LeakIX - Host 172.66.0.125

Host 172.66.0.125

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.0.125
Domain: un-cdn.mcbtest.dk
Port: 443
URL: https://un-cdn.mcbtest.dk

First seen 2025-12-06 15:36
Last seen 2026-02-10 00:36
Open for 65 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-10 00:36
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.0.125
Domain: coopsmadskole.dk
Port: 443
URL: https://coopsmadskole.dk

First seen 2025-11-18 06:10
Last seen 2026-02-09 20:13
Open for 83 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035493560ad52742db52eef763e77ef763e77ef763e77
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/article_list
GET /api/encyclopedia
GET /api/recipes
```
  Found on 2026-02-09 20:13
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.0.125
Domain: www.skolekontakten.dk
Port: 443
URL: https://www.skolekontakten.dk

First seen 2025-10-30 09:10
Last seen 2026-02-09 20:13
Open for 102 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035493560ad52742db52eef763e77ef763e77ef763e77
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/article_list
GET /api/encyclopedia
GET /api/recipes
```
  Found on 2026-02-09 20:13
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.0.125
Domain: dev-contentapi.pwtcxstest.com
Port: 443
URL: https://dev-contentapi.pwtcxstest.com

First seen 2025-11-25 10:32
Last seen 2026-02-09 19:21
Open for 76 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 19:21
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.0.125
Domain: umbraco-plast-line.mcbcdn.com
Port: 443
URL: https://umbraco-plast-line.mcbcdn.com

First seen 2025-12-10 17:07
Last seen 2026-02-09 19:19
Open for 61 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 19:19
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.0.125
Domain: pl-cdn.mcbtest.dk
Port: 443
URL: https://pl-cdn.mcbtest.dk

First seen 2025-12-10 14:33
Last seen 2026-02-09 14:51
Open for 61 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-09 14:51
Create report

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.66.0.125
Domain: www.nottalone.org.uk
Port: 80
URL: http://www.nottalone.org.uk

First seen 2024-10-07 08:55
Last seen 2026-02-09 10:35
Open for 490 days

Severity: medium
Fingerprint: 5f32cf5d6962f09ce9dbcc92e9dbcc92ec6d4db50b43c7611afd56327676b9aa

Found 60 files trough .DS_Store spidering:

/composer.json
/composer.lock
/index.php
/license.txt
/node_modules
/package-lock.json
/package.json
/readme.html
/vendor
/wp-activate.php
/wp-admin
/wp-blog-header.php
/wp-comments-post.php
/wp-config-sample.php
/wp-config.php
/wp-content
/wp-content/index.php
/wp-content/languages
/wp-content/mu-plugins
/wp-content/plugins
/wp-content/themes
/wp-content/themes/index.php
/wp-content/themes/nottalone
/wp-content/themes/nottalone/404.php
/wp-content/themes/nottalone/assets
/wp-content/themes/nottalone/basestyle.php
/wp-content/themes/nottalone/CHANGELOG.md
/wp-content/themes/nottalone/Components
/wp-content/themes/nottalone/composer.json
/wp-content/themes/nottalone/composer.lock
/wp-content/themes/nottalone/dist
/wp-content/themes/nottalone/functions.php
/wp-content/themes/nottalone/inc
/wp-content/themes/nottalone/index.php
/wp-content/themes/nottalone/lib
/wp-content/themes/nottalone/LICENSE.md
/wp-content/themes/nottalone/package-lock.json
/wp-content/themes/nottalone/package.json
/wp-content/themes/nottalone/phpcs.xml.dist
/wp-content/themes/nottalone/README.md
/wp-content/themes/nottalone/screenshot.png
/wp-content/themes/nottalone/search.php
/wp-content/themes/nottalone/style.css
/wp-content/themes/nottalone/templates
/wp-content/themes/nottalone/theme.json
/wp-content/themes/nottalone/vendor
/wp-content/themes/nottalone/vite-plugin-flynt.js
/wp-content/themes/nottalone/vite.config.js
/wp-content/upgrade
/wp-content/uploads
/wp-cron.php
/wp-includes
/wp-links-opml.php
/wp-load.php
/wp-login.php
/wp-mail.php
/wp-settings.php
/wp-signup.php
/wp-trackback.php
/xmlrpc.php

Found on 2026-02-09 10:35

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.0.125
Domain: signalr.umbraco.io
Port: 443
URL: https://signalr.umbraco.io

First seen 2025-12-23 02:47
Last seen 2026-02-02 12:32
Open for 41 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f3d88d60f148cec7f148cec7f148cec7f148cec7f148cec7
```
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /api/Events
```
  Found on 2026-02-02 12:32
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.0.125
Domain: sprott.com
Port: 443
URL: https://sprott.com

