cloudflare
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd110a331ecfeb9291946c215d25a932525dfde7ac11f79153f
Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
DELETE /api/cache-management/clear
DELETE /api/cache-management/clear/{cacheName}
DELETE /api/cache-management/clear/{cacheName}/{key}
DELETE /api/cache/components/types/{cpCacheDeps}
DELETE /api/seo-links/delete/bulk
DELETE /api/seo-links/type/{type}/data/{data}
GET /api/app-banner-downloads/{storeId}
GET /api/audits/entity/all
GET /api/audits/entity/changes
GET /api/audits/entity/changes/version/previous
GET /api/cache-management/get
GET /api/cache-management/get/{cacheName}
GET /api/cache-management/get/{cacheName}/key/{key}
GET /api/cache-management/key/{cacheName}
GET /api/caching/clear-cache-OLD
GET /api/caching/clear-cache-manual
GET /api/custom-multi-language/langKey/{langKey}
GET /api/custom-multi-language/language-export/langKey/{langKey}
GET /api/custom-page-languages/all/{storeId}
GET /api/custom-page-languages/{pageId}
GET /api/custom-page-languages/{storeId}/{pageId}
GET /api/custom-pages/menu/{storeId}
GET /api/custom-pages/menu/{storeId}/{id}
GET /api/custom-pages/{storeId}
GET /api/custom-pages/{storeId}/authors
GET /api/custom-pages/{storeId}/{id}
GET /api/data-cache/app-configs/store/{storeId}/client-id
GET /api/data-cache/store-multiple-currencies/store/{storeId}
GET /api/environment/properties
GET /api/environment/properties/by-key
GET /api/landing-pages
GET /api/landing-pages/{id}
GET /api/loyalty-point-settings/store/{storeId}
GET /api/management/heartbeat
GET /api/master-components/all
GET /api/master-components/get-by-type
GET /api/master-components/migrate-white-label
GET /api/master-components/search
GET /api/master-components/type-list
GET /api/master-groups
GET /api/master-groups/{id}
GET /api/master-pages
GET /api/master-pages/theme/{masterThemeId}
GET /api/master-pages/{id}
GET /api/master-themes
GET /api/master-themes/library/store/{storeId}
GET /api/master-themes/{id}
GET /api/migrate/seo-links/migrate-seo-url
GET /api/migrate/seo-links/migrate-seo-url/store/{storeId}
GET /api/open-docs
GET /api/preview/master-pages/{viewName}/themes/{themeId}/store/{storeId}
GET /api/preview/store-pages/{viewName}/themes/{themeId}/store/{storeId}
GET /api/redirect-urls/validate-src-url/{storeId}
GET /api/redirect-urls/validate-target-url/{storeId}
GET /api/redirect-urls/{storeId}
GET /api/seo-follow-index/store/{storeId}
GET /api/seo-links
GET /api/seo-links/generate-seo-link-regex
GET /api/seo-links/store/{storeId}
GET /api/seo-links/store/{storeId}/change-seo-link-language
GET /api/seo-links/store/{storeId}/mobile
GET /api/seo-links/store/{storeId}/{id}
GET /api/seo-links/validate-duplicate/store/{storeId}
GET /api/seo-links/validate/store/{storeId}
GET /api/setting-widget-popups
GET /api/setting-widget-popups/storeId/{storeId}
GET /api/setting-widget-popups/{id}
GET /api/store-pages/store/{storeId}/component-setting
GET /api/store-pages/store/{storeId}/get-current-header-menu
GET /api/store-pages/theme/{storeThemeId}
GET /api/store-themes
GET /api/store-themes/store/{storeId}
GET /api/store-themes/store/{storeId}/load-custom-page
GET /api/store-themes/store/{storeId}/load-theme
GET /api/store-themes/store/{storeId}/load-theme2
GET /api/store-themes/store/{storeId}/management
GET /api/store-themes/store/{storeId}/publish
GET /api/store-themes/store/{storeId}/transfer
GET /api/store-themes/{id}
GET /api/store/{storeId}/custom-head-body
GET /api/test
GET /api/test/add
GET /api/test/d
GET /api/test/delete
GET /api/users
GET /api/users/authorities
GET /api/users/{login:^(?>[a-zA-Z0-9!$&*+=?^_`{|}~.-]+@[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*)|(?>[_.@A-Za-z0-9-]+)$}
GET /api/ut/vs/store/{storeId}
GET /api/utils/resolve-seo-url/{langKey}
GET /api/widget-contact-channel/find-widget-by-store/{storeId}
GET /api/widget/configs/{storeId}
POST /api/activate
POST /api/app-banner-downloads
POST /api/authenticate
POST /api/create-custom-page-after-buying-language/{storeId}
POST /api/create-master-data/theme
