LeakIX - Host 20.90.134.14

Host 20.90.134.14

United Kingdom

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443

Microsoft-IIS 10.0

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: nuffield-corp.physiomedics.com
Port: 443
URL: https://nuffield-corp.physiomedics.com

First seen 2026-01-11 03:40
Last seen 2026-02-16 20:36
Open for 36 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549223a2048aacffb5feeba5fb08bdbe9d485a44708
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /CookiePolicy
GET /PrivacyPolicy
GET /TermsAndConditions
GET /api/v1/assessmentinvitations/{PhysioWizardAssessmentInvitationID}
GET /api/v1/patients/clientPatientId={ClientPatientID}
GET /api/v1/patients/email={PatientEmailAddress}
GET /api/v1/patients/{PhysioWizardPatientID}
GET /api/v1/patients/{PhysioWizardPatientID}/assessmentInvitations
POST /api/v1/assessmentinvitations
POST /api/v1/patientinvitations
POST /api/v1/patients
PUT /api/v1/patients/{PatientEmailAddress}
```
  Found on 2026-02-16 20:36
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: gsdemo.dev.arnleanexar.com
Port: 443
URL: https://gsdemo.dev.arnleanexar.com

First seen 2026-01-10 12:09
Last seen 2026-02-16 20:29
Open for 37 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549d6e5b37747e249be1ac1c9c9b3ca5c5201778341
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/report/File/getfile/{id}
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}
```
  Found on 2026-02-16 20:29
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: sectest.dev.arnlea.one
Port: 443
URL: https://sectest.dev.arnlea.one

First seen 2025-12-26 23:11
Last seen 2026-02-16 19:30
Open for 51 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549d6e5b37747e249be1ac1c9c9b3ca5c5201778341
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/report/File/getfile/{id}
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}
```
  Found on 2026-02-16 19:30
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: internaltesting.dev.arnlea.one
Port: 443
URL: https://internaltesting.dev.arnlea.one

First seen 2025-12-28 08:38
Last seen 2026-02-16 17:48
Open for 50 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549d6e5b37747e249be1ac1c9c9b3ca5c5201778341
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/report/File/getfile/{id}
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}
```
  Found on 2026-02-16 17:48
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: wcdemo.dev.arnlea.one
Port: 443
URL: https://wcdemo.dev.arnlea.one

