CloudFront
tcp/80
nginx 1.28.0
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
Open service 18.239.18.32:443 · fredspace.au
2026-01-23 03:08
HTTP/1.1 302 Moved Temporarily Content-Type: text/html Content-Length: 145 Connection: close Date: Fri, 23 Jan 2026 03:08:08 GMT X-Served-By: athena Set-Cookie: AWSALB=ykZS1HDg1QPGJJO/OjPUjR+cCptB4ieLjqyyl3wDgaAv5YxRAuWuV3vnVHD9JOlgiJAn+Z5ssnm8nUaFmEMWv4Z8nDgB4RXrxv1J0tgf/KtPpnYj0ZJTjcVZl3KB; Expires=Fri, 30 Jan 2026 03:08:08 GMT; Path=/ Set-Cookie: AWSALBCORS=ykZS1HDg1QPGJJO/OjPUjR+cCptB4ieLjqyyl3wDgaAv5YxRAuWuV3vnVHD9JOlgiJAn+Z5ssnm8nUaFmEMWv4Z8nDgB4RXrxv1J0tgf/KtPpnYj0ZJTjcVZl3KB; Expires=Fri, 30 Jan 2026 03:08:08 GMT; Path=/; SameSite=None; Secure Server: nginx/1.28.0 Location: http://fredspace.au/landing-page Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 668006c1cb101e4e3461ceae5f2ccbe2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: EdYfuPoL2GnDwmzb0MG7SCJ1PP5Aj7xD38yqUnEsg_f08Ws7A1jlIg== Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>nginx/1.28.0</center> </body> </html>
Open service 18.239.255.58:80 · fredspace.au
2026-01-10 23:11
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sat, 10 Jan 2026 23:11:06 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://fredspace.au/ X-Cache: Redirect from cloudfront Via: 1.1 b84a101fd4557dd82bd1fd0b6da28160.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BUD50-P2 X-Amz-Cf-Id: ff1PFUWKjl50ZGmyVMIQF01wXCtylflqbIJrKfu8S0sb2mAyAYtNDA== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 18.239.255.58:443 · fredspace.au
2026-01-10 23:11
HTTP/1.1 302 Moved Temporarily Content-Type: text/html Content-Length: 145 Connection: close Date: Sat, 10 Jan 2026 23:11:07 GMT X-Served-By: ares Set-Cookie: AWSALB=o+ckq4GYCz9fEByA15Ni+bs4eFmoI3lczBhBtcfZFsH9xXv+qYfmBsxHbMjbrIhVHjLUzx11IosemcVp9Ege9/AAdzIlUIgKcKT99zenYvTi/KEUcUeqWEgwzW7m; Expires=Sat, 17 Jan 2026 23:11:07 GMT; Path=/ Set-Cookie: AWSALBCORS=o+ckq4GYCz9fEByA15Ni+bs4eFmoI3lczBhBtcfZFsH9xXv+qYfmBsxHbMjbrIhVHjLUzx11IosemcVp9Ege9/AAdzIlUIgKcKT99zenYvTi/KEUcUeqWEgwzW7m; Expires=Sat, 17 Jan 2026 23:11:07 GMT; Path=/; SameSite=None; Secure Server: nginx/1.28.0 Location: http://fredspace.au/landing-page Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 beca81c5ef2820e095b007002324615e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BUD50-P2 X-Amz-Cf-Id: gGHw7COoegsbmnJVrgkLkKRjXkjKnbRZGbPDWv8Ci3jlpPsvCXGIAA== Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>nginx/1.28.0</center> </body> </html>
Open service 18.239.255.28:443 · fredspace.au
2026-01-10 23:11
HTTP/1.1 302 Moved Temporarily Content-Type: text/html Content-Length: 145 Connection: close Date: Sat, 10 Jan 2026 23:11:07 GMT X-Served-By: athena Set-Cookie: AWSALB=5dJJRCwodnAOFCL2+/De5oLF3Y8n6vb29IER9ci2slaYQJRKYF5MsW7vv4aAdn+H+GtNYNJUcKe4h8FaSWFKNstJge1m0qPjmp5SMmjnj2XgqclU+fPcggRUgYD/; Expires=Sat, 17 Jan 2026 23:11:07 GMT; Path=/ Set-Cookie: AWSALBCORS=5dJJRCwodnAOFCL2+/De5oLF3Y8n6vb29IER9ci2slaYQJRKYF5MsW7vv4aAdn+H+GtNYNJUcKe4h8FaSWFKNstJge1m0qPjmp5SMmjnj2XgqclU+fPcggRUgYD/; Expires=Sat, 17 Jan 2026 23:11:07 GMT; Path=/; SameSite=None; Secure Server: nginx/1.28.0 Location: http://fredspace.au/landing-page Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 993a5240d468cdeab30f1c27e1cccf36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BUD50-P2 X-Amz-Cf-Id: TKvaKyAEW7LXVQqeGP3W0KxJKiu3uzDE6RPzj9__j3mDbS6rtLMMLw== Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>nginx/1.28.0</center> </body> </html>
