Caddy
tcp/443 tcp/80
cloudflare
tcp/443 tcp/8443
nginx
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9
Public Swagger UI/API detected at path: /swagger.json - sample paths: GET /coupons GET /coupons/hascoupon GET /coupons/verify GET /language
Open service 34.91.249.129:80 · mail.kalzlearn.com
2026-01-08 17:52
HTTP/1.1 308 Permanent Redirect Connection: close Location: https://mail.kalzlearn.com/ Server: Caddy Date: Thu, 08 Jan 2026 17:53:25 GMT Content-Length: 0
Open service 34.91.249.129:443 · mail.kalzlearn.com
2026-01-08 17:52
HTTP/1.1 200 OK Server: Caddy Date: Thu, 08 Jan 2026 17:52:27 GMT Content-Length: 0 Connection: close
Open service 52.72.49.79:80 · go.kalzlearn.com
2026-01-08 06:25
HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Thu, 08 Jan 2026 06:26:38 GMT Location: http://go.kalzlearn.com/?rb.routing.mode=proxy&rb.routing.signature=558021 Engine: Rebrandly.redirect, version 2.1
Open service 52.72.49.79:443 · go.kalzlearn.com
2026-01-08 06:25
HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Thu, 08 Jan 2026 06:25:42 GMT Location: https://go.kalzlearn.com/?rb.routing.mode=proxy&rb.routing.signature=55885 Engine: Rebrandly.redirect, version 2.1 Strict-Transport-Security: max-age=15552000
Open service 45.154.183.183:443 · kalzlearn.com
2025-12-30 06:35
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 06:35:19 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 46405358 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 2f76c14dee488da50cf4566bae84af68 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 2a06:98c1:3121::3:443 · kalzlearn.com
2025-12-22 07:49
HTTP/1.1 522 <none> Date: Mon, 22 Dec 2025 07:50:16 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=19445,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9b1e06888e5bac06-YYZ alt-svc: h3=":443"; ma=86400 error code: 522
Open service 2a06:98c1:3121::3:8443 · kalzlearn.com
2025-12-22 07:49
HTTP/1.1 522 <none> Date: Mon, 22 Dec 2025 07:50:16 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=19698,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9b1e0687fa2af947-SJC alt-svc: h3=":8443"; ma=86400 error code: 522
Open service 2a06:98c1:3120::3:8443 · kalzlearn.com
2025-12-22 07:49
HTTP/1.1 522 <none> Date: Mon, 22 Dec 2025 07:50:16 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=19320,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9b1e0687a94237a1-YYZ alt-svc: h3=":8443"; ma=86400 error code: 522
Open service 188.114.97.3:8443 · kalzlearn.com
2025-12-22 07:49
HTTP/1.1 522 <none> Date: Mon, 22 Dec 2025 07:50:16 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9b1e06878ca8593c-LHR alt-svc: h3=":8443"; ma=86400 error code: 522
Open service 2a06:98c1:3120::3:443 · kalzlearn.com
2025-12-22 07:49
HTTP/1.1 522 <none> Date: Mon, 22 Dec 2025 07:50:16 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9b1e06876fbc9a7c-LHR alt-svc: h3=":443"; ma=86400 error code: 522
Open service 188.114.97.3:443 · kalzlearn.com
2025-12-22 07:49
HTTP/1.1 522 <none> Date: Mon, 22 Dec 2025 07:50:16 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9b1e0687680e19a9-FRA alt-svc: h3=":443"; ma=86400 error code: 522
Open service 45.154.183.183:443 · kalzlearn.com
2025-12-22 07:44
HTTP/1.1 403 Forbidden Date: Mon, 22 Dec 2025 07:44:29 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 17276689 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: f9b080e1fe80b2cb171bf3b8e82db98a Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:443 · kalzlearn.com
2025-12-20 08:10
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 08:10:52 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 19133916 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 5e62155db4088d6c20772d36bc3d1a63 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 35.244.32.113:80 · www.kalzlearn.com
2025-12-19 14:46
HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 19 Dec 2025 14:46:56 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.kalzlearn.com/ X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 35.244.32.113:443 · www.kalzlearn.com
2025-12-19 14:46
