cloudflare
tcp/443 tcp/80 tcp/8443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 172.67.206.84:443 · sagheavyequipment.com
2026-01-25 16:42
HTTP/1.1 200 OK
Date: Sun, 25 Jan 2026 16:42:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=K7BkO24eC6RiRufawUpJPTPwkSm%2Fq%2BaHotAfvYx%2F2pz%2BnG22rdkQMwkLxdNpFQyyiGQFksOrc9AK1dwdWDnrlVOaJXAJMuJKOloDP9wN2oLUAkMsPA%3D%3D"}]}
Server: cloudflare
Set-Cookie: october_session=eyJpdiI6InFTaDRTdWJlTEhiRFdEbVBVaVZpK3c9PSIsInZhbHVlIjoiVGxOTU5TdEptVExWY3dITmJlc3ZDUE9MdmRBeVNkODVXSDJDRFMyVTAyWGQxM0wzTXl6YlJ3bDVURi82NEE2dEk1RlJUQ2syUnpXV3krZzhHM29tQjBKVzVqU01yYU1vZ05mYkp6RE1YTVR2L1dzSDBpQ1krNGxwb0cwYkFXcDciLCJtYWMiOiIzZTBlZTQwNmQ2MjI1MTdiZjIyNzIwN2VmZjEzZjE4NzUyZDAzODRmOTdiMzY0NGQwZmY0ODU5ODdmMDgyNmViIiwidGFnIjoiIn0%3D; expires=Sun, 25 Jan 2026 18:42:43 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Vary: Accept-Encoding
X-Powered-By: PHP/8.1.31
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=11,cfOrigin;dur=541
CF-RAY: 9c3939b0cb52cdd5-SIN
alt-svc: h3=":443"; ma=86400
Open service 2606:4700:3033::ac43:ce54:80 · sagheavyequipment.com
2026-01-25 16:42
HTTP/1.1 200 OK
Date: Sun, 25 Jan 2026 16:42:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=287qUB3Mujhqu2ndDAyACXnSmLFs%2FPhkYzKN4teAZNghYN0iKBQhN9mmadZv7izC1YV2Ph4jYHCngHCjzG3BUyUwGXCITODDrOH7%2FN%2BrQn4kepHHrbL3EXULLKxf1fyCkQ%3D%3D"}]}
Server: cloudflare
Set-Cookie: october_session=eyJpdiI6IlA4SkhVUGxlWnU3bmtVTmY3VmVyNGc9PSIsInZhbHVlIjoidjJHRkJRYmdrcnJFWDErQWRyUEwyaWhLK01SbGpqZm50MTFEaG0wNlZ4d2ZZbGh6ajRIa1R4K0F3VFAxalRwVHE0ZjFkV09RQVp2c0FwU2dXbUtsTlN3Q1FSZmVrQ0NUQUFIMll3bklKeGJRZ05zNVFqVk01QVB5b2tscllPZ0QiLCJtYWMiOiI1YzJlNDY5ZTkxMmM2MDVjODg3N2M0NTEzMzhiZjZjOTNhZDg3MWI2OGJiY2E4ODEzODk0YTk1YmY2NTE0MTVjIiwidGFnIjoiIn0%3D; expires=Sun, 25 Jan 2026 18:42:42 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Vary: Accept-Encoding
X-Powered-By: PHP/8.1.31
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=11,cfOrigin;dur=149
CF-RAY: 9c3939ae7cf93493-SJC
alt-svc: h3=":443"; ma=86400
Open service 2606:4700:3031::6815:f95:80 · sagheavyequipment.com
2026-01-25 16:42
HTTP/1.1 200 OK
Date: Sun, 25 Jan 2026 16:42:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=o44PbeDeB4uv2q3g5JLuPkl3F%2B1WDrfRNflcp1lBnL2VT8qJ%2FmVhrevox6cSNS2os%2FQqICzwXSKBjCymFPJpM74qBod8yikJ6MpKcRS4Fg7VktAN5vZ%2FnQ6qtzE2tC6xiA%3D%3D"}]}
Server: cloudflare
