Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b0aa4365ae0879cfd77b14a543d6cd7d3de3160fc
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /banners/fetch
GET /brand/v1/similar-deals/{brandName}
GET /brand/v1/{brandName}
GET /cache/clr
GET /cache/redis/clr
GET /cache/redis/clr/hdel
GET /cache/redis/clr/key
GET /campaign/products-by-categories
GET /config/domaindetails
GET /config/nocache/wversion
GET /config/paymentpartner/{pcode}/{scode}
GET /external/v1/games/reward/history
GET /games/rewards/products
GET /points/channelSummary
GET /points/expiry
GET /tp/auth/client/static-config
GET /tp/auth/user/detail
GET /tp/auth/v1/user/profile/get-survey
GET /tp/auth/v2/banners/fetch
GET /tp/auth/v2/config/campaign-detail
GET /tp/auth/v2/config/next-engagement
GET /tp/auth/v2/games/reward
GET /tp/auth/v2/offer/details
GET /tp/auth/v2/points
GET /tp/auth/v2/user/activitypoints
GET /tp/auth/v2/user/campaign/history
GET /tp/auth/v2/user/dailyreport
GET /tp/auth/v2/user/points
GET /tp/auth/v2/user/profile
GET /tp/email-image/{clientId}/{encryptedUser}
GET /tp/internal/email-template/expiry
GET /tp/poc-image/{type}/{userId}
GET /tpsms/v1/updateSmsLog
GET /txnStatus
GET /upoints
POST /admitad/authorization/update-token
POST /external/v1/games/reward
POST /games/reward
POST /games/reward/history
POST /internal/gdpr/requestedUserDetails
POST /internal/gdpr/unblock-user
POST /internal/tp/v1/optin
POST /internal/tp/v1/optout
POST /orders/status/update
POST /partner/reports/redemption/history
POST /points/debit
POST /prelogin/aggregate-data
POST /product/v1/categories/save
POST /productsellers/stocks/update
POST /requestedUserDetails
POST /tp/auth/v1/user/profile/save-survey
POST /tp/auth/v2/aconfig/allacts
POST /tp/auth/v2/apush
POST /tp/catalogue/refresh
POST /tp/v1/apush
POST /tp/v1/cashout
POST /tp/v1/debit-points
POST /tp/v1/points
POST /tp/v1/productRedemption
POST /tp/v1/reports/redemption/history
POST /tp/v1/transaction/revert
POST /tp/v1/transaction/status
POST /tp/v1/user/dailyreport
POST /tp/v2/apush
POST /tp/v2/auth/debit-points
POST /tp/v2/authorize/debit-points
POST /tp/v2/cashout
POST /tp/v2/config/payment-partner
POST /tp/v2/debit-points
POST /tp/v2/points
POST /tp/v2/productRedemption
POST /tp/v2/reports/redemption/history
POST /tp/v2/transaction/revert
POST /tp/v2/transaction/status
POST /tp/v2/user/dailyreport
POST /user/link/access/token
POST /user/link/v2/access/token
POST /v1/init
POST /v1/init/
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b0aa4365ae0879cfd77b14a543d6cd7d3de3160fc
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
GET /banners/fetch
GET /brand/v1/similar-deals/{brandName}
GET /brand/v1/{brandName}
GET /cache/clr
GET /cache/redis/clr
GET /cache/redis/clr/hdel
GET /cache/redis/clr/key
GET /campaign/products-by-categories
GET /config/domaindetails
GET /config/nocache/wversion
GET /config/paymentpartner/{pcode}/{scode}
GET /external/v1/games/reward/history
GET /games/rewards/products
GET /points/channelSummary
GET /points/expiry
GET /tp/auth/client/static-config
GET /tp/auth/user/detail
GET /tp/auth/v1/user/profile/get-survey
GET /tp/auth/v2/banners/fetch
GET /tp/auth/v2/config/campaign-detail
GET /tp/auth/v2/config/next-engagement
GET /tp/auth/v2/games/reward
GET /tp/auth/v2/offer/details
GET /tp/auth/v2/points
GET /tp/auth/v2/user/activitypoints
GET /tp/auth/v2/user/campaign/history
GET /tp/auth/v2/user/dailyreport
GET /tp/auth/v2/user/points
GET /tp/auth/v2/user/profile
GET /tp/email-image/{clientId}/{encryptedUser}
GET /tp/internal/email-template/expiry
GET /tp/poc-image/{type}/{userId}
GET /tpsms/v1/updateSmsLog
GET /txnStatus
GET /upoints
POST /admitad/authorization/update-token
POST /external/v1/games/reward
POST /games/reward
POST /games/reward/history
POST /internal/gdpr/requestedUserDetails
POST /internal/gdpr/unblock-user
POST /internal/tp/v1/optin
POST /internal/tp/v1/optout
POST /orders/status/update
POST /partner/reports/redemption/history
POST /points/debit
POST /prelogin/aggregate-data
POST /product/v1/categories/save
POST /productsellers/stocks/update
POST /requestedUserDetails
POST /tp/auth/v1/user/profile/save-survey
POST /tp/auth/v2/aconfig/allacts
POST /tp/auth/v2/apush
POST /tp/catalogue/refresh
POST /tp/v1/apush
POST /tp/v1/cashout
POST /tp/v1/debit-points
POST /tp/v1/points
POST /tp/v1/productRedemption
POST /tp/v1/reports/redemption/history
POST /tp/v1/transaction/revert
POST /tp/v1/transaction/status
POST /tp/v1/user/dailyreport
POST /tp/v2/apush
POST /tp/v2/auth/debit-points
POST /tp/v2/authorize/debit-points
POST /tp/v2/cashout