Open service 18.239.255.28:80 · fredspace.au
2026-01-10 23:11
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sat, 10 Jan 2026 23:11:06 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://fredspace.au/ X-Cache: Redirect from cloudfront Via: 1.1 9a6cbd81b92c16e925bba794eeb59248.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BUD50-P2 X-Amz-Cf-Id: JERv8uiX2NryztintP3CWyCjzJGlqcxK94suJGnWVCXHPb9P3LPu3A== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 18.239.255.5:80 · fredspace.au
2026-01-10 23:11
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sat, 10 Jan 2026 23:11:05 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://fredspace.au/ X-Cache: Redirect from cloudfront Via: 1.1 112af6caec455bc87ccd64be7980d686.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BUD50-P2 X-Amz-Cf-Id: j6BcXdtMhfYV7BzBHq3tJucxDfs_lF6Z1kM_SYHBtdH2aNIKEKNqig== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 18.239.255.120:443 · fredspace.au
2026-01-10 23:11
HTTP/1.1 302 Moved Temporarily Content-Type: text/html Content-Length: 145 Connection: close Date: Sat, 10 Jan 2026 23:11:06 GMT X-Served-By: ares Set-Cookie: AWSALB=UqpKfTPyi09gLSWl/0gr2g9pQ8GnOBQmhU6sgdR24C3COvFxLdhfLQryrtbWmMWIkgFFbZHBK0yWVRg/h8mbwrG+PkBTZc2H25Xi45Xh1uTQQI7VcCPeJ5t6FfpA; Expires=Sat, 17 Jan 2026 23:11:06 GMT; Path=/ Set-Cookie: AWSALBCORS=UqpKfTPyi09gLSWl/0gr2g9pQ8GnOBQmhU6sgdR24C3COvFxLdhfLQryrtbWmMWIkgFFbZHBK0yWVRg/h8mbwrG+PkBTZc2H25Xi45Xh1uTQQI7VcCPeJ5t6FfpA; Expires=Sat, 17 Jan 2026 23:11:06 GMT; Path=/; SameSite=None; Secure Server: nginx/1.28.0 Location: http://fredspace.au/landing-page Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 470ff8198c5af042803d9569b1aaa044.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BUD50-P2 X-Amz-Cf-Id: 485GKhgb0oYJbIUJQ5ksjXnVWmhFS614Btu9DYbxlbuEPvrspc34jA== Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>nginx/1.28.0</center> </body> </html>
Open service 18.239.255.120:80 · fredspace.au
2026-01-10 23:11
HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sat, 10 Jan 2026 23:11:05 GMT Content-Type: text/html Content-Length: 167 Connection: close Location: https://fredspace.au/ X-Cache: Redirect from cloudfront Via: 1.1 b68be97db09b630bb2dc6faf3524b228.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BUD50-P2 X-Amz-Cf-Id: z3i_l05CQ8AIPXxS5KwFwEiRWYLVfdN2SftW6OgNymmUc5LKPBaPNg== Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>CloudFront</center> </body> </html>
Open service 18.239.255.5:443 · fredspace.au
2026-01-10 23:11
HTTP/1.1 302 Moved Temporarily Content-Type: text/html Content-Length: 145 Connection: close Date: Sat, 10 Jan 2026 23:11:06 GMT X-Served-By: ares Set-Cookie: AWSALB=IRO4Tprj4orAlSwETdrjT0fv17XJvdkBmx2VYsqZIjT421Oz7IwMrnKW5hC4gEidyTYOln4RRcGX+vr8hhG3PNBJ0XbcVkCO5UX+lEXW+UqVpharZt2IBvc4YAWv; Expires=Sat, 17 Jan 2026 23:11:06 GMT; Path=/ Set-Cookie: AWSALBCORS=IRO4Tprj4orAlSwETdrjT0fv17XJvdkBmx2VYsqZIjT421Oz7IwMrnKW5hC4gEidyTYOln4RRcGX+vr8hhG3PNBJ0XbcVkCO5UX+lEXW+UqVpharZt2IBvc4YAWv; Expires=Sat, 17 Jan 2026 23:11:06 GMT; Path=/; SameSite=None; Secure Server: nginx/1.28.0 Location: http://fredspace.au/landing-page Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 89af70582a9dc92c4998266dcd5025bc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BUD50-P2 X-Amz-Cf-Id: odFDoJcd6tsNKOuY_szG6EZ5YsT4Gv38qPvC0AWLl8v5q2NQNGxPoQ== Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>nginx/1.28.0</center> </body> </html>