LeakIX - Host inside.druva.com

Open service 2600:9000:208a:400:9:410d:edc0:93a1:443 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:27 GMT
x-request-id: CUSTOMER-AGK-eacf-419a-a68a-b19b5b399c14-t1766388027098
set-cookie: _csrf-prod-us=6HvqmQ8AMqOsPY%2BKron25cVHKAsZM6FwhZzphN8h4D28gOtJG3hFDSnWOXjyMTuRx2GSI7XRSEAfvJ81qvVIsvmOZh5eCvmox5IuT3qfT7xwr8Mxzga6T4%2F7FgiIiXJBLNkruQ%3D%3D; Max-Age=2592000; Domain=inside.druva.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:27 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3AGtee7V-lEePX-1H5gyRMU8tHj3As9r2o.fzZIhoaP2jEr4b6ZeBhoNwfcup%2BdNXS%2FgirgOOW%2FVaA; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 34
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.037;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 387be0cf162c8cb6592090f9496a1e92.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: y4hFAHXWTp45dCZWzYxp9dF2hDCUkXKV1CBziepY7j4YLuUDc5LuZg==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=0,cdn-upstream-fbl;dur=41,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="y4hFAHXWTp45dCZWzYxp9dF2hDCUkXKV1CBziepY7j4YLuUDc5LuZg==",cdn-downstream-fbl;dur=150


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:b600:9:410d:edc0:93a1:443 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-5122-4f15-b1d9-54fd0baca231-t1766388026379
set-cookie: _csrf-prod-us=SPKfICwjSn5O7d%2FUhww6Fvg0lCNe91JY3tRwQKfW%2FVBIjBX0EpbtYyWHlDARJmKjiLA%2BY%2FmMmd%2Fcm6ILvzdJGhbYtgYaGBQdcpxj7SRYqBJPzEc4GYqMWokLJ%2FfyquCKP%2FFi3A%3D%3D; Max-Age=2592000; Domain=inside.druva.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3AzIHjOmpeKNW48G7cD0Sfo0s46DG_CFI8.vE3WEKh0o38SNouQ4zlXZA4wkHkeZnmKGjCl0E%2FLzXI; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 26
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.029;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 2ae88352064bd2ee8746477a8b6fb1da.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: I0evMBYWJI5tbLM9GJO95aMe6txJ6e9DvI_vDVJkxvpcU6Go-p0zrw==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=4,cdn-upstream-fbl;dur=36,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="I0evMBYWJI5tbLM9GJO95aMe6txJ6e9DvI_vDVJkxvpcU6Go-p0zrw==",cdn-downstream-fbl;dur=143


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:5400:9:410d:edc0:93a1:80 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:26 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://inside.druva.com/
X-Cache: Redirect from cloudfront
Via: 1.1 7ca1f888e55cc20dcbd40691cd7e4e84.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: qko4QPHUQ7DDBLPuwDK02_D5Z521jLaQ4tK6TDHB9pKZr5Vg0OmSMQ==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:f200:9:410d:edc0:93a1:443 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-5fe0-4a0c-a7e5-7caf61486e6d-t1766388026551
set-cookie: _csrf-prod-us=v0GF8Drynb7kumK3ueDN8%2FuLb%2BBqhIKJ38yUZrMIgebgj94bstpdYtsYba8deGRbzCGGTwhwiDomAZemc7%2FgdqcHorY%2FYJqGtWTOMd0211Fgwigyfpp7RSn1qOvQXSI6w4XRxQ%3D%3D; Max-Age=2592000; Domain=inside.druva.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3A2kBPC6Mo2rmTBrbd80b7n9AA0ZMbpbJr.W5f%2FAyzlioxDsbZZeYV2m5vfr4Ggq64rzgr%2FL4lWF6E; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 26
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.027;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 59927012a1a01484504f9d4b511a043c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: c1suSChwmgLNJfLC_fgw35DYSFLabpFIYv9NSqsaQneDl7ZxIuGMPA==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=5,cdn-upstream-fbl;dur=36,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="c1suSChwmgLNJfLC_fgw35DYSFLabpFIYv9NSqsaQneDl7ZxIuGMPA==",cdn-downstream-fbl;dur=141