POST /api/currency/change/store/{storeId}/user/{userId}
POST /api/custom-multi-language/langKey/{langKey}/store/{storeId}
POST /api/custom-multi-language/langKey/{langKey}/store/{storeId}/create
POST /api/custom-multi-language/upload/store/{storeId}
POST /api/landing-pages/publish
POST /api/landing-pages/un-publish/page/{pageId}
POST /api/login
POST /api/login/social/{providerId}
POST /api/logout
POST /api/preview/external-components
POST /api/preview/internal-components
POST /api/preview/store-pages/store/{storeId}
POST /api/redirect-urls/create
POST /api/redirect-urls/deletes
POST /api/reset_password
POST /api/setting-widget-popups/upsert
POST /api/store-pages/store/{storeId}
POST /api/store-pages/{storeId}/clone-from/theme-id/{masterThemeId}
POST /api/utils/schema/value
POST /api/widget-contact-channel/save-widget
PUT /api/batch/batch-store-page-platform-visible/store/{storeId}
PUT /api/change_password
PUT /api/custom-page-languages/save/{storeId}
PUT /api/preview/store-pages/store/{storeId}/custom-page/{storeThemeId}
PUT /api/seo-follow-index/upsert
PUT /api/seo-links/upsert
PUT /api/seo-links/upsert/store/{storeId}/bulk
PUT /api/store-pages/migrate-product-service-collection-list
PUT /api/store-pages/migrate-product-service-detail
PUT /api/store-pages/store/{storeId}/publish/{storePageId}
Severity: info
Fingerprint: 5733ddf49ff49cd110a331ecfeb9291946c215d25a932525dfde7ac184ec1d2b
Public Swagger UI/API detected at path: /v2/api-docs - sample paths:
DELETE /api/cache-management/clear
DELETE /api/cache-management/clear/{cacheName}
DELETE /api/cache-management/clear/{cacheName}/{key}
DELETE /api/cache/components/types/{cpCacheDeps}
DELETE /api/seo-links/delete/bulk
DELETE /api/seo-links/type/{type}/data/{data}
GET /api/app-banner-downloads/{storeId}
GET /api/audits/entity/all
GET /api/audits/entity/changes
GET /api/audits/entity/changes/version/previous
GET /api/cache-management/get
GET /api/cache-management/get/{cacheName}
GET /api/cache-management/get/{cacheName}/key/{key}
GET /api/cache-management/key/{cacheName}
GET /api/caching/clear-cache-OLD
GET /api/caching/clear-cache-manual
GET /api/custom-multi-language/langKey/{langKey}
GET /api/custom-multi-language/language-export/langKey/{langKey}
GET /api/custom-page-languages/all/{storeId}
GET /api/custom-page-languages/{pageId}
GET /api/custom-page-languages/{storeId}/{pageId}
GET /api/custom-pages/menu/{storeId}
GET /api/custom-pages/menu/{storeId}/{id}
GET /api/custom-pages/{storeId}
GET /api/custom-pages/{storeId}/authors
GET /api/custom-pages/{storeId}/{id}
GET /api/data-cache/app-configs/store/{storeId}/client-id
GET /api/data-cache/store-multiple-currencies/store/{storeId}
GET /api/environment/properties
GET /api/environment/properties/by-key
GET /api/landing-pages
GET /api/landing-pages/{id}
GET /api/loyalty-point-settings/store/{storeId}
GET /api/management/heartbeat
GET /api/master-components/all
GET /api/master-components/get-by-type
GET /api/master-components/search
GET /api/master-components/type-list
GET /api/master-groups
GET /api/master-groups/{id}
GET /api/master-pages
GET /api/master-pages/theme/{masterThemeId}
GET /api/master-pages/{id}
GET /api/master-themes
GET /api/master-themes/library/store/{storeId}
GET /api/master-themes/{id}
GET /api/migrate/seo-links/migrate-seo-url
GET /api/migrate/seo-links/migrate-seo-url/store/{storeId}
GET /api/open-docs
GET /api/preview/master-pages/{viewName}/themes/{themeId}/store/{storeId}
GET /api/preview/store-pages/{viewName}/themes/{themeId}/store/{storeId}
GET /api/redirect-urls/validate-src-url/{storeId}
GET /api/redirect-urls/validate-target-url/{storeId}
GET /api/redirect-urls/{storeId}
GET /api/seo-follow-index/store/{storeId}
GET /api/seo-links
GET /api/seo-links/generate-seo-link-regex
GET /api/seo-links/store/{storeId}
GET /api/seo-links/store/{storeId}/change-seo-link-language
GET /api/seo-links/store/{storeId}/mobile
GET /api/seo-links/store/{storeId}/{id}
GET /api/seo-links/validate-duplicate/store/{storeId}
GET /api/seo-links/validate/store/{storeId}
GET /api/setting-widget-popups
