LeakIX - Host api.elchrono.com

Domain api.elchrono.com

United States

AMAZON-02

Software information

Heroku

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 52.223.53.203
Domain: api.elchrono.com
Port: 443
URL: https://api.elchrono.com

First seen 2025-10-26 00:26
Last seen 2026-01-09 10:04
Open for 75 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 10:04
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 99.83.185.157
Domain: api.elchrono.com
Port: 80
URL: http://api.elchrono.com

First seen 2025-10-26 00:26
Last seen 2026-01-09 07:20
Open for 75 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 07:20
Create report

Open service 52.223.53.203:443 · api.elchrono.com

2026-01-09 10:04

HTTP/1.1 404 Not Found
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Fri, 09 Jan 2026 10:04:49 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ZyQJv2E3%2BPeR0AG%2FmqXrEyGcFjYo8U2zStm4MaxQ%2BTc%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767953089"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ZyQJv2E3%2BPeR0AG%2FmqXrEyGcFjYo8U2zStm4MaxQ%2BTc%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767953089"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","error":"Not Found","statusCode":404}

Found 2026-01-09 by HttpPlugin

Create report

Open service 99.83.185.157:80 · api.elchrono.com

2026-01-09 07:20

HTTP/1.1 404 Not Found
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Fri, 09 Jan 2026 07:21:33 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=DmahyMN3QlbMkzb0yc6IooeGGN8PPh6KW8N%2FuhdiJ%2F0%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767943293"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=DmahyMN3QlbMkzb0yc6IooeGGN8PPh6KW8N%2FuhdiJ%2F0%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767943293"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","error":"Not Found","statusCode":404}

Found 2026-01-09 by HttpPlugin

Create report

Open service 52.223.53.203:443 · api.elchrono.com

2026-01-02 14:48

HTTP/1.1 404 Not Found
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Fri, 02 Jan 2026 14:48:53 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=l8H42YCPrfxK0z%2FPkbLv7413RdPfh95E2gXwQudPOIA%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767365333"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=l8H42YCPrfxK0z%2FPkbLv7413RdPfh95E2gXwQudPOIA%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767365333"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","error":"Not Found","statusCode":404}

Found 2026-01-02 by HttpPlugin

Create report

Open service 99.83.185.157:80 · api.elchrono.com

2026-01-02 06:22

HTTP/1.1 404 Not Found
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Fri, 02 Jan 2026 06:23:02 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=yqQTKDjDd0cK30RA4V0udq3MhxHh0KIqBuhnA7poUs4%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767334982"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=yqQTKDjDd0cK30RA4V0udq3MhxHh0KIqBuhnA7poUs4%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767334982"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","error":"Not Found","statusCode":404}

Found 2026-01-02 by HttpPlugin

Create report

Open service 52.223.53.203:443 · api.elchrono.com

2025-12-23 02:08

HTTP/1.1 404 Not Found
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Tue, 23 Dec 2025 02:08:33 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=tx%2F73U6owqP1YpVh1sexLxPp3Gp42S4oo8Q2cEs00AA%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766455713"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=tx%2F73U6owqP1YpVh1sexLxPp3Gp42S4oo8Q2cEs00AA%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766455713"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","error":"Not Found","statusCode":404}

Found 2025-12-23 by HttpPlugin

Create report

Open service 99.83.185.157:80 · api.elchrono.com

2025-12-22 14:25

HTTP/1.1 404 Not Found
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Mon, 22 Dec 2025 14:25:43 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=AYpJn9jWhuZppOQL6oZ0kYSnY%2Fo3BAQB0bfNhXI1ta4%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766413543"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=AYpJn9jWhuZppOQL6oZ0kYSnY%2Fo3BAQB0bfNhXI1ta4%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766413543"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","error":"Not Found","statusCode":404}

Found 2025-12-22 by HttpPlugin

Create report

Open service 52.223.53.203:443 · api.elchrono.com

2025-12-20 14:34

HTTP/1.1 404 Not Found
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Sat, 20 Dec 2025 14:34:48 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=mLRS4hAjTzsL5vu%2FC3cPUKjHO6a7uy5jLZOVKnPcbnM%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766241288"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=mLRS4hAjTzsL5vu%2FC3cPUKjHO6a7uy5jLZOVKnPcbnM%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766241288"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","error":"Not Found","statusCode":404}

Found 2025-12-20 by HttpPlugin

Create report

Open service 99.83.185.157:80 · api.elchrono.com

2025-12-20 13:32

HTTP/1.1 404 Not Found
Content-Length: 63
Content-Type: application/json; charset=utf-8
Date: Sat, 20 Dec 2025 13:32:34 GMT
Etag: W/"3f-BunLb98SCK6azHy0RO08GDnFBek"
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Cy5ItKXCnnfo4fX55sFADQgaMJxYnC%2BkRZ32yDDGIoI%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766237554"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Cy5ItKXCnnfo4fX55sFADQgaMJxYnC%2BkRZ32yDDGIoI%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766237554"
Server: Heroku
Vary: Origin
Via: 1.1 heroku-router
X-Powered-By: Express
Connection: close


{"message":"Cannot GET /","error":"Not Found","statusCode":404}

Found 2025-12-20 by HttpPlugin

Create report

api.elchrono.com

Fingerprint:

3ce29001a1f31c76479e5f64c5cbe11dbb1e1ddedae45108bd849d86ceaee2dd

CN:

api.elchrono.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-12-24 23:54

Not after:

2026-03-24 23:54

api.elchrono.com

Fingerprint:

aaad19c28668027134619cd97861f5b65bc3f90df42fb417634eb0d84a2865bf

CN:

api.elchrono.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-10-25 23:27

Not after:

2026-01-23 23:27

Domain summary

api.elchrono.com 9

1 recorded

IP summary

52.223.53.203 1 99.83.185.157 1

2 recorded

Domain api.elchrono.com

United States

Software information

Swagger API description is publicly available

Swagger API description is publicly available

api.elchrono.com

api.elchrono.com

Domain summary

IP summary