nginx 1.14.0
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 3.216.42.100:443 · select.axi.com
2026-01-23 08:49
HTTP/1.1 302 Found Server: nginx/1.14.0 (Ubuntu) Date: Fri, 23 Jan 2026 08:49:51 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Location: /v2/app Vary: Accept, Accept-Encoding Set-Cookie: connect.sid=s%3AK5ktmZeox10jr9JL0Nn0JkIE1MOh23sl.ZsK48RDRDEYeXAmXv3vVvxtZ%2BT8G6%2B61OPkekoGCZ7k; Path=/; HttpOnly Found. Redirecting to /v2/app
Open service 3.216.42.100:443 · select.axi.com
2026-01-09 07:38
HTTP/1.1 302 Found Server: nginx/1.14.0 (Ubuntu) Date: Fri, 09 Jan 2026 07:38:45 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Location: /v2/app Vary: Accept, Accept-Encoding Set-Cookie: connect.sid=s%3AgOUM2EuxooldpbsHFNKxj1kDpvaDGarZ.ySOIX4DudiFFn9nwxRbKq%2FlA0Oshs4T%2B6fN4Dd6eBdA; Path=/; HttpOnly Found. Redirecting to /v2/app
Open service 3.216.42.100:80 · select.axi.com
2026-01-08 12:01
HTTP/1.1 301 Moved Permanently Server: nginx/1.14.0 (Ubuntu) Date: Thu, 08 Jan 2026 12:01:10 GMT Content-Type: text/html Content-Length: 194 Connection: close Location: https://select.axi.com/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body bgcolor="white"> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx/1.14.0 (Ubuntu)</center> </body> </html>
Open service 3.216.42.100:443 · select.axi.com
2026-01-08 12:01
HTTP/1.1 302 Found Server: nginx/1.14.0 (Ubuntu) Date: Thu, 08 Jan 2026 12:01:10 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Location: /v2/app Vary: Accept, Accept-Encoding Set-Cookie: connect.sid=s%3A0W0A3inT4JVt1uQjvABBqmmURDO7HIBs.aapFNygMdsYtm25Q5pI%2BimYwZhN7j9AN0XnGcF7rqC0; Path=/; HttpOnly Found. Redirecting to /v2/app
Open service 3.216.42.100:443 · select.axi.com
2026-01-02 13:42
HTTP/1.1 302 Found Server: nginx/1.14.0 (Ubuntu) Date: Fri, 02 Jan 2026 13:42:48 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Location: /v2/app Vary: Accept, Accept-Encoding Set-Cookie: connect.sid=s%3AUEXNbS576-Kh0QR5wm-nV1g6hICeKjvU.4t%2BOqgfFnpb5TPCTeGB9w1590ERJc%2F8xobw1ssbQ3Kw; Path=/; HttpOnly Found. Redirecting to /v2/app
Open service 3.216.42.100:443 · select.axi.com
2025-12-22 20:08
HTTP/1.1 302 Found Server: nginx/1.14.0 (Ubuntu) Date: Mon, 22 Dec 2025 20:08:40 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 29 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Location: /v2/app Vary: Accept, Accept-Encoding Set-Cookie: connect.sid=s%3A9s_kP5JuHP4zUNzs3pByTVtEZ2z9CbcT.GrsEuftHq%2F%2BmDXmMuTIzEu0%2FHQ%2Be8erpq9SuSla7yKQ; Path=/; HttpOnly Found. Redirecting to /v2/app