LeakIX - Host enablement.everfox.com

Open service 2600:9000:208a:8000:9:410d:edc0:93a1:443 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-0087-422f-82b4-789248b30cf5-t1766388026556
set-cookie: _csrf-prod-us=8Lk0JqSlkO76gQ0jzLyEru7YnK0Fvd0EDL8%2BfohUolHLW%2FHAL0YYk7sSIlZufIRDN3ojjk15oR06hYA%2FcCnB5InZiWOiSpmMo%2B2AM88Az3dtZFnIaOaQppE8iglYFIZEZn36gQ%3D%3D; Max-Age=2592000; Domain=enablement.everfox.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3AcGNdSpluGUz2blzM7YWWdlaI3xESgbxK.%2FCPg4waPST6JdB2xH8fYXDp6zUb8h3yrFr%2B956LfAiI; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 23
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.025;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 d07394c1abd1aadfca4b7709ba1de6a8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: Ao2dJTSRvebjNWsbtG-pT6THWRrTT5vEhUSWBKt92dGtFhT4ZrHWNQ==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=5,cdn-upstream-fbl;dur=34,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="Ao2dJTSRvebjNWsbtG-pT6THWRrTT5vEhUSWBKt92dGtFhT4ZrHWNQ==",cdn-downstream-fbl;dur=139


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:4000:9:410d:edc0:93a1:443 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-03a9-4df6-b261-bec1ec7ee946-t1766388026605
set-cookie: _csrf-prod-us=SGxPJ6SuvE6rKFjdXl0lEFFLdzacYorq%2B%2BYdKRSemwWKHs8zdDBVuI0fT%2BvYxmBjpHoNvc8jSKsRtgVjTNtZfBiDXfB1SP64%2BxqpgdHEFssBen87IBA2vbvlrj7WSjf29ioLLg%3D%3D; Max-Age=2592000; Domain=enablement.everfox.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3AO_8Y8Gy-9Swrkr_1peP_ORczdul1I483.QHCZLdu3fj90DRcgs4fflmHTYTpKaEe9ikWofxx7bsQ; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 16
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.018;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 13cf0cb36194e875c127f27844256ba4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: QPlVrWcbEbR8M3WMR30cCcwDSUf_XZV3zuv14VmmGMCSiNEz_y1Y6Q==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=4,cdn-upstream-fbl;dur=25,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="QPlVrWcbEbR8M3WMR30cCcwDSUf_XZV3zuv14VmmGMCSiNEz_y1Y6Q==",cdn-downstream-fbl;dur=134


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:7a00:9:410d:edc0:93a1:443 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-6dc1-4d5e-a254-5b48b776972f-t1766388026581
set-cookie: _csrf-prod-us=Ff%2Flcu788dO5oriWoRmZg6fLA7OteFeT1Y47PqGBmnzuJYHM6GiyA9%2BuGboSfyGF9zMVmRo8ohmrN4vM4oOkzaE4Mh%2Fvl0RN1BWIT7B2WpOmTorwMacn71puXm1h4wSva4rdeg%3D%3D; Max-Age=2592000; Domain=enablement.everfox.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3AhoL7Xyau5d4TQ_h6cRdSAgfSzuGVt6rm.%2Fipaxd5xvwZLe2PYZddQgKU3xuX27AFRET%2FGA8yvtWE; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 34
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.036;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 13cf0cb36194e875c127f27844256ba4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: B6tdaj95zZ5Iuyt6ldJy2vjGrm3V9J2HaXZPHdJCAoELUCcrL8pvIg==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=5,cdn-upstream-fbl;dur=46,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="B6tdaj95zZ5Iuyt6ldJy2vjGrm3V9J2HaXZPHdJCAoELUCcrL8pvIg==",cdn-downstream-fbl;dur=151


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:2800:9:410d:edc0:93a1:80 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:26 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://enablement.everfox.com/
X-Cache: Redirect from cloudfront
Via: 1.1 f126ea1ed848e1f1d4c478d1f814e2c2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: GnvumPeKko6tAXjXxfPhhD0zOsynPWtUUCEoWVVkOVlfU_ffRVCNrg==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:2400:9:410d:edc0:93a1:443 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-f52b-4c4b-b5e5-b40140c7e07c-t1766388026590
set-cookie: _csrf-prod-us=VvRXfncYezm%2BXIiAZDerJSGG68r9Rd66Yste2fGKlfhYGgVgztNgfME9e%2B4knWFpyfS3AGC9ZV43mytzjbSgG4A5bYZOgYWnC%2FhdagldbGxExPI3z2JWpEcjF8AkNu1Am7MgYg%3D%3D; Max-Age=2592000; Domain=enablement.everfox.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3A3NADrUrKRl_JOiw6f71D_twy-8azKNzE.cJf%2B5D539U7JJYkGtG%2FX6MfBDEbqauF%2BNAkQcRGNcds; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 46
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.049;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 7ca1f888e55cc20dcbd40691cd7e4e84.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: 8ogiy_MAO_24sYVnQ9zaDcSi5zzxVZrAgavRe3KyZ6MXI9FsinYU4g==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=5,cdn-upstream-fbl;dur=57,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="8ogiy_MAO_24sYVnQ9zaDcSi5zzxVZrAgavRe3KyZ6MXI9FsinYU4g==",cdn-downstream-fbl;dur=164


