehicleGpsDataRequest
GET /QueryWeatherRecordsRequest
GET /QueryZonesRequest
POST /CreateDeploymentDescriptorRequest
POST /CreateDeviceDescriptorRequest
POST /CreateGeospatialRevisionRequest
POST /DeleteGeospatialRevisionRequest
POST /DeleteRoutesPlannerRequest
POST /GetRoutePlannerDataRequest
POST /GetRoutesPlannerRequest
POST /GetWarsawWhitelistRequest
POST /MigrateDatabasesRequest
POST /UpdateDeploymentRequest
POST /UpdateGeospatialRevisionRequest
POST /UpdateRoutePlannerTitleRequest
POST /UploadAlprDeviceRecognitionsRequest
POST /UploadDeviceGpsDataBatchRequest
POST /UploadOperatorEventsRequest
POST /UploadRfidDeviceRecognitionsRequest
POST /UploadRoadSignDeviceRecognitionsRequest
POST /UploadRoutePlannerRequest
POST /UploadWarsawSignsRequest

Found on 2026-01-16 08:24

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354972994ef423d327490876e8d14775b9d063643981

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /GetDeploymentDescriptorsRequest
GET /GetGeospatialRevisionDataFileUploadInfoRequest
GET /GetGeospatialRevisionDataRequest
GET /GetGeospatialRevisionsRequest
GET /GetOperatorsRequest
GET /GetWarsawNoticeRequest
GET /GetWarsawPaymentsRequest
GET /GetWarsawResidentsRequest
GET /GetWarsawSignsRequest
GET /PerformWarsawDatabaseSyncRequest
GET /QueryAlprDeviceRecognitionsRequest
GET /QueryDeviceScanningSessionsRequest
GET /QueryGpsDataRequest
GET /QueryNegativePolygonsRequest
GET /QueryParkingPolygonsRequest
GET /QueryRfidDeviceRecognitionsRequest
GET /QueryRoadSignDeviceRecognitionsRequest
GET /QueryStreetsRequest
GET /QueryVehicleGpsDataRequest
GET /QueryWeatherRecordsRequest
GET /QueryZonesRequest
POST /CreateDeploymentDescriptorRequest
POST /CreateDeviceDescriptorRequest
POST /CreateGeospatialRevisionRequest
POST /DeleteGeospatialRevisionRequest
POST /GetWarsawWhitelistRequest
POST /MigrateDatabasesRequest
POST /UpdateDeploymentRequest
POST /UpdateGeospatialRevisionRequest
POST /UploadAlprDeviceRecognitionsRequest
POST /UploadDeviceGpsDataBatchRequest
POST /UploadOperatorEventsRequest
POST /UploadRfidDeviceRecognitionsRequest
POST /UploadRoadSignDeviceRecognitionsRequest
POST /UploadWarsawSignsRequest

Found on 2025-11-12 17:06

Create report

GraphQL introspection is enabled.

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 146.59.11.23
Domain: gitlab.dotconnect.vc
Port: 443
URL: https://gitlab.dotconnect.vc

First seen 2025-11-20 23:13
Last seen 2026-02-02 01:33
Open for 73 days
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
```
GraphQL introspection enabled at /api/graphql
```
  Found on 2026-02-02 01:33
- Severity: medium
  Fingerprint: c2db3a1c40d490db2337d3d603073f8703073f8703073f8703073f8703073f87
```
GraphQL introspection enabled at /api/graphql
Detected: GitLab
```
  Found on 2026-01-23 14:39
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 34.116.159.62
Domain: dev.reporting.analytics.dotconnect.vc
Port: 443
URL: https://dev.reporting.analytics.dotconnect.vc

First seen 2025-10-22 21:16
Last seen 2026-02-01 22:42
Open for 102 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035491d2c1dcd59f1c675c91943c5ba88571d6d332d1a

