Domain admin.corestrengths.com
United States
Software information
AmazonS3
tcp/443
-
MacOS file listing through .DS_Store file
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
First seen 2024-04-29 07:52
Last seen 2026-02-09 16:43
Open for 651 days-
Severity: low
Fingerprint: 5f32cf5d6962f09cec7f8772ec7f877272a0bbaee2af490b96f5393b8741a7ddFound 11 files trough .DS_Store spidering: /assets /assets/images /assets/images/bg--auth.jpg /assets/images/bg--marble.jpg /assets/images/logo--horizontal.svg /favicon.ico /index.html /logo192.png /logo512.png /manifest.json /robots.txt
Found on 2026-02-09 16:43 -
Severity: low
Fingerprint: 5f32cf5d6962f09c026392ab026392abdc1b177d23141781b6d054dd841e1d65Found 7 files trough .DS_Store spidering: /assets /favicon.ico /index.html /logo192.png /logo512.png /manifest.json /robots.txt
Found on 2025-07-03 09:11
-
-
Open service 18.66.122.110:443 · admin.corestrengths.com
2026-01-23 12:04
HTTP/1.1 200 OK Content-Type: text/html Content-Length: 30261 Connection: close Date: Fri, 23 Jan 2026 12:04:41 GMT Last-Modified: Thu, 04 Dec 2025 18:17:25 GMT ETag: "b7ff2b44b84b89479caf7987117c8960" x-amz-server-side-encryption: aws:kms x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:us-east-2:403464743783:key/11684cef-a38c-4be9-b185-de744bc8ef32 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7a17e7bab97826b103c75b700dd638e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: b2XwAOXG9I7UEVmskTvtZ11O9reJpmad-rrIEsNw-ZuhPnn7AvEfzw== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: same-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' data: https://*.corestrengths.com wss://*.corestrengths.com https://analytics.google.com https://cdn.growthbook.io https://*.s3.amazonaws.com https://*.s3.us-east-1.amazonaws.com https://bam-cell.nr-data.net https://cognito-idp.us-east-1.amazonaws.com https://www.google-analytics.com https://stats.g.doubleclick.net https://vimeo.com; default-src 'self' blob: data: https://*.corestrengths.com; frame-src 'self' https://player.vimeo.com https://*.stripe.com; img-src 'self' blob: data: https://*.corestrengths.com https://www.google-analytics.com https://*.s3.amazonaws.com https://*.s3.us-east-1.amazonaws.com; object-src blob:; script-src 'self' 'unsafe-eval' https://d2yyd1h5u9mauk.cloudfront.net https://bam-cell.nr-data.net https://js-agent.newrelic.com https://www.google-analytics.com https://www.googletagmanager.com https://player.vimeo.com https://*.stripe.com 'sha256-qN5if7fuT6uJbwYd7FMVfglXFANHNdvmJS0dyLDF2Vo=' 'sha256-sWw1L0p+RG+ubsIMWu6NiwqaDBn0wGmXNAuui9vPX70=' 'sha256-WbJj9ZBN2KyG4VBdIfvETZ7T1Zlve80MJsoRfFbWli0=' 'sha256-3im4xVOnLirsCGoTOavnoxseDGf3Zl1NCbu3FEd5uiY=' 'sha256-TKLix7w9XCasNdeVnEYerZRtjss6H1QW72LJZBS5nWA='; style-src 'self' 'unsafe-inline'; worker-src 'none'; X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Page title: SDI Partner Portal <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8" /> <link rel="icon" href="/favicon-32.png" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name="theme-color" content="#000000" /> <meta name="description" content="SDI Partner Portal" /> <link rel="apple-touch-icon" href="/logo192.png" /> <!-- manifest.json provides metadata used when your web app is installed on a user's mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/ --> <link rel="manifest" href="/manifest.json" /> <!