LeakIX - Host 20.118.40.11

Host 20.118.40.11

United States

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443 tcp/80

Microsoft-IIS 10.0

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.118.40.11
Domain: tgw-dev.propio-ls.com
Port: 443
URL: https://tgw-dev.propio-ls.com

First seen 2026-01-02 03:17
Last seen 2026-01-16 15:28
Open for 14 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d606dfc2b4a49a8f729bc7646649910e78e97035002

Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /api/v1/project/webhook/{customerNumber}/{id}
DELETE /api/v1/project/{projectNumber}
GET /api/v1/Parameters/Client/{clientId}/Languages
GET /api/v1/Parameters/SupportedLanguages
GET /api/v1/Translation/Document/{documentId}
GET /api/v1/Translation/Document/{documentId}/Translated
GET /api/v1/Workflow/DownloadDocument/{workflowId}
GET /api/v1/project/Statuses
GET /api/v1/project/asset/{assetId}/version/{versionId}
GET /api/v1/project/languages
GET /api/v1/project/webhooks/{customerNumber}
GET /api/v1/project/{projectNumber}/file/source/{sourceFileNumber}/{language}/content
GET /api/v1/project/{projectNumber}/status
GET /api/v1/project/{projectNumber}/target/{targetLanguage}/zip
POST /api/v1/PostEditing/GetApeSegments
POST /api/v1/QualityEstimation/BasicQEScore
POST /api/v1/QualityEstimation/CometQEScore
POST /api/v1/Translation/Document
POST /api/v1/Translation/Text
POST /api/v1/Translation/TextTranslation
POST /api/v1/Workflow/start
POST /api/v1/asset/{assetId}/version
POST /api/v1/project/asset
POST /api/v1/project/create
POST /api/v1/project/file/source
POST /api/v1/project/webhook/register
POST /api/v1/webhook/receiver/{targetSystem}/{path}

Found on 2026-01-16 15:28

Create report

Open service 20.118.40.11:443 · gyre9.vistapoint.cloud

2026-01-23 18:26

HTTP/1.1 200 OK
Content-Length: 5937
Connection: close
Content-Type: text/html
Date: Fri, 23 Jan 2026 18:26:45 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "3f1766d97c89dc1:0"
Last-Modified: Mon, 19 Jan 2026 19:50:23 GMT
Set-Cookie: ARRAffinity=22d6e3d7053ac7295a192b0b92b3313d0275720409d6c6c8bc4562c62b466bbc;Path=/;HttpOnly;Secure;Domain=gyre9.vistapoint.cloud
Set-Cookie: ARRAffinitySameSite=22d6e3d7053ac7295a192b0b92b3313d0275720409d6c6c8bc4562c62b466bbc;Path=/;HttpOnly;SameSite=None;Secure;Domain=gyre9.vistapoint.cloud
X-Powered-By: ASP.NET

Page title: Vistapoint

<!DOCTYPE html>
<html>

<head>
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />
    <title>Vistapoint</title>
    <base href="/" />
    <link rel="icon" href="favicon.ico?v=2" />
    <link href="css/bootstrap/bootstrap.min.css" rel="stylesheet" />
    <link href="css/bootstrap-icons/bootstrap-icons.css" rel="stylesheet" />
    <link href="_content/DevExpress.Blazor.Themes/bootstrap-external.bs5.css" rel="stylesheet" asp-append-version="true" />
    <link rel="stylesheet" href="_content/DevExpress.Blazor.Themes/bootstrap-external.bs5.min.css" />
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-T3c6CoIi6uLrA9TneNEoa7RxnatzjcDSCmG1MXxSR1GAsXEV/Dwwykc2MPK8M2HN" crossorigin="anonymous">
    <link href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css" rel="stylesheet" />
    <link href="VipWebBlazor.styles.css" rel="stylesheet" />
    <link href="css/app.css" rel="stylesheet" />
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    <link href="https://fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900&display=swap" rel="stylesheet">
    <!--<link rel="stylesheet" href="_content/Radzen.Blazor/css/default-base.css">-->
    <!--<link rel="stylesheet" href="_content/Radzen.Blazor/css/material-base.css">-->
    <style type="text/css">
        .splash-screen {
            display: flex;
            justify-content: center;
            align-items: center;
            flex-flow: column nowrap;
            height: 100vh;
            font-family: "Segoe UI",Roboto,"Helvetica Neue","-apple-system",BlinkMacSystemFont,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";
            font-size: .88rem;
            font-weight: 400;
            line-height: 1.5;
            text-align: center;
        }

            .splash-screen .spinner-border {
                border: .2em solid;
                border-color: #5f368d #bfbfbf #bfbfbf;
                width: 120px;
                height: 120px;
            }

        .splash-screen-caption {
            font-size: 1.5rem;
            font-weight: 600;
            margin-top: 1.5rem;
        }

        .splash-screen-text {
            color: #a1a1a1;
            margin-top: .5rem;
        }
    </style>
</head>

<body>
    <div id="app">
        <script type="text/javascript">
            if (/MSIE \d|Trident.*rv:|Edge\//.test(window.navigator.userAgent))
                window.location.href = "browserNotSupported.html";
        </script>
        <div class="splash-screen">
            <!--<div><iframe src="https://giphy.com/embed/A5KkSPdUJr3P5MY2NK" width="100%" height="100%" frameBorder="0" class="giphy-embed"></iframe>
            </div><p><a href="https://giphy.com/stickers/sport2000at-sport2000-sport-2000-woprofiszuhausesind-A5KkSPdUJr3P5MY2NK"></a></p>-->
            <!--<div class="spinner-border-custom"></div>-->
            <div class="sk-folding-cube">
                <div class="sk-cube1 sk-cube text-vistapointblue bg-vistapointblue"></div>
                <div class="sk-cube2 sk-cube"></div>
                <div class="sk-cube4 sk-cube"></div>
                <div class="sk-cube3 sk-cube"></div>
            </div>
            <div class="splash-screen-caption"><img alt="Vistapoint" src="images/VistapointNewLogo2.svg" width="200px" /></div>
            <div class="splash-screen-text">Loading...</div>
        </div>
    </div>

    <div id="blazor-error-ui">
        An unhandled error has occurred.
        <a href="" class="reload">Reload</a>
        <a class="dismiss">X</a>
    </div>
    <script src="_framework/blazor.webassembly.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js" integrity="sha384-C6RzsynM9kWDrM

Found 2026-01-23 by HttpPlugin