LeakIX - Host gardenbenchtop.com

Domain gardenbenchtop.com

United States

K Media Tech Ltd.

Ubuntu

Software information

nginx nginx 1.14.0

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 3.216.42.100
Domain: bench.gardenbenchtop.com
Port: 443
URL: https://bench.gardenbenchtop.com

First seen 2025-11-27 00:04
Last seen 2026-01-26 00:04
Open for 60 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-01-26 00:04
Create report

Open service 3.216.42.100:443 · bench.gardenbenchtop.com

2026-01-26 00:04

HTTP/1.1 302 Found
Server: nginx/1.14.0 (Ubuntu)
Date: Mon, 26 Jan 2026 00:04:50 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 29
Connection: close
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, PATCH
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Location: /v2/app
Vary: Accept, Accept-Encoding
Set-Cookie: connect.sid=s%3A4KxyinqiuKHbjPo35OA5Ua7h6QTlmTsw.XA7%2Ba8%2BkjPRuLYL5Y9gsu53ICcJrssFhdbeUJobp5JY; Path=/; HttpOnly


Found. Redirecting to /v2/app

Found 2026-01-26 by HttpPlugin

Create report

Open service 3.216.42.100:80 · bench.gardenbenchtop.com

2026-01-26 00:04

HTTP/1.1 301 Moved Permanently
Server: nginx/1.14.0 (Ubuntu)
Date: Mon, 26 Jan 2026 00:04:50 GMT
Content-Type: text/html
Content-Length: 194
Connection: close
Location: https://bench.gardenbenchtop.com/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body bgcolor="white">
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.14.0 (Ubuntu)</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 3.216.42.100:443 · bench.gardenbenchtop.com

2026-01-23 09:42

HTTP/1.1 302 Found
Server: nginx/1.14.0 (Ubuntu)
Date: Fri, 23 Jan 2026 09:42:57 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 29
Connection: close
X-Powered-By: Express
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, PATCH
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Location: /v2/app
Vary: Accept, Accept-Encoding
Set-Cookie: connect.sid=s%3A3kqqanXwRFBsGyBW957S73eETKCSzjiL.aZQKtssbJ1ZimmADPrln1qZ7w7fWqIwW29OoLErplxs; Path=/; HttpOnly


Found. Redirecting to /v2/app

Found 2026-01-23 by HttpPlugin

Create report

Open service 194.1.147.22:443 · gardenbenchtop.com

2026-01-22 20:18

HTTP/1.1 200 OK
Date: Thu, 22 Jan 2026 20:18:39 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 198298
Connection: close
Vary: Accept-Encoding
Vary: Accept-Encoding
Cache-Control: public, max-age=0, s-maxage=3600, stale-while-revalidate=21600,public
Expires: Thu, 22 Jan 2026 20:18:38 GMT
Vary: Accept-Encoding,Origin
WPX: 1
Referrer-Policy: no-referrer-when-downgrade
X-Powered-By: WP Rocket/3.15.9
X-turbo-charged-by: LiteSpeed
X-Edge-Location: WPX CLOUD/FF02
alt-svc: h3=":443"; ma=86400
x-quic: h3
Server: WPX CLOUD/FF02
X-Cache-Status: HIT
Accept-Ranges: bytes

Page title: Garden Bench Top – Get Your Hands Dirty!

