railway-edge
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Open service 66.33.22.145:443 · api.trackittoo.com
2026-01-22 21:41
HTTP/1.1 404 Not Found
Content-Length: 101
Content-Type: application/json
Server: railway-edge
X-Railway-Edge: railway/europe-west4-drams3a
X-Railway-Fallback: true
X-Railway-Request-Id: vPtUBaHYS9qZUr30jUJq2g
Date: Thu, 22 Jan 2026 21:41:32 GMT
Connection: close
{"status":"error","code":404,"message":"Application not found","request_id":"vPtUBaHYS9qZUr30jUJq2g"}
Open service 66.33.22.145:443 · api.trackittoo.com
2026-01-12 15:54
HTTP/1.1 404 Not Found Content-Length: 18 Content-Type: text/plain Date: Mon, 12 Jan 2026 15:54:25 GMT Server: railway-edge X-Railway-Edge: railway/europe-west4-drams3a X-Railway-Request-Id: C4mvos6vRxWsoC4MrJsmnA Connection: close 404 page not found
Open service 66.33.22.145:80 · api.trackittoo.com
2026-01-12 15:54
HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Location: https://api.trackittoo.com/ Server: railway-edge X-Railway-Edge: railway/europe-west4-drams3a X-Railway-Request-Id: -e9qjmhVT82060C5ss7a6g Date: Mon, 12 Jan 2026 15:54:32 GMT Content-Length: 62 Connection: close <a href="https://api.trackittoo.com/">Moved Permanently</a>.