LeakIX - Host marginplus.kz

Domain marginplus.kz

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/8443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 188.114.97.3
Domain: flexy-commission.marginplus.kz
Port: 443
URL: https://flexy-commission.marginplus.kz

First seen 2025-11-23 17:03
Last seen 2026-01-09 05:15
Open for 46 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb4dc1f86e3c0a42791c0a42791c0a42791c0a42791
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /ping
POST /commission
```
  Found on 2026-01-09 05:15
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 188.114.97.3
Domain: flexy-guard.marginplus.kz
Port: 443
URL: https://flexy-guard.marginplus.kz

First seen 2025-11-27 17:01
Last seen 2026-01-09 03:36
Open for 42 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb4dc1f86e360be137e7ade40337ade40337ade4033
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /ping
POST /check
POST /info
```
  Found on 2026-01-09 03:36
Create report

Open service 188.114.97.3:443 · flexy-commission.marginplus.kz

2026-01-09 05:15

HTTP/1.1 404 Not Found
Date: Fri, 09 Jan 2026 05:15:23 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-requestId: 1163565-1767935723.788-104.23.239.100-391
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Expose-Headers: x-count, x-page, x-commentcounts, x-votecounts, x-require
Access-Control-Allow-Methods: DELETE, GET, HEAD, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Vary: Origin, Accept-Encoding
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ZNyhPkW8oHPPU80jTIb7lORKYXvA4%2B2Hf59V4luZuM775rZj62wBhHH1l5MVRUsNDc0Jani%2FbbA64jygaNY%2BB%2FjB1Ze5fYGmyyQJ%2F5TboZrkcTlWb1FjiuBCtdWCcA%3D%3D"}]}
CF-RAY: 9bb174e19b3af8b2-FRA
alt-svc: h3=":443"; ma=86400

Page title: 404 Not Found

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<title>404 Not Found</title>
<h1>Not Found</h1>
<p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>

Found 2026-01-09 by HttpPlugin

Create report

Open service 188.114.97.3:443 · flexy-guard.marginplus.kz

2026-01-09 03:36

HTTP/1.1 404 Not Found
Date: Fri, 09 Jan 2026 03:36:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-requestId: 1163564-1767929812.683-104.23.168.44-390
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Expose-Headers: x-count, x-page, x-commentcounts, x-votecounts, x-require
Access-Control-Allow-Methods: DELETE, GET, HEAD, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Vary: Origin, Accept-Encoding
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rBv1%2BmW8auLJKeHwVEOsVHdRlciaKNs7GVPSc02Kt0bOsGps65djnnYqi3YZWtd22anOg110a1K7Oc1CTMGQm8kHjqxw9Ut5GDe4%2Bt7N2z9icJ4BD0aFGcE%3D"}]}
CF-RAY: 9bb0e490fe5d1a59-AMS
alt-svc: h3=":443"; ma=86400

Page title: 404 Not Found

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<title>404 Not Found</title>
<h1>Not Found</h1>
<p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>

Found 2026-01-09 by HttpPlugin

Create report

Open service 104.26.8.115:443 · marginplus.kz

2026-01-09 03:24

HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 03:24:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Link: <https://marginplus.kz/wp-json/>; rel="https://api.w.org/"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=TlsDwAW3%2F2fPPvnZ3frMFDWUGG0BHP9kGeBDKOKJpwLG1ReERADht716GaWI18JAbdh%2Bh0HTy85wLIcsSEPcfaTkO8o0ndsqNBgKGE4%3D"}]}
cf-cache-status: DYNAMIC
vary: accept-encoding
CF-RAY: 9bb0d2f63ca5ba43-LHR
alt-svc: h3=":443"; ma=86400

Found 2026-01-09 by HttpPlugin

Create report

Open service 188.114.97.0:443 · wallet.marginplus.kz

2026-01-08 22:00

HTTP/1.1 302 Found
Date: Thu, 08 Jan 2026 22:00:21 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://wallet.marginplus.kz/users/sign_in
Cache-Control: no-cache
Set-Cookie: _domain_session=14bLEqPu3XkhU1C8%2FxToH0qLeqQSvrtFIvZ89UTLjBFk4txJpplI6zQzq0Kb%2Fy6akxXCzbrRTkReS32zq2a6fpmnOooVTmUzX51aTArj3IIwcl3z8CB49dXKLXXDYnE1iFolLbXzvn6wJSq2gAywKCs2ff0%2B0JiXSLjyZovzWwsblXbpROh0LGHNjBeVmQq25UtMZDu9pbMredonCzgIvBWKjGZU2EQ60JD1nTF05EuJ5boF83rahnBJ3kL5h7F8bbORDO3eUXE44mUvLjkbFeTIYcRrDJB6MHJGLCYg7dxxDd9s3dDvZrVp44BTzObqUIH3H0fJv2EwOzIRNFtXcPd7657Vqdm%2BeafAGGhcKI6W%2FzT8C52kTGZtBzsFFJPbiWhxWYSTfdOk7CRe4OTsfqBoUq05Uuph8%2FUg41oGvZp0vGWUoO%2BYL%2FsaMiFlhnQAns%2BXe%2BeXURbN2klILX7cmHH6wwV55po%3D--Z2sYfntgWNFmtgGZ--UFsyYankRhphysi2wMSdbw%3D%3D; domain=.marginplus.kz; path=/; HttpOnly; SameSite=Lax
X-Request-Id: 1cb88009-5dbc-43b6-9918-a0bd30ac34ba
X-Runtime: 0.003365
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=wrVNW4%2FO%2BfXDs5LqWxsNdc7k9Rl5Em9Jawm9r9hHqMdhHXhfTS1WKOwGfkLYuITt14xzVnDibTrTKJBL16qovh7Bg1QAd739XHV8Z1IjDIzb%2BcZJ"}]}
CF-RAY: 9baef79cafaad2cb-FRA
alt-svc: h3=":443"; ma=86400