<!doctype html>
<html lang="en-US" class="no-js" itemtype="https://schema.org/WebPage" itemscope>
<head><meta charset="UTF-8"><script>if(navigator.userAgent.match(/MSIE|Internet Explorer/i)||navigator.userAgent.match(/Trident\/7\..*?rv:11/i)){var href=document.location.href;if(!href.match(/[?&]nowprocket/)){if(href.indexOf("?")==-1){if(href.indexOf("#")==-1){document.location.href=href+"?nowprocket=1"}else{document.location.href=href.replace("#","?nowprocket=1#")}}else{if(href.indexOf("#")==-1){document.location.href=href+"&nowprocket=1"}else{document.location.href=href.replace("#","&nowprocket=1#")}}}}</script><script>class RocketLazyLoadScripts{constructor(){this.v="1.2.5.1",this.triggerEvents=["keydown","mousedown","mousemove","touchmove","touchstart","touchend","wheel"],this.userEventHandler=this._triggerListener.bind(this),this.touchStartHandler=this._onTouchStart.bind(this),this.touchMoveHandler=this._onTouchMove.bind(this),this.touchEndHandler=this._onTouchEnd.bind(this),this.clickHandler=this._onClick.bind(this),this.interceptedClicks=[],this.interceptedClickListeners=[],this._interceptClickListeners(this),window.addEventListener("pageshow",e=>{this.persisted=e.persisted,this.everythingLoaded&&this._triggerLastFunctions()}),document.addEventListener("DOMContentLoaded",()=>{this._preconnect3rdParties()}),this.delayedScripts={normal:[],async:[],defer:[]},this.trash=[],this.allJQueries=[]}_addUserInteractionListener(e){if(document.hidden){e._triggerListener();return}this.triggerEvents.forEach(t=>window.addEventListener(t,e.userEventHandler,{passive:!0})),window.addEventListener("touchstart",e.touchStartHandler,{passive:!0}),window.addEventListener("mousedown",e.touchStartHandler),document.addEventListener("visibilitychange",e.userEventHandler)}_removeUserInteractionListener(){this.triggerEvents.forEach(e=>window.removeEventListener(e,this.userEventHandler,{passive:!0})),document.removeEventListener("visibilitychange",this.userEventHandler)}_onTouchStart(e){"HTML"!==e.target.tagName&&(window.addEventListener("touchend",this.touchEndHandler),window.addEventListener("mouseup",this.touchEndHandler),window.addEventListener("touchmove",this.touchMoveHandler,{passive:!0}),window.addEventListener("mousemove",this.touchMoveHandler),e.target.addEventListener("click",this.clickHandler),this._disableOtherEventListeners(e.target,!0),this._renameDOMAttribute(e.target,"onclick","rocket-onclick"),this._pendingClickStarted())}_onTouchMove(e){window.removeEventListener("touchend",this.touchEndHandler),window.removeEventListener("mouseup",this.touchEndHandler),window.removeEventListener("touchmove",this.touchMoveHandler,{passive:!0}),window.removeEventListener("mousemove",this.touchMoveHandler),e.target.removeEventListener("click",this.clickHandler),this._disableOtherEventListeners(e.target,!1),this._renameDOMAttribute(e.target,"rocket-onclick","onclick"),this._pendingClickFinished()}_onTouchEnd(){window.removeEventListener("touchend",this.touchEndHandler),window.removeEventListener("mouseup",this.touchEndHandler),window.removeEventListener("touchmove",this.touchMoveHandler,{passive:!0}),window.removeEventListener("mousemove",this.touchMoveHandler)}_onClick(e){e.target.removeEventListener("click",this.clickHandler),this._disableOtherEventListeners(e.target,!1),this._renameDOMAttribute(e.target,"rocket-onclick","onclick"),this.interceptedClicks.push(e),e.preventDefault(),e.stopPropagation(),e.stopImmediatePropagation(),this._pendingClickFinished()}_replayClicks(){window.removeEventListener("touchstart",this.touchStartHandler,{passive:!0}),window.removeEventListener("mousedown",this.touchStartHandler),this.interceptedClicks.forEach(e=>{e.target.dispatchEvent(new MouseEvent("click",{view:e.view,bubbles:!0,cancelable:!0}))})}_interceptClickListeners(e){EventTarget.prototype.addEventListenerBase=EventTarget.prototype.addEventListener,EventTarget.prototype.addEventListener=function(t,i,r){"click"!==t||e.windowLoaded||i===e.clickHandler||e.interceptedClickListeners.push({target:this,func:i,options:r}),(this||window).addEventListenerBase(t,i,

Found 2026-01-22 by HttpPlugin