LeakIX - Host licensing.dev.workai.cloud

Domain licensing.dev.workai.cloud

The Netherlands

MICROSOFT-CORP-MSN-AS-BLOCK

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.105.224.45
Domain: licensing.dev.workai.cloud
Port: 443
URL: https://licensing.dev.workai.cloud

First seen 2025-10-25 00:09
Last seen 2026-01-16 09:23
Open for 83 days

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2026-01-16 09:23

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354959d915974caf5f24a1dd09633dbc454e314276d5

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/About/Version
GET /v1/Licenses
GET /v1/Licenses({key})
GET /v1/Licenses/$count
GET /v1/Licenses/{key}
GET /v1/Products
GET /v1/Products({key})
GET /v1/Products/$count
GET /v1/Products/CheckIfPromotionalSet(offerId={offerId})
GET /v1/Products/Elastic.Licensing.API.CheckIfPromotionalSet(offerId={offerId})
GET /v1/Products/Elastic.Licensing.API.GetProductSubDomain(offerId={offerId})
GET /v1/Products/GetProductSubDomain(offerId={offerId})
GET /v1/Products/{key}
GET /v1/Subscriptions
GET /v1/Subscriptions({key})
GET /v1/Subscriptions/$count
GET /v1/Subscriptions/Elastic.Licensing.API.GetOrganizationsWithProducts
GET /v1/Subscriptions/GetOrganizationsWithProducts
GET /v1/Subscriptions/{key}
POST /v1/Subscriptions/Assign
POST /v1/Subscriptions/AssignGroups
POST /v1/Subscriptions/Elastic.Licensing.API.Assign
POST /v1/Subscriptions/Elastic.Licensing.API.AssignGroups
POST /v1/Subscriptions/Elastic.Licensing.API.IsOfferAlreadyInUseByOrganization
POST /v1/Subscriptions/Elastic.Licensing.API.Modify
POST /v1/Subscriptions/Elastic.Licensing.API.ModifyGroups
POST /v1/Subscriptions/Elastic.Licensing.API.Unassign
POST /v1/Subscriptions/Elastic.Licensing.API.UnassignGroups
POST /v1/Subscriptions/IsOfferAlreadyInUseByOrganization
POST /v1/Subscriptions/Modify
POST /v1/Subscriptions/ModifyGroups
POST /v1/Subscriptions/Unassign
POST /v1/Subscriptions/UnassignGroups

Found on 2025-12-01 11:11

Create report

Open service 20.105.224.45:443 · licensing.dev.workai.cloud

2026-01-09 14:32

HTTP/1.1 200 OK
Connection: close
Content-Type: text/plain; charset=utf-8
Date: Fri, 09 Jan 2026 14:33:59 GMT
Set-Cookie: ARRAffinity=e8c3b4220b9f97cf537feeb7ca8d7ede0c132f0c307819c4775a3815213a81d8;Path=/;HttpOnly;Secure;Domain=licensing.dev.workai.cloud
Set-Cookie: ARRAffinitySameSite=e8c3b4220b9f97cf537feeb7ca8d7ede0c132f0c307819c4775a3815213a81d8;Path=/;HttpOnly;SameSite=None;Secure;Domain=licensing.dev.workai.cloud
Transfer-Encoding: chunked
Strict-Transport-Security: max-age=2592000
x-trace-id: 76cf3234b4f725cc4455ff885cb0ff52


healthy

Found 2026-01-09 by HttpPlugin

Create report

Open service 20.105.224.45:443 · licensing.dev.workai.cloud

2026-01-02 13:03

HTTP/1.1 200 OK
Connection: close
Content-Type: text/plain; charset=utf-8
Date: Fri, 02 Jan 2026 13:03:04 GMT
Set-Cookie: ARRAffinity=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;Secure;Domain=licensing.dev.workai.cloud
Set-Cookie: ARRAffinitySameSite=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;SameSite=None;Secure;Domain=licensing.dev.workai.cloud
Transfer-Encoding: chunked
Strict-Transport-Security: max-age=2592000
x-trace-id: 555d84672bca64f1b163496d28bd4c6d


healthy

Found 2026-01-02 by HttpPlugin

Create report

Open service 20.105.224.45:80 · licensing.dev.workai.cloud

2025-12-24 00:10

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Wed, 24 Dec 2025 00:10:44 GMT
Location: https://licensing.dev.workai.cloud/

Found 2025-12-24 by HttpPlugin

Create report

Open service 20.105.224.45:443 · licensing.dev.workai.cloud

2025-12-24 00:10

HTTP/1.1 200 OK
Connection: close
Content-Type: text/plain; charset=utf-8
Date: Wed, 24 Dec 2025 00:10:45 GMT
Set-Cookie: ARRAffinity=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;Secure;Domain=licensing.dev.workai.cloud
Set-Cookie: ARRAffinitySameSite=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;SameSite=None;Secure;Domain=licensing.dev.workai.cloud
Transfer-Encoding: chunked
Strict-Transport-Security: max-age=2592000
x-trace-id: d09182a97a426e99f01524264a86839a


healthy

Found 2025-12-24 by HttpPlugin

Create report

Open service 20.105.224.45:443 · licensing.dev.workai.cloud

2025-12-22 06:38

HTTP/1.1 200 OK
Connection: close
Content-Type: text/plain; charset=utf-8
Date: Mon, 22 Dec 2025 06:38:54 GMT
Set-Cookie: ARRAffinity=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;Secure;Domain=licensing.dev.workai.cloud
Set-Cookie: ARRAffinitySameSite=c543959e5077d0986f050d1a42deca797651565c18ae97e0cfa9d81d8544de3d;Path=/;HttpOnly;SameSite=None;Secure;Domain=licensing.dev.workai.cloud
Transfer-Encoding: chunked
Strict-Transport-Security: max-age=2592000
x-trace-id: 75a91deb8bf97bb540a3e3c5e53e19d8


healthy

Found 2025-12-22 by HttpPlugin

Create report

licensing.dev.workai.cloud

Fingerprint:

0dd2daf1cf371ea7ab5266a5d6822caf2281362163b1e84150a56b5870fc0172

CN:

licensing.dev.workai.cloud

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-23 23:11

Not after:

2026-03-23 23:11

licensing.dev.workai.cloud

Fingerprint:

c6c7b9c20042035ce177fa114638758d060c9783f97359fb83ab3af3eeb9431a

CN:

licensing.dev.workai.cloud

Key:

RSA-2048

Issuer:

R12

Not before:

2025-10-24 23:10

Not after:

2026-01-22 23:10

Domain summary

licensing.dev.workai.cloud 6

1 recorded

IP summary

20.105.224.45 2

1 recorded