BunnyCDN-SG1-1272
tcp/443 tcp/80
BunnyCDN-SG1-1274
tcp/443 tcp/80
BunnyCDN-SG1-868
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e57e66e560407df7b7c241da3a5f7d6b1385fd22c7
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
DELETE /api/admin/game/delete
DELETE /api/admin/post/del/{postId}
DELETE /api/admin/user/delete/{adminId}
GET /api/admin/game/inf/list
GET /api/admin/game/list
GET /api/admin/game/rate
GET /api/admin/game/view
GET /api/admin/inf/detail
GET /api/admin/inf/detail/exchange/{gameId}/{influencerId}
GET /api/admin/inf/detail/game/{influencerId}
GET /api/admin/inf/detail/saved/lk/list
GET /api/admin/inf/detail/sponsor/list
GET /api/admin/inf/list
GET /api/admin/inf/total
GET /api/admin/point/exchange/list
GET /api/admin/point/exchange/total
GET /api/admin/point/lk/list
GET /api/admin/point/lk/total
GET /api/admin/point/payment/detail
GET /api/admin/point/payment/list
GET /api/admin/point/payment/total
GET /api/admin/post/detail/{postId}
GET /api/admin/post/list
GET /api/admin/post/priority
GET /api/admin/sns/platform/list
GET /api/admin/user/company/list
GET /api/admin/user/dashboard
GET /api/admin/user/detail/{adminId}
GET /api/admin/user/duplicate
GET /api/admin/user/info
GET /api/admin/user/list
GET /api/client/game/contract/url/{gameId}
GET /api/client/game/detail
GET /api/client/game/list
GET /api/client/game/statistics
GET /api/client/inf/company/list
GET /api/client/inf/duplicate/inf_name/{infName}
GET /api/client/inf/duplicate/sponsor_code/{sponsorCode}
GET /api/client/inf/exchange/current/request/info
GET /api/client/inf/exchange/info/{gameId}
GET /api/client/inf/exchange/request/info
GET /api/client/inf/list
GET /api/client/inf/ranking
GET /api/client/inf/sponsor/statistics
GET /api/client/inf/subscriber/{snsPlatform}
GET /api/client/user/google/login
GET /api/client/user/info
GET /api/client/user/post/detail/{postId}
GET /api/client/user/post/list
GET /api/client/user/tmp/login
POST /api/admin/game/add/rate
POST /api/admin/game/create
POST /api/admin/point/collect/point
POST /api/admin/point/give/point
POST /api/admin/post/cre
POST /api/admin/user/create/company_info
POST /api/admin/user/login
POST /api/admin/user/sign_up
POST /api/client/game/join
POST /api/client/inf/contract/create
POST /api/client/inf/contract/status
POST /api/client/inf/create
POST /api/client/inf/create/exchange/info
POST /api/client/inf/create/exchange/request
POST /api/client/inf/create/platform
POST /api/client/inf/game/exist/inf
POST /api/client/inf/mobillians/auth
POST /api/signup/email
POST /api/upload
POST /api/upload/post/editor
PUT /api/admin/game/update
PUT /api/admin/game/update/inf
PUT /api/admin/inf/exchange_info/approval
PUT /api/admin/point/exchange/update
PUT /api/admin/point/refund/point
PUT /api/admin/post/upd
PUT /api/admin/sns/platform/update
PUT /api/admin/sns/platform/update/priority
PUT /api/admin/user/update
PUT /api/client/inf/update/exchange/info
PUT /api/client/inf/update/introduction
PUT /api/client/inf/update/profile/image
PUT /api/client/inf/update/sns/info
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e57e66e560407df7b7c241da3a5f7d6b1385fd22c7
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
DELETE /api/admin/game/delete
DELETE /api/admin/post/del/{postId}
DELETE /api/admin/user/delete/{adminId}
GET /api/admin/game/inf/list
GET /api/admin/game/list
GET /api/admin/game/rate
GET /api/admin/game/view
GET /api/admin/inf/detail
GET /api/admin/inf/detail/exchange/{gameId}/{influencerId}
GET /api/admin/inf/detail/game/{influencerId}
GET /api/admin/inf/detail/saved/lk/list
GET /api/admin/inf/detail/sponsor/list
GET /api/admin/inf/list
GET /api/admin/inf/total
GET /api/admin/point/exchange/list
GET /api/admin/point/exchange/total
GET /api/admin/point/lk/list
GET /api/admin/point/lk/total
GET /api/admin/point/payment/detail
GET /api/admin/point/payment/list
GET /api/admin/point/payment/total
GET /api/admin/post/detail/{postId}
GET /api/admin/post/list
GET /api/admin/post/priority
GET /api/admin/sns/platform/list
GET /api/admin/user/company/list
GET /api/admin/user/dashboard
GET /api/admin/user/detail/{adminId}
GET /api/admin/user/duplicate
GET /api/admin/user/info
GET /api/admin/user/list
GET /api/client/game/contract/url/{gameId}
GET /api/client/game/detail
GET /api/client/game/list
