LeakIX - Host pentestfos.northerntrust.com

Domain pentestfos.northerntrust.com

Germany

TELECOM ITALIA SPARKLE S.p.A.

Software information

AkamaiGHost

tcp/80

AmazonS3

tcp/443

Open service 92.123.104.64:443 · pentestfos.northerntrust.com

2026-01-23 16:53

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Mon, 15 Dec 2025 17:48:19 GMT
x-amz-version-id: KQzxYXbjKOc7oy44fC6noecyHihqIGy1
ETag: W/"4ee94b3d46fd7b76934c6e771763eb54"
Server: AmazonS3
Cache-Control: no-store
Expires: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-FOS-URI: /index.html
X-Amz-Cf-Pop: JFK50-P13
X-Amz-Cf-Id: s84TTy4BMzDH-Ul9ra3--_KSbdmU3r-5NnnesrvenC1-5kxOZ4MWzA==
Date: Fri, 23 Jan 2026 16:53:21 GMT
Content-Length: 6146
Connection: close
Set-Cookie: NTRS_VISIT_ID=a9a7291730ea360081a773691f00000065070000; path=/; domain=.ntrs.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Page title: Front Office Solutions

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>Front Office Solutions</title>

  <!--
    Remove this if you only support browsers that support async/await.
    This is needed by babel to share largeish helper code for compiling async/await in older
    browsers. More information at https://github.com/single-spa/create-single-spa/issues/112
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/regenerator-runtime@0.14.1/runtime.min.js"></script> -->

  <!--
    This CSP allows any SSL-enabled host and for arbitrary eval(), but you should limit these directives further to increase your app's security.
    Learn more about CSP policies at https://content-security-policy.com/#directive
  -->
  
      <meta
        http-equiv="Content-Security-Policy"
        content="
          default-src 'self' https:;
          script-src 'unsafe-inline' 'unsafe-eval' https:;
          connect-src https: wss://*.northerntrust.com wss://*.amzext.ntrs.com;
          style-src 'unsafe-inline' https:;
          object-src 'none';
          font-src 'self' https: data:;
          img-src 'self' https://*.northerntrust.com https://www.google-analytics.com https://www.googletagmanager.com data:;
          frame-src 'self' https: com-okta-authenticator: about: data: blob:;
        "
      >
    
  <!-- If you wish to turn off import-map-overrides for specific environments (prod), uncomment the line below -->
  <!-- More info at https://github.com/joeldenning/import-map-overrides/blob/master/docs/configuration.md#domain-list -->
  <!-- <meta name="import-map-overrides-domains" content="denylist:prod.example.com" /> -->

  <!-- Shared dependencies go into this import map. Your shared dependencies must be of one of the following formats:

    1. System.register (preferred when possible) - https://github.com/systemjs/systemjs/blob/master/docs/system-register.md
    2. UMD - https://github.com/umdjs/umd
    3. Global variable

    More information about shared dependencies can be found at https://single-spa.js.org/docs/recommended-setup#sharing-with-import-maps.
  -->
  
  <link rel="preload" href="https://cdn.jsdelivr.net/npm/single-spa@6.0.3/lib/es2015/system/single-spa.min.js" as="script" crossorigin>
  <link rel="preload" href="/apps/v2/fos-nav-bar/images/logo-fos-main.svg" as="image">
  

  <!-- Add your organization's prod import map URL to this script's src  -->
  <!-- <script type="systemjs-importmap" src="/importmap.json"></script> -->

  <meta name="importmap-type" content="systemjs-importmap" />
  <script type="systemjs-importmap" src="/importmap.json"></script>

  <!--
    If you need to support Angular applications, uncomment the script tag below to ensure only one instance of ZoneJS is loaded
    Learn more about why at https://single-spa.js.org/docs/ecosystem-angular/#zonejs
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/zone.js@0.11.3/dist/zone.min.js"></script> -->

  
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/system.min.js"></script>
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/amd.min.js"></script>
  

  <style>
    body, html {
      background-color: white;
    }

    single-spa-router { 
      height: 100vh;
      display: flex;
      flex-direction: column;
    }

    single-spa-router > nav > div:not(:empty) { 
      height: 48px;
    }

    single-spa-router > nav > div:empty { 
      display: none;
    }

    .root-error-page {
      height: 100vh;
      width: 100vw;
      position: relative;
      color: #4a4d4f; 
      display: flex;
      align-items: center;
      justify-content: center;
    }

    .root-error-container {
      display: flex;
      flex-direction: column;
      align-items: center;
      justify-content: center;
      text-align: center;
      transform: translateY(-50%);
    }

    .root-error-summary {
      font-size: 1.8rem;
      line-height: 2.4rem;
      margin-top: 2.5rem;
    }

Found 2026-01-23 by HttpPlugin

Create report

Open service 2.16.204.154:80 · pentestfos.northerntrust.com

2026-01-21 17:51

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://pentestfos.northerntrust.com/
Date: Wed, 21 Jan 2026 17:52:22 GMT
Connection: close
Set-Cookie: NTRS_VISIT_ID=9a1d1002f04b11005612716983000000a0030000; path=/; domain=.ntrs.com