First seen 2026-01-14 10:51
Last seen 2026-02-16 15:18
Open for 33 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549d6e5b37747e249be1ac1c9c9b3ca5c5201778341
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/report/File/getfile/{id}
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}
```
  Found on 2026-02-16 15:18
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: api.sofiai.com
Port: 443
URL: https://api.sofiai.com

First seen 2025-12-30 13:58
Last seen 2026-02-16 14:49
Open for 48 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549140df9ce0a034c3d2a64b8e646aaa0cf4d365f32

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /v1/Crm/presentation/{crmEventId}
GET /
GET /Health
GET /v1/Campaigns/organisation
GET /v1/Participants/UpdateExternalId
GET /v1/Presentations
GET /v1/Presentations/calendar
GET /v1/Presentations/{presentationId}
GET /v1/Presentations/{presentationId}/export
GET /v1/Presentations/{presentationId}/sas-uri
GET /v1/Presentations/{presentationId}/status
GET /v1/Upload/{presentationId}
GET /v1/Users
GET /v1/Zak
POST /stripe/webhook
POST /v1/Crm/presentation
POST /v1/Presentations/remove-bot/{presentationId}
POST /v1/Upload
POST /v1/Zak/callback

Found on 2026-02-16 14:49

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549140df9ce0a034c3d2a64b8e646aaa0cff9e9d2b3

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /v1/Crm/presentation/{crmEventId}
GET /
GET /Health
GET /v1/Campaigns/organisation
GET /v1/Participants/UpdateExternalId
GET /v1/Presentations
GET /v1/Presentations/calendar
GET /v1/Presentations/{presentationId}
GET /v1/Presentations/{presentationId}/export
GET /v1/Presentations/{presentationId}/status
GET /v1/Upload/{presentationId}
GET /v1/Users
GET /v1/Zak
POST /stripe/webhook
POST /v1/Crm/presentation
POST /v1/Presentations/remove-bot/{presentationId}
POST /v1/Upload
POST /v1/Zak/callback

Found on 2026-01-15 22:19

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549140df9ce0a034c3df499d34c76b366a19754cf97

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /v1/Crm/presentation/{crmEventId}
GET /
GET /v1/Campaigns/organisation
GET /v1/Participants/UpdateExternalId
GET /v1/Presentations
GET /v1/Presentations/calendar
GET /v1/Presentations/{presentationId}
GET /v1/Presentations/{presentationId}/export
GET /v1/Presentations/{presentationId}/status
GET /v1/Upload/{presentationId}
GET /v1/Users
GET /v1/Zak
POST /stripe/webhook
POST /v1/Calendly/webhook
POST /v1/Crm/presentation
POST /v1/Email
POST /v1/GraphApi/notification
POST /v1/Presentations/remove-bot/{presentationId}
POST /v1/Presentations/webhook/botstatus
POST /v1/Upload
POST /v1/Zak/callback

Found on 2026-01-08 20:21

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: customerdemo.dev.arnleanexar.com
Port: 443
URL: https://customerdemo.dev.arnleanexar.com

First seen 2025-12-26 05:26
Last seen 2026-02-16 14:34
Open for 52 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549d6e5b37747e249be1ac1c9c9b3ca5c5201778341
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/report/File/getfile/{id}
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}
```
  Found on 2026-02-16 14:34
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: pentestaxa.joblogic.com
Port: 443
URL: https://pentestaxa.joblogic.com

First seen 2025-11-18 10:23
Last seen 2026-02-16 13:18
Open for 90 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-16 13:18
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: stg-marketappapi.joblogicinternal.com
Port: 443
URL: https://stg-marketappapi.joblogicinternal.com

First seen 2025-12-30 09:14
Last seen 2026-02-16 13:02
Open for 48 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-16 13:02
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: sectest.dev.arnleanexar.com
Port: 443
URL: https://sectest.dev.arnleanexar.com

First seen 2026-01-14 11:45
Last seen 2026-02-16 12:47
Open for 33 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549d6e5b37747e249be1ac1c9c9b3ca5c5201778341
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/report/File/getfile/{id}
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}
```
  Found on 2026-02-16 12:47
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: internaltesting.dev.arnleanexar.com
Port: 443
URL: https://internaltesting.dev.arnleanexar.com

First seen 2026-01-14 11:45
Last seen 2026-02-16 12:47
Open for 33 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549d6e5b37747e249be1ac1c9c9b3ca5c5201778341
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/report/File/getfile/{id}
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}
```
  Found on 2026-02-16 12:47
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: wcdemo.dev.arnleanexar.com
Port: 443
URL: https://wcdemo.dev.arnleanexar.com

First seen 2026-01-14 12:19
Last seen 2026-02-16 12:47
Open for 33 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549d6e5b37747e249be1ac1c9c9b3ca5c5201778341
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/report/File/getfile/{id}
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}
```
  Found on 2026-02-16 12:47
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: uat.licence.whatcausedthis.com
Port: 443
URL: https://uat.licence.whatcausedthis.com

First seen 2026-01-03 00:05
Last seen 2026-02-16 12:09
Open for 44 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549636e9244bf7614dd18ee323b6bd6de5687109b80

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/AccountManager/Company/{companyId}
GET /api/AccountManager/User/{userId}
GET /api/Company/FreeTrialExpiring
GET /api/Company/SeatStats/{companyId}
GET /api/Company/{companyId}
GET /api/CompanyRole/Options
GET /api/Install/Configuration
GET /api/Package
GET /api/Package/{packageId}
GET /api/Permission/{companyRoleKey}/{companyId}
GET /api/Status
GET /api/Subscription/GetBillingPortalUrl/{companyId}
GET /status
POST /api/Company
POST /api/Enterprise/RequestAccess
POST /api/Webhook/Stripe/notification
PUT /api/Company/UpdateMeta
PUT /api/Company/User/Add/{companyId}
PUT /api/Company/User/AddRange/{companyId}
PUT /api/Company/User/Change/{companyId}
PUT /api/Company/User/Remove/{companyId}

Found on 2026-02-16 12:09

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549636e9244bf7614dd18ee323b6bd6de568e2552c1

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/AccountManager/Company/{companyId}
GET /api/AccountManager/User/{userId}
GET /api/Company/FreeTrialExpiring
GET /api/Company/SeatStats/{companyId}
GET /api/Company/{companyId}
GET /api/CompanyRole/Options
GET /api/Install/Configuration
GET /api/Package
GET /api/Package/{packageId}
GET /api/Permission/{companyRoleKey}/{companyId}
GET /api/Subscription/GetBillingPortalUrl/{companyId}
POST /api/Company
POST /api/Enterprise/RequestAccess
POST /api/Webhook/Stripe/notification
PUT /api/Company/UpdateMeta
PUT /api/Company/User/Add/{companyId}
PUT /api/Company/User/AddRange/{companyId}
PUT /api/Company/User/Change/{companyId}
PUT /api/Company/User/Remove/{companyId}

Found on 2026-01-22 19:41

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: rcdemo.dev.arnleanexar.com
Port: 443
URL: https://rcdemo.dev.arnleanexar.com

First seen 2026-01-13 06:25
Last seen 2026-02-16 12:07
Open for 34 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549d6e5b37747e249be1ac1c9c9b3ca5c5201778341
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/report/File/getfile/{id}
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}
```
  Found on 2026-02-16 12:07
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: arnleademo.dev.arnleanexar.com
Port: 443
URL: https://arnleademo.dev.arnleanexar.com

First seen 2026-01-02 06:17
Last seen 2026-02-16 07:04
Open for 45 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549d6e5b37747e249be1ac1c9c9b3ca5c5201778341
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/report/File/getfile/{id}
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}
```
  Found on 2026-02-16 07:04
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: rcdemo.dev.arnlea.one
Port: 443
URL: https://rcdemo.dev.arnlea.one

First seen 2026-01-12 16:13
Last seen 2026-02-16 05:29
Open for 34 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549d6e5b37747e249be1ac1c9c9b3ca5c5201778341
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/report/File/getfile/{id}
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}
```
  Found on 2026-02-16 05:29
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: uat.api.whatcausedthis.com
Port: 443
URL: https://uat.api.whatcausedthis.com

First seen 2026-01-03 00:04
Last seen 2026-02-16 05:13
Open for 44 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-16 05:13
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: gsdemo.dev.arnlea.one
Port: 443
URL: https://gsdemo.dev.arnlea.one

First seen 2026-01-14 21:35
Last seen 2026-02-16 04:20
Open for 32 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549d6e5b37747e249be1ac1c9c9b3ca5c5201778341
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/report/File/getfile/{id}
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}
```
  Found on 2026-02-16 04:20
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: flood.probitas.site
Port: 443
URL: https://flood.probitas.site

First seen 2026-01-11 01:41
Last seen 2026-02-16 04:10
Open for 36 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-16 04:10
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: parsingapi-dev.mercuryxrm.com
Port: 443
URL: https://parsingapi-dev.mercuryxrm.com

First seen 2026-01-14 17:06
Last seen 2026-02-16 00:18
Open for 32 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549e41d5133d3f77f1338c9a18d707a49f3707a49f3
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /api/v1/candidate/cvparse
POST /api/v1/cvparse
POST /api/v1/queuing/cv
PUT /api/v1/candidate/{candidateId}/cvparse
```
  Found on 2026-02-16 00:18
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: deployment-pm.peppermint.online
Port: 443
URL: https://deployment-pm.peppermint.online

