cloudflare
tcp/443 tcp/8443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43ddfe44bbd535e2fb4289f23a077c9a48ae30448b
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /api/hpp/intents
GET /api/hpp/intents/{id}
GET /api/payment/transaction/{id}
GET /api/payment/transactions
GET /psp/payment/sales/brite/countries
POST /api/payment/intent
POST /api/payment/sales
POST /api/payment/sales-quickbit
POST /psp/payment/sales/brite
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43ddfe44bbd535e2fb4289f23a077c9a48ae30448b
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /api/hpp/intents
GET /api/hpp/intents/{id}
GET /api/payment/transaction/{id}
GET /api/payment/transactions
GET /psp/payment/sales/brite/countries
POST /api/payment/intent
POST /api/payment/sales
POST /api/payment/sales-quickbit
POST /psp/payment/sales/brite
Open service 104.26.15.77:443 · docs.luminarpay.com
2026-01-09 16:25
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 16:25:36 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
Vary: accept-encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=75qCNxjOkqqwlFlyFzqz8slA4lepPDITS3rJPiCB3xGrEj4kSnldoq%2FFOIof8vXNp7hVzcsvsgwzP%2ByitkIbHaQAMPsvsGyC%2FrWlWuMalMwMId4%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
cf-cache-status: DYNAMIC
CF-RAY: 9bb54aa5bdda2b29-SJC
alt-svc: h3=":443"; ma=86400
Page title: Redoc
<!DOCTYPE html>
<html>
<head>
<title>Redoc</title>
<!-- needed for adaptive design -->
<meta charset="utf-8"/>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link href="https://fonts.googleapis.com/css?family=Montserrat:300,400,700%7CRoboto:300,400,700" rel="stylesheet">
<!--
Redoc doesn't change outer page styles
-->
<style>
body {
margin: 0;
padding: 0;
}
</style>
</head>
<body>
<redoc spec-url='swagger'></redoc>
<script src="https://cdn.redoc.ly/redoc/latest/bundles/redoc.standalone.js"> </script>
</body>
</html>
Open service 104.26.14.77:8443 · docs.luminarpay.com
2026-01-09 16:01
HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 16:01:57 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
Vary: accept-encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=F4jn%2B1Nd6jsvU5EDWf6uaxnAiwsghAr45L5xBvJb3nTmtfaaqSPj%2FATyZ8HntdU78i4po3Dysa0YPh9s4F1%2B7SclxmM2b08FEIn3E8S65Zduhe4%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
cf-cache-status: DYNAMIC
CF-RAY: 9bb527fb48cfbb61-FRA
alt-svc: h3=":8443"; ma=86400
Page title: Redoc
<!DOCTYPE html>
<html>
<head>
<title>Redoc</title>
<!-- needed for adaptive design -->
<meta charset="utf-8"/>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link href="https://fonts.googleapis.com/css?family=Montserrat:300,400,700%7CRoboto:300,400,700" rel="stylesheet">
<!--
Redoc doesn't change outer page styles
-->
<style>
body {
margin: 0;
padding: 0;
}
</style>
</head>
<body>
<redoc spec-url='swagger'></redoc>
<script src="https://cdn.redoc.ly/redoc/latest/bundles/redoc.standalone.js"> </script>
</body>
</html>
Open service 104.26.15.77:443 · docs.luminarpay.com
2026-01-02 21:38
HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 21:38:24 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
Vary: accept-encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2FeL9FZ3J3olin57BEy2%2B1ktiJ5vGtyHYU8tJeEPYMhgaXZ5C5SDGhezNcC0iy4a92dDdywxaFGS2JyHm%2FGySOBGng8AfvdT8cee4l0lXartwo0E%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
cf-cache-status: DYNAMIC
CF-RAY: 9b7d67390d91ebb8-YYZ
alt-svc: h3=":443"; ma=86400
Page title: Redoc
<!DOCTYPE html>
<html>
<head>
<title>Redoc</title>
<!-- needed for adaptive design -->
<meta charset="utf-8"/>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link href="https://fonts.googleapis.com/css?family=Montserrat:300,400,700%7CRoboto:300,400,700" rel="stylesheet">
<!--
Redoc doesn't change outer page styles
-->
<style>
body {
margin: 0;
padding: 0;
}
</style>
</head>
<body>
<redoc spec-url='swagger'></redoc>
<script src="https://cdn.redoc.ly/redoc/latest/bundles/redoc.standalone.js"> </script>
</body>
</html>
Open service 104.26.14.77:8443 · docs.luminarpay.com
2026-01-02 09:17
HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 09:17:10 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
Vary: accept-encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=vN6YzMFyA%2FEt3wLkOeTPSIbDpAKUgUy0LAlpm9gBb%2Bd%2B53OAER%2BiM6%2FcFO4wNX%2BCDdCWnFSXS6NAmV97Nq%2F1gc39CKBs3I1tQ%2BhFn6pZR4ALRyE%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
cf-cache-status: DYNAMIC
CF-RAY: 9b7929693f032bb8-FRA
alt-svc: h3=":8443"; ma=86400
Page title: Redoc
<!DOCTYPE html>
<html>
<head>
<title>Redoc</title>
<!-- needed for adaptive design -->
<meta charset="utf-8"/>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link href="https://fonts.googleapis.com/css?family=Montserrat:300,400,700%7CRoboto:300,400,700" rel="stylesheet">
<!--
Redoc doesn't change outer page styles
-->
<style>
body {
margin: 0;
padding: 0;
}
</style>
</head>
<body>
<redoc spec-url='swagger'></redoc>
<script src="https://cdn.redoc.ly/redoc/latest/bundles/redoc.standalone.js"> </script>
</body>
</html>
Open service 104.26.14.77:8443 · docs.luminarpay.com
2025-12-23 00:38
HTTP/1.1 200 OK
Date: Tue, 23 Dec 2025 00:38:32 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
Vary: accept-encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CvBrSf0PjVw8gmexgqJ3%2FuR67%2BxEvCHFHie3jK5IWP8SS38hf%2Blwpd8l561hZ9UIOOErIN2ioyoFBTUZgUFpOa3c97rSYRgxyDDGICt9MCuLUeA%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
cf-cache-status: DYNAMIC
CF-RAY: 9b23cbf39b4e1ce4-FRA
alt-svc: h3=":8443"; ma=86400
Page title: Redoc
<!DOCTYPE html>
<html>
<head>
<title>Redoc</title>
<!-- needed for adaptive design -->
<meta charset="utf-8"/>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link href="https://fonts.googleapis.com/css?family=Montserrat:300,400,700%7CRoboto:300,400,700" rel="stylesheet">
<!--
Redoc doesn't change outer page styles
-->
<style>
body {
margin: 0;
padding: 0;
}
</style>
</head>
<body>
<redoc spec-url='swagger'></redoc>
<script src="https://cdn.redoc.ly/redoc/latest/bundles/redoc.standalone.js"> </script>
</body>
</html>
Open service 104.26.15.77:443 · docs.luminarpay.com
2025-12-22 22:49
HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 22:49:05 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
Vary: accept-encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=zCM6M8NUUbvZSkeKAqc5Dqw9MyrX3sOx2sIZdDUk80UB2EmChtb7WA5q3ixvluiDiennjMg%2Fptsg40S9OZwskbzqhYoyjNT5QbBtjWbpcfv6SDU%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
cf-cache-status: DYNAMIC
CF-RAY: 9b232ba0cd4fb6d8-LHR
alt-svc: h3=":443"; ma=86400
Page title: Redoc
<!DOCTYPE html>
<html>
<head>
<title>Redoc</title>
<!-- needed for adaptive design -->
<meta charset="utf-8"/>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link href="https://fonts.googleapis.com/css?family=Montserrat:300,400,700%7CRoboto:300,400,700" rel="stylesheet">
<!--
Redoc doesn't change outer page styles
-->
<style>
body {
margin: 0;
padding: 0;
}
</style>
</head>
<body>
<redoc spec-url='swagger'></redoc>
<script src="https://cdn.redoc.ly/redoc/latest/bundles/redoc.standalone.js"> </script>
</body>
</html>
Open service 104.26.15.77:443 · docs.luminarpay.com
2025-12-21 04:39
HTTP/1.1 200 OK
Date: Sun, 21 Dec 2025 04:39:23 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0, must-revalidate
cf-cache-status: DYNAMIC
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
Vary: accept-encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=JQxDot5RQ0xU1tcsdxqMLLaDBcUWsHD0YYgi9%2BG40NGzxZz%2FiJKTqlkjo6SIvoUHT7irtKvHcTjZIMZSJxIWihi3u4rLxPnJ0kaqwOEkExE%2FVik%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=8,cfOrigin;dur=48
CF-RAY: 9b14b200dff0ac63-YYZ
alt-svc: h3=":443"; ma=86400
Page title: Redoc
<!DOCTYPE html>
<html>
<head>
<title>Redoc</title>
<!-- needed for adaptive design -->
<meta charset="utf-8"/>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link href="https://fonts.googleapis.com/css?family=Montserrat:300,400,700%7CRoboto:300,400,700" rel="stylesheet">
<!--
Redoc doesn't change outer page styles
-->
<style>
body {
margin: 0;
padding: 0;
}
</style>
</head>
<body>
<redoc spec-url='swagger'></redoc>
<script src="https://cdn.redoc.ly/redoc/latest/bundles/redoc.standalone.js"> </script>
<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"3f092c656591403592c6906232a12416","r":1,"server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>
</body>
</html>
Open service 104.26.14.77:8443 · docs.luminarpay.com
2025-12-20 23:10
HTTP/1.1 200 OK
Date: Sat, 20 Dec 2025 23:10:55 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=0, must-revalidate
cf-cache-status: DYNAMIC
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
Vary: accept-encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2BiknA%2BAYQsbp%2FEGlWeeIx%2B8fhzrsQAEKi7IUg9WQyp9MlEiVSrxGi67B9odY7t1mAi6VrGHPmcCAbuD%2F7c3q2ogiP3SSUWkQ%2FGXkmopdYf4VxwE%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=169,cfOrigin;dur=51
CF-RAY: 9b12d0ddabb57ac8-SJC
alt-svc: h3=":8443"; ma=86400
Page title: Redoc
<!DOCTYPE html>
<html>
<head>
<title>Redoc</title>
<!-- needed for adaptive design -->
<meta charset="utf-8"/>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link href="https://fonts.googleapis.com/css?family=Montserrat:300,400,700%7CRoboto:300,400,700" rel="stylesheet">
<!--
Redoc doesn't change outer page styles
-->
<style>
body {
margin: 0;
padding: 0;
}
</style>
</head>
<body>
<redoc spec-url='swagger'></redoc>
<script src="https://cdn.redoc.ly/redoc/latest/bundles/redoc.standalone.js"> </script>
<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"3f092c656591403592c6906232a12416","r":1,"server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>
</body>
</html>