Kestrel
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
Public Swagger UI/API detected at path: /swagger/index.html
Open service 20.90.134.32:80 · www.pineapplecactus.com
2026-01-11 02:41
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Sun, 11 Jan 2026 02:42:23 GMT Location: https://www.pineapplecactus.com/
Open service 20.90.134.32:443 · www.pineapplecactus.com
2026-01-11 02:41
HTTP/1.1 200 OK
Content-Length: 3065
Connection: close
Content-Type: text/html
Date: Sun, 11 Jan 2026 02:42:24 GMT
Server: Kestrel
Accept-Ranges: bytes
ETag: "1dc8146ed1bf0f9"
Last-Modified: Fri, 09 Jan 2026 09:04:14 GMT
Request-Context: appId=cid-v1:7d7af014-322e-4c00-abc3-9b31b8d15ed4
X-Rate-Limit-Limit: 4h
X-Rate-Limit-Remaining: 398
X-Rate-Limit-Reset: 2026-01-11T06:41:24.4784306Z
Page title: Pineapple Cactus - Fun Quizzes & Trivia
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<title>Pineapple Cactus - Fun Quizzes & Trivia</title>
<!-- Favicon & Icons -->
<link rel="icon" type="image/png" href="/favicon-96x96.png" sizes="96x96" />
<link rel="icon" type="image/svg+xml" href="/favicon.svg" />
<link rel="shortcut icon" href="/favicon.ico" />
<link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png" />
<meta name="apple-mobile-web-app-title" content="Pineapple Cactus" />
<link rel="manifest" href="/site.webmanifest" />
<!-- Viewport -->
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<!-- SEO -->
<meta
name="description"
content="Play fun quizzes and test your knowledge! Try Pineapple Cactus quizzes now!"
/>
<meta
name="keywords"
content="quiz, quizzes, trivia, fun games, knowledge, pineapple cactus, test yourself"
/>
<meta name="robots" content="index, follow" />
<link rel="canonical" href="https://www.pineapplecactus.com/" />
<!-- Open Graph -->
<meta property="og:title" content="Pineapple Cactus" />
<meta
property="og:description"
content="Jump in and challenge yourself with quizzes!"
/>
<meta
property="og:image"
content="https://www.pineapplecactus.com/social-preview.png"
/>
<meta property="og:image:width" content="1200" />
<meta property="og:image:height" content="630" />
<meta property="og:url" content="https://www.pineapplecactus.com/" />
<meta property="og:type" content="website" />
<!-- Twitter Card -->
<meta name="twitter:card" content="summary_large_image" />
<meta name="twitter:title" content="Pineapple Cactus" />
<meta
name="twitter:description"
content="Jump in and challenge yourself with quizzes!"
/>
<meta
name="twitter:image"
content="https://www.pineapplecactus.com/social-preview.png"
/>
<!-- Google Site Verification -->
<meta
name="google-site-verification"
content="jYP5YVByclCEPrVhErTm-DJekRmehXjnaIlXBazy414"
/>
<!-- Google Analytics (GA4) -->
<script
async
src="https://www.googletagmanager.com/gtag/js?id=G-XX9H7EQQ86"
></script>
<script>
window.dataLayer = window.dataLayer || [];
function gtag() {
dataLayer.push(arguments);
}
gtag("js", new Date());
gtag("config", "G-XX9H7EQQ86");
</script>
<!-- Google login -->
<script src="https://accounts.google.com/gsi/client" async defer></script>
<!-- Fonts -->
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<script type="module" crossorigin src="/assets/index-BajmKnOe.js"></script>
<link rel="stylesheet" crossorigin href="/assets/index-wj6sWrJw.css">
</head>
<body>
<div id="root"></div>
</body>
</html>