-- Notice the use of %PUBLIC_URL% in the tags above. It will be replaced with the URL of the `public` folder during the build. Only files inside the `public` folder can be referenced from the HTML. Unlike "/favicon.ico" or "favicon.ico", "%PUBLIC_URL%/favicon.ico" will work correctly both with client-side routing and a non-root public URL. Learn how to configure a non-root public URL by running `npm run build`. --> <title>SDI Partner Portal</title> <script type="text/javascript"> ;window.NREUM||(NREUM={});NREUM.init={distributed_tracing:{enabled:true},privacy:{cookies_enabled:true}}; window.NREUM||(NREUM={}),__nr_require=function(t,e,n){function r(n){if(!e[n]){var o=e[n]={exports:{}};t[n][0].call(o.exports,function(e){var o=t[n][1][e];return r(o||e)},o,o.exports)}return e[n].exports}if("function"==typeof __nr_require)return __nr_require;for(var o=0;o<n.length;o++)r(n[o]);return r}({1:[function(t,e,n){function r(t){try{c.console&&console.log(t)}catch(e){}}var o,i=t("ee"),a=t(27),c={};try{o=localStorage.getItem("__nr_flags").split(","),console&&"function"==typeof console.log&&(c.console=!0,o.indexOf("dev")!==-1&&(c.dev=!0),o.indexOf("nr_dev")!==-1&&(c.nrDev=!0))}catch(s){}c.nrDev&&i.on("internal-error",function(t){r(t.stack)}),c.dev&&i.on("fn-err",function(t,e,n){r(n.stack)}),c.dev&&(r("NR AGENT IN DEVELOPMENT MODE"),r("flags: "+a(c,function(t,e){return t}).join(", ")))},{}],2:[function(t,e,n){function r(t,e,n,r,c){try{l?l-=1:o(c||new UncaughtException(t,e,n),!0)}catch(u){try{i("ierr",[u,s.now(),!0])}catch(d){}}return"function"==typeof f&&f.apply(this,a(arguments))}function UncaughtException(t,e,n){this.message=t||"Uncaught error with no additional information",this.sourceURL=e,this.line=n}function o(t,e){var n=e?null:s.now();i("err",[t,n])}var i=t("handle"),a=t(28),c=t("ee"),s=t("loader"),u=t("gos"),f=window.onerror,d=!1,p="nr@seenError",l=0;s.features.err=!0,t(1),window.onerror=r;try{throw new Error}catch(h){"stack"in h&&(t(13),t(12),"addEventListener"in window&&t(6),s.xhrWrappable&&t(14),d=!0)}c.on("fn-start",function(t,e,n){d&&(l+=1)}),c.on("fn-err",function(t,e,n){d&&!n[p]&&(u(n,p,function(){return!0}),this.thrown=!0,o(n))}),c.on("fn-end",function(){d&&!this.thrown&&l>0&&(l-=1)}),c.on("internal-error",function(t){i("ierr",[t,s.now(),!0])})},{}],3:[function(t,e,n){t("loader").features.ins=!0},{}],4:[function(t,e,n){function r(){L++,T=g.hash,this[f]=y.now()}function o(){L--,g.hash!==T&&i(0,!0);var t=y.now();this[h]=~~this[h]+t-this[f],this[d]=t}function i(t,e){E.emit("newURL",[""+g,e])}function a(t,e){t.on(e,function(){this[e]=y.now()})}var c="-start",s="-end",u="-body",f="fn"+c,d="fn"+s,p="cb"+c,l="cb"+s,h="jsTime",m="fetch",v="addEventListener",w=window,g=w.location,y=t("loader");if(w[v]&&y.xhrWrappable){var x=t(10),b=t(11),E=t(8),R=t(6),O=t(13),N=t(7),P=t(14),M=t(9),S=t("ee"),C=S.get("tracer");t(16),y.features.spa=!0;var T,L=0;S.on(f,r),b.on(p,r),M.on(p,r),S.on(d,o),b.on(l,o),M.on(l,o),S.buffer([f,d,"xhr-done","xhr-resolved"]),R.buffer([f]),O.buffer(["setTimeout"+s,"clearTimeout"+c,f]),P.buffer([f,"new-xhr","send-xhr"+c]),N.buffer([m+c,m+"-done",m+u+c,m+u+s]),E.buffer(["newURL"]),x.buffer([f]),b.buffer(["propagate",p,l,"executor-err","resolve"+c]),C.buffer([f,"no-"+f]),M.buffer(["new-jsonp","cb-start","jsonp-error","jsonp-end"]),a(P,"send-xhr"+c),a(S,"xhr-resolved"),a(S,"xhr-done"),a(N,m+c),a(N,m+"-done"),a(M,"new-jsonp"),a(M,"jsonp-end"),a(M,"cb-Found 2026-01-23 by HttpPluginCreate report