cloudflare
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b0ae727035b0c07061982087a8223ed3fd81a2150
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /app/capital/udunlistSupportCoin
GET /app/config/configData/{params}
GET /app/config/video/{type}
GET /app/test/getCryptoDetails
GET /app/test/getMarketDetails
POST /app/article/getArticleById
POST /app/article/helpCenter
POST /app/article/helpList
POST /app/article/list
POST /app/capital/capitalLogList
POST /app/capital/change
POST /app/capital/changeAddress
POST /app/capital/depositRecharge
POST /app/capital/getAddress
POST /app/capital/getCollectionAccount
POST /app/capital/getCryptoAssetsLogs
POST /app/capital/getDepositRatio
POST /app/capital/getLinkNet
POST /app/capital/getLinkWithdrawNet
POST /app/capital/getRechargeLogs
POST /app/capital/getUsdtType
POST /app/capital/getUsdtWithdrawType
POST /app/capital/getWithdrawLogs
POST /app/capital/recharge
POST /app/capital/uduncheckAddress
POST /app/capital/uduncreate
POST /app/capital/withdraw
POST /app/chatRecord/getList
POST /app/coin/change
POST /app/coin/changeList
POST /app/coin/getCoinInfo
POST /app/coin/marketList
POST /app/config/advertise
POST /app/config/getContractMultiple
POST /app/config/getKefuUrl
POST /app/config/homeBanner
POST /app/config/info
POST /app/lang/list
POST /app/loan/add
POST /app/loan/getNewCoinLoan
POST /app/loan/getSetting
POST /app/loan/lastLnfo
POST /app/loan/logList
POST /app/loan/repay
POST /app/loan/repayPledge
POST /app/market/aiMarketList
POST /app/market/getTbCurrencySetting
POST /app/market/homeRecomment
POST /app/market/marketCatergory
POST /app/market/marketDetail
POST /app/market/marketIndicators
POST /app/market/marketList
POST /app/market/marketList2
POST /app/market/marketStatics
POST /app/market/marketTrades
POST /app/market/newCoinList
POST /app/market/newCoinLogList
POST /app/market/newCoinMarketDetail
POST /app/market/searchMarketList
POST /app/notice/List
POST /app/notice/clear
POST /app/notice/getNoReadNum
POST /app/notice/setAllReaded
POST /app/notice/setReaded
POST /app/order/add
POST /app/order/buySell
POST /app/order/cancel
POST /app/order/checkRecharge
POST /app/order/comfirm
POST /app/order/contract/allChange
POST /app/order/contract/back
POST /app/order/contract/buy
POST /app/order/contract/buyNewCoin
POST /app/order/contract/editProfitLoss
POST /app/order/contract/getContractBuyLogs
POST /app/order/contract/getFee
POST /app/order/contract/getOrderDetailById
POST /app/order/contract/getWithdrawLogs
POST /app/order/contract/sell
POST /app/order/contract/statistic
POST /app/order/getCtcLogs
POST /app/order/getFee
POST /app/order/getOrderDetail
POST /app/order/getShops
POST /app/order/lotteryTags
POST /app/order/orderList
POST /app/order/quickRecharge
POST /app/order/spot/back
POST /app/order/spot/buy
POST /app/order/spot/getCoinBalance
POST /app/order/spot/getCryptoAssetsLogs
POST /app/order/spot/getOrderDetailById
POST /app/order/spot/getOrderSpotHave
POST /app/order/spot/getOrderSpotLogs
POST /app/order/spot/sell
POST /app/strategy/add
POST /app/strategy/cancel
POST /app/strategy/getSetting
POST /app/strategy/logList
POST /app/strategy/statistic
POST /app/test/addNewStock
POST /app/test/addTradeMarket
POST /app/test/getMarketDistancePrice
POST /app/test/getMarketStatistics
POST /app/test/getMinuteStatistcs
POST /app/test/getNewPrice
POST /app/test/getUsStockList
POST /app/test/pushOrder
POST /app/test/saveWallet
POST /app/test/setCoinData
POST /app/test/setSEMKline
POST /app/test/setSeriesId
