LeakIX - Host s.plurall.net

Domain s.plurall.net

United States

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

AmazonS3

tcp/443

CloudFront

tcp/80

Kestrel Kestrel

tcp/443 tcp/80

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.

IP: 99.86.4.8
Domain: s.plurall.net
Port: 443
URL: https://s.plurall.net

First seen 2023-11-07 19:13
Last seen 2024-04-22 04:46
Open for 166 days

Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884022e566c81dbbbd673

[init]
	defaultBranch = none
[fetch]
	recurseSubmodules = false
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab-ci-token:64_qzLkfHsgEkQ9hxTYggyf@gitlab.com/sdk12/plurall/site-plurall.git
	fetch = +refs/heads/*:refs/remotes/origin/*

Found on 2024-04-22 04:46

316 Bytes

Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884022e566c81471bd12b

[init]
	defaultBranch = none
[fetch]
	recurseSubmodules = false
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab-ci-token:64_8WNFXomWY3XxTDwCNmbq@gitlab.com/sdk12/plurall/site-plurall.git
	fetch = +refs/heads/*:refs/remotes/origin/*

Found on 2023-11-24 03:35

316 Bytes

Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884022e566c818dd55508

[init]
	defaultBranch = none
[fetch]
	recurseSubmodules = false
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://gitlab-ci-token:64_VnzGWtgWy_fQZwCQZirT@gitlab.com/sdk12/plurall/site-plurall.git
	fetch = +refs/heads/*:refs/remotes/origin/*

Found on 2023-11-07 19:13

316 Bytes

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.49.104.52
Domain: apiauth-phidelis.s.plurall.net
Port: 80
URL: http://apiauth-phidelis.s.plurall.net

First seen 2026-01-12 09:00
Last seen 2026-02-09 01:15
Open for 27 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549e06c4adf00342a38858ee05957b516d198af466e
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /api/Identidade/autenticar
POST /api/Identidade/autenticar-token-plurall
POST /api/Identidade/refresh-token
POST /api/Identidade/trocar-contexto-aluno
POST /api/Identidade/trocar-contexto-perfil
POST /api/Phidelis/autenticar-login-phidelis
POST /api/Phidelis/autenticar-token-phidelis
```
  Found on 2026-02-09 01:15
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.49.104.52
Domain: apiatend-phidelis.s.plurall.net
Port: 443
URL: https://apiatend-phidelis.s.plurall.net

First seen 2026-01-12 09:00
Last seen 2026-02-01 23:56
Open for 20 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035490d88be64b4e7641454b557c44bdefcfa4395b60a
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Mensagem/mensagens/getSetor/{id}
GET /api/Mensagem/mensagens/listarAtendimentos
GET /api/Mensagem/mensagens/listarSetores/{unidadeId}
POST /api/ImportacaoDados/processarAcessos
POST /api/Mensagem/mensagens/salvarArquivoChat
```
  Found on 2026-02-01 23:56
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.49.104.52
Domain: apiauth-phidelis.s.plurall.net
Port: 443
URL: https://apiauth-phidelis.s.plurall.net

First seen 2026-01-12 09:00
Last seen 2026-02-01 23:56
Open for 20 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549e06c4adf00342a38858ee05957b516d198af466e
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /api/Identidade/autenticar
POST /api/Identidade/autenticar-token-plurall
POST /api/Identidade/refresh-token
POST /api/Identidade/trocar-contexto-aluno
POST /api/Identidade/trocar-contexto-perfil
POST /api/Phidelis/autenticar-login-phidelis
POST /api/Phidelis/autenticar-token-phidelis
```
  Found on 2026-02-01 23:56
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.49.104.52
Domain: apimens-phidelis.s.plurall.net
Port: 443
URL: https://apimens-phidelis.s.plurall.net

First seen 2026-01-12 09:01
Last seen 2026-02-01 23:56
Open for 20 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354955a5f21d57b41f6d42c055ee2484224903c6d842

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/agendaonline/{id}
GET /api/Agenda/{qtdDias}/{tiposDeEventos}
GET /api/Calendario/obterCalendario
GET /api/Comunicado/comunicados/{pagina}/{registrosPorPagina}
GET /api/Comunicado/detalhesComunicado/{publicacaoId}
GET /api/Comunicado/{publicacaoId}/comentario/{pagina}/{registrosPorPagina}
GET /api/Dashboard/contadores
GET /api/Dashboard/dashboard/{topTipoPublicacao}
GET /api/Dashboard/detalhesPublicacao/{publicacaoId}
GET /api/Dashboard/home/{pagina}/{registrosPorPagina}
GET /api/agendaonline/obterCalendario/{data}
GET /api/agendaonlineconfiguracao/{unidadeId}
GET /api/integracao/{unidadeId}
GET /api/v2/Agenda/obterAgenda/{data}
GET /api/v2/Agenda/obterEvento/{id}
GET /api/v2/Agenda/obterProgramacao/{pagina}/{registrosPorPagina}
GET /api/v2/AgendaOnline/obterAgenda/{UnidadeId}/{Data}
GET /api/v2/AgendaOnline/obterDestaques/{unidadeId}/{pagina}/{registrosPorPagina}
GET /api/v2/AgendaOnline/obterEvento/{unidadeId}/{id}
GET /api/v2/AgendaOnline/obterProgramacao/{unidadeId}/{pagina}/{registrosPorPagina}/{cursoId}
GET /api/v2/AgendaOnline/pesquisar/{AnoLetivo}/{TurmaId}
POST /api/Comunicado/ativarComentario/{id}
POST /api/Comunicado/comentarPublicacao
POST /api/Comunicado/curtirPublicacao/{publicacaoId}
POST /api/v2/Agenda/responderEnquete
POST /api/v2/AgendaOnline

Found on 2026-02-01 23:56

Create report

Open service 20.49.104.52:443 · apimens-phidelis.s.plurall.net

2026-01-22 21:57

HTTP/1.1 200 OK
Connection: close
Date: Thu, 22 Jan 2026 21:57:36 GMT
Server: Kestrel
Transfer-Encoding: chunked
Request-Context: appId=cid-v1:fbef22b2-36f9-415a-9b8a-74e46e15cc09


API Mensageria (22/01/2026 18:57:37) - Update: 22/01/2026 16:06:20

Found 2026-01-22 by HttpPlugin

Domain s.plurall.net

United States

Software information

Git configuration and history exposed

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

apimens-phidelis.s.plurall.net

apiauth-phidelis.s.plurall.net

apiatend-phidelis.s.plurall.net

apimens-phidelis.s.plurall.net

apiauth-phidelis.s.plurall.net

apiatend-phidelis.s.plurall.net

phidelis.s.plurall.net

menu-assets.s.plurall.net*.menu-assets.e.plurall.net

Domain summary

IP summary