LeakIX - Host reg.indyfurcon.com

Domain reg.indyfurcon.com

United States

Hostinger International Limited

Software information

LiteSpeed

tcp/443 tcp/80

cloudflare

tcp/443 tcp/80 tcp/8443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.20.30.161
Domain: reg.indyfurcon.com
Port: 443
URL: https://reg.indyfurcon.com

First seen 2025-12-04 13:35
Last seen 2026-01-09 05:11
Open for 35 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb4a9f815313eceb4780c03c3e0f2702b97dae88060
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /api/v0/orders/items/{orderItemId}
GET /.well-known/jwks.json
GET /api/v0/roles
GET /api/v0/users/{id}
GET /api/v0/users/{id}/registration
GET /api/v0/users/{id}/volunteer
GET /api/v0/users/{userId}/roles
GET /api/v0/volunteers/departments
POST /api/v0/dealers/search
POST /api/v0/orders/items/{orderItemId}/revoke
POST /api/v0/orders/search
POST /api/v0/registration/search
POST /api/v0/roles/{roleId}/users
POST /api/v0/users
POST /api/v0/users/notes/search
POST /api/v0/users/search
POST /api/v0/volunteers/search
POST /api/v0/vouchers/search
PUT /api/v0/users/{userId}/roles/{roleId}
```
  Found on 2026-01-09 05:11
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.20.30.161
Domain: 2025.reg.indyfurcon.com
Port: 443
URL: https://2025.reg.indyfurcon.com

First seen 2025-12-12 05:08
Last seen 2026-01-09 22:09
Open for 28 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb4a9f815313eceb4780c03c3e0f2702b97dae88060
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /api/v0/orders/items/{orderItemId}
GET /.well-known/jwks.json
GET /api/v0/roles
GET /api/v0/users/{id}
GET /api/v0/users/{id}/registration
GET /api/v0/users/{id}/volunteer
GET /api/v0/users/{userId}/roles
GET /api/v0/volunteers/departments
POST /api/v0/dealers/search
POST /api/v0/orders/items/{orderItemId}/revoke
POST /api/v0/orders/search
POST /api/v0/registration/search
POST /api/v0/roles/{roleId}/users
POST /api/v0/users
POST /api/v0/users/notes/search
POST /api/v0/users/search
POST /api/v0/volunteers/search
POST /api/v0/vouchers/search
PUT /api/v0/users/{userId}/roles/{roleId}
```
  Found on 2026-01-09 22:09
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 172.66.160.38
Domain: 2024.reg.indyfurcon.com
Port: 443
URL: https://2024.reg.indyfurcon.com

