cloudflare
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b0ae727035b0c07061982087a8223ed3fd81a2150
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /app/capital/udunlistSupportCoin
GET /app/config/configData/{params}
GET /app/config/video/{type}
GET /app/test/getCryptoDetails
GET /app/test/getMarketDetails
POST /app/article/getArticleById
POST /app/article/helpCenter
POST /app/article/helpList
POST /app/article/list
POST /app/capital/capitalLogList
POST /app/capital/change
POST /app/capital/changeAddress
POST /app/capital/depositRecharge
POST /app/capital/getAddress
POST /app/capital/getCollectionAccount
POST /app/capital/getCryptoAssetsLogs
POST /app/capital/getDepositRatio
POST /app/capital/getLinkNet
POST /app/capital/getLinkWithdrawNet
POST /app/capital/getRechargeLogs
POST /app/capital/getUsdtType
POST /app/capital/getUsdtWithdrawType
POST /app/capital/getWithdrawLogs
POST /app/capital/recharge
POST /app/capital/uduncheckAddress
POST /app/capital/uduncreate
POST /app/capital/withdraw
POST /app/chatRecord/getList
POST /app/coin/change
POST /app/coin/changeList
POST /app/coin/getCoinInfo
POST /app/coin/marketList
POST /app/config/advertise
POST /app/config/getContractMultiple
POST /app/config/getKefuUrl
POST /app/config/homeBanner
POST /app/config/info
POST /app/lang/list
POST /app/loan/add
POST /app/loan/getNewCoinLoan
POST /app/loan/getSetting
POST /app/loan/lastLnfo
POST /app/loan/logList
POST /app/loan/repay
POST /app/loan/repayPledge
POST /app/market/aiMarketList
POST /app/market/getTbCurrencySetting
POST /app/market/homeRecomment
POST /app/market/marketCatergory
POST /app/market/marketDetail
POST /app/market/marketIndicators
POST /app/market/marketList
POST /app/market/marketList2
POST /app/market/marketStatics
POST /app/market/marketTrades
POST /app/market/newCoinList
POST /app/market/newCoinLogList
POST /app/market/newCoinMarketDetail
POST /app/market/searchMarketList
POST /app/notice/List
POST /app/notice/clear
POST /app/notice/getNoReadNum
POST /app/notice/setAllReaded
POST /app/notice/setReaded
POST /app/order/add
POST /app/order/buySell
POST /app/order/cancel
POST /app/order/checkRecharge
POST /app/order/comfirm
POST /app/order/contract/allChange
POST /app/order/contract/back
POST /app/order/contract/buy
POST /app/order/contract/buyNewCoin
POST /app/order/contract/editProfitLoss
POST /app/order/contract/getContractBuyLogs
POST /app/order/contract/getFee
POST /app/order/contract/getOrderDetailById
POST /app/order/contract/getWithdrawLogs
POST /app/order/contract/sell
POST /app/order/contract/statistic
POST /app/order/getCtcLogs
POST /app/order/getFee
POST /app/order/getOrderDetail
POST /app/order/getShops
POST /app/order/lotteryTags
POST /app/order/orderList
POST /app/order/quickRecharge
POST /app/order/spot/back
POST /app/order/spot/buy
POST /app/order/spot/getCoinBalance
POST /app/order/spot/getCryptoAssetsLogs
POST /app/order/spot/getOrderDetailById
POST /app/order/spot/getOrderSpotHave
POST /app/order/spot/getOrderSpotLogs
POST /app/order/spot/sell
POST /app/strategy/add
POST /app/strategy/cancel
POST /app/strategy/getSetting
POST /app/strategy/logList
POST /app/strategy/statistic
POST /app/test/addNewStock
POST /app/test/addTradeMarket
POST /app/test/getMarketDistancePrice
POST /app/test/getMarketStatistics
