LeakIX - Host ondace.ro

Domain ondace.ro

France

OVH SAS

Software information

Microsoft-IIS 7.5

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 51.75.166.71
Domain: ondace.ro
Port: 80
URL: http://ondace.ro

First seen 2025-11-10 07:05
Last seen 2026-01-09 06:09
Open for 59 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2026-01-09 06:09
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 51.75.166.73
Domain: ondace.ro
Port: 443
URL: https://ondace.ro

First seen 2025-11-10 07:05
Last seen 2025-12-27 04:23
Open for 46 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd12ec8532c2ec8532c2ec8532c2ec8532c2ec8532c2ec8532c
```
Public Swagger UI/API detected at path: /swagger/index.html
```
  Found on 2025-12-27 04:23
Create report

Open service 51.75.166.73:80 · ondace.ro

2026-01-09 06:09

HTTP/1.1 301 Moved Permanently
content-type: application/json
content-length: 0
access-control-allow-origin: *
cache-control: no-cache, must-revalidate
date: Fri, 09 Jan 2026 06:09:49 GMT
expires: Sat, 1 Jul 2016 05:00:00 GMT
location: https://www.ondacero.es/
x-cached-shortener: true
x-process-time: 0.00014901161193848
server: Microsoft-IIS/7.5
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
x-backend-addr: 192.168.50.21:80
x-request-id: 1767938989.042-286577675-1-8f3952c8572dd6fc11866d4e8a239691
x-log: 0
vary: Accept-Encoding, Origin
x-frontend-host: lb4
x-request-time: 0.003
server-timing: uncached, connection;dur=0.000, header;dur=0.000, request;dur=0.003
alt-svc: h3="51.75.166.68:443"; ma=3600
x-frontend: haproxy4
connection: close

Found 2026-01-09 by HttpPlugin

Create report

Open service 51.75.166.71:80 · ondace.ro

2026-01-09 06:09

HTTP/1.1 301 Moved Permanently
content-type: application/json
content-length: 0
access-control-allow-origin: *
cache-control: no-cache, must-revalidate
date: Fri, 09 Jan 2026 06:09:48 GMT
expires: Sat, 1 Jul 2016 05:00:00 GMT
location: https://www.ondacero.es/
x-cached-shortener: true
x-process-time: 0.00010395050048828
server: Microsoft-IIS/7.5
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
x-backend-addr: 192.168.50.20:80
x-request-id: 1767938988.929-27169877-1-9d3e3a5f80fcd00fc49a7a41106474ed
x-log: 0
vary: Accept-Encoding, Origin
x-frontend-host: lb3
x-request-time: 0.005
server-timing: uncached, connection;dur=0.000, header;dur=0.004, request;dur=0.005
alt-svc: h3="51.68.14.48:443"; ma=3600
x-frontend: haproxy2
connection: close

Found 2026-01-09 by HttpPlugin

Create report

Open service 51.75.166.73:443 · ondace.ro

2025-12-23 06:06

HTTP/1.1 301 Moved Permanently
content-type: application/json
content-length: 0
access-control-allow-origin: *
cache-control: no-cache, must-revalidate
date: Tue, 23 Dec 2025 06:06:14 GMT
expires: Sat, 1 Jul 2016 05:00:00 GMT
location: https://www.ondacero.es/
x-cached-shortener: true
x-process-time: 6.8902969360352E-5
server: Microsoft-IIS/7.5
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
x-backend-addr: 192.168.50.20:80
x-request-id: 1766469974.655-198274239-1-61787f34b1ed7351415694867fd934dd
x-log: 0
vary: Accept-Encoding, Origin
x-frontend-host: lb4
x-request-time: 0.003
server-timing: uncached, connection;dur=0.000, header;dur=0.004, request;dur=0.003
alt-svc: h3="51.75.166.68:443"; ma=3600
x-frontend: haproxy4
connection: close

Found 2025-12-23 by HttpPlugin

Create report

Open service 51.75.166.71:80 · ondace.ro

2025-12-23 06:06

HTTP/1.1 301 Moved Permanently
content-type: application/json
content-length: 0
access-control-allow-origin: *
cache-control: no-cache, must-revalidate
date: Tue, 23 Dec 2025 06:06:13 GMT
expires: Sat, 1 Jul 2016 05:00:00 GMT
location: https://www.ondacero.es/
x-cached-shortener: true
x-process-time: 0.00011014938354492
server: Microsoft-IIS/7.5
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
x-backend-addr: 192.168.50.22:80
x-request-id: 1766469973.640-198274187-1-148e8e20eca483d8d8628144c6cd93ed
x-log: 0
vary: Accept-Encoding, Origin
x-frontend-host: lb4
x-request-time: 0.004
server-timing: uncached, connection;dur=0.004, header;dur=0.004, request;dur=0.004
alt-svc: h3="51.68.14.48:443"; ma=3600
x-frontend: haproxy2
connection: close

