LeakIX - Host userhub.syncpower-soft.com

Domain userhub.syncpower-soft.com

Germany

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/8443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 185.158.133.1
Domain: userhub.syncpower-soft.com
Port: 443
URL: https://userhub.syncpower-soft.com

First seen 2025-12-12 15:48
Last seen 2026-01-10 01:55
Open for 28 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43cba37fe313b92d15955d809c8efaf7d38efaf7d3
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /departments
GET /employees
GET /positions
POST /auth
```
  Found on 2026-01-10 01:55
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 185.158.133.1
Domain: userhub.syncpower-soft.com
Port: 8443
URL: https://userhub.syncpower-soft.com:8443

First seen 2025-12-12 15:48
Last seen 2026-01-10 01:55
Open for 28 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b885ff43cba37fe313b92d15955d809c8efaf7d38efaf7d3
```
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /departments
GET /employees
GET /positions
POST /auth
```
  Found on 2026-01-10 01:55
Create report

Open service 185.158.133.1:443 · userhub.syncpower-soft.com

2026-01-10 01:55

HTTP/1.1 200 OK
Date: Sat, 10 Jan 2026 01:55:23 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
ETag: "349019ce088335195170ed59aadf0797"
Strict-Transport-Security: max-age=31536000; includeSubDomains
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Vary: accept-encoding
Server: cloudflare
CF-RAY: 9bb88d4529a770a4-EWR

Page title: Sync Power

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.svg" type="image/svg+xml" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <!-- Security: Prevent token leak via Referrer header -->
    <meta name="referrer" content="no-referrer-when-downgrade" />
    <title>Sync Power</title>
    <meta name="description" content="Streamline user synchronization and management across your entire organization with Sync Power" />
    <meta name="author" content="Sync Power" />

    
    <meta property="og:description" content="Streamline user synchronization and management across your entire organization" />
    <meta property="og:type" content="website" />
    <meta property="og:image" content="https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/f602f25d-2c04-4dea-9061-aa71313f4e84/id-preview-97378267--2b99d6c2-9ce4-4f2d-84e5-d6c7165c71ba.lovable.app-1766656693131.png" />

    <meta name="twitter:card" content="summary_large_image" />
    <meta name="twitter:site" content="@lovable_dev" />
    <meta name="twitter:image" content="https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/f602f25d-2c04-4dea-9061-aa71313f4e84/id-preview-97378267--2b99d6c2-9ce4-4f2d-84e5-d6c7165c71ba.lovable.app-1766656693131.png" />
    <meta property="og:title" content="Sync Power">
  <meta name="twitter:title" content="Sync Power">
  <script type="module" crossorigin src="/assets/index-DiNNyeCZ.js"></script>
  <link rel="stylesheet" crossorigin href="/assets/index-CLGXioEi.css">
<script defer src="https://userhub.syncpower-soft.com/~flock.js" data-proxy-url="https://userhub.syncpower-soft.com/~api/analytics"></script></head>

  <body>
    <div id="root"></div>
  </body>
</html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 185.158.133.1:8443 · userhub.syncpower-soft.com

2026-01-10 01:55

HTTP/1.1 200 OK
Date: Sat, 10 Jan 2026 01:55:22 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
ETag: "349019ce088335195170ed59aadf0797"
Strict-Transport-Security: max-age=31536000; includeSubDomains
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Vary: accept-encoding
Server: cloudflare
CF-RAY: 9bb88d42aedf7f0d-LHR

Page title: Sync Power

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.svg" type="image/svg+xml" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <!-- Security: Prevent token leak via Referrer header -->
    <meta name="referrer" content="no-referrer-when-downgrade" />
    <title>Sync Power</title>
    <meta name="description" content="Streamline user synchronization and management across your entire organization with Sync Power" />
    <meta name="author" content="Sync Power" />

    
    <meta property="og:description" content="Streamline user synchronization and management across your entire organization" />
    <meta property="og:type" content="website" />
    <meta property="og:image" content="https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/f602f25d-2c04-4dea-9061-aa71313f4e84/id-preview-97378267--2b99d6c2-9ce4-4f2d-84e5-d6c7165c71ba.lovable.app-1766656693131.png" />

    <meta name="twitter:card" content="summary_large_image" />
