LeakIX - Host fda.gov

Domain fda.gov

Germany

Akamai International B.V.

Software information

AkamaiGHost

tcp/443 tcp/80

AkamaiNetStorage

tcp/443

Microsoft-IIS 10.0

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 150.148.26.220
Domain: smarthubdruidbotapp.preprod.fda.gov
Port: 443
URL: https://smarthubdruidbotapp.preprod.fda.gov

First seen 2025-11-20 21:40
Last seen 2025-12-18 06:55
Open for 27 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035491fdbfef249eb3a6535d9d8d0f5640604ea3ceb0a

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /WeChat
GET /api/audiocodes/{botId}/assist/conversation/{conversationId}/websocket/{mod}
GET /api/audiocodes/{botId}/conversation/{conversationId}/websocket/{mod}
GET /api/audiocodes/{botId}/{mod}
GET /api/copilot/{botId}/messages
GET /api/facebook/{botId}/messages
GET /api/george/{botId}/availability
GET /api/george/{botId}/cc-availability
GET /api/instagram/{botId}/messages
GET /api/messages
GET /api/meta-workplace/{botId}/messages
GET /api/ringcentral/{botId}/messages
GET /api/voicetext/{botId}/messages
GET /api/webex/{botId}/messages
GET /api/whatsapp/{botId}/messages
GET /api/{botId}/messages
GET /george/{botId}/availability
GET /george/{botId}/cc-availability
GET /viber
GET /viber/{botId}
GET /vonage
GET /vonage/{botId}
POST /api/alexa/{botId}
POST /api/audiocodes/{botId}/assist/conversation/{conversationId}/activities/{mod}
POST /api/audiocodes/{botId}/assist/conversation/{conversationId}/disconnect/{mod}
POST /api/audiocodes/{botId}/assist/conversation/{conversationId}/refresh/{mod}
POST /api/audiocodes/{botId}/conversation/{conversationId}/activities/{mod}
POST /api/audiocodes/{botId}/conversation/{conversationId}/disconnect/{mod}
POST /api/audiocodes/{botId}/conversation/{conversationId}/refresh/{mod}
POST /api/copilot/{botId}/messages/getMessages
POST /api/freshchat/{botId}/messages
POST /api/george/{botId}
POST /api/messages/getMessages
POST /api/nexmo/status
POST /api/ringcentral/{botId}/livechat
POST /api/servicenow/{botId}/activities
POST /api/sprinklr/{botId}/messages
POST /api/voicetext/{botId}/messages/getMessages
POST /api/vonagevoice/{botId}/answer
POST /api/vonagevoice/{botId}/event
POST /api/vonagevoice/{botId}/fallback
POST /api/vonagevoice/{botId}/forward
POST /api/zendesk/{botId}/livechat
POST /api/{botId}/messages/getMessages
POST /cuedesk/{botId}/messages
POST /cuedesk/{botId}/outbound-messages
POST /cuedesk/{botId}/status
POST /george/{botId}
POST /googlechat/{botId}
POST /oracle/{botId}
POST /sunshine/messages
POST /sunshine/{botId}/messages
POST /vonage/{botId}/sms

Found on 2025-12-18 06:55

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2025-12-14 02:22

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 150.148.26.219
Domain: smarthubdruidbotapi.preprod.fda.gov
Port: 443
URL: https://smarthubdruidbotapi.preprod.fda.gov

First seen 2025-11-20 21:37
Last seen 2025-12-01 09:30
Open for 10 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035493b3b73505ce2d0d79f3afb43bca5c6c6c69e73d3
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /
GET /GetStatus
GET /GetStatusMetrics
GET /Stream
POST /ConnectConversations
POST /DisconnectConversations
POST /MarkMessageStatuses
POST /MarkSenderActions
POST /Status
POST /Status/{botId}
POST /vonage/{botId}/sms/status
```
  Found on 2025-12-01 09:30
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 150.148.26.221
Domain: smarthubdruidbotservice.preprod.fda.gov
Port: 443
URL: https://smarthubdruidbotservice.preprod.fda.gov

First seen 2025-11-20 21:36
Last seen 2025-12-17 03:10
Open for 26 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354949927f297d8c403725d9478aa57dda71226daab6
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /v3/conversations/clearcache
DELETE /v3/directline/conversations/clearcache
GET /
GET /download/{id}
GET /v3/conversations/{conversationId}
GET /v3/conversations/{conversationId}/activities
GET /v3/directline/conversations/{conversationId}
GET /v3/directline/conversations/{conversationId}/activities
GET /v3/directline/conversations/{conversationId}/stream
POST /v3/conversations
POST /v3/conversations/{conversationId}/activities/{activityId}
POST /v3/directline/conversations
POST /v3/directline/conversations/{conversationId}/activities/{activityId}
POST /v3/directline/conversations/{conversationId}/upload
POST /v3/directline/tokens/generate
POST /v3/directline/tokens/refresh
```
  Found on 2025-12-17 03:10
Create report
Leak detected by FirebaseHttpPlugin

