LeakIX - Host 191.235.81.73

Host 191.235.81.73

Brazil

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Microsoft-IIS 10.0

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 191.235.81.73
Domain: cloudhub.lacunasoftware.com
Port: 443
URL: https://cloudhub.lacunasoftware.com

First seen 2025-12-28 02:21
Last seen 2026-02-09 14:50
Open for 43 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035499185f36443cb861679c483da646950efe6ac76bf
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/sessions/certificate
GET /api/sessions/services
GET /api/v2/sessions/certificate
POST /api/sessions
POST /api/sessions/services/{name}
POST /api/sessions/sign-hash
```
  Found on 2026-02-09 14:50
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 191.235.81.73
Domain: api.grantid.com
Port: 443
URL: https://api.grantid.com

First seen 2025-12-28 02:03
Last seen 2026-02-02 08:10
Open for 36 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354939891ad7f0588ce464980688b5c55c01dfeb065d

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /Api/Ext/ApiConnections/{connectionId}
DELETE /Api/Ext/Users/{userId}/Tokens/{key}
GET /Api/Events/EventByCity
GET /Api/Events/EventByCountry
GET /Api/Events/FactorsByDay
GET /Api/Events/LastFactors
GET /Api/Events/LastLogins
GET /Api/Events/LastRegistrations
GET /Api/Events/LoginsByDay
GET /Api/Events/MonthlyStats
GET /Api/Events/RegistrationsByDay
GET /Api/Events/TopLogins
GET /Api/Events/TotalFactors
GET /Api/Ext/ApiConnections
GET /Api/Ext/Applications
GET /Api/Ext/Applications/Users
GET /Api/Ext/Applications/Validate/{appId}
GET /Api/Ext/Applications/{id}
GET /Api/Ext/Applications/{id}/Settings
GET /Api/Ext/Claims
GET /Api/Ext/Claims/Users
GET /Api/Ext/IdentityScopes
GET /Api/Ext/Users
GET /Api/Ext/Users/Query
GET /Api/Ext/Users/{userId}
GET /Api/Ext/Users/{userId}/Claims
GET /Api/Ext/Users/{userId}/Lockout
GET /Api/Ext/Users/{userId}/Tokens
GET /Api/v2/Ext/Users
GET /Api/v2/Ext/Users/Query
POST /Api/Ext/ApiConnections/{connectionId}/ApiScopes
POST /Api/Ext/ApiConnections/{id}/ApiSecrets
POST /Api/Ext/Applications/{id}/Secrets
POST /Api/Ext/Users/Batch
POST /Api/Ext/Users/{userId}/Email-Factor-Request
POST /Api/Ext/Users/{userId}/Email-Factor-Verification
POST /Api/Ext/Users/{userId}/Password
POST /Api/Ext/Users/{userId}/ResetPassword
POST /Api/Ext/Users/{userId}/ResetSecondPassword
POST /Api/Ext/Users/{userId}/SecondPassword
POST /Api/Ext/Users/{userId}/Set-Password-Email
POST /Api/Ext/Users/{userId}/Set-Password-Url
POST /Api/Ext/Users/{userId}/ValidateSecondPassword
PUT /Api/Ext/ApiConnections/{connectionId}/ApiScopes/{scopeId}
PUT /Api/Ext/ApiConnections/{id}
PUT /Api/Ext/Claims/{claimId}
PUT /Api/Ext/IdentityScopes/{id}
PUT /Api/Ext/Users/Bulk-Lookup
PUT /Api/Ext/Users/{userId}/Claims/{claimId}
PUT /Api/Ext/Users/{userId}/Email
PUT /Api/Ext/Users/{userId}/Name
PUT /Api/Ext/Users/{userId}/Phone
PUT /Api/Ext/Users/{userId}/Username

Found on 2026-02-02 08:10

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 191.235.81.73
Domain: dasa-nmonitor-api-relatorios-hml.ionic.health
Port: 443
URL: https://dasa-nmonitor-api-relatorios-hml.ionic.health

First seen 2025-12-14 02:46
Last seen 2026-01-23 10:03
Open for 40 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-23 10:03
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 191.235.81.73
Domain: sandbox-hmg.consumer.pontocash.com.br
Port: 443
URL: https://sandbox-hmg.consumer.pontocash.com.br

First seen 2025-12-21 17:58
Last seen 2026-01-22 23:03
Open for 32 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d60fce68b655c31aa22b1a3a70dcaee0cad4cefd3be

Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
GET /api/ConsumerApp/v1/AccountDeletionInfo