    <meta name="twitter:site" content="@lovable_dev" />
    <meta name="twitter:image" content="https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/f602f25d-2c04-4dea-9061-aa71313f4e84/id-preview-97378267--2b99d6c2-9ce4-4f2d-84e5-d6c7165c71ba.lovable.app-1766656693131.png" />
    <meta property="og:title" content="Sync Power">
  <meta name="twitter:title" content="Sync Power">
  <script type="module" crossorigin src="/assets/index-DiNNyeCZ.js"></script>
  <link rel="stylesheet" crossorigin href="/assets/index-CLGXioEi.css">
<script defer src="https://userhub.syncpower-soft.com/~flock.js" data-proxy-url="https://userhub.syncpower-soft.com/~api/analytics"></script></head>

  <body>
    <div id="root"></div>
  </body>
</html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 185.158.133.1:443 · userhub.syncpower-soft.com

2026-01-03 00:11

HTTP/1.1 200 OK
Date: Sat, 03 Jan 2026 00:11:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
ETag: "349019ce088335195170ed59aadf0797"
Strict-Transport-Security: max-age=31536000; includeSubDomains
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Vary: accept-encoding
Server: cloudflare
CF-RAY: 9b7e477d69f1b90f-AMS

Page title: Sync Power

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.svg" type="image/svg+xml" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <!-- Security: Prevent token leak via Referrer header -->
    <meta name="referrer" content="no-referrer-when-downgrade" />
    <title>Sync Power</title>
    <meta name="description" content="Streamline user synchronization and management across your entire organization with Sync Power" />
    <meta name="author" content="Sync Power" />

    
    <meta property="og:description" content="Streamline user synchronization and management across your entire organization" />
    <meta property="og:type" content="website" />
    <meta property="og:image" content="https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/f602f25d-2c04-4dea-9061-aa71313f4e84/id-preview-97378267--2b99d6c2-9ce4-4f2d-84e5-d6c7165c71ba.lovable.app-1766656693131.png" />

    <meta name="twitter:card" content="summary_large_image" />
    <meta name="twitter:site" content="@lovable_dev" />
    <meta name="twitter:image" content="https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/f602f25d-2c04-4dea-9061-aa71313f4e84/id-preview-97378267--2b99d6c2-9ce4-4f2d-84e5-d6c7165c71ba.lovable.app-1766656693131.png" />
    <meta property="og:title" content="Sync Power">
  <meta name="twitter:title" content="Sync Power">
  <script type="module" crossorigin src="/assets/index-DiNNyeCZ.js"></script>
  <link rel="stylesheet" crossorigin href="/assets/index-CLGXioEi.css">
<script defer src="https://userhub.syncpower-soft.com/~flock.js" data-proxy-url="https://userhub.syncpower-soft.com/~api/analytics"></script></head>

  <body>
    <div id="root"></div>
  </body>
</html>

Found 2026-01-03 by HttpPlugin

Create report

Open service 185.158.133.1:8443 · userhub.syncpower-soft.com

2026-01-03 00:11

HTTP/1.1 200 OK
Date: Sat, 03 Jan 2026 00:11:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
ETag: "349019ce088335195170ed59aadf0797"
Strict-Transport-Security: max-age=31536000; includeSubDomains
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Vary: accept-encoding
Server: cloudflare
CF-RAY: 9b7e477ccf48ab33-YYZ

Page title: Sync Power

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.svg" type="image/svg+xml" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <!-- Security: Prevent token leak via Referrer header -->
    <meta name="referrer" content="no-referrer-when-downgrade" />
    <title>Sync Power</title>
    <meta name="description" content="Streamline user synchronization and management across your entire organization with Sync Power" />
    <meta name="author" content="Sync Power" />

    
    <meta property="og:description" content="Streamline user synchronization and management across your entire organization" />
    <meta property="og:type" content="website" />
    <meta property="og:image" content="https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/f602f25d-2c04-4dea-9061-aa71313f4e84/id-preview-97378267--2b99d6c2-9ce4-4f2d-84e5-d6c7165c71ba.lovable.app-1766656693131.png" />

    <meta name="twitter:card" content="summary_large_image" />
    <meta name="twitter:site" content="@lovable_dev" />
    <meta name="twitter:image" content="https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/f602f25d-2c04-4dea-9061-aa71313f4e84/id-preview-97378267--2b99d6c2-9ce4-4f2d-84e5-d6c7165c71ba.lovable.app-1766656693131.png" />
