nginx
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549dda8dfca85cd337d49fe95f68aa156dff699b354
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /api/v{version}/booking/location/{locationCode}/room-daily-price
GET /api/v{version}/booking/location/{locationId}/roomsavailability
GET /api/v{version}/booking/location/{locationId}/roomsavailabilitytimeslots
GET /api/v{version}/booking/locations
GET /api/v{version}/booking/user/{userId}/bookings
GET /api/v{version}/booking/user/{userId}/bookings/{bookingId}
GET /api/v{version}/configuration/client
GET /api/v{version}/feedback/hear-about-us-answer/{email}
GET /api/v{version}/payments/clientconfig
GET /api/v{version}/payments/discount/{promotionCode}
GET /api/v{version}/payments/session/{sessionId}/booking
GET /api/v{version}/smart-modules/locations
GET /api/v{version}/smart-modules/rooms
GET /api/v{version}/smart-modules/{location}/rooms
GET /api/v{version}/user/privileges
GET /api/v{version}/user/{email}/profile-info
GET /api/v{version}/version/components
POST /api/v{version}/booking/bookrooms
POST /api/v{version}/booking/user/{userId}/bookings/{bookingId}/refund
POST /api/v{version}/device/update
POST /api/v{version}/feedback/contact-us
POST /api/v{version}/feedback/create
POST /api/v{version}/feedback/hear-about-us
POST /api/v{version}/job/smart-modules-sync
POST /api/v{version}/job/stripe-sync
POST /api/v{version}/lock/lock
POST /api/v{version}/lock/locklist
POST /api/v{version}/lock/lockstate
POST /api/v{version}/lock/unlock
POST /api/v{version}/payments/checkout
POST /api/v{version}/payments/intent/create
POST /api/v{version}/payments/stripewebhook
POST /api/v{version}/statistics/event/page-view
POST /api/v{version}/user/associate
POST /api/v{version}/user/enlist
POST /api/v{version}/user/{userId}/delete
Open service 18.245.31.112:443 ยท dev.remo.club
2026-01-23 03:54
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: nginx
Date: Wed, 03 Dec 2025 00:02:28 GMT
ETag: "8vcs4bw8sv480"
x-nextjs-cache: HIT
x-powered-by: Next.js
Cache-Control: s-maxage=31536000, stale-while-revalidate
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 edfa50bbeda89838b4ee2ce6eaea1b04.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P8
X-Amz-Cf-Id: Zyn7AAZ-lEdWG4eIc0nVBrkPpwkqN3_PFfvePfXFElDWvS6bV6gY2A==
Age: 4420319
Page title: REMO Workspaces | Best places to work from
<!DOCTYPE html><html lang="en"><head><meta name="viewport" content="initial-scale=1, width=device-width" class="jsx-2249588156"/><meta charSet="utf-8" class="jsx-2249588156"/><title>REMO Workspaces | Best places to work from</title><meta property="og:title" content="REMO Workspaces | Best places to work from"/><meta name="twitter:title" content="REMO Workspaces | Best places to work from"/><meta name="description" content="Book premium workspaces for remote work across the world."/><meta property="og:description" content="Book premium workspaces for remote work across the world."/><meta name="twitter:description" content="Book premium workspaces for remote work across the world."/><meta itemProp="description" content="Book premium workspaces for remote work across the world."/><meta property="og:image" content="https://dev.remo.club/images/cancun/remo/Indoor_Cube_1200.jpg"/><meta name="twitter:image" content="https://dev.remo.club/images/cancun/remo/Indoor_Cube_1200.jpg"/><meta property="og:image:width" content="1200"/><meta property="og:image:height" content="800"/><meta property="og:image:alt" content="Premium workspaces for remote work"/><meta property="og:image:type" content="image/jpeg"/><meta property="og:url" content="https://dev.remo.club"/><link rel="canonical" href="https://dev.remo.club"/><meta property="og:site_name" content="Remo"/><meta name="twitter:site" content="@Remo"/><meta property="og:type" content="website"/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:creator" content="Remo"/><meta property="og:locale" content="en_US"/><meta name="robots" content="index,follow"/><meta name="next-head-count" content="3"/><meta name="theme-color" content="#3d3c41"/><link rel="shortcut icon" href="/images/icons/favicon/favicon.ico"/><style data-emotion="css-global bvu1nc">html{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;box-sizing:border-box;-webkit-text-size-adjust:100%;}*,*::before,*::after{box-sizing:inherit;}strong,b{font-weight:700;}body{margin:0;color:#3D3C41;font-family:"Inter",sans-serif;font-weight:400;font-size:1.3rem;line-height:1.5;background-color:#fff;}@media (min-width:700px){body{font-size:1.6rem;}}@media (min-width:900px){body{font-size:1.6rem;}}@media (min-width:1200px){body{font-size:1.6rem;}}@media print{body{background-color:#fff;}}body::backdrop{background-color:#fff;}</style><style data-emotion="css "></style><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin /><link rel="preload" href="/_next/static/media/a34f9d1faa5f3315-s.p.woff2" as="font" type="font/woff2" crossorigin="anonymous" data-next-font="size-adjust"/><link rel="preload" href="/_next/static/media/dcc209c0b1ab30af-s.p.woff2" as="font" type="font/woff2" crossorigin="anonymous" data-next-font="size-adjust"/><link rel="preload" href="/_next/static/css/89da6bf8c5ff5036.css" as="style"/><link rel="stylesheet" href="/_next/static/css/89da6bf8c5ff5036.css" data-n-g=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js"></script><script src="/_next/static/chunks/webpack-62c02dad1a6a4cb4.js" defer=""></script><script src="/_next/static/chunks/framework-21e9988c7bde7166.js" defer=""></script><script src="/_next/static/chunks/main-d898bc483030dc46.js" defer=""></script><script src="/_next/static/chunks/pages/_app-59561e2e8042f99b.js" defer=""></script><script src="/_next/static/chunks/pages/index-f17a90d8f60f5bbf.js" defer=""></script><script src="/_next/static/xb0Z2bsyh4ixJShAnzBGE/_buildManifest.js" defer=""></script><script src="/_next/static/xb0Z2bsyh4ixJShAnzBGE/_ssgManifest.js" defer=""></script><style id="__jsx-2249588156">html{font-family:'__Inter_6ac6f9', '__Inter_Fallback_6ac6f9'}</style><style data-href="https://fonts.googleapis.com/icon?family=Material+Icons">@font-face{font-family:'Material Icons';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/materialicons/v143/flUhRq6tzZclQEJ-Vdg-IuiaDsNa.woff) format('woff')}.material-icons{font-family:'Material Icons';font-weight: