Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43a81ce88f562b774ca7894bf46905fba96905fba9
Public Swagger UI/API detected at path: /swagger.json - sample paths: GET /coupons GET /coupons/hascoupon GET /coupons/verify GET /language
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d63a747c263a747c263a747c263a747c2
Found 1 files trough .DS_Store spidering: /application
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: low
Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d63a747c263a747c263a747c263a747c2
Found 1 files trough .DS_Store spidering: /application
Open service 45.154.183.183:443 · ohvello.com
2025-12-30 23:40
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 23:40:13 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 62131366 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 23789a80e0281fbc429d85b07801fc37 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:80 · ohvello.com
2025-12-30 23:40
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 23:40:13 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 70072610 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 32be5a8609de053f8a23415a2a382e9f Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:443 · ohvello.com
2025-12-30 05:37
HTTP/1.1 403 Forbidden Date: Tue, 30 Dec 2025 05:37:18 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 55243205 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 37ba6ad4224cad0025b82f0fd96ace3e Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:443 · ohvello.com
2025-12-22 06:26
HTTP/1.1 403 Forbidden Date: Mon, 22 Dec 2025 06:26:11 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 15854650 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 5309e068701d9f17b46578fd32ee9b68 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:443 · ohvello.com
2025-12-21 17:12
HTTP/1.1 403 Forbidden Date: Sun, 21 Dec 2025 17:12:44 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 4895284 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: b74307f9bf54e85258200e976515583c Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:80 · ohvello.com
2025-12-21 17:12
HTTP/1.1 403 Forbidden Date: Sun, 21 Dec 2025 17:12:44 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 21313771 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: f2dde17e93de57538970954d13f38224 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>
Open service 45.154.183.183:443 · ohvello.com
2025-12-20 06:59
HTTP/1.1 403 Forbidden Date: Sat, 20 Dec 2025 06:59:06 GMT Content-Type: text/html Content-Length: 118 Connection: close X-Varnish: 20327008 Age: 0 Via: 1.1 varnish (Varnish/6.3) section-io-cache: Miss section-io-id: 0b46435f9165fd291a5697e3b42de4d9 Page title: 403 Forbidden <html> <head><title>403 Forbidden</title></head> <body> <center><h1>403 Forbidden</h1></center> </body> </html>