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Dec 2025 14:46:56 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 39527
Connection: close
Set-Cookie: frontend_lang=en_US; Expires=Sat, 19 Dec 2026 14:46:56 GMT; Path=/
Set-Cookie: session_id=zsfMFMuj16yQdrO1roke43ufD5cn85NxUICJh6TUmo6TOX3yZOF7AcKBGUtCXkrEIuNj7nlKRHuDWI9J5Gva; Expires=Sat, 19 Dec 2026 14:46:56 GMT; Max-Age=604800; HttpOnly; Path=/; Secure; SameSite=Lax
X-Content-Type-Options: nosniff
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubDomains
Page title: Home | Kalz Learn
<!DOCTYPE html>
<html lang="en-US" data-website-id="1" data-main-object="website.page(4,)">
<head>
<meta charset="utf-8"/>
<meta http-equiv="X-UA-Compatible" content="IE=edge"/>
<meta name="viewport" content="width=device-width, initial-scale=1"/>
<meta name="generator" content="Odoo"/>
<meta name="description" content="This is the homepage of the website"/>
<meta property="og:type" content="website"/>
<meta property="og:title" content="Home | Kalz Learn"/>
<meta property="og:site_name" content="Kalz Learn"/>
<meta property="og:url" content="https://www.kalzlearn.com/"/>
<meta property="og:image" content="https://www.kalzlearn.com/web/image/website/1/logo?unique=ad6f60b"/>
<meta property="og:description" content="This is the homepage of the website"/>
<meta name="twitter:card" content="summary_large_image"/>
<meta name="twitter:title" content="Home | Kalz Learn"/>
<meta name="twitter:image" content="https://www.kalzlearn.com/web/image/website/1/logo/300x300?unique=ad6f60b"/>
<meta name="twitter:description" content="This is the homepage of the website"/>
<link rel="canonical" href="https://kalzlearn.odoo.com/"/>
<link rel="preconnect" href="https://fonts.gstatic.com/" crossorigin=""/>
<title>Home | Kalz Learn</title>
<link type="image/x-icon" rel="shortcut icon" href="/web/image/website/1/favicon?unique=ad6f60b"/>
<link rel="preload" href="/web/static/src/libs/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0" as="font" crossorigin=""/>
<link type="text/css" rel="stylesheet" href="/web/assets/1/458fea9/web.assets_frontend.min.css"/>
<script id="web.layout.odooscript" type="text/javascript">
var odoo = {
csrf_token: '2c67b332ba9dc1d7678f27248fc37f4afd0fbd13o1797691616',
debug: "",
};
</script>
<script type="text/javascript">
odoo.__session_info__ = {"is_admin": false, "is_system": false, "is_public": true, "is_internal_user": false, "is_website_user": true, "uid": null, "registry_hash": "a0c6c3b25fe32ae8bf61a0e8e1a2318f274a908d8c8008634ce8f1fb3fee6849", "is_frontend": true, "profile_session": null, "profile_collectors": null, "profile_params": null, "show_effect": true, "currencies": {"92": {"name": "KES", "symbol": "KSh", "position": "after", "digits": [69, 2]}}, "quick_login": true, "bundle_params": {"lang": "en_US", "website_id": 1}, "test_mode": false, "websocket_worker_version": "19.0-2", "translationURL": "/website/translations", "geoip_country_code": "GB", "geoip_phone_code": 44, "lang_url_code": "en"};
if (!/(^|;\s)tz=/.test(document.cookie)) {
const userTZ = Intl.DateTimeFormat().resolvedOptions().timeZone;
document.cookie = `tz=${userTZ}; path=/`;
}
</script>
<script type="text/javascript" defer="defer" src="/web/assets/1/809be93/web.assets_frontend_minimal.min.js" onerror="__odooAssetError=1"></script>
<script type="text/javascript" data-src="/web/assets/1/5370445/web.assets_frontend_lazy.min.js" onerror="__odooAssetError=1"></script>
</head>
<body>
<div id="wrapwrap" class="homepage ">
<a class="o_skip_to_content btn btn-primary rounded-0 visually-hidden-focusable position-absolute start-0" href="#wrap">Skip to Content</a>
<header id="top" data-anchor="true" data-name="Header" data-extra-items-toggle-aria-label="Extra items button" class=" o_header_standard" style=" ">
<nav data-name="Navbar" aria-label="Main" class="navbar navbar-expand-lg navbar-light o_colored_level o_cc d-none d-lg-block shadow-sm ">
<div id="o_main_nav" class="o_main_nav container">
<a data-name="Navbar Logo" href="/" class="navbar-brand logo me-4">
<span role="img" aria-label="Logo of Kalz Learn" title="Kalz