Domain mcst.etb2bimg.com
Germany
Software information
Bhoot
tcp/443
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-11-10 05:42
Last seen 2026-01-23 03:29
Open for 73 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2Public Swagger UI/API detected at path: /swagger.json - sample paths: GET /v1/{portal}/{entity}/details/{course_id} GET /v1/{portal}/{entity}/{type}/{region}Found on 2026-01-23 03:29
-
-
Open service 2.16.204.209:443 · mcst.etb2bimg.com
2026-01-23 03:29
HTTP/1.1 200 OK Server: Bhoot Content-Type: text/html; charset=UTF-8 Pragma: no-cache Last-Modified: Thu, 16 Oct 2025 08:25:32 GMT X-Cool: 22.61 Content-Language: en X-Frame-Options: sameorigin Strict-Transport-Security: max-age=25920000; includeSubdomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: public, max-age=86400 Expires: Sat, 24 Jan 2026 03:29:31 GMT Date: Fri, 23 Jan 2026 03:29:31 GMT Alt-Svc: h3=":443"; ma=93600 Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Access-Control-Allow-Origin: * Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST
Found 2026-01-23 by HttpPluginCreate report
-
Open service 2.16.204.209:443 · mcst.etb2bimg.com
2026-01-09 13:22
HTTP/1.1 200 OK Server: Bhoot Content-Type: text/html; charset=UTF-8 Pragma: no-cache Last-Modified: Thu, 16 Oct 2025 08:25:32 GMT X-Cool: 22.61 Content-Language: en X-Frame-Options: sameorigin Strict-Transport-Security: max-age=25920000; includeSubdomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: public, max-age=86400 Expires: Sat, 10 Jan 2026 13:22:35 GMT Date: Fri, 09 Jan 2026 13:22:35 GMT Alt-Svc: h3=":443"; ma=93600 Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Access-Control-Allow-Origin: * Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST
Found 2026-01-09 by HttpPluginCreate report
-
Open service 2.16.204.209:443 · mcst.etb2bimg.com
2026-01-02 07:25
HTTP/1.1 200 OK Server: Bhoot Content-Type: text/html; charset=UTF-8 Pragma: no-cache Last-Modified: Thu, 16 Oct 2025 08:25:32 GMT X-Cool: 22.61 Content-Language: en X-Frame-Options: sameorigin Strict-Transport-Security: max-age=25920000; includeSubdomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: public, max-age=86400 Expires: Sat, 03 Jan 2026 07:25:18 GMT Date: Fri, 02 Jan 2026 07:25:18 GMT Alt-Svc: h3=":443"; ma=93600 Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Access-Control-Allow-Origin: * Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST
Found 2026-01-02 by HttpPluginCreate report
-
Open service 2.16.204.209:443 · mcst.etb2bimg.com
2025-12-23 07:21
HTTP/1.1 200 OK Server: Bhoot Content-Type: text/html; charset=UTF-8 Pragma: no-cache Last-Modified: Thu, 16 Oct 2025 08:25:32 GMT X-Cool: 22.61 Content-Language: en X-Frame-Options: sameorigin Strict-Transport-Security: max-age=25920000; includeSubdomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Cache-Control: public, max-age=86400 Expires: Wed, 24 Dec 2025 07:21:48 GMT Date: Tue, 23 Dec 2025 07:21:48 GMT Alt-Svc: h3=":443"; ma=93600 Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Access-Control-Allow-Origin: * Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST
Found 2025-12-23 by HttpPluginCreate report