Domain mandycandy.com.au
United States
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-10-15 12:33
Last seen 2025-11-01 14:42
Open for 17 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9Public Swagger UI/API detected at path: /swagger.json - sample paths: GET /coupons GET /coupons/hascoupon GET /coupons/verify GET /language
Found on 2025-11-01 14:42
-
-
Open service 45.154.183.183:443 · mandycandy.com.au
2025-12-30 05:11
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 05:11:40 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 45592083 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 1a637612fdc540823459c1baf5eb680f Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Found 2025-12-30 by HttpPluginCreate report
-
Open service 45.154.183.183:443 · mandycandy.com.au
2025-12-22 06:09
HTTP/1.1 403 Forbidden Date: Mon, 22 Dec 2025 06:09:59 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 5085772 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: de390f10c802aa884e53727e28865f6e Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Found 2025-12-22 by HttpPluginCreate report
-
Open service 45.154.183.183:443 · mandycandy.com.au
2025-12-20 06:42
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 06:42:02 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 13741331 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 19eb488090aa63a546f318dce43d7c85 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Found 2025-12-20 by HttpPluginCreate report