Set-Cookie: october_session=eyJpdiI6IkxoN0cydlBxcXFka1pxS3pjZE5WM1E9PSIsInZhbHVlIjoiN3ZzRm1NVUVnSHpPTmltWmNTUCtTbDZmMTZKK1B2S08yTzUycXBQaEhEVC82Tnl4U0lLT2hia2pBeW5XOW1TdlpVL3VHdUQ5dnpzNmp1cmh4T3hZUmo2RTVDWjRtbTJ5N09USFVnYXpsdTVTWnFWb1dZQzJiUlREZDFLOXdicS8iLCJtYWMiOiJmMzg2MGFiMWRjMDYzNmVmYmM3OWZiNmRiMGZmMTFiNTBkNzFmYmU2YmZlYWYzY2RiNmZkODBlOGVkNjU4NWZjIiwidGFnIjoiIn0%3D; expires=Sun, 25 Jan 2026 18:42:42 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Vary: Accept-Encoding
X-Powered-By: PHP/8.1.31
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=14,cfOrigin;dur=263
CF-RAY: 9c3939af7d9c39ed-YYZ
alt-svc: h3=":443"; ma=86400
Open service 2606:4700:3031::6815:f95:443 · sagheavyequipment.com
2026-01-25 16:42
HTTP/1.1 200 OK
Date: Sun, 25 Jan 2026 16:42:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=G2B3ICFrC3jMt6hIOVKHWMswpBZlmhyRB5eDj8nYRIW9U%2B5rIaEsT%2FTT9ilD2Sakf8YHPMoAOI%2FmK8ug7ZqdT7vOIbiwDjlInNu%2FmsK903twANKxdLWe4Ro7Kro8go76Dw%3D%3D"}]}
Server: cloudflare
Set-Cookie: october_session=eyJpdiI6IlhyQjBEUHBhWFNHaFlVK0lWWEExMVE9PSIsInZhbHVlIjoiUEg3KzMwVVRvYnU3WExHNXg0eGpGU0M5WWZoK01UZVBEV1lvb2FHemFzM3BuNjV4cEl2SXFITHZLWHdmQjhmcnFjaEo5eFZ2cGNLOXhWcjNZTWRvMWhQclJHSXhCUEh3Y0xrM3VqMjViTWtFMnFtNkpFM0VSbHhDeE1KVXYzaXEiLCJtYWMiOiIzNmQ4YWY4MjUxOTUwZDgzYzY1Mzk0YzNlZDU1Y2ExMDYxYjUzOWQzYTVjNjRkYzZlMTMwZWI1YWQ5YWQ4NTQwIiwidGFnIjoiIn0%3D; expires=Sun, 25 Jan 2026 18:42:42 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Vary: Accept-Encoding
X-Powered-By: PHP/8.1.31
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=11,cfOrigin;dur=256
CF-RAY: 9c3939af1fbd0c69-YYZ
alt-svc: h3=":443"; ma=86400
Open service 104.21.15.149:80 · sagheavyequipment.com
2026-01-25 16:42
HTTP/1.1 200 OK
Date: Sun, 25 Jan 2026 16:42:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=BeYKSop%2BqLg%2FxDXWQ8Z5oKyuZ%2BNXaCILFwbGsR6UwaLwl8xPrs4fZiwFWsqYo7PMfQzFasPIeszpMn%2Bne%2BTyK2YrFxdGvQ4wtevw31fDwIOOC3uijg%3D%3D"}]}
Server: cloudflare
Set-Cookie: october_session=eyJpdiI6InZsRXJUcjVuam1IMllZcHg0Rk8ySlE9PSIsInZhbHVlIjoiVE0wekRYdHV1T2JhRjJuYlVrdW9JdXozMnNzdGkxZ0Q4aVYwa2taNStsOGdmblRrWnI4bldEYmZWdkpCUS9UMUE3VWF5emIvR2ZEUG9NUTR4WlZ0MUNuN2JaVDhFTGU3V2pxYzIwRERYcEVGaE5la2V1bWVULzIydWFYWnF6RisiLCJtYWMiOiJkYmEwMGRhZGI0ZDBmNTRhZjQwZDMxNmQ1NjA5MGU4MGM0YjU2YWQzNmE3Mjc3OTFmMGU1ZmIwZjFjZWU1MzFjIiwidGFnIjoiIn0%3D; expires=Sun, 25 Jan 2026 18:42:42 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Vary: Accept-Encoding