GET /api/setting-widget-popups/storeId/{storeId}
GET /api/setting-widget-popups/{id}
GET /api/store-pages/store/{storeId}/component-setting
GET /api/store-pages/store/{storeId}/get-current-header-menu
GET /api/store-pages/theme/{storeThemeId}
GET /api/store-themes
GET /api/store-themes/store/{storeId}
GET /api/store-themes/store/{storeId}/load-custom-page
GET /api/store-themes/store/{storeId}/load-theme
GET /api/store-themes/store/{storeId}/load-theme2
GET /api/store-themes/store/{storeId}/management
GET /api/store-themes/store/{storeId}/publish
GET /api/store-themes/store/{storeId}/transfer
GET /api/store-themes/{id}
GET /api/store/{storeId}/custom-head-body
GET /api/test
GET /api/test/add
GET /api/test/d
GET /api/test/delete
GET /api/users
GET /api/users/authorities
GET /api/users/{login:^(?>[a-zA-Z0-9!$&*+=?^_`{|}~.-]+@[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*)|(?>[_.@A-Za-z0-9-]+)$}
GET /api/ut/vs/store/{storeId}
GET /api/utils/resolve-seo-url/{langKey}
GET /api/widget-contact-channel/find-widget-by-store/{storeId}
GET /api/widget/configs/{storeId}
POST /api/activate
POST /api/app-banner-downloads
POST /api/authenticate
POST /api/create-custom-page-after-buying-language/{storeId}
POST /api/create-master-data/theme
POST /api/currency/change/store/{storeId}/user/{userId}
POST /api/custom-multi-language/langKey/{langKey}/store/{storeId}
POST /api/custom-multi-language/langKey/{langKey}/store/{storeId}/create
POST /api/custom-multi-language/upload/store/{storeId}
POST /api/landing-pages/publish
POST /api/landing-pages/un-publish/page/{pageId}
POST /api/login
POST /api/login/social/{providerId}
POST /api/logout
POST /api/preview/external-components
POST /api/preview/internal-components
POST /api/preview/store-pages/store/{storeId}
POST /api/redirect-urls/create
POST /api/redirect-urls/deletes
POST /api/reset_password
POST /api/setting-widget-popups/upsert
POST /api/store-pages/store/{storeId}
POST /api/store-pages/{storeId}/clone-from/theme-id/{masterThemeId}
POST /api/utils/schema/value
POST /api/widget-contact-channel/save-widget
PUT /api/batch/batch-store-page-platform-visible/store/{storeId}
PUT /api/change_password
PUT /api/custom-page-languages/save/{storeId}
PUT /api/preview/store-pages/store/{storeId}/custom-page/{storeThemeId}
PUT /api/seo-follow-index/upsert
PUT /api/seo-links/upsert
PUT /api/seo-links/upsert/store/{storeId}/bulk
PUT /api/store-pages/migrate-product-service-collection-list
PUT /api/store-pages/migrate-product-service-detail
PUT /api/store-pages/store/{storeId}/publish/{storePageId}
Open service 104.26.14.224:443 · viet54.com
2026-01-09 01:12
HTTP/1.1 530 <none> Date: Fri, 09 Jan 2026 01:12:21 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=32,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9bb010e0bf33d953-EWR alt-svc: h3=":443"; ma=86400 error code: 1016
Open service 104.26.14.224:443 · viet54.com
2026-01-02 01:17
HTTP/1.1 530 <none> Date: Fri, 02 Jan 2026 01:17:03 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=4,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9b766a21d9e3ccbb-BLR alt-svc: h3=":443"; ma=86400 error code: 1016
Open service 104.26.14.224:443 · viet54.com
2025-12-30 08:53
HTTP/1.1 530 <none> Date: Tue, 30 Dec 2025 08:53:56 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=10,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9b604f4549547769-YYZ alt-svc: h3=":443"; ma=86400 error code: 1016
Open service 104.26.14.224:443 · viet54.com
2025-12-22 09:35
HTTP/1.1 530 <none> Date: Mon, 22 Dec 2025 09:35:38 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9b1ea1571e043610-FRA alt-svc: h3=":443"; ma=86400 error code: 1016
Open service 104.26.14.224:443 · viet54.com
2025-12-20 10:06
HTTP/1.1 530 <none> Date: Sat, 20 Dec 2025 10:06:19 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16 Connection: close Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin Server-Timing: cfEdge;dur=12,cfOrigin;dur=0 X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 9b0e538eb885ee23-EWR alt-svc: h3=":443"; ma=86400 error code: 1016