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.8.131.81:443 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-c617-4515-acd3-3d6f6524e34a-t1766388026545
set-cookie: _csrf-prod-us=OuWeg6aTfxflveLhvsWvVSv46EcCl%2Fi7uKjqZJZqzH92AbgY135ds%2BuIGheB1YW0XnsexX6JYCYkE06WkmxIigvccFYdDfSFhnPGJKu9t9zR36UHRCxmB3zP17uoJ3NebDnL7w%3D%3D; Max-Age=2592000; Domain=inside.druva.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3Aa6ldvu7vtv2Pr6-yi0rlknsWXGDJxeBV.aKyE1M5GWDC5BXLLUstkVDtLQX%2F8EgAFLgoIl0AaJr0; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 26
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.028;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 bad86c53165d48d66c80e183f57163d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: cZy_vPflF7CKngOEt8CJ4a2zO1WpF-Gz2EXwST5reFZUiDiUZlXEyA==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=3,cdn-upstream-fbl;dur=36,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="cZy_vPflF7CKngOEt8CJ4a2zO1WpF-Gz2EXwST5reFZUiDiUZlXEyA==",cdn-downstream-fbl;dur=144


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:400:9:410d:edc0:93a1:80 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:25 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://inside.druva.com/
X-Cache: Redirect from cloudfront
Via: 1.1 c8441ee313b5204aa32e9bf5a370d536.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: I7M9r1H2XUdwarGRdDUkq2QB4uIHvBBstoppPRKeKYAsaFH2Cf0IOw==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:7800:9:410d:edc0:93a1:443 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-cf93-48ed-b442-78d1a0fd6d13-t1766388026086
set-cookie: _csrf-prod-us=LwHeqCx7w3oH7ge8i8Q%2BZmK0wtczJ%2B2DphQL6TXHcaKVIzR9iQTkU5RU29%2F1ypIWK0ox86KIBlSN6OqALkJoSFsmLttfj7Ylmeq%2BjtwpmYl%2FCB9q89BE2u%2FVNRCdPytork%2Byiw%3D%3D; Max-Age=2592000; Domain=inside.druva.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3AG3Mf68j5JxjFYl1ozDcFf2STA7yj4xhE.zSR21Tb5ZUvhuzVBaocpC8OoWa59TVlhzluS1Waqg38; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 38
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.040;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 f126ea1ed848e1f1d4c478d1f814e2c2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: tgoB6HRBx2UKufX25fMD_QzZ0Wp8qnb2duIyY8fpljpc1-t3hjIJUg==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=26,cdn-upstream-fbl;dur=73,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="tgoB6HRBx2UKufX25fMD_QzZ0Wp8qnb2duIyY8fpljpc1-t3hjIJUg==",cdn-downstream-fbl;dur=181


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:9c00:9:410d:edc0:93a1:80 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:25 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://inside.druva.com/
X-Cache: Redirect from cloudfront
Via: 1.1 60b9ab6b887af73f2f2a5d326bb59780.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: YU4XuUHRKygBe-sVzi9ZlUlnYMo2qBTxV0B83V5lsQKul9s46-gWRA==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:5400:9:410d:edc0:93a1:443 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-20bc-4bcb-941a-3dbac42c5d4e-t1766388026312
set-cookie: _csrf-prod-us=8uwcSnPjhoOl2cJ851yQ29uK1fPOEU%2BVoF3dYglDYWhx57uuPE0AN8uFIgMp61KOeLrtiwVbznT9CqgVNGBMKLyC5513ykMyD1MBaWHAs8w3VYdgJtV9hXRl5PPe5U9f37Lltg%3D%3D; Max-Age=2592000; Domain=inside.druva.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3AF4fB9TfA_6dhjJwexLJGwztg7BEq9nv7.6tLUfgOfQTHFEl6QlVZcUFNBs5k%2Fq%2FYkcLytGvm1CSA; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 18
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.019;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 3e7af1ef389db8ab4a319bd943f95544.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: tqa-FUkEF0TFtJLVH8Fhibm1outaxQgCEA3tsDFTHD4zhvs4HA3NwA==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=0,cdn-upstream-fbl;dur=23,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="tqa-FUkEF0TFtJLVH8Fhibm1outaxQgCEA3tsDFTHD4zhvs4HA3NwA==",cdn-downstream-fbl;dur=143


