LeakIX - Host 172.64.155.246

Host 172.64.155.246

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.64.155.246
Domain: quoting-qa.devolutions.dev
Port: 443
URL: https://quoting-qa.devolutions.dev

First seen 2025-12-23 14:33
Last seen 2026-02-02 00:23
Open for 40 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493431234ff3826355f3e51430d1714eb07e43afbe

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /store/transaction/{id}
GET /basket/{hubInfoID}/hub
GET /basket/{id}
GET /basket/{opportunityID}/renew
GET /store/countries
GET /store/html/{id}/{language}
GET /store/old/html/{id}/{language}
GET /store/old/pdf/{id}/{language}
GET /store/products
GET /store/support/{id}/pricing
GET /transaction/{id}/pdf
POST /basket
POST /basket/promo
POST /store/account
POST /store/basket/{id}/transaction
PUT /store/quote/{id}/convert
PUT /store/transaction/{id}/pay

Found on 2026-02-02 00:23

Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
Found on 2026-01-22 22:26

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493431234ff3826355f3e51430d1714eb008c08ba4

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /store/transaction/{id}
GET /basket/{hubInfoID}/hub
GET /basket/{id}
GET /basket/{opportunityID}/renew
GET /store/countries
GET /store/html/{id}/{language}
GET /store/old/html/{id}/{language}
GET /store/old/pdf/{id}/{language}
GET /store/products
GET /store/support/{id}/pricing
GET /store/{id}/paypal
GET /transaction/{id}/pdf
POST /basket
POST /basket/promo
POST /store/account
POST /store/basket/{id}/transaction
PUT /store/quote/{id}/convert
PUT /store/transaction/{id}/pay

Found on 2026-01-16 01:19

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493431234ff3826355f3e51430d1714eb0d532ecac

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /store/transaction/{id}
GET /basket/{hubInfoID}/hub
GET /basket/{id}
GET /basket/{opportunityID}/renew
GET /store/countries
GET /store/html/{id}/{language}
GET /store/old/html/{id}/{language}
GET /store/old/pdf/{id}/{language}
GET /store/products
GET /store/support/{id}/pricing
GET /store/{id}/paypal
GET /transaction/{id}/pdf
POST /basket
POST /basket/promo
POST /store/account
POST /store/basket/{id}/transaction
POST /store/existing
PUT /store/quote/{id}/convert
PUT /store/transaction/{id}/pay

Found on 2026-01-10 02:21

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.64.155.246
Domain: quoting.devolutions.dev
Port: 443
URL: https://quoting.devolutions.dev

First seen 2025-12-22 17:51
Last seen 2026-01-23 08:37
Open for 31 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493431234ff3826355f3e51430d1714eb0d532ecac

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /store/transaction/{id}
GET /basket/{hubInfoID}/hub
GET /basket/{id}
GET /basket/{opportunityID}/renew
GET /store/countries
GET /store/html/{id}/{language}
GET /store/old/html/{id}/{language}
GET /store/old/pdf/{id}/{language}
GET /store/products
GET /store/support/{id}/pricing
GET /store/{id}/paypal
GET /transaction/{id}/pdf
POST /basket
POST /basket/promo
POST /store/account
POST /store/basket/{id}/transaction
POST /store/existing
PUT /store/quote/{id}/convert
PUT /store/transaction/{id}/pay

Found on 2026-01-23 08:37

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035493431234ff3826355f3e51430d1714eb008c08ba4

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /store/transaction/{id}
GET /basket/{hubInfoID}/hub
GET /basket/{id}
GET /basket/{opportunityID}/renew
GET /store/countries
GET /store/html/{id}/{language}
GET /store/old/html/{id}/{language}
GET /store/old/pdf/{id}/{language}
GET /store/products
GET /store/support/{id}/pricing
GET /store/{id}/paypal
GET /transaction/{id}/pdf
POST /basket
POST /basket/promo
POST /store/account
POST /store/basket/{id}/transaction
PUT /store/quote/{id}/convert
PUT /store/transaction/{id}/pay

Found on 2026-01-09 12:35

Create report

Open service 172.64.155.246:80 · www.mattroftheheart.sg

2026-01-26 14:01

HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Jan 2026 14:01:21 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Cache-Control: max-age=3600
Expires: Mon, 26 Jan 2026 15:01:21 GMT
Location: https://www.mattroftheheart.sg/
Set-Cookie: __cf_bm=vR0TAgS82IXr9WwwLCEU4u__E0gMaxI0ZfCX6f0rnMc-1769436081-1.0.1.1-0.gqpH6V_R59SN9mNkLEwd_fwq.X79mCcxFHEGI1Bk9sZpCVhFZq4_Q2DRBL_lckPvNvCNaGtl75FdPnBz9b7veIgUCcENVbzK4YxfCYF1Y; path=/; expires=Mon, 26-Jan-26 14:31:21 GMT; domain=.mattroftheheart.sg; HttpOnly
Server: cloudflare
CF-RAY: 9c408ab76d670e6c-AMS

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Host 172.64.155.246

Software information

Swagger API description is publicly available

Swagger API description is publicly available

www.mattroftheheart.sg

shop.protan.se*.shop.protan.se

migranmonstret.sewww.migranmonstret.se

paradex.io*.paradex.io

circlecurriculum.org*.circlecurriculum.org

truckworld.asia*.truckworld.asia

alwaysloveyou.com*.alwaysloveyou.com

mibambu.mx*.mibambu.mx

quoting.devolutions.dev

circlecurriculum.org*.circlecurriculum.org

quoting-qa.devolutions.dev

preview.diamondglow.com

isp.qzz.io*.isp.qzz.io

paradex.io*.paradex.io

ccbm.bkgq-dev.cc-bm.net

plus500.sg*.plus500.sg

migranmonstret.sewww.migranmonstret.se

ac2services-jp.axs.com

firstaidkitband.com*.firstaidkitband.com

*.devolutions.devdevolutions.dev

hostinger.co.uk

circlecurriculum.org*.circlecurriculum.org

plus500.sg*.plus500.sg

circlecurriculum.org*.circlecurriculum.org

rubyfortune2.com*.rubyfortune2.com

srm-qa.devolutions.dev

mibambu.mx*.mibambu.mx

Domain summary