LeakIX - Host dev-yellowstoneconsole.csp-digital.com

Domain dev-yellowstoneconsole.csp-digital.com

Germany

Akamai International B.V.

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.126.37.129
Domain: dev-yellowstoneconsole.csp-digital.com
Port: 443
URL: https://dev-yellowstoneconsole.csp-digital.com

First seen 2024-10-11 05:54
Last seen 2026-02-06 05:11
Open for 482 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d70780d5270780d5270780d5270780d52
```
Found 1 files trough .DS_Store spidering:

/config
```
  Found on 2026-02-06 05:11
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.126.37.129
Domain: dev-yellowstoneconsole.csp-digital.com
Port: 443
URL: https://dev-yellowstoneconsole.csp-digital.com

First seen 2025-10-14 16:43
Last seen 2026-02-02 09:10
Open for 110 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d60d75f9e89457df6809bfa375601040ca7e901ea88

Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /api/ManagedCorporations/{id}
GET /api/Activities
GET /api/ApplicationUsers
GET /api/Configurations/GetApiConfigurations
GET /api/Configurations/GetBlobStorageConfigurations
GET /api/Configurations/GetDataBaseConfigurations
GET /api/Configurations/GetEventHubConfigurations
GET /api/Configurations/GetFilterConfigurations
GET /api/Customers
GET /api/ManagedCorporations
GET /api/MasterDatas/Activities
GET /api/MasterDatas/PortalSjs
GET /api/MasterDatas/Roles
GET /api/MasterDatas/Sjs
GET /api/MasterDatas/Ues
GET /api/MasterDatas/Ups
GET /api/MasterDatas/Wastes
GET /api/Referents
GET /api/Roles
GET /api/Sites
GET /api/Sites/Export
GET /api/Sites/{siteId}/ACtivities
GET /api/Sites/{siteId}/Wastes
GET /api/Uploads
GET /api/Users
GET /api/Users/Export
GET /api/Users/Roles
GET /api/Users/{metadataId}/UserMetaDatas
GET /api/Wastes
GET /api/Wastes/{category}/SubCategories
GET /api/Wastes/{category}/SubCategories/{subcategory}/Wastes
GET /api/Workflows
GET /api/Workflows/Count
GET /api/Workflows/Tasks
GET /api/Workflows/{id}/Tasks
POST /api
POST /api/Configurations/PostApiConfiguration
POST /api/Configurations/PostBlobStorageConfiguration
POST /api/Configurations/PostDataBaseConfiguration
POST /api/Configurations/PostEventHubConfiguration
POST /api/Configurations/PostFilterConfiguration
POST /api/ManagedCorporations/Configuration
POST /api/Sites/Upload
POST /api/Users/Upload

Found on 2026-02-02 09:10

Create report

Open service 104.126.37.129:443 · dev-yellowstoneconsole.csp-digital.com

2026-01-23 16:59

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Mon, 12 Jan 2026 12:53:36 GMT
ETag: "6964eed0-2e9"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Akamai-Transformed: 9 745 0 pmb=mRUM,2
Expires: Fri, 23 Jan 2026 16:59:37 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 23 Jan 2026 16:59:37 GMT
Content-Length: 5451
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=35
Server-Timing: origin; dur=19
Server-Timing: ak_p; desc="1769187577280_1753097630_1397576947_5415_12971_0_6_-";dur=1