First seen 2025-11-07 02:13
Last seen 2026-01-09 19:11
Open for 63 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb4a9f815313eceb4780c03c3e0f2702b97dae88060
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
DELETE /api/v0/orders/items/{orderItemId}
GET /.well-known/jwks.json
GET /api/v0/roles
GET /api/v0/users/{id}
GET /api/v0/users/{id}/registration
GET /api/v0/users/{id}/volunteer
GET /api/v0/users/{userId}/roles
GET /api/v0/volunteers/departments
POST /api/v0/dealers/search
POST /api/v0/orders/items/{orderItemId}/revoke
POST /api/v0/orders/search
POST /api/v0/registration/search
POST /api/v0/roles/{roleId}/users
POST /api/v0/users
POST /api/v0/users/notes/search
POST /api/v0/users/search
POST /api/v0/volunteers/search
POST /api/v0/vouchers/search
PUT /api/v0/users/{userId}/roles/{roleId}
```
  Found on 2026-01-09 19:11
Create report

Open service 172.66.160.38:443 · 2024.reg.indyfurcon.com

2026-01-23 10:43

HTTP/1.1 400 Bad Request
Server: cloudflare
Date: Fri, 23 Jan 2026 10:43:28 GMT
Content-Type: text/html
Content-Length: 253
Connection: close
CF-RAY: -

Page title: 400 The plain HTTP request was sent to HTTPS port

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2026-01-23 by HttpPlugin

Create report

Open service 104.20.30.161:443 · 2025.reg.indyfurcon.com

2026-01-23 09:08

HTTP/1.1 400 Bad Request
Server: cloudflare
Date: Fri, 23 Jan 2026 09:08:09 GMT
Content-Type: text/html
Content-Length: 253
Connection: close
CF-RAY: -

Page title: 400 The plain HTTP request was sent to HTTPS port

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>cloudflare</center>
</body>
</html>

Found 2026-01-23 by HttpPlugin

Create report

Open service 104.20.30.161:443 · reg.indyfurcon.com

2026-01-23 02:47

HTTP/1.1 200 OK
Date: Fri, 23 Jan 2026 02:47:26 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server-Timing: cfEdge;dur=29,cfOrigin;dur=0
CF-Ray: 9c23f7675b1fc2ef-EWR
Access-Control-Allow-Origin: *
Cache-Control: max-age=1500
Server: cloudflare
X-ConCat-Version: master
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-robots-tag: noindex
Vary: accept-encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=PFJgsjVcJkpGJPHWaW%2Fhc2da2HIx0H165gGDLs7PZijS%2FlU4Ib7W1iVZSz%2FosIUpEXHRdiMkWFR9jkIw2reWrhiNejxjBPIpqIQIutxuzifn"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
alt-svc: h3=":443"; ma=86400

Page title: ConCat - Loading...

<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0"><meta name="referrer" content="no-referrer"><base href="/"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" integrity="sha384-QWTKZyjpPEjISv5WaRU9OFeRpok6YctnYmDr5pNlyT2bRjXh0JMhjY6hW+ALEwIH" crossorigin="anonymous" id="bootstrapv5"><link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Krona+One|Armata|Material+Icons|Material+Icons+Outlined" crossorigin="anonymous"><title>ConCat - Loading...</title><script defer="defer" src="runtime.b531841fe50017b34a7a.js"></script><script defer="defer" src="473.61e1acd15e007d481768.js"></script><script defer="defer" src="main.b5f5d48c931840a85116.js"></script><link href="473.4b5ca51165a3160df46d.css" rel="stylesheet"><link href="main.4fdae2df02d87453795d.css" rel="stylesheet"></head><body><div id="app"></div><div id="printArea"></div><script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"3fff85e299f642739e26e88ce2dfbd86","server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>
</body></html>

Found 2026-01-23 by HttpPlugin

Create report

Open service 2a02:4780:b:1109:0:621:aefb:3:80 · reg.indyfurcon.com

2026-01-12 23:12

HTTP/1.1 301 Moved Permanently
Connection: close
Content-Type: text/html
Content-Length: 795
Date: Mon, 12 Jan 2026 23:12:06 GMT
Server: LiteSpeed
Location: https://reg.indyfurcon.com/
platform: hostinger
panel: hpanel
Content-Security-Policy: upgrade-insecure-requests

Page title:  301 Moved Permanently


<!DOCTYPE html>
<html style="height:100%">
<head>
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
<title> 301 Moved Permanently
</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head>
<body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;">
<div style="height:auto; min-height:100%; ">     <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;">
        <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">301</h1>
<h2 style="margin-top:20px;font-size: 30px;">Moved Permanently
</h2>
<p>The document has been permanently moved.</p>
</div></div></body></html>

Found 2026-01-12 by HttpPlugin

Create report

Open service 2a02:4780:b:1109:0:621:aefb:3:443 · reg.indyfurcon.com

2026-01-12 23:12

HTTP/1.1 200 OK
Connection: close
X-Powered-By: PHP/8.3.28
Content-Type: text/html; charset=UTF-8
Content-Length: 16369
Date: Mon, 12 Jan 2026 23:12:06 GMT
Server: LiteSpeed
platform: hostinger
panel: hpanel
