Domain web.joantee.com
United States
Software information
Vercel
tcp/443 tcp/80
-
Swagger API description is publicly available
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
First seen 2025-12-11 19:13
Last seen 2026-01-09 07:42
Open for 28 days-
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109Public Swagger UI/API detected at path: /api-docs/swagger.json
Found on 2026-01-09 07:42
-
-
Open service 64.29.17.65:443 · web.joantee.com
2026-01-09 07:42
HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 84 Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests Content-Type: application/json; charset=utf-8 Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Date: Fri, 09 Jan 2026 07:42:09 GMT Etag: W/"54-CI3tqMEYQdaSCd369dIOTRZL970" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Server: Vercel Set-Cookie: connect.sid=s%3Az6eXM_kTl38kQa5c78dxBBqwBZKd_Iem.hyQnKwA1R%2FQv%2FphOqmKrDWx1%2Fb1LnlJD9Gmk9r%2BqHWU; Path=/; Expires=Fri, 09 Jan 2026 07:57:09 GMT; HttpOnly; Secure; SameSite=Lax Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Origin X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Vercel-Cache: MISS X-Vercel-Id: fra1::iad1::r2s8s-1767944529109-258f1a482f19 X-Xss-Protection: 0 Connection: close {"message":"Joantee Backend API is running!","timestamp":"2026-01-09T07:42:09.188Z"}Found 2026-01-09 by HttpPluginCreate report
-
Open service 64.29.17.65:443 · web.joantee.com
2026-01-02 13:40
HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 84 Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests Content-Type: application/json; charset=utf-8 Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Date: Fri, 02 Jan 2026 13:40:08 GMT Etag: W/"54-/1wCZIh/mwjtyM8Y7CC1/klbUew" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Server: Vercel Set-Cookie: connect.sid=s%3ArR7z_LW3Kc-Ib6BCGvQq0Fwi9MMrHGBY.fv1HlE7XqvhKkOzLVCb6iQWbW7pC%2F%2FZVjzlnlNpmShc; Path=/; Expires=Fri, 02 Jan 2026 13:55:08 GMT; HttpOnly; Secure; SameSite=Lax Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Origin X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Vercel-Cache: MISS X-Vercel-Id: fra1::iad1::vccvn-1767361207154-752b096d075e X-Xss-Protection: 0 Connection: close {"message":"Joantee Backend API is running!","timestamp":"2026-01-02T13:40:08.414Z"}Found 2026-01-02 by HttpPluginCreate report
-
Open service 64.29.17.65:443 · web.joantee.com
2025-12-22 20:37
HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 84 Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests Content-Type: application/json; charset=utf-8 Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Date: Mon, 22 Dec 2025 20:37:59 GMT Etag: W/"54-DKHRtnz8TxwPHOhBMvYQ+H4RKqA" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Server: Vercel Set-Cookie: connect.sid=s%3AQz7k0OaLIr9CswhvM_8sWroxHOQL2P_o.nmPARGWNJ7tgkO6FlbX2ZG3s3XYUCEA%2Fc0pV4a4VHqg; Path=/; Expires=Mon, 22 Dec 2025 20:52:59 GMT; HttpOnly; Secure; SameSite=Lax Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Origin X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Vercel-Cache: MISS X-Vercel-Id: fra1::iad1::jzjvp-1766435878034-50c8d222c436 X-Xss-Protection: 0 Connection: close {"message":"Joantee Backend API is running!","timestamp":"2025-12-22T20:37:59.157Z"}Found 2025-12-22 by HttpPluginCreate report
-
Open service 64.29.17.65:443 · web.joantee.com
2025-12-21 01:05
HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 84 Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests Content-Type: application/json; charset=utf-8 Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Date: Sun, 21 Dec 2025 01:05:49 GMT Etag: W/"54-0RtHhtcA5pFRAG6emwt4sEzn5WQ" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Server: Vercel Set-Cookie: connect.sid=s%3AaL7t6CdldaZb6TRwejb7UN3UJvCsA_hz.oeR2YOcKHTTUMSXj1whXlw0XHeQfc7HjpZmpFtSVWpk; Path=/; Expires=Sun, 21 Dec 2025 01:20:49 GMT; HttpOnly; Secure; SameSite=Lax Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Origin X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::ggh6c-1766279148305-53be99d0de11 X-Xss-Protection: 0 Connection: close {"message":"Joantee Backend API is running!","timestamp":"2025-12-21T01:05:49.369Z"}Found 2025-12-21 by HttpPluginCreate report
-
Open service 216.198.79.1:443 · web.joantee.com
2025-12-19 05:51
HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 84 Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests Content-Type: application/json; charset=utf-8 Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Date: Fri, 19 Dec 2025 05:51:20 GMT Etag: W/"54-koL4wPV22I/gG7ZJ1TINkPeWqIc" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Server: Vercel Set-Cookie: connect.sid=s%3A40PEWJQvrnnM-12b1SxOV2bJE5AQrK_0.%2FLQIbmVZvfDvvF2p7HG%2Bn4Y2hDapT7xSOSd3K9YXk84; Path=/; Expires=Fri, 19 Dec 2025 06:06:20 GMT; HttpOnly; Secure; SameSite=Lax Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Origin X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::xz9cd-1766123479465-f0a6db6b43b5 X-Xss-Protection: 0 Connection: close {"message":"Joantee Backend API is running!","timestamp":"2025-12-19T05:51:20.399Z"}Found 2025-12-19 by HttpPluginCreate report
-
Open service 216.198.79.1:80 · web.joantee.com
2025-12-19 05:51
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://web.joantee.com/ Refresh: 0;url=https://web.joantee.com/ server: Vercel Redirecting...
Found 2025-12-19 by HttpPluginCreate report
-
Open service 64.29.17.1:443 · web.joantee.com
2025-12-19 05:51
HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Age: 0 Cache-Control: public, max-age=0, must-revalidate Content-Length: 84 Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests Content-Type: application/json; charset=utf-8 Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Date: Fri, 19 Dec 2025 05:51:20 GMT Etag: W/"54-IRlxc3kP74ATN+7OFW4h4vBAieM" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Server: Vercel Set-Cookie: connect.sid=s%3Ak4IxA6srZxen4eDIKLWaKVBqsyXMIFAl.VGisjaoyiobDh1sWTulwP4d7ei1TElvNk%2F1RjavT%2FFQ; Path=/; Expires=Fri, 19 Dec 2025 06:06:20 GMT; HttpOnly; Secure; SameSite=Lax Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Origin X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::q8k5c-1766123479432-0269cb66a1aa X-Xss-Protection: 0 Connection: close {"message":"Joantee Backend API is running!","timestamp":"2025-12-19T05:51:20.416Z"}Found 2025-12-19 by HttpPluginCreate report
-
Open service 64.29.17.1:80 · web.joantee.com
2025-12-19 05:51
HTTP/1.0 308 Permanent Redirect Content-Type: text/plain Location: https://web.joantee.com/ Refresh: 0;url=https://web.joantee.com/ server: Vercel Redirecting...
Found 2025-12-19 by HttpPluginCreate report