AkamaiGHost
tcp/80
Microsoft-Azure-Application-Gateway v2
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f5e22fb4a1fc9e5ba1fc9e5ba1fc9e5ba1fc9e5ba1fc9e5b
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /purposes/{purpose}
Open service 2a02:26f0:3500:14::1724:a255:443 · purpose.onepipeline.ingapps.net
2026-01-24 05:00
HTTP/1.1 200 OK Content-Type: text/html Request-Context: appId=cid-v1:a888e7cf-29ae-477e-bd32-f66dcef2027f Expires: Sat, 24 Jan 2026 05:00:24 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 24 Jan 2026 05:00:24 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31622400; includeSubDomains
Open service 2a02:26f0:3500:14::1724:a258:443 · purpose.onepipeline.ingapps.net
2026-01-24 05:00
HTTP/1.1 200 OK Content-Type: text/html Request-Context: appId=cid-v1:a888e7cf-29ae-477e-bd32-f66dcef2027f Expires: Sat, 24 Jan 2026 05:00:24 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 24 Jan 2026 05:00:24 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31622400; includeSubDomains
Open service 2a02:26f0:3500:14::1724:a258:80 · purpose.onepipeline.ingapps.net
2026-01-24 05:00
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://purpose.onepipeline.ingapps.net/ Expires: Sat, 24 Jan 2026 05:00:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 24 Jan 2026 05:00:45 GMT Connection: close X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN
Open service 2.16.204.70:443 · purpose.onepipeline.ingapps.net
2026-01-24 05:00
HTTP/1.1 200 OK Content-Type: text/html Request-Context: appId=cid-v1:a888e7cf-29ae-477e-bd32-f66dcef2027f Expires: Sat, 24 Jan 2026 05:00:24 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 24 Jan 2026 05:00:24 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31622400; includeSubDomains
Open service 2a02:26f0:3500:14::1724:a255:80 · purpose.onepipeline.ingapps.net
2026-01-24 05:00
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://purpose.onepipeline.ingapps.net/ Expires: Sat, 24 Jan 2026 05:00:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 24 Jan 2026 05:00:45 GMT Connection: close X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN
Open service 2.16.204.96:443 · purpose.onepipeline.ingapps.net
2026-01-24 05:00
HTTP/1.1 200 OK Content-Type: text/html Request-Context: appId=cid-v1:a888e7cf-29ae-477e-bd32-f66dcef2027f Expires: Sat, 24 Jan 2026 05:00:24 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 24 Jan 2026 05:00:24 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31622400; includeSubDomains
Open service 2.16.204.70:80 · purpose.onepipeline.ingapps.net
2026-01-24 05:00
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://purpose.onepipeline.ingapps.net/ Expires: Sat, 24 Jan 2026 05:00:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 24 Jan 2026 05:00:45 GMT Connection: close X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN
Open service 2.16.204.96:80 · purpose.onepipeline.ingapps.net
2026-01-24 05:00
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://purpose.onepipeline.ingapps.net/ Expires: Sat, 24 Jan 2026 05:00:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 24 Jan 2026 05:00:46 GMT Connection: close X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN
Open service 2.17.100.218:443 · purpose.onepipeline.ingapps.net
2026-01-23 05:43
HTTP/1.1 200 OK Content-Type: text/html Request-Context: appId=cid-v1:a888e7cf-29ae-477e-bd32-f66dcef2027f Expires: Fri, 23 Jan 2026 05:43:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 23 Jan 2026 05:43:46 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31622400; includeSubDomains
Open service 2.16.204.69:443 · test.purpose.onepipeline.ingapps.net
2026-01-12 05:00
HTTP/1.1 502 Bad Gateway Server: Microsoft-Azure-Application-Gateway/v2 Content-Type: text/html Content-Length: 183 Expires: Mon, 12 Jan 2026 05:00:19 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 12 Jan 2026 05:00:19 GMT Connection: close X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31622400; includeSubDomains Page title: 502 Bad Gateway <html> <head><title>502 Bad Gateway</title></head> <body> <center><h1>502 Bad Gateway</h1></center> <hr><center>Microsoft-Azure-Application-Gateway/v2</center> </body> </html>
Open service 2a02:26f0:3500:14::1724:a247:80 · test.purpose.onepipeline.ingapps.net
2026-01-12 05:00
