cloudflare
tcp/443 tcp/80 tcp/8443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 2606:4700:3034::ac43:89f2:443 · paapi.activsoft.tech
2026-01-24 20:47
HTTP/1.1 404 Not Found
Date: Sat, 24 Jan 2026 20:47:22 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-origin: *
content-security-policy: default-src 'none'
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-response-time: 0.766ms
x-xss-protection: 0
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=6,cfOrigin;dur=838
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=sTjUmnubwT1%2BtG9jL8eHjPpimVWFOK8UvwpHWMV98pkcozXKGSfS4VMiCCnlHpTrHrpMmFQeZhacP7W8fDQZqYh1A6bzaFzsmumRda3gvt4Bm%2Bj42h2YYPb709LqShon"}]}
Server: cloudflare
CF-RAY: 9c3262ad5838ce87-SIN
alt-svc: h3=":443"; ma=86400
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"756aa49806834b7a952123142064ac9f","r":1,"server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>
</body>
</html>
Open service 2606:4700:3036::6815:56f2:443 · paapi.activsoft.tech
2026-01-24 20:47
HTTP/1.1 404 Not Found
Date: Sat, 24 Jan 2026 20:47:21 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-origin: *
content-security-policy: default-src 'none'
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-response-time: 0.617ms
x-xss-protection: 0
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=10,cfOrigin;dur=770
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=3d5RwcLygOn%2Bjo9StJwAKKSrC1K3n4H4q%2BgAnBF1Ah1OSHsUYW7G%2B2OXWrKuLRd82YnCUJMvXjVzr4%2B9i7KcnGWg2Uxbnq08cTp50TEfaAOupSr1RFOrBN57td%2Fb%2BO8T"}]}
Server: cloudflare
CF-RAY: 9c3262ad5d853e3f-BOM
alt-svc: h3=":443"; ma=86400
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"756aa49806834b7a952123142064ac9f","r":1,"server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>
</body>
</html>
Open service 2606:4700:3034::ac43:89f2:8443 · paapi.activsoft.tech
2026-01-24 20:47
HTTP/1.1 521 <none> Date: Sat, 24 Jan 2026 20:47:20 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=85,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9c3262a89ed60c82-EWR alt-svc: h3=":8443"; ma=86400 error code: 521
Open service 172.67.137.242:80 · paapi.activsoft.tech
2026-01-24 20:47
HTTP/1.1 301 Moved Permanently
Date: Sat, 24 Jan 2026 20:47:20 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 17
Connection: close
Location: https://paapi.activsoft.tech/
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2FzNYrVW%2FGO8glG%2F3IsCTW6ABc3QE8ML2dFadHbnI0VRpe1lgdqTR7hUFPoUAuMUm5e3Qj6DtKi%2BWF3ULd3%2F8m3TIjmT0OT%2Fm4tSeK6N%2FmGn0xA%3D%3D"}]}
Server: cloudflare
CF-RAY: 9c3262a7987bf5c3-AMS
alt-svc: h3=":443"; ma=86400
Moved Permanently
Open service 2606:4700:3036::6815:56f2:8443 · paapi.activsoft.tech
2026-01-24 20:47
HTTP/1.1 521 <none> Date: Sat, 24 Jan 2026 20:47:20 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=81,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9c3262a7eba19867-EWR alt-svc: h3=":8443"; ma=86400 error code: 521
Open service 2606:4700:3034::ac43:89f2:80 · paapi.activsoft.tech
2026-01-24 20:47
HTTP/1.1 301 Moved Permanently
Date: Sat, 24 Jan 2026 20:47:20 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 17
Connection: close
Location: https://paapi.activsoft.tech/
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=18,cfOrigin;dur=151
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=HV%2BLtVdh7AJD2rKgMzSKHUhSlnuJZeOBwcUYfIxMn0%2Bc%2BaP18B%2FvpNVhKByPFcdqkb8a%2BFBZfIoppncSaOKB5x6rkW3lOhxuIFprjB%2FJHIT1C7D3DI8XgInjMtZjP44X"}]}
Server: cloudflare
CF-RAY: 9c3262a839240f5b-EWR
alt-svc: h3=":443"; ma=86400
