Vercel
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 64.29.17.1:443 · main-api.southsudanminingjournal.co
2026-01-09 11:16
HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Date: Fri, 09 Jan 2026 11:16:50 GMT Etag: W/"5-KVtrfqMqCWlDxUF4tEEfk+ioZNY" Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: Accept-Encoding X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::tpmkh-1767957410704-96c76e5a3370 Connection: close Transfer-Encoding: chunked works
Open service 216.198.79.65:80 · main-api.southsudanminingjournal.co
2026-01-04 18:26
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://main-api.southsudanminingjournal.co/ Refresh: 0;url=https://main-api.southsudanminingjournal.co/ server: Vercel Redirecting...
Open service 64.29.17.65:443 · main-api.southsudanminingjournal.co
2026-01-04 18:26
HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Date: Sun, 04 Jan 2026 18:26:45 GMT Etag: W/"5-KVtrfqMqCWlDxUF4tEEfk+ioZNY" Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: Accept-Encoding X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::qd4k8-1767551205730-02b4ba31d9dd Connection: close Transfer-Encoding: chunked works
Open service 216.198.79.65:443 · main-api.southsudanminingjournal.co
2026-01-04 18:26
HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Date: Sun, 04 Jan 2026 18:26:46 GMT Etag: W/"5-KVtrfqMqCWlDxUF4tEEfk+ioZNY" Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: Accept-Encoding X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::xwmnv-1767551206838-655cdf763b40 Connection: close Transfer-Encoding: chunked works
Open service 64.29.17.65:80 · main-api.southsudanminingjournal.co
2026-01-04 18:26
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://main-api.southsudanminingjournal.co/ Refresh: 0;url=https://main-api.southsudanminingjournal.co/ server: Vercel Redirecting...
Open service 64.29.17.1:443 · main-api.southsudanminingjournal.co
2026-01-02 21:51
HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Date: Fri, 02 Jan 2026 21:51:22 GMT Etag: W/"5-KVtrfqMqCWlDxUF4tEEfk+ioZNY" Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: Accept-Encoding X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: fra1::iad1::j4dgb-1767390682782-b0d9ce814ea8 Connection: close Transfer-Encoding: chunked works
Open service 64.29.17.1:443 · main-api.southsudanminingjournal.co
2025-12-22 20:53
HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Date: Mon, 22 Dec 2025 20:53:37 GMT Etag: W/"5-KVtrfqMqCWlDxUF4tEEfk+ioZNY" Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: Accept-Encoding X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::dcrc8-1766436814603-e74467c76a60 Connection: close Transfer-Encoding: chunked works
Open service 64.29.17.1:443 · main-api.southsudanminingjournal.co
2025-12-19 06:52
HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Type: text/html; charset=utf-8 Date: Fri, 19 Dec 2025 06:52:17 GMT Etag: W/"5-KVtrfqMqCWlDxUF4tEEfk+ioZNY" Server: Vercel Strict-Transport-Security: max-age=63072000 Vary: Accept-Encoding X-Powered-By: Express X-Vercel-Cache: MISS X-Vercel-Id: fra1::iad1::xrf4p-1766127134283-e6cc207d3a04 Connection: close Transfer-Encoding: chunked works