Domain staging.codecombat.cn
China
Software information
Tengine
tcp/443
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-10-20 20:02
Last seen 2026-02-09 16:16
Open for 111 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109Public Swagger UI/API detected at path: /api-docs/swagger.json
Found on 2026-02-09 16:16
-
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-10-20 20:02
Last seen 2026-01-16 14:36
Open for 87 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109Public Swagger UI/API detected at path: /api-docs/swagger.json
Found on 2026-01-16 14:36
-
-
Open service 114.80.179.170:443 · staging.codecombat.cn
2026-01-23 07:33
HTTP/1.1 200 OK Server: Tengine Content-Type: text/html; charset=utf-8 Content-Length: 4990 Connection: close Date: Fri, 23 Jan 2026 07:33:13 GMT Vary: Accept-Encoding X-Powered-By: Express X-Cluster-ID: app-server-server-56bb746599-fjctv/2 ETag: W/"137e-s3JcM/AnZ7CjfoDHn1DERMGff3w" Set-Cookie: codecombat.sess=eyJwYXNzcG9ydCI6e319; path=/; samesite=none; secure; httponly Set-Cookie: codecombat.sess.sig=mRrFN-1Q83MpSFEy9Joi80pGruE; path=/; samesite=none; secure; httponly Vary: Accept-Encoding Via: ens-cache27.l2nm125-7[30,0], cache6.cn3259[61,0] X-Robots-Tag: noindex, nofollow Timing-Allow-Origin: * EagleId: 7250b39a17691535932345771e Page title: 扣哒世界|CodeCombat中国|AI世青赛|少儿编程等级认证 <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover" data-vue-meta="true" data-vmid="viewport"><meta http-equiv="Accept-CH" content="Viewport-Width"><title data-i18n="new_home.title_coco">扣哒世界|CodeCombat中国|AI世青赛|少儿编程等级认证</title><meta name="keywords" data-i18n="[content]new_home.meta_keywords_coco" content="扣哒世界, 青少年编程, 少儿编程, 信息学奥赛, CodeCombat官网,CodeCombat中文,游戏化编程,AI世青赛,信息学奥赛,奥佳睿,CodeCombat中国"><meta name="description" data-i18n="[content]new_home.meta_description_coco" content="扣哒世界是教育部白名单赛事平台，信奥CSP-J/S学习平台，AI世青赛、图灵计划和Code Quest官方竞赛平台，支持Python, C++, JavaScript。"><meta property="og:description" data-i18n="[content]new_home.meta_description_coco" content="扣哒世界是教育部白名单赛事平台，信奥CSP-J/S学习平台，AI世青赛、图灵计划和Code Quest官方竞赛平台，支持Python, C++, JavaScript。"><meta property="og:url" data-i18n="[content]new_home.meta_og_url" content="https://koudashijie.com"><meta property="og:type" content="game"><meta property="og:image" content="https://codecombat.com/images/pages/home/play_img.png"><meta property="og:image:alt" content="CodeCombat"><meta property="og:site_name" content="CodeCombat"><meta name="twitter:card" content="summary"><meta name="twitter:title" content="CodeCombat: Learn to Code by Playing a Game"><meta name="twitter:url" content="https://codecombat.com"><meta name="twitter:site" content="CodeCombat"><meta name="twitter:image:src" content="http://codecombat.com/images/pages/base/logo_square_250.png"><meta name="twitter:description" content="Learn programming with a multiplayer live coding strategy game for beginners. Learn Python or JavaScript as you defeat ogres, solve mazes, and level up. Open source HTML5 game!"><meta name="p:domain_verify" content="f5afcb2c36bb8b1cbd70c44b65e5ec75"><meta name="fb:app_id" content="148832601965463"><link rel="apple-touch-icon" sizes="180x180" href="/images/favicon/favicon-coco/apple-touch-icon.png"><link rel="icon" type="image/png" sizes="32x32" href="/images/favicon/favicon-coco/favicon-32x32.png"><link rel="icon" type="image/png" sizes="16x16" href="/images/favicon/favicon-coco/favicon-16x16.png"><link rel="mask-icon" href="/images/favicon/favicon-coco/safari-pinned-tab.svg" color="#5bbad5"><link rel="shortcut icon" href="/images/favicon/favicon-coco/favicon.ico"><meta name="msapplication-TileColor" content="#da532c"><meta name="msapplication-config" content="/images/favicon/favicon-coco/browserconfig.xml"><meta name="facebook-domain-verification" content="xbahpe1at906kptbtd1g1w19ktlyru"><link rel="manifest" href="/images/favicon/favicon-coco/manifest.json"><link rel="stylesheet" href="/slug-2026-01-22-12-08-37/stylesheets/app.css"><script>var product="codecombat"</script><script>window.javascriptsPath="/slug-2026-01-22-12-08-37/javascripts/"</script><script src="/slug-2026-01-22-12-08-37/javascripts/app.js" defer async data-ace-base="/javascripts/ace"></script><script src="/user-data?sha=slug-2026-01-22-12-08-37"></script><script>window.document.cookie="shaTagVal=slug-2026-01-22-12-08-37;path=/;"</script><script>var bdKey="codecombat"==p