    <meta property="og:title" content="Sync Power">
  <meta name="twitter:title" content="Sync Power">
  <script type="module" crossorigin src="/assets/index-DiNNyeCZ.js"></script>
  <link rel="stylesheet" crossorigin href="/assets/index-CLGXioEi.css">
<script defer src="https://userhub.syncpower-soft.com/~flock.js" data-proxy-url="https://userhub.syncpower-soft.com/~api/analytics"></script></head>

  <body>
    <div id="root"></div>
  </body>
</html>

Found 2026-01-03 by HttpPlugin

Create report

Open service 185.158.133.1:443 · userhub.syncpower-soft.com

2025-12-23 03:29

HTTP/1.1 200 OK
Date: Tue, 23 Dec 2025 03:29:24 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
ETag: "e784474866ffe6fb1de8784ef248750a"
Strict-Transport-Security: max-age=31536000; includeSubDomains
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Vary: accept-encoding
Server: cloudflare
CF-RAY: 9b24c63ed86a4315-EWR

Page title: Sync Power

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.svg" type="image/svg+xml" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Sync Power</title>
    <meta name="description" content="Streamline user synchronization and management across your entire organization with Sync Power" />
    <meta name="author" content="Sync Power" />

    
    <meta property="og:description" content="Streamline user synchronization and management across your entire organization" />
    <meta property="og:type" content="website" />
    <meta property="og:image" content="https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/72f8fef4-8fa2-44d0-ab61-6e73b81e60d1/id-preview-c95bbdb3--2b99d6c2-9ce4-4f2d-84e5-d6c7165c71ba.lovable.app-1766460112761.png" />

    <meta name="twitter:card" content="summary_large_image" />
    <meta name="twitter:site" content="@lovable_dev" />
    <meta name="twitter:image" content="https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/72f8fef4-8fa2-44d0-ab61-6e73b81e60d1/id-preview-c95bbdb3--2b99d6c2-9ce4-4f2d-84e5-d6c7165c71ba.lovable.app-1766460112761.png" />
    <meta property="og:title" content="Sync Power">
  <meta name="twitter:title" content="Sync Power">
  <script type="module" crossorigin src="/assets/index-Bme2DKiP.js"></script>
  <link rel="stylesheet" crossorigin href="/assets/index-B0tQ7xfZ.css">
<script defer src="https://userhub.syncpower-soft.com/~flock.js" data-proxy-url="https://userhub.syncpower-soft.com/~api/analytics"></script></head>

  <body>
    <div id="root"></div>
  </body>
</html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 185.158.133.1:8443 · userhub.syncpower-soft.com

2025-12-23 03:29

HTTP/1.1 200 OK
Date: Tue, 23 Dec 2025 03:29:24 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
ETag: "e784474866ffe6fb1de8784ef248750a"
Strict-Transport-Security: max-age=31536000; includeSubDomains
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Vary: accept-encoding
Server: cloudflare
CF-RAY: 9b24c63ebf7f4310-EWR

Page title: Sync Power

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.svg" type="image/svg+xml" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Sync Power</title>
    <meta name="description" content="Streamline user synchronization and management across your entire organization with Sync Power" />
    <meta name="author" content="Sync Power" />

    
    <meta property="og:description" content="Streamline user synchronization and management across your entire organization" />
    <meta property="og:type" content="website" />
    <meta property="og:image" content="https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/72f8fef4-8fa2-44d0-ab61-6e73b81e60d1/id-preview-c95bbdb3--2b99d6c2-9ce4-4f2d-84e5-d6c7165c71ba.lovable.app-1766460112761.png" />

    <meta name="twitter:card" content="summary_large_image" />
    <meta name="twitter:site" content="@lovable_dev" />
    <meta name="twitter:image" content="https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/72f8fef4-8fa2-44d0-ab61-6e73b81e60d1/id-preview-c95bbdb3--2b99d6c2-9ce4-4f2d-84e5-d6c7165c71ba.lovable.app-1766460112761.png" />
    <meta property="og:title" content="Sync Power">
  <meta name="twitter:title" content="Sync Power">
  <script type="module" crossorigin src="/assets/index-Bme2DKiP.js"></script>
  <link rel="stylesheet" crossorigin href="/assets/index-B0tQ7xfZ.css">
<script defer src="https://userhub.syncpower-soft.com/~flock.js" data-proxy-url="https://userhub.syncpower-soft.com/~api/analytics"></script></head>

  <body>
    <div id="root"></div>
  </body>
</html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 185.158.133.1:8443 · userhub.syncpower-soft.com

