LeakIX - Host api.wuji404.fun

Domain api.wuji404.fun

United States

AMAZON-02

Software information

Vercel

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 216.198.79.1
Domain: api.wuji404.fun
Port: 443
URL: https://api.wuji404.fun

First seen 2025-10-21 13:41
Last seen 2026-01-09 11:50
Open for 79 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
```
Public Swagger UI/API detected at path: /swagger-ui.html
```
  Found on 2026-01-09 11:50
Create report

Open service 216.198.79.1:443 · api.wuji404.fun

2026-01-09 11:50

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 3752297
Cache-Control: public, max-age=0, must-revalidate
Content-Disposition: inline
Content-Length: 593
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 11:51:00 GMT
Etag: "1b5fe96675ce45319511fcc87a82cf5f"
Last-Modified: Thu, 27 Nov 2025 01:32:43 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Vercel-Cache: HIT
X-Vercel-Id: fra1::g4rk6-1767959460867-061b546659af
Connection: close

Page title: Hello Todo API

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link
      rel="stylesheet"
      href="//unpkg.com/swagger-ui-dist@3/swagger-ui.css"
    />
    <script src="//unpkg.com/swagger-ui-dist@3/swagger-ui-bundle.js"></script>
    <meta
      name="viewport"
      content="width=device-width, initial-scale=1, shrink-to-fit=no"
    />
    <title>Hello Todo API</title>
  </head>
  <body>
    <div id="swagger-ui"></div>
    <script>
      const ui = SwaggerUIBundle({
        url: "./openapi.yml",
        dom_id: "#swagger-ui",
      });
    </script>
  </body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 216.198.79.1:443 · api.wuji404.fun

2026-01-02 16:08

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 0
Cache-Control: public, max-age=0, must-revalidate
Content-Disposition: inline
Content-Length: 593
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 16:08:09 GMT
Etag: "1b5fe96675ce45319511fcc87a82cf5f"
Last-Modified: Fri, 02 Jan 2026 16:08:09 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Vercel-Cache: HIT
X-Vercel-Id: sfo1::svbxs-1767370089638-cdec761c99b4
Connection: close

Page title: Hello Todo API

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link
      rel="stylesheet"
      href="//unpkg.com/swagger-ui-dist@3/swagger-ui.css"
    />
    <script src="//unpkg.com/swagger-ui-dist@3/swagger-ui-bundle.js"></script>
    <meta
      name="viewport"
      content="width=device-width, initial-scale=1, shrink-to-fit=no"
    />
    <title>Hello Todo API</title>
  </head>
  <body>
    <div id="swagger-ui"></div>
    <script>
      const ui = SwaggerUIBundle({
        url: "./openapi.yml",
        dom_id: "#swagger-ui",
      });
    </script>
  </body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 216.198.79.1:443 · api.wuji404.fun

2025-12-23 04:46

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 2258049
Cache-Control: public, max-age=0, must-revalidate
Content-Disposition: inline
Content-Length: 593
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 04:46:53 GMT
Etag: "1b5fe96675ce45319511fcc87a82cf5f"
Last-Modified: Thu, 27 Nov 2025 01:32:43 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Vercel-Cache: HIT
X-Vercel-Id: fra1::5v7z2-1766465213569-5b351b0d7864
Connection: close

Page title: Hello Todo API

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link
      rel="stylesheet"
      href="//unpkg.com/swagger-ui-dist@3/swagger-ui.css"
    />
    <script src="//unpkg.com/swagger-ui-dist@3/swagger-ui-bundle.js"></script>
    <meta
      name="viewport"
      content="width=device-width, initial-scale=1, shrink-to-fit=no"
    />
    <title>Hello Todo API</title>
  </head>
  <body>
    <div id="swagger-ui"></div>
    <script>
      const ui = SwaggerUIBundle({
        url: "./openapi.yml",
        dom_id: "#swagger-ui",
      });
    </script>
  </body>
</html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 64.29.17.1:80 · api.wuji404.fun

2025-12-22 10:22

HTTP/1.0 308 Permanent Redirect
Content-Type: text/plain
Location: https://api.wuji404.fun/
Refresh: 0;url=https://api.wuji404.fun/
server: Vercel


Redirecting...

Found 2025-12-22 by HttpPlugin

Create report

Open service 216.198.79.1:80 · api.wuji404.fun

2025-12-22 10:22

HTTP/1.0 308 Permanent Redirect
Content-Type: text/plain
Location: https://api.wuji404.fun/
Refresh: 0;url=https://api.wuji404.fun/
server: Vercel


Redirecting...

