LeakIX - Host lacuna.cc

Domain lacuna.cc

Brazil

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Microsoft-IIS 10.0

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.206.176.5
Domain: pki.sisp.lacuna.cc
Port: 443
URL: https://pki.sisp.lacuna.cc

First seen 2025-12-18 23:34
Last seen 2025-12-26 18:41
Open for 7 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-12-26 18:41
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.206.176.5
Domain: pki.sisp.lacuna.cc
Port: 80
URL: http://pki.sisp.lacuna.cc

First seen 2025-12-18 23:34
Last seen 2025-12-26 19:37
Open for 7 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-12-26 19:37
Create report

Open service 20.206.176.5:80 · pki.sisp.lacuna.cc

2026-01-23 03:00

HTTP/1.1 404 Site Not Found
Content-Length: 2667
Connection: close
Content-Type: text/html
Date: Fri, 23 Jan 2026 03:01:04 GMT

Page title: Microsoft Azure Web App - Error 404

<!DOCTYPE html>
<html>
<head>
    <title>Microsoft Azure Web App - Error 404</title>
    <style type="text/css">
        html {
            height: 100%;
            width: 100%;
        }

        #feature {
            width: 960px;
            margin: 75px auto 0 auto;
            overflow: auto;
        }

        #content {
            font-family: "Segoe UI";
            font-weight: normal;
            font-size: 22px;
            color: #ffffff;
            float: left;
            margin-top: 68px;
            margin-left: 0px;
            vertical-align: middle;
        }

            #content h1 {
                font-family: "Segoe UI Light";
                color: #ffffff;
                font-weight: normal;
                font-size: 60px;
                line-height: 48pt;
                width: 800px;
            }

        a, a:visited, a:active, a:hover {
            color: #ffffff;
        }

        #content a.button {
            background: #0DBCF2;
            border: 1px solid #FFFFFF;
            color: #FFFFFF;
            display: inline-block;
            font-family: Segoe UI;
            font-size: 24px;
            line-height: 46px;
            margin-top: 10px;
            padding: 0 15px 3px;
            text-decoration: none;
        }

            #content a.button img {
                float: right;
                padding: 10px 0 0 15px;
            }

            #content a.button:hover {
                background: #1C75BC;
            }
    </style>
    <script type="text/javascript">
        function toggle_visibility(id) {
            var e = document.getElementById(id);
            if (e.style.display == 'block')
                e.style.display = 'none';
            else
                e.style.display = 'block';
        }
    </script>
</head>
<body bgcolor="#00abec">
    <div id="feature">
        <div id="content">
            <h1>404 Web Site not found.</h1>
            <p>You may be seeing this error due to one of the reasons listed below :</p>
            <ul>
                <li>Custom domain has not been configured inside Azure. See <a href="https://go.microsoft.com/fwlink/?linkid=2194614">how to map an existing domain</a> to resolve this.</li>
                <li>Client cache is still pointing the domain to old IP address. Clear the cache by running the command <i>ipconfig/flushdns.</i></li>
            </ul>
            <p>Checkout <a href="https://go.microsoft.com/fwlink/?linkid=2194451">App Service Domain FAQ</a> for more questions.</p>
        </div>
     </div>
</body>
</html>

Found 2026-01-23 by HttpPlugin

Create report

Open service 191.235.81.73:80 · lacuna.cc

2026-01-11 05:24

HTTP/1.1 303 See Other
Content-Length: 154
Connection: close
Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Jan 2026 05:25:36 GMT
Server: Microsoft-IIS/10.0
Location: https://www.lacunasoftware.com/
Set-Cookie: ARRAffinity=83af9a2477bce912044f270deac2301ff1ee5896779c08c7b6c07a2f58fc8bb9;Path=/;HttpOnly;Domain=lacuna.cc
X-Powered-By: ASP.NET

Page title: Document Moved

<head><title>Document Moved</title></head>
<body><h1>Object Moved</h1>This document may be found <a HREF="https://www.lacunasoftware.com/">here</a></body>

Found 2026-01-11 by HttpPlugin

Create report

Open service 191.235.81.73:443 · lacuna.cc

2026-01-11 05:24

HTTP/1.1 303 See Other
Content-Length: 154
Connection: close
Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Jan 2026 05:25:36 GMT
Server: Microsoft-IIS/10.0
Location: https://www.lacunasoftware.com/
Set-Cookie: ARRAffinity=83af9a2477bce912044f270deac2301ff1ee5896779c08c7b6c07a2f58fc8bb9;Path=/;HttpOnly;Secure;Domain=lacuna.cc
Set-Cookie: ARRAffinitySameSite=83af9a2477bce912044f270deac2301ff1ee5896779c08c7b6c07a2f58fc8bb9;Path=/;HttpOnly;SameSite=None;Secure;Domain=lacuna.cc
X-Powered-By: ASP.NET

Page title: Document Moved

<head><title>Document Moved</title></head>
<body><h1>Object Moved</h1>This document may be found <a HREF="https://www.lacunasoftware.com/">here</a></body>

Found 2026-01-11 by HttpPlugin

Create report

lacuna.cc

Fingerprint:

01b249e9b699262b5780e4ccf1693870d1204e7245b5de90b2453d87f9f1bcbd

CN:

lacuna.cc

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2025-08-24 00:00

Not after:

2026-02-24 23:59

Domain summary

pki.sisp.lacuna.cc 2 lacuna.cc 1

2 recorded

IP summary

20.206.176.5 2 191.235.81.73 2

2 recorded

Domain lacuna.cc

Brazil

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Create report

Create report

Create report

lacuna.cc

Domain summary

IP summary