Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 2.16.183.13:443 · eventapi.timesnowhindi.com
2026-01-24 00:52
HTTP/1.1 502 Bad Gateway Content-Type: text/html Content-Length: 183 Expires: Sat, 24 Jan 2026 00:52:35 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 24 Jan 2026 00:52:35 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Page title: 502 Bad Gateway <html> <head><title>502 Bad Gateway</title></head> <body> <center><h1>502 Bad Gateway</h1></center> <hr><center>Microsoft-Azure-Application-Gateway/v2</center> </body> </html>
Open service 2a02:26f0:3500:18::1724:a290:443 · eventapi.timesnowhindi.com
2026-01-24 00:52
HTTP/1.1 502 Bad Gateway Content-Type: text/html Content-Length: 183 Expires: Sat, 24 Jan 2026 00:52:34 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 24 Jan 2026 00:52:34 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Page title: 502 Bad Gateway <html> <head><title>502 Bad Gateway</title></head> <body> <center><h1>502 Bad Gateway</h1></center> <hr><center>Microsoft-Azure-Application-Gateway/v2</center> </body> </html>
Open service 2.16.183.5:443 · eventapi.timesnowhindi.com
2026-01-24 00:52
HTTP/1.1 502 Bad Gateway Content-Type: text/html Content-Length: 183 Expires: Sat, 24 Jan 2026 00:52:35 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 24 Jan 2026 00:52:35 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Page title: 502 Bad Gateway <html> <head><title>502 Bad Gateway</title></head> <body> <center><h1>502 Bad Gateway</h1></center> <hr><center>Microsoft-Azure-Application-Gateway/v2</center> </body> </html>
Open service 2a02:26f0:3500:18::1724:a29d:443 · eventapi.timesnowhindi.com
2026-01-24 00:52
HTTP/1.1 502 Bad Gateway Content-Type: text/html Content-Length: 183 Expires: Sat, 24 Jan 2026 00:52:35 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 24 Jan 2026 00:52:35 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Page title: 502 Bad Gateway <html> <head><title>502 Bad Gateway</title></head> <body> <center><h1>502 Bad Gateway</h1></center> <hr><center>Microsoft-Azure-Application-Gateway/v2</center> </body> </html>
Open service 2a02:26f0:3100::1735:2ab0:443 · eventapi.timesnowhindi.com
2025-12-22 07:15
HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 139 Akamai-Header: isMobileView : false, User Agent : Mozilla/5.0 (l9scan/2.0.03261623a353337313a3a303031333a303666323a323031623; +https://leakix.net), req.query.mobile :undefined, headers.x-akamai-device-characteristics :undefined Access-Control-Allow-Credentials: false Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Headers: * Access-Control-Max-Age: 86400 Vary: Accept-Encoding, User-Agent, x-akamai-mobile X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-DNS-Prefetch-Control: on X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'none' X-Response-Time: 0ms Expires: Mon, 22 Dec 2025 07:15:54 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 07:15:54 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 2a02:26f0:3100::1735:2a92:443 · eventapi.timesnowhindi.com
2025-12-22 07:15
HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 139 Akamai-Header: isMobileView : false, User Agent : Mozilla/5.0 (l9scan/2.0.23931623a353337313a3a303031333a303666323a323031623; +https://leakix.net), req.query.mobile :undefined, headers.x-akamai-device-characteristics :undefined Access-Control-Allow-Credentials: false Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Headers: * Access-Control-Max-Age: 86400 Vary: Accept-Encoding, User-Agent, x-akamai-mobile X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-DNS-Prefetch-Control: on X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'none' X-Response-Time: 0ms Expires: Mon, 22 Dec 2025 07:15:54 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 07:15:54 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 2.16.204.87:443 · eventapi.timesnowhindi.com
2025-12-22 07:15
HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 139 Akamai-Header: isMobileView : false, User Agent : Mozilla/5.0 (l9scan/2.0.7383e2430323e26313e223; +https://leakix.net), req.query.mobile :undefined, headers.x-akamai-device-characteristics :undefined Access-Control-Allow-Credentials: false Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Headers: * Access-Control-Max-Age: 86400 Vary: Accept-Encoding, User-Agent, x-akamai-mobile X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-DNS-Prefetch-Control: on X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'none' X-Response-Time: 0ms Expires: Mon, 22 Dec 2025 07:15:53 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 07:15:53 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 2.16.204.90:443 · eventapi.timesnowhindi.com
2025-12-22 07:15
HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Content-Length: 139 Akamai-Header: isMobileView : false, User Agent : Mozilla/5.0 (l9scan/2.0.0393e2430323e26313e223; +https://leakix.net), req.query.mobile :undefined, headers.x-akamai-device-characteristics :undefined Access-Control-Allow-Credentials: false Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Headers: * Access-Control-Max-Age: 86400 Vary: Accept-Encoding, User-Agent, x-akamai-mobile X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-DNS-Prefetch-Control: on X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'none' X-Response-Time: 1ms Expires: Mon, 22 Dec 2025 07:15:53 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 07:15:53 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>