POST /app/test/getMinuteStatistcs
POST /app/test/getNewPrice
POST /app/test/getUsStockList
POST /app/test/pushOrder
POST /app/test/saveWallet
POST /app/test/setCoinData
POST /app/test/setSEMKline
POST /app/test/setSeriesId
POST /app/test/setSingle
POST /app/test/setTonData
POST /app/test/setUStockKline
POST /app/upload/image
POST /app/user/captchaImage
POST /app/user/closeGoogle
POST /app/user/deleteMember
POST /app/user/editAvatar
POST /app/user/editEmail
POST /app/user/editIdentity
POST /app/user/editMobile
POST /app/user/forgetPwd
POST /app/user/getEmailCode
POST /app/user/getFixedWalletInfo
POST /app/user/getIntervalWalletInfo
POST /app/user/getInvitationUrl
POST /app/user/getSMSCode
POST /app/user/login
POST /app/user/loginAccount
POST /app/user/loginDemo
POST /app/user/loginUser
POST /app/user/logout
POST /app/user/myInvitationIncome
POST /app/user/myInvitationIncomeList
POST /app/user/openCheck
POST /app/user/register
POST /app/user/setAgentCode
POST /app/user/setOrderPassword
POST /app/user/userAvatars
POST /app/user/userDetail
POST /app/user/userInfo
POST /app/user/validEmailPassword
POST /app/user/validOrderPassword
POST /app/user/validateGoogle
POST /app/wallet/firstChange
POST /app/wallet/newChange
POST /app/wallet/sendChange
POST /app/wallet/userBalance
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b0ae727035b0c07061982087a8223ed3fd81a2150
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /app/capital/udunlistSupportCoin
GET /app/config/configData/{params}
GET /app/config/video/{type}
GET /app/test/getCryptoDetails
GET /app/test/getMarketDetails
POST /app/article/getArticleById
POST /app/article/helpCenter
POST /app/article/helpList
POST /app/article/list
POST /app/capital/capitalLogList
POST /app/capital/change
POST /app/capital/changeAddress
POST /app/capital/depositRecharge
POST /app/capital/getAddress
POST /app/capital/getCollectionAccount
POST /app/capital/getCryptoAssetsLogs
POST /app/capital/getDepositRatio
POST /app/capital/getLinkNet
POST /app/capital/getLinkWithdrawNet
POST /app/capital/getRechargeLogs
POST /app/capital/getUsdtType
POST /app/capital/getUsdtWithdrawType
POST /app/capital/getWithdrawLogs
POST /app/capital/recharge
POST /app/capital/uduncheckAddress
POST /app/capital/uduncreate
POST /app/capital/withdraw
POST /app/chatRecord/getList
POST /app/coin/change
POST /app/coin/changeList
POST /app/coin/getCoinInfo
POST /app/coin/marketList
POST /app/config/advertise
POST /app/config/getContractMultiple
POST /app/config/getKefuUrl
POST /app/config/homeBanner
POST /app/config/info
POST /app/lang/list
POST /app/loan/add
POST /app/loan/getNewCoinLoan
POST /app/loan/getSetting
POST /app/loan/lastLnfo
POST /app/loan/logList
POST /app/loan/repay
POST /app/loan/repayPledge
POST /app/market/aiMarketList
POST /app/market/getTbCurrencySetting
POST /app/market/homeRecomment
POST /app/market/marketCatergory
POST /app/market/marketDetail
POST /app/market/marketIndicators
POST /app/market/marketList
POST /app/market/marketList2
POST /app/market/marketStatics
POST /app/market/marketTrades
POST /app/market/newCoinList
POST /app/market/newCoinLogList
POST /app/market/newCoinMarketDetail
POST /app/market/searchMarketList
POST /app/notice/List
POST /app/notice/clear
POST /app/notice/getNoReadNum
POST /app/notice/setAllReaded
POST /app/notice/setReaded