POST /app/test/setSingle
POST /app/test/setTonData
POST /app/test/setUStockKline
POST /app/upload/image
POST /app/user/captchaImage
POST /app/user/closeGoogle
POST /app/user/deleteMember
POST /app/user/editAvatar
POST /app/user/editEmail
POST /app/user/editIdentity
POST /app/user/editMobile
POST /app/user/forgetPwd
POST /app/user/getEmailCode
POST /app/user/getFixedWalletInfo
POST /app/user/getIntervalWalletInfo
POST /app/user/getInvitationUrl
POST /app/user/getSMSCode
POST /app/user/login
POST /app/user/loginAccount
POST /app/user/loginDemo
POST /app/user/loginUser
POST /app/user/logout
POST /app/user/myInvitationIncome
POST /app/user/myInvitationIncomeList
POST /app/user/openCheck
POST /app/user/register
POST /app/user/setAgentCode
POST /app/user/setOrderPassword
POST /app/user/userAvatars
POST /app/user/userDetail
POST /app/user/userInfo
POST /app/user/validEmailPassword
POST /app/user/validOrderPassword
POST /app/user/validateGoogle
POST /app/wallet/firstChange
POST /app/wallet/newChange
POST /app/wallet/sendChange
POST /app/wallet/userBalance
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b0ae727035b0c07061982087a8223ed3fd81a2150
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /app/capital/udunlistSupportCoin
GET /app/config/configData/{params}
GET /app/config/video/{type}
GET /app/test/getCryptoDetails
GET /app/test/getMarketDetails
POST /app/article/getArticleById
POST /app/article/helpCenter
POST /app/article/helpList
POST /app/article/list
POST /app/capital/capitalLogList
POST /app/capital/change
POST /app/capital/changeAddress
POST /app/capital/depositRecharge
POST /app/capital/getAddress
POST /app/capital/getCollectionAccount
POST /app/capital/getCryptoAssetsLogs
POST /app/capital/getDepositRatio
POST /app/capital/getLinkNet
POST /app/capital/getLinkWithdrawNet
POST /app/capital/getRechargeLogs
POST /app/capital/getUsdtType
POST /app/capital/getUsdtWithdrawType
POST /app/capital/getWithdrawLogs
POST /app/capital/recharge
POST /app/capital/uduncheckAddress
POST /app/capital/uduncreate
POST /app/capital/withdraw
POST /app/chatRecord/getList
POST /app/coin/change
POST /app/coin/changeList
POST /app/coin/getCoinInfo
POST /app/coin/marketList
POST /app/config/advertise
POST /app/config/getContractMultiple
POST /app/config/getKefuUrl
POST /app/config/homeBanner
POST /app/config/info
POST /app/lang/list
POST /app/loan/add
POST /app/loan/getNewCoinLoan
POST /app/loan/getSetting
POST /app/loan/lastLnfo
POST /app/loan/logList
POST /app/loan/repay
POST /app/loan/repayPledge
POST /app/market/aiMarketList
POST /app/market/getTbCurrencySetting
POST /app/market/homeRecomment
POST /app/market/marketCatergory
POST /app/market/marketDetail
POST /app/market/marketIndicators
POST /app/market/marketList
POST /app/market/marketList2
POST /app/market/marketStatics
POST /app/market/marketTrades
POST /app/market/newCoinList
POST /app/market/newCoinLogList
POST /app/market/newCoinMarketDetail
POST /app/market/searchMarketList
POST /app/notice/List
POST /app/notice/clear
POST /app/notice/getNoReadNum
POST /app/notice/setAllReaded
POST /app/notice/setReaded
POST /app/order/add
POST /app/order/buySell
POST /app/order/cancel
POST /app/order/checkRecharge
POST /app/order/comfirm
POST /app/order/contract/allChange
POST /app/order/contract/back
POST /app/order/contract/buy
POST /app/order/contract/buyNewCoin
POST /app/order/contract/editProfitLoss
POST /app/order/contract/getContractBuyLogs
POST /app/order/contract/getFee
POST /app/order/contract/getOrderDetailById
