cloudflare
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb49c269f7d16e83fd1fe23675fb279c99e38111f7f
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /approval/request-status/{correlationId}
GET /cfreflist/request-status/{correlationId}
GET /costcenter/request-status/{correlationId}
GET /location/request-status/{correlationId}
GET /manager/request-status/{correlationId}
GET /onboarding/inbound/request-status/{correlationId}
GET /po/request-status/{correlationId}
GET /prpo/outbound/request-status/{correlationId}
GET /request/outbound/request-status/{correlationId}
GET /worker/inbound/request-status/{correlationId}
GET /worker/outbound/request-status/{correlationId}
GET /workereeo/outbound/request-status/{correlationId}
POST /approval/request
POST /approval/request-status
POST /approval/request/{feed_identifier}
POST /approval/testpost
POST /cfreflist/request
POST /cfreflist/request-status
POST /cfreflist/request/{feed_identifier}
POST /cfreflist/testpost
POST /costcenter/request
POST /costcenter/request-status
POST /costcenter/testpost
POST /location/request
POST /location/request-status
POST /location/testpost
POST /manager/request
POST /manager/request-status
POST /manager/testpost
POST /onboarding/inbound/request
POST /onboarding/inbound/request-status
POST /onboarding/inbound/request/{feed_identifier}
POST /onboarding/inbound/testpost
POST /po/request
POST /po/request-status
POST /po/request/{feed_identifier}
POST /po/testpost
POST /prpo/outbound/attachment
POST /prpo/outbound/attachment/{feed_identifier}
POST /prpo/outbound/request
POST /prpo/outbound/request-status
POST /prpo/outbound/request/{feed_identifier}
POST /prpo/outbound/testpost
POST /request/outbound/request
POST /request/outbound/request-status
POST /request/outbound/request/{feed_identifier}
POST /request/outbound/testpost
POST /worker/inbound/request
POST /worker/inbound/request-status
POST /worker/inbound/request/{feed_identifier}
POST /worker/inbound/testpost
POST /worker/outbound/attachment
POST /worker/outbound/attachment/{feed_identifier}
POST /worker/outbound/request
POST /worker/outbound/request-status
POST /worker/outbound/request/{feed_identifier}
POST /worker/outbound/testpost
POST /workereeo/outbound/attachment/{decrypt}
POST /workereeo/outbound/attachment/{feed_identifier}/{decrypt}
POST /workereeo/outbound/request
POST /workereeo/outbound/request-status
POST /workereeo/outbound/request/{feed_identifier}
POST /workereeo/outbound/testpost
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb49c269f7d16e83fd1fe23675fb279c99efb2d73ed
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /approval/request-status/{correlationId}
GET /cfreflist/request-status/{correlationId}
GET /costcenter/request-status/{correlationId}
GET /location/request-status/{correlationId}
GET /manager/request-status/{correlationId}
GET /onboarding/inbound/request-status/{correlationId}
GET /po/request-status/{correlationId}
GET /prpo/outbound/request-status/{correlationId}
GET /request/outbound/request-status/{correlationId}
GET /worker/inbound/request-status/{correlationId}
GET /worker/outbound/request-status/{correlationId}
GET /workereeo/outbound/request-status/{correlationId}
POST /approval/request
POST /approval/request-status
POST /approval/request/{feed_identifier}
POST /cfreflist/request
POST /cfreflist/request-status
POST /cfreflist/request/{feed_identifier}
POST /costcenter/request
POST /costcenter/request-status
POST /location/request
POST /location/request-status
POST /manager/request
POST /manager/request-status
POST /onboarding/inbound/request
POST /onboarding/inbound/request-status
POST /onboarding/inbound/request/{feed_identifier}
POST /po/request
POST /po/request-status
POST /po/request/{feed_identifier}
POST /prpo/outbound/attachment
POST /prpo/outbound/attachment/{feed_identifier}
POST /prpo/outbound/request
POST /prpo/outbound/request-status
POST /prpo/outbound/request/{feed_identifier}
POST /request/outbound/request
POST /request/outbound/request-status
POST /request/outbound/request/{feed_identifier}
POST /worker/inbound/request
POST /worker/inbound/request-status
POST /worker/inbound/request/{feed_identifier}
POST /worker/outbound/attachment
POST /worker/outbound/attachment/{feed_identifier}
POST /worker/outbound/request
POST /worker/outbound/request-status
POST /worker/outbound/request/{feed_identifier}
POST /workereeo/outbound/attachment/{decrypt}
POST /workereeo/outbound/attachment/{feed_identifier}/{decrypt}
POST /workereeo/outbound/request
POST /workereeo/outbound/request-status
POST /workereeo/outbound/request/{feed_identifier}
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb49c269f7d16e83fd1fe23675fb279c99e9cf61e99
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /approval/request-status/{correlationId}
GET /cfreflist/request-status/{correlationId}
GET /costcenter/request-status/{correlationId}
GET /location/request-status/{correlationId}
GET /manager/request-status/{correlationId}
GET /onboarding/inbound/request-status/{correlationId}
GET /po/request-status/{correlationId}
GET /request/outbound/request-status/{correlationId}
GET /worker/inbound/request-status/{correlationId}
GET /worker/outbound/request-status/{correlationId}
GET /workereeo/outbound/request-status/{correlationId}