POST /app/order/add
POST /app/order/buySell
POST /app/order/cancel
POST /app/order/checkRecharge
POST /app/order/comfirm
POST /app/order/contract/allChange
POST /app/order/contract/back
POST /app/order/contract/buy
POST /app/order/contract/buyNewCoin
POST /app/order/contract/editProfitLoss
POST /app/order/contract/getContractBuyLogs
POST /app/order/contract/getFee
POST /app/order/contract/getOrderDetailById
POST /app/order/contract/getWithdrawLogs
POST /app/order/contract/sell
POST /app/order/contract/statistic
POST /app/order/getCtcLogs
POST /app/order/getFee
POST /app/order/getOrderDetail
POST /app/order/getShops
POST /app/order/lotteryTags
POST /app/order/orderList
POST /app/order/quickRecharge
POST /app/order/spot/back
POST /app/order/spot/buy
POST /app/order/spot/getCoinBalance
POST /app/order/spot/getCryptoAssetsLogs
POST /app/order/spot/getOrderDetailById
POST /app/order/spot/getOrderSpotHave
POST /app/order/spot/getOrderSpotLogs
POST /app/order/spot/sell
POST /app/strategy/add
POST /app/strategy/cancel
POST /app/strategy/getSetting
POST /app/strategy/logList
POST /app/strategy/statistic
POST /app/test/addNewStock
POST /app/test/addTradeMarket
POST /app/test/getMarketDistancePrice
POST /app/test/getMarketStatistics
POST /app/test/getMinuteStatistcs
POST /app/test/getNewPrice
POST /app/test/getUsStockList
POST /app/test/pushOrder
POST /app/test/saveWallet
POST /app/test/setCoinData
POST /app/test/setSEMKline
POST /app/test/setSeriesId
POST /app/test/setSingle
POST /app/test/setTonData
POST /app/test/setUStockKline
POST /app/upload/image
POST /app/user/captchaImage
POST /app/user/closeGoogle
POST /app/user/deleteMember
POST /app/user/editAvatar
POST /app/user/editEmail
POST /app/user/editIdentity
POST /app/user/editMobile
POST /app/user/forgetPwd
POST /app/user/getEmailCode
POST /app/user/getFixedWalletInfo
POST /app/user/getIntervalWalletInfo
POST /app/user/getInvitationUrl
POST /app/user/getSMSCode
POST /app/user/login
POST /app/user/loginAccount
POST /app/user/loginDemo
POST /app/user/loginUser
POST /app/user/logout
POST /app/user/myInvitationIncome
POST /app/user/myInvitationIncomeList
POST /app/user/openCheck
POST /app/user/register
POST /app/user/setAgentCode
POST /app/user/setOrderPassword
POST /app/user/userAvatars
POST /app/user/userDetail
POST /app/user/userInfo
POST /app/user/validEmailPassword
POST /app/user/validOrderPassword
POST /app/user/validateGoogle
POST /app/wallet/firstChange
POST /app/wallet/newChange
POST /app/wallet/sendChange
POST /app/wallet/userBalance
Open service 188.114.97.12:443 · api.silkproper.com
2026-01-09 06:38
HTTP/1.1 404 Not Found
Date: Fri, 09 Jan 2026 06:38:15 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=tDKXKuEAaAJA4F4iXrabbtxy20UKGrAd8n3w4QLrD3%2BqucyRiEcNSIi2iMhcbjZHzFDhnmSAtLnPZwZvl1LCK2B%2BhtC4HdakMBYD6qvwxO%2FTnQ%3D%3D"}]}
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=16,cfOrigin;dur=461
CF-RAY: 9bb1ee4119148ce9-EWR
alt-svc: h3=":443"; ma=86400
{"timestamp":"2026-01-09T14:38:15.585+08:00","status":404,"error":"Not Found","path":"/"}
Open service 188.114.96.12:80 · api.silkproper.com
2026-01-09 04:23
HTTP/1.1 404 Not Found
Date: Fri, 09 Jan 2026 04:23:12 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ngre%2BlYg3Ifk12GibQDL6d3i4kofgStaMT3Ryb70P7XYHVNG%2FnubuzSkLL6QkQw4NdzLETjsFDlxGKTnMRVicvml7yInzQjzzfbMHU3UHvjF%2BQ%3D%3D"}]}