POST /app/order/contract/getWithdrawLogs
POST /app/order/contract/sell
POST /app/order/contract/statistic
POST /app/order/getCtcLogs
POST /app/order/getFee
POST /app/order/getOrderDetail
POST /app/order/getShops
POST /app/order/lotteryTags
POST /app/order/orderList
POST /app/order/quickRecharge
POST /app/order/spot/back
POST /app/order/spot/buy
POST /app/order/spot/getCoinBalance
POST /app/order/spot/getCryptoAssetsLogs
POST /app/order/spot/getOrderDetailById
POST /app/order/spot/getOrderSpotHave
POST /app/order/spot/getOrderSpotLogs
POST /app/order/spot/sell
POST /app/strategy/add
POST /app/strategy/cancel
POST /app/strategy/getSetting
POST /app/strategy/logList
POST /app/strategy/statistic
POST /app/test/addNewStock
POST /app/test/addTradeMarket
POST /app/test/getMarketDistancePrice
POST /app/test/getMarketStatistics
POST /app/test/getMinuteStatistcs
POST /app/test/getNewPrice
POST /app/test/getUsStockList
POST /app/test/pushOrder
POST /app/test/saveWallet
POST /app/test/setCoinData
POST /app/test/setSEMKline
POST /app/test/setSeriesId
POST /app/test/setSingle
POST /app/test/setTonData
POST /app/test/setUStockKline
POST /app/upload/image
POST /app/user/captchaImage
POST /app/user/closeGoogle
POST /app/user/deleteMember
POST /app/user/editAvatar
POST /app/user/editEmail
POST /app/user/editIdentity
POST /app/user/editMobile
POST /app/user/forgetPwd
POST /app/user/getEmailCode
POST /app/user/getFixedWalletInfo
POST /app/user/getIntervalWalletInfo
POST /app/user/getInvitationUrl
POST /app/user/getSMSCode
POST /app/user/login
POST /app/user/loginAccount
POST /app/user/loginDemo
POST /app/user/loginUser
POST /app/user/logout
POST /app/user/myInvitationIncome
POST /app/user/myInvitationIncomeList
POST /app/user/openCheck
POST /app/user/register
POST /app/user/setAgentCode
POST /app/user/setOrderPassword
POST /app/user/userAvatars
POST /app/user/userDetail
POST /app/user/userInfo
POST /app/user/validEmailPassword
POST /app/user/validOrderPassword
POST /app/user/validateGoogle
POST /app/wallet/firstChange
POST /app/wallet/newChange
POST /app/wallet/sendChange
POST /app/wallet/userBalance
Open service 188.114.97.12:443 · api.silkprope.com
2026-01-09 21:36
HTTP/1.1 404 Not Found
Date: Fri, 09 Jan 2026 21:36:51 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=mWmSEdOzxNCohSUZgSxuruEusq%2B%2FCGxxERzksNVSj1w0%2FMoY%2BH9oe6%2BhYeqNPFth0thhGobRWA2w8osR7b3uICxZtRcTRandpNvvYQNPJPDU"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9bb712909fc1ec71-YYZ
alt-svc: h3=":443"; ma=86400
{"timestamp":"2026-01-10T05:36:51.419+08:00","status":404,"error":"Not Found","path":"/"}
Open service 188.114.96.12:80 · api.silkprope.com
2026-01-09 20:29
HTTP/1.1 404 Not Found
Date: Fri, 09 Jan 2026 20:29:41 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Bh%2BEWBBK6N8Sz8YANleKiqPbhHMCSUWTzSqqtjNwjiV4Teh6u6mnEQuj3n%2F1H3I7seUi%2Bznu3Vxgk8nNpO7xVjqEObAF%2F1iHkBDyGjxoEVh7"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9bb6b02d4ebbcbe1-SIN
alt-svc: h3=":443"; ma=86400
{"timestamp":"2026-01-10T04:29:41.424+08:00","status":404,"error":"Not Found","path":"/"}
Open service 188.114.96.12:80 · api.silkprope.com
2026-01-03 00:38
HTTP/1.1 404 Not Found
Date: Sat, 03 Jan 2026 00:38:23 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=t0zQCWenIQqj7jvRbVAxDZ52LK5Dz7gSZb%2Bai934XNs4R1LVv9GmHF2hobdLMj%2B%2F5AlKTjohHCSGRhvLIlDpwIN804u8s5my5CL8gK3qes7b"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9b7e6edb1ffe6404-LHR
alt-svc: h3=":443"; ma=86400
