LeakIX - Host messaging.itstar.io

Domain messaging.itstar.io

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.26.11.32
Domain: messaging.itstar.io
Port: 80
URL: http://messaging.itstar.io

First seen 2025-10-26 02:30
Last seen 2026-01-09 09:30
Open for 75 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549fe7fb77958fbd764a17c77da8f6e6ac2f8571d83

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/ChatGroupMember/bygroupid/{appId}/{groupId}/{rnd}
GET /api/ChatGroupMember/byuserid/{userId}/{rnd}
GET /api/ChatGroupMember/privatechatgroupid/{currentUserId}/{selectedUserId}/{rnd}
GET /api/ChatGroupMember/unseengroupcount/{userId}/{rnd}
GET /api/ChatGroupMember/updateseen/{groupId}/{userId}/{rnd}
GET /api/ChatGroupMember/{rnd}
GET /api/ChatGroupMember/{userId}/{groupId}/{rnd}
GET /api/ChatMessage/{groupId}/{lineId}/{rnd}
GET /api/ChatMessage/{rnd}
GET /api/ChatUserAccount/GetConnDict/{rnd}
GET /api/ChatUserAccount/byappid/{appId}/{rnd}
GET /api/ChatUserAccount/byuserid/{userId}/{rnd}
GET /api/ChatUserAccount/byusertype/{usertype}/{appId}
GET /api/ChatUserAccount/refreshtoken/{rnd}
GET /api/ChatUserAccount/{appId}/{appUserId}/{rnd}
GET /api/ChatUserAccount/{rnd}
GET /api/ChatUserGroup/bygroupid/{groupId}/{rnd}
GET /api/ChatUserGroup/{groupId}/{createdUserId}/{rnd}
GET /api/ChatUserGroup/{rnd}
POST /api/ChatGroupMember/add/{appId}/{groupId}
POST /api/ChatGroupMember/delete
POST /api/ChatGroupMember/remove/{appId}/{groupId}
POST /api/ChatMessage/bygroupid/{groupId}
POST /api/ChatMessage/delete/{appId}
POST /api/ChatMessage/reaction
POST /api/ChatMessage/save/{appId}
POST /api/ChatUserAccount/byappid/{appId}
POST /api/ChatUserAccount/byusertype/{appId}
POST /api/ChatUserAccount/changepassword
POST /api/ChatUserAccount/delete
POST /api/ChatUserAccount/deleteImage
POST /api/ChatUserAccount/login
POST /api/ChatUserAccount/register
POST /api/ChatUserAccount/save
POST /api/ChatUserAccount/sendotp
POST /api/ChatUserAccount/synccustomerdata
POST /api/ChatUserAccount/syncofficerdata
POST /api/ChatUserAccount/verify
POST /api/ChatUserGroup/changegroupadmin/{groupId}/{oldAdminId}/{newAdminId}
POST /api/ChatUserGroup/creategroup/{appId}/{createdUserId}
POST /api/ChatUserGroup/delete/{appId}
POST /api/ChatUserGroup/deleteImage/{appId}
POST /api/ChatUserGroup/recentchatgroups/{appId}/{userId}
POST /api/ChatUserGroup/save/{appId}
POST /api/ChatUserGroup/syncgroup/{appId}/{customerid}
POST /api/Service/login/{timestamp}

Found on 2026-01-09 09:30

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.72.104
Domain: messaging.itstar.io
Port: 443
URL: https://messaging.itstar.io

First seen 2025-10-26 02:30
Last seen 2026-01-09 22:55
Open for 75 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549fe7fb77958fbd764a17c77da8f6e6ac2f8571d83