Found 2026-01-21 by HttpPlugin

Create report

Open service 2001:41a8:44:4::4f8c:5f48:443 · pentestfos.northerntrust.com

2026-01-21 17:51

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Mon, 15 Dec 2025 17:48:19 GMT
x-amz-version-id: KQzxYXbjKOc7oy44fC6noecyHihqIGy1
ETag: W/"4ee94b3d46fd7b76934c6e771763eb54"
Server: AmazonS3
Cache-Control: no-store
Expires: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-FOS-URI: /index.html
X-Amz-Cf-Pop: JFK50-P13
X-Amz-Cf-Id: 2Pe9cDHK8NB7B0ORhiTlC-VJVADG8HSeYDKdzA1xVA-_Ia8ffidDXQ==
Date: Wed, 21 Jan 2026 17:52:01 GMT
Content-Length: 6146
Connection: close
Set-Cookie: NTRS_VISIT_ID=445f8c4fd38e2b00411271691a000000b70c0000; path=/; domain=.ntrs.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Page title: Front Office Solutions

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>Front Office Solutions</title>

  <!--
    Remove this if you only support browsers that support async/await.
    This is needed by babel to share largeish helper code for compiling async/await in older
    browsers. More information at https://github.com/single-spa/create-single-spa/issues/112
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/regenerator-runtime@0.14.1/runtime.min.js"></script> -->

  <!--
    This CSP allows any SSL-enabled host and for arbitrary eval(), but you should limit these directives further to increase your app's security.
    Learn more about CSP policies at https://content-security-policy.com/#directive
  -->
  
      <meta
        http-equiv="Content-Security-Policy"
        content="
          default-src 'self' https:;
          script-src 'unsafe-inline' 'unsafe-eval' https:;
          connect-src https: wss://*.northerntrust.com wss://*.amzext.ntrs.com;
          style-src 'unsafe-inline' https:;
          object-src 'none';
          font-src 'self' https: data:;
          img-src 'self' https://*.northerntrust.com https://www.google-analytics.com https://www.googletagmanager.com data:;
          frame-src 'self' https: com-okta-authenticator: about: data: blob:;
        "
      >
    
  <!-- If you wish to turn off import-map-overrides for specific environments (prod), uncomment the line below -->
  <!-- More info at https://github.com/joeldenning/import-map-overrides/blob/master/docs/configuration.md#domain-list -->
  <!-- <meta name="import-map-overrides-domains" content="denylist:prod.example.com" /> -->

  <!-- Shared dependencies go into this import map. Your shared dependencies must be of one of the following formats:

    1. System.register (preferred when possible) - https://github.com/systemjs/systemjs/blob/master/docs/system-register.md
    2. UMD - https://github.com/umdjs/umd
    3. Global variable

    More information about shared dependencies can be found at https://single-spa.js.org/docs/recommended-setup#sharing-with-import-maps.
  -->
  
  <link rel="preload" href="https://cdn.jsdelivr.net/npm/single-spa@6.0.3/lib/es2015/system/single-spa.min.js" as="script" crossorigin>
  <link rel="preload" href="/apps/v2/fos-nav-bar/images/logo-fos-main.svg" as="image">
  

  <!-- Add your organization's prod import map URL to this script's src  -->
  <!-- <script type="systemjs-importmap" src="/importmap.json"></script> -->

  <meta name="importmap-type" content="systemjs-importmap" />
  <script type="systemjs-importmap" src="/importmap.json"></script>

  <!--
    If you need to support Angular applications, uncomment the script tag below to ensure only one instance of ZoneJS is loaded
    Learn more about why at https://single-spa.js.org/docs/ecosystem-angular/#zonejs
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/zone.js@0.11.3/dist/zone.min.js"></script> -->

  
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/system.min.js"></script>
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/amd.min.js"></script>
  

  <style>
    body, html {
      background-color: white;
    }

    single-spa-router { 
      height: 100vh;
      display: flex;
      flex-direction: column;
    }

    single-spa-router > nav > div:not(:empty) { 
      height: 48px;
    }

    single-spa-router > nav > div:empty { 
      display: none;
    }

    .root-error-page {
      height: 100vh;
      width: 100vw;
      position: relative;
      color: #4a4d4f; 
      display: flex;
      align-items: center;
      justify-content: center;
    }

    .root-error-container {
      display: flex;
      flex-direction: column;
      align-items: center;
      justify-content: center;
      text-align: center;
      transform: translateY(-50%);
    }

    .root-error-summary {
      font-size: 1.8rem;
      line-height: 2.4rem;
      margin-top: 2.5rem;
    }

Found 2026-01-21 by HttpPlugin

Create report

Open service 2001:41a8:44:4::4f8c:5f48:80 · pentestfos.northerntrust.com

2026-01-21 17:51

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://pentestfos.northerntrust.com/
Date: Wed, 21 Jan 2026 17:52:22 GMT
Connection: close
Set-Cookie: NTRS_VISIT_ID=445f8c4fd38e2b0056127169db030000d20c0000; path=/; domain=.ntrs.com

