cloudflare
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 104.21.47.64:443 ยท betcheck.plus
2026-01-23 04:03
HTTP/1.1 404 Not Found
Date: Fri, 23 Jan 2026 04:03:49 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 888
Connection: close
Server: cloudflare
content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
vary: Origin
etag: W/"378-t8+iw0WF4iMUxhIBEay2xD/GHd8"
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=E%2FO6ChlsbM6fMOYfm97cGrBAI66Z3dV7s%2Fig%2FVYpQy3waBuoTFycRSwctFjEG%2BcsBOyGj74fWcE63ZHFF5jrQRUBC9JcfJwm2a1wJXk%3D"}]}
CF-RAY: 9c24674a590f8c7a-AMS
alt-svc: h3=":443"; ma=86400
{"message":"๐ - Not Found - /","stack":"Error: ๐ - Not Found - /\n at notFound (/usr/src/app/dist/src/middlewares.js:7:19)\n at Layer.handle [as handle_request] (/usr/src/app/node_modules/express/lib/router/layer.js:95:5)\n at trim_prefix (/usr/src/app/node_modules/express/lib/router/index.js:328:13)\n at /usr/src/app/node_modules/express/lib/router/index.js:286:9\n at Function.process_params (/usr/src/app/node_modules/express/lib/router/index.js:346:12)\n at next (/usr/src/app/node_modules/express/lib/router/index.js:280:10)\n at metricsMiddleware (/usr/src/app/dist/src/middlewares/metrics.js:22:5)\n at Layer.handle [as handle_request] (/usr/src/app/node_modules/express/lib/router/layer.js:95:5)\n at trim_prefix (/usr/src/app/node_modules/express/lib/router/index.js:328:13)\n at /usr/src/app/node_modules/express/lib/router/index.js:286:9"}