POST /tp/v2/config/payment-partner
POST /tp/v2/debit-points
POST /tp/v2/points
POST /tp/v2/productRedemption
POST /tp/v2/reports/redemption/history
POST /tp/v2/transaction/revert
POST /tp/v2/transaction/status
POST /tp/v2/user/dailyreport
POST /user/link/access/token
POST /user/link/v2/access/token
POST /v1/init
POST /v1/init/
Open service 2a02:26f0:3500:29::17cf:d2d7:80 · tpapi.timespoints.com
2026-01-28 08:59
HTTP/1.1 404 Not Found
Content-Type: application/json
Access-Control-Expose-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, authorization
Date: Wed, 28 Jan 2026 08:59:36 GMT
Content-Length: 71
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=128
Server-Timing: origin; dur=9
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1769590776730_34741463_61816949_13732_3319_0_0_-";dur=1
{"timestamp":1769590776815,"status":404,"error":"Not Found","path":"/"}
Open service 2a02:26f0:3500:29::17cf:d2d7:80 · tpapi.timespoints.com
2026-01-23 15:56
HTTP/1.1 404 Not Found
Content-Type: application/json
Access-Control-Expose-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, authorization
Date: Fri, 23 Jan 2026 15:57:00 GMT
Content-Length: 71
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=159
Server-Timing: origin; dur=20
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1769183819825_34741463_2397643559_17894_3691_1_0_-";dur=1
{"timestamp":1769183819932,"status":404,"error":"Not Found","path":"/"}
Open service 2a02:26f0:3500:29::17cf:d2d7:443 · tpapi.timespoints.com
2026-01-23 15:56
HTTP/1.1 404 Not Found
Content-Type: application/json
Access-Control-Expose-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, authorization
Date: Fri, 23 Jan 2026 15:56:37 GMT
Content-Length: 71
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=177
Server-Timing: origin; dur=25
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1769183797703_34741463_2397483216_20172_4296_0_3_-";dur=1
{"timestamp":1769183797818,"status":404,"error":"Not Found","path":"/"}
Open service 2a02:26f0:3500:29::17cf:d2d5:80 · tpapi.timespoints.com
2026-01-23 15:56
HTTP/1.1 404 Not Found
Content-Type: application/json
Access-Control-Expose-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, authorization
Date: Fri, 23 Jan 2026 15:56:59 GMT
Content-Length: 71
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=162
Server-Timing: origin; dur=5
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1769183819727_34741461_3242027944_16635_5076_0_0_-";dur=1
{"timestamp":1769183819834,"status":404,"error":"Not Found","path":"/"}
Open service 2a02:26f0:3500:29::17cf:d2d5:443 · tpapi.timespoints.com
2026-01-23 15:56
HTTP/1.1 404 Not Found
Content-Type: application/json
Access-Control-Expose-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, authorization
Date: Fri, 23 Jan 2026 15:56:37 GMT
Content-Length: 71
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=190
Server-Timing: origin; dur=25
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1769183797673_34741463_2397483025_21537_4827_0_6_-";dur=1
{"timestamp":1769183797804,"status":404,"error":"Not Found","path":"/"}
Open service 2.16.204.211:80 · tpapi.timespoints.com
2026-01-23 15:56
HTTP/1.1 404 Not Found
Content-Type: application/json
Access-Control-Expose-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, authorization
Date: Fri, 23 Jan 2026 15:57:00 GMT
Content-Length: 71
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=170
Server-Timing: origin; dur=5
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1769183819839_34677299_1777775939_17374_3106_12_0_-";dur=1
{"timestamp":1769183819945,"status":404,"error":"Not Found","path":"/"}
Open service 2.16.204.211:443 · tpapi.timespoints.com
2026-01-23 15:56
HTTP/1.1 404 Not Found
Content-Type: application/json
Access-Control-Expose-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, authorization
Date: Fri, 23 Jan 2026 15:56:38 GMT
Content-Length: 71
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=172
Server-Timing: origin; dur=7
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1769183797926_34677299_1777715215_17856_3231_11_16_-";dur=1
{"timestamp":1769183798050,"status":404,"error":"Not Found","path":"/"}
Open service 2.16.204.203:80 · tpapi.timespoints.com
2026-01-23 15:56
HTTP/1.1 404 Not Found
Content-Type: application/json
Access-Control-Expose-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, authorization
Date: Fri, 23 Jan 2026 15:56:59 GMT
Content-Length: 71
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=149
Server-Timing: origin; dur=23
