cloudflare
tcp/443 tcp/80 tcp/8443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd110a331ecfeb9291946c215d25a932525dfde7ac11f79153f
Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
DELETE /api/cache-management/clear
DELETE /api/cache-management/clear/{cacheName}
DELETE /api/cache-management/clear/{cacheName}/{key}
DELETE /api/cache/components/types/{cpCacheDeps}
DELETE /api/seo-links/delete/bulk
DELETE /api/seo-links/type/{type}/data/{data}
GET /api/app-banner-downloads/{storeId}
GET /api/audits/entity/all
GET /api/audits/entity/changes
GET /api/audits/entity/changes/version/previous
GET /api/cache-management/get
GET /api/cache-management/get/{cacheName}
GET /api/cache-management/get/{cacheName}/key/{key}
GET /api/cache-management/key/{cacheName}
GET /api/caching/clear-cache-OLD
GET /api/caching/clear-cache-manual
GET /api/custom-multi-language/langKey/{langKey}
GET /api/custom-multi-language/language-export/langKey/{langKey}
GET /api/custom-page-languages/all/{storeId}
GET /api/custom-page-languages/{pageId}
GET /api/custom-page-languages/{storeId}/{pageId}
GET /api/custom-pages/menu/{storeId}
GET /api/custom-pages/menu/{storeId}/{id}
GET /api/custom-pages/{storeId}
GET /api/custom-pages/{storeId}/authors
GET /api/custom-pages/{storeId}/{id}
GET /api/data-cache/app-configs/store/{storeId}/client-id
GET /api/data-cache/store-multiple-currencies/store/{storeId}
GET /api/environment/properties
GET /api/environment/properties/by-key
GET /api/landing-pages
GET /api/landing-pages/{id}
GET /api/loyalty-point-settings/store/{storeId}
GET /api/management/heartbeat
GET /api/master-components/all
GET /api/master-components/get-by-type
GET /api/master-components/migrate-white-label
GET /api/master-components/search
GET /api/master-components/type-list
GET /api/master-groups
GET /api/master-groups/{id}
GET /api/master-pages
GET /api/master-pages/theme/{masterThemeId}
GET /api/master-pages/{id}
GET /api/master-themes
GET /api/master-themes/library/store/{storeId}
GET /api/master-themes/{id}
GET /api/migrate/seo-links/migrate-seo-url
GET /api/migrate/seo-links/migrate-seo-url/store/{storeId}
GET /api/open-docs
GET /api/preview/master-pages/{viewName}/themes/{themeId}/store/{storeId}
GET /api/preview/store-pages/{viewName}/themes/{themeId}/store/{storeId}
GET /api/redirect-urls/validate-src-url/{storeId}
GET /api/redirect-urls/validate-target-url/{storeId}
GET /api/redirect-urls/{storeId}
GET /api/seo-follow-index/store/{storeId}
GET /api/seo-links
GET /api/seo-links/generate-seo-link-regex
GET /api/seo-links/store/{storeId}
GET /api/seo-links/store/{storeId}/change-seo-link-language
GET /api/seo-links/store/{storeId}/mobile
GET /api/seo-links/store/{storeId}/{id}
GET /api/seo-links/validate-duplicate/store/{storeId}
GET /api/seo-links/validate/store/{storeId}
GET /api/setting-widget-popups
GET /api/setting-widget-popups/storeId/{storeId}
GET /api/setting-widget-popups/{id}
GET /api/store-pages/store/{storeId}/component-setting
GET /api/store-pages/store/{storeId}/get-current-header-menu
GET /api/store-pages/theme/{storeThemeId}
GET /api/store-themes
GET /api/store-themes/store/{storeId}
GET /api/store-themes/store/{storeId}/load-custom-page
GET /api/store-themes/store/{storeId}/load-theme
GET /api/store-themes/store/{storeId}/load-theme2
GET /api/store-themes/store/{storeId}/management