Found 2026-01-21 by HttpPlugin

Create report

Open service 2001:41a8:44:4::4f8c:5f81:80 · pentestfos.northerntrust.com

2026-01-21 17:51

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://pentestfos.northerntrust.com/
Date: Wed, 21 Jan 2026 17:52:21 GMT
Connection: close
Set-Cookie: NTRS_VISIT_ID=7d5f8c4ff88b3e00551271696903000035000000; path=/; domain=.ntrs.com

Found 2026-01-21 by HttpPlugin

Create report

Open service 2.16.204.147:80 · pentestfos.northerntrust.com

2026-01-21 17:51

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://pentestfos.northerntrust.com/
Date: Wed, 21 Jan 2026 17:52:21 GMT
Connection: close
Set-Cookie: NTRS_VISIT_ID=931d1002eeed2a0055127169570200006a080000; path=/; domain=.ntrs.com

Found 2026-01-21 by HttpPlugin

Create report

Open service 2.16.204.154:443 · pentestfos.northerntrust.com

2026-01-21 17:51

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Mon, 15 Dec 2025 17:48:19 GMT
x-amz-version-id: KQzxYXbjKOc7oy44fC6noecyHihqIGy1
ETag: W/"4ee94b3d46fd7b76934c6e771763eb54"
Server: AmazonS3
Cache-Control: no-store
Expires: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-FOS-URI: /index.html
X-Amz-Cf-Pop: JFK50-P13
X-Amz-Cf-Id: rtD0mIxvAwSMZdQoG18FRTLLxkmBeczAvSC1Ba7giYMJG5dnt4uDHA==
Date: Wed, 21 Jan 2026 17:51:59 GMT
Content-Length: 6146
Connection: close
Set-Cookie: NTRS_VISIT_ID=931d1002eeed2a003f127169cf020000f4060000; path=/; domain=.ntrs.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Page title: Front Office Solutions

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>Front Office Solutions</title>

  <!--
    Remove this if you only support browsers that support async/await.
    This is needed by babel to share largeish helper code for compiling async/await in older
    browsers. More information at https://github.com/single-spa/create-single-spa/issues/112
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/regenerator-runtime@0.14.1/runtime.min.js"></script> -->

  <!--
    This CSP allows any SSL-enabled host and for arbitrary eval(), but you should limit these directives further to increase your app's security.
    Learn more about CSP policies at https://content-security-policy.com/#directive
  -->
  
      <meta
        http-equiv="Content-Security-Policy"
        content="
          default-src 'self' https:;
          script-src 'unsafe-inline' 'unsafe-eval' https:;
          connect-src https: wss://*.northerntrust.com wss://*.amzext.ntrs.com;
          style-src 'unsafe-inline' https:;
          object-src 'none';
          font-src 'self' https: data:;
          img-src 'self' https://*.northerntrust.com https://www.google-analytics.com https://www.googletagmanager.com data:;
          frame-src 'self' https: com-okta-authenticator: about: data: blob:;
        "
      >
    
  <!-- If you wish to turn off import-map-overrides for specific environments (prod), uncomment the line below -->
  <!-- More info at https://github.com/joeldenning/import-map-overrides/blob/master/docs/configuration.md#domain-list -->
  <!-- <meta name="import-map-overrides-domains" content="denylist:prod.example.com" /> -->

  <!-- Shared dependencies go into this import map. Your shared dependencies must be of one of the following formats:

    1. System.register (preferred when possible) - https://github.com/systemjs/systemjs/blob/master/docs/system-register.md
    2. UMD - https://github.com/umdjs/umd
    3. Global variable

    More information about shared dependencies can be found at https://single-spa.js.org/docs/recommended-setup#sharing-with-import-maps.
  -->
  
  <link rel="preload" href="https://cdn.jsdelivr.net/npm/single-spa@6.0.3/lib/es2015/system/single-spa.min.js" as="script" crossorigin>
  <link rel="preload" href="/apps/v2/fos-nav-bar/images/logo-fos-main.svg" as="image">
  

  <!-- Add your organization's prod import map URL to this script's src  -->
  <!-- <script type="systemjs-importmap" src="/importmap.json"></script> -->

  <meta name="importmap-type" content="systemjs-importmap" />
  <script type="systemjs-importmap" src="/importmap.json"></script>

  <!--
    If you need to support Angular applications, uncomment the script tag below to ensure only one instance of ZoneJS is loaded
    Learn more about why at https://single-spa.js.org/docs/ecosystem-angular/#zonejs
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/zone.js@0.11.3/dist/zone.min.js"></script> -->

  
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/system.min.js"></script>
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/amd.min.js"></script>
  

  <style>
    body, html {
      background-color: white;
    }

    single-spa-router { 
      height: 100vh;
      display: flex;
      flex-direction: column;
    }

    single-spa-router > nav > div:not(:empty) { 
      height: 48px;
    }

    single-spa-router > nav > div:empty { 
      display: none;
    }

    .root-error-page {
      height: 100vh;
      width: 100vw;
      position: relative;
      color: #4a4d4f; 
      display: flex;
      align-items: center;
      justify-content: center;
    }

    .root-error-container {
      display: flex;
      flex-direction: column;
      align-items: center;
      justify-content: center;
      text-align: center;
      transform: translateY(-50%);
    }

