Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff431818dff1ab714ac2ab714ac2ab714ac2ab714ac2
Public Swagger UI/API detected at path: /swagger.json - sample paths:
GET /v1/{portal}/{entity}/details/{course_id}
GET /v1/{portal}/{entity}/{type}/{region}
Open service 2.20.245.208:443 · ai-preprod.economictimes.indiatimes.com
2026-01-23 15:48
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Access-Control-Allow-Origin: * Last-Modified: Fri, 23 Jan 2026 15:48:34 GMT X-Cool: 22.106 Content-Language: en Access-Control-Allow-Credentials: true X-Frame-Options: sameorigin Strict-Transport-Security: max-age=25920000; includeSubdomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Expires: Fri, 23 Jan 2026 15:48:35 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 23 Jan 2026 15:48:35 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
Open service 2.20.245.208:443 · telecom-preprod.economictimes.indiatimes.com
2026-01-23 15:38
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Access-Control-Allow-Origin: * Last-Modified: Fri, 23 Jan 2026 15:39:01 GMT X-Cool: 22.106 Content-Language: en Access-Control-Allow-Credentials: true X-Frame-Options: sameorigin Strict-Transport-Security: max-age=25920000; includeSubdomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Expires: Fri, 23 Jan 2026 15:39:01 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 23 Jan 2026 15:39:01 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
Open service 2.20.245.208:443 · hospitality-preprod.economictimes.indiatimes.com
2026-01-23 07:26
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Access-Control-Allow-Origin: * Last-Modified: Fri, 23 Jan 2026 07:26:51 GMT X-Cool: 22.106 Content-Language: en Access-Control-Allow-Credentials: true X-Frame-Options: sameorigin Strict-Transport-Security: max-age=25920000; includeSubdomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Expires: Fri, 23 Jan 2026 07:26:51 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 23 Jan 2026 07:26:51 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
Open service 2.20.245.208:443 · cfo-preprod.economictimes.indiatimes.com
2026-01-23 07:21
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Access-Control-Allow-Origin: * Last-Modified: Fri, 23 Jan 2026 07:21:57 GMT X-Cool: 22.106 Content-Language: en Access-Control-Allow-Credentials: true X-Frame-Options: sameorigin Strict-Transport-Security: max-age=25920000; includeSubdomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Expires: Fri, 23 Jan 2026 07:21:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 23 Jan 2026 07:21:59 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding x-frame-options: SAMEORIGIN
Open service 2.20.245.208:443 · brandequity-preprod.economictimes.indiatimes.com
2026-01-23 07:21
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Access-Control-Allow-Origin: * Last-Modified: Fri, 23 Jan 2026 07:21:57 GMT X-Cool: 22.106 Content-Language: en Access-Control-Allow-Credentials: true X-Frame-Options: sameorigin Strict-Transport-Security: max-age=25920000; includeSubdomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Expires: Fri, 23 Jan 2026 07:21:58 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 23 Jan 2026 07:21:58 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
Open service 2.20.245.208:443 · realty-preprod.economictimes.indiatimes.com
2026-01-23 02:09
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Access-Control-Allow-Origin: * Last-Modified: Fri, 23 Jan 2026 02:09:45 GMT X-Cool: 22.106 Content-Language: en Access-Control-Allow-Credentials: true X-Frame-Options: sameorigin Strict-Transport-Security: max-age=25920000; includeSubdomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Expires: Fri, 23 Jan 2026 02:09:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 23 Jan 2026 02:09:45 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
Open service 2.20.245.208:443 · b2b-preprod.economictimes.indiatimes.com
2026-01-23 02:09
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Access-Control-Allow-Origin: * Last-Modified: Fri, 23 Jan 2026 02:09:45 GMT X-Cool: 22.106 Content-Language: en Access-Control-Allow-Credentials: true X-Frame-Options: sameorigin Strict-Transport-Security: max-age=25920000; includeSubdomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Expires: Fri, 23 Jan 2026 02:09:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 23 Jan 2026 02:09:45 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
Open service 2.20.245.208:443 · csr.economictimes.indiatimes.com
2026-01-22 21:07
HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=iso-8859-1 Content-Length: 350 Access-Control-Allow-Origin: * Location: https://b2b.economictimes.indiatimes.com/csr X-Frame-Options: sameorigin Strict-Transport-Security: max-age=25920000; includeSubdomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Expires: Thu, 22 Jan 2026 21:07:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 22 Jan 2026 21:07:02 GMT Connection: close x-frame-options: SAMEORIGIN Page title: 301 Moved Permanently <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="https://b2b.economictimes.indiatimes.com/csr">here</a>.</p> <hr> <address>Apache/2.4.58 (Ubuntu) Server at csr.economictimes.indiatimes.com Port 80</address> </body></html>
ai-preprod.economictimes.indiatimes.com 1 telecom-preprod.economictimes.indiatimes.com 1 hospitality-preprod.economictimes.indiatimes.com 1 cfo-preprod.economictimes.indiatimes.com 1 brandequity-preprod.economictimes.indiatimes.com 1 realty-preprod.economictimes.indiatimes.com 1 b2b-preprod.economictimes.indiatimes.com 1 csr.economictimes.indiatimes.com 1