First seen 2025-10-16 13:27
Last seen 2026-02-02 09:44
Open for 108 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-02 09:44
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.0.125
Domain: www.coopmadskole.dk
Port: 443
URL: https://www.coopmadskole.dk

First seen 2025-11-18 06:10
Last seen 2026-02-02 02:16
Open for 75 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035493560ad52742db52eef763e77ef763e77ef763e77
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/article_list
GET /api/encyclopedia
GET /api/recipes
```
  Found on 2026-02-02 02:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.0.125
Domain: gocook.dk
Port: 443
URL: https://gocook.dk

First seen 2025-11-03 08:33
Last seen 2026-02-01 22:46
Open for 90 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035493560ad52742db52eef763e77ef763e77ef763e77
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/article_list
GET /api/encyclopedia
GET /api/recipes
```
  Found on 2026-02-01 22:46
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.0.125
Domain: stage.jacobsenbryg.dk
Port: 443
URL: https://stage.jacobsenbryg.dk

First seen 2025-10-28 21:44
Last seen 2026-01-25 15:42
Open for 88 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad0354954197271760f5424f1d6d9d648fb3e6976f2c438
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /Feedback/delete/Email
DELETE /Feedback/delete/Indentifier
GET /Feedback
GET /Feedback/CSV
GET /Feedback/identifiers
```
  Found on 2026-01-25 15:42
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.0.125
Domain: www.coopsmadskole.dk
Port: 443
URL: https://www.coopsmadskole.dk

First seen 2025-11-18 06:10
Last seen 2026-01-23 00:52
Open for 65 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035493560ad52742db52eef763e77ef763e77ef763e77
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/article_list
GET /api/encyclopedia
GET /api/recipes
```
  Found on 2026-01-23 00:52
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.0.125
Domain: backoffice.landbrugslotteriet.dk
Port: 443
URL: https://backoffice.landbrugslotteriet.dk

First seen 2025-11-05 15:50
Last seen 2026-01-22 23:00
Open for 78 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-22 23:00
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.0.125
Domain: cms.ioi.dk
Port: 443
URL: https://cms.ioi.dk

First seen 2025-11-15 08:50
Last seen 2026-01-16 22:49
Open for 62 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d60a85a4166bf4d1fb40a9e09c69a0eb76321b20f1e

Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /api/v1/general/languages
GET /api/v1/general/settings
GET /api/v1/general/sitemap
GET /api/v1/general/translations
GET /api/v1/health
GET /api/v1/jobs/list
GET /api/v1/jobs/{id}
GET /api/v1/newsletter/permissions
GET /api/v1/pages
GET /api/v1/pages/article-explore-panels
GET /api/v1/pages/root
GET /api/v1/pages/{id}
GET /api/v1/pages/{id}/ancestors
GET /api/v1/pages/{id}/children
GET /api/v1/pages/{id}/descendants
GET /api/v1/search
GET /umbraco/api/contentupdatercontroller/changedoctype
GET /umbraco/api/contentupdatercontroller/clean
GET /umbraco/api/contentupdatercontroller/clone
GET /umbraco/api/contentupdatercontroller/doctype
GET /umbraco/api/contentupdatercontroller/update
POST /api/v1/accounts/sign-up
POST /api/v1/newsletter/sign-up
POST /api/v1/recaptcha/verify-token

Found on 2026-01-16 22:49

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.0.125
Domain: www.atse.org.au
Port: 443
URL: https://www.atse.org.au

First seen 2025-11-11 16:16
Last seen 2026-01-16 16:27
Open for 66 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-16 16:27
Create report

Open service 172.66.0.125:8443 · www.verdens-tv.dk

2026-01-26 16:02

HTTP/1.1 301 Moved Permanently
Date: Mon, 26 Jan 2026 16:02:28 GMT
Content-Length: 0
Connection: close
Server: cloudflare
Location: https://www.copydan-verdenstv.dk/
CF-Ray: 9c413c1d7dbddc95-FRA
CF-Cache-Status: DYNAMIC
x-powered-by: ASP.NET
Set-Cookie: __cf_bm=1zcinhnUw84DgVoH8HDb1_Kt5h.Iw3tlCFHc6vZDHY0-1769443348-1.0.1.1-BcUPB5PZRlsIMVSRfNySgiJTlt.tDUZTIPtO9C9pdowSvKZ.CbZdLrgU77GJFZqYqeRtTQ3CRRLoG_oxo5ql5.NpohjNvyBxOX2_nMXqVX8; path=/; expires=Mon, 26-Jan-26 16:32:28 GMT; domain=.www.verdens-tv.dk; HttpOnly; Secure; SameSite=None
alt-svc: h3=":8443"; ma=86400

Found 2026-01-26 by HttpPlugin