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.8.131.81:443 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:27 GMT
x-request-id: CUSTOMER-AGK-971b-43ac-a988-c9f62363a047-t1766388027010
set-cookie: _csrf-prod-us=EAByXZXrjebD4nlPr2VS45Y1WE61RDTpJfkgoSTsa%2BAvO6nuVctcbKz1gPzzvrQykoAy5M8BRtE7hd2lRdEI7gOCAvomhMrDh4UyOUoJy%2BfifC0EQ%2BUVJAfpyRc9MyRHR7UNdg%3D%3D; Max-Age=2592000; Domain=enablement.everfox.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:27 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3AWqrNrNpQwQAptjukqNM0pT16pCa9RA2q.%2FX6lQIqFKoTjRXEEh8epN0syvSyuR%2BBxKj4fO4NOWb4; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 23
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.025;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 60b9ab6b887af73f2f2a5d326bb59780.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: h44VybEfhrUsE9NppOw1bVrXXMISt1vUpzoov8hhrvwLzdSVPoeEmg==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=5,cdn-upstream-fbl;dur=35,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="h44VybEfhrUsE9NppOw1bVrXXMISt1vUpzoov8hhrvwLzdSVPoeEmg==",cdn-downstream-fbl;dur=149


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:7a00:9:410d:edc0:93a1:80 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:26 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://enablement.everfox.com/
X-Cache: Redirect from cloudfront
Via: 1.1 b3c2d934335633b45a80b7ad63463cda.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: Jwhaj2HJ7uyio23f4KDHRTRo6ggLwisYW7EddoGbfTVd6d9UekcJsw==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:c800:9:410d:edc0:93a1:80 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:26 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://enablement.everfox.com/
X-Cache: Redirect from cloudfront
Via: 1.1 421eaac04af7b6f186e858683cf405c4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: lw8svFhL_XHmdebayT8lOMH4KpgepKmPtVCnVMhnVxWb_Pb_QtYRXg==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.8.131.82:80 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:26 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://enablement.everfox.com/
X-Cache: Redirect from cloudfront
Via: 1.1 1d665d877b0e9ec09e9ec07fe3b6c7b6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: UPI6UA-0-nKXqwwkn6tCH3lxeltOAuQ4nSk9zv8M6Fiec4K0lXtlEw==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:aa00:9:410d:edc0:93a1:80 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:26 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://enablement.everfox.com/
X-Cache: Redirect from cloudfront
Via: 1.1 d07394c1abd1aadfca4b7709ba1de6a8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: pvCRNVU76SptmDtYJWncbnK1qu13X8kta-tgpniURPXyZ42QY0mO-Q==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.8.131.82:443 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-fb5d-4bb3-89f8-ccd3ead03d20-t1766388026639
set-cookie: _csrf-prod-us=snJrVx9Hls%2BXOkyD2f%2BBItJt96xUHiX1UWwnY09I3MXtYcAXQAq0zyWS1H7vXlpPeGf7%2F8%2FitQ5Dly6pIpxN2w80wtEiZ1fi6Dyi4tMgO%2BL%2Fby%2BdG0t8qQ9nAZLWwQFYGIES9Q%3D%3D; Max-Age=2592000; Domain=enablement.everfox.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3AxdIA9z423zM1zmDLI0VzsHkspI8IXA2b.1%2BSG4EtM7jLnUy8noRyBF%2FtagTYIT5t2J%2FDohUpQN4o; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 26
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.027;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 17cfc7795230164c1f6ea71024045250.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: rlV0xOOcSJeygicXoaaXOYN7A9i-ZJb7u70QQQ7g4ZTCv9nDuRsxUQ==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=6,cdn-upstream-fbl;dur=38,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="rlV0xOOcSJeygicXoaaXOYN7A9i-ZJb7u70QQQ7g4ZTCv9nDuRsxUQ==",cdn-downstream-fbl;dur=143