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1769183819804_34677291_1039309867_17213_3648_11_0_-";dur=1
{"timestamp":1769183819897,"status":404,"error":"Not Found","path":"/"}
Open service 2.16.204.203:443 · tpapi.timespoints.com
2026-01-23 15:56
HTTP/1.1 404 Not Found
Content-Type: application/json
Access-Control-Expose-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, authorization
Date: Fri, 23 Jan 2026 15:56:38 GMT
Content-Length: 71
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=157
Server-Timing: origin; dur=26
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1769183797852_34677291_1039194643_18292_3634_17_25_-";dur=1
{"timestamp":1769183797971,"status":404,"error":"Not Found","path":"/"}
Open service 23.36.162.157:443 · tpapi.timespoints.com
2026-01-22 19:30
HTTP/1.1 404 Not Found
Content-Type: application/json
Access-Control-Expose-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, authorization
Date: Thu, 22 Jan 2026 19:30:50 GMT
Content-Length: 71
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=165
Server-Timing: origin; dur=15
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1769110250317_388276362_956480592_17994_6864_7_9_-";dur=1
{"timestamp":1769110250416,"status":404,"error":"Not Found","path":"/"}
Open service 23.36.162.157:443 · tpapi.timespoints.com
2026-01-09 13:00
HTTP/1.1 404 Not Found
Content-Type: application/json
Access-Control-Expose-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, authorization
Date: Fri, 09 Jan 2026 13:00:15 GMT
Content-Length: 71
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=151
Server-Timing: origin; dur=12
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1767963615521_388276381_690247873_16317_6425_0_5_-";dur=1
{"timestamp":1767963615630,"status":404,"error":"Not Found","path":"/"}
Open service 23.36.162.157:80 · tpapi.timespoints.com
2026-01-09 07:30
HTTP/1.1 404 Not Found
Content-Type: application/json
Access-Control-Expose-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, authorization
Date: Fri, 09 Jan 2026 07:31:27 GMT
Content-Length: 71
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=430
Server-Timing: origin; dur=9
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1767943887170_388276381_621028354_43923_5883_111_0_-";dur=1
{"timestamp":1767943887552,"status":404,"error":"Not Found","path":"/"}
Open service 23.36.162.157:443 · tpapi.timespoints.com
2026-01-02 07:51
HTTP/1.1 404 Not Found
Content-Type: application/json
Access-Control-Expose-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, authorization
Date: Fri, 02 Jan 2026 07:51:27 GMT
Content-Length: 71
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=138
Server-Timing: origin; dur=6
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1767340287475_388276362_2454722774_14357_5962_11_14_-";dur=1
{"timestamp":1767340287576,"status":404,"error":"Not Found","path":"/"}
Open service 23.36.162.157:80 · tpapi.timespoints.com
2026-01-02 06:08
HTTP/1.1 404 Not Found
Content-Type: application/json
Access-Control-Expose-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, authorization
Date: Fri, 02 Jan 2026 06:08:59 GMT
Content-Length: 71
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=143
Server-Timing: origin; dur=5
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1767334139319_388276381_3480383265_14819_5455_0_0_-";dur=1
{"timestamp":1767334139409,"status":404,"error":"Not Found","path":"/"}
Open service 23.36.162.157:443 · tpapi.timespoints.com
2025-12-22 23:13
HTTP/1.1 404 Not Found
Content-Type: application/json
Access-Control-Expose-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, authorization
Date: Mon, 22 Dec 2025 23:13:55 GMT
Content-Length: 71
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=137
Server-Timing: origin; dur=5
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1766445235387_388276362_992152770_14219_5737_93_130_-";dur=1
{"timestamp":1766445235608,"status":404,"error":"Not Found","path":"/"}
Open service 23.36.162.157:80 · tpapi.timespoints.com
2025-12-22 20:51
HTTP/1.1 404 Not Found
Content-Type: application/json
Access-Control-Expose-Headers: Origin, X-Requested-With, Content-Type, Accept, Key, Authorization, authorization
Date: Mon, 22 Dec 2025 20:51:33 GMT
Content-Length: 71
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=169
Server-Timing: origin; dur=5
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT
Access-Control-Allow-Origin: *
Server-Timing: ak_p; desc="1766436693606_388276381_1283539355_17357_8821_0_0_-";dur=1
{"timestamp":1766436693731,"status":404,"error":"Not Found","path":"/"}