Moved Permanently
Open service 172.67.137.242:443 · paapi.activsoft.tech
2026-01-24 20:47
HTTP/1.1 404 Not Found
Date: Sat, 24 Jan 2026 20:47:20 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-origin: *
content-security-policy: default-src 'none'
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-response-time: 1.573ms
x-xss-protection: 0
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=HjBR0cZsCRFupKsZIAMFO4Uht7rD3g3WRNOtV8LveF8OMmOUGMfLZlJwKeeo8GUzF8YknRjr%2FiFaL09E0FZU32O04s4FTV5AvbALdhLWWq1tT7VS"}]}
Server: cloudflare
CF-RAY: 9c3262a79e41be9d-AMS
alt-svc: h3=":443"; ma=86400
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 104.21.86.242:8443 · paapi.activsoft.tech
2026-01-24 20:47
HTTP/1.1 521 <none> Date: Sat, 24 Jan 2026 20:47:20 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9c3262a7396f774e-AMS alt-svc: h3=":8443"; ma=86400 error code: 521
Open service 172.67.137.242:8443 · paapi.activsoft.tech
2026-01-24 20:47
HTTP/1.1 521 <none> Date: Sat, 24 Jan 2026 20:47:20 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9c3262a72d25cd05-FRA alt-svc: h3=":8443"; ma=86400 error code: 521
Open service 104.21.86.242:80 · paapi.activsoft.tech
2026-01-24 20:47
HTTP/1.1 301 Moved Permanently
Date: Sat, 24 Jan 2026 20:47:20 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 17
Connection: close
Location: https://paapi.activsoft.tech/
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=2Z76eKoCPgps5yqbsR1pI%2B0DLERX%2BU%2FzC97d5ZMnYH%2FM6pLDO1T3Fx9R0Z5IiJNzF17It3%2BENkZ2SVAh2MSKEzCO6sW5cbgx9BxnBhny3kIqaMFO"}]}
Server: cloudflare
CF-RAY: 9c3262a76c6bcab4-FRA
alt-svc: h3=":443"; ma=86400
Moved Permanently
Open service 2606:4700:3036::6815:56f2:80 · paapi.activsoft.tech
2026-01-24 20:47
HTTP/1.1 301 Moved Permanently
Date: Sat, 24 Jan 2026 20:47:20 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 17
Connection: close
Location: https://paapi.activsoft.tech/
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=M7rOX0a%2FQUdH%2FZ%2FmZ%2Bcg7IDwHYx1Ju2i2c9CwfeF417I9f5FOskq0cexq3bOkd5FAGknnKtisTiwLlcVK%2FL%2B2nDe06O27lxWKwAg67z3xdjtGf44HgrqLMGUkMbCs0WH"}]}
Server: cloudflare
CF-RAY: 9c3262a76bf7e570-FRA
alt-svc: h3=":443"; ma=86400
Moved Permanently
Open service 104.21.86.242:443 · paapi.activsoft.tech
2026-01-24 20:47
HTTP/1.1 404 Not Found
Date: Sat, 24 Jan 2026 20:47:20 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-origin: *
content-security-policy: default-src 'none'
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-response-time: 0.532ms
x-xss-protection: 0
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=OHwaI5KKK49WcVA6HFUm5mEbcum678fAvQ8v785u5zNDT1r823U11nT%2BOoHCnBJFTV1RPgdityIHzY6WtKGxIrNf2x6n0WcSLDXBeEMVK8nnr3GO"}]}
Server: cloudflare
CF-RAY: 9c3262a78d19dcb5-FRA
alt-svc: h3=":443"; ma=86400
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>
Open service 172.67.137.242:443 · paapi.activsoft.tech
2026-01-23 14:03
HTTP/1.1 404 Not Found
Date: Fri, 23 Jan 2026 14:03:37 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-origin: *
content-security-policy: default-src 'none'
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-response-time: 0.934ms
x-xss-protection: 0
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=h2Mw%2BKXKqLYS5OdhbAOHJzRiR3j3CIAQGnBiONSYyajhAkNK8Mblecj1ngvnx5JdAGp%2BrCJXzx%2BiwAlttRiphcF7k9DCxz8ixBfY5Qf68%2BWurt30"}]}
Server: cloudflare
CF-RAY: 9c27d5e60b2f1d0c-FRA
alt-svc: h3=":443"; ma=86400
Page title: Error
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Error</title>
</head>
<body>
<pre>Cannot GET /</pre>
</body>
</html>