LeakIX - Host pradagroup.com

Domain pradagroup.com

Germany

Akamai International B.V.

Software information

AkamaiGHost

tcp/443 tcp/80

Apache Apache

tcp/443 tcp/80

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.50.131.132
Domain: api-utils-preprod.pradagroup.com
Port: 443
URL: https://api-utils-preprod.pradagroup.com

First seen 2025-11-16 11:29
Last seen 2026-02-01 23:46
Open for 77 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb450568cc07178d73e7178d73e7178d73e7178d73e
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /liveness
POST /cybersource/responseUrl
```
  Found on 2026-02-01 23:46
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.126.37.153
Domain: courtesy.pradagroup.com
Port: 443
URL: https://courtesy.pradagroup.com

First seen 2024-10-10 16:08
Last seen 2025-11-12 04:34
Open for 397 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176426c7d39a74c68c8e54c68c8e54c68c8e5
```
Found 2 files trough .DS_Store spidering:

/javascripts
/stylesheets
```
  Found on 2025-11-12 04:34
Create report
Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 23.50.131.132
Domain: api-utils.pradagroup.com
Port: 443
URL: https://api-utils.pradagroup.com

First seen 2025-11-16 11:29
Last seen 2026-01-23 11:35
Open for 68 days
- Severity: info
  Fingerprint: 5733ddf49ff49cd1f5e22fb450568cc07178d73e7178d73e7178d73e7178d73e
```
Public Swagger UI/API detected at path: /api/swagger.json - sample paths:
GET /liveness
POST /cybersource/responseUrl
```
  Found on 2026-01-23 11:35
Create report

Open service 23.50.131.132:443 · api-utils.pradagroup.com

2026-01-23 11:35

HTTP/1.1 200 OK
Content-Type: text/html
Request-Context: appId=cid-v1:67ed3dc7-5203-4eb6-946e-b0931c6fb5fc
Expires: Fri, 23 Jan 2026 11:35:29 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 23 Jan 2026 11:35:29 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding
x-api-request-correlation-id: 423c90ed-22e9-496f-ad8d-635b5ffddf00
Strict-Transport-Security: max-age=15768000 ; includeSubDomains ; preload

Found 2026-01-23 by HttpPlugin

Create report

Open service 23.3.89.91:80 · pradagroup.com

2026-01-09 06:53

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://www.pradagroup.com/
Date: Fri, 09 Jan 2026 06:54:00 GMT
Connection: close
Server-Timing: cdn-cache; desc=HIT
Server-Timing: edge; dur=1
Server-Timing: ak_p; desc="1767941640176_386095447_291599317_11_2715_159_0_-";dur=1

Found 2026-01-09 by HttpPlugin

Create report

Open service 23.3.89.91:443 · pradagroup.com

2026-01-09 06:53

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://www.pradagroup.com/
Date: Fri, 09 Jan 2026 06:53:17 GMT
Connection: close
Server-Timing: cdn-cache; desc=HIT
Server-Timing: edge; dur=1
Server-Timing: ak_p; desc="1767941597683_386095447_291570402_15_2389_0_4_-";dur=1

Found 2026-01-09 by HttpPlugin

Create report

Open service 23.50.131.132:443 · api-utils.pradagroup.com

2026-01-09 04:56

HTTP/1.1 200 OK
Content-Type: text/html
Request-Context: appId=cid-v1:67ed3dc7-5203-4eb6-946e-b0931c6fb5fc
Expires: Fri, 09 Jan 2026 04:56:29 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 09 Jan 2026 04:56:29 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding
x-api-request-correlation-id: 9a0e5434-9b0b-4712-9cc0-db54ed0161fe
Strict-Transport-Security: max-age=15768000 ; includeSubDomains ; preload

Found 2026-01-09 by HttpPlugin

Create report

Open service 23.50.131.132:443 · api-utils-preprod.pradagroup.com

2026-01-08 23:11

HTTP/1.1 200 OK
Content-Type: text/html
Request-Context: appId=cid-v1:bb7b9f97-a0e0-4d08-b644-f2cf8886ab8a
Expires: Thu, 08 Jan 2026 23:11:49 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 08 Jan 2026 23:11:49 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding
x-api-request-correlation-id: 2077154a-4f88-455f-9e4e-44a5f2151d58
Strict-Transport-Security: max-age=15768000 ; includeSubDomains ; preload

Found 2026-01-08 by HttpPlugin

Create report

Open service 104.126.37.153:443 · courtesy.pradagroup.com

2026-01-08 23:01
Found 2026-01-08 by HttpPlugin
Create report

Open service 52.210.200.182:443 · t.info.pradagroup.com

2026-01-07 08:35

HTTP/1.1 302 Found
Date: Wed, 07 Jan 2026 08:36:01 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 214
Connection: close
Server: Apache
Location: https://t.info.pradagroup.com/

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://t.info.pradagroup.com/">here</a>.</p>
</body></html>