LeakIX - Host borobudurmarathon.regactive.com

Domain borobudurmarathon.regactive.com

Indonesia

INDO Internet, PT

Ubuntu

Software information

nginx nginx 1.18.0

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 202.159.30.243
Domain: borobudurmarathon.regactive.com
Port: 8443
URL: https://borobudurmarathon.regactive.com:8443

First seen 2025-10-14 01:46
Last seen 2026-01-12 19:16
Open for 90 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-12 19:16
Create report

Open service 202.159.30.243:8443 · borobudurmarathon.regactive.com

2026-01-12 19:16

HTTP/1.1 302 Found
location: http://borobudurmarathon.regactive.com/manager
content-length: 0
date: Mon, 12 Jan 2026 19:16:30 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found one day ago by HttpPlugin

Create report

Open service 202.159.30.243:80 · borobudurmarathon.regactive.com

2026-01-12 19:16

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 12 Jan 2026 19:16:30 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 21 Apr 2020 14:09:01 GMT
Connection: close
ETag: "5e9efe7d-264"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found one day ago by HttpPlugin

Create report

Open service 202.159.30.243:443 · borobudurmarathon.regactive.com

2026-01-12 19:16

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 12 Jan 2026 19:16:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Set-Cookie: pll_language=en; expires=Tue, 12 Jan 2027 19:16:31 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
Link: <https://borobudurmarathon.regactive.com/wp-json/>; rel="https://api.w.org/"
Link: <https://borobudurmarathon.regactive.com/wp-json/wp/v2/pages/758>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://borobudurmarathon.regactive.com/>; rel=shortlink

Found one day ago by HttpPlugin

Create report

Open service 202.159.30.243:443 · borobudurmarathon.regactive.com

2026-01-09 21:52

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 09 Jan 2026 21:52:34 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Set-Cookie: pll_language=en; expires=Sat, 09 Jan 2027 21:52:34 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
Link: <https://borobudurmarathon.regactive.com/wp-json/>; rel="https://api.w.org/"
Link: <https://borobudurmarathon.regactive.com/wp-json/wp/v2/pages/758>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://borobudurmarathon.regactive.com/>; rel=shortlink

Found 2026-01-09 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · borobudurmarathon.regactive.com

2026-01-09 11:33

HTTP/1.1 302 Found
location: http://borobudurmarathon.regactive.com/manager
content-length: 0
date: Fri, 09 Jan 2026 11:33:33 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2026-01-09 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · borobudurmarathon.regactive.com

2026-01-03 23:20

HTTP/1.1 302 Found
location: http://borobudurmarathon.regactive.com/manager
content-length: 0
date: Sat, 03 Jan 2026 23:20:14 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2026-01-03 by HttpPlugin

Create report

Open service 202.159.30.243:80 · borobudurmarathon.regactive.com

2026-01-03 23:20

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 03 Jan 2026 23:20:14 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 21 Apr 2020 14:09:01 GMT
Connection: close
ETag: "5e9efe7d-264"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found 2026-01-03 by HttpPlugin

Create report

Open service 202.159.30.243:443 · borobudurmarathon.regactive.com

2026-01-03 23:20

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 03 Jan 2026 23:20:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Set-Cookie: pll_language=en; expires=Sun, 03 Jan 2027 23:20:15 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
Link: <https://borobudurmarathon.regactive.com/wp-json/>; rel="https://api.w.org/"
Link: <https://borobudurmarathon.regactive.com/wp-json/wp/v2/pages/758>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://borobudurmarathon.regactive.com/>; rel=shortlink

Found 2026-01-03 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · borobudurmarathon.regactive.com

2026-01-02 11:46

HTTP/1.1 302 Found
location: http://borobudurmarathon.regactive.com/manager
content-length: 0
date: Fri, 02 Jan 2026 11:46:52 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2026-01-02 by HttpPlugin

Create report

Open service 202.159.30.243:443 · borobudurmarathon.regactive.com

2026-01-02 01:21

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 02 Jan 2026 01:21:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Set-Cookie: pll_language=en; expires=Sat, 02 Jan 2027 01:21:07 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
Link: <https://borobudurmarathon.regactive.com/wp-json/>; rel="https://api.w.org/"
Link: <https://borobudurmarathon.regactive.com/wp-json/wp/v2/pages/758>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://borobudurmarathon.regactive.com/>; rel=shortlink

Found 2026-01-02 by HttpPlugin

Create report

Open service 202.159.30.243:443 · borobudurmarathon.regactive.com

2025-12-29 20:16

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 29 Dec 2025 20:16:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Set-Cookie: pll_language=en; expires=Tue, 29 Dec 2026 20:16:21 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
Link: <https://borobudurmarathon.regactive.com/wp-json/>; rel="https://api.w.org/"
Link: <https://borobudurmarathon.regactive.com/wp-json/wp/v2/pages/758>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://borobudurmarathon.regactive.com/>; rel=shortlink

Found 2025-12-29 by HttpPlugin

Create report

Open service 202.159.30.243:80 · borobudurmarathon.regactive.com

2025-12-29 20:16

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 29 Dec 2025 20:16:20 GMT
Content-Type: text/html
Content-Length: 612
Last-Modified: Tue, 21 Apr 2020 14:09:01 GMT
Connection: close
ETag: "5e9efe7d-264"
Accept-Ranges: bytes

Page title: Welcome to nginx!

