LeakIX - Host mta.org

Domain mta.org

Germany

MICROSOFT-CORP-MSN-AS-BLOCK

Software information

AkamaiGHost

tcp/443 tcp/80

cloudflare

tcp/443 tcp/80 tcp/8443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.18.36.178
Domain: sfmc2.mta.org
Port: 443
URL: https://sfmc2.mta.org

First seen 2025-11-18 16:01
Last seen 2026-01-09 06:04
Open for 51 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd151e75e4b98651d5b19cca270eb6bf91a1ae9cabfe4f8841d
```
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /actuator
GET /actuator/health
GET /actuator/health/**
GET /actuator/info
GET /api/ui/configs
GET /api/ui/route-bullets
```
  Found on 2026-01-09 06:04
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.18.36.178
Domain: sfmc.mta.org
Port: 443
URL: https://sfmc.mta.org

First seen 2025-11-18 16:01
Last seen 2026-01-10 00:24
Open for 52 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd151e75e4b98651d5b19cca270eb6bf91a1ae9cabf38f46743
```
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /actuator
GET /actuator/health
GET /actuator/health/**
GET /actuator/info
GET /api/csv/template/download
POST /api/data-extension/upload
```
  Found on 2026-01-10 00:24
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.64.151.78
Domain: drmdev.mta.org
Port: 443
URL: https://drmdev.mta.org

First seen 2025-10-20 19:49
Last seen 2025-12-18 20:56
Open for 59 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bd45329df2a8d53babe1b937441caa78b5381e026

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /api/delegations/delete
DELETE /api/icenet/delete
DELETE /api/loginPageConfig/{type}
DELETE /api/policy-controller-profile/remove
DELETE /api/policy-controller/delete
GET /api/applications
GET /api/config/tags/{id}
GET /api/delegations/listNames/{group}
GET /api/delegations/{id}
GET /api/folders/all/{type}
GET /api/icenet/statistics
GET /api/loginPageConfig
GET /api/me/loggedIn
GET /api/menu/{application}
GET /api/pdp-statistics
GET /api/policy-controller/statistics
GET /api/policyModel/search/details/{type}
GET /api/policyModel/search/listNames/{type}
GET /api/service-status
GET /api/system-configuration/fields
GET /api/system-configuration/get
GET /api/system-configuration/getPolicyValidatorUrl
GET /api/system-configuration/getUIConfigs
GET /api/system-configuration/refresh
GET /api/system-configuration/reset
GET /api/system-info
GET /error
GET /service-status
GET /sys-config/ui
GET /{path}
POST /api/activity-logs/search
POST /api/config/tags/add/{tagType}
POST /api/config/tags/list
POST /api/delegations/add
POST /api/delegations/search
POST /api/icenet/search
POST /api/policy-controller-profile/add
POST /api/policy-controller-profile/search
POST /api/policy-controller/search
POST /api/system-configuration/getConfig
POST /api/system-configuration/search
POST /api/system-configuration/update
PUT /api/delegations/modify
PUT /api/policy-controller-profile/assign
PUT /api/policy-controller-profile/modify

Found on 2025-12-18 20:56

Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.64.151.78
Domain: cloudaz.mta.org
Port: 443
URL: https://cloudaz.mta.org

First seen 2025-10-18 16:19
Last seen 2026-01-09 07:54
Open for 82 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4bd45329df2a8d53babe1b937441caa78b5381e026

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /api/delegations/delete
DELETE /api/icenet/delete
DELETE /api/loginPageConfig/{type}
DELETE /api/policy-controller-profile/remove
DELETE /api/policy-controller/delete
GET /api/applications
GET /api/config/tags/{id}
GET /api/delegations/listNames/{group}
GET /api/delegations/{id}
GET /api/folders/all/{type}
GET /api/icenet/statistics
GET /api/loginPageConfig
GET /api/me/loggedIn
GET /api/menu/{application}
GET /api/pdp-statistics
GET /api/policy-controller/statistics
GET /api/policyModel/search/details/{type}
GET /api/policyModel/search/listNames/{type}
GET /api/service-status
GET /api/system-configuration/fields
GET /api/system-configuration/get
GET /api/system-configuration/getPolicyValidatorUrl
GET /api/system-configuration/getUIConfigs
GET /api/system-configuration/refresh
GET /api/system-configuration/reset
GET /api/system-info
GET /error
GET /service-status
GET /sys-config/ui
GET /{path}
POST /api/activity-logs/search
POST /api/config/tags/add/{tagType}
POST /api/config/tags/list
POST /api/delegations/add
POST /api/delegations/search
POST /api/icenet/search
POST /api/policy-controller-profile/add
POST /api/policy-controller-profile/search
POST /api/policy-controller/search
POST /api/system-configuration/getConfig
POST /api/system-configuration/search
POST /api/system-configuration/update
PUT /api/delegations/modify
PUT /api/policy-controller-profile/assign
PUT /api/policy-controller-profile/modify

Found on 2026-01-09 07:54

Create report

Open service 172.64.151.78:443 · icenet.mta.org

2026-01-12 17:47

HTTP/1.1 520 <none>
Date: Mon, 12 Jan 2026 17:47:31 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
Server-Timing: cfEdge;dur=551,cfOrigin;dur=0
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9bce7abb68f0f424-BLR


error code: 520

Found 2 days ago by HttpPlugin

Domain mta.org

Germany

Software information

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

Swagger API description is publicly available

icenet.mta.org

drm.mta.org

sfmc.mta.org

cloudaz.mta.org

careers.mta.org

sfmc2.mta.org

drmdev.mta.org

mtatodayu.mta.org

mtatodayu.mta.org