    .root-error-summary {
      font-size: 1.8rem;
      line-height: 2.4rem;
      margin-top: 2.5rem;
    }

Found 2026-01-21 by HttpPlugin

Create report

Open service 2.16.204.147:443 · pentestfos.northerntrust.com

2026-01-21 17:51

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Mon, 15 Dec 2025 17:48:19 GMT
x-amz-version-id: KQzxYXbjKOc7oy44fC6noecyHihqIGy1
ETag: W/"4ee94b3d46fd7b76934c6e771763eb54"
Server: AmazonS3
Cache-Control: no-store
Expires: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-FOS-URI: /index.html
X-Amz-Cf-Pop: JFK50-P13
X-Amz-Cf-Id: gDCE2LK2Vj-rtHjvT9Zd1R8Xo5OKu12XV_I59jDoDCVqhMWLVRK2HA==
Date: Wed, 21 Jan 2026 17:51:59 GMT
Content-Length: 6146
Connection: close
Set-Cookie: NTRS_VISIT_ID=931d1002eeed2a003f12716982030000fa060000; path=/; domain=.ntrs.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Page title: Front Office Solutions

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>Front Office Solutions</title>

  <!--
    Remove this if you only support browsers that support async/await.
    This is needed by babel to share largeish helper code for compiling async/await in older
    browsers. More information at https://github.com/single-spa/create-single-spa/issues/112
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/regenerator-runtime@0.14.1/runtime.min.js"></script> -->

  <!--
    This CSP allows any SSL-enabled host and for arbitrary eval(), but you should limit these directives further to increase your app's security.
    Learn more about CSP policies at https://content-security-policy.com/#directive
  -->
  
      <meta
        http-equiv="Content-Security-Policy"
        content="
          default-src 'self' https:;
          script-src 'unsafe-inline' 'unsafe-eval' https:;
          connect-src https: wss://*.northerntrust.com wss://*.amzext.ntrs.com;
          style-src 'unsafe-inline' https:;
          object-src 'none';
          font-src 'self' https: data:;
          img-src 'self' https://*.northerntrust.com https://www.google-analytics.com https://www.googletagmanager.com data:;
          frame-src 'self' https: com-okta-authenticator: about: data: blob:;
        "
      >
    
  <!-- If you wish to turn off import-map-overrides for specific environments (prod), uncomment the line below -->
  <!-- More info at https://github.com/joeldenning/import-map-overrides/blob/master/docs/configuration.md#domain-list -->
  <!-- <meta name="import-map-overrides-domains" content="denylist:prod.example.com" /> -->

  <!-- Shared dependencies go into this import map. Your shared dependencies must be of one of the following formats:

    1. System.register (preferred when possible) - https://github.com/systemjs/systemjs/blob/master/docs/system-register.md
    2. UMD - https://github.com/umdjs/umd
    3. Global variable

    More information about shared dependencies can be found at https://single-spa.js.org/docs/recommended-setup#sharing-with-import-maps.
  -->
  
  <link rel="preload" href="https://cdn.jsdelivr.net/npm/single-spa@6.0.3/lib/es2015/system/single-spa.min.js" as="script" crossorigin>
  <link rel="preload" href="/apps/v2/fos-nav-bar/images/logo-fos-main.svg" as="image">
  

  <!-- Add your organization's prod import map URL to this script's src  -->
  <!-- <script type="systemjs-importmap" src="/importmap.json"></script> -->

  <meta name="importmap-type" content="systemjs-importmap" />
  <script type="systemjs-importmap" src="/importmap.json"></script>

  <!--
    If you need to support Angular applications, uncomment the script tag below to ensure only one instance of ZoneJS is loaded
    Learn more about why at https://single-spa.js.org/docs/ecosystem-angular/#zonejs
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/zone.js@0.11.3/dist/zone.min.js"></script> -->

  
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/system.min.js"></script>
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/amd.min.js"></script>
  

  <style>
    body, html {
      background-color: white;
    }

    single-spa-router { 
      height: 100vh;
      display: flex;
      flex-direction: column;
    }

    single-spa-router > nav > div:not(:empty) { 
      height: 48px;
    }

    single-spa-router > nav > div:empty { 
      display: none;
    }

    .root-error-page {
      height: 100vh;
      width: 100vw;
      position: relative;
      color: #4a4d4f; 
      display: flex;
      align-items: center;
      justify-content: center;
    }

    .root-error-container {
      display: flex;
      flex-direction: column;
      align-items: center;
      justify-content: center;
      text-align: center;
      transform: translateY(-50%);
    }

    .root-error-summary {
      font-size: 1.8rem;
      line-height: 2.4rem;
      margin-top: 2.5rem;
    }

