LeakIX - Host prd-yellowstoneconsole.csp-digital.com

Domain prd-yellowstoneconsole.csp-digital.com

Germany

Akamai International B.V.

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.126.37.161
Domain: prd-yellowstoneconsole.csp-digital.com
Port: 443
URL: https://prd-yellowstoneconsole.csp-digital.com

First seen 2025-09-19 23:42
Last seen 2026-02-16 05:14
Open for 149 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d70780d5270780d5270780d5270780d52
```
Found 1 files trough .DS_Store spidering:

/config
```
  Found on 2026-02-16 05:14
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 104.126.37.161
Domain: prd-yellowstoneconsole.csp-digital.com
Port: 443
URL: https://prd-yellowstoneconsole.csp-digital.com

First seen 2025-10-15 10:14
Last seen 2026-02-16 05:14
Open for 123 days

Severity: info
Fingerprint: 5733ddf49ff49cd1f3d88d60d75f9e89457df6809bfa375601040ca7e901ea88

Public Swagger UI/API detected at path: /swagger/v1/swagger.json - sample paths:
DELETE /api/ManagedCorporations/{id}
GET /api/Activities
GET /api/ApplicationUsers
GET /api/Configurations/GetApiConfigurations
GET /api/Configurations/GetBlobStorageConfigurations
GET /api/Configurations/GetDataBaseConfigurations
GET /api/Configurations/GetEventHubConfigurations
GET /api/Configurations/GetFilterConfigurations
GET /api/Customers
GET /api/ManagedCorporations
GET /api/MasterDatas/Activities
GET /api/MasterDatas/PortalSjs
GET /api/MasterDatas/Roles
GET /api/MasterDatas/Sjs
GET /api/MasterDatas/Ues
GET /api/MasterDatas/Ups
GET /api/MasterDatas/Wastes
GET /api/Referents
GET /api/Roles
GET /api/Sites
GET /api/Sites/Export
GET /api/Sites/{siteId}/ACtivities
GET /api/Sites/{siteId}/Wastes
GET /api/Uploads
GET /api/Users
GET /api/Users/Export
GET /api/Users/Roles
GET /api/Users/{metadataId}/UserMetaDatas
GET /api/Wastes
GET /api/Wastes/{category}/SubCategories
GET /api/Wastes/{category}/SubCategories/{subcategory}/Wastes
GET /api/Workflows
GET /api/Workflows/Count
GET /api/Workflows/Tasks
GET /api/Workflows/{id}/Tasks
POST /api
POST /api/Configurations/PostApiConfiguration
POST /api/Configurations/PostBlobStorageConfiguration
POST /api/Configurations/PostDataBaseConfiguration
POST /api/Configurations/PostEventHubConfiguration
POST /api/Configurations/PostFilterConfiguration
POST /api/ManagedCorporations/Configuration
POST /api/Sites/Upload
POST /api/Users/Upload

Found on 2026-02-16 05:14

Create report

Open service 2.16.204.141:80 · prd-yellowstoneconsole.csp-digital.com

2026-01-11 04:59

HTTP/1.1 308 Permanent Redirect
Content-Type: text/html
Content-Length: 164
Location: https://prd-yellowstoneconsole.csp-digital.com
Expires: Sun, 11 Jan 2026 04:59:57 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 11 Jan 2026 04:59:57 GMT
Connection: close
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=9
Server-Timing: origin; dur=3
Server-Timing: ak_p; desc="1768107597074_34610573_3402344901_1210_9828_83_0_-";dur=1

Page title: 308 Permanent Redirect

<html>
<head><title>308 Permanent Redirect</title></head>
<body>
<center><h1>308 Permanent Redirect</h1></center>
<hr><center>nginx</center>
</body>
</html>