Domain customerapi.camzybite.com
United States
Software information
Vercel
tcp/443 tcp/80
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-10-24 06:16
Last seen 2026-01-09 06:45
Open for 77 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43a29bf8d51c3d22eebe5a832f127c332a85e394cdPublic Swagger UI/API detected at path: /swagger.json - sample paths: GET /auth/me GET /dropdown/branches GET /dropdown/gym-slots/{gymId} GET /dropdown/gyms/{branchId} GET /gyms/gym-calendar GET /gyms/{planId}/gym-calendar-for-plan-purchase GET /plans GET /plans/categories GET /plans/ongoing GET /plans/{customerPlanId}/payment-requests POST /auth/google-auth POST /auth/register POST /enquiries/submit POST /plan-purchase/payment-request POST /plan-purchase/purchase POST /plan-purchase/validate-purchase-datesFound on 2026-01-09 06:45
-
-
Open service 64.29.17.65:443 · customerapi.camzybite.com
2026-01-09 06:45
HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Set-Cookie Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 139 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Fri, 09 Jan 2026 06:45:23 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: Origin X-Content-Type-Options: nosniff X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: lhr1::iad1::ww842-1767941123499-9639c5870773 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2026-01-09 by HttpPluginCreate report
-
Open service 64.29.17.65:443 · customerapi.camzybite.com
2026-01-02 02:33
HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Set-Cookie Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 139 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Fri, 02 Jan 2026 02:33:19 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: Origin X-Content-Type-Options: nosniff X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: sfo1::iad1::hjtqm-1767321198520-48d3dbaea738 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2026-01-02 by HttpPluginCreate report
-
Open service 64.29.17.65:80 · customerapi.camzybite.com
2025-12-29 13:08
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://customerapi.camzybite.com/ Refresh: 0;url=https://customerapi.camzybite.com/ server: Vercel Redirecting...
Found 2025-12-29 by HttpPluginCreate report
-
Open service 216.198.79.65:443 · customerapi.camzybite.com
2025-12-29 13:08
HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Set-Cookie Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 139 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Mon, 29 Dec 2025 13:08:52 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: Origin X-Content-Type-Options: nosniff X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: fra1::iad1::b4nj6-1767013732792-bfc0cfedee95 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2025-12-29 by HttpPluginCreate report
-
Open service 64.29.17.65:443 · customerapi.camzybite.com
2025-12-29 13:08
HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Set-Cookie Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 139 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Mon, 29 Dec 2025 13:08:53 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: Origin X-Content-Type-Options: nosniff X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: fra1::iad1::ltn2q-1767013732776-4140ead8fd63 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2025-12-29 by HttpPluginCreate report
-
Open service 216.198.79.65:80 · customerapi.camzybite.com
2025-12-29 13:08
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://customerapi.camzybite.com/ Refresh: 0;url=https://customerapi.camzybite.com/ server: Vercel Redirecting...
Found 2025-12-29 by HttpPluginCreate report
-
Open service 64.29.17.65:443 · customerapi.camzybite.com
2025-12-26 16:27
HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Set-Cookie Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 139 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Fri, 26 Dec 2025 16:27:13 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: Origin X-Content-Type-Options: nosniff X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::fm8jl-1766766432015-053c63762ac1 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2025-12-26 by HttpPluginCreate report
-
Open service 64.29.17.65:443 · customerapi.camzybite.com
2025-12-22 13:27
HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Set-Cookie Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 139 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Mon, 22 Dec 2025 13:27:31 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: Origin X-Content-Type-Options: nosniff X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: sin1::iad1::kdqpv-1766410049780-f91c0aba437c Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 64.29.17.65:443 · customerapi.camzybite.com
2025-12-20 11:52
HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Set-Cookie Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 139 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Sat, 20 Dec 2025 11:52:07 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: Origin X-Content-Type-Options: nosniff X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::qcb78-1766231525927-b69912769122 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2025-12-20 by HttpPluginCreate report
-
Open service 64.29.17.65:443 · customerapi.camzybite.com
2025-12-19 10:05
HTTP/1.1 404 Not Found Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Set-Cookie Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 139 Content-Security-Policy: default-src 'none' Content-Type: text/html; charset=utf-8 Date: Fri, 19 Dec 2025 10:05:56 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: Origin X-Content-Type-Options: nosniff X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::ld4x7-1766138755538-b1bb3c09dcc4 Connection: close Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Found 2025-12-19 by HttpPluginCreate report