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/ChatGroupMember/bygroupid/{appId}/{groupId}/{rnd}
GET /api/ChatGroupMember/byuserid/{userId}/{rnd}
GET /api/ChatGroupMember/privatechatgroupid/{currentUserId}/{selectedUserId}/{rnd}
GET /api/ChatGroupMember/unseengroupcount/{userId}/{rnd}
GET /api/ChatGroupMember/updateseen/{groupId}/{userId}/{rnd}
GET /api/ChatGroupMember/{rnd}
GET /api/ChatGroupMember/{userId}/{groupId}/{rnd}
GET /api/ChatMessage/{groupId}/{lineId}/{rnd}
GET /api/ChatMessage/{rnd}
GET /api/ChatUserAccount/GetConnDict/{rnd}
GET /api/ChatUserAccount/byappid/{appId}/{rnd}
GET /api/ChatUserAccount/byuserid/{userId}/{rnd}
GET /api/ChatUserAccount/byusertype/{usertype}/{appId}
GET /api/ChatUserAccount/refreshtoken/{rnd}
GET /api/ChatUserAccount/{appId}/{appUserId}/{rnd}
GET /api/ChatUserAccount/{rnd}
GET /api/ChatUserGroup/bygroupid/{groupId}/{rnd}
GET /api/ChatUserGroup/{groupId}/{createdUserId}/{rnd}
GET /api/ChatUserGroup/{rnd}
POST /api/ChatGroupMember/add/{appId}/{groupId}
POST /api/ChatGroupMember/delete
POST /api/ChatGroupMember/remove/{appId}/{groupId}
POST /api/ChatMessage/bygroupid/{groupId}
POST /api/ChatMessage/delete/{appId}
POST /api/ChatMessage/reaction
POST /api/ChatMessage/save/{appId}
POST /api/ChatUserAccount/byappid/{appId}
POST /api/ChatUserAccount/byusertype/{appId}
POST /api/ChatUserAccount/changepassword
POST /api/ChatUserAccount/delete
POST /api/ChatUserAccount/deleteImage
POST /api/ChatUserAccount/login
POST /api/ChatUserAccount/register
POST /api/ChatUserAccount/save
POST /api/ChatUserAccount/sendotp
POST /api/ChatUserAccount/synccustomerdata
POST /api/ChatUserAccount/syncofficerdata
POST /api/ChatUserAccount/verify
POST /api/ChatUserGroup/changegroupadmin/{groupId}/{oldAdminId}/{newAdminId}
POST /api/ChatUserGroup/creategroup/{appId}/{createdUserId}
POST /api/ChatUserGroup/delete/{appId}
POST /api/ChatUserGroup/deleteImage/{appId}
POST /api/ChatUserGroup/recentchatgroups/{appId}/{userId}
POST /api/ChatUserGroup/save/{appId}
POST /api/ChatUserGroup/syncgroup/{appId}/{customerid}
POST /api/Service/login/{timestamp}

Found on 2026-01-09 22:55

Create report

Open service 172.67.72.104:443 · messaging.itstar.io

2026-01-09 22:55

HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 22:55:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=co62jZU8tMYviiFmVEg6G37qUq4%2FlPdXFbz1LA6CZ3I8EfBtL8lj7DPF1IwkapjfjnAzKdgPN6ArIiOCdoyXlWI1glGUhqeYIPWrg6k%2F73XVow%3D%3D"}]}
last-modified: Fri, 03 May 2024 02:22:52 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
Server: cloudflare
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
CF-RAY: 9bb785372effdba7-FRA

Page title: MessagingApp

<!DOCTYPE html><html lang="en"><head>
  <meta charset="utf-8">
  <title>MessagingApp</title>
  <base href="/">
  <!-- <meta name="viewport" content="width=device-width, initial-scale=1"> -->
  <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0">

  <link rel="icon" type="image/x-icon" href="assets/images/logo.png">
  <link rel="manifest" href="manifest.webmanifest">
  <meta name="theme-color" content="#1976d2">
<style>:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}*,:after,:before{box-sizing:border-box}html{font-family:sans-serif;line-height:1.15;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,Liberation Sans,sans-serif,"Apple Color Emoji","Segoe UI Emoji",Segoe UI Symbol,"Noto Color Emoji";font-size:1rem;font-weight:400;line-height:1.5;color:#212529;text-align:left;background-color:#fff}@media print{*,:after,:before{text-shadow:none!important;box-shadow:none!important}@page{size:a3}body{min-width:992px!important}}@charset "UTF-8";:root{--core-color:#5A68DF;--second-color:#D0D3E3;--third-color:#5A68DF;--logo-color:#5A68DF;--icon-color:#556080;--bg-color-white:#FFF;--header-color:var(--core-color);--thead-color:var(--bg-color-white);--thead-backcolor:#237ff1f2;--toolbar-color:rgb(224, 224, 224);--body-color:rgb(158, 158, 158);--page-color:#E0E0E0;--control-backcolor:var(--core-color);--control-color:var(--bg-color-white);--control-hover-backcolor:#e5e5e5;--control-hover-color:var(--core-color);--child-backcolor:#FFFFFF;--no-width:70px;--bg-body-color:rgb(255, 246, 231);--checkbox-size:12px;--margin:16px;--margin-small:--margin / 2;--text-lighter:#ccc;--brand:var(--core-color)}body{overflow:hidden}</style><link rel="stylesheet" href="styles.5fb77435b778a0a1.css" media="print" onload="this.media='all'"><noscript><link rel="stylesheet" href="styles.5fb77435b778a0a1.css"></noscript></head>
<body>
  <app-root></app-root>
  <noscript>Please enable JavaScript to continue using this application.</noscript>
<script src="runtime.fba6515ee2d3f0bb.js" type="module"></script><script src="polyfills.830adae6e372fe60.js" type="module"></script><script src="scripts.e0b315abc98ee02a.js" defer></script><script src="main.b0dc5da48586fc5b.js" type="module"></script>

</body></html>

Found 2026-01-09 by HttpPlugin

Domain messaging.itstar.io

Software information

Swagger API description is publicly available

Swagger API description is publicly available

itstar.io*.itstar.io

Domain summary

IP summary