Content-Security-Policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Page title: Default page

<!DOCTYPE html>
<html lang="en">
    <head>
        <title>Default page</title>
        <link rel="icon" type="image/x-icon" href="https://hpanel.hostinger.com/favicons/hostinger.png">
        <meta charset="utf-8">
        <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible">
        <meta content="Default page" name="description">
        <meta content="width=device-width, initial-scale=1" name="viewport">
        <link rel="preconnect" href="https://fonts.googleapis.com">
        <link href="https://fonts.googleapis.com/css2?family=DM+Sans&display=swap" rel="stylesheet">
        <link href="https://fonts.googleapis.com/css2?family=DM+Sans:wght@400;700&display=swap" rel="stylesheet">
        <style>
            body {
                margin: 0px;
                display: flex;
                flex-direction: column;
                align-items: center;
                justify-content: center;
                width: 100vw;
                height: 100vh;
                min-height: 675px;
                background-color: #F4F5FF;
            }
            p {
                width: 100%;
                left: 0px;
                font-size: 16px;
                font-family: 'DM Sans', sans-serif;
                font-weight: 400;
                letter-spacing: 0px;
                text-align: center;
                vertical-align: top;
                max-width: 550px;
                color: #727586;
                margin: 0px;
            }
            a:hover {
                cursor: pointer;
                color: #673DE6;
                text-decoration: underline;
            }
            h1 {
                font-family: 'DM Sans', sans-serif;
                font-size: 24px;
                font-weight: 700;
                letter-spacing: 0px;
                text-align: center;
                margin: 8px;
            }
            .content {
                display: flex;
                flex-direction: column;
                align-items: center;
                justify-content: center;
                width: 100%;
                height: 100%;
            }
            .ic-launch  {
                margin-left: 10.5px;
                width: 21px !important;
                height: 20px !important;
            }
            .link-container {
                margin-top: 32px;
                margin-bottom: 32px;
            }
            .link {
                display: flex;
                flex-direction: row;
                align-items: center;
                justify-content: center;
                font-family: 'DM Sans', sans-serif;
                font-style: normal;
                font-weight: 700;
                font-size: 14px;
                color: #673DE6;
                margin-top: 8px;
                text-decoration: none;
            }
            .main-image {
                width: 100%;
                max-width: 650px;
                max-height: 406px;
                height: auto;
            }
            .navigation {
                width: 100%;
                height: 72px;
                display: flex;
                margin: 0;
                padding: 0;
                flex-direction: row;
                align-items: center;
                justify-content: center;
                background-color: #36344D;
            }
            @media screen and (max-width: 580px) and (min-width: 0px) {
                h1, p, .link-container {
                    width: 80%;
                }
            }
            @media screen and (min-width: 650px) and (min-height: 0px) and (max-height: 750px) {
                .link-container {
                    margin-top: 12px;
                }
                h1 {
                    margin-top: 0px;
                    margin-bottom: 0px;
                }
            }
        </style>
    </head>
    <body>
        <nav class="navigation">
            <a href="https://hpanel.hostinger.com" rel="nofollow" target="_blank">
                <svg width="150" height="30" viewBox="0 0 150 30" fill="none" xmlns="http://www.w3.or

Found 2026-01-12 by HttpPlugin

Create report

Open service 104.20.30.161:443 · 2025.reg.indyfurcon.com

2026-01-09 22:09

HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 22:09:35 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server-Timing: cfEdge;dur=75,cfOrigin;dur=0
CF-Ray: 9bb74286af8a4e96-AMS
Access-Control-Allow-Origin: *
Cache-Control: max-age=1500
Server: cloudflare
X-ConCat-Version: master
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-robots-tag: noindex
Vary: accept-encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VvN2mtKndUCYru%2BjBeYNyOfpShwx0XtwZXa2Pj%2FqtbXvijGo58dse6YxsJ%2BJWDxq30qBlj%2B3DV4GQzevxjH%2FY1lIMrymUM8rBj8RyoAYGXGHbsTlSOc%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
