BunnyCDN-DE1-1079
tcp/443 tcp/80
BunnyCDN-DE1-1333
tcp/443 tcp/80
nginx
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d60bbf16caa188b5e2c6cf374eeaac1bc803ce86fa4
Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths: GET /account/get-experience GET /account/get-session GET /chapter GET /dev/changelog/get-latest GET /dev/version GET /end GET /initialize GET /manage/close GET /manage/retry GET /manage/start GET /reporting/check POST /account/generate-access-token POST /account/save-experience POST /action POST /dev/changelog/set POST /manage/update POST /reporting/send POST /reporting/upload-screenshot POST /save
Open service 85.208.144.202:443 · sdk.vrcxp.com
2026-01-10 00:13
HTTP/1.1 301 Moved Permanently Server: nginx Date: Sat, 10 Jan 2026 00:13:19 GMT Content-Length: 0 Connection: close Location: index.html Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin X-Clacks-Overhead: GNU Terry Pratchett
Open service 2400:52e0:1e00:2::1333:1:443 · sdk.vrcxp.com
2026-01-08 16:24
HTTP/1.1 301 Moved Permanently Date: Thu, 08 Jan 2026 16:24:06 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1333 CDN-PullZone: 5120048 CDN-RequestCountryCode: CA Location: index.html x-envoy-upstream-service-time: 1 CDN-ProxyVer: 1.43 CDN-RequestPullCode: 301 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1054 CDN-CachedAt: 01/08/2026 16:24:03 CDN-Status: 301 CDN-RequestTime: 0 CDN-RequestId: 16c7c8bc371e4854e0321c7db30f6067 CDN-Cache: HIT
Open service 2400:52e0:1e00:2::1333:1:80 · sdk.vrcxp.com
2026-01-08 16:24
HTTP/1.1 301 Moved Permanently Date: Thu, 08 Jan 2026 16:24:06 GMT Content-Type: text/html Content-Length: 166 Connection: close Server: BunnyCDN-DE1-1333 CDN-PullZone: 5120048 CDN-RequestCountryCode: CA Location: https://sdk.vrcxp.com/ CDN-RequestId: 9d016a79a77ea92ddd36f2912cee5fe2 CDN-RequestTime: 0 Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>openresty</center> </body> </html>
Open service 169.150.247.36:80 · sdk.vrcxp.com
2026-01-08 16:24
HTTP/1.1 301 Moved Permanently Date: Thu, 08 Jan 2026 16:24:05 GMT Content-Type: text/html Content-Length: 166 Connection: close Server: BunnyCDN-DE1-1079 CDN-PullZone: 5120048 CDN-RequestCountryCode: CA Location: https://sdk.vrcxp.com/ CDN-RequestId: 877cf2bddf208f6d6059e0765331dbbe CDN-RequestTime: 0 Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>openresty</center> </body> </html>
Open service 169.150.247.36:443 · sdk.vrcxp.com
2026-01-08 16:24
HTTP/1.1 301 Moved Permanently Date: Thu, 08 Jan 2026 16:24:05 GMT Content-Length: 0 Connection: close Server: BunnyCDN-DE1-1079 CDN-PullZone: 5120048 CDN-RequestCountryCode: CA Location: index.html x-envoy-upstream-service-time: 1 CDN-ProxyVer: 1.43 CDN-RequestPullCode: 301 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1054 CDN-CachedAt: 01/08/2026 16:24:03 CDN-Status: 301 CDN-RequestTime: 0 CDN-RequestId: 5cbafde7914e77b5be286465c9bf2ee0 CDN-Cache: HIT
Open service 85.208.144.202:443 · sdk.vrcxp.com
2026-01-02 20:08
HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 02 Jan 2026 20:08:45 GMT Content-Length: 0 Connection: close Location: index.html Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin X-Clacks-Overhead: GNU Terry Pratchett
Open service 85.208.144.202:443 · sdk.vrcxp.com
2025-12-23 08:29
HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 23 Dec 2025 08:29:29 GMT Content-Length: 0 Connection: close Location: index.html Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin X-Clacks-Overhead: GNU Terry Pratchett