LeakIX - Host api.kr.daro.so

Domain api.kr.daro.so

CLOUDFLARENET

Software information

cloudflare

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.26.6.89
Domain: api.kr.daro.so
Port: 443
URL: https://api.kr.daro.so

First seen 2025-12-09 14:32
Last seen 2026-01-09 07:56
Open for 30 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 07:56
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.26.7.89
Domain: dev.api.kr.daro.so
Port: 443
URL: https://dev.api.kr.daro.so

First seen 2025-11-25 18:56
Last seen 2026-01-09 05:40
Open for 44 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 05:40
Create report

Open service 104.26.6.89:443 · api.kr.daro.so

2026-01-09 07:56

HTTP/1.1 404 Not Found
Date: Fri, 09 Jan 2026 07:56:53 GMT
Content-Type: application/json
Content-Length: 56
Connection: close
x-xss-protection: 0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
x-dns-prefetch-control: off
x-download-options: noopen
x-permitted-cross-domain-policies: none
vary: Origin
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ta%2FTwKQVAOA6FXb37pzqFqTZHsB2OJIDGMs9V0tDzKg3SnEHdOJM2pgDI0Bc%2B5FQ22bL386JEEQBGt7W%2F%2BfqYfR7dj%2Ft01W60Zzt"}]}
Server: cloudflare
CF-RAY: 9bb261713d68ef33-LHR


{"code":404,"error":"NotFound","message":"Cannot GET /"}

Found 2026-01-09 by HttpPlugin

Create report

Open service 104.26.7.89:443 · dev.api.kr.daro.so

2026-01-09 05:40

HTTP/1.1 404 Not Found
Date: Fri, 09 Jan 2026 05:40:54 GMT
Content-Type: application/json
Content-Length: 56
Connection: close
x-xss-protection: 0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
x-dns-prefetch-control: off
x-download-options: noopen
x-permitted-cross-domain-policies: none
vary: Origin
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=D99PitHDZbRk%2F7Qf%2Blpza%2BINK9qhUb0r39NdG74xwFDy3RaJL43xi4mLm1ONn6Ekswmfo6UJ2nKnyv0I9dY8QtT0MJzjBx3OQ015wBTqCaUG"}]}
Server: cloudflare
CF-RAY: 9bb19a3d2e4fdc54-FRA


{"code":404,"error":"NotFound","message":"Cannot GET /"}

Found 2026-01-09 by HttpPlugin

Create report

Open service 104.26.6.89:443 · api.kr.daro.so

2026-01-02 13:17

HTTP/1.1 404 Not Found
Date: Fri, 02 Jan 2026 13:17:33 GMT
Content-Type: application/json
Content-Length: 56
Connection: close
x-xss-protection: 0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
x-dns-prefetch-control: off
x-download-options: noopen
x-permitted-cross-domain-policies: none
vary: Origin
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=JiXpnqSsiMieV4i0oGDXaqvh4mEYj0ZGcJ42xAlujzJVDWp9NMDLLTU6AFTUiE3Rkmk2eXLVf4vGKwHU6x8EPY4DrEVh1ylQjRTQQOY%3D"}]}
Server: cloudflare
CF-RAY: 9b7a898a5f029fbe-AMS


{"code":404,"error":"NotFound","message":"Cannot GET /"}

Found 2026-01-02 by HttpPlugin

Create report

Open service 104.26.7.89:443 · dev.api.kr.daro.so

2026-01-02 04:56

HTTP/1.1 404 Not Found
Date: Fri, 02 Jan 2026 04:56:05 GMT
Content-Type: application/json
Content-Length: 56
Connection: close
x-xss-protection: 0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
x-dns-prefetch-control: off
x-download-options: noopen
x-permitted-cross-domain-policies: none
vary: Origin
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=UgLxPYr7e56NZ%2Fvk9l3pEm1TQuXgY5IRsbg%2FzRc2frNX8YeC035YaXz5b%2B3b0H%2F6QmjfjuN6q20PBZufOGVw%2Fo0vtSjark0q83YYRe0ouMZJ"}]}
Server: cloudflare
CF-RAY: 9b77aaf72d0dc8b1-YYZ


