LeakIX - Host blinkapi.3pic.app

Domain blinkapi.3pic.app

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.26.0.70
Domain: blinkapi.3pic.app
Port: 443
URL: https://blinkapi.3pic.app

First seen 2025-10-30 19:12
Last seen 2026-02-01 22:27
Open for 94 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1aad035490e098c2764657614121de70f781519fd6e4f2515
```
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/Auth/login
GET /api/Auth/logout
GET /api/Auth/status
GET /api/BlinkGuilds
GET /api/BlinkGuilds/{id}
GET /api/Guilds
GET /api/Guilds/{id}/categories
GET /api/Guilds/{id}/channels
GET /api/Todo
GET /api/Todo/{id}
POST /api/Auth/token
```
  Found on 2026-02-01 22:27
Create report

Open service 104.26.0.70:443 · blinkapi.3pic.app

2026-01-23 09:15

HTTP/1.1 404 Not Found
Date: Fri, 23 Jan 2026 09:15:14 GMT
Content-Length: 0
Connection: close
alt-svc: h3=":443"; ma=86400
Server: cloudflare
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Speculation-Rules: "/cdn-cgi/speculation"
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=18,cfOrigin;dur=102
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Yrs2i4Tu%2BFP6D4%2FT%2BhanHHlltridF15TfD6jUitfeLAq5hfnZOrYnogYeuD%2BnwBByfNSSbJLfVbwJr28Ra4labP93DAPcl239Qt%2FmRZjSIw%3D"}]}
CF-RAY: 9c262f75690755ea-LHR

Found 2026-01-23 by HttpPlugin

Create report

Open service 104.26.0.70:443 · blinkapi.3pic.app

2026-01-09 19:02

HTTP/1.1 404 Not Found
Date: Fri, 09 Jan 2026 19:02:46 GMT
Content-Length: 0
Connection: close
alt-svc: h3=":443"; ma=86400
Server: cloudflare
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Speculation-Rules: "/cdn-cgi/speculation"
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=24,cfOrigin;dur=626
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ZqIYwTfh5myyKfB5mZWSw33VKFV3HjPXRMfumRBWKzptZKaj5VJLZgz3UKi%2BSgYLr94KYRrL2kcTC63QklHNOXTny%2BPAVoxVsz0RwPsZ"}]}
CF-RAY: 9bb630d7bcd415a0-SJC

Found 2026-01-09 by HttpPlugin

Create report

Open service 104.26.0.70:443 · blinkapi.3pic.app

2026-01-02 04:04

HTTP/1.1 404 Not Found
Date: Fri, 02 Jan 2026 04:04:56 GMT
Content-Length: 0
Connection: close
alt-svc: h3=":443"; ma=86400
Server: cloudflare
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Speculation-Rules: "/cdn-cgi/speculation"
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=9,cfOrigin;dur=108
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=yOvYcQL8axjSXeGVmb8c5uqewk0VoVJ145d694OO7WZ4jVHRCRZZOD%2BfH6N3BkxzTbKiaGV9QdIvg4WlvM636TcO9RWW%2B1blPPC5%2FHP4ZoU%3D"}]}
CF-RAY: 9b77600a8897461c-LHR

Found 2026-01-02 by HttpPlugin