Found 2026-01-23 by HttpPluginCreate report
-
Open service 114.80.179.170:443 · staging.codecombat.cn
2026-01-09 11:14
HTTP/1.1 200 OK Server: Tengine Content-Type: text/html; charset=utf-8 Content-Length: 4990 Connection: close Date: Fri, 09 Jan 2026 11:14:59 GMT Vary: Accept-Encoding X-Powered-By: Express X-Cluster-ID: app-server-server-7cb69dd7d5-khlmj/1 ETag: W/"137e-Wi9kTiHR4HS9dYAgBMY8WSrGeJY" Set-Cookie: codecombat.sess=eyJwYXNzcG9ydCI6e319; path=/; samesite=none; secure; httponly Set-Cookie: codecombat.sess.sig=mRrFN-1Q83MpSFEy9Joi80pGruE; path=/; samesite=none; secure; httponly Vary: Accept-Encoding Via: ens-cache56.l2nm125-7[29,0], cache2.cn3259[58,0] X-Robots-Tag: noindex, nofollow Timing-Allow-Origin: * EagleId: 7250b39617679572994664788e Page title: 扣哒世界|CodeCombat中国|AI世青赛|少儿编程等级认证 <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover" data-vue-meta="true" data-vmid="viewport"><meta http-equiv="Accept-CH" content="Viewport-Width"><title data-i18n="new_home.title_coco">扣哒世界|CodeCombat中国|AI世青赛|少儿编程等级认证</title><meta name="keywords" data-i18n="[content]new_home.meta_keywords_coco" content="扣哒世界, 青少年编程, 少儿编程, 信息学奥赛, CodeCombat官网,CodeCombat中文,游戏化编程,AI世青赛,信息学奥赛,奥佳睿,CodeCombat中国"><meta name="description" data-i18n="[content]new_home.meta_description_coco" content="扣哒世界是教育部白名单赛事平台，信奥CSP-J/S学习平台，AI世青赛、图灵计划和Code Quest官方竞赛平台，支持Python, C++, JavaScript。"><meta property="og:description" data-i18n="[content]new_home.meta_description_coco" content="扣哒世界是教育部白名单赛事平台，信奥CSP-J/S学习平台，AI世青赛、图灵计划和Code Quest官方竞赛平台，支持Python, C++, JavaScript。"><meta property="og:url" data-i18n="[content]new_home.meta_og_url" content="https://koudashijie.com"><meta property="og:type" content="game"><meta property="og:image" content="https://codecombat.com/images/pages/home/play_img.png"><meta property="og:image:alt" content="CodeCombat"><meta property="og:site_name" content="CodeCombat"><meta name="twitter:card" content="summary"><meta name="twitter:title" content="CodeCombat: Learn to Code by Playing a Game"><meta name="twitter:url" content="https://codecombat.com"><meta name="twitter:site" content="CodeCombat"><meta name="twitter:image:src" content="http://codecombat.com/images/pages/base/logo_square_250.png"><meta name="twitter:description" content="Learn programming with a multiplayer live coding strategy game for beginners. Learn Python or JavaScript as you defeat ogres, solve mazes, and level up. Open source HTML5 game!"><meta name="p:domain_verify" content="f5afcb2c36bb8b1cbd70c44b65e5ec75"><meta name="fb:app_id" content="148832601965463"><link rel="apple-touch-icon" sizes="180x180" href="/images/favicon/favicon-coco/apple-touch-icon.png"><link rel="icon" type="image/png" sizes="32x32" href="/images/favicon/favicon-coco/favicon-32x32.png"><link rel="icon" type="image/png" sizes="16x16" href="/images/favicon/favicon-coco/favicon-16x16.png"><link rel="mask-icon" href="/images/favicon/favicon-coco/safari-pinned-tab.svg" color="#5bbad5"><link rel="shortcut icon" href="/images/favicon/favicon-coco/favicon.ico"><meta name="msapplication-TileColor" content="#da532c"><meta name="msapplication-config" content="/images/favicon/favicon-coco/browserconfig.xml"><meta name="facebook-domain-verification" content="xbahpe1at906kptbtd1g1w19ktlyru"><link rel="manifest" href="/images/favicon/favicon-coco/manifest.json"><link rel="stylesheet" href="/slug-2025-12-22-05-28-02/stylesheets/app.css"><script>var product="codecombat"</script><script>window.javascriptsPath="/slug-2025-12-22-05-28-02/javascripts/"</script><script src="/slug-2025-12-22-05-28-02/javascripts/app.js" defer async data-ace-base="/javascripts/ace"></script><script src="/user-data?sha=slug-2025-12-22-05-28-02"></script><script>window.document.cookie="shaTagVal=slug-2025-12-22-05-28-02;path=/;"</script><script>var bdKey="codecombat"==p
Found 2026-01-09 by HttpPluginCreate report