vikunja /api/v1/user/password/token                          -> 200 not blocked (the app answered)
papra /api/auth/forget-password                              -> 404 not blocked (the app answered)
gitea /user/forgot_password                                  -> 200 not blocked (the app answered)
calcom /auth/forgot-password                                 -> 200 not blocked (the app answered)
opengist /-/login                                            -> 200 not blocked (the app answered)
wishlist /login                                              -> 200 not blocked (the app answered)
homebox /api/v1/status                                       -> 200 not blocked (the app answered)
vikunja /api/v1/shares/nonexistent/auth                      -> 405 not blocked (the app answered)