GET /api/client/game/statistics
GET /api/client/inf/company/list
GET /api/client/inf/duplicate/inf_name/{infName}
GET /api/client/inf/duplicate/sponsor_code/{sponsorCode}
GET /api/client/inf/exchange/current/request/info
GET /api/client/inf/exchange/info/{gameId}
GET /api/client/inf/exchange/request/info
GET /api/client/inf/list
GET /api/client/inf/ranking
GET /api/client/inf/sponsor/statistics
GET /api/client/inf/subscriber/{snsPlatform}
GET /api/client/user/google/login
GET /api/client/user/info
GET /api/client/user/post/detail/{postId}
GET /api/client/user/post/list
GET /api/client/user/tmp/login
POST /api/admin/game/add/rate
POST /api/admin/game/create
POST /api/admin/point/collect/point
POST /api/admin/point/give/point
POST /api/admin/post/cre
POST /api/admin/user/create/company_info
POST /api/admin/user/login
POST /api/admin/user/sign_up
POST /api/client/game/join
POST /api/client/inf/contract/create
POST /api/client/inf/contract/status
POST /api/client/inf/create
POST /api/client/inf/create/exchange/info
POST /api/client/inf/create/exchange/request
POST /api/client/inf/create/platform
POST /api/client/inf/game/exist/inf
POST /api/client/inf/mobillians/auth
POST /api/signup/email
POST /api/upload
POST /api/upload/post/editor
PUT /api/admin/game/update
PUT /api/admin/game/update/inf
PUT /api/admin/inf/exchange_info/approval
PUT /api/admin/point/exchange/update
PUT /api/admin/point/refund/point
PUT /api/admin/post/upd
PUT /api/admin/sns/platform/update
PUT /api/admin/sns/platform/update/priority
PUT /api/admin/user/update
PUT /api/client/inf/update/exchange/info
PUT /api/client/inf/update/introduction
PUT /api/client/inf/update/profile/image
PUT /api/client/inf/update/sns/info
Open service 138.199.46.65:80 · api-crew.spolive.com
2026-01-11 09:02
HTTP/1.1 200 OK
Date: Sun, 11 Jan 2026 09:02:53 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 172
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-SG1-1274
CDN-PullZone: 4363498
CDN-RequestCountryCode: SG
Accept-Ranges: bytes
Cache-Control: no-store, must-revalidate, no-cache, max-age=0
Content-Language: en-US
Expires: 0
Last-Modified: Mon, 18 Aug 2025 06:16:26 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Frame-Options: DENY
CDN-ProxyVer: 1.43
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
CDN-CachedAt: 01/11/2026 09:02:53
CDN-EdgeStorageId: 1272
CDN-RequestId: acb6b63f7f3b6a7a511599f21c377d94
CDN-Cache: MISS
CDN-Status: 200
CDN-RequestTime: 0
Page title: SP SEVER IS RUNNING
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>SP SEVER IS RUNNING </title>
</head>
<body>
<span>SP SEVER IS RUNNING</span>
</body>
</html>
Open service 2400:52e0:1500::868:1:80 · api-crew.spolive.com
2026-01-11 09:02
HTTP/1.1 200 OK
Date: Sun, 11 Jan 2026 09:02:54 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 172
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-SG1-868
CDN-PullZone: 4363498
CDN-RequestCountryCode: NL
Accept-Ranges: bytes
Cache-Control: no-store, must-revalidate, no-cache, max-age=0
Content-Language: en-US
Expires: 0
Last-Modified: Mon, 18 Aug 2025 06:16:26 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Frame-Options: DENY
CDN-ProxyVer: 1.43
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
CDN-CachedAt: 01/11/2026 09:02:54
CDN-EdgeStorageId: 1272
CDN-RequestId: de4d409317e7ddd0ab51e12999840297
CDN-Cache: MISS
CDN-Status: 200
CDN-RequestTime: 0
Page title: SP SEVER IS RUNNING
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>SP SEVER IS RUNNING </title>
</head>
<body>
<span>SP SEVER IS RUNNING</span>
</body>
</html>
Open service 2400:52e0:1500::868:1:443 · api-crew.spolive.com
2026-01-11 09:02
HTTP/1.1 200 OK
Date: Sun, 11 Jan 2026 09:02:54 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 172
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-SG1-868
CDN-PullZone: 4363498
CDN-RequestCountryCode: US
Accept-Ranges: bytes
Cache-Control: no-store, must-revalidate, no-cache, max-age=0
Content-Language: en-US
Expires: 0
Last-Modified: Mon, 18 Aug 2025 06:16:26 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Frame-Options: DENY
CDN-ProxyVer: 1.43
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
CDN-CachedAt: 01/11/2026 09:02:54
CDN-EdgeStorageId: 1272
CDN-RequestId: 888e1e2bc133ee7b2ff45abce238aa41
CDN-Cache: MISS
CDN-Status: 200
CDN-RequestTime: 0