X-Powered-By: PHP/8.1.31
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=20,cfOrigin;dur=283
CF-RAY: 9c3939af1968423f-EWR
alt-svc: h3=":443"; ma=86400
Open service 104.21.15.149:443 · sagheavyequipment.com
2026-01-25 16:42
HTTP/1.1 200 OK
Date: Sun, 25 Jan 2026 16:42:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=4FrrEBIpXGE0SH250fHvUR9eKUQxA2HB08IH7JCPXCYMpx46dz0a284X4HA1bj406a0CPB%2FgEt9gVFzFCfmOyslxwKMzMSQaIVZ3QWRfasG6IAFIHw%3D%3D"}]}
Server: cloudflare
Set-Cookie: october_session=eyJpdiI6Im9jUXEyR3NZMDM2bzk2RThtVVVJekE9PSIsInZhbHVlIjoiSUhBbHFVRnZnNTU0MnM4NmVrb1EyUkpQc3JWV3E0Vm9TbXdXL3VLT1JCeHVpZTR5UXJmYXNaNUZEaWJjbVVOM2xadENacE5CbHh6dHN4aDdCVFMvTGtYYzJtcjRPQ3k0azNRVTQ3K0RRNTNHU0hQeFhQNzVJUVdKY01wMHYvbTciLCJtYWMiOiI3YWFlMDZlZDE1NTZlYWQ3ZjRjYTAyZGY5MzkyZGE5ODZkZjk5Nzg5MjZiNzcxOTZjMjY1ZjU0ODE0NzVhMjgyIiwidGFnIjoiIn0%3D; expires=Sun, 25 Jan 2026 18:42:42 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Vary: Accept-Encoding
X-Powered-By: PHP/8.1.31
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=7,cfOrigin;dur=276
CF-RAY: 9c3939afaec51b58-EWR
alt-svc: h3=":443"; ma=86400
Open service 172.67.206.84:80 · sagheavyequipment.com
2026-01-25 16:42
HTTP/1.1 200 OK
Date: Sun, 25 Jan 2026 16:42:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ygU4Bf58b80qnwDP%2Bl7qVCGln6aoVKZQWPVV1YfV94SsZxyF%2FLuB4FqsbyzgpBAgzYplFPBTUzg4L2%2BMmALrAmaMHb4RLb0MktZMrVp15LsvxCp21Q%3D%3D"}]}
Server: cloudflare
Set-Cookie: october_session=eyJpdiI6ImVQM0k2QWdNMElTTmp0K0JiazFQbXc9PSIsInZhbHVlIjoibFJxOHJEYTJ1Y1lhT2QyTGV1TzVMRkRpRTVnMVgwMHFadGNTNi9wNWd2OUpYQjVuTitzdW9wNzNWaE4yaFF0cTlxTDZ1djc0UXNBUHpIazJ3dzBpbG1yMVlsYkV4R2VuSmxnTzBiVlJYKzFPNVF6bk5DVUFkSHpGTzlRMlFnbEQiLCJtYWMiOiIwNDY4MmUzNTE1YjM5YmFhY2JhNWY1Y2E1MzliNjIxMzZiMjc3NDQ2NjQ3N2E5YTcxZTZjOGUyNTdhM2Q2ZWI3IiwidGFnIjoiIn0%3D; expires=Sun, 25 Jan 2026 18:42:42 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Vary: Accept-Encoding
X-Powered-By: PHP/8.1.31
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=9,cfOrigin;dur=307
CF-RAY: 9c3939af4e9bf7ee-EWR
alt-svc: h3=":443"; ma=86400
Open service 104.21.15.149:8443 · sagheavyequipment.com
2026-01-25 16:42
HTTP/1.1 521 <none> Date: Sun, 25 Jan 2026 16:42:42 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9c3939add8d32cb3-AMS alt-svc: h3=":8443"; ma=86400 error code: 521
Open service 2606:4700:3031::6815:f95:8443 · sagheavyequipment.com
2026-01-25 16:42
