cloudflare
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b6e67656b6e67656b6e67656b6e67656b6e67656b6e67656
Public Swagger UI/API detected at path: /swagger-ui.html
Open service 207.189.149.20:443 ยท video.sika.com
2026-01-23 06:00
HTTP/1.1 302 Found
Date: Fri, 23 Jan 2026 06:00:35 GMT
Content-Length: 0
Connection: close
CF-RAY: 9c2512526ad1d3d4-BLR
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
Set-Cookie: KV_CLIENT_SESSION_ID=oUqhYAt6vIS9wWmB8oLelW:60jyLSt/J/y+/u1/Z3fl9H/Ex5syU9awOuJ2ezmjH7w=; Max-Age=31536000; Expires=Sat, 23-Jan-2027 06:00:35 GMT; Path=/; Secure; HttpOnly; SameSite=None
Set-Cookie: JSESSIONID=3B6634E42D71FEBEF37226C3550CAB5B; Max-Age=1209600; Expires=Fri, 06-Feb-2026 06:00:35 GMT; Path=/; Secure; HttpOnly; SameSite=None
Set-Cookie: i18next=en-GB; Max-Age=31536000; Expires=Sat, 23-Jan-2027 06:00:35 GMT; Path=/; Secure; SameSite=None
Set-Cookie: _cfuvid=6hFZ7rZJQhbvU0TyFUWaerfjMbIaHQr_jh.5LCIThqs-1769148035330-0.0.1.1-604800000; path=/; domain=.video.sika.com; HttpOnly; Secure; SameSite=None
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
location: https://video.sika.com/portal
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2XbZc7BkQqwvVhT73RahtTUhyRsRLpCi%2FavM6ldolZXwCOnNi85HxDsRtHeSfUvfdv1Cg2Vf%2B7nQcjC%2BKkLoPdqIrj%2FNZ1B02GOgj6TiN%2FH00yWbzVrRPjlLcJLx0AsM"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare