LeakIX - Host 65.8.131.73

Host 65.8.131.73

United States

AMAZON-02

Ubuntu

Software information

AmazonS3

tcp/443 tcp/80

Apache Apache

tcp/443 tcp/80

CloudFront

tcp/443 tcp/80

Microsoft-IIS 10.0

tcp/443

Server

tcp/443 tcp/80

Vercel

tcp/443

awselb awselb 2.0

tcp/443

ldweb

tcp/443 tcp/80

nginx nginx 1.14.0

tcp/443

nginx nginx

tcp/443 tcp/80

nginx nginx 1.21.6

tcp/443

openresty

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 65.8.131.73
Domain: myecatering.com
Port: 443
URL: https://myecatering.com

First seen 2025-12-11 13:25
Last seen 2026-01-09 07:41
Open for 28 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad035492a44bac09b84ed94f37d24a5eae8b0b7671e805f

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Admin/GetOrderingGuidelines
GET /api/CostCenter/GetCostCenterByUserId
GET /api/CostCenter/GetCostCenterDetails
GET /api/CostCenter/GetCostCenterMessage
GET /api/Department/GetDepartmentByCostCenter
GET /api/Department/GetDepartmentById
GET /api/Department/GetDepartmentByUser
GET /api/Department/GetUserMappedDepartments
GET /api/Item/GetCopyItem
GET /api/Item/GetItemByItemId
GET /api/Item/GetItemByItemName
GET /api/Item/GetItemList
GET /api/Item/GetItemListByItemCategory
GET /api/Item/GetItemOptionById
GET /api/Item/GetItemOptionList
GET /api/Item/GetItemTypes
GET /api/Item/GetWebtritionNuritents
GET /api/Item/GetWebtritionProduct
GET /api/Item/GetWebtritionRecipe
GET /api/Item/ItemCategoriesList
GET /api/Item/NutrientsList
GET /api/ItemCategories/GetItemCategoriesList
GET /api/ItemCategories/GetItemCategoryById
GET /api/ManageCostCenter/GetCostCenterByUnitId
GET /api/ManageCostCenter/GetDefaultCC
GET /api/ManageCostCenter/GetManageCostCenter
GET /api/Order/AdminBulkActions
GET /api/Order/AuthorizedToApprove
GET /api/Order/AuthorizedToEdit
GET /api/Order/AuthorizedToView
GET /api/Order/BulkAdminOrderList
GET /api/Order/CartItemOptionsList
GET /api/Order/GetBillingGroupById
GET /api/Order/GetBillingGrouplist
GET /api/Order/GetCartDetails
GET /api/Order/GetCartItemsList
GET /api/Order/GetCartsFindByUser
GET /api/Order/GetItemsListByItemCategory
GET /api/Order/GetMultiDepartmentList
GET /api/Order/GetOARClient
GET /api/Order/GetOrderByOrderId
GET /api/Order/GetOrderItemList
GET /api/Order/GetOrderList
GET /api/Order/GetOrderListForEventCalendar
GET /api/Order/GetOrderPayments
GET /api/Order/GetOrderStatus
GET /api/Order/GetPricingTier
GET /api/Order/GetProductionSheetOrderList
GET /api/Order/GetUsersListWhoCanOrder
GET /api/Order/IsLocationBooked
GET /api/Order/Paynow
GET /api/Order/ViewCart
GET /api/Order/ViewOrder
GET /api/Registration/GetCostCenterDetails
GET /api/Registration/GetLoginCostCenterMessage
GET /api/Registration/IsExistCostCenter
GET /api/User/CheckValidUserV2
GET /api/User/GetUserByADLoginorEmailId
GET /api/User/GetUserDetails
GET /api/User/GetUserIdByEmailId
GET /api/User/GetUserMapCostCenterList
GET /api/User/GetUserMapDepartmentList
GET /api/User/GetUserStatuslist
GET /api/User/GetUserTypelist
GET /api/User/GetUsersListForAdmin
GET /api/User/GetUsersListForAdminDepartmentRequest
GET /api/User/UserDepartmentAssignment
GET /api/User/ValidateUserAdamsEmailId
GET /api/User/getSSOToken
POST /api/Admin/SendBulkEmails
POST /api/CostCenter/SyncFromeFinance
POST /api/CostCenter/SyncOARClient
POST /api/CostCenter/SyncTrackedItems
POST /api/CostCenter/UpdateCostCenter
POST /api/CostCenter/UpdateCostCenterMessage
POST /api/Department/ActivateDeactivateDepartment
POST /api/Department/ActivateDepartment
POST /api/Department/DepartmentDeactivate
POST /api/Department/FillBulkActions
POST /api/Department/SyncFromeFinance
POST /api/Department/UpdateDepartment
POST /api/Item/ActivateDeactivateItemOption
POST /api/Item/ActivateItem
POST /api/Item/ActivateItemOption
POST /api/Item/CreateItem
POST /api/Item/CreateItemOption
POST /api/Item/DeactivateItem
POST /api/Item/DeactivateItemOption
POST /api/Item/ItemBulkActions
POST /api/Item/ItemFillBulkActions
POST /api/ItemCategories/CreateItemCategory
POST /api/ItemCategories/ItemCatFillBulkAction
POST /api/ManageCostCenter/DeleteCostCenterAccess
POST /api/ManageCostCenter/UpdateManageCostCenter
POST /api/ManageCostCenter/UserAccesstoCostCenter
POST /api/Order/AddDeleteItems
POST /api/Order/AddItemToCart
POST /api/Order/AddOrderNotes
POST /api/Order/AdminBulkUpdate
POST /api/Order/ApproveDeclineCancelOrder
POST /api/Order/DeleteCartItems
POST /api/Order/EditOrder
POST /api/Order/MultiDeptsListUpdate
POST /api/Order/OrderCostSplitUpdate
POST /api/Order/PendingOrder
POST /api/Order/ReOrder
POST /api/Order/SaveBulkAdminOrders
POST /api/Order/SaveOrdersEventInfo
POST /api/Order/SaveReccurEventInfo
POST /api/Order/UpdateCartItems
POST /api/Order/UpdateOptionalItem
POST /api/Order/UpdateOrderItem
POST /api/Order/UpdateOtherItems
POST /api/Order/UpdatePaymentDetails
POST /api/Registration/InsertUser
POST /api/User/FillBulkActionList
POST /api/User/MapDepartment
POST /api/User/MapUnMapCostCenters
POST /api/User/MapUnMapDepartments
POST /api/User/PendingDepartment
POST /api/User/PendingUser
POST /api/User/ReSendWelcomeEmail
POST /api/User/SendProcessedDepartmentRequestEmail
POST /api/User/UnMapDepartment
POST /api/User/UpdateUser
POST /api/User/UpdateUserProfile
POST /api/User/UserBulkUpdate
POST /api/User/UserMapCostCenterCopy
PUT /api/Admin/CopyCostCenterInfo
PUT /api/Admin/UpdateOrderingGuidelines
PUT /api/Item/ItemsBulkUpdate
PUT /api/Item/UpdateItemOptionById
PUT /api/Item/UpdateItems
PUT /api/ItemCategories/ActivateDeactivateItemCategory
PUT /api/ItemCategories/UpdateItemCategoryById

Found on 2026-01-09 07:41

Create report

Open service 65.8.131.73:443 · rancolodge.cl

2026-01-12 21:10

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Date: Mon, 12 Jan 2026 21:10:26 GMT
x-powered-by: Next.js
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'; connect-src 'self' https: data:; frame-src 'self' https:; child-src 'self' https:; worker-src 'self' blob: https:; script-src 'self' 'unsafe-inline' https:; script-src-elem 'self' 'unsafe-inline' https:;
Link: </_next/static/media/0484562807a97172-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/4c285fdca692ea22-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/6245472ced48d3be-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/7108afb8b1381ad1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/7db6c35d839a711c-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/8888a3826f4a3af4-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/9e82d62334b205f4-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/b957ea75a84b6ea7-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/eafabf029ad39a43-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 62adf6efa9de9ec639541ac293f53aa0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: Dk1XkJTIWkFDgIbs80pGdPzHjHohWYx6pTo2gv97udh3LMmsknIYYQ==

Found 3 days ago by HttpPlugin