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://test.purpose.onepipeline.ingapps.net/ Expires: Mon, 12 Jan 2026 05:01:01 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 12 Jan 2026 05:01:01 GMT Connection: close X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN
Open service 2a02:26f0:3500:14::1724:a247:443 · test.purpose.onepipeline.ingapps.net
2026-01-12 05:00
HTTP/1.1 502 Bad Gateway Server: Microsoft-Azure-Application-Gateway/v2 Content-Type: text/html Content-Length: 183 Expires: Mon, 12 Jan 2026 05:00:18 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 12 Jan 2026 05:00:18 GMT Connection: close X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31622400; includeSubDomains Page title: 502 Bad Gateway <html> <head><title>502 Bad Gateway</title></head> <body> <center><h1>502 Bad Gateway</h1></center> <hr><center>Microsoft-Azure-Application-Gateway/v2</center> </body> </html>
Open service 2a02:26f0:3500:14::1724:a252:443 · test.purpose.onepipeline.ingapps.net
2026-01-12 05:00
HTTP/1.1 502 Bad Gateway Server: Microsoft-Azure-Application-Gateway/v2 Content-Type: text/html Content-Length: 183 Expires: Mon, 12 Jan 2026 05:00:18 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 12 Jan 2026 05:00:18 GMT Connection: close X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31622400; includeSubDomains Page title: 502 Bad Gateway <html> <head><title>502 Bad Gateway</title></head> <body> <center><h1>502 Bad Gateway</h1></center> <hr><center>Microsoft-Azure-Application-Gateway/v2</center> </body> </html>
Open service 2a02:26f0:3500:14::1724:a252:80 · test.purpose.onepipeline.ingapps.net
2026-01-12 05:00
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://test.purpose.onepipeline.ingapps.net/ Expires: Mon, 12 Jan 2026 05:00:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 12 Jan 2026 05:00:59 GMT Connection: close X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN
Open service 2.16.204.91:443 · test.purpose.onepipeline.ingapps.net
2026-01-12 05:00
HTTP/1.1 502 Bad Gateway Server: Microsoft-Azure-Application-Gateway/v2 Content-Type: text/html Content-Length: 183 Expires: Mon, 12 Jan 2026 05:00:19 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 12 Jan 2026 05:00:19 GMT Connection: close X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31622400; includeSubDomains Page title: 502 Bad Gateway <html> <head><title>502 Bad Gateway</title></head> <body> <center><h1>502 Bad Gateway</h1></center> <hr><center>Microsoft-Azure-Application-Gateway/v2</center> </body> </html>
Open service 2.16.204.91:80 · test.purpose.onepipeline.ingapps.net
2026-01-12 05:00
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://test.purpose.onepipeline.ingapps.net/ Expires: Mon, 12 Jan 2026 05:00:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 12 Jan 2026 05:00:59 GMT Connection: close X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN
Open service 2.16.204.69:80 · test.purpose.onepipeline.ingapps.net
2026-01-12 05:00
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://test.purpose.onepipeline.ingapps.net/ Expires: Mon, 12 Jan 2026 05:00:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 12 Jan 2026 05:00:59 GMT Connection: close X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN
Open service 2.17.100.218:443 · purpose.onepipeline.ingapps.net
2026-01-10 01:47
HTTP/1.1 200 OK Content-Type: text/html Request-Context: appId=cid-v1:a888e7cf-29ae-477e-bd32-f66dcef2027f Expires: Sat, 10 Jan 2026 01:47:09 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 10 Jan 2026 01:47:09 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31622400; includeSubDomains
Open service 2.17.100.218:443 · purpose.onepipeline.ingapps.net
2026-01-03 00:22
HTTP/1.1 200 OK Content-Type: text/html Request-Context: appId=cid-v1:a888e7cf-29ae-477e-bd32-f66dcef2027f Expires: Sat, 03 Jan 2026 00:22:25 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 03 Jan 2026 00:22:25 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31622400; includeSubDomains
Open service 2.17.100.218:443 · purpose.onepipeline.ingapps.net
2025-12-23 09:45
HTTP/1.1 200 OK Content-Type: text/html Request-Context: appId=cid-v1:a888e7cf-29ae-477e-bd32-f66dcef2027f Expires: Tue, 23 Dec 2025 09:45:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 23 Dec 2025 09:45:39 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31622400; includeSubDomains