GET /api/store-themes/store/{storeId}/publish
GET /api/store-themes/store/{storeId}/transfer
GET /api/store-themes/{id}
GET /api/store/{storeId}/custom-head-body
GET /api/test
GET /api/test/add
GET /api/test/d
GET /api/test/delete
GET /api/users
GET /api/users/authorities
GET /api/users/{login:^(?>[a-zA-Z0-9!$&*+=?^_`{|}~.-]+@[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*)|(?>[_.@A-Za-z0-9-]+)$}
GET /api/ut/vs/store/{storeId}
GET /api/utils/resolve-seo-url/{langKey}
GET /api/widget-contact-channel/find-widget-by-store/{storeId}
GET /api/widget/configs/{storeId}
POST /api/activate
POST /api/app-banner-downloads
POST /api/authenticate
POST /api/create-custom-page-after-buying-language/{storeId}
POST /api/create-master-data/theme
POST /api/currency/change/store/{storeId}/user/{userId}
POST /api/custom-multi-language/langKey/{langKey}/store/{storeId}
POST /api/custom-multi-language/langKey/{langKey}/store/{storeId}/create
POST /api/custom-multi-language/upload/store/{storeId}
POST /api/landing-pages/publish
POST /api/landing-pages/un-publish/page/{pageId}
POST /api/login
POST /api/login/social/{providerId}
POST /api/logout
POST /api/preview/external-components
POST /api/preview/internal-components
POST /api/preview/store-pages/store/{storeId}
POST /api/redirect-urls/create
POST /api/redirect-urls/deletes
POST /api/reset_password
POST /api/setting-widget-popups/upsert
POST /api/store-pages/store/{storeId}
POST /api/store-pages/{storeId}/clone-from/theme-id/{masterThemeId}
POST /api/utils/schema/value
POST /api/widget-contact-channel/save-widget
PUT /api/batch/batch-store-page-platform-visible/store/{storeId}
PUT /api/change_password
PUT /api/custom-page-languages/save/{storeId}
PUT /api/preview/store-pages/store/{storeId}/custom-page/{storeThemeId}
PUT /api/seo-follow-index/upsert
PUT /api/seo-links/upsert
PUT /api/seo-links/upsert/store/{storeId}/bulk
PUT /api/store-pages/migrate-product-service-collection-list
PUT /api/store-pages/migrate-product-service-detail
PUT /api/store-pages/store/{storeId}/publish/{storePageId}
Open service 2a06:98c1:3120::3:80 · rednest.vn
2026-01-12 14:03
HTTP/1.1 301 Moved Permanently
Date: Mon, 12 Jan 2026 14:03:19 GMT
Content-Length: 0
Connection: close
Location: https://rednest.vn/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=6Fm1KlBwdVF2w0GbWK%2BFjH5sIMgKOCyl4I1303mmG1SC%2BpKkNmK4maaxjtRS2gXLrR86xVLE%2BokiyhBrIHrL8qG05hQKvkQdqK6KdxS5XSfIqhrs"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfEdge;dur=23,cfOrigin;dur=0
Server: cloudflare
CF-RAY: 9bcd32543ba05f6b-SIN
alt-svc: h3=":443"; ma=86400
Open service 2a06:98c1:3121::3:80 · rednest.vn
2026-01-12 14:03
HTTP/1.1 301 Moved Permanently
Date: Mon, 12 Jan 2026 14:03:19 GMT
Content-Length: 0
Connection: close
Location: https://rednest.vn/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CDm4aypNBlJzkaP7qySA%2FGf6MipQhrqoOGDhAogzHuRVUqibYHhKFwID5d3KLjchRX9s1JvvFwNmQogc5kzjQpbr%2Fo%2BYL%2BdplYInVUpPtYkR%2FoXmIig%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfEdge;dur=23,cfOrigin;dur=0
Server: cloudflare
CF-RAY: 9bcd32542928f408-SIN
alt-svc: h3=":443"; ma=86400
Open service 188.114.97.3:80 · rednest.vn
2026-01-12 14:03
HTTP/1.1 301 Moved Permanently
Date: Mon, 12 Jan 2026 14:03:19 GMT
Content-Length: 0
Connection: close