POST /approval/request
POST /approval/request-status
POST /approval/request/{feed_identifier}
POST /cfreflist/request
POST /cfreflist/request-status
POST /cfreflist/request/{feed_identifier}
POST /costcenter/request
POST /costcenter/request-status
POST /location/request
POST /location/request-status
POST /manager/request
POST /manager/request-status
POST /onboarding/inbound/request
POST /onboarding/inbound/request-status
POST /onboarding/inbound/request/{feed_identifier}
POST /po/request
POST /po/request-status
POST /po/request/{feed_identifier}
POST /request/outbound/request
POST /request/outbound/request-status
POST /request/outbound/request/{feed_identifier}
POST /worker/inbound/request
POST /worker/inbound/request-status
POST /worker/inbound/request/{feed_identifier}
POST /worker/outbound/attachment
POST /worker/outbound/attachment/{feed_identifier}
POST /worker/outbound/request
POST /worker/outbound/request-status
POST /worker/outbound/request/{feed_identifier}
POST /workereeo/outbound/attachment/{decrypt}
POST /workereeo/outbound/attachment/{feed_identifier}/{decrypt}
POST /workereeo/outbound/request
POST /workereeo/outbound/request-status
POST /workereeo/outbound/request/{feed_identifier}
Open service 104.18.8.53:443 ยท csol3-integration.prounlimited.com
2026-01-22 23:06
HTTP/1.1 200 200
Date: Thu, 22 Jan 2026 23:06:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
CF-RAY: 9c22b37bacd24db9-FRA
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
ETag: W/"4652-1756793082000-gzip"
Last-Modified: Tue, 02 Sep 2025 06:04:42 GMT
Vary: Accept-Encoding
cf-cache-status: DYNAMIC
Server: cloudflare
Page title: Magnit IO
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/>
<meta http-equiv="Pragma" content="no-cache"/>
<meta http-equiv="Expires" content="0"/>
<link href="./css/login.css" type="text/css" rel="stylesheet" />
<title>Magnit IO</title>
<style>
body {
margin: 0px;
background-color: #f2f2f2 !important;
font-family: open-sans, sans-serif;
}
p {
margin: 0px;
}
div {
background-repeat: no-repeat;
}
.gold-button {
font-family: Arial, Helvetica, sans-serif;
font-size: 12px;
font-weight: bold;
text-align: center;
text-decoration:none;
text-wrap:none;
display: inline-block;
width:auto;
/*max-width: 120px;
/*max-width: none;*/
border-bottom-color: #d68700;
border-left-color: #dfa400;
border-top-color: #e6bc00;
border-right-color: #dfa400;
border-width:1px;
border-style:solid;
padding-left: 6px;
padding-right: 6px;
/*padding-top: 1px;
padding-bottom: 1px;*/
color: #874f00;
background-color: #f9bd00;
background-image: url(/images/btn_gold_bg_off.gif);
background-repeat: repeat-x;
background-position: center;
height: auto;
line-height:19px;
}
.gold-button:hover {
background-image: url(/images/btn_gold_bg_on.gif);
background-color: #f7a200;
}
a:link {
color: #0099cc;
text-decoration: none;
}
a:visited {
text-decoration: none;
color: #0099cc;
}
a:hover {
text-decoration: underline;
}
a:active {
text-decoration: none;
color: #0099cc;
}
.readonly-highlight{
background-color: #A9A9A9;
opacity: 0.2;
position: absolute;
}
</style>
<script type="text/javascript" src="./js/lib/jquery-2.1.1.min.js"></script>
<script type="text/javascript" src="./js/lib/jquery-ui.min.js"></script>
<script type="text/javascript" src="./js/lib/jquery.simplemodal.1.4.4.min.js"></script>
<script type="text/javascript" src="./js/lib/jquery.handsontable.full.js"></script>
<script type="text/javascript" src="./js/lib/jquery.validate.js"></script>
<script type="text/javascript" src="./js/lib/jquery.fileupload.js"></script>
<script type="text/javascript" src="./js/lib/jquery.iframe-transport.js"></script>
<script src="js/lib/ace.js" type="text/javascript" charset="utf-8"></script>
<script src="js/lib/ext-language_tools.js" type="text/javascript" charset="utf-8"></script>
<!-- shim is needed to support upload progress/abort for HTML5 and non-HTML5 FormData browsers.-->
<!-- Note: shim.js MUST BE PLACED BEFORE angular.js and angular-file-upload.js AFTER angular.js-->
<script src="./js/lib/angular-file-upload-shim.min.js"></script>
<script src="./js/lib/angular.min.js"></script>
<script src="./js/lib/angular-file-upload.min.js"></script>
<script src="./js/lib/angular-ui-router.min.js"></script>
<script src="./js/lib/angular-animate.min.js"></script>
<script src="./js/lib/checklist-model.js"></script>
<script src="./js/lib/ui-ace.js"></script>
<script src="./js/lib/sortable.js"></script>
<script src="./js/lib/ui-bootstrap-tpls-0.12.0.min.js"></script>
<script src="./js/lib/ngDialog.js"></script>
<script src="./js/lib/mentio.js"></script>
<link href="./css/typeahead.css" type="text/css" rel="stylesheet" />
<link href="./css/lib/ngDialog.css" type="text/css" rel="stylesheet" />
<link href="./css/lib/ngDialog-theme-default.css" type="text/css" rel="stylesheet" />
<link href="./css/lib/ngDialog-theme-alert.css" type="text/css" rel="stylesheet" />
<!-- multiselect component -->
<link rel="stylesheet" type="text/css" href="./css/lib/bootstrap/bootstrap.min.css" />
<script src="./js/util/UtilService.js"></script>
<script src="./js/util/Utils.js"></script>
<script src="./js/app.js"></script>
<script src="./js/controller/FeedListController.js"></script>
<script src="./js/controller/FeedConfigController.js"></script>
<script src="./js/controller/Lo