LeakIX - Host overseerr.alarlab.dev

Domain overseerr.alarlab.dev

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.21.79.193
Domain: overseerr.alarlab.dev
Port: 443
URL: https://overseerr.alarlab.dev

First seen 2025-10-22 05:28
Last seen 2026-02-09 21:47
Open for 110 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1bf890109bf890109bf890109bf890109bf890109bf890109
```
Public Swagger UI/API detected at path: /api-docs/swagger.json
```
  Found on 2026-02-09 21:47
Create report

Open service 2606:4700:3032::ac43:ab04:8443 · overseerr.alarlab.dev

2026-01-26 09:52

HTTP/1.1 522 <none>
Date: Mon, 26 Jan 2026 09:52:30 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
Server-Timing: cfEdge;dur=19620,cfOrigin;dur=0
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9c3f1db6e9678bdb-SJC
alt-svc: h3=":8443"; ma=86400


error code: 522

Found 2026-01-26 by HttpPlugin

Create report

Open service 172.67.171.4:8443 · overseerr.alarlab.dev

2026-01-26 09:52

HTTP/1.1 522 <none>
Date: Mon, 26 Jan 2026 09:52:31 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
Server-Timing: cfEdge;dur=19691,cfOrigin;dur=0
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9c3f1db6e8498982-SIN
alt-svc: h3=":8443"; ma=86400


error code: 522

Found 2026-01-26 by HttpPlugin

Create report

Open service 172.67.171.4:443 · overseerr.alarlab.dev

2026-01-26 09:52

HTTP/1.1 307 Temporary Redirect
Date: Mon, 26 Jan 2026 09:52:10 GMT
Transfer-Encoding: chunked
Connection: close
x-powered-by: Express
location: /login
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=6,cfOrigin;dur=89
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=NmkUHMxUJYFds8%2Bs0vxoeth97hO8rX2PrucCYqwZroXd2yXIs7FMbtdzl2lZPxuiw1WFLQMHSw7De%2BL95KI4z%2BoRNdaZe%2BcvJg1L0hquV0MCEAkTjQ%3D%3D"}]}
Server: cloudflare
CF-RAY: 9c3f1db1fa491016-EWR
alt-svc: h3=":443"; ma=86400

Found 2026-01-26 by HttpPlugin

Create report

Open service 2606:4700:3030::6815:4fc1:443 · overseerr.alarlab.dev

2026-01-26 09:52

HTTP/1.1 307 Temporary Redirect
Date: Mon, 26 Jan 2026 09:52:10 GMT
Transfer-Encoding: chunked
Connection: close
x-powered-by: Express
location: /login
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=7,cfOrigin;dur=75
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=D8TjwbN0zf3gH8ZdUx7iTS6P%2BPOY1koaDWJ4fu3WX%2FXYd36IWMc4FKBLqAUgew55yHy7t0LL3oBNzZ9ReCIzNWybr7leVLfHuSXeYkDAdt8rfXs69TNnTOlFOfqpcuYfzg%3D%3D"}]}
Server: cloudflare
CF-RAY: 9c3f1db19893c481-EWR
alt-svc: h3=":443"; ma=86400

Found 2026-01-26 by HttpPlugin

Create report

Open service 104.21.79.193:8443 · overseerr.alarlab.dev

2026-01-26 09:52

HTTP/1.1 522 <none>
Date: Mon, 26 Jan 2026 09:52:30 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
Server-Timing: cfEdge;dur=19636,cfOrigin;dur=0
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9c3f1db67f147206-EWR
alt-svc: h3=":8443"; ma=86400


error code: 522

Found 2026-01-26 by HttpPlugin

Create report

Open service 104.21.79.193:80 · overseerr.alarlab.dev

2026-01-26 09:52

HTTP/1.1 308 Permanent Redirect
Date: Mon, 26 Jan 2026 09:52:10 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://overseerr.alarlab.dev
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=D5vHLE%2FGNU6FFgAmoPU4%2BXyeKtweb8NsLZYaIurYqB9k1UDfGL3a7bn%2Fr17aqnO8H5xZ6wMFNirTisTy%2B8lAvlbYwpjVGsyB8h1aOFm3fM8VgTwhRg%3D%3D"}]}
Server: cloudflare
CF-RAY: 9c3f1db1aea8d395-FRA
alt-svc: h3=":443"; ma=86400

Page title: 308 Permanent Redirect

<html>
<head><title>308 Permanent Redirect</title></head>
<body>
<center><h1>308 Permanent Redirect</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 2606:4700:3030::6815:4fc1:80 · overseerr.alarlab.dev

2026-01-26 09:52

HTTP/1.1 308 Permanent Redirect
Date: Mon, 26 Jan 2026 09:52:10 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://overseerr.alarlab.dev
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=wfSNsRzSODXYuUFRz9%2BUnf%2FPymu09d61hABFQDIgb5kj1O%2Fp1lUEsfleAmTiCPmatVPCNSM%2F3mLNXyjSUvLLseuOO7tYdvkNgXYfP1QGufFAL%2B86rqbXePdwQIJn8gq5nQ%3D%3D"}]}
Server: cloudflare
CF-RAY: 9c3f1db1ca969fca-AMS
alt-svc: h3=":443"; ma=86400

Page title: 308 Permanent Redirect

<html>
<head><title>308 Permanent Redirect</title></head>
<body>
<center><h1>308 Permanent Redirect</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 2606:4700:3030::6815:4fc1:8443 · overseerr.alarlab.dev