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /GetAnalysesRequest
GET /GetAnalysisRequest
GET /GetAnalyticsArtifactRequest
GET /GetAnalyticsReportRequest
GET /GetChildUsersRequest
GET /GetDeploymentDetailsRequest
GET /GetDeploymentsRequest
GET /GetLibraryDeploymentsRequest
GET /GetLibraryVersionsRequest
GET /GetMyResourcesRequest
GET /GetReportKindsPresentOnDeploymentRequest
GET /RequestArtifactAccessUrlRequest
GET /UpdateWarsawFinesReportWithNewNoticeDataRequest
POST /AddAnalysisNotificationSubscriberRequest
POST /AddDataSourceToDeploymentRequest
POST /AddUserToDeploymentRequest
POST /AuthenticateWithGuestAccessKeyRequest
POST /AuthenticateWithResourceAccessTokenRequest
POST /CancelAnalysisRequest
POST /ChangeUserCultureRequest
POST /ConfirmArtifactUploadStatusRequest
POST /CreateAnalysisRequest
POST /CreateArtifactRequest
POST /CreateChildUserAccessTokenRequest
POST /CreateDataSourceRequest
POST /CreateDeploymentRequest
POST /CreateLibraryUserRequest
POST /CreateLibraryVersionRequest
POST /CreateReportRequest
POST /CreateSyncClientUserRequest
POST /CreateUserResourceAccessRequest
POST /DeleteAnalysisRequest
POST /GetGuestUserAccessKeyRequest
POST /GetReportDocumentRequest
POST /NotifyNewScanningSessionsCreatedRequest
POST /RemoveAnalysisNotificationSubscriberRequest
POST /RemoveChildUserRequest
POST /RemoveUserFromDeploymentRequest
POST /ReportAnalysisReportProgressRequest
POST /ReportOverallAnalysisProgressRequest
POST /RequestArtifactUploadTokenRequest
POST /ReuploadAnalysisArtifactsRequest
POST /SendAnalysisNotificationRequest
POST /SetAnalysisExpirationDateRequest
POST /SetGuestUserAccessKeyRequest
POST /SetUserDeploymentAccessTypesRequest
POST /SyncAnalyticsUserRequest
POST /UpdateLibraryVersionRequest
POST /UploadAnalysisRequest

Found on 2026-02-01 22:42

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 34.116.159.62
Domain: reporting.analytics.dotconnect.vc
Port: 443
URL: https://reporting.analytics.dotconnect.vc

First seen 2025-10-25 17:35
Last seen 2026-02-02 12:29
Open for 99 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035491d2c1dcd59f1c675c91943c5ba88571d6d332d1a

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /GetAnalysesRequest
GET /GetAnalysisRequest
GET /GetAnalyticsArtifactRequest
GET /GetAnalyticsReportRequest
GET /GetChildUsersRequest
GET /GetDeploymentDetailsRequest
GET /GetDeploymentsRequest
GET /GetLibraryDeploymentsRequest
GET /GetLibraryVersionsRequest
GET /GetMyResourcesRequest
GET /GetReportKindsPresentOnDeploymentRequest
GET /RequestArtifactAccessUrlRequest
GET /UpdateWarsawFinesReportWithNewNoticeDataRequest
POST /AddAnalysisNotificationSubscriberRequest
POST /AddDataSourceToDeploymentRequest
POST /AddUserToDeploymentRequest
POST /AuthenticateWithGuestAccessKeyRequest
POST /AuthenticateWithResourceAccessTokenRequest
POST /CancelAnalysisRequest
POST /ChangeUserCultureRequest
POST /ConfirmArtifactUploadStatusRequest
POST /CreateAnalysisRequest
POST /CreateArtifactRequest
POST /CreateChildUserAccessTokenRequest
POST /CreateDataSourceRequest
POST /CreateDeploymentRequest
POST /CreateLibraryUserRequest
POST /CreateLibraryVersionRequest
POST /CreateReportRequest
POST /CreateSyncClientUserRequest
POST /CreateUserResourceAccessRequest
POST /DeleteAnalysisRequest
POST /GetGuestUserAccessKeyRequest
POST /GetReportDocumentRequest
POST /NotifyNewScanningSessionsCreatedRequest
POST /RemoveAnalysisNotificationSubscriberRequest
POST /RemoveChildUserRequest
POST /RemoveUserFromDeploymentRequest
POST /ReportAnalysisReportProgressRequest
POST /ReportOverallAnalysisProgressRequest
POST /RequestArtifactUploadTokenRequest
POST /ReuploadAnalysisArtifactsRequest
POST /SendAnalysisNotificationRequest
POST /SetAnalysisExpirationDateRequest
POST /SetGuestUserAccessKeyRequest
POST /SetUserDeploymentAccessTypesRequest
POST /SyncAnalyticsUserRequest
POST /UpdateLibraryVersionRequest
POST /UploadAnalysisRequest

Found on 2026-02-02 12:29

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 34.116.159.62
Domain: data.analytics.dotconnect.vc
Port: 443
URL: https://data.analytics.dotconnect.vc

First seen 2025-10-25 17:35
Last seen 2026-02-02 00:19
Open for 99 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354972994ef423d327490876e8d14775b9d063643981

