cloudflare
tcp/443 tcp/8443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
Public Swagger UI/API detected at path: /api-docs/swagger.json
Open service 104.18.43.174:8443 · wxnode.mayday.qzz.io
2026-01-23 05:40
HTTP/1.1 404 Not Found
Date: Fri, 23 Jan 2026 05:40:46 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 151
Connection: close
access-control-allow-origin: *
content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
etag: W/"97-q8eQkSXtVES0sng1CJeNWyvIWDw"
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=u8uajjM%2BGToy06JJ4eMMYWRdHqgAkO886K2UCeEBEnDPRNHmCFGtXFh8XC3OZAEbxXj5QKm9lk1fQ9DrlQeqyFBJAejSZFldTO%2FRiSZt8MRdIvT%2F"}]}
Server: cloudflare
CF-RAY: 9c24f5498a9e2b0b-LHR
alt-svc: h3=":8443"; ma=86400
{"code":404,"message":"请求的资源不存在","error_code":"NOT_FOUND","data":null,"timestamp":"2026-01-23T05:40:46.381Z","path":"/","method":"GET"}
Open service 172.64.144.82:443 · wxnode.mayday.qzz.io
2026-01-23 03:28
HTTP/1.1 404 Not Found
Date: Fri, 23 Jan 2026 03:28:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 151
Connection: close
access-control-allow-origin: *
content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
etag: W/"97-QPxybpC25LxxzhY+Wy+Oq4dNy+w"
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=e6%2FcX2osuHqRrfF%2FtSJf9z6NSl2nZ6i0MehN69iOTi6sjkLmS%2Bh3Oh1oIbZt6it9ncTfriOwQ8EwuxrctvLap0LFvn2QGGdewlUW12gcB0qw4%2Fyy"}]}
Server: cloudflare
CF-RAY: 9c24331d69e632b1-EWR
alt-svc: h3=":443"; ma=86400
{"code":404,"message":"请求的资源不存在","error_code":"NOT_FOUND","data":null,"timestamp":"2026-01-23T03:28:12.976Z","path":"/","method":"GET"}