Found 2026-01-21 by HttpPlugin

Create report

Open service 2001:41a8:44:4::4f8c:5f81:443 · pentestfos.northerntrust.com

2026-01-21 17:51

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Mon, 15 Dec 2025 17:48:19 GMT
x-amz-version-id: KQzxYXbjKOc7oy44fC6noecyHihqIGy1
ETag: W/"4ee94b3d46fd7b76934c6e771763eb54"
Server: AmazonS3
Cache-Control: no-store
Expires: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-FOS-URI: /index.html
X-Amz-Cf-Pop: JFK50-P13
X-Amz-Cf-Id: 9vNgRtJTAw4y1YQ1q--QFS14VKSpGmy3QNrBNP29UOhJVMBaAexanw==
Date: Wed, 21 Jan 2026 17:52:00 GMT
Content-Length: 6146
Connection: close
Set-Cookie: NTRS_VISIT_ID=445f8c4fd38e2b0040127169b9030000b20c0000; path=/; domain=.ntrs.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Page title: Front Office Solutions

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>Front Office Solutions</title>

  <!--
    Remove this if you only support browsers that support async/await.
    This is needed by babel to share largeish helper code for compiling async/await in older
    browsers. More information at https://github.com/single-spa/create-single-spa/issues/112
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/regenerator-runtime@0.14.1/runtime.min.js"></script> -->

  <!--
    This CSP allows any SSL-enabled host and for arbitrary eval(), but you should limit these directives further to increase your app's security.
    Learn more about CSP policies at https://content-security-policy.com/#directive
  -->
  
      <meta
        http-equiv="Content-Security-Policy"
        content="
          default-src 'self' https:;
          script-src 'unsafe-inline' 'unsafe-eval' https:;
          connect-src https: wss://*.northerntrust.com wss://*.amzext.ntrs.com;
          style-src 'unsafe-inline' https:;
          object-src 'none';
          font-src 'self' https: data:;
          img-src 'self' https://*.northerntrust.com https://www.google-analytics.com https://www.googletagmanager.com data:;
          frame-src 'self' https: com-okta-authenticator: about: data: blob:;
        "
      >
    
  <!-- If you wish to turn off import-map-overrides for specific environments (prod), uncomment the line below -->
  <!-- More info at https://github.com/joeldenning/import-map-overrides/blob/master/docs/configuration.md#domain-list -->
  <!-- <meta name="import-map-overrides-domains" content="denylist:prod.example.com" /> -->

  <!-- Shared dependencies go into this import map. Your shared dependencies must be of one of the following formats:

    1. System.register (preferred when possible) - https://github.com/systemjs/systemjs/blob/master/docs/system-register.md
    2. UMD - https://github.com/umdjs/umd
    3. Global variable

    More information about shared dependencies can be found at https://single-spa.js.org/docs/recommended-setup#sharing-with-import-maps.
  -->
  
  <link rel="preload" href="https://cdn.jsdelivr.net/npm/single-spa@6.0.3/lib/es2015/system/single-spa.min.js" as="script" crossorigin>
  <link rel="preload" href="/apps/v2/fos-nav-bar/images/logo-fos-main.svg" as="image">
  

  <!-- Add your organization's prod import map URL to this script's src  -->
  <!-- <script type="systemjs-importmap" src="/importmap.json"></script> -->

  <meta name="importmap-type" content="systemjs-importmap" />
  <script type="systemjs-importmap" src="/importmap.json"></script>

  <!--
    If you need to support Angular applications, uncomment the script tag below to ensure only one instance of ZoneJS is loaded
    Learn more about why at https://single-spa.js.org/docs/ecosystem-angular/#zonejs
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/zone.js@0.11.3/dist/zone.min.js"></script> -->

  
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/system.min.js"></script>
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/amd.min.js"></script>
  

  <style>
    body, html {
      background-color: white;
    }

    single-spa-router { 
      height: 100vh;
      display: flex;
      flex-direction: column;
    }

    single-spa-router > nav > div:not(:empty) { 
      height: 48px;
    }

    single-spa-router > nav > div:empty { 
      display: none;
    }

    .root-error-page {
      height: 100vh;
      width: 100vw;
      position: relative;
      color: #4a4d4f; 
      display: flex;
      align-items: center;
      justify-content: center;
    }

    .root-error-container {
      display: flex;
      flex-direction: column;
      align-items: center;
      justify-content: center;
      text-align: center;
      transform: translateY(-50%);
    }

    .root-error-summary {
      font-size: 1.8rem;
      line-height: 2.4rem;
      margin-top: 2.5rem;
    }

Found 2026-01-21 by HttpPlugin

Create report

Open service 92.123.104.64:443 · pentestfos.northerntrust.com

2026-01-10 02:39

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Mon, 15 Dec 2025 17:48:19 GMT
x-amz-version-id: KQzxYXbjKOc7oy44fC6noecyHihqIGy1
ETag: W/"4ee94b3d46fd7b76934c6e771763eb54"
Server: AmazonS3
Cache-Control: no-store
Expires: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-FOS-URI: /index.html
X-Amz-Cf-Pop: JFK50-P13
X-Amz-Cf-Id: ev2vMQgrjK22llTCooxFduYA4uUoX98g7N8zI0CaUkfBr4lX1tjFMA==
Date: Sat, 10 Jan 2026 02:39:19 GMT
Content-Length: 6146
Connection: close
Set-Cookie: NTRS_VISIT_ID=c0a72917977e0000d7bb61698601000078170000; path=/; domain=.ntrs.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Page title: Front Office Solutions

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>Front Office Solutions</title>

