LeakIX - Host dev.mediamagic.northell.io

Domain dev.mediamagic.northell.io

United Kingdom

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

Kestrel Kestrel

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 51.104.28.88
Domain: dev.mediamagic.northell.io
Port: 443
URL: https://dev.mediamagic.northell.io

First seen 2026-01-10 11:09
Last seen 2026-01-16 15:20
Open for 6 days

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549dc2b6f3b0df16f513a5b185251c6f9e4edff32e0

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Comments/comment-reactions/{commentReactionId}
DELETE /api/Issues/{issueId}/evidence-submissions/{submissionId}
DELETE /api/card-relations/{cardRelationId}
DELETE /api/workflow/board-cards/{id}/card-files/{cardFileId}
DELETE /api/workflow/board-cards/{id}/versions/latest
DELETE /api/workflow/cards/{cardId}/lookup-list-evidences/{lookupListId}
DELETE /api/workspace-dictionary/{workspaceId}/{dictionaryId}/{id}
GET /api/Comments/{commentId}
GET /api/IssueTopics/{issueTopicId}
GET /api/Issues/{issueId}
GET /api/LookupLists
GET /api/LookupLists/{id}
GET /api/SchemaEntities
GET /api/SchemaEntities/{id}
GET /api/SignalR/credentials
GET /api/application-users
GET /api/application-users/{id}
GET /api/auth/token
GET /api/card-relations/recursive-check
GET /api/card-relations/{cardId}
GET /api/client-config
GET /api/dictionaries
GET /api/media/credentials
GET /api/media/metadata/{mediaId}
GET /api/permissions/check
GET /api/permissions/current
GET /api/sidekick/{sidekickId}
GET /api/substantiation/evidences
GET /api/substantiation/{id}/evidence
GET /api/tenant/validate
GET /api/user/GetId
GET /api/workflow/board-cards
GET /api/workflow/board-cards/{boardCardGroupId}/card-files
GET /api/workflow/board-cards/{boardCardId}/comments
GET /api/workflow/board-cards/{id}
GET /api/workflow/board-cards/{id}/card-stages
GET /api/workflow/board-cards/{id}/custom-properties
GET /api/workflow/board-cards/{id}/issues
GET /api/workflow/boards/{boardId}/board_cards/{cardName}
GET /api/workflow/boards/{id}
GET /api/workflow/boards/{id}/custom-properties
GET /api/workflow/boards/{id}/lanes
GET /api/workflow/card-stages
GET /api/workflow/card-stages/{id}
GET /api/workflow/card-stages/{id}/agent-jobs
GET /api/workflow/card-stages/{id}/comments
GET /api/workflow/cards/{cardId}/file-comparisons
GET /api/workflow/cards/{cardId}/lookup-list-evidences
GET /api/workflow/dictionaries
GET /api/workflow/file-comparisons/{fileComparisonId}
GET /api/workflow/lanes/{id}
GET /api/workflow/lanes/{id}/card-stages
GET /api/workflow/lanes/{id}/custom-properties
GET /api/workflow/lanes/{id}/users
GET /api/workspace-dictionary
GET /api/workspaces
GET /api/workspaces/{id}
GET /api/workspaces/{id}/board-cards
GET /api/workspaces/{id}/boards
GET /api/workspaces/{id}/custom-properties
GET /api/workspaces/{workspaceId}/boards/{boardName}
GET /api/workspaces/{workspaceId}/custom-property-exists
GET /auth/login
GET /auth/logout
GET /health
PATCH /api/Comments/{commentId}/status
PATCH /api/workflow/boards/{boardId}/board-cards/{boardCardId}
PATCH /api/workflow/boards/{boardId}/lanes/{laneId}
POST /api/Comments
POST /api/Comments/{commentId}/comment-reactions
POST /api/IssueTopics
POST /api/IssueTopics/{issueTopicId}/issues/{issueId}
POST /api/Issues
POST /api/Issues/{issueId}/comments/{commentId}
POST /api/Issues/{issueId}/evidence-submissions
POST /api/card-relations
POST /api/search
POST /api/telemetry/event
POST /api/telemetry/exception
POST /api/workflow/board-cards/compare-assets
POST /api/workflow/board-cards/{id}/annotations
POST /api/workflow/board-cards/{id}/clone
POST /api/workflow/board-cards/{id}/file
POST /api/workflow/board-cards/{id}/versions
POST /api/workflow/checks/substantiation
POST /api/workspace-dictionary/{workspaceId}/bulk/{dictionaryId}
PUT /api/LookupLists/{lookupListId}
PUT /api/workflow/lanes/{laneId}/users
PUT /api/workflow/lanes/{laneId}/users/{userId}
PUT /api/workspace-dictionary/{id}

Found on 2026-01-16 15:20

Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549dc2b6f3b0df16f513a5b185251c6f9e4c0001f26

Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/Comments/comment-reactions/{commentReactionId}
DELETE /api/Issues/{issueId}/evidence-submissions/{submissionId}
DELETE /api/card-relations/{cardRelationId}
DELETE /api/workflow/board-cards/{id}/card-files/{cardFileId}
DELETE /api/workflow/board-cards/{id}/versions/latest
DELETE /api/workspace-dictionary/{workspaceId}/{dictionaryId}/{id}
GET /api/Comments/{commentId}
GET /api/IssueTopics/{issueTopicId}
GET /api/Issues/{issueId}
GET /api/LookupLists
GET /api/SchemaEntities
GET /api/SchemaEntities/{id}
GET /api/SignalR/credentials
GET /api/application-users
GET /api/application-users/{id}
GET /api/auth/token
GET /api/card-relations/recursive-check
GET /api/card-relations/{cardId}
GET /api/client-config
GET /api/dictionaries
GET /api/media/credentials
GET /api/media/metadata/{mediaId}
GET /api/permissions/check
GET /api/permissions/current
GET /api/sidekick/{sidekickId}
GET /api/substantiation/evidences
GET /api/substantiation/{id}/evidence
GET /api/tenant/validate
GET /api/user/GetId
GET /api/workflow/board-cards
GET /api/workflow/board-cards/{boardCardGroupId}/card-files
GET /api/workflow/board-cards/{boardCardId}/comments
GET /api/workflow/board-cards/{id}
GET /api/workflow/board-cards/{id}/card-stages
GET /api/workflow/board-cards/{id}/custom-properties
GET /api/workflow/board-cards/{id}/issues
GET /api/workflow/boards/{boardId}/board_cards/{cardName}
GET /api/workflow/boards/{id}
GET /api/workflow/boards/{id}/custom-properties
GET /api/workflow/boards/{id}/lanes
GET /api/workflow/card-stages
GET /api/workflow/card-stages/{id}
GET /api/workflow/card-stages/{id}/agent-jobs
GET /api/workflow/card-stages/{id}/comments
GET /api/workflow/cards/{cardId}/evidences
GET /api/workflow/cards/{cardId}/file-comparisons
GET /api/workflow/dictionaries
GET /api/workflow/file-comparisons/{fileComparisonId}
GET /api/workflow/lanes/{id}
GET /api/workflow/lanes/{id}/card-stages
GET /api/workflow/lanes/{id}/custom-properties
GET /api/workflow/lanes/{id}/users
GET /api/workspace-dictionary
GET /api/workspaces
GET /api/workspaces/{id}
GET /api/workspaces/{id}/board-cards
GET /api/workspaces/{id}/boards
GET /api/workspaces/{id}/custom-properties
GET /api/workspaces/{workspaceId}/boards/{boardName}
GET /api/workspaces/{workspaceId}/custom-property-exists
GET /auth/login
GET /auth/logout
GET /health
PATCH /api/Comments/{commentId}/status
PATCH /api/workflow/boards/{boardId}/board-cards/{boardCardId}
PATCH /api/workflow/boards/{boardId}/lanes/{laneId}
POST /api/Comments
POST /api/Comments/{commentId}/comment-reactions
POST /api/IssueTopics
POST /api/IssueTopics/{issueTopicId}/issues/{issueId}
POST /api/Issues
POST /api/Issues/{issueId}/comments/{commentId}
POST /api/Issues/{issueId}/evidence-submissions
POST /api/card-relations
POST /api/search
POST /api/substantiation/evidence
POST /api/telemetry/event
POST /api/telemetry/exception
POST /api/workflow/board-cards/compare-assets
POST /api/workflow/board-cards/{id}/annotations
POST /api/workflow/board-cards/{id}/clone
POST /api/workflow/board-cards/{id}/file
POST /api/workflow/board-cards/{id}/versions
POST /api/workflow/checks/substantiation
POST /api/workspace-dictionary/{workspaceId}/bulk/{dictionaryId}
PUT /api/LookupLists/{lookupListId}
PUT /api/workflow/lanes/{laneId}/users
PUT /api/workflow/lanes/{laneId}/users/{userId}
PUT /api/workspace-dictionary/{id}

Found on 2026-01-10 11:09

Create report

Open service 51.104.28.88:443 · dev.mediamagic.northell.io

2026-01-10 11:09

HTTP/1.1 302 Found
Content-Length: 0
Connection: close
Date: Sat, 10 Jan 2026 11:10:52 GMT
Server: Kestrel
Location: /auth/login?returnUrl=https%3A%2F%2Fdev.mediamagic.northell.io%2F
Set-Cookie: ARRAffinity=1f62e8848207a15594502c38e26436ec1b063906cde9829572325468bb8cfeaf;Path=/;HttpOnly;Secure;Domain=dev.mediamagic.northell.io
Set-Cookie: ARRAffinitySameSite=1f62e8848207a15594502c38e26436ec1b063906cde9829572325468bb8cfeaf;Path=/;HttpOnly;SameSite=None;Secure;Domain=dev.mediamagic.northell.io
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Request-Context: appId=cid-v1:b0767086-d191-414a-a958-7bb82b169a98
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: camera=(), microphone=(), geolocation=(), payment=()
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.monitor.azure.com https://cdnjs.cloudflare.com https://w.appzi.io https://edge.fullstory.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://w.appzi.io; font-src 'self' https://fonts.gstatic.com https://w.appzi.io; img-src 'self' data: https:; connect-src 'self' https://js.monitor.azure.com https://edge.fullstory.com https://rs.fullstory.com wss: https:; media-src 'self' https://stmminfradev.blob.core.windows.net https://cdn.plyr.io; object-src 'none'; base-uri 'self'; form-action 'self'
Cross-Origin-Opener-Policy: same-origin-allow-popups

Found 2026-01-10 by HttpPlugin

Create report

Open service 51.104.28.88:80 · dev.mediamagic.northell.io

2026-01-10 11:09

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Sat, 10 Jan 2026 11:10:51 GMT
Location: https://dev.mediamagic.northell.io/

Found 2026-01-10 by HttpPlugin

Create report

dev.mediamagic.northell.io

Fingerprint:

98394c6f49eba8ec61f5652a8a40c85cdb1501d2487788dce92c4046e6d2089a

CN:

dev.mediamagic.northell.io

Key:

RSA-2048

Issuer:

GeoTrust Global TLS RSA4096 SHA256 2022 CA1

Not before:

2025-08-23 00:00

Not after:

2026-02-23 23:59

Domain summary

dev.mediamagic.northell.io 3

1 recorded

IP summary

51.104.28.88 2

1 recorded