alt-svc: h3=":443"; ma=86400

Page title: ConCat - Loading...

<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0"><meta name="referrer" content="no-referrer"><base href="/"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" integrity="sha384-QWTKZyjpPEjISv5WaRU9OFeRpok6YctnYmDr5pNlyT2bRjXh0JMhjY6hW+ALEwIH" crossorigin="anonymous" id="bootstrapv5"><link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Krona+One|Armata|Material+Icons|Material+Icons+Outlined" crossorigin="anonymous"><title>ConCat - Loading...</title><script defer="defer" src="runtime.b531841fe50017b34a7a.js"></script><script defer="defer" src="473.61e1acd15e007d481768.js"></script><script defer="defer" src="main.b5f5d48c931840a85116.js"></script><link href="473.4b5ca51165a3160df46d.css" rel="stylesheet"><link href="main.4fdae2df02d87453795d.css" rel="stylesheet"></head><body><div id="app"></div><div id="printArea"></div><script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"3fff85e299f642739e26e88ce2dfbd86","server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>
</body></html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 172.66.160.38:443 · 2024.reg.indyfurcon.com

2026-01-09 19:11

HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 19:11:20 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server-Timing: cfEdge;dur=81,cfOrigin;dur=0
CF-Ray: 9bb63d6b5d39b0a3-YYZ
Access-Control-Allow-Origin: *
Cache-Control: max-age=1500
Server: cloudflare
X-ConCat-Version: master
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-robots-tag: noindex
Vary: accept-encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=tadRi7OQ%2Ffi8wTHSLiFMNTfnkXYS3g6JdqwOX0%2FSOf%2F8SICgUry%2B8y0CQL%2Fi3enlEW6SdX2wDwz39cdiYlDbFVhWR5wbGRPNZh9GvC7YdO2fuEvv"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
alt-svc: h3=":443"; ma=86400

Page title: ConCat - Loading...

<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0"><meta name="referrer" content="no-referrer"><base href="/"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" integrity="sha384-QWTKZyjpPEjISv5WaRU9OFeRpok6YctnYmDr5pNlyT2bRjXh0JMhjY6hW+ALEwIH" crossorigin="anonymous" id="bootstrapv5"><link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Krona+One|Armata|Material+Icons|Material+Icons+Outlined" crossorigin="anonymous"><title>ConCat - Loading...</title><script defer="defer" src="runtime.b531841fe50017b34a7a.js"></script><script defer="defer" src="473.61e1acd15e007d481768.js"></script><script defer="defer" src="main.b5f5d48c931840a85116.js"></script><link href="473.4b5ca51165a3160df46d.css" rel="stylesheet"><link href="main.4fdae2df02d87453795d.css" rel="stylesheet"></head><body><div id="app"></div><div id="printArea"></div><script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"3fff85e299f642739e26e88ce2dfbd86","server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>
</body></html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 104.20.30.161:443 · reg.indyfurcon.com

2026-01-09 05:11

HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 05:11:25 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server-Timing: cfEdge;dur=50,cfOrigin;dur=0
CF-Ray: 9bb16f106c9d1117-YYZ
Access-Control-Allow-Origin: *
Cache-Control: max-age=1500
Server: cloudflare
X-ConCat-Version: master
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-robots-tag: noindex
Vary: accept-encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=zL5TNle1bwF9EHyTFjaN2QpfzawrsNyPNHRBAHf6GXf%2BcfLpaxDg4ppXHqYl7jHDJ7vtEXyFP9%2BZneLgikYIIynOFDgtxRm4DSdLf1k%2BaxEz"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
alt-svc: h3=":443"; ma=86400

Page title: ConCat - Loading...

<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0"><meta name="referrer" content="no-referrer"><base href="/"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css" integrity="sha384-QWTKZyjpPEjISv5WaRU9OFeRpok6YctnYmDr5pNlyT2bRjXh0JMhjY6hW+ALEwIH" crossorigin="anonymous" id="bootstrapv5"><link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Krona+One|Armata|Material+Icons|Material+Icons+Outlined" crossorigin="anonymous"><title>ConCat - Loading...</title><script defer="defer" src="runtime.b531841fe50017b34a7a.js"></script><script defer="defer" src="473.61e1acd15e007d481768.js"></script><script defer="defer" src="main.b5f5d48c931840a85116.js"></script><link href="473.4b5ca51165a3160df46d.css" rel="stylesheet"><link href="main.4fdae2df02d87453795d.css" rel="stylesheet"></head><body><div id="app"></div><div id="printArea"></div><script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"3fff85e299f642739e26e88ce2dfbd86","server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>
</body></html>

Found 2026-01-09 by HttpPlugin