  <!--
    Remove this if you only support browsers that support async/await.
    This is needed by babel to share largeish helper code for compiling async/await in older
    browsers. More information at https://github.com/single-spa/create-single-spa/issues/112
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/regenerator-runtime@0.14.1/runtime.min.js"></script> -->

  <!--
    This CSP allows any SSL-enabled host and for arbitrary eval(), but you should limit these directives further to increase your app's security.
    Learn more about CSP policies at https://content-security-policy.com/#directive
  -->
  
      <meta
        http-equiv="Content-Security-Policy"
        content="
          default-src 'self' https:;
          script-src 'unsafe-inline' 'unsafe-eval' https:;
          connect-src https: wss://*.northerntrust.com wss://*.amzext.ntrs.com;
          style-src 'unsafe-inline' https:;
          object-src 'none';
          font-src 'self' https: data:;
          img-src 'self' https://*.northerntrust.com https://www.google-analytics.com https://www.googletagmanager.com data:;
          frame-src 'self' https: com-okta-authenticator: about: data: blob:;
        "
      >
    
  <!-- If you wish to turn off import-map-overrides for specific environments (prod), uncomment the line below -->
  <!-- More info at https://github.com/joeldenning/import-map-overrides/blob/master/docs/configuration.md#domain-list -->
  <!-- <meta name="import-map-overrides-domains" content="denylist:prod.example.com" /> -->

  <!-- Shared dependencies go into this import map. Your shared dependencies must be of one of the following formats:

    1. System.register (preferred when possible) - https://github.com/systemjs/systemjs/blob/master/docs/system-register.md
    2. UMD - https://github.com/umdjs/umd
    3. Global variable

    More information about shared dependencies can be found at https://single-spa.js.org/docs/recommended-setup#sharing-with-import-maps.
  -->
  
  <link rel="preload" href="https://cdn.jsdelivr.net/npm/single-spa@6.0.3/lib/es2015/system/single-spa.min.js" as="script" crossorigin>
  <link rel="preload" href="/apps/v2/fos-nav-bar/images/logo-fos-main.svg" as="image">
  

  <!-- Add your organization's prod import map URL to this script's src  -->
  <!-- <script type="systemjs-importmap" src="/importmap.json"></script> -->

  <meta name="importmap-type" content="systemjs-importmap" />
  <script type="systemjs-importmap" src="/importmap.json"></script>

  <!--
    If you need to support Angular applications, uncomment the script tag below to ensure only one instance of ZoneJS is loaded
    Learn more about why at https://single-spa.js.org/docs/ecosystem-angular/#zonejs
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/zone.js@0.11.3/dist/zone.min.js"></script> -->

  
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/system.min.js"></script>
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/amd.min.js"></script>
  

  <style>
    body, html {
      background-color: white;
    }

    single-spa-router { 
      height: 100vh;
      display: flex;
      flex-direction: column;
    }

    single-spa-router > nav > div:not(:empty) { 
      height: 48px;
    }

    single-spa-router > nav > div:empty { 
      display: none;
    }

    .root-error-page {
      height: 100vh;
      width: 100vw;
      position: relative;
      color: #4a4d4f; 
      display: flex;
      align-items: center;
      justify-content: center;
    }

    .root-error-container {
      display: flex;
      flex-direction: column;
      align-items: center;
      justify-content: center;
      text-align: center;
      transform: translateY(-50%);
    }

    .root-error-summary {
      font-size: 1.8rem;
      line-height: 2.4rem;
      margin-top: 2.5rem;
    }

Found 2026-01-10 by HttpPlugin

Create report

Open service 2a02:26f0:3500:14::1724:a255:443 · pentestfos.northerntrust.com

2026-01-07 13:34

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Mon, 15 Dec 2025 17:48:19 GMT
x-amz-version-id: KQzxYXbjKOc7oy44fC6noecyHihqIGy1
ETag: W/"4ee94b3d46fd7b76934c6e771763eb54"
Server: AmazonS3
Cache-Control: no-store
Expires: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-FOS-URI: /index.html
X-Amz-Cf-Pop: JFK50-P13
X-Amz-Cf-Id: _0ElxKZOFSuYa7GpxLoyZlkmwDkV7CyHWqeB-kl2lGkwumhtITdrxg==
Date: Wed, 07 Jan 2026 13:34:19 GMT
Content-Length: 6146
Connection: close
Set-Cookie: NTRS_VISIT_ID=07a024172fe23300db605e690a030000ad030000; path=/; domain=.ntrs.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Page title: Front Office Solutions

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>Front Office Solutions</title>

  <!--
    Remove this if you only support browsers that support async/await.
    This is needed by babel to share largeish helper code for compiling async/await in older
    browsers. More information at https://github.com/single-spa/create-single-spa/issues/112
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/regenerator-runtime@0.14.1/runtime.min.js"></script> -->

  <!--
    This CSP allows any SSL-enabled host and for arbitrary eval(), but you should limit these directives further to increase your app's security.
    Learn more about CSP policies at https://content-security-policy.com/#directive
  -->
  
