LeakIX - Host 45.223.19.220

Host 45.223.19.220

United States

INCAPSULA

Software information

Microsoft-IIS 10.0

tcp/443

cloudflare

tcp/443 tcp/8443

istio-envoy

tcp/443

kong 3.10.0.2-enterprise-edition

tcp/443

nginx nginx 1.14.1

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 45.223.19.220
Domain: www1.hdms.com
Port: 443
URL: https://www1.hdms.com

First seen 2024-04-10 19:25
Last seen 2026-02-02 12:20
Open for 662 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fe627c813a920508a8540924d8540924d
```
Found 3 files trough .DS_Store spidering:

/wp-content
/wp-content/plugins
/wp-content/themes
```
  Found on 2026-02-02 12:20
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642b4ffba1ceb9b7e93eb9b7e93eb9b7e93
```
Found 2 files trough .DS_Store spidering:

/wp-content
/wp-content/plugins
```
  Found on 2024-10-22 22:40
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d80af1e5580af1e5580af1e5580af1e55
```
Found 1 files trough .DS_Store spidering:

/wp-content
```
  Found on 2024-08-28 22:02
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 45.223.19.220
Domain: www.activehealth.com
Port: 443
URL: https://www.activehealth.com

First seen 2024-07-31 20:11
Last seen 2026-02-02 10:56
Open for 550 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d80af1e5580af1e5580af1e5580af1e55
```
Found 1 files trough .DS_Store spidering:

/wp-content
```
  Found on 2026-02-02 10:56
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 45.223.19.220
Domain: www.hdms.com
Port: 443
URL: https://www.hdms.com

First seen 2024-04-10 15:37
Last seen 2026-02-02 10:28
Open for 662 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fe627c813a920508a8540924d8540924d
```
Found 3 files trough .DS_Store spidering:

/wp-content
/wp-content/plugins
/wp-content/themes
```
  Found on 2026-02-02 10:28
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642b4ffba1ceb9b7e93eb9b7e93eb9b7e93
```
Found 2 files trough .DS_Store spidering:

/wp-content
/wp-content/plugins
```
  Found on 2024-10-23 00:17
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 45.223.19.220
Domain: uatwww.activehealth.com
Port: 443
URL: https://uatwww.activehealth.com

First seen 2024-08-12 14:58
Last seen 2026-01-23 06:15
Open for 528 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d80af1e5580af1e5580af1e5580af1e55
```
Found 1 files trough .DS_Store spidering:

/wp-content
```
  Found on 2026-01-23 06:15
Create report

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 45.223.19.220
Domain: api-cvshealthpharmainsights.cvshealth.com
Port: 443
URL: https://api-cvshealthpharmainsights.cvshealth.com

First seen 2025-12-05 00:00
Last seen 2026-01-09 12:57
Open for 35 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b953d5740c871a41367ddb1e6b2e1bac74f6d631f

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /mfr/deleteManufacturerGroup/{mfrGroupId}
GET /admins
GET /admins/exist
GET /authorizedUser
GET /bi/authorizedUser
GET /bi/projects/{email}
GET /bi/view/allViewed/{email}
GET /bi/view/{workbookId}
GET /bi/{product}/{email}/getExternalUserInfo
GET /cvsUsers
GET /externalDashboards
GET /externalUserDetails/{email}
GET /externalUsers
GET /externalUsers/exist
GET /getUserDetails/{email}
GET /internalDashboards
GET /internalUsers
GET /internalUsers/exist
GET /mfr/canAddUserToMFR/{mfrUniqueId}/{email}
GET /mfr/contractId/exist
GET /mfr/getAllUsers
GET /mfr/manufacturerGroups
GET /mfr/manufacturerInfo/{mfrUniqueId}
GET /mfr/manufacturers
GET /mfr/mcisManufacturers
GET /mfr/mfrContractsAndProducts/{mfrUniqueId}
GET /mfr/mfrGroupDetails/{mfrGroupId}
GET /mfr/mfrUserProducts/{userId}
GET /mfr/mfrUsers/{mfrUniqueId}
GET /mfr/products
GET /tiers
GET /user-guide/allUserGuides
POST /adminUsers/sendEmail
POST /admins/delete
POST /bi/feedback/message
POST /bi/user/email
POST /externalUsers/delete
POST /externalUsers/sendEmail
POST /internalUsers/create
POST /internalUsers/delete
POST /internalUsers/sendEmail
POST /mfr/saveManufacturer
POST /mfr/saveManufacturerGroup
POST /mfr/saveMfrUser
POST /mfr/saveNewContract
POST /saveExternalUser
POST /user-guide/upload
PUT /externalUser
PUT /externalUsers/profile
PUT /mfr/manufacturerGroup/{mfrGroupId}
PUT /mfr/updateManufacturer
PUT /mfr/updateMfrUser/{userId}

Found on 2026-01-09 12:57

Create report

Open service 45.223.19.220:8443 · www.portal-crd.aetna.com

2026-02-06 11:52

HTTP/1.1 403 Forbidden
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
Content-Length: 857
X-Iinfo: 14-8900866-0 0NNN RT(1770378763928 7) q(0 -1 -1 1) r(0 -1) B16 U18
Set-Cookie: visid_incap_3209061=crEc+iNBSQm3vV7NR0WstArWhWkAAAAAQUIPAAAAAAAHNZIE5gWQu7mjwm0cQpSf; expires=Fri, 05 Feb 2027 22:38:50 GMT; HttpOnly; path=/; Domain=.portal-crd.aetna.com
Set-Cookie: incap_ses_727_3209061=CYPHBW8DvWC9CogBJtMWCgrWhWkAAAAA7TW3QzrUMjG8Jfve3qr2nw==; path=/; Domain=.portal-crd.aetna.com


<html style="height:100%"><head><META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta name="viewport" content="initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><script type="text/javascript" src="/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3"></script></head><body style="margin:0px;height:100%"><iframe id="main-iframe" src="/_Incapsula_Resource?CWUDNSAI=23&xinfo=14-8900866-0%200NNN%20RT%281770378763928%207%29%20q%280%20-1%20-1%201%29%20r%280%20-1%29%20B16%20U18&incident_id=727000550054824637-60245313035111886&edet=16&cinfo=ffffffff&rpinfo=0&cip=139.59.132.8&mth=GET" frameborder=0 width="100%" height="100%" marginheight="0px" marginwidth="0px">Request unsuccessful. Incapsula incident ID: 727000550054824637-60245313035111886</iframe></body></html>

Found 2 days ago by HttpPlugin

Host 45.223.19.220

United States

Software information

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Swagger API description is publicly available