Domain requests.sonicflea.dev
Germany
Software information
BunnyCDN-DE1-874
tcp/443 tcp/80
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-10-31 05:10
Last seen 2026-01-09 20:05
Open for 70 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109Public Swagger UI/API detected at path: /api-docs/swagger.json
Found on 2026-01-09 20:05
-
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-10-31 05:10
Last seen 2026-01-09 20:01
Open for 70 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109Public Swagger UI/API detected at path: /api-docs/swagger.json
Found on 2026-01-09 20:01
-
-
Open service 138.199.37.232:80 · requests.sonicflea.dev
2026-01-09 20:05
HTTP/1.1 307 Temporary Redirect Date: Fri, 09 Jan 2026 20:05:26 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-874 CDN-PullZone: 3540767 CDN-RequestCountryCode: US Cache-Control: no-cache Location: /login Via: 2.0 Caddy Strict-Transport-Security: max-age=315360000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Powered-By: Express X-XSS-Protection: 1; mode=block CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 307 CDN-CachedAt: 01/09/2026 20:05:26 CDN-EdgeStorageId: 1334 CDN-RequestId: 7b8e4dff84fc6e5efdf49dc10f56716d CDN-Cache: MISS CDN-Status: 307 CDN-RequestTime: 0
Found 3 days ago by HttpPluginCreate report
-
Open service 138.199.37.232:443 · requests.sonicflea.dev
2026-01-09 20:01
HTTP/1.1 307 Temporary Redirect Date: Fri, 09 Jan 2026 20:01:46 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-874 CDN-PullZone: 3540767 CDN-RequestCountryCode: US Cache-Control: no-cache Location: /login Via: 2.0 Caddy Strict-Transport-Security: max-age=315360000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Powered-By: Express X-XSS-Protection: 1; mode=block CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 307 CDN-CachedAt: 01/09/2026 20:01:46 CDN-EdgeStorageId: 1334 CDN-RequestId: 59cb4c8a07dd4e19998390ba6a32a178 CDN-Cache: MISS CDN-Status: 307 CDN-RequestTime: 0
Found 3 days ago by HttpPluginCreate report
-
Open service 138.199.37.232:443 · requests.sonicflea.dev
2026-01-02 17:57
HTTP/1.1 307 Temporary Redirect Date: Fri, 02 Jan 2026 17:57:28 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-874 CDN-PullZone: 3540767 CDN-RequestCountryCode: US Cache-Control: no-cache Location: /login Via: 2.0 Caddy Strict-Transport-Security: max-age=315360000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Powered-By: Express X-XSS-Protection: 1; mode=block CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 307 CDN-CachedAt: 01/02/2026 17:57:28 CDN-EdgeStorageId: 1334 CDN-RequestId: 2efb7cc3aaf66022ab746707ba42c483 CDN-Cache: MISS CDN-Status: 307 CDN-RequestTime: 0
Found 2026-01-02 by HttpPluginCreate report
-
Open service 138.199.37.232:80 · requests.sonicflea.dev
2026-01-02 17:52
HTTP/1.1 307 Temporary Redirect Date: Fri, 02 Jan 2026 17:52:36 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-874 CDN-PullZone: 3540767 CDN-RequestCountryCode: US Cache-Control: no-cache Location: /login Via: 2.0 Caddy Strict-Transport-Security: max-age=315360000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Powered-By: Express X-XSS-Protection: 1; mode=block CDN-ProxyVer: 1.43 CDN-RequestPullSuccess: True CDN-RequestPullCode: 307 CDN-CachedAt: 01/02/2026 17:52:36 CDN-EdgeStorageId: 1334 CDN-RequestId: 7c729c7a806c5020e0e30ebdea2e282b CDN-Cache: MISS CDN-Status: 307 CDN-RequestTime: 0
Found 2026-01-02 by HttpPluginCreate report
-
Open service 138.199.37.232:80 · requests.sonicflea.dev
2025-12-23 03:00
HTTP/1.1 307 Temporary Redirect Date: Tue, 23 Dec 2025 03:00:53 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-874 CDN-PullZone: 3540767 CDN-RequestCountryCode: SG Cache-Control: no-cache Location: /login Via: 2.0 Caddy Strict-Transport-Security: max-age=315360000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Powered-By: Express X-XSS-Protection: 1; mode=block CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 307 CDN-CachedAt: 12/23/2025 03:00:53 CDN-EdgeStorageId: 1334 CDN-RequestId: 33018139c81568e9b30b76a5d489ee9b CDN-Cache: MISS CDN-Status: 307 CDN-RequestTime: 0
Found 2025-12-23 by HttpPluginCreate report
-
Open service 138.199.37.232:443 · requests.sonicflea.dev
2025-12-20 13:14
HTTP/1.1 307 Temporary Redirect Date: Sat, 20 Dec 2025 13:14:47 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-874 CDN-PullZone: 3540767 CDN-RequestCountryCode: DE Cache-Control: no-cache Location: /login Via: 2.0 Caddy Strict-Transport-Security: max-age=315360000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Powered-By: Express X-XSS-Protection: 1; mode=block CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 307 CDN-CachedAt: 12/20/2025 13:14:47 CDN-EdgeStorageId: 1334 CDN-RequestId: f8e9ab02f1d16b2fb60c128e654794e2 CDN-Cache: MISS CDN-Status: 307 CDN-RequestTime: 0
Found 2025-12-20 by HttpPluginCreate report
-
Open service 138.199.37.232:80 · requests.sonicflea.dev
2025-12-20 12:48
HTTP/1.1 307 Temporary Redirect Date: Sat, 20 Dec 2025 12:48:11 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-874 CDN-PullZone: 3540767 CDN-RequestCountryCode: DE Cache-Control: no-cache Location: /login Via: 2.0 Caddy Strict-Transport-Security: max-age=315360000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Powered-By: Express X-XSS-Protection: 1; mode=block CDN-ProxyVer: 1.41 CDN-RequestPullSuccess: True CDN-RequestPullCode: 307 CDN-CachedAt: 12/20/2025 12:48:11 CDN-EdgeStorageId: 1334 CDN-RequestId: fd4e60be6340cea4b225781f1ad2aae5 CDN-Cache: MISS CDN-Status: 307 CDN-RequestTime: 0
Found 2025-12-20 by HttpPluginCreate report