{"timestamp":"2026-01-03T08:38:23.576+08:00","status":404,"error":"Not Found","path":"/"}
Open service 188.114.97.12:443 · api.silkprope.com
2026-01-02 16:56
HTTP/1.1 404 Not Found
Date: Fri, 02 Jan 2026 16:56:11 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=lL9wOcGXMLzmDQNTvPVaiPjYZ5fn4BuIylmY8YMjSOqn3IZJo7vLzbaomPVVDJYeD6HBY2tMzMBJwyApgvPP2xSqwL6fFkQBzRWJ2cMCuu02"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9b7bc9cede68cecd-SJC
alt-svc: h3=":443"; ma=86400
{"timestamp":"2026-01-03T00:56:11.604+08:00","status":404,"error":"Not Found","path":"/"}
Open service 188.114.97.12:443 · api.silkprope.com
2025-12-30 14:04
HTTP/1.1 404 Not Found
Date: Tue, 30 Dec 2025 14:04:58 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=l%2FkMTtK%2Bw%2F%2Fy1hw6amFyio44p%2BhYxwnyJrdOyJTJPxX2uZn8YytZIbSmvrzfWzm%2FbsbOG19Xl3AV0V3Zmb%2FaDWj9Vje6A%2F%2BtXYk1gd3I2CfO"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9b6216de68ee39d0-FRA
alt-svc: h3=":443"; ma=86400
{"timestamp":"2025-12-30T22:04:58.318+08:00","status":404,"error":"Not Found","path":"/"}
Open service 188.114.96.12:80 · api.silkprope.com
2025-12-23 08:06
HTTP/1.1 404 Not Found
Date: Tue, 23 Dec 2025 08:06:05 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=BQq2k3jrS8fBi6s3FyrXUJQaWE3kmuM0ZPcj8KFatlJBoYNygnvMg6GFsPpzH0HW2IBLUkWBndGNG9%2BGl23j3RMK8XLrqZl%2F%2Fw4Mo%2FHqJxds"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9b265b884b3e946f-LHR
alt-svc: h3=":443"; ma=86400
{"timestamp":"2025-12-23T16:06:04.984+08:00","status":404,"error":"Not Found","path":"/"}
Open service 188.114.97.12:443 · api.silkprope.com
2025-12-22 15:22
HTTP/1.1 404 Not Found
Date: Mon, 22 Dec 2025 15:22:47 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=wxewfhLja8wwA49CHLPDbUUGLFa73X1KYJAc6%2FC%2FFp02CDpozXlV5m2ur80T%2BHvg6qMSdhLPY2hT0nC2QI2EBJ03M9%2Bzo3oKF1lkRmf6pk%2BU"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9b209ddeccf68072-AMS
alt-svc: h3=":443"; ma=86400
{"timestamp":"2025-12-22T23:22:47.824+08:00","status":404,"error":"Not Found","path":"/"}
Open service 188.114.96.12:80 · api.silkprope.com
2025-12-21 03:23
HTTP/1.1 404 Not Found
Date: Sun, 21 Dec 2025 03:23:41 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=pcja%2FLRa%2BZ8kJ66ych%2Br9978XE1JhNplHesq2bRGYvYHOjq00CTRgwkklsqVANiKPxYk6SN22rmlknBJUHvtu66bNsJGJpNIobPjGp%2Fdj%2FBd"}]}
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=18,cfOrigin;dur=435
CF-RAY: 9b14431ecadf180e-YYZ
alt-svc: h3=":443"; ma=86400
{"timestamp":"2025-12-21T11:23:41.596+08:00","status":404,"error":"Not Found","path":"/"}
Open service 188.114.97.12:443 · api.silkprope.com
2025-12-20 18:47
HTTP/1.1 404 Not Found
Date: Sat, 20 Dec 2025 18:47:53 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ZPqwOCZRhFLQczFwv8OmqBd%2FwQZox5oWhJyFEhUpC0jRkIVdtqefjNZj0B6qZ3lobPVHf1G8OBwt3HgVIlroSNqFcelclSSNv75mPEPWNqvJ"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9b114f8d1be936dc-FRA
alt-svc: h3=":443"; ma=86400
{"timestamp":"2025-12-21T02:47:53.486+08:00","status":404,"error":"Not Found","path":"/"}
Open service 188.114.96.12:80 · api.silkprope.com
2025-12-19 03:06
HTTP/1.1 404 Not Found
Date: Fri, 19 Dec 2025 03:06:54 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1yUNLYoU6sLEMBIcadk8QbFTnHsAD77qur06HszPrld593oJm2oNaR4buTplAsArqeRnb%2Fxt2D2ClL4LbQ9sMxydheyvAq7tsRc1%2Fzy6YZbp"}]}
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=16,cfOrigin;dur=496
CF-RAY: 9b03afc67d665577-YYZ
alt-svc: h3=":443"; ma=86400
{"timestamp":"2025-12-19T11:06:54.244+08:00","status":404,"error":"Not Found","path":"/"}