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:8000:9:410d:edc0:93a1:80 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:26 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://enablement.everfox.com/
X-Cache: Redirect from cloudfront
Via: 1.1 3e7af1ef389db8ab4a319bd943f95544.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: TTpjDrhhP3Teo4WH95bgP_Txj5KnqtI6Uv4wQeloWKa4fnpHR6HwHg==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:2800:9:410d:edc0:93a1:443 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-51f5-4bca-b77c-49ce9e134661-t1766388026326
set-cookie: _csrf-prod-us=tzRYOmVxszi6fSQNz%2BD5soCqukYUP%2BHg%2B%2BmxX238MzL5PFKs%2FB8OX7u2D%2B1lYQ%2FVVZXE5YbqQ8exKkM1cHfNgf0kuO%2FU3JCfIK6mKn1JYN%2FM51cGppJ%2Bb3gMMB4ebTAiy9KMVA%3D%3D; Max-Age=2592000; Domain=enablement.everfox.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3ATaE33DgF7PdmFaE6wGb9LEXMc0CEyt27.VqV8tSuV9zKjUTAUwnPqq7HTdmFaCnjwMgBr3CNWIb0; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 23
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.024;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 62adf6efa9de9ec639541ac293f53aa0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: TtVFbWnTzf81FtxRe5_VbDulFC4Ie7dYbrYD1kd70BTedJ6zlupQ3A==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=6,cdn-upstream-fbl;dur=33,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="TtVFbWnTzf81FtxRe5_VbDulFC4Ie7dYbrYD1kd70BTedJ6zlupQ3A==",cdn-downstream-fbl;dur=140


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.8.131.8:443 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:25 GMT
x-request-id: CUSTOMER-AGK-e93d-4dcf-8497-9ad9a9634b8e-t1766388025849
set-cookie: _csrf-prod-us=g%2FgfLfgK0bil7qLWFUGgjX2ISrUbUnjqxIR4En5SRWynEEl%2F4FtNaGyHnxsSeLX%2Fv66fiDdSzYmnFBN3osOYHOlPkY9ohhHdBGLrL2Nzg22aXBPRVM38ZgUPHZRMNzmsEBs0qA%3D%3D; Max-Age=2592000; Domain=enablement.everfox.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:25 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3ADD0E45az_p31rSKixX8EVLXe0_VDtIRU.4ZxWV7KgOdh5vHPJwkzUTLp1je4XYd1uBDtiaae4eG8; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 32
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.034;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 3e7af1ef389db8ab4a319bd943f95544.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: JOVngdQmruv-AV-hBV1qMvYb0HQOEisgU89nd1FpReALdas73B43Vw==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=0,cdn-upstream-fbl;dur=39,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="JOVngdQmruv-AV-hBV1qMvYb0HQOEisgU89nd1FpReALdas73B43Vw==",cdn-downstream-fbl;dur=164


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:2c00:9:410d:edc0:93a1:443 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-6c35-498d-9f4c-e99f826658a0-t1766388026411
set-cookie: _csrf-prod-us=Hy4ZPi8axQLvHHmoH%2Bsho4TAENYwGOY5nrFTO1z858baBleLHLOdi6WiiA2XIkUQVEczfr6O1v5gFZd8bklG5x2%2BNFnzLu7c9kO3jnDQTmOMX%2BoBVM8EKcVVP0kkJ%2BkZt6aO%2Fw%3D%3D; Max-Age=2592000; Domain=enablement.everfox.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3AvopK5sZBgQ1HK8y2O3Y9CS-L28R6VIaE.nyphttAZkZmevVt2FDqibad02JUsvX8nBHkr6pfiMM8; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 28
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.029;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 581599a51772a76c2489c9d094b70226.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: tjGhOcEne1lfs_CO5dVe_elwkVqOIGObVxposHrRPIVwoh2lVyzwxg==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=5,cdn-upstream-fbl;dur=37,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="tjGhOcEne1lfs_CO5dVe_elwkVqOIGObVxposHrRPIVwoh2lVyzwxg==",cdn-downstream-fbl;dur=148