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.8.131.82:443 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-0c0c-485d-a65f-e1d9c5018ab8-t1766388026258
set-cookie: _csrf-prod-us=zikEcD7132zpU9r75NlZvL4451rB8Gne4pKSXqDtST3eKPJcV4RIia3GUybSCiTzZCcP4wjHgh%2Bonq%2FujVahjIA9d0XmLKAlOUEA%2FAFR%2FMK73WMLaqw75xTiBIfgT%2FztT%2FWfhg%3D%3D; Max-Age=2592000; Domain=inside.druva.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3A7YDct800A0l1XT1DiQ8YKo783M4yzaj-.D4eoR1oVTL85OhHo2HCwXyigFExLziN4Z1hAyHAYS88; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 20
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.023;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 421eaac04af7b6f186e858683cf405c4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: hqMKidOVxCxyE-TDctHMXKx6--GKoJWPghqvVEz97oqxzmAx-LG62w==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=4,cdn-upstream-fbl;dur=31,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="hqMKidOVxCxyE-TDctHMXKx6--GKoJWPghqvVEz97oqxzmAx-LG62w==",cdn-downstream-fbl;dur=137


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:a600:9:410d:edc0:93a1:443 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-28e4-4eb0-a140-5f2d6a1a81f4-t1766388026309
set-cookie: _csrf-prod-us=JCtB7TA51OI7Ml303fhYFh2ut6cWS6D4PF7EubMo4ylxK%2BObaXqokOH64MO56RkokrNrbk1qNsF2dN9m6W5%2FfvNV%2FqmA%2FrCOw%2BuJP1CFENu8al8fcTUDueEjF7wIS5VDc0Jgwg%3D%3D; Max-Age=2592000; Domain=inside.druva.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3AQnk0NHJwEtlZwAZ4wudPO-dHDN5rvST4.g8a%2BWmtycZxAkNjMq9sAy11uguryPYQySjVgW4eYU8A; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 25
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.027;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 2ae88352064bd2ee8746477a8b6fb1da.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: p0__kibbHQbR8sPE4MtNkjqEhMPoqGagaxDOPlqWOezfHUUhw63urQ==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=0,cdn-upstream-fbl;dur=31,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="p0__kibbHQbR8sPE4MtNkjqEhMPoqGagaxDOPlqWOezfHUUhw63urQ==",cdn-downstream-fbl;dur=138


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:9c00:9:410d:edc0:93a1:443 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-e993-445d-8a8d-613c2ed36fdf-t1766388026103
set-cookie: _csrf-prod-us=BenZUw3f61Wn6c%2F6P4vFz%2BZOxMBvZlUvvpY67mvOtPKmlc7GoZBCzj5JDeHVoyztm%2FqfNLXYdildqvRVqEBpTyAXVN2QdeIrzlibmglfShvF%2BBRCiDgV7MXnG%2B3P2YGw6QecVw%3D%3D; Max-Age=2592000; Domain=inside.druva.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3AcAXJxDjAYiwfWpmbJ8zfS7gNvPstMB_a.xpaXmnoYBlyFrbxRogAPhAgUyR9P4KrcPjM3yg6UFSQ; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 40
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.043;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 f126ea1ed848e1f1d4c478d1f814e2c2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: fb8c4o0JlIb1E3_8fxNaoqwc1YdTFHICErga4FIJbdsGw01n693Pmg==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=3,cdn-upstream-fbl;dur=49,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="fb8c4o0JlIb1E3_8fxNaoqwc1YdTFHICErga4FIJbdsGw01n693Pmg==",cdn-downstream-fbl;dur=157