Found 2025-12-22 by HttpPlugin

Create report

Open service 216.198.79.1:443 · api.wuji404.fun

2025-12-22 10:22

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 1890606
Cache-Control: public, max-age=0, must-revalidate
Content-Disposition: inline
Content-Length: 593
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 10:22:35 GMT
Etag: "1b5fe96675ce45319511fcc87a82cf5f"
Last-Modified: Sun, 30 Nov 2025 13:12:28 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Vercel-Cache: HIT
X-Vercel-Id: iad1::2s2pg-1766398955461-8ffe0019f8fc
Connection: close

Page title: Hello Todo API

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link
      rel="stylesheet"
      href="//unpkg.com/swagger-ui-dist@3/swagger-ui.css"
    />
    <script src="//unpkg.com/swagger-ui-dist@3/swagger-ui-bundle.js"></script>
    <meta
      name="viewport"
      content="width=device-width, initial-scale=1, shrink-to-fit=no"
    />
    <title>Hello Todo API</title>
  </head>
  <body>
    <div id="swagger-ui"></div>
    <script>
      const ui = SwaggerUIBundle({
        url: "./openapi.yml",
        dom_id: "#swagger-ui",
      });
    </script>
  </body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 64.29.17.1:443 · api.wuji404.fun

2025-12-22 10:22

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 1890606
Cache-Control: public, max-age=0, must-revalidate
Content-Disposition: inline
Content-Length: 593
Content-Type: text/html; charset=utf-8
Date: Mon, 22 Dec 2025 10:22:35 GMT
Etag: "1b5fe96675ce45319511fcc87a82cf5f"
Last-Modified: Sun, 30 Nov 2025 13:12:28 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Vercel-Cache: HIT
X-Vercel-Id: iad1::rvbh7-1766398955614-1e08aa15c313
Connection: close

Page title: Hello Todo API

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link
      rel="stylesheet"
      href="//unpkg.com/swagger-ui-dist@3/swagger-ui.css"
    />
    <script src="//unpkg.com/swagger-ui-dist@3/swagger-ui-bundle.js"></script>
    <meta
      name="viewport"
      content="width=device-width, initial-scale=1, shrink-to-fit=no"
    />
    <title>Hello Todo API</title>
  </head>
  <body>
    <div id="swagger-ui"></div>
    <script>
      const ui = SwaggerUIBundle({
        url: "./openapi.yml",
        dom_id: "#swagger-ui",
      });
    </script>
  </body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 216.198.79.1:443 · api.wuji404.fun

2025-12-21 09:57

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 1802726
Cache-Control: public, max-age=0, must-revalidate
Content-Disposition: inline
Content-Length: 593
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 09:57:55 GMT
Etag: "1b5fe96675ce45319511fcc87a82cf5f"
Last-Modified: Sun, 30 Nov 2025 13:12:28 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Vercel-Cache: HIT
X-Vercel-Id: iad1::v5mjj-1766311075424-344697fd0296
Connection: close

Page title: Hello Todo API

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link
      rel="stylesheet"
      href="//unpkg.com/swagger-ui-dist@3/swagger-ui.css"
    />
    <script src="//unpkg.com/swagger-ui-dist@3/swagger-ui-bundle.js"></script>
    <meta
      name="viewport"
      content="width=device-width, initial-scale=1, shrink-to-fit=no"
    />
    <title>Hello Todo API</title>
  </head>
  <body>
    <div id="swagger-ui"></div>
    <script>
      const ui = SwaggerUIBundle({
        url: "./openapi.yml",
        dom_id: "#swagger-ui",
      });
    </script>
  </body>
</html>

Found 2025-12-21 by HttpPlugin

Create report

Open service 216.198.79.1:443 · api.wuji404.fun

2025-12-19 00:25

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 1896768
Cache-Control: public, max-age=0, must-revalidate
Content-Disposition: inline
Content-Length: 593
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 00:25:32 GMT
Etag: "1b5fe96675ce45319511fcc87a82cf5f"
Last-Modified: Thu, 27 Nov 2025 01:32:43 GMT
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Vercel-Cache: HIT
X-Vercel-Id: fra1::sxcb4-1766103932508-ca9042216d21
Connection: close

Page title: Hello Todo API

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <link
      rel="stylesheet"
      href="//unpkg.com/swagger-ui-dist@3/swagger-ui.css"
    />
    <script src="//unpkg.com/swagger-ui-dist@3/swagger-ui-bundle.js"></script>
    <meta
      name="viewport"
      content="width=device-width, initial-scale=1, shrink-to-fit=no"
    />
    <title>Hello Todo API</title>
  </head>
  <body>
    <div id="swagger-ui"></div>
    <script>
      const ui = SwaggerUIBundle({
        url: "./openapi.yml",
        dom_id: "#swagger-ui",
      });
    </script>
  </body>
</html>

Found 2025-12-19 by HttpPlugin

Create report

api.wuji404.fun

Fingerprint:

f2f4c6479947a68b20c436182d52783b0da097c6dd8e811819046edb7425ed76

CN:

api.wuji404.fun

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-22 09:22

Not after:

2026-03-22 09:22

api.wuji404.fun

Fingerprint:

72b5abdcf36be9bd775110ea01e7a64c9deda0f46b702f326717552d577f39eb

CN:

api.wuji404.fun

Key:

RSA-2048

Issuer:

R13

Not before:

2025-10-21 12:43

Not after:

2026-01-19 12:43

Domain summary

api.wuji404.fun 9

1 recorded

IP summary

216.198.79.1 2 64.29.17.1 1

2 recorded

Domain api.wuji404.fun

United States

Software information

Swagger API description is publicly available

api.wuji404.fun

api.wuji404.fun

Domain summary

IP summary