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=21,cfOrigin;dur=430
CF-RAY: 9bb1286ddda839f6-YYZ
alt-svc: h3=":443"; ma=86400
{"timestamp":"2026-01-09T12:23:12.644+08:00","status":404,"error":"Not Found","path":"/"}
Open service 188.114.97.12:443 · api.silkproper.com
2026-01-02 07:25
HTTP/1.1 404 Not Found
Date: Fri, 02 Jan 2026 07:25:47 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VLu86oNr9bRkDTXaNxMPBwb6j51sJHsQLhz1WY5E8i2mxB0U1qXnUCi5FprQeJIYCUsw9nqAhLDNUkD2UVKmaAkCThABi3SJ3lmNWkxSy23DiQ%3D%3D"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9b78863fdc9223d4-FRA
alt-svc: h3=":443"; ma=86400
{"timestamp":"2026-01-02T15:25:46.962+08:00","status":404,"error":"Not Found","path":"/"}
Open service 188.114.96.12:80 · api.silkproper.com
2026-01-02 05:07
HTTP/1.1 404 Not Found
Date: Fri, 02 Jan 2026 05:07:14 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=6tQHV4%2BxAN0hdbJlkSCTPoIhR8TsqRwlgCia2PsD%2FiGzB9onWYP9sAow2CZauhVxN6Sa%2BUOoIeKSMXTJoO4jOw5XMhQwLtcvus2DyyoONQPxgg%3D%3D"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9b77bb4ebbad9f34-FRA
alt-svc: h3=":443"; ma=86400
{"timestamp":"2026-01-02T13:07:14.705+08:00","status":404,"error":"Not Found","path":"/"}
Open service 188.114.97.12:443 · api.silkproper.com
2025-12-23 04:08
HTTP/1.1 404 Not Found
Date: Tue, 23 Dec 2025 04:08:11 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=P0aMfBSjtN%2F0Utk9U3qMAjVkNE%2Fx%2BCbHdGBMM3%2FURxlmZvxh9Frvq2bHnQ33hO1rhOdElGcvImBhCtIbiPDrCkldnwkns0De3umAGA%2F8TOo%3D"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9b24ff0ace9f9a3f-FRA
alt-svc: h3=":443"; ma=86400
{"timestamp":"2025-12-23T12:08:11.029+08:00","status":404,"error":"Not Found","path":"/"}
Open service 188.114.96.12:80 · api.silkproper.com
2025-12-22 13:51
HTTP/1.1 404 Not Found
Date: Mon, 22 Dec 2025 13:51:20 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=WTZnUh8Au7FYxh%2F5Wk9ApSA2CVg481OG69CWkCLLRqr%2BQsNpAtLtzn%2FBljMUt3JuNAyM4aK4hroCxy2LqjYkWJ57WmCY%2F2%2BL3zyaUA%2Fw5kPvoA%3D%3D"}]}
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=11,cfOrigin;dur=261
CF-RAY: 9b2017e78c8aa67e-EWR
alt-svc: h3=":443"; ma=86400
{"timestamp":"2025-12-22T21:51:20.411+08:00","status":404,"error":"Not Found","path":"/"}
Open service 188.114.97.12:443 · api.silkproper.com
2025-12-21 01:17
HTTP/1.1 404 Not Found
Date: Sun, 21 Dec 2025 01:17:25 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CRIfHL7tEm1YhzI9Lf7NRb%2FVNhjGMINHohkkGg8uCGemgWzpNjz1CWNQ7dEzwX5E0NNhjOZF2vCxHhsGkjI5xMur6f7uqihBAtMOSWX60ujRFQ%3D%3D"}]}
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=10,cfOrigin;dur=225
CF-RAY: 9b138a298fb33fea-BOM
alt-svc: h3=":443"; ma=86400
{"timestamp":"2025-12-21T09:17:25.571+08:00","status":404,"error":"Not Found","path":"/"}
Open service 188.114.96.12:80 · api.silkproper.com
2025-12-20 13:12
HTTP/1.1 404 Not Found
Date: Sat, 20 Dec 2025 13:12:58 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=aEz%2B1lBn%2FjzCq5InaB3cdj9yxmImqFj4RQRr3n1vv%2FEXIOvQZBfWFlYU8J1ww8s7kVCG3J3Dm7HY6jhkdgGGUGmLCk%2FSspPtmbKmL4Z0%2Bv4dnA%3D%3D"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9b0f64f11dd9dc9d-FRA
alt-svc: h3=":443"; ma=86400
{"timestamp":"2025-12-20T21:12:58.105+08:00","status":404,"error":"Not Found","path":"/"}