LeakIX - Host mgcraft.net

Domain mgcraft.net

United States

CLOUDFLARENET

Software information

GitHub.com

tcp/443 tcp/80

cloudflare

tcp/443 tcp/80 tcp/8443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.181.92
Domain: mgcraft.net
Port: 443
URL: https://mgcraft.net

First seen 2025-11-02 05:44
Last seen 2026-02-09 14:23
Open for 99 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-02-09 14:23
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.21.59.170
Domain: www.mgcraft.net
Port: 8443
URL: https://www.mgcraft.net:8443

First seen 2025-11-02 07:06
Last seen 2026-02-02 00:19
Open for 91 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-02-02 00:19
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.21.59.170
Domain: www.mgcraft.net
Port: 443
URL: https://www.mgcraft.net

First seen 2025-11-02 07:06
Last seen 2026-02-02 00:19
Open for 91 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-02-02 00:19
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.67.181.92
Domain: mgcraft.net
Port: 8443
URL: https://mgcraft.net:8443

First seen 2025-11-02 05:44
Last seen 2026-01-23 01:10
Open for 81 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
```
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
```
  Found on 2026-01-23 01:10
Create report

Open service 172.67.181.92:443 · mgcraft.net

2026-01-23 12:19

HTTP/1.1 502 Bad Gateway
Date: Fri, 23 Jan 2026 12:19:36 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
Server-Timing: cfEdge;dur=12,cfOrigin;dur=21420
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9c273d038bcbac4c-YYZ
alt-svc: h3=":443"; ma=86400


error code: 502

Found 2026-01-23 by HttpPlugin

Create report

Open service 172.67.181.92:8443 · mgcraft.net

2026-01-23 01:10

HTTP/1.1 200 OK
Date: Fri, 23 Jan 2026 01:10:03 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Cache-Control: no-cache
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fiL6nfdIjlMe7iIuzL%2FYspzGkzv5klBgvjctTad3j6Ni4wFIlqWoZ6FHYjOWzg7R1sQxgpH7nBww4vQ8ARr2hoZ8KZ1lIlAXACBN"}]}
content-language: en-US
expires: 0
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
Server: cloudflare
Set-Cookie: XSRF-TOKEN=15370ab8-0d83-4918-b329-c1de74b566c4; Path=/; HTTPOnly
strict-transport-security: max-age=31536000
vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
vary: accept-encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=7,cfOrigin;dur=648
CF-RAY: 9c2368b92ac2dbc5-FRA
alt-svc: h3=":8443"; ma=86400

Found 2026-01-23 by HttpPlugin

Create report

Open service 104.21.59.170:443 · www.mgcraft.net

2026-01-22 21:41

HTTP/1.1 200 OK
Date: Thu, 22 Jan 2026 21:41:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Cache-Control: no-cache
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=WK%2B%2F6Vz0FzNbRm%2FJ5YxZqEVBxpu8b6Gd1hBhiufZqCpvvXldf2XfQJB2IJvVx8qClFI6Ohe1tqo2MzCUOtG20PUiNX23NJynl1NSx3fqAg%3D%3D"}]}
content-language: en-US
expires: 0
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
Server: cloudflare
Set-Cookie: XSRF-TOKEN=c13abaa7-d781-4e07-99ec-9a2394c78fdd; Path=/; HTTPOnly
strict-transport-security: max-age=31536000
vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
vary: accept-encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=16,cfOrigin;dur=374
CF-RAY: 9c22375ecdf4ef9f-EWR
alt-svc: h3=":443"; ma=86400

Found 2026-01-22 by HttpPlugin

Create report

Open service 104.21.59.170:8443 · www.mgcraft.net

2026-01-22 21:41

HTTP/1.1 200 OK
Date: Thu, 22 Jan 2026 21:41:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Cache-Control: no-cache
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=guPlDeBDW3HI1aDdLeDawIz8GO6nnFwN8jbvZZbWoYhC1UK535tkKb%2FOLVEraJOBGDtofn28sLgNxOm3xgQAg3xec8%2FYa9h6%2FdGA%2FxgHWg%3D%3D"}]}
content-language: en-US
expires: 0
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
Server: cloudflare
Set-Cookie: XSRF-TOKEN=b948844e-301b-4ca2-b133-493c50afbcb0; Path=/; HTTPOnly
strict-transport-security: max-age=31536000
vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
vary: accept-encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=17,cfOrigin;dur=622
CF-RAY: 9c22375e1c5539be-FRA
alt-svc: h3=":8443"; ma=86400

Found 2026-01-22 by HttpPlugin