Domain saphsolver.inl.gov
Software information
cloudflare
tcp/443
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-10-24 12:44
Last seen 2026-01-09 01:44
Open for 76 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d602255950999fb00f099fb00f099fb00f099fb00f0Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths: GET /healthz POST /api/Solve
Found on 2026-01-09 01:44 -
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532cPublic Swagger UI/API detected at path: /swagger/index.html
Found on 2025-12-30 07:47 -
Severity: info
Fingerprint: 5733ddf49ff49cd1aad035494d38bc2c85c042fb85c042fb85c042fb85c042fbPublic Swagger UI/API detected at path: /swagger/index.html - sample paths: GET /healthz POST /api/Solve
Found on 2025-11-22 21:34
-
-
Open service 172.65.90.27:443 ยท saphsolver.inl.gov
2026-01-23 03:01
HTTP/1.1 403 Forbidden Date: Fri, 23 Jan 2026 03:01:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cf-mitigated: challenge critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin origin-agent-cluster: ?1 permissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() server-timing: chlray;desc="9c240c8f788c2cc0" Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Set-Cookie: __cf_bm=BfOUSl1bgwznK1.ds1gEHxpwVrspXRnJVn4_vloYnN0-1769137313-1.0.1.1-bK9D6ItC09..gx.xq6xoSjnwy6WdWlE509MfKmSCc.WRvUUoUqQdARd7BY6laiX4TpDTqMhvuPCTDBf7x_bZ96yjUmDBzJMJXo0ii6b1vsU; path=/; expires=Fri, 23-Jan-26 03:31:53 GMT; domain=.inl.gov; HttpOnly; Secure; SameSite=None expect-ct: max-age=86400, enforce x-xss-protection: 1; mode=block Content-Security-Policy: frame-ancestors 'self' Referrer-Policy: strict-origin Strict-Transport-Security: max-age=31560000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9c240c8f788c2cc0-DFW alt-svc: h3=":443"; ma=86400 Page title: Just a moment... <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewport" content="width=device-width,initial-scale=1"><style>*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;padding-left:1.5rem;max-width:60rem}@media (width <= 720px){.main-content{margin-top:4rem}}.h2{line-height:2.25rem;font-size:1.5rem;font-weight:500}@media (width <= 720px){.h2{line-height:1.5rem;font-size:1.25rem}}#challenge-error-text{background-image:url("data:image/svg+xml;base64,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");background-repeat:no-repeat;background-size:contain;padding-left:34px}@media (prefers-color-scheme: dark){body{background-color:#222;color:#d9d9d9}}</style><meta http-equiv="refresh" content="360"></head><body><div class="main-wrapper" role="main"><div class="main-content"><noscript><div class="h2"><span id="challenge-error-text">Enable JavaScript and cookies to continue</span></div></noscript></div></div><script>(function(){window._cf_chl_opt = {cvId: '3',cZone: 'saphsolver.inl.gov',cType: 'managed',cRay: '9c240c8f788c2cc0',cH: 'EVvOvweFohVEt1iPzT0MzU0b7MYdJSIE8QBX9sTnW6o-1769137313-1.2.1.1-ZCDUz5b34ocZj0vzj2Mlv.gnX1yjZEEQgxFXL748Kywp8EwbPlkXn4vpt4zdSbO5',cUPMDTk:"\/?__cf_chl_tk=gJZ0_SdxQ6aRnDC8JnervEdJMWS4cVg8MfyRCqOQj2w-1769137313-1.0.1.1-rAP8j3x72GmvNaP8QCMYP7EHAiA2hK9zMh7m6UtFaWc",cFPWv: 'b',cITimeS: '1769137313',cTplC:0,cTplV:5,cTplB: '0',fa:"\/?__cf_chl_f_tk=gJZ0_SdxQ6aRnDC8JnervEdJMWS4cVg8MfyRCqOQj2w-1769137313-1.0.1.1-rAP8j3x72GmvNaP8QCMYP7EHAiA2hK9zMh7m6UtFaWc",md: 'oNGnT3G9Mqcmna6Qqu5AaDtqVVjeNxz_irushNWYays-1769137313-1.2.1.1-kttlnXgiPClMipxv7d51W4FqhRMOhM8obcwsn2E8jDWvGFzGbTkRuKGCRnuCLtDFgp443sgn2MHTidjXp.GRcFAehg706SO1dXSZHP9lUMkR3t52VMfzXco_xhtW.q0Ejn4Vkl2KKJJcEVFgEghll4y8orU_4cJTF3cn_vI3x0n16zspQNFS1J343Mk5UBFP0_gymgOuyQQBSkhf8JdjwydYih7dikgCZGT5PVG68HKIM84bXrwfq0D2ddjnoJGBc3vYIVImXN.Dcap3OlMCsanMVAIHR4aj1KX1x3DLQVZsUDvsGSgctsjB.pI4cjMlECdTS0sC3foNihxI7m27csc5R6ebo8Z5cGUYwpwNQDfHUSCHgqFlwVOvaU8GXANga9Y47UBGzrnnmGSn_N._8tLnnBVYx8msIu3I1gwGHYr.oSgPhDwQuA0qr0XRq7DpeQMemOGEVwbh7jFkWQoinextzxRJhhxqz2NoCgQWCaZf06U9Y59mTsNtrCZlXG1aP2tIg857Y9zAWQ6Zs8Q1FBp2s4.RkAJFrgbVbTySjEfCx2UlxxVwhVt8.oe3nzaqrjLBh8UrFazjtCRsrR1DwjQ8W1SatJgOOfl.oOWNnswQKm4CfDu922RpGB0q4A0pDx9aEoCQVhYKRpPryvq_h9sKyRofV3JPTjsNUBClcGnFIcr4o83rALqvWLdBXUs36gtP2Kfb10FApuPGZq9t_435bJEFUSXdneEK6zCziJrdXZUcMx_MGblHuhFyRhC5F9HsFA1hYe.lQHr4Iae9R5dgQxL5wnfNOdFcjdjtmSf_A51yLHEBYDMNKD_lNIQtoSiH4vXr18oL75c1OlvAJbkF9.wp2usvB7rh2zvQtbwrjxX2_Vq58cYChCq0DhtK.zVpOlR1E6xtmdjpUXGCgz6n_V9sa_gT2PFYzACk9wD69apd1.pHj7oGWpPAS13OmgxF_mba0N0wwyOG252EgDNoDLktgZLGH5sIlYndMag',mdrd: 'cZtGyU5uXDcui6h7Oneb4TdXCmvIjKhTe0OPJ1FcGhI-1769137313-1.2.1.1-sJBXKgkSMqnUXE5LCjd3eouCzRcMN5xYnLdzoxgyQ1PTXniDlA5bbByaTQs5MyYdfWZUQg3.9M56gx1F6CRpzRS5miuqiNfgUpTCmTZvups0TJd_apsCnHiIGsU0XZRyA3nY5LesE34EJtYbYNoMrD8QEyEy4O9b1OLKATWSs_9TqWxWaMEkQsbflBz7_zvzuzcaXbhyzUh._f7.rllgqiX7_TElBvOnUccDxEzIlr.yyeqI_pCeCJf16HFoLq4g_R2s71TCAKhYj1aNGgrB1FMjyoUoB2S5R1jSjR7WSbcr.CZn6Szvt2_TO5t_0_Q44aAz2pnH7b72Skalk5_fj61_NHwkNhGblxvAimVQujkkqnOdOMv_6LnbVu2I3pRsEEnp7O4fkgwk4eqV2fIMJFound 2026-01-23 by HttpPluginCreate report