my guess is internal tool that wasn't expected to be exposed publicly.
additionally, i didn't realize there are tools to automatically discover unreferenced subdomains like this. i would have just assumed security by obscurity
additionally, i didn't realize there are tools to automatically discover unreferenced subdomains like this. i would have just assumed security by obscurity
I've put internal sites behind AWS ALB's plugged into an OIDC provider[1] (Google), which works well.
1: https://docs.aws.amazon.com/elasticloadbalancing/latest/appl...