No description available

IP: 173.46.143.55
Domain: collaborationcqpub1.fda.gov
Port: 443
URL: https://collaborationcqpub1.fda.gov/.json

First seen 2021-09-24 13:36
Last seen 2022-01-28 23:04
Open for 126 days
- Fingerprint: b17be75321b5afb424b505dd24b505dd24b505dd24b505dd24b505dd24b505dd
```
{"jcr:primaryType":"rep:root","jcr:mixinTypes":["rep:RepoAccessControllable","rep:AccessControllable"],"sling:target":"/index.html","sling:resourceType":"sling:redirect"}
```
  Found on 2021-09-24 13:36
  
  170 Bytes
Create report

Open service 2.16.204.84:443 · labels.fda.gov

2026-02-11 16:57

HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Content-Security-Policy: frame-ancestors 'self'
X-Frame-Options: SAMEORIGIN
X-Akamai-Transformed: 0 - 0 -
Expires: Wed, 11 Feb 2026 16:57:09 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 11 Feb 2026 16:57:09 GMT
Content-Length: 13337
Connection: close
Set-Cookie: AWSALBTG=+jG9moCL5gzt1SJg4ko3GAdVRSMZhea/ucQxtueY1gBrljajE5HGbnt29XO2+ht7s4susQRp2AHZ3btP8UJ5HuKzm+Tq2fFzm5uJT/zDwVQDhq+z2Ub6vQhJg+dVJ526xInOJxUkuA6ns8Xj4BdAzq8nPpRons+taRfB6xV5c4mi; Expires=Wed, 18 Feb 2026 16:57:08 GMT; Path=/
Set-Cookie: AWSALBTGCORS=+jG9moCL5gzt1SJg4ko3GAdVRSMZhea/ucQxtueY1gBrljajE5HGbnt29XO2+ht7s4susQRp2AHZ3btP8UJ5HuKzm+Tq2fFzm5uJT/zDwVQDhq+z2Ub6vQhJg+dVJ526xInOJxUkuA6ns8Xj4BdAzq8nPpRons+taRfB6xV5c4mi; Expires=Wed, 18 Feb 2026 16:57:08 GMT; Path=/; SameSite=None
Alt-Svc: h3=":443"; ma=93600
Strict-Transport-Security: max-age=31536000
Set-Cookie: _abck=D1DB2623416C361F04BCA617352E1222~-1~YAAQWB0QAugWjxGcAQAAJ5+iTQ9pDNEq10W2/FrbdF+eYefOgOpHWHO33Iv5fFA3xWUm6B3YVvL6Z/Ovw7AdYECRlpA0t1m7qBzKM9KvqPqI89yEkjlorr6P5T4ghHkMOF/AR0RMhqrv57dp430bCYppEOOdxAZny2SheMngEMa7kjGvFtWqzV8ska/yfEC5UtttijJSGbx9nJhMtAvK26wgWwGtxHB5WGKdsbulobx2LPwWEcKEEr3e98kEsKKdV3a9i0WvatFpAYYl9TL+b8TYAGlwCN7Z4JNSoZTSSvxc4cuWN0LdZHF1bv4asUEa6xL2oyivt35fF1vDXlZDfYjrJ+v0m/sZGqBDg2osHoC9ioK+n96j5Ac61/ntaRrPf07i8ybOQMQPCLZMM5i7GeRyyQHR7TTRrq34VgfzF7IXomA9x43EpiB/wHhbgx8NETg=~-1~-1~-1~-1~-1; Domain=.fda.gov; Path=/; Expires=Thu, 11 Feb 2027 16:57:09 GMT; Max-Age=31536000; Secure
Set-Cookie: bm_sz=D99F6B34A151F97ACA06FFF2F80AD8AE~YAAQWB0QAukWjxGcAQAAJ5+iTR7l+s75YLc8brx61dYcmmotxePJDLkU9/HXgkqzYfLpWC0UnB7WkEfrqVzZU8gMwpsgaN8htyB8Uw90/B3CoILNeLNePEutcMUxp7wfH1NB2eu0SGFzuOhdilnOhO7B0mY3pfs6lh2B69f8YERKhSE5Ni1mB9DN6DHjSDEllaz4CcPPqkBvzrFPHpJ7f/DdTWkocfnXMLFMk2ZJkbxftfJiU1tg4SFqKXhNWnlNMZAdpWgQgQ544OxGFOGbEjGMN/whcP8G4cb4CQOFHdcGACZFER40mLbgM7ctPFToRGGZ7GxLxXgpY79aiqDQ+cS7ldUAqpci/Gs=~4277057~3487300; Domain=.fda.gov; Path=/; Expires=Wed, 11 Feb 2026 20:57:08 GMT; Max-Age=14399