      <meta
        http-equiv="Content-Security-Policy"
        content="
          default-src 'self' https:;
          script-src 'unsafe-inline' 'unsafe-eval' https:;
          connect-src https: wss://*.northerntrust.com wss://*.amzext.ntrs.com;
          style-src 'unsafe-inline' https:;
          object-src 'none';
          font-src 'self' https: data:;
          img-src 'self' https://*.northerntrust.com https://www.google-analytics.com https://www.googletagmanager.com data:;
          frame-src 'self' https: com-okta-authenticator: about: data: blob:;
        "
      >
    
  <!-- If you wish to turn off import-map-overrides for specific environments (prod), uncomment the line below -->
  <!-- More info at https://github.com/joeldenning/import-map-overrides/blob/master/docs/configuration.md#domain-list -->
  <!-- <meta name="import-map-overrides-domains" content="denylist:prod.example.com" /> -->

  <!-- Shared dependencies go into this import map. Your shared dependencies must be of one of the following formats:

    1. System.register (preferred when possible) - https://github.com/systemjs/systemjs/blob/master/docs/system-register.md
    2. UMD - https://github.com/umdjs/umd
    3. Global variable

    More information about shared dependencies can be found at https://single-spa.js.org/docs/recommended-setup#sharing-with-import-maps.
  -->
  
  <link rel="preload" href="https://cdn.jsdelivr.net/npm/single-spa@6.0.3/lib/es2015/system/single-spa.min.js" as="script" crossorigin>
  <link rel="preload" href="/apps/v2/fos-nav-bar/images/logo-fos-main.svg" as="image">
  

  <!-- Add your organization's prod import map URL to this script's src  -->
  <!-- <script type="systemjs-importmap" src="/importmap.json"></script> -->

  <meta name="importmap-type" content="systemjs-importmap" />
  <script type="systemjs-importmap" src="/importmap.json"></script>

  <!--
    If you need to support Angular applications, uncomment the script tag below to ensure only one instance of ZoneJS is loaded
    Learn more about why at https://single-spa.js.org/docs/ecosystem-angular/#zonejs
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/zone.js@0.11.3/dist/zone.min.js"></script> -->

  
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/system.min.js"></script>
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/amd.min.js"></script>
  

  <style>
    body, html {
      background-color: white;
    }

    single-spa-router { 
      height: 100vh;
      display: flex;
      flex-direction: column;
    }

    single-spa-router > nav > div:not(:empty) { 
      height: 48px;
    }

    single-spa-router > nav > div:empty { 
      display: none;
    }

    .root-error-page {
      height: 100vh;
      width: 100vw;
      position: relative;
      color: #4a4d4f; 
      display: flex;
      align-items: center;
      justify-content: center;
    }

    .root-error-container {
      display: flex;
      flex-direction: column;
      align-items: center;
      justify-content: center;
      text-align: center;
      transform: translateY(-50%);
    }

    .root-error-summary {
      font-size: 1.8rem;
      line-height: 2.4rem;
      margin-top: 2.5rem;
    }

Found 2026-01-07 by HttpPlugin

Create report

Open service 2.16.204.154:443 · pentestfos.northerntrust.com

2026-01-07 13:34

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Mon, 15 Dec 2025 17:48:19 GMT
x-amz-version-id: KQzxYXbjKOc7oy44fC6noecyHihqIGy1
ETag: W/"4ee94b3d46fd7b76934c6e771763eb54"
Server: AmazonS3
Cache-Control: no-store
Expires: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-FOS-URI: /index.html
X-Amz-Cf-Pop: JFK50-P13
X-Amz-Cf-Id: UWdxSrE78qBynhhERlWSrOnXhQFBbAo2G_BvLQfomANOFmAeCqOwbQ==
Date: Wed, 07 Jan 2026 13:34:19 GMT
Content-Length: 6146
Connection: close
Set-Cookie: NTRS_VISIT_ID=9a1d100236742100db605e69a2030000bb040000; path=/; domain=.ntrs.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Page title: Front Office Solutions

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>Front Office Solutions</title>

  <!--
    Remove this if you only support browsers that support async/await.
    This is needed by babel to share largeish helper code for compiling async/await in older
    browsers. More information at https://github.com/single-spa/create-single-spa/issues/112
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/regenerator-runtime@0.14.1/runtime.min.js"></script> -->

  <!--
    This CSP allows any SSL-enabled host and for arbitrary eval(), but you should limit these directives further to increase your app's security.
    Learn more about CSP policies at https://content-security-policy.com/#directive
  -->
  
      <meta
        http-equiv="Content-Security-Policy"
        content="
          default-src 'self' https:;
          script-src 'unsafe-inline' 'unsafe-eval' https:;
          connect-src https: wss://*.northerntrust.com wss://*.amzext.ntrs.com;
          style-src 'unsafe-inline' https:;
          object-src 'none';
          font-src 'self' https: data:;
          img-src 'self' https://*.northerntrust.com https://www.google-analytics.com https://www.googletagmanager.com data:;
          frame-src 'self' https: com-okta-authenticator: about: data: blob:;
        "
      >
    
  <!-- If you wish to turn off import-map-overrides for specific environments (prod), uncomment the line below -->
  <!-- More info at https://github.com/joeldenning/import-map-overrides/blob/master/docs/configuration.md#domain-list -->
  <!-- <meta name="import-map-overrides-domains" content="denylist:prod.example.com" /> -->

