Vercel
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 64.29.17.1:443 · api.24tech.ca
2026-01-10 01:23
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 25
Content-Type: application/json; charset=utf-8
Cross-Origin-Resource-Policy: cross-origin
Date: Sat, 10 Jan 2026 01:24:01 GMT
Etag: W/"19-c6Hfa5VVP+Ghysj+6y9cPi5QQbk"
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Powered-By: Express
X-Vercel-Cache: MISS
X-Vercel-Id: fra1::iad1::dtsc7-1768008240469-6bdb7dc261b4
Connection: close
{"message":"Hello World"}
Open service 64.29.17.1:443 · api.24tech.ca
2026-01-03 00:52
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 25
Content-Type: application/json; charset=utf-8
Cross-Origin-Resource-Policy: cross-origin
Date: Sat, 03 Jan 2026 00:52:06 GMT
Etag: W/"19-c6Hfa5VVP+Ghysj+6y9cPi5QQbk"
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Powered-By: Express
X-Vercel-Cache: MISS
X-Vercel-Id: sfo1::iad1::klcxr-1767401522428-7766796073d2
Connection: close
{"message":"Hello World"}
Open service 64.29.17.1:443 · api.24tech.ca
2025-12-23 05:19
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 25
Content-Type: application/json; charset=utf-8
Cross-Origin-Resource-Policy: cross-origin
Date: Tue, 23 Dec 2025 05:19:45 GMT
Etag: W/"19-c6Hfa5VVP+Ghysj+6y9cPi5QQbk"
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Powered-By: Express
X-Vercel-Cache: MISS
X-Vercel-Id: sin1::iad1::kq2t6-1766467181044-08a51472e22f
Connection: close
{"message":"Hello World"}
Open service 64.29.17.1:443 · api.24tech.ca
2025-12-20 15:28
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 25
Content-Type: application/json; charset=utf-8
Cross-Origin-Resource-Policy: cross-origin
Date: Sat, 20 Dec 2025 15:28:28 GMT
Etag: W/"19-c6Hfa5VVP+Ghysj+6y9cPi5QQbk"
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Powered-By: Express
X-Vercel-Cache: MISS
X-Vercel-Id: fra1::iad1::qwn7s-1766244504495-833891b8d29b
Connection: close
{"message":"Hello World"}