Location: https://rednest.vn/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=25cZfQOACxrStKHH1GwpqbxySYVRhwRqFbptNiI2OMNQvOb1%2BrK8mXsnTjSEhXqlhioqlGR5xDVhLvrk%2F%2ByOpo3zY4RVUeu%2BDKQ%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfEdge;dur=22,cfOrigin;dur=0
Server: cloudflare
CF-RAY: 9bcd32541f3e9fd1-SIN
alt-svc: h3=":443"; ma=86400
Open service 2a06:98c1:3121::3:443 · rednest.vn
2026-01-12 14:03
HTTP/1.1 530 <none> Date: Mon, 12 Jan 2026 14:03:19 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=42,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9bcd325429c68c71-EWR alt-svc: h3=":443"; ma=86400 error code: 1016
Open service 2a06:98c1:3120::3:443 · rednest.vn
2026-01-12 14:03
HTTP/1.1 530 <none> Date: Mon, 12 Jan 2026 14:03:19 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=979,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9bcd3253d98db486-SIN alt-svc: h3=":443"; ma=86400 error code: 1016
Open service 2a06:98c1:3121::3:8443 · rednest.vn
2026-01-12 14:03
HTTP/1.1 530 <none> Date: Mon, 12 Jan 2026 14:03:18 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=30,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9bcd3253791239e9-YYZ alt-svc: h3=":8443"; ma=86400 error code: 1016
Open service 2a06:98c1:3120::3:8443 · rednest.vn
2026-01-12 14:03
HTTP/1.1 530 <none> Date: Mon, 12 Jan 2026 14:03:18 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=8,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9bcd32537ec0ab7b-YYZ alt-svc: h3=":8443"; ma=86400 error code: 1016
Open service 188.114.97.3:8443 · rednest.vn
2026-01-12 14:03
HTTP/1.1 530 <none> Date: Mon, 12 Jan 2026 14:03:18 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=10,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9bcd32539dafab36-YYZ alt-svc: h3=":8443"; ma=86400 error code: 1016
Open service 188.114.97.3:443 · rednest.vn
2026-01-12 14:03
HTTP/1.1 530 <none> Date: Mon, 12 Jan 2026 14:03:18 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=7,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9bcd325399bce21a-YYZ alt-svc: h3=":443"; ma=86400 error code: 1016
Open service 104.26.14.224:443 · rednest.vn
2026-01-08 19:05
HTTP/1.1 530 <none> Date: Thu, 08 Jan 2026 19:05:12 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=4,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9badf70fa913d86d-BLR alt-svc: h3=":443"; ma=86400 error code: 1016
Open service 104.26.14.224:443 · rednest.vn
2026-01-01 19:57
HTTP/1.1 530 <none> Date: Thu, 01 Jan 2026 19:57:25 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9b7495ea9c1e1908-LHR alt-svc: h3=":443"; ma=86400 error code: 1016
Open service 104.26.14.224:443 · rednest.vn
2025-12-30 04:04
HTTP/1.1 530 <none> Date: Tue, 30 Dec 2025 04:04:03 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9b5ea6a3a8038d30-FRA alt-svc: h3=":443"; ma=86400 error code: 1016
Open service 104.26.14.224:443 · rednest.vn
2025-12-22 04:48
HTTP/1.1 530 <none> Date: Mon, 22 Dec 2025 04:48:25 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=14,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9b1cfc9f8becc452-EWR alt-svc: h3=":443"; ma=86400 error code: 1016
Open service 104.26.14.224:443 · rednest.vn
2025-12-20 04:45
HTTP/1.1 530 <none> Date: Sat, 20 Dec 2025 04:45:58 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=16,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9b0c7e4a9f7243c7-EWR alt-svc: h3=":443"; ma=86400 error code: 1016