BunnyCDN-DE1-1330
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549e0d456aea9599aeda0d5b099cc52ec2f150e064d
Public Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /api/v1/GetAccount GET /api/v1/GetAccountFungibleTokens GET /api/v1/GetAccountNFTs GET /api/v1/GetAccountOwnedTokenSeries GET /api/v1/GetAccountOwnedTokens GET /api/v1/GetAccounts GET /api/v1/GetAddressTransactionCount GET /api/v1/GetAddressTransactions GET /api/v1/GetArchive GET /api/v1/GetAuction GET /api/v1/GetAuctions GET /api/v1/GetAuctionsCount GET /api/v1/GetBlockByHash GET /api/v1/GetBlockByHeight GET /api/v1/GetBlockHeight GET /api/v1/GetBlockTransactionCountByHash GET /api/v1/GetChain GET /api/v1/GetChains GET /api/v1/GetContract GET /api/v1/GetContractByAddress GET /api/v1/GetContracts GET /api/v1/GetLatestBlock GET /api/v1/GetLeaderboard GET /api/v1/GetNFT GET /api/v1/GetNFTs GET /api/v1/GetNexus GET /api/v1/GetOrganization GET /api/v1/GetOrganizationByName GET /api/v1/GetOrganizations GET /api/v1/GetToken GET /api/v1/GetTokenBalance GET /api/v1/GetTokenData GET /api/v1/GetTokenNFTs GET /api/v1/GetTokenSeries GET /api/v1/GetTokens GET /api/v1/GetTransaction GET /api/v1/GetTransactionByBlockHashAndIndex GET /api/v1/InvokeRawScript GET /api/v1/LookUpName GET /api/v1/ReadArchive GET /api/v1/SendCarbonTransaction GET /api/v1/SendRawTransaction GET /api/v1/WriteArchive
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549e0d456ae9b2a7b4c77b3691363bd469ab374f1e8
Public Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /api/v1/GetAccount GET /api/v1/GetAccounts GET /api/v1/GetAddressTransactionCount GET /api/v1/GetAddressTransactions GET /api/v1/GetArchive GET /api/v1/GetAuction GET /api/v1/GetAuctions GET /api/v1/GetAuctionsCount GET /api/v1/GetBlockByHash GET /api/v1/GetBlockByHeight GET /api/v1/GetBlockHeight GET /api/v1/GetBlockTransactionCountByHash GET /api/v1/GetChain GET /api/v1/GetChains GET /api/v1/GetContract GET /api/v1/GetContractByAddress GET /api/v1/GetContracts GET /api/v1/GetLatestBlock GET /api/v1/GetLeaderboard GET /api/v1/GetNFT GET /api/v1/GetNFTs GET /api/v1/GetNexus GET /api/v1/GetOrganization GET /api/v1/GetOrganizationByName GET /api/v1/GetOrganizations GET /api/v1/GetToken GET /api/v1/GetTokenBalance GET /api/v1/GetTokenData GET /api/v1/GetTokens GET /api/v1/GetTransaction GET /api/v1/GetTransactionByBlockHashAndIndex GET /api/v1/InvokeRawScript GET /api/v1/LookUpName GET /api/v1/ReadArchive GET /api/v1/SendCarbonTransaction GET /api/v1/SendRawTransaction GET /api/v1/WriteArchive
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549e0d456aea9599aeda0d5b099cc52ec2f150e064d
Public Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /api/v1/GetAccount GET /api/v1/GetAccountFungibleTokens GET /api/v1/GetAccountNFTs GET /api/v1/GetAccountOwnedTokenSeries GET /api/v1/GetAccountOwnedTokens GET /api/v1/GetAccounts GET /api/v1/GetAddressTransactionCount GET /api/v1/GetAddressTransactions GET /api/v1/GetArchive GET /api/v1/GetAuction GET /api/v1/GetAuctions GET /api/v1/GetAuctionsCount GET /api/v1/GetBlockByHash GET /api/v1/GetBlockByHeight GET /api/v1/GetBlockHeight GET /api/v1/GetBlockTransactionCountByHash GET /api/v1/GetChain GET /api/v1/GetChains GET /api/v1/GetContract GET /api/v1/GetContractByAddress GET /api/v1/GetContracts GET /api/v1/GetLatestBlock GET /api/v1/GetLeaderboard GET /api/v1/GetNFT GET /api/v1/GetNFTs GET /api/v1/GetNexus GET /api/v1/GetOrganization GET /api/v1/GetOrganizationByName GET /api/v1/GetOrganizations GET /api/v1/GetToken GET /api/v1/GetTokenBalance GET /api/v1/GetTokenData GET /api/v1/GetTokenNFTs GET /api/v1/GetTokenSeries GET /api/v1/GetTokens GET /api/v1/GetTransaction GET /api/v1/GetTransactionByBlockHashAndIndex GET /api/v1/InvokeRawScript GET /api/v1/LookUpName GET /api/v1/ReadArchive GET /api/v1/SendCarbonTransaction GET /api/v1/SendRawTransaction GET /api/v1/WriteArchive
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549e0d456ae9b2a7b4c77b3691363bd469ab374f1e8
Public Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /api/v1/GetAccount GET /api/v1/GetAccounts GET /api/v1/GetAddressTransactionCount GET /api/v1/GetAddressTransactions GET /api/v1/GetArchive GET /api/v1/GetAuction GET /api/v1/GetAuctions GET /api/v1/GetAuctionsCount GET /api/v1/GetBlockByHash GET /api/v1/GetBlockByHeight GET /api/v1/GetBlockHeight GET /api/v1/GetBlockTransactionCountByHash GET /api/v1/GetChain GET /api/v1/GetChains GET /api/v1/GetContract GET /api/v1/GetContractByAddress GET /api/v1/GetContracts GET /api/v1/GetLatestBlock GET /api/v1/GetLeaderboard GET /api/v1/GetNFT GET /api/v1/GetNFTs GET /api/v1/GetNexus GET /api/v1/GetOrganization GET /api/v1/GetOrganizationByName GET /api/v1/GetOrganizations GET /api/v1/GetToken GET /api/v1/GetTokenBalance GET /api/v1/GetTokenData GET /api/v1/GetTokens GET /api/v1/GetTransaction GET /api/v1/GetTransactionByBlockHashAndIndex GET /api/v1/InvokeRawScript GET /api/v1/LookUpName GET /api/v1/ReadArchive GET /api/v1/SendCarbonTransaction GET /api/v1/SendRawTransaction GET /api/v1/WriteArchive
