LeakIX - Host static-yle-prod.c4.yle.fi

Domain static-yle-prod.c4.yle.fi

United States

AMAZON-02

Software information

AmazonS3

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.173.187.3
Domain: static-yle-prod.c4.yle.fi
Port: 443
URL: https://static-yle-prod.c4.yle.fi

First seen 2026-01-15 10:09
Last seen 2026-02-02 08:15
Open for 17 days

Severity: high
Fingerprint: 5f32cf5d6962f09c8c9af8b78c9af8b7b6c4cb8abfd7de47643efa957b8e8f3a

Found 128 files trough .DS_Store spidering:

/10m
/10m/adobe
/10m/adobe/AppMeasurement.js
/10m/adobe/configuration.js
/10m/adobe/scode_sample.js
/10m/adobe/scode_sample_yle_new.js
/10m/adobe/video.analytics.provider.js
/10m/adobe/VideoHeartbeat.min.js
/10m/adobe/VisitorAPI.js
/10m/adobe-poc
/10m/adobe-poc/AppMeasurement.js
/10m/adobe-poc/configuration.js
/10m/adobe-poc/scode_sample.js
/10m/adobe-poc/scode_sample_yle_new.js
/10m/adobe-poc/video.analytics.provider.js
/10m/adobe-poc/VideoHeartbeat.min.js
/10m/adobe-poc/VisitorAPI.js
/10m/amdtest
/10m/amdtest/embed.js
/10m/areena
/10m/areena/simulcast
/10m/areena-embed-test
/10m/areena-static
/10m/assembly-winter-2018
/10m/bitmovin
/10m/bitmovin/AppMeasurement.js
/10m/bitmovin/configuration.js
/10m/bitmovin/scode_sample.js
/10m/bitmovin/scode_sample_yle_new.js
/10m/bitmovin/video.analytics.provider.js
/10m/bitmovin/VideoHeartbeat.min.js
/10m/bitmovin/VisitorAPI.js
/10m/charbeat
/10m/charbeat/chartbeat_iframe_conf.js
/10m/charbeat/chartbeat_iframe_conf_test.js
/10m/charbeat-test
/10m/charbeat-test/chartbeat_iframe_conf.js
/10m/charbeat-test/index.html
/10m/embedded
/10m/embedded/1-4142417.html
/10m/flowplayer-hls-test
/10m/flowplayer-hls-test/flowplayer.js
/10m/flowplayer-hls-test/html5.css
/10m/flowplayer-hls-test/index.html
/10m/flowplayer-test
/10m/flowplayer-test/example
/10m/hf
/10m/hf/v2
/10m/hf/v2/header
/10m/hf/v2/header/css
/10m/hf/v2/header/html
/10m/hf/v2/header/js
/10m/ie11
/10m/ie11/1x1.html
/10m/ie11/display_none.html
/10m/ie11/klassinen1.html
/10m/ie11/opacity0.html
/10m/ie11/puhe1.html
/10m/ie11/visibility_hidden.html
/10m/ie11/visible.html
/10m/joulukortti
/10m/joulukortti/1x1.html
/10m/joulukortti/display_none.html
/10m/joulukortti/klassinen1.html
/10m/joulukortti/opacity0.html
/10m/joulukortti/puhe1.html
/10m/joulukortti/visibility_hidden.html
/10m/joulukortti/visible.html
/10m/kaltura-player
/10m/kaltura-player/AppMeasurement.js
/10m/kaltura-player/configuration.js
/10m/kaltura-player/scode_sample.js
/10m/kaltura-player/scode_sample_yle_new.js
/10m/kaltura-player/video.analytics.provider.js
/10m/kaltura-player/VideoHeartbeat.min.js
/10m/kaltura-player/VisitorAPI.js
/10m/kaltura-v3
/10m/kaltura-v3/2019-11-5
/10m/kaltura-v3/2019-11-5/chromecast_test.html
/10m/kaltura-v3/2019-11-5/digita1.html
/10m/kaltura-v3/2019-11-5/yle.fi.html
/10m/kaltura-v3/2020-3-3
/10m/kaltura-v3/2020-3-3/chromecast_test.html
/10m/kaltura-v3/2020-3-3/digita1.html
/10m/kaltura-v3/2020-3-3/yle.fi.html
/10m/kaltura-v3/adform
/10m/kaltura-v3/adform/chromecast_test.html
/10m/kaltura-v3/adform/digita1.html
/10m/kaltura-v3/adform/yle.fi.html
/10m/kaltura-v3/adobe-test
/10m/kaltura-v3/adobe-test/chromecast_test.html
/10m/kaltura-v3/adobe-test/digita1.html
/10m/kaltura-v3/adobe-test/yle.fi.html
/10m/kaltura-v3/audio-test
/10m/kaltura-v3/audio-test/chromecast_test.html
/10m/kaltura-v3/audio-test/digita1.html
/10m/kaltura-v3/audio-test/yle.fi.html
/10m/kaltura-v3/caption-line-breaks
/10m/kaltura-v3/caption-line-breaks/chromecast_test.html
/10m/kaltura-v3/caption-line-breaks/digita1.html
/10m/kaltura-v3/caption-line-breaks/yle.fi.html
/10m/kaltura-v3/chromecast_test.html
/10m/kaltura-v3/digita1.html
/10m/kaltura-v3/latest
/10m/kaltura-v3/latest/backup
/10m/kaltura-v3/latest/backup/chromecast_test.html
/10m/kaltura-v3/latest/backup/digita1.html
/10m/kaltura-v3/latest/backup/yle.fi.html
/10m/kaltura-v3/latest/digita.html
/10m/kaltura-v3/latest/livestreams.html
/10m/kaltura-v3/latest/test.html
/10m/kaltura-v3/latesttest
/10m/kaltura-v3/latesttest/chromecast_test.html
/10m/kaltura-v3/latesttest/digita1.html
/10m/kaltura-v3/latesttest/yle.fi.html
/10m/kaltura-v3/leka-test
/10m/kaltura-v3/leka-test/chromecast_test.html
/10m/kaltura-v3/leka-test/digita1.html
/10m/kaltura-v3/leka-test/yle.fi.html
/10m/kaltura-v3/muted-autoplay
/10m/kaltura-v3/muted-autoplay/chromecast_test.html
/10m/kaltura-v3/muted-autoplay/digita1.html
/10m/kaltura-v3/muted-autoplay/yle.fi.html
/10m/kaltura-v3/requirejs
/10m/kaltura-v3/requirejs/chromecast_test.html
/10m/kaltura-v3/requirejs/digita1.html
/10m/kaltura-v3/requirejs/yle.fi.html
/10m/kaltura-v3/yle.fi.html