2025-12-20 16:57

HTTP/1.1 200 OK
Date: Sat, 20 Dec 2025 16:57:15 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
ETag: "e784474866ffe6fb1de8784ef248750a"
Strict-Transport-Security: max-age=31536000; includeSubDomains
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Vary: accept-encoding
Server: cloudflare
CF-RAY: 9b10ad7cfbd171be-FRA

Page title: Sync Power

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.svg" type="image/svg+xml" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Sync Power</title>
    <meta name="description" content="Streamline user synchronization and management across your entire organization with Sync Power" />
    <meta name="author" content="Sync Power" />

    
    <meta property="og:description" content="Streamline user synchronization and management across your entire organization" />
    <meta property="og:type" content="website" />
    <meta property="og:image" content="https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/9bbc8b28-8235-48ab-a361-48c0830711a7/id-preview-66c6d020--2b99d6c2-9ce4-4f2d-84e5-d6c7165c71ba.lovable.app-1766039371439.png" />

    <meta name="twitter:card" content="summary_large_image" />
    <meta name="twitter:site" content="@lovable_dev" />
    <meta name="twitter:image" content="https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/9bbc8b28-8235-48ab-a361-48c0830711a7/id-preview-66c6d020--2b99d6c2-9ce4-4f2d-84e5-d6c7165c71ba.lovable.app-1766039371439.png" />
    <meta property="og:title" content="Sync Power">
  <meta name="twitter:title" content="Sync Power">
  <script type="module" crossorigin src="/assets/index-Bme2DKiP.js"></script>
  <link rel="stylesheet" crossorigin href="/assets/index-B0tQ7xfZ.css">
<script defer src="https://userhub.syncpower-soft.com/~flock.js" data-proxy-url="https://userhub.syncpower-soft.com/~api/analytics"></script></head>

  <body>
    <div id="root"></div>
  </body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

Open service 185.158.133.1:443 · userhub.syncpower-soft.com

2025-12-20 16:57

HTTP/1.1 200 OK
Date: Sat, 20 Dec 2025 16:57:15 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
ETag: "e784474866ffe6fb1de8784ef248750a"
Strict-Transport-Security: max-age=31536000; includeSubDomains
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Vary: accept-encoding
Server: cloudflare
CF-RAY: 9b10ad7cec9ddbff-FRA

Page title: Sync Power

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link rel="icon" href="/favicon.svg" type="image/svg+xml" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Sync Power</title>
    <meta name="description" content="Streamline user synchronization and management across your entire organization with Sync Power" />
    <meta name="author" content="Sync Power" />

    
    <meta property="og:description" content="Streamline user synchronization and management across your entire organization" />
    <meta property="og:type" content="website" />
    <meta property="og:image" content="https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/9bbc8b28-8235-48ab-a361-48c0830711a7/id-preview-66c6d020--2b99d6c2-9ce4-4f2d-84e5-d6c7165c71ba.lovable.app-1766039371439.png" />

    <meta name="twitter:card" content="summary_large_image" />
    <meta name="twitter:site" content="@lovable_dev" />
    <meta name="twitter:image" content="https://pub-bb2e103a32db4e198524a2e9ed8f35b4.r2.dev/9bbc8b28-8235-48ab-a361-48c0830711a7/id-preview-66c6d020--2b99d6c2-9ce4-4f2d-84e5-d6c7165c71ba.lovable.app-1766039371439.png" />
    <meta property="og:title" content="Sync Power">
  <meta name="twitter:title" content="Sync Power">
  <script type="module" crossorigin src="/assets/index-Bme2DKiP.js"></script>
  <link rel="stylesheet" crossorigin href="/assets/index-B0tQ7xfZ.css">
<script defer src="https://userhub.syncpower-soft.com/~flock.js" data-proxy-url="https://userhub.syncpower-soft.com/~api/analytics"></script></head>

  <body>
    <div id="root"></div>
  </body>
</html>

Found 2025-12-20 by HttpPlugin

Create report

userhub.syncpower-soft.com

Fingerprint:

ac688ce7d639ea1eaf68827a3e871e618fc694e3acc405ef1aef046ad90ddf09

CN:

userhub.syncpower-soft.com

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-12-04 01:27

Not after:

2026-03-04 02:27

Domain summary

userhub.syncpower-soft.com 9

1 recorded

IP summary

185.158.133.1 2

1 recorded

Domain userhub.syncpower-soft.com

Germany

Software information

Swagger API description is publicly available

Swagger API description is publicly available

userhub.syncpower-soft.com

Domain summary

IP summary