Vercel
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 216.150.1.1:443 · dev.api.iamalive.app
2026-01-09 21:16
HTTP/1.1 200 OK Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 24 Content-Type: text/html; charset=utf-8 Date: Fri, 09 Jan 2026 21:16:53 GMT Etag: W/"18-BTd8O+XH+t7YRCJVH7M5xEN5XdM" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: MISS X-Vercel-Id: lhr1::bom1::4qb57-1767993413589-dc6d4e227b65 Connection: close Server is up and running
Open service 216.150.1.1:443 · dev.api.iamalive.app
2026-01-02 14:14
HTTP/1.1 200 OK Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 24 Content-Type: text/html; charset=utf-8 Date: Fri, 02 Jan 2026 14:14:12 GMT Etag: W/"18-BTd8O+XH+t7YRCJVH7M5xEN5XdM" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: MISS X-Vercel-Id: fra1::bom1::r7p6p-1767363247280-23d4f3bf6da9 Connection: close Server is up and running
Open service 216.150.1.1:443 · dev.api.iamalive.app
2025-12-23 03:26
HTTP/1.1 200 OK Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 24 Content-Type: text/html; charset=utf-8 Date: Tue, 23 Dec 2025 03:26:10 GMT Etag: W/"18-BTd8O+XH+t7YRCJVH7M5xEN5XdM" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: MISS X-Vercel-Id: sfo1::bom1::d76gl-1766460370552-26b6eebc4dc9 Connection: close Server is up and running
Open service 216.150.1.1:443 · dev.api.iamalive.app
2025-12-20 09:57
HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 24 Content-Type: text/html; charset=utf-8 Date: Sat, 20 Dec 2025 09:57:07 GMT Etag: W/"18-BTd8O+XH+t7YRCJVH7M5xEN5XdM" Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: Origin X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: sin1::bom1::pkjrc-1766224622003-a2173e03c241 Connection: close Server is up and running