First seen 2026-01-14 11:07
Last seen 2026-02-16 00:16
Open for 32 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-02-16 00:16
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: rosietest.dev.arnleanexar.com
Port: 443
URL: https://rosietest.dev.arnleanexar.com

First seen 2026-01-14 17:46
Last seen 2026-02-15 19:12
Open for 32 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549d6e5b37747e249be1ac1c9c9b3ca5c5201778341
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/report/File/getfile/{id}
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}
```
  Found on 2026-02-15 19:12
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: internaltestingsupport.dev.arnleanexar.com
Port: 443
URL: https://internaltestingsupport.dev.arnleanexar.com

First seen 2026-01-14 23:41
Last seen 2026-02-15 19:12
Open for 31 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549d6e5b37747e249be1ac1c9c9b3ca5c5201778341
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/report/File/getfile/{id}
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}
```
  Found on 2026-02-15 19:12
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: altera.dev.arnleanexar.com
Port: 443
URL: https://altera.dev.arnleanexar.com

First seen 2026-01-17 21:18
Last seen 2026-02-15 19:11
Open for 28 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035496894ed887c0fcd93f8a3c940f1abe4223af2471f
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}
```
  Found on 2026-02-15 19:11
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: arnleapreview.dev.arnleanexar.com
Port: 443
URL: https://arnleapreview.dev.arnleanexar.com

First seen 2025-12-04 19:11
Last seen 2026-02-02 09:11
Open for 59 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549d6e5b37747e249be1ac1c9c9b3ca5c5201778341

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/report/File/getfile/{id}
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}

Found on 2026-02-02 09:11

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035496894ed887c0fcd93f8a3c940f1abe4223af2471f

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /integration/{siteName}/AdHocInspection/Get
GET /integration/{siteName}/WorkOrder/Get
GET /integration/{siteName}/WorkOrder/Get/{id}
GET /integration/{siteName}/WorkOrder/GetWithInspections/{id}
GET /integration/{siteName}/WorkOrder/Inspections/{id}
POST /integration/{siteName}/Tag/Post
POST /integration/{siteName}/WorkOrder/Post
PUT /integration/{siteName}/Tag/Put/{id}
PUT /integration/{siteName}/WorkOrder/Status/{id}

Found on 2025-12-04 19:11

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: parsingapi.mercuryxrm.com
Port: 443
URL: https://parsingapi.mercuryxrm.com

First seen 2026-01-10 10:39
Last seen 2026-01-16 23:58
Open for 6 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549e41d5133d3f77f1338c9a18d707a49f3707a49f3
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
POST /api/v1/candidate/cvparse
POST /api/v1/cvparse
POST /api/v1/queuing/cv
PUT /api/v1/candidate/{candidateId}/cvparse
```
  Found on 2026-01-16 23:58
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 20.90.134.14
Domain: api.ashleyoconnor.dev
Port: 443
URL: https://api.ashleyoconnor.dev