Page title: SP SEVER IS RUNNING
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>SP SEVER IS RUNNING </title>
</head>
<body>
<span>SP SEVER IS RUNNING</span>
</body>
</html>
Open service 138.199.46.65:443 · api-crew.spolive.com
2026-01-11 09:02
HTTP/1.1 200 OK
Date: Sun, 11 Jan 2026 09:02:53 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 172
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-SG1-1274
CDN-PullZone: 4363498
CDN-RequestCountryCode: IN
Accept-Ranges: bytes
Cache-Control: no-store, must-revalidate, no-cache, max-age=0
Content-Language: en-US
Expires: 0
Last-Modified: Mon, 18 Aug 2025 06:16:26 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Frame-Options: DENY
CDN-ProxyVer: 1.43
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
CDN-CachedAt: 01/11/2026 09:02:53
CDN-EdgeStorageId: 1272
CDN-RequestId: 1c4b7feba4a175df408bf8f46b3fc575
CDN-Cache: MISS
CDN-Status: 200
CDN-RequestTime: 0
Page title: SP SEVER IS RUNNING
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>SP SEVER IS RUNNING </title>
</head>
<body>
<span>SP SEVER IS RUNNING</span>
</body>
</html>
Open service 138.199.24.219:443 · api-crew.spolive.com
2026-01-09 21:13
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 21:13:33 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 172
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-SG1-1272
CDN-PullZone: 4363498
CDN-RequestCountryCode: CA
Accept-Ranges: bytes
Cache-Control: no-store, must-revalidate, no-cache, max-age=0
Content-Language: en-US
Expires: 0
Last-Modified: Mon, 18 Aug 2025 06:16:26 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Frame-Options: DENY
CDN-ProxyVer: 1.43
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
CDN-CachedAt: 01/09/2026 21:13:33
CDN-EdgeStorageId: 1272
CDN-RequestId: d9037613f7817c65d6552240d9bb5db3
CDN-Cache: MISS
CDN-Status: 200
CDN-RequestTime: 0
Page title: SP SEVER IS RUNNING
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>SP SEVER IS RUNNING </title>
</head>
<body>
<span>SP SEVER IS RUNNING</span>
</body>
</html>
Open service 138.199.24.219:80 · api-crew.spolive.com
2026-01-09 12:34
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 12:34:05 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 172
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-SG1-1272
CDN-PullZone: 4363498
CDN-RequestCountryCode: SG
Accept-Ranges: bytes
Cache-Control: no-store, must-revalidate, no-cache, max-age=0
Content-Language: en-US
Expires: 0
Last-Modified: Mon, 18 Aug 2025 06:16:26 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Frame-Options: DENY
CDN-ProxyVer: 1.43
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
CDN-CachedAt: 01/09/2026 12:34:05
CDN-EdgeStorageId: 1272
CDN-RequestId: 68ec419cfe35eda42171b41138a9e46f
CDN-Cache: MISS
CDN-Status: 200
CDN-RequestTime: 0
Page title: SP SEVER IS RUNNING
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>SP SEVER IS RUNNING </title>
</head>
<body>
<span>SP SEVER IS RUNNING</span>
</body>
</html>
Open service 138.199.24.219:443 · api-crew.spolive.com
2026-01-02 14:54
HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 14:54:10 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 172
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-SG1-1272
CDN-PullZone: 4363498
CDN-RequestCountryCode: GB
Accept-Ranges: bytes
Cache-Control: no-store, must-revalidate, no-cache, max-age=0
Content-Language: en-US
Expires: 0
Last-Modified: Mon, 18 Aug 2025 06:16:26 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Frame-Options: DENY
CDN-ProxyVer: 1.43
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
CDN-CachedAt: 01/02/2026 14:54:10
CDN-EdgeStorageId: 1272
CDN-RequestId: 4b673981bb1d928badab588e94e57408
CDN-Cache: MISS
CDN-Status: 200
CDN-RequestTime: 0
Page title: SP SEVER IS RUNNING
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>SP SEVER IS RUNNING </title>
</head>
<body>
<span>SP SEVER IS RUNNING</span>
</body>
</html>
Open service 138.199.24.219:80 · api-crew.spolive.com
2025-12-22 17:35
HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 17:35:25 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 172
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-SG1-1272
CDN-PullZone: 4363498
CDN-RequestCountryCode: US
Accept-Ranges: bytes
Cache-Control: no-store, must-revalidate, no-cache, max-age=0