GET /api/ConsumerApp/v1/ChangeEmailConfirmation
GET /api/ConsumerApp/v1/CheckCPF
GET /api/ConsumerApp/v1/CompleteRegistration
GET /api/ConsumerApp/v1/CompleteRegistrationExpiredToken
GET /api/ConsumerApp/v1/ConfirmAccount
GET /api/ConsumerApp/v1/ExpiredToken
GET /api/ConsumerApp/v1/GetAddressByZipCode
GET /api/ConsumerApp/v1/GetExtractOccurrenceDetails
GET /api/ConsumerApp/v1/GetExtractOccurrenceDetailsItems
GET /api/ConsumerApp/v1/GetExtractOccurrences
GET /api/ConsumerApp/v1/GetOccurrences
GET /api/ConsumerApp/v1/GetOccurrencesByPeriod
GET /api/ConsumerApp/v1/GetPromotions
GET /api/ConsumerApp/v1/GetPushNotification
GET /api/ConsumerApp/v1/GetPushNotifications
GET /api/ConsumerApp/v1/GetRedeemAwaitingConsumerAuthorization
GET /api/ConsumerApp/v1/GetRewardsAboutToExpire
GET /api/ConsumerApp/v1/GetSelectedContractInfo
GET /api/ConsumerApp/v1/GetStores
GET /api/ConsumerApp/v1/GetStoresWithGPS
GET /api/ConsumerApp/v1/GetTermsOfUse
GET /api/ConsumerApp/v1/GetUserBasicData
GET /api/ConsumerApp/v1/GetUserCellPhoneNumber
GET /api/ConsumerApp/v1/GetUserComplementaryData
GET /api/ConsumerApp/v1/GetUserEmailAddress
GET /api/ConsumerApp/v1/GetWarningMessageForAccountDeletion
GET /api/ConsumerApp/v1/Logout
GET /api/ConsumerApp/v1/PCPayPrivacyPolicy
GET /api/ConsumerApp/v1/PrivacyPolicy
GET /api/ConsumerApp/v1/ResetPassword
GET /api/ConsumerApp/v1/ResetPasswordConfirmation
GET /api/ConsumerApp/v1/SendCompleteRegistrationEmail
GET /api/ConsumerApp/v1/SupportInfo
GET /api/ConsumerApp/v1/TermsOfUse
GET /api/ConsumerApp/v1/TermsOfUseAndPrivacyPolicy
GET /api/ConsumerApp/v1/VerifyCellPhoneNumber
GET /api/WhatsAppWebhook/v1
POST /api/ConsumerApp/v1/AnswerRedeemAwaitingConsumerAuthorization
POST /api/ConsumerApp/v1/AuthenticateWithPassword
POST /api/ConsumerApp/v1/AuthorizeAccountDeletion
POST /api/ConsumerApp/v1/ChangeConsumerContractBalance
POST /api/ConsumerApp/v1/ChangeEmailAddress
POST /api/ConsumerApp/v1/CleanConsumerContractLinks
POST /api/ConsumerApp/v1/ConfirmCellPhoneNumber
POST /api/ConsumerApp/v1/ConfirmCompleteRegistration
POST /api/ConsumerApp/v1/DeleteAccount
POST /api/ConsumerApp/v1/DeleteConsumerContractLink
POST /api/ConsumerApp/v1/EnterConsumerIdentificationBasicData
POST /api/ConsumerApp/v1/EnterConsumerRegistrationDataPhase1
POST /api/ConsumerApp/v1/EnterConsumerRegistrationDataPhase2
POST /api/ConsumerApp/v1/EnterPIN
POST /api/ConsumerApp/v1/FinishUserCellPhoneNumberChange
POST /api/ConsumerApp/v1/FinishUserEmailAddressChange
POST /api/ConsumerApp/v1/ForgotPassword
POST /api/ConsumerApp/v1/InsertConsumerContractLink
POST /api/ConsumerApp/v1/Login
POST /api/ConsumerApp/v1/RefreshToken
POST /api/ConsumerApp/v1/Register
POST /api/ConsumerApp/v1/RequestRedeem
POST /api/ConsumerApp/v1/SelectPINSendChannel
POST /api/ConsumerApp/v1/SendContactMessage
POST /api/ConsumerApp/v1/SendPushNotification
POST /api/ConsumerApp/v1/SendToken
POST /api/ConsumerApp/v1/StartUserCellPhoneNumberChange
POST /api/ConsumerApp/v1/StartUserEmailAddressChange
POST /api/ConsumerApp/v1/UserBasicDataChange
POST /api/ConsumerApp/v1/UserComplementaryBasicDataChange
POST /api/ConsumerApp/v1/ValidateAccountDeletionToken
POST /api/WhatsAppWebhook/v1/PlugMessageInstanceConnectedWebhook
POST /api/WhatsAppWebhook/v1/PlugMessageInstanceDisconnectedWebhook
POST /api/WhatsAppWebhook/v1/PlugMessageMsgReceived
POST /api/WhatsAppWebhook/v1/PlugMessageMsgStatusReceived
POST /api/WhatsAppWebhook/v1/ReceiveMsgForwardedFromProductionEnvironment

Found on 2026-01-22 23:03

Create report

Open service 191.235.81.73:80

2026-01-26 15:39

HTTP/1.1 404 Site Not Found
Content-Length: 2667
Connection: close
Content-Type: text/html
Date: Mon, 26 Jan 2026 15:40:37 GMT

Page title: Microsoft Azure Web App - Error 404

<!DOCTYPE html>
<html>
<head>
