Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9
Public Swagger UI/API detected at path: /swagger.json - sample paths: GET /coupons GET /coupons/hascoupon GET /coupons/verify GET /language
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d63a747c263a747c263a747c263a747c2
Found 1 files trough .DS_Store spidering: /application
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9
Public Swagger UI/API detected at path: /swagger.json - sample paths: GET /coupons GET /coupons/hascoupon GET /coupons/verify GET /language
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d63a747c263a747c263a747c263a747c2
Found 1 files trough .DS_Store spidering: /application
Open service 207.120.36.140:443 · www.cindynicolson.com
2025-12-22 06:52
HTTP/1.1 403 Forbidden Date: Mon, 22 Dec 2025 06:52:51 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 7983077 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 16b73d6e503c9e9cba1f374c7910c83e Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:443 · cindynicolson.com
2025-12-22 05:31
HTTP/1.1 403 Forbidden Date: Mon, 22 Dec 2025 05:31:27 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 23553534 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: ecb22213bb3a792ecf62a336cfb9db4d Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.140:443 · www.cindynicolson.com
2025-12-20 07:24
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 07:24:33 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 5080457 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 6a2383865d04bda1f4a1d4a7966db180 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:443 · cindynicolson.com
2025-12-20 05:57
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:57:42 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 47532248 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 77bf777fcbd4d1a44202381c86c8afe3 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.170:80 · www.cindynicolson.com
2025-12-20 05:01
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:01:03 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4573212 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: ab31b507250b179964fdfc32924b0da6 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.136:443 · www.cindynicolson.com
2025-12-20 05:01
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:01:03 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 2512061 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: be4dd5db3d142a1cf358edf5b68fd516 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.134:80 · www.cindynicolson.com
2025-12-20 05:01
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:01:03 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4981502 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: e7b1de13a5e7f1ded97526c8e4ad8261 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.135:80 · www.cindynicolson.com
2025-12-20 05:01
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:01:03 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4573208 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 83a8b64bb0e4ba906b03b9463e7e7564 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.136:80 · www.cindynicolson.com
2025-12-20 05:01
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:01:02 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4853152 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: b5e74a347ae417b2d00941c88cfce3d5 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.134:443 · www.cindynicolson.com
2025-12-20 05:01
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:01:02 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4573200 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 04ea066def8db478f63e09023e101452 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.137:80 · www.cindynicolson.com
2025-12-20 05:01
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:01:02 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4981489 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: caf799ae87a80b65a9a4135a29a40d4c Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.166:443 · www.cindynicolson.com
2025-12-20 05:01
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:01:02 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4792501 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 815a397769accb80d101314d5bf22e0e Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.135:443 · www.cindynicolson.com
2025-12-20 05:01
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:01:02 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4792499 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 5de5fd6d6db862ef75564c97bec23add Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.138:80 · www.cindynicolson.com
2025-12-20 05:01
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:01:02 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4981494 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 69a8fb87c52128b26fae5bd6fa6d360e Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.137:443 · www.cindynicolson.com
2025-12-20 05:01
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:01:02 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4981496 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: fc8ff2c11455f70756fa318633992970 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.138:443 · www.cindynicolson.com
2025-12-20 05:01
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:01:02 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4981485 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: f2df148d7f352ef749c1456211df41ac Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.166:80 · www.cindynicolson.com
2025-12-20 05:01
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:01:02 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4981483 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: e9c92233df0614f887b7d7b7d6eec226 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.173:80 · www.cindynicolson.com
2025-12-20 05:01
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:01:02 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4573192 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: ca422bd3998e513cdf26bf4f8416b07e Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.170:443 · www.cindynicolson.com
2025-12-20 05:01
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:01:02 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4792497 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 74cf9464fa75cdaa18a07cf0748c976e Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 207.120.36.173:443 · www.cindynicolson.com
2025-12-20 05:01
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 05:01:02 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4573198 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 6a848e421cb3a1536d701c0d5b7903c9 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>