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:4000:9:410d:edc0:93a1:80 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:25 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://enablement.everfox.com/
X-Cache: Redirect from cloudfront
Via: 1.1 62adf6efa9de9ec639541ac293f53aa0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: o87SBMmVF6ckk8h8WI58PIF_T3JYsE3jL8mGfpkcYB69AxgpdSRK2w==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:2400:9:410d:edc0:93a1:80 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:25 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://enablement.everfox.com/
X-Cache: Redirect from cloudfront
Via: 1.1 421eaac04af7b6f186e858683cf405c4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: uw9SD55tFxCUE9HSpC8NIJ2l7bMZf6fa_d38kmLfJtTq8Yd6sjrkng==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.8.131.8:80 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:25 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://enablement.everfox.com/
X-Cache: Redirect from cloudfront
Via: 1.1 59927012a1a01484504f9d4b511a043c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: 4lJID-v1iyGE3O_a4H0LIm15f-VD2jd3sIW6YOwiVs4fySeC3Xt4Xg==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:c800:9:410d:edc0:93a1:443 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-1669-48da-a837-d3c0d2751f46-t1766388026269
set-cookie: _csrf-prod-us=pVLrDIUNxaJmRm6%2BGpT1y6GwxVVAdwMdQgS%2B10aWlrCSPoZpHvmn6tgpz3sa9Ho7DJCSV78aIKWHdaEEDeiaJK4bMbWy0ckGK3MDUClxBgGbzf0rdFOBJgRmSIcAOZkH%2BZ%2Fsaw%3D%3D; Max-Age=2592000; Domain=enablement.everfox.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3AKHugMigB4RVFxpWOG-d9FChl0UmqH2b1.Cy%2BXLeV1MUFRn6ULrWRSPVDUtRfRM9Y39NMDydo2ml4; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 22
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.024;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 13cf0cb36194e875c127f27844256ba4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: G-kG3qEL3O99v0JeuyEIMccvgkpyH5CgpSYIcJHdp-VLyx2lpkMxlg==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=0,cdn-upstream-fbl;dur=27,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="G-kG3qEL3O99v0JeuyEIMccvgkpyH5CgpSYIcJHdp-VLyx2lpkMxlg==",cdn-downstream-fbl;dur=321


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:aa00:9:410d:edc0:93a1:443 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:25 GMT
x-request-id: CUSTOMER-AGK-eb93-4e9b-9fa7-ad43b7d6a24b-t1766388025859
set-cookie: _csrf-prod-us=CvP4PS3ag4oMpAxYzHltImt9Ov6sdxrImATcemBv2E5IHSAdROBRpCpgdqpn0WVCXFDP%2FZ%2BmyYg3wZvp1QN%2BL4vslTr5I6cZvokzt4xpmOOsqfY8hkcPXBRI%2BgS2yDhQjT%2FmIQ%3D%3D; Max-Age=2592000; Domain=enablement.everfox.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:25 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3Ah2ODjMvC4XZuOxb1As-HBxdP35h2WFzS.lyxwhQweUs7MnIBBdvRyt0DYcwS%2BEhWN6ZaXwhNZq6g; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 27
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.028;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 bad86c53165d48d66c80e183f57163d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: 51tHL_hhVKBFtI_cpIi95I2cyLELGBuG5Q_V7e-wRkUkv_kabpnPoA==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=3,cdn-upstream-fbl;dur=37,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="51tHL_hhVKBFtI_cpIi95I2cyLELGBuG5Q_V7e-wRkUkv_kabpnPoA==",cdn-downstream-fbl;dur=145


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.8.131.85:80 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:25 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://enablement.everfox.com/
X-Cache: Redirect from cloudfront
Via: 1.1 387be0cf162c8cb6592090f9496a1e92.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: FuHEs_w60iOh0-IwF3A2FSTMsiip4zmNnH2IqsMLlywvtDTcLW1aGQ==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:2c00:9:410d:edc0:93a1:80 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:25 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://enablement.everfox.com/
X-Cache: Redirect from cloudfront
Via: 1.1 13cf0cb36194e875c127f27844256ba4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: uQf8RRGEqdqeFPPertzcCeMDU0F3oqM_fEcfMESHT4RmUxhmpMSxHA==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.8.131.85:443 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-9911-4c16-9bcd-20f08548b236-t1766388026083
set-cookie: _csrf-prod-us=EFHHUwDXGv6oUKE2KZSK%2FU6zXKlW9epPEK7GJSE1lvL%2FDrNUMmTZ%2BwsNrjnT%2F%2FyJAUFoKyCIEzWBJoqxsOC%2BMoDfizQB5mjHfODsnv8Bbws5CUxKDqXltnnE3ZyepY%2FCFYHUkQ%3D%3D; Max-Age=2592000; Domain=enablement.everfox.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3AB1w8hkDdamxfVltvLQEspQcVVMOWhqEM.XtM7P%2F6myPp%2B%2BlC3KJGrK5gu2pgihuWExrPxlScuLYg; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 30
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.031;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 d07394c1abd1aadfca4b7709ba1de6a8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: qhgeHrqWl9qSm32b5JzMmU_yT2vNLA4-2TFlCfr6cxPufULGxTviYw==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=1,cdn-upstream-fbl;dur=36,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="qhgeHrqWl9qSm32b5JzMmU_yT2vNLA4-2TFlCfr6cxPufULGxTviYw==",cdn-downstream-fbl;dur=330


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.8.131.81:80 · enablement.everfox.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:25 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://enablement.everfox.com/
X-Cache: Redirect from cloudfront
Via: 1.1 387be0cf162c8cb6592090f9496a1e92.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: XMDyefMuSACc_B1hFKSQp029s5Gan2-HmJWiAYdpyDcXKkeFcYqMlw==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Domain enablement.everfox.com

United States

Software information

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Domain summary

IP summary