First seen 2025-10-26 23:31
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad03549eb5cdc9bc8e953f3c8e953f3c8e953f3c8e953f3
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /WeatherForecast
GET /api/TestDb
```
  Found on 2025-10-26 23:31
Create report

Open service 20.90.134.14:443 · www.adviserlegal.com

2026-02-17 08:41

HTTP/1.1 200 OK
Connection: close
Content-Type: text/html; charset=utf-8
Date: Tue, 17 Feb 2026 08:41:22 GMT
Server: Microsoft-IIS/10.0
Set-Cookie: ARRAffinity=9139989b150c8454b1ee704cbb6888ce5e49b67c540adf0dfc91c5b3d52dbefa;Path=/;HttpOnly;Secure;Domain=www.adviserlegal.com
Set-Cookie: ARRAffinitySameSite=9139989b150c8454b1ee704cbb6888ce5e49b67c540adf0dfc91c5b3d52dbefa;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.adviserlegal.com
Transfer-Encoding: chunked
Request-Context: appId=cid-v1:d22312a7-d0fd-42e1-9b5f-77d4c85492d9
X-Powered-By: ASP.NET

Page title: Home Page

<!doctype html>
<html lang="en">

<head>
    <meta charset="utf-8">
    <meta http-equiv="x-ua-compatible" content="ie=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>Home Page</title>
    <meta name="description" content="Home Page Description">

    <link rel="stylesheet" href="/styles/global.css?v=639066269383179604">

    <link rel="shortcut icon" href="/images/favicon.ico">

    <link rel="apple-touch-icon" type="image/png" sizes="180x180" href="/images/favicon-180x180.png">
    <link rel="icon" type="image/png" sizes="48x48" href="/images/favicon-48x48.png">
    <link rel="icon" type="image/png" sizes="32x32" href="/images/favicon-32x32.png">
    <link rel="icon" type="image/png" sizes="16x16" href="/images/favicon-16x16.png">

    <meta name="apple-mobile-web-app-title" content="AFH">
    <meta name="theme-color" content="#4a4f54">

    <link rel="canonical" href="https://www.adviserlegal.com/home/">
    <link rel="alternate" hreflang="en-gb" href="https://www.adviserlegal.com/home/" />

    <link rel="manifest" href="/manifest.json">

    <meta property="og:title" content="" />
    <meta property="og:url" content="https://www.adviserlegal.com/home/" />
    <meta property="og:type" content="website" />
    <meta property="og:description" content="" />

    <meta name="twitter:card" content="summary_large_image" />
    <meta name="twitter:site" content="" />
    <meta name="twitter:creator" content="" />
    <meta name="twitter:title" content="" />
    <meta name="twitter:description" content="" />

<!-- OneTrust Cookies Consent Notice start for adviserlegal.com -->
<script src="https://cdn-ukwest.onetrust.com/scripttemplates/otSDKStub.js"  type="text/javascript" charset="UTF-8" data-domain-script="019c32c8-c716-7a13-92ed-8119e36fd4df-test" ></script>
<script type="text/javascript">
function OptanonWrapper() { }
</script>
<!-- OneTrust Cookies Consent Notice end for adviserlegal.com -->
<!-- Google Tag Manager -->
<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-PVH5375P');</script>
<!-- End Google Tag Manager --></head>

<body>
<!-- Google Tag Manager (noscript) --><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-PVH5375P"height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><!-- End Google Tag Manager (noscript) -->    <div class="skip-to">
        <a class="skip-to-link" href="#main">Skip to main content</a>
    </div>

    
<header class="header " id="header">
    <div class="header-container container">
        <div class="header-controls">
                <a class="header-logo" href="/">
                    <img class="header-logo-image" src="/media/5ifgr1f0/adviser-legal-logo_rgb-1.svg" alt="Adviser Legal Logo RGB 1 (2)"
                    width="0" height="0" loading="lazy">
                    <span class="visually-hidden">AFH Homepage</span>
                </a>
            <button class="header-nav-mobile-trigger" aria-expanded="false" aria-controls="main-navigation">
                <i class="fas fa-bars collapsed" aria-hidden="true"></i>
                <i class="fas fa-times expanded" aria-hidden="true"></i>
                <span class="visually-hidden">toggle main navigation</span>
            </button>
        </div>
        <nav class="header-nav" id="main-navigation" aria-label="main navigation">
            <div class="header-nav-content">
              
    <ul class="header-nav-primary" itemscope itemtype="https://schema.org/SiteNavigationElement">

        <li class="header-nav-item" itemprop="name">
            <a class="header-nav-link  current" href="/home/" target="_self" itemprop="url">
                <span class="header-nav-name">

Found 8 hours ago by HttpPlugin