cloudflare
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Open service 104.21.44.84:443 · dev-api.myidvirtual.com
2026-01-23 16:08
HTTP/1.1 404 Not Found
Date: Fri, 23 Jan 2026 16:08:50 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 63
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
X-Powered-By: Express
Access-Control-Allow-Origin: *
ETag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=8,cfOrigin;dur=219
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=YL482fRkrp1J92SXX0qCjPToeThD5uBLCbNZ%2Bx%2B40djjeyqn70UkSEX35HWEkJ%2Be%2Fc11KHzHhaajV148zx1zKApFYFdU5OpxtRxbgRWp6W7G0oQG1fgy"}]}
CF-RAY: 9c288d52e9ec2a0c-SJC
alt-svc: h3=":443"; ma=86400
{"message":"Cannot GET /","error":"Not Found","statusCode":404}
Open service 172.67.197.229:80 · dev-api.myidvirtual.com
2026-01-23 15:28
HTTP/1.1 404 Not Found
Date: Fri, 23 Jan 2026 15:28:46 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 63
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
X-Powered-By: Express
Access-Control-Allow-Origin: *
ETag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=17,cfOrigin;dur=41
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=LVN675uWQtR1XU4tXZkzDPuBHag2FNXpxhk4YrKrcxwlbq0z8wVcJLtPL6Pj%2FKmEAVrvGNyp6sUyefny5uhe7jK3zptbOMdZwTzEd5jh8a8gj72y6w%3D%3D"}]}
CF-RAY: 9c2852a4faf40f9c-EWR
alt-svc: h3=":443"; ma=86400
{"message":"Cannot GET /","error":"Not Found","statusCode":404}