Domain api-dev.etclub.vn
United States
Software information
Vercel
tcp/443
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-11-16 12:32
Last seen 2026-01-09 14:23
Open for 54 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109Public Swagger UI/API detected at path: /api-docs/swagger.json
Found on 2026-01-09 14:23
-
-
Open service 66.33.60.193:443 · api-dev.etclub.vn
2026-01-09 14:23
HTTP/1.1 404 Not Found Access-Control-Allow-Origin: * Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 139 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Fri, 09 Jan 2026 14:23:09 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: fra1::iad1::8bsrc-1767968589584-f5b404abe471 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2026-01-09 by HttpPluginCreate report
-
Open service 66.33.60.193:443 · api-dev.etclub.vn
2026-01-02 19:04
HTTP/1.1 404 Not Found Access-Control-Allow-Origin: * Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 139 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Fri, 02 Jan 2026 19:04:47 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: bom1::iad1::r6m56-1767380685801-523359987e59 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2026-01-02 by HttpPluginCreate report
-
Open service 66.33.60.193:443 · api-dev.etclub.vn
2025-12-23 08:02
HTTP/1.1 404 Not Found Access-Control-Allow-Origin: * Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 139 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Tue, 23 Dec 2025 08:02:25 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: lhr1::iad1::x8h8d-1766476943258-21f4d827d738 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2025-12-23 by HttpPluginCreate report
-
Open service 66.33.60.193:443 · api-dev.etclub.vn
2025-12-21 04:24
HTTP/1.1 404 Not Found Access-Control-Allow-Origin: * Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 139 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Sun, 21 Dec 2025 04:24:39 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: sfo1::iad1::vmls6-1766291077826-bf2d76435ea3 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2025-12-21 by HttpPluginCreate report
-
Open service 66.33.60.193:443 · api-dev.etclub.vn
2025-12-19 01:21
HTTP/1.1 404 Not Found Access-Control-Allow-Origin: * Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 139 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Fri, 19 Dec 2025 01:21:08 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Content-Type-Options: nosniff X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::wdbq4-1766107268408-b1651bd38297 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2025-12-19 by HttpPluginCreate report