<html><body>You are being <a href="https://wallet.marginplus.kz/users/sign_in">redirected</a>.</body></html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 188.114.97.3:443 · flexy-commission.marginplus.kz

2026-01-02 11:56

HTTP/1.1 404 Not Found
Date: Fri, 02 Jan 2026 11:56:20 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-requestId: 2686025-1767354980.990-172.70.242.21-393
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Expose-Headers: x-count, x-page, x-commentcounts, x-votecounts, x-require
Access-Control-Allow-Methods: DELETE, GET, HEAD, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Vary: Origin, Accept-Encoding
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Dj6hHf6SHwtBOIgIc7yqOtcAYUvmyNiikkt8%2FSQ%2FsJCbTkpQFkASweMPKh8Bh9k2kJNU5VeWpSslM9TAhmI0kadVT5tB1NwzCSFbWbLQJ7WdReC6sRxJ972k2AXHRg%3D%3D"}]}
CF-RAY: 9b7a12970dd49f14-FRA
alt-svc: h3=":443"; ma=86400

Page title: 404 Not Found

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<title>404 Not Found</title>
<h1>Not Found</h1>
<p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>

Found 2026-01-02 by HttpPlugin

Create report

Open service 104.26.8.115:443 · marginplus.kz

2026-01-02 10:09

HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 10:09:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Link: <https://marginplus.kz/wp-json/>; rel="https://api.w.org/"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rXxum2fhOqQzKX0OU8AhlRE%2BGUnlpETxtMenxp5XzUyyefRJl%2FaHBoDTKwoYJcwjyR7Mq30IlKYz9%2BRSFVpShx6oIDg4tz2fPjun%2Fr8%3D"}]}
cf-cache-status: DYNAMIC
vary: accept-encoding
CF-RAY: 9b7975985ee9b669-FRA
alt-svc: h3=":443"; ma=86400

Found 2026-01-02 by HttpPlugin

Create report

Open service 188.114.97.3:443 · flexy-guard.marginplus.kz

2026-01-02 09:37

HTTP/1.1 404 Not Found
Date: Fri, 02 Jan 2026 09:37:04 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-requestId: 2686029-1767346624.924-172.69.130.46-390
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Expose-Headers: x-count, x-page, x-commentcounts, x-votecounts, x-require
Access-Control-Allow-Methods: DELETE, GET, HEAD, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Vary: Origin, Accept-Encoding
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=7,cfOrigin;dur=421
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=iWi96pV1pNCc8RV35TR2Hu5d164c6kduxF0%2F6iXLudSuWsL79UO1SKJOBjIAgiGyu%2FwByzxcR%2B4whsKZSRs%2FIlUOQ68RzJbymmk8NPAcWqT66KxcL1s4of4%3D"}]}
CF-RAY: 9b7946936fd2f288-YYZ
alt-svc: h3=":443"; ma=86400

Page title: 404 Not Found

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<title>404 Not Found</title>
<h1>Not Found</h1>
<p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>
<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"40a4bb43dc2145638cb71175cd6edc80","r":1,"server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>

Found 2026-01-02 by HttpPlugin

Create report

Open service 188.114.97.3:443 · flexy-commission.marginplus.kz

2025-12-30 13:42

HTTP/1.1 404 Not Found
Date: Tue, 30 Dec 2025 13:42:26 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-requestId: 1528949-1767102146.911-172.70.115.220-397
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Expose-Headers: x-count, x-page, x-commentcounts, x-votecounts, x-require
Access-Control-Allow-Methods: DELETE, GET, HEAD, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Vary: Origin, Accept-Encoding
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=9,cfOrigin;dur=388
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=D8RDUXBvBvPDeWETcAWggPs1FipXXD9EZaC8v8Dxw1COgYGEJNQmpUhxafjPCZ2zL5lsiZIESQQmhJOBz54xmz9FszM6zD97Kdyc8sxJ9R12iyHn9APMgqQVYQiDTQ%3D%3D"}]}
CF-RAY: 9b61f5e009458ce0-EWR
alt-svc: h3=":443"; ma=86400

Page title: 404 Not Found

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<title>404 Not Found</title>
<h1>Not Found</h1>
<p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>
<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"40a4bb43dc2145638cb71175cd6edc80","r":1,"server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>

Found 2025-12-30 by HttpPlugin