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /GetDeploymentDescriptorsRequest
GET /GetGeospatialRevisionDataFileUploadInfoRequest
GET /GetGeospatialRevisionDataRequest
GET /GetGeospatialRevisionsRequest
GET /GetOperatorsRequest
GET /GetWarsawNoticeRequest
GET /GetWarsawPaymentsRequest
GET /GetWarsawResidentsRequest
GET /GetWarsawSignsRequest
GET /PerformWarsawDatabaseSyncRequest
GET /QueryAlprDeviceRecognitionsRequest
GET /QueryDeviceScanningSessionsRequest
GET /QueryGpsDataRequest
GET /QueryNegativePolygonsRequest
GET /QueryParkingPolygonsRequest
GET /QueryRfidDeviceRecognitionsRequest
GET /QueryRoadSignDeviceRecognitionsRequest
GET /QueryStreetsRequest
GET /QueryVehicleGpsDataRequest
GET /QueryWeatherRecordsRequest
GET /QueryZonesRequest
POST /CreateDeploymentDescriptorRequest
POST /CreateDeviceDescriptorRequest
POST /CreateGeospatialRevisionRequest
POST /DeleteGeospatialRevisionRequest
POST /GetWarsawWhitelistRequest
POST /MigrateDatabasesRequest
POST /UpdateDeploymentRequest
POST /UpdateGeospatialRevisionRequest
POST /UploadAlprDeviceRecognitionsRequest
POST /UploadDeviceGpsDataBatchRequest
POST /UploadOperatorEventsRequest
POST /UploadRfidDeviceRecognitionsRequest
POST /UploadRoadSignDeviceRecognitionsRequest
POST /UploadWarsawSignsRequest

Found on 2026-02-02 00:19

Create report

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 34.116.159.62
Domain: polyscriptor.analytics.dotconnect.vc
Port: 443
URL: https://polyscriptor.analytics.dotconnect.vc

First seen 2023-07-13 20:20
Last seen 2026-01-23 05:09
Open for 924 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522024ae262
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[user]
	name = Barbara Morawska
	email = barbara.morawska@dotconnect.vc
[remote "origin"]
	url = git@gitlab.dotconnect.vc:cityscanneranalytics/polygondescriptor.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2026-01-23 05:09
  
  364 Bytes
Create report

Open service 2620:cb:2000::1:8443 · dotconnect.vc

2026-02-06 13:48

HTTP/1.1 403 Forbidden
Date: Fri, 06 Feb 2026 13:48:12 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 4529
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Set-Cookie: _cfuvid=x8io0cP7z56SyXB9XF5F2FvMo0tCcdUfWlwbeZ8zGT0-1770385692625-0.0.1.1-604800000; path=/; domain=.dotconnect.vc; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 9c9b1a92dc4e18d5-FRA
alt-svc: h3=":8443"; ma=86400

Page title: Attention Required! | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>    <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>    <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]-->
<head>
<title>Attention Required! | Cloudflare</title>
<meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->


</head>
<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable cookies.</div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-wrapper cf-header cf-error-overview">
        <h1 data-translate="block_headline">Sorry, you have been blocked</h1>
        <h2 class="cf-subheadline"><span data-translate="unable_to_access">You are unable to access</span> cdn.webflow.com</h2>
      </div><!-- /.header -->

      <div class="cf-section cf-highlight">
        <div class="cf-wrapper">
          <div class="cf-screenshot-container cf-screenshot-full">
            
              <span class="cf-no-screenshot error"></span>
            
          </div>
        </div>
      </div><!-- /.captcha-container -->

      <div class="cf-section cf-wrapper">
        <div class="cf-columns two">
          <div class="cf-column">
            <h2 data-translate="blocked_why_headline">Why have I been blocked?</h2>

            <p data-translate="blocked_why_detail">This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.</p>
          </div>

          <div class="cf-column">
            <h2 data-translate="blocked_resolve_headline">What can I do to resolve this?</h2>

            <p data-translate="blocked_resolve_detail">You can email the site owner to let them know you were blocked. Please include what you were doing when this page came up and the Cloudflare Ray ID found at the bottom of this page.</p>
          </div>
        </div>
      </div><!-- /.section -->

      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
  <p class="text-13">
    <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9c9b1a92dc4e18d5</strong></span>
    <span class="cf-footer-separator sm:hidden">&bull;</span>
    <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
      Your IP:
      <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
      <span class="hidden" id="cf-footer-ip">2a03:b0c0:3:d0::fef:2001</span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
    </span>
    <span class="cf-footer-item sm:block sm:mb-1"><span>Performance &amp; security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">Cloudflare</a></span>
    
  </p>
  <script>(function(){function d(){var b=a.getElementById("cf-footer-item-ip"),c=a.getElementById("cf-footer-ip-reveal");b&&"classList"in

Found 3 days ago by HttpPlugin

Domain dotconnect.vc

United States

Software information

Swagger API description is publicly available

GraphQL introspection is enabled.

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Git configuration and history exposed

dotconnect.vc

reporting.analytics.dotconnect.vc

gitlab.dotconnect.vc

skillchain-network.dotconnect.vc

dev.reporting.analytics.dotconnect.vc

polyscriptor.analytics.dotconnect.vc

data.analytics.dotconnect.vc

skillchain-network.dotconnect.vc

gitlab.dotconnect.vc

dev.data.analytics.dotconnect.vc

dotconnect.vc

dev.analytics.dotconnect.vc

analytics.dotconnect.vc

data.analytics.dotconnect.vc

dev.computation.analytics.dotconnect.vc

polyscriptor.analytics.dotconnect.vc

reporting.analytics.dotconnect.vc

dev.data.analytics.dotconnect.vc

Domain summary

IP summary