Open service 185.111.111.156:443 · phantasma-rpc1.carbonlinear.io
2026-01-09 20:31
HTTP/1.1 302 Found Date: Fri, 09 Jan 2026 20:31:40 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1330 CDN-PullZone: 3529734 CDN-RequestCountryCode: NL Location: /swagger CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 01/05/2026 20:20:51 CDN-EdgeStorageId: 1328 CDN-RequestId: f10b20088a9682b44d38e52754a0cd3e CDN-Cache: HIT CDN-Status: 302 CDN-RequestTime: 0
Open service 185.111.111.156:80 · phantasma-rpc1.carbonlinear.io
2026-01-09 16:57
HTTP/1.1 302 Found Date: Fri, 09 Jan 2026 16:58:01 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1330 CDN-PullZone: 3529734 CDN-RequestCountryCode: US Location: /swagger CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 01/05/2026 20:20:51 CDN-EdgeStorageId: 1328 CDN-RequestId: ff79ffde5ec826514935976de8831be6 CDN-Cache: HIT CDN-Status: 302 CDN-RequestTime: 0
Open service 185.111.111.156:443 · phantasma-rpc1.carbonlinear.io
2026-01-03 00:36
HTTP/1.1 302 Found Date: Sat, 03 Jan 2026 00:36:13 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1330 CDN-PullZone: 3529734 CDN-RequestCountryCode: CA Location: /swagger CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 12/06/2025 05:04:44 CDN-EdgeStorageId: 1328 CDN-RequestId: 2ee0b44bdc85b74061b1d29c371ee21a CDN-Cache: HIT CDN-Status: 302 CDN-RequestTime: 0
Open service 185.111.111.156:80 · phantasma-rpc1.carbonlinear.io
2026-01-02 17:54
HTTP/1.1 302 Found Date: Fri, 02 Jan 2026 17:54:03 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1330 CDN-PullZone: 3529734 CDN-RequestCountryCode: NL Location: /swagger CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 12/06/2025 05:04:44 CDN-EdgeStorageId: 1328 CDN-RequestId: fb26ba0d1405baae4dd095f4afb2547e CDN-Cache: HIT CDN-Status: 302 CDN-RequestTime: 0
Open service 185.111.111.156:80 · phantasma-rpc1.carbonlinear.io
2025-12-23 08:08
HTTP/1.1 302 Found Date: Tue, 23 Dec 2025 08:08:36 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1330 CDN-PullZone: 3529734 CDN-RequestCountryCode: US Location: /swagger CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 12/06/2025 05:04:44 CDN-EdgeStorageId: 1328 CDN-RequestId: 2179f9cbde3ddba791c51aef726899b1 CDN-Cache: HIT CDN-Status: 302 CDN-RequestTime: 0
Open service 185.111.111.156:443 · phantasma-rpc1.carbonlinear.io
2025-12-23 07:45
HTTP/1.1 302 Found Date: Tue, 23 Dec 2025 07:45:32 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1330 CDN-PullZone: 3529734 CDN-RequestCountryCode: US Location: /swagger CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 12/06/2025 05:04:44 CDN-EdgeStorageId: 1328 CDN-RequestId: 821ed58cf27b119b74220ded4b934ca3 CDN-Cache: HIT CDN-Status: 302 CDN-RequestTime: 0
Open service 185.111.111.156:443 · phantasma-rpc1.carbonlinear.io
2025-12-21 05:21
HTTP/1.1 302 Found Date: Sun, 21 Dec 2025 05:21:50 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1330 CDN-PullZone: 3529734 CDN-RequestCountryCode: SG Location: /swagger CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 12/06/2025 05:04:44 CDN-EdgeStorageId: 1328 CDN-RequestId: 49e2bf9debac5ae17ad468dbaadf8ef5 CDN-Cache: HIT CDN-Status: 302 CDN-RequestTime: 0
Open service 185.111.111.156:80 · phantasma-rpc1.carbonlinear.io
2025-12-20 16:40
HTTP/1.1 302 Found Date: Sat, 20 Dec 2025 16:40:42 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1330 CDN-PullZone: 3529734 CDN-RequestCountryCode: US Location: /swagger CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 12/06/2025 05:04:44 CDN-EdgeStorageId: 1328 CDN-RequestId: 479dbee15790042d392ab45ac26fbbf8 CDN-Cache: HIT CDN-Status: 302 CDN-RequestTime: 0
Open service 185.111.111.156:443 · phantasma-rpc1.carbonlinear.io
2025-12-19 04:19
HTTP/1.1 302 Found Date: Fri, 19 Dec 2025 04:19:31 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1330 CDN-PullZone: 3529734 CDN-RequestCountryCode: CA Location: /swagger CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 302 CDN-CachedAt: 12/06/2025 05:04:44 CDN-EdgeStorageId: 1328 CDN-RequestId: 3a93219c0a99ba6b41f713459bc5cb26 CDN-Cache: HIT CDN-Status: 302 CDN-RequestTime: 0