Page title: FDA Label SearchFDA Online Label Repository

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>FDA Label Search</title>
</head>
<body>
<p align="center">
  
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
  













 
 
 







 

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<script language="JavaScript" type="text/javascript">
   var _U = "undefined";
   var g_HttpRelativeWebRoot = "/scripts/includes";
   var SSContributor = false;
   var SSForceContributor = false;
   var SSHideContributorUI = false;
   var ssUrlPrefix   = "/scripts/includes";
   var g_navNode_Path = new Array();
       g_navNode_Path[0] = '1201';
       g_navNode_Path[1] = '1338';
   var g_ssSourceNodeId = "1338";
   var g_ssSourceSiteId = "FDAgov";
   var g_strLanguageId = "en";
</script> 




	<title>FDA Online Label Repository</title>

<meta content="MSHTML 6.00.2900.3429" name="GENERATOR" />
<!--SS_BEGIN_SNIPPET(fragment1,head)-->				<!--[if lt IE 7]>
<script defer type="text/javascript" src="/scripts/includes/js/js_pngfix.js"></script>
<![endif]-->

<link rel="stylesheet" type="text/css" media="screen" href="/scripts/includes/css/css_fda_gov_stylesheet.css" />
<link rel="stylesheet" type="text/css" media="print" href="/scripts/includes/css/css_fda_gov_print_stylesheet.css" />





<meta name="dc.title" content="FDA Online Label Repository" />
<meta name="dc.type" content="" />
<meta name="dc.description" content="" />
<meta name="dc.language" content="" />
<meta name="posted" content="" />
<meta name="Keywords" content="" />
<meta name="Description" content="" />
<meta name="dc.subject" content="" />
<meta name="dc.publisher" content="" />
<meta name="dc.audience" content="" />
<meta name="dc.creator" content="" />


			
			
		
			
			
</head><body>
<div class="quicklinks"> 
<a href="#main" accesskey="2" class="quicklinks" tabindex="1" title="Skip to content">Quick Links: Skip to main page content</a>
<a href="#search" class="quicklinks" tabindex="1" title="Skip to search">Skip to Search</a>

<a href="#fda-topmenu" class="quicklinks" tabindex="1" title="Skip to FDA top menu">Skip to Topics Menu</a>

<a href="#section-menu" class="quicklinks" tabindex="1" title="Skip to Section table of contents">Skip to Section Content Menu</a>

<a href="#footer" class="quicklinks" tabindex="1" title="Skip to site options">Skip to Common Links</a>
</div>


<div id="outerwrapper">

<div id="hhs-masthead">

<div id="hhs-rightmast">
<a href="http://www.hhs.gov/"> <img style="height: 18px; width: 112px;" title="www.hhs.gov link" src="/scripts/includes/images/img_fdagov_hhs_gov.png" alt="www.hhs.gov link" border="0" /></a></div>

<div id="hhs-leftmast">

<a href="http://www.hhs.gov/"> <img style="height: 37px; width: 311px;" title="U S Department of Health and Human Services" alt="U S Department of Health and Human Services" src="/scripts/includes/images/img_fdagov_hhs_masthead_logo.png" border="0" /> </a></div>


</div>

    <div id="wrapper">


<div id="header">

<div id="fda-masthead">

<div id="fda-leftmast">
<div id="FDAlogo"><a href="http://www.fda.gov/default.htm"><img src="/scripts/includes/images/img_fdagov_logo_type.gif" alt="U S Food and Drug Administration, Protecting and Promoting Your Health" style="width: 374px; height: 36px;" border="0" /></a></div>
<div class="clearfloat">&nbsp;</div>

</div>

<div id="fda-rightmast">
<div id="search-form">
<a name="search"></a>
<form action="http://google2.fda.gov/search" method="get" name="searchForm" id="searchbox">
<input id="search" name="q" tabindex="2" type="text" />
<input id="go_button" src="/scripts/includes/images/img_fdagov_Go_button.gif" alt="Search button" tabindex="3

Found 2026-02-11 by HttpPlugin

Domain fda.gov

Germany

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Leak detected by FirebaseHttpPlugin

smarthubdruidbotservice.preprod.fda.govsmarthubdruidbotservice-mig.preprod.fda.gov

cdrh-rst.fda.gov

cdrh-rst.preprod.fda.gov

Domain summary

IP summary