HTTP/1.1 521 <none> Date: Sun, 25 Jan 2026 16:42:44 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9c3939addf7a943d-LHR alt-svc: h3=":8443"; ma=86400 error code: 521
Open service 2606:4700:3033::ac43:ce54:443 · sagheavyequipment.com
2026-01-25 16:42
HTTP/1.1 200 OK
Date: Sun, 25 Jan 2026 16:42:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache, private
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VUgWcSCFbD%2Fcjd3EsBIXLjMQXUG6K3p5po3JldnduETbnJjq0DMWNb%2BOZiySDRJYEcUNVyMf%2FQbLkEC%2F2j23Cu%2BLQ3Qb17sVwKiNld%2Fa%2BQTWFIBIVybHuAlzcholT5jUpg%3D%3D"}]}
Server: cloudflare
Set-Cookie: october_session=eyJpdiI6ImtPYjQ1UzhzVmdtSVhoQk0xWk91TVE9PSIsInZhbHVlIjoiNGNyWnNWY3l3anZOV0xoN3NpOHF1U3BpK00vUkx4U1BDbUx4ZWg4TEJ0L3hRdk1qc3NZZXdXR2xXRTFkaEZkZU5FWFB3UlJjM1BIVjRCWTFzMlo5SUFsYyt3OERkQkhvV1kzdk5BR3BpOVU0UlNCZkw4eWd1TFcxMlRPZmdUeWgiLCJtYWMiOiJlNWQxNDljMDM3NmQ1YjM2NjI5MDZkZTdkZWU3MzM1MDg2OTc1NGU1NTIwMDgzNGIwMjZmNTQ4NDY1YjMxODY2IiwidGFnIjoiIn0%3D; expires=Sun, 25 Jan 2026 18:42:42 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Vary: Accept-Encoding
X-Powered-By: PHP/8.1.31
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
CF-RAY: 9c3939afc80bd272-FRA
alt-svc: h3=":443"; ma=86400
Open service 2606:4700:3033::ac43:ce54:8443 · sagheavyequipment.com
2026-01-25 16:42
HTTP/1.1 521 <none> Date: Sun, 25 Jan 2026 16:42:42 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9c3939adddfa973b-FRA alt-svc: h3=":8443"; ma=86400 error code: 521
Open service 172.67.206.84:8443 · sagheavyequipment.com
2026-01-25 16:42
HTTP/1.1 521 <none> Date: Sun, 25 Jan 2026 16:42:42 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9c3939addfd21e26-FRA alt-svc: h3=":8443"; ma=86400 error code: 521
Open service 104.238.34.252:443 · chat.sagheavyequipment.com
2026-01-23 11:30
HTTP/1.1 200 OK Access-Control-Allow-Origin: * Content-Security-Policy: default-src 'self' ; connect-src *; font-src 'self' data:; frame-src *; img-src * data: blob:; media-src * data:; script-src 'self' 'unsafe-eval' 'sha256-jqxtvDkBbRAl9Hpqv68WdNOieepg8tJSYu1xIy7zT34=' 'sha256-aui5xYk3Lu1dQcnsPlNZI+qDTdfzdUv3fzsw80VLJgw=' ; style-src 'self' 'unsafe-inline' Content-Type: text/html; charset=utf-8 Date: Fri, 23 Jan 2026 11:30:51 GMT Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Instance-Id: ff9be730-1023-4f03-a7fa-c721db3201d7 X-Powered-By: Express X-Xss-Protection: 1 Connection: close Transfer-Encoding: chunked