    <title>Microsoft Azure Web App - Error 404</title>
    <style type="text/css">
        html {
            height: 100%;
            width: 100%;
        }

        #feature {
            width: 960px;
            margin: 75px auto 0 auto;
            overflow: auto;
        }

        #content {
            font-family: "Segoe UI";
            font-weight: normal;
            font-size: 22px;
            color: #ffffff;
            float: left;
            margin-top: 68px;
            margin-left: 0px;
            vertical-align: middle;
        }

            #content h1 {
                font-family: "Segoe UI Light";
                color: #ffffff;
                font-weight: normal;
                font-size: 60px;
                line-height: 48pt;
                width: 800px;
            }

        a, a:visited, a:active, a:hover {
            color: #ffffff;
        }

        #content a.button {
            background: #0DBCF2;
            border: 1px solid #FFFFFF;
            color: #FFFFFF;
            display: inline-block;
            font-family: Segoe UI;
            font-size: 24px;
            line-height: 46px;
            margin-top: 10px;
            padding: 0 15px 3px;
            text-decoration: none;
        }

            #content a.button img {
                float: right;
                padding: 10px 0 0 15px;
            }

            #content a.button:hover {
                background: #1C75BC;
            }
    </style>
    <script type="text/javascript">
        function toggle_visibility(id) {
            var e = document.getElementById(id);
            if (e.style.display == 'block')
                e.style.display = 'none';
            else
                e.style.display = 'block';
        }
    </script>
</head>
<body bgcolor="#00abec">
    <div id="feature">
        <div id="content">
            <h1>404 Web Site not found.</h1>
            <p>You may be seeing this error due to one of the reasons listed below :</p>
            <ul>
                <li>Custom domain has not been configured inside Azure. See <a href="https://go.microsoft.com/fwlink/?linkid=2194614">how to map an existing domain</a> to resolve this.</li>
                <li>Client cache is still pointing the domain to old IP address. Clear the cache by running the command <i>ipconfig/flushdns.</i></li>
            </ul>
            <p>Checkout <a href="https://go.microsoft.com/fwlink/?linkid=2194451">App Service Domain FAQ</a> for more questions.</p>
        </div>
     </div>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Host 191.235.81.73

Brazil

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

blog.fuminas.com.br

www.cardigonte.com.ar

sandbox-ctf.integration.pontocash.com.br

www.softnet.com.br

dasa-nmonitor-api-relatorios-hml.ionic.health

cloudhub.lacunasoftware.com

api.grantid.com

dasa-nmonitor-api-relatorios.ionic.health

*.institutovotorantim.org.brinstitutovotorantim.org.br

sandbox-hmg.consumer.pontocash.com.br

monumenta.com.br

api.greenea.com.br

romar.uniotecnologia.com

dell.uniotecnologia.com

msgov.grantid.com

trevizo.uniotecnologia.com

www.essentta.com

*.bitfood.com.brbitfood.com.br

universal.uniotecnologia.com

cloud.uniotecnologia.com

bolapesadapdv.uniotecnologia.com

www.org-search.com

portal.squidconta.com.br

postosaopaulo.uniotecnologia.com

horacio.uniotecnologia.com

sesces.grantid.com

www.gog-co.com

strazza.uniotecnologia.com

hapvida-nmonitor.ionic.health

www.site-ar.com

www.homepage-ar.com

www.gog-info.com

sa.advisurf.com

www.look-go.com

lacunasoft.com

lacunasoft.com.br

lacuna.cc

www.dialconsultores.cl

lacuna.help

santaisabel.uniotecnologia.com

sistema.otpx.com.br

itaquano.uniotecnologia.com