<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
    body {
        width: 35em;
        margin: 0 auto;
        font-family: Tahoma, Verdana, Arial, sans-serif;
    }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>

<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>

<p><em>Thank you for using nginx.</em></p>
</body>
</html>

Found 2025-12-29 by HttpPlugin

Create report

Open service 202.159.30.243:443 · borobudurmarathon.regactive.com

2025-12-22 20:47

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 22 Dec 2025 20:47:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Set-Cookie: pll_language=en; expires=Tue, 22 Dec 2026 20:47:22 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
Link: <https://borobudurmarathon.regactive.com/wp-json/>; rel="https://api.w.org/"
Link: <https://borobudurmarathon.regactive.com/wp-json/wp/v2/pages/758>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://borobudurmarathon.regactive.com/>; rel=shortlink

Found 2025-12-22 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · borobudurmarathon.regactive.com

2025-12-22 20:47

HTTP/1.1 302 Found
location: http://borobudurmarathon.regactive.com/manager
content-length: 0
date: Mon, 22 Dec 2025 20:47:21 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2025-12-22 by HttpPlugin

Create report

Open service 202.159.30.243:443 · borobudurmarathon.regactive.com

2025-12-22 20:40

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 22 Dec 2025 20:40:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Set-Cookie: pll_language=en; expires=Tue, 22 Dec 2026 20:40:33 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
Link: <https://borobudurmarathon.regactive.com/wp-json/>; rel="https://api.w.org/"
Link: <https://borobudurmarathon.regactive.com/wp-json/wp/v2/pages/758>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://borobudurmarathon.regactive.com/>; rel=shortlink

Found 2025-12-22 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · borobudurmarathon.regactive.com

2025-12-22 19:51

HTTP/1.1 302 Found
location: http://borobudurmarathon.regactive.com/manager
content-length: 0
date: Mon, 22 Dec 2025 19:51:12 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2025-12-22 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · borobudurmarathon.regactive.com

2025-12-21 05:07

HTTP/1.1 302 Found
location: http://borobudurmarathon.regactive.com/manager
content-length: 0
date: Sun, 21 Dec 2025 05:07:20 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2025-12-21 by HttpPlugin

Create report

Open service 202.159.30.243:443 · borobudurmarathon.regactive.com

2025-12-21 01:02

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 21 Dec 2025 01:02:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Set-Cookie: pll_language=en; expires=Mon, 21 Dec 2026 01:02:42 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
Link: <https://borobudurmarathon.regactive.com/wp-json/>; rel="https://api.w.org/"
Link: <https://borobudurmarathon.regactive.com/wp-json/wp/v2/pages/758>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://borobudurmarathon.regactive.com/>; rel=shortlink

Found 2025-12-21 by HttpPlugin

Create report

Open service 202.159.30.243:8443 · borobudurmarathon.regactive.com

2025-12-19 08:53

HTTP/1.1 302 Found
location: http://borobudurmarathon.regactive.com/manager
content-length: 0
date: Fri, 19 Dec 2025 08:53:51 GMT
strict-transport-security: max-age=15768000
x-robots-tag: noindex
connection: close

Found 2025-12-19 by HttpPlugin

Create report

Open service 202.159.30.243:443 · borobudurmarathon.regactive.com

2025-12-19 05:53

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 19 Dec 2025 05:53:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Set-Cookie: pll_language=en; expires=Sat, 19 Dec 2026 05:53:44 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
Link: <https://borobudurmarathon.regactive.com/wp-json/>; rel="https://api.w.org/"
Link: <https://borobudurmarathon.regactive.com/wp-json/wp/v2/pages/758>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://borobudurmarathon.regactive.com/>; rel=shortlink

Found 2025-12-19 by HttpPlugin

Create report

localhost

Fingerprint:

1bf2c5323b3abfe26935f03c021f98596c3b92fc50a1d1f161f43aa8fefc7448

CN:

OpenRemote Demo Cert

Key:

RSA-2048

Issuer:

OpenRemote Demo Cert

Not before:

2020-06-08 19:17

Not after:

2050-06-01 19:17

borobudurmarathon.regactive.com

Fingerprint:

c2c2f35b52bf6e4f0e53c26c15afb35835918ac3536c6050132d65cbb3e31888

CN:

borobudurmarathon.regactive.com

Key:

RSA-2048

Issuer:

R13

Not before:

2026-01-12 18:17

Not after:

2026-04-12 18:17

borobudurmarathon.regactive.com

Fingerprint:

46c7f604d9b9577eea426303e3517bb0598d382f595432767cc9dc1af9d34b0b

CN:

borobudurmarathon.regactive.com

Key:

RSA-2048

Issuer:

R13

Not before:

2026-01-05 18:48

Not after:

2026-04-05 18:48

borobudurmarathon.regactive.com

Fingerprint:

229ae26d3adb9147851a8570f00982ef9288120af0fc19e0d986bdbf8126b238

CN:

borobudurmarathon.regactive.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-29 19:17

Not after:

2026-03-29 19:17

borobudurmarathon.regactive.com

Fingerprint:

ce15cdde27ec7ef4ed294d1075b19a88df8a4a90b8f02a9cff73b1aa1f4b4394

CN:

borobudurmarathon.regactive.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-22 19:47

Not after:

2026-03-22 19:47

borobudurmarathon.regactive.com

Fingerprint:

97cffbbd427d3bbd7bc9cbeebdf75fafd2870623c5fc93a492dbb8951bcc5ad4

CN:

borobudurmarathon.regactive.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-12-15 20:17

Not after:

2026-03-15 20:17

Domain summary

borobudurmarathon.regactive.com 20

1 recorded

IP summary

202.159.30.243 2

1 recorded

Domain borobudurmarathon.regactive.com

Indonesia

Software information

Swagger API description is publicly available

localhost

borobudurmarathon.regactive.com

borobudurmarathon.regactive.com

borobudurmarathon.regactive.com

borobudurmarathon.regactive.com

borobudurmarathon.regactive.com

Domain summary

IP summary