Content-Language: en-US
Expires: 0
Last-Modified: Mon, 18 Aug 2025 06:16:26 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Frame-Options: DENY
CDN-ProxyVer: 1.41
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
CDN-CachedAt: 12/22/2025 17:35:25
CDN-EdgeStorageId: 1272
CDN-RequestId: 72ac97eeb79e4549bf3b65b4a06f8ef0
CDN-Cache: MISS
CDN-Status: 200
CDN-RequestTime: 0
Page title: SP SEVER IS RUNNING
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>SP SEVER IS RUNNING </title>
</head>
<body>
<span>SP SEVER IS RUNNING</span>
</body>
</html>
Open service 138.199.24.219:443 · api-crew.spolive.com
2025-12-22 16:54
HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 16:54:31 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 172
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-SG1-1272
CDN-PullZone: 4363498
CDN-RequestCountryCode: DE
Accept-Ranges: bytes
Cache-Control: no-store, must-revalidate, no-cache, max-age=0
Content-Language: en-US
Expires: 0
Last-Modified: Mon, 18 Aug 2025 06:16:26 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Frame-Options: DENY
CDN-ProxyVer: 1.41
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
CDN-CachedAt: 12/22/2025 16:54:31
CDN-EdgeStorageId: 1272
CDN-RequestId: 990c25e92cc6766a15cb70aad8839f35
CDN-Cache: MISS
CDN-Status: 200
CDN-RequestTime: 0
Page title: SP SEVER IS RUNNING
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>SP SEVER IS RUNNING </title>
</head>
<body>
<span>SP SEVER IS RUNNING</span>
</body>
</html>
Open service 138.199.24.219:443 · api-crew.spolive.com
2025-12-20 17:42
HTTP/1.1 200 OK
Date: Sat, 20 Dec 2025 17:42:53 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 172
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-SG1-1272
CDN-PullZone: 4363498
CDN-RequestCountryCode: SG
Accept-Ranges: bytes
Cache-Control: no-store, must-revalidate, no-cache, max-age=0
Content-Language: en-US
Expires: 0
Last-Modified: Mon, 18 Aug 2025 06:16:26 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Frame-Options: DENY
CDN-ProxyVer: 1.41
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
CDN-CachedAt: 12/20/2025 17:42:53
CDN-EdgeStorageId: 1272
CDN-RequestId: ffaa6a83ddb3026d4f2d021d167d1c70
CDN-Cache: MISS
CDN-Status: 200
CDN-RequestTime: 0
Page title: SP SEVER IS RUNNING
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>SP SEVER IS RUNNING </title>
</head>
<body>
<span>SP SEVER IS RUNNING</span>
</body>
</html>
Open service 138.199.24.219:443 · api-crew.spolive.com
2025-12-19 06:29
HTTP/1.1 200 OK
Date: Fri, 19 Dec 2025 06:29:25 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 172
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-SG1-1272
CDN-PullZone: 4363498
CDN-RequestCountryCode: DE
Accept-Ranges: bytes
Cache-Control: no-store, must-revalidate, no-cache, max-age=0
Content-Language: en-US
Expires: 0
Last-Modified: Mon, 18 Aug 2025 06:16:26 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Frame-Options: DENY
CDN-ProxyVer: 1.41
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
CDN-CachedAt: 12/19/2025 06:29:25
CDN-EdgeStorageId: 1272
CDN-RequestId: 104fe858d2a68c039c8496669c2025e5
CDN-Cache: MISS
CDN-Status: 200
CDN-RequestTime: 0
Page title: SP SEVER IS RUNNING
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>SP SEVER IS RUNNING </title>
</head>
<body>
<span>SP SEVER IS RUNNING</span>
</body>
</html>
Open service 138.199.24.219:80 · api-crew.spolive.com
2025-12-19 06:29
HTTP/1.1 200 OK
Date: Fri, 19 Dec 2025 06:29:25 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 172
Connection: close
Vary: Accept-Encoding
Server: BunnyCDN-SG1-1272
CDN-PullZone: 4363498
CDN-RequestCountryCode: DE
Accept-Ranges: bytes
Cache-Control: no-store, must-revalidate, no-cache, max-age=0
Content-Language: en-US
Expires: 0
Last-Modified: Mon, 18 Aug 2025 06:16:26 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Frame-Options: DENY
CDN-ProxyVer: 1.41
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
CDN-CachedAt: 12/19/2025 06:29:25
CDN-EdgeStorageId: 1272
CDN-RequestId: 0e7fc820e0de0b9e9c4b227e2205fbc1
CDN-Cache: MISS
CDN-Status: 200
CDN-RequestTime: 0
Page title: SP SEVER IS RUNNING
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>SP SEVER IS RUNNING </title>
</head>
<body>
<span>SP SEVER IS RUNNING</span>
</body>
</html>