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.8.131.82:80 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:26 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://inside.druva.com/
X-Cache: Redirect from cloudfront
Via: 1.1 c8441ee313b5204aa32e9bf5a370d536.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: 64FaopSUTz7WkQGOZtkc5wNj-gKdoydDSbHtkdY_UKAERF8uwBmi4g==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:a600:9:410d:edc0:93a1:80 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:26 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://inside.druva.com/
X-Cache: Redirect from cloudfront
Via: 1.1 421eaac04af7b6f186e858683cf405c4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: zw3Rz7MaZWEHYpeS0Zq1si-KQSTwr1NWEZLwtRcl6YgoQ4alYyiUJQ==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:7800:9:410d:edc0:93a1:80 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:26 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://inside.druva.com/
X-Cache: Redirect from cloudfront
Via: 1.1 421eaac04af7b6f186e858683cf405c4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: 8CLNaFkMYDh3fbV2GK44Zr54jT6kx7dUOGtcpATX37rYHkuuZSLB-g==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:f200:9:410d:edc0:93a1:80 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:25 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://inside.druva.com/
X-Cache: Redirect from cloudfront
Via: 1.1 387be0cf162c8cb6592090f9496a1e92.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: rP9T4pFl9WyDVI6VJVtmc7PD4xehRxbDsmQTcv9vlKtiMsqXaTdzPg==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:2600:9:410d:edc0:93a1:443 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-c049-440d-8162-e6f4ca105a30-t1766388026216
set-cookie: _csrf-prod-us=2YSSMtPZSbb8o8WSsfrFgSU7KJ0prm%2FxfPB3wOJf%2B7m61TWWb3LoINdHGoKJ9bO1gjud2fbXLyPZo8ks5MiN3%2F%2Ba1Ip%2BpuMNctGSu1B6cayzbCg%2BPRpHs6LLiMt7Yc%2FoNmjarg%3D%3D; Max-Age=2592000; Domain=inside.druva.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3ANxwVLs3A1SidCXVTXd1AmXMtPDYBzkjA.%2Fvws17dqraTGTLWfIuSVb9BNpp5yLtRWZ1NXNbU5St4; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 26
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.028;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 60b9ab6b887af73f2f2a5d326bb59780.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: DsDMGbCVrfZlqxXJ3azharu-55IuiTonAviQaKTGsnxYhlHW_LJssQ==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=5,cdn-upstream-fbl;dur=37,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="DsDMGbCVrfZlqxXJ3azharu-55IuiTonAviQaKTGsnxYhlHW_LJssQ==",cdn-downstream-fbl;dur=142


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.8.131.81:80 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:25 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://inside.druva.com/
X-Cache: Redirect from cloudfront
Via: 1.1 f5991afb09944a33e3f4ff8b890fa0a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: zEu2GjQlU6HcVLAl4XHYMIRtJqXBMussa_MCEK0ZpUXNLFDqh4CnYQ==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:2600:9:410d:edc0:93a1:80 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:25 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://inside.druva.com/
X-Cache: Redirect from cloudfront
Via: 1.1 1d665d877b0e9ec09e9ec07fe3b6c7b6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: 0X1KbzOeh8SQ6Hgb5XQwxmcBUpSi-U9qbTpZIYZUP-FhM-KzxhYSzQ==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.8.131.85:80 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:25 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://inside.druva.com/
X-Cache: Redirect from cloudfront
Via: 1.1 b3c2d934335633b45a80b7ad63463cda.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: TamYgvTXro2l-OTTuW40S1jau1cKCjwjHOIycGs86e252z3BH-E0fA==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 2600:9000:208a:b600:9:410d:edc0:93a1:80 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:26 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://inside.druva.com/
X-Cache: Redirect from cloudfront
Via: 1.1 bad86c53165d48d66c80e183f57163d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: ZyKSvP-3fFdK0e-iqWXrf6S1aJeeS8-UFcQajyoMDI1v_OMD77qyCQ==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.8.131.85:443 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-4e11-4a60-91f3-c0a830239fc5-t1766388026176
set-cookie: _csrf-prod-us=w2k%2BFjhr8nzV5Gg13g%2Fol7uL7EAnp6XMtVViqDyX9MY7b24XvvRIoppnAzYT%2FPQ3olDwGF%2B%2B%2FP81Z7fkaiSWks32Mp%2BSdHKoXyatwM2hgdN7%2Fa9rQiYwtU51DEhGfWfHbiz%2B7g%3D%3D; Max-Age=2592000; Domain=inside.druva.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3A7bBqSK_Ti2Sl3fdwvceRaRpCidi6v1T1.bn6Q1Wn02FFbriuMSqwh1g7wAC%2BeQ%2FgHlS6j7RFcP00; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 31
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.033;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 d07394c1abd1aadfca4b7709ba1de6a8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: SIfjsexhjAv-ylZ-pExHOXNzsU2ve2E8TGZG4I9zmgMP1kWM7s6p3g==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=2,cdn-upstream-fbl;dur=40,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="SIfjsexhjAv-ylZ-pExHOXNzsU2ve2E8TGZG4I9zmgMP1kWM7s6p3g==",cdn-downstream-fbl;dur=152


