cloudflare
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Open service 104.26.7.89:443 · api.invibes.app
2026-01-09 05:10
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 05:10:21 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rctHL56mTCRIZyI2dUNpyZ4pAwOCWOIei60viAlHrRQ5WnffoBcTOCViUm3XFop69RUvl%2BaeCZeCa8XOn3nu0ZNcFa%2FMyOtmfe7JGm4N"}]}
Server: cloudflare
vary: Origin
vary: Accept-Encoding
x-railway-edge: railway/europe-west4-drams3a
x-railway-request-id: xv_rmDHFSLufOFKn0-QtfA
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9bb16d7b2ccfdca5-FRA
{"status":"ok"}
Open service 104.26.7.89:443 · api.invibes.app
2026-01-02 09:08
HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 09:08:50 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=3qYznHBQ43kvL9ffKso06h9dU9g3tsxxe7rOiTj22GDVhIXxMNL2CIsU9QORAa0hJlRwQXYm%2BxuCgwxZMo15t0UWoKOX%2FNBwSqf8cs%2BN"}]}
Server: cloudflare
vary: Origin
vary: Accept-Encoding
x-railway-edge: railway/europe-west4-drams3a
x-railway-request-id: c7R71qkHR-WqjlA35nX1uw
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b791d36e95466af-AMS
{"status":"ok"}
Open service 104.26.7.89:443 · api.invibes.app
2025-12-23 01:14
HTTP/1.1 200 OK
Date: Tue, 23 Dec 2025 01:14:56 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=o7VkjOjJ9OnuzRM3aSESigfZ%2BY1thLzRZPKGzvo9mkBMPOuoNP4hOV%2F8ebWNLNgf8k0XKn7Ei7D2O8Gvy7YxTWk0NWkxWn6SfR6nYEbg"}]}
Server: cloudflare
vary: Origin
vary: Accept-Encoding
x-railway-edge: railway/us-east4-eqdc4a
x-railway-request-id: stvRf5IlTK-QuYn3woOzXw
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9b240140e9c2005e-EWR
{"status":"ok"}