Page title: Yellowstone management

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Web site created using create-react-app"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>Yellowstone management</title><script src="/config/defaultConfig.js?v=#{Release.Artifacts._Source.BuildId}#"></script><script defer="defer" src="/static/js/main.3383ffa5.js"></script><link href="/static/css/main.c0e315dc.css" rel="stylesheet">
<script>(window.BOOMR_mq=window.BOOMR_mq||[]).push(["addVar",{"rua.upush":"false","rua.cpush":"false","rua.upre":"false","rua.cpre":"false","rua.uprl":"false","rua.cprl":"false","rua.cprf":"false","rua.trans":"","rua.cook":"false","rua.ims":"false","rua.ufprl":"false","rua.cfprl":"false","rua.isuxp":"false","rua.texp":"norulematch","rua.ceh":"false","rua.ueh":"false","rua.ieh.st":"0"}]);</script>
                              <script>!function(e){var n="https://s.go-mpulse.net/boomerang/";if("False"=="True")e.BOOMR_config=e.BOOMR_config||{},e.BOOMR_config.PageParams=e.BOOMR_config.PageParams||{},e.BOOMR_config.PageParams.pci=!0,n="https://s2.go-mpulse.net/boomerang/";if(window.BOOMR_API_key="CWFEF-5DXED-V9LGF-ST3BM-N7UX5",function(){function e(){if(!o){var e=document.createElement("script");e.id="boomr-scr-as",e.src=window.BOOMR.url,e.async=!0,i.parentNode.appendChild(e),o=!0}}function t(e){o=!0;var n,t,a,r,d=document,O=window;if(window.BOOMR.snippetMethod=e?"if":"i",t=function(e,n){var t=d.createElement("script");t.id=n||"boomr-if-as",t.src=window.BOOMR.url,BOOMR_lstart=(new Date).getTime(),e=e||d.body,e.appendChild(t)},!window.addEventListener&&window.attachEvent&&navigator.userAgent.match(/MSIE [67]\./))return window.BOOMR.snippetMethod="s",void t(i.parentNode,"boomr-async");a=document.createElement("IFRAME"),a.src="about:blank",a.title="",a.role="presentation",a.loading="eager",r=(a.frameElement||a).style,r.width=0,r.height=0,r.border=0,r.display="none",i.parentNode.appendChild(a);try{O=a.contentWindow,d=O.document.open()}catch(_){n=document.domain,a.src="javascript:var d=document.open();d.domain='"+n+"';void(0);",O=a.contentWindow,d=O.document.open()}if(n)d._boomrl=function(){this.domain=n,t()},d.write("<bo"+"dy onload='document._boomrl();'>");else if(O._boomrl=function(){t()},O.addEventListener)O.addEventListener("load",O._boomrl,!1);else if(O.attachEvent)O.attachEvent("onload",O._boomrl);d.close()}function a(e){window.BOOMR_onload=e&&e.timeStamp||(new Date).getTime()}if(!window.BOOMR||!window.BOOMR.version&&!window.BOOMR.snippetExecuted){window.BOOMR=window.BOOMR||{},window.BOOMR.snippetStart=(new Date).getTime(),window.BOOMR.snippetExecuted=!0,window.BOOMR.snippetVersion=12,window.BOOMR.url=n+"CWFEF-5DXED-V9LGF-ST3BM-N7UX5";var i=document.currentScript||document.getElementsByTagName("script")[0],o=!1,r=document.createElement("link");if(r.relList&&"function"==typeof r.relList.supports&&r.relList.supports("preload")&&"as"in r)window.BOOMR.snippetMethod="p",r.href=window.BOOMR.url,r.rel="preload",r.as="script",r.addEventListener("load",e),r.addEventListener("error",function(){t(!0)}),setTimeout(function(){if(!o)t(!0)},3e3),BOOMR_lstart=(new Date).getTime(),i.parentNode.appendChild(r);else t(!1);if(window.addEventListener)window.addEventListener("load",a,!1);else if(window.attachEvent)window.attachEvent("onload",a)}}(),"".length>0)if(e&&"performance"in e&&e.performance&&"function"==typeof e.performance.setResourceTimingBufferSize)e.performance.setResourceTimingBufferSize();!function(){if(BOOMR=e.BOOMR||{},BOOMR.plugins=BOOMR.plugins||{},!BOOMR.plugins.AK){var n=""=="true"?1:0,t="",a="txtbhddipysyc2ltvd4q-f-d5fa0d729-clientnsv4-s.akamaihd.net",i="false"=="true"?2:1,o={"ak.v":"39","ak.cp":"1377297","ak.ai":parseInt("833179",10),"ak.ol":"0","ak.cr":0,"ak.ipv":4,"ak.proto":"http/1.1","ak.rid":"534d54f3","ak.r":43027,"ak.a2":n,"ak.m":"dsca","ak.n":"essl","ak.bpcip":"157.230.19.0","ak.cport":49572,"ak.gh

Found 2026-01-23 by HttpPlugin

Domain dev-yellowstoneconsole.csp-digital.com

Germany

MacOS file listing through .DS_Store file

Swagger API description is publicly available

Domain summary

IP summary