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.8.131.8:443 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 200 OK
Server: CloudFront
Content-Type: text/html; charset=utf-8
Content-Length: 1769
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 07:20:26 GMT
x-request-id: CUSTOMER-AGK-3152-4fbe-ac71-cc18ddd16375-t1766388026248
set-cookie: _csrf-prod-us=V7er7BUVFuORb6Hge8%2FfoN3NrK3GO0Rve5G2aRs8VuqyvaoonZjVN5OyJaKQJkMvx%2FUsQ3dpbLweH1iEoh8els6IyJmb4yXcB78awd9mDMoxJqnSVm4E5l%2FYrOCmGIvlNNdszg%3D%3D; Max-Age=2592000; Domain=inside.druva.com; Path=/; Expires=Wed, 21 Jan 2026 07:20:26 GMT; HttpOnly; Secure; SameSite=Lax
set-cookie: mts-us-east-1=s%3AO_-8bWPL5nNH73_qtz6nrb-hx5y2vuFC.CpByUEItIVQOPQDVKWhP%2BVLQnncG0EuZDVBBqkD1mVI; Path=/; HttpOnly; Secure; SameSite=None
mtr: us-east-1
etag: W/"6e9-utfYM9hF0DKj1sFqEfGIX70XKak"
x-envoy-upstream-service-time: 30
Access-Control-Expose-Headers: x-request-time, x-envoy-upstream-service-time, x-request-id, server-timing
X-Content-Type-Options: nosniff
X-Request-Time: 0.032;
content-security-policy: frame-ancestors 'self' *.actionaly.com *.aiwyn.ai *.alkami.com *.ameyo.com *.annata.net *.arht.tech *.atlassian.com *.atlassian.net *.brighter.ai *.centripetal.ai *.classtime.com *.clearwaveinc.com *.contentsquare.com *.crm.ondemand.com *.darktrace.com *.doubleoctopus.com *.dynamics.com *.enable.com *.enable.us *.engagingnetworks.net *.flyr.com *.force.com *.forduniversity.com *.gainsight.com *.h-dnet.com *.highspot.com *.hubspot.com *.hubspoteditor.com *.ipresent.com *.ipresentweb.com *.justappraised.com *.live.com *.mediafly.com *.mindtickle.app *.mindtickle.com *.mismo.team *.myfreshworks.com *.numero.ai *.okta.com *.papirfly.com *.pascivite.com *.peoplegrove.com *.propelleraero.com *.reverselogix.com *.rheinberg-pools.de *.rready.com *.salesforce-communities.com *.salesforce-experience.com *.salesforce.com *.schoolmint.com *.schoolstatus.com *.seismic.com *.site.com *.splunkcoach.com *.stripe.partners *.supremeopti.com *.talview.com *.techsee.me *.tenable.com *.theiquest.com *.thermofisher.one *.tracegains.com *.trexgroup.com *.trucesoftware.com *.trustnetinc.com *.twilio.com *.uniphorecloud.com *.unraveldata.com *.upshop.com *.voucherify.io *.wisesystems.com *.zendesk.com *.zoom.us digdeeper.sysdig.com *.showpad.biz *.office.com *.office365.com partnertraining.bluebeam.com *.goto.com enablement.cribl.io *.bitsight.com *.outreach.io *.develop.lightning.force.com *.lightning.force.com *.redhat.com *.everfox.com *.keyfactor.com *.bottomline.com *.keymarkinc.com *.browserstack.com *.prescryptive.com *.lincoln.com *.haasalert.com *.lincolnforyou.com *.firstsource.com *.druva.com *.lookbookhq.com *.cisco.com *.oneidentity.com *.whatfix.com whatfix.com *.climateimpact.com *.graphisoft.com *.huntress.com *.expel.com *.sayari.com *.hellopebl.com *.saludamedical.com *.checkr.com
X-Cache: Miss from cloudfront
Via: 1.1 f126ea1ed848e1f1d4c478d1f814e2c2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: AN4HnKkjNsd3C2aZHIyn433j0uFj5-vyCfeGVMjgfLqmNWpDHAWSog==
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server-Timing: cdn-upstream-layer;desc="Origin Shield",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=0,cdn-upstream-fbl;dur=36,cdn-cache-miss,cdn-pop;desc="FRA60-P13",cdn-rid;desc="AN4HnKkjNsd3C2aZHIyn433j0uFj5-vyCfeGVMjgfLqmNWpDHAWSog==",cdn-downstream-fbl;dur=328