Found on 2026-02-02 08:15

Create report

Open service 18.173.187.3:443 · static-yle-prod.c4.yle.fi

2026-01-23 03:17

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1462
Connection: close
Last-Modified: Fri, 19 Dec 2025 07:40:50 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 22 Jan 2026 19:23:17 GMT
ETag: "1e2590d1699e6ac0995fab87cc3a14ce"
X-Cache: Hit from cloudfront
Via: 1.1 0dfb58f1fc97e590bcf6bcf75288d878.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P4
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: nkL4Zcso8ByiBj9yxYHadUaybEKmC5P3x8r0H1mt0NcgJg7vMucmTQ==
Age: 28477
Vary: Origin

Page title: S3 Static Site Status

<!DOCTYPE html>
<html lang="fi">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>S3 Static Site Status</title>
    <style>
        /* Internal CSS for clean styling */
        body {
            font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
            background-color: #f4f6f8;
            color: #333;
            height: 100vh;
            margin: 0;
            display: flex;
            justify-content: center;
            align-items: center;
            text-align: center;
        }

        .container {
            background-color: white;
            padding: 40px;
            border-radius: 8px;
            box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1);
            max-width: 600px;
            width: 90%;
        }

        h1 {
            color: #2da44e; /* Success Green */
            margin-bottom: 20px;
            font-size: 2rem;
        }

        p {
            font-size: 1.2rem;
            color: #555;
            line-height: 1.5;
        }

        .icon {
            font-size: 4rem;
            margin-bottom: 10px;
            display: block;
        }
    </style>
</head>
<body>

    <div class="container">
        <span class="icon" role="img" aria-label="Success">✅</span>
        <h1>Se toimii!</h1>
        <p>Tämä sisältö tulee static cdn S3-ämpäristä.</p>
    </div>

</body>
</html>

Found 2026-01-23 by HttpPlugin

Create report

static-yle-prod.c4.yle.fistatic.cdn.yle.fi

Fingerprint:

7aa770b7f28361105acaa49ba77d3d244d448be46bf8d446a7d49ee443208892

CN:

static-yle-prod.c4.yle.fi

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M04

Not before:

2026-01-15 00:00

Not after:

2027-02-13 23:59

Domain summary

static-yle-prod.c4.yle.fi 1

1 recorded

IP summary

18.173.187.3 2

1 recorded