2026-01-26 09:52

HTTP/1.1 522 <none>
Date: Mon, 26 Jan 2026 09:52:30 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9c3f1db58bc49d0f-LHR
alt-svc: h3=":8443"; ma=86400


error code: 522

Found 2026-01-26 by HttpPlugin

Create report

Open service 2606:4700:3032::ac43:ab04:443 · overseerr.alarlab.dev

2026-01-26 09:52

HTTP/1.1 307 Temporary Redirect
Date: Mon, 26 Jan 2026 09:52:11 GMT
Transfer-Encoding: chunked
Connection: close
x-powered-by: Express
location: /login
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=hsJEkPYgDBzr%2BnXWVMWXG4pd%2BZZPemEbTjQxzmOk%2FZNgGzqfj7%2FPIn9aqEOfJ1Md9TC35HHYHeG3nWHY2Sy4QyFRLfOWqNMW4jjq6h68Qx9oUs%2B8MZi52u3hUEB6csO1Dw%3D%3D"}]}
Server: cloudflare
CF-RAY: 9c3f1db23839d26a-FRA
alt-svc: h3=":443"; ma=86400

Found 2026-01-26 by HttpPlugin

Create report

Open service 2606:4700:3032::ac43:ab04:80 · overseerr.alarlab.dev

2026-01-26 09:52

HTTP/1.1 308 Permanent Redirect
Date: Mon, 26 Jan 2026 09:52:10 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://overseerr.alarlab.dev
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=H%2FT2DlmRaVd%2BveBjYNquo2KadwLkQ8OZ3TcMzatcttWj%2FFgmam0LGf2W3dOMgdCgfpLkIQT91VJGi9xpFwak9HDblqgph3kf0pKLBfYRsN0ie%2Bd%2BZqMcMlWqYf7FvE6fLQ%3D%3D"}]}
Server: cloudflare
CF-RAY: 9c3f1db0cc67718d-LHR
alt-svc: h3=":443"; ma=86400

Page title: 308 Permanent Redirect

<html>
<head><title>308 Permanent Redirect</title></head>
<body>
<center><h1>308 Permanent Redirect</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 104.21.79.193:443 · overseerr.alarlab.dev

2026-01-26 09:52

HTTP/1.1 307 Temporary Redirect
Date: Mon, 26 Jan 2026 09:52:11 GMT
Transfer-Encoding: chunked
Connection: close
x-powered-by: Express
location: /login
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Rt4dK%2F6FsOpCvRY96w482XZQKAgahv6I8j5FSHpNVrZl6UEvF9IGgEPeIQ4i4XYmTWX7Nv1fLg9oZrFUvzJ09377W6HbTs1foQXWPGlLj%2Fc3trmFoQ%3D%3D"}]}
Server: cloudflare
CF-RAY: 9c3f1db1fff9d5a3-AMS
alt-svc: h3=":443"; ma=86400

Found 2026-01-26 by HttpPlugin

Create report

Open service 172.67.171.4:80 · overseerr.alarlab.dev

2026-01-26 09:52

HTTP/1.1 308 Permanent Redirect
Date: Mon, 26 Jan 2026 09:52:10 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Location: https://overseerr.alarlab.dev
cf-cache-status: DYNAMIC
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=sGC4IbHe00RqIB4EslIVvFVmvCY%2FVw51XWu32Q7uWwE%2BHDnNlgAYdUiVaFsavCIWbAB%2F%2F89oWu2%2B18RqQ%2FPLywz%2BkH%2FG5zCwM4zdFqAfbJzFhpQXGg%3D%3D"}]}
Server: cloudflare
CF-RAY: 9c3f1db0d93c9b63-FRA
alt-svc: h3=":443"; ma=86400

Page title: 308 Permanent Redirect

<html>
<head><title>308 Permanent Redirect</title></head>
<body>
<center><h1>308 Permanent Redirect</h1></center>
<hr><center>nginx</center>
</body>
</html>

Found 2026-01-26 by HttpPlugin

Create report

Open service 104.21.79.193:443 · overseerr.alarlab.dev

2026-01-22 20:40

HTTP/1.1 307 Temporary Redirect
Date: Thu, 22 Jan 2026 20:40:06 GMT
Transfer-Encoding: chunked
Connection: close
x-powered-by: Express
location: /login
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: DYNAMIC
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Q2mIfHWBBpiiR%2Bkcs410jaZ4kuYdamzid9gUmAKZOKmojI0mmvzSEQyscsiY4OHS1SmKZIJCwWfoYiU%2FF%2FUFf3Za%2BoKcTr9Cr7yNv0XwlFGo147xyA%3D%3D"}]}
Server: cloudflare
CF-RAY: 9c21dd4c9eded26c-FRA
alt-svc: h3=":443"; ma=86400

Found 2026-01-22 by HttpPlugin

Create report

alarlab.dev*.alarlab.dev

Fingerprint:

7244ec00ad28d16044572f4d32edd6eb0d9c46d7b45f63ad75937b6af85bc409

CN:

alarlab.dev

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-12-30 10:24

Not after:

2026-03-30 11:22

Domain summary

overseerr.alarlab.dev 13

1 recorded

IP summary

2606:4700:3032::ac43:ab04 1 172.67.171.4 1 2606:4700:3030::6815:4fc1 1 104.21.79.193 1

4 recorded

Domain overseerr.alarlab.dev

Software information

Swagger API description is publicly available

alarlab.dev*.alarlab.dev

Domain summary

IP summary