<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">

<head>
  <script type="text/javascript" nonce="5e0d52a8">
    var sameSiteNoneCompatible = "true" === "true";
    var query = '';
    var redirectUrl = '/' ;
    if (redirectUrl) {
          query = `?loginredirecturi=${encodeURIComponent(redirectUrl)}`
    }

    function getCookieValue (key, value, expires) {
      /* Note:
        We cannot set 'httpOnly' attribute in this cookie due to below two reasons:
        1. 'httpOnly' cookie can only be set by the server and not by any client side code.
        https://stackoverflow.com/questions/14691654/set-a-cookie-to-httponly-via-javascript
        2. We do not have access to location.hash in app-gatekeeper
        https://stackoverflow.com/questions/17744003/get-url-after-in-express-js-middleware-request/43280710
       */
      var cookie = key + "=" + value + "; expires=" + expires + '; path=/; Secure';
      if(sameSiteNoneCompatible) {
        cookie += '; SameSite=None'
      }
      return cookie;
    }

    function setCookie (key, value, days) {
        var date = new Date();
        days = days || 1;
        // Get unix milliseconds at current time plus number of days
        date.setTime(+ date + (days * 86400000)); //24 * 60 * 60 * 1000
        window.document.cookie = getCookieValue(key, value, date.toGMTString());
        return value;
    }

    var delete_cookie = function(key) {
        document.cookie = getCookieValue(key, '', 'Thu, 01 Jan 1970 00:00:01 GMT');
    };

    if (window.location.hash) {
      setCookie('hashRedirectURL', window.location.hash, 1);
    } else {
      delete_cookie('hashRedirectURL');
    }
    window.location.href = '/login' + query;
  </script>
</head>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 65.8.131.8:80 · inside.druva.com

2025-12-22 07:20

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 07:20:25 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://inside.druva.com/
X-Cache: Redirect from cloudfront
Via: 1.1 59927012a1a01484504f9d4b511a043c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P13
X-Amz-Cf-Id: c2ZVKlF0YSmPyn9XQjVPqDm2hct7RO2IjlOpT1XVJ4luYrEICd0EaA==
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-22 by HttpPlugin

Domain inside.druva.com

United States

Software information

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Domain summary

IP summary