{"code":404,"error":"NotFound","message":"Cannot GET /"}

Found 2026-01-02 by HttpPlugin

Create report

Open service 104.26.7.89:443 · dev.api.kr.daro.so

2025-12-22 17:13

HTTP/1.1 404 Not Found
Date: Mon, 22 Dec 2025 17:13:57 GMT
Content-Type: application/json
Content-Length: 56
Connection: close
x-xss-protection: 0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
x-dns-prefetch-control: off
x-download-options: noopen
x-permitted-cross-domain-policies: none
vary: Origin
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=FpG8OvFHgNDyW9IblhryqJTwo%2BnIUqDOExeacXzz8SLu8OdgCsozpuTZFREak32Y4%2FoSipMabVIFMm8ELCuGoLsQtVBe%2FfxHZpI8WN5aj%2FWZ"}]}
Server: cloudflare
CF-RAY: 9b2140b12a5f97ed-EWR


{"code":404,"error":"NotFound","message":"Cannot GET /"}

Found 2025-12-22 by HttpPlugin

Create report

Open service 104.26.6.89:443 · api.kr.daro.so

2025-12-22 15:20

HTTP/1.1 404 Not Found
Date: Mon, 22 Dec 2025 15:20:22 GMT
Content-Type: application/json
Content-Length: 56
Connection: close
x-xss-protection: 0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
x-dns-prefetch-control: off
x-download-options: noopen
x-permitted-cross-domain-policies: none
vary: Origin
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CrajhYQJnoFSuucikaU7GaIn7TvF0L7XlHXD7LZvCtdCfIVI5yj6REgFAKC8yYRW%2FRsrwMgg59Mny48aKiOZG1tClQVpkXuEqZ93%2FIg%3D"}]}
Server: cloudflare
CF-RAY: 9b209a54f928f88e-SIN


{"code":404,"error":"NotFound","message":"Cannot GET /"}

Found 2025-12-22 by HttpPlugin

Create report

Open service 104.26.7.89:443 · dev.api.kr.daro.so

2025-12-20 14:08

HTTP/1.1 404 Not Found
Date: Sat, 20 Dec 2025 14:08:36 GMT
Content-Type: application/json
Content-Length: 56
Connection: close
x-xss-protection: 0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
x-dns-prefetch-control: off
x-download-options: noopen
x-permitted-cross-domain-policies: none
vary: Origin
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=FzxCZRP852AkUZE4gRZuwVz1Jpz%2FPtod8j2OPxNwslS%2BRW3zZ3dDHjUfZjx%2BB5fx2J4Oaf%2F%2Bm1S50AJhAlYNQX1iIGWADzvmIcLVhJcd4GSj"}]}
Server: cloudflare
CF-RAY: 9b0fb6711d0b4219-EWR


{"code":404,"error":"NotFound","message":"Cannot GET /"}

Found 2025-12-20 by HttpPlugin

Create report

Open service 104.26.6.89:443 · api.kr.daro.so

2025-12-20 11:01

HTTP/1.1 404 Not Found
Date: Sat, 20 Dec 2025 11:01:31 GMT
Content-Type: application/json
Content-Length: 56
Connection: close
x-xss-protection: 0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
x-dns-prefetch-control: off
x-download-options: noopen
x-permitted-cross-domain-policies: none
vary: Origin
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=3fuKHH30xnzAkmgpZmrHzkJ4SBvLi3wC1CR3wEH71eYf5DibYPHIHb5TMoeEYQ26Hfkfd6QoRmTrajklnEQWas%2FruunI1AvEdUqDT44%3D"}]}
Server: cloudflare
CF-RAY: 9b0ea464ed78d399-FRA


{"code":404,"error":"NotFound","message":"Cannot GET /"}

Found 2025-12-20 by HttpPlugin

Create report

api.kr.daro.so

Fingerprint:

1a259484e1e7b03254ce805e1e6259b7657f73c75916d06f7e8c27bfba5245cc

CN:

api.kr.daro.so

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-12-09 13:31

Not after:

2026-03-09 14:31

dev.api.kr.daro.so

Fingerprint:

5c9a5dd513190f85ac8543310bb0b81a26264854e19fc96541cd89ff5219dbc7

CN:

dev.api.kr.daro.so

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-11-25 17:56

Not after:

2026-02-23 18:56

Domain summary

api.kr.daro.so 4 dev.api.kr.daro.so 4

2 recorded

IP summary

104.26.6.89 2 104.26.7.89 2

2 recorded

Domain api.kr.daro.so

Software information

Swagger API description is publicly available

Swagger API description is publicly available

api.kr.daro.so

dev.api.kr.daro.so

Domain summary

IP summary