Found 2025-12-23 by HttpPlugin

Create report

Open service 51.75.166.71:80 · ondace.ro

2025-12-21 03:25

HTTP/1.1 301 Moved Permanently
content-type: application/json
content-length: 0
access-control-allow-origin: *
cache-control: no-cache, must-revalidate
date: Sun, 21 Dec 2025 03:25:41 GMT
expires: Sat, 1 Jul 2016 05:00:00 GMT
location: https://www.ondacero.es/
x-cached-shortener: true
x-process-time: 7.8201293945312E-5
server: Microsoft-IIS/7.5
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
x-backend-addr: 192.168.50.23:80
x-request-id: 1766287541.032-186409887-1-b05c11e7b1e4cb3833bdb29538b534fa
x-log: 0
vary: Accept-Encoding, Origin
x-frontend-host: lb4
x-request-time: 0.003
server-timing: uncached, connection;dur=0.004, header;dur=0.004, request;dur=0.003
alt-svc: h3="51.68.14.48:443"; ma=3600
x-frontend: haproxy2
connection: close

Found 2025-12-21 by HttpPlugin

Create report

Open service 51.75.166.73:443 · ondace.ro

2025-12-21 03:25

HTTP/1.1 301 Moved Permanently
content-type: application/json
content-length: 0
access-control-allow-origin: *
cache-control: no-cache, must-revalidate
date: Sun, 21 Dec 2025 03:25:40 GMT
expires: Sat, 1 Jul 2016 05:00:00 GMT
location: https://www.ondacero.es/
x-cached-shortener: true
x-process-time: 7.7009201049805E-5
server: Microsoft-IIS/7.5
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
x-backend-addr: 192.168.50.23:80
x-request-id: 1766287540.371-186409848-1-0cfcf27114912c133b555bbe69aabec3
x-log: 0
vary: Accept-Encoding, Origin
x-frontend-host: lb4
x-request-time: 0.003
server-timing: uncached, connection;dur=0.000, header;dur=0.004, request;dur=0.003
alt-svc: h3="51.75.166.68:443"; ma=3600
x-frontend: haproxy4
connection: close

Found 2025-12-21 by HttpPlugin

Create report

Open service 51.75.166.73:443 · ondace.ro

2025-12-19 05:15

HTTP/1.1 301 Moved Permanently
content-type: application/json
content-length: 0
access-control-allow-origin: *
cache-control: no-cache, must-revalidate
date: Fri, 19 Dec 2025 05:15:36 GMT
expires: Sat, 1 Jul 2016 05:00:00 GMT
location: https://www.ondacero.es/
x-cached-shortener: true
x-process-time: 9.4890594482422E-5
server: Microsoft-IIS/7.5
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
x-backend-addr: 192.168.50.20:80
x-request-id: 1766121336.715-176010910-1-b8772749160a1c2f3abee5301fd8f86f
x-log: 0
vary: Accept-Encoding, Origin
x-frontend-host: lb4
x-request-time: 0.003
server-timing: uncached, connection;dur=0.000, header;dur=0.004, request;dur=0.003
alt-svc: h3="51.75.166.68:443"; ma=3600
x-frontend: haproxy4
connection: close

Found 2025-12-19 by HttpPlugin

Create report

Open service 51.75.166.71:80 · ondace.ro

2025-12-19 05:15

HTTP/1.1 301 Moved Permanently
content-type: application/json
content-length: 0
access-control-allow-origin: *
cache-control: no-cache, must-revalidate
date: Fri, 19 Dec 2025 05:15:35 GMT
expires: Sat, 1 Jul 2016 05:00:00 GMT
location: https://www.ondacero.es/
x-cached-shortener: true
x-process-time: 8.1062316894531E-5
server: Microsoft-IIS/7.5
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
x-backend-addr: 192.168.50.20:80
x-request-id: 1766121335.396-176010829-1-1d0dc4ce6c83b0fbe9ad558cb51843fc
x-log: 0
vary: Accept-Encoding, Origin
x-frontend-host: lb4
x-request-time: 0.003
server-timing: uncached, connection;dur=0.004, header;dur=0.004, request;dur=0.003
alt-svc: h3="51.68.14.48:443"; ma=3600
x-frontend: haproxy2
connection: close

Found 2025-12-19 by HttpPlugin

Create report

arqyd.esatres.redbsocy.comcdial.escuer.esdozz.eseldbt.comelperiodi.coeufm.redgcp.socy.eslavoz.gallisti.eulos40es.comlt.clmueb.esondace.rosabviv.cospkup.metelemd.esver.tw

Fingerprint:

6f84cc8f04e4ee00152b4ffc0d3627d63d7b8d7c461dc4ba3d88de9b90615720

CN:

dozz.es

Key:

RSA-2048

Issuer:

R13

Not before:

2025-12-08 15:09

Not after:

2026-03-08 15:09

Domain summary

ondace.ro 9

1 recorded

IP summary

51.75.166.73 1 51.75.166.71 1

2 recorded

Domain ondace.ro

France

Software information

Swagger API description is publicly available

Swagger API description is publicly available

arqyd.esatres.redbsocy.comcdial.escuer.esdozz.eseldbt.comelperiodi.coeufm.redgcp.socy.eslavoz.gallisti.eulos40es.comlt.clmueb.esondace.rosabviv.cospkup.metelemd.esver.tw

Domain summary

IP summary