  <!-- Shared dependencies go into this import map. Your shared dependencies must be of one of the following formats:

    1. System.register (preferred when possible) - https://github.com/systemjs/systemjs/blob/master/docs/system-register.md
    2. UMD - https://github.com/umdjs/umd
    3. Global variable

    More information about shared dependencies can be found at https://single-spa.js.org/docs/recommended-setup#sharing-with-import-maps.
  -->
  
  <link rel="preload" href="https://cdn.jsdelivr.net/npm/single-spa@6.0.3/lib/es2015/system/single-spa.min.js" as="script" crossorigin>
  <link rel="preload" href="/apps/v2/fos-nav-bar/images/logo-fos-main.svg" as="image">
  

  <!-- Add your organization's prod import map URL to this script's src  -->
  <!-- <script type="systemjs-importmap" src="/importmap.json"></script> -->

  <meta name="importmap-type" content="systemjs-importmap" />
  <script type="systemjs-importmap" src="/importmap.json"></script>

  <!--
    If you need to support Angular applications, uncomment the script tag below to ensure only one instance of ZoneJS is loaded
    Learn more about why at https://single-spa.js.org/docs/ecosystem-angular/#zonejs
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/zone.js@0.11.3/dist/zone.min.js"></script> -->

  
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/system.min.js"></script>
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/amd.min.js"></script>
  

  <style>
    body, html {
      background-color: white;
    }

    single-spa-router { 
      height: 100vh;
      display: flex;
      flex-direction: column;
    }

    single-spa-router > nav > div:not(:empty) { 
      height: 48px;
    }

    single-spa-router > nav > div:empty { 
      display: none;
    }

    .root-error-page {
      height: 100vh;
      width: 100vw;
      position: relative;
      color: #4a4d4f; 
      display: flex;
      align-items: center;
      justify-content: center;
    }

    .root-error-container {
      display: flex;
      flex-direction: column;
      align-items: center;
      justify-content: center;
      text-align: center;
      transform: translateY(-50%);
    }

    .root-error-summary {
      font-size: 1.8rem;
      line-height: 2.4rem;
      margin-top: 2.5rem;
    }

Found 2026-01-07 by HttpPlugin

Create report

Open service 2.16.204.147:80 · pentestfos.northerntrust.com

2026-01-07 13:34

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://pentestfos.northerntrust.com/
Date: Wed, 07 Jan 2026 13:34:59 GMT
Connection: close
Set-Cookie: NTRS_VISIT_ID=931d100214b9270003615e69d2030000560c0000; path=/; domain=.ntrs.com

Found 2026-01-07 by HttpPlugin

Create report

Open service 2a02:26f0:3500:14::1724:a247:80 · pentestfos.northerntrust.com

2026-01-07 13:34

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://pentestfos.northerntrust.com/
Date: Wed, 07 Jan 2026 13:34:59 GMT
Connection: close
Set-Cookie: NTRS_VISIT_ID=07a024172fe2330003615e6987000000b4030000; path=/; domain=.ntrs.com

Found 2026-01-07 by HttpPlugin

Create report

Open service 2.16.204.154:80 · pentestfos.northerntrust.com

2026-01-07 13:34

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://pentestfos.northerntrust.com/
Date: Wed, 07 Jan 2026 13:34:59 GMT
Connection: close
Set-Cookie: NTRS_VISIT_ID=9a1d10023674210003615e69f50000009e050000; path=/; domain=.ntrs.com

Found 2026-01-07 by HttpPlugin

Create report

Open service 2.16.204.147:443 · pentestfos.northerntrust.com

2026-01-07 13:34

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Mon, 15 Dec 2025 17:48:19 GMT
x-amz-version-id: KQzxYXbjKOc7oy44fC6noecyHihqIGy1
ETag: W/"4ee94b3d46fd7b76934c6e771763eb54"
Server: AmazonS3
Cache-Control: no-store
Expires: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-FOS-URI: /index.html
X-Amz-Cf-Pop: JFK50-P13
X-Amz-Cf-Id: NEm9wmxHi7McB5eS0fabe6HkCFqeto55iFhW2AXcAf8DEkp8w7B8lg==
Date: Wed, 07 Jan 2026 13:34:19 GMT
Content-Length: 6146
Connection: close
Set-Cookie: NTRS_VISIT_ID=931d100214b92700db605e694c0300005e0b0000; path=/; domain=.ntrs.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Page title: Front Office Solutions

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>Front Office Solutions</title>

  <!--
    Remove this if you only support browsers that support async/await.
    This is needed by babel to share largeish helper code for compiling async/await in older
    browsers. More information at https://github.com/single-spa/create-single-spa/issues/112
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/regenerator-runtime@0.14.1/runtime.min.js"></script> -->

  <!--
    This CSP allows any SSL-enabled host and for arbitrary eval(), but you should limit these directives further to increase your app's security.
    Learn more about CSP policies at https://content-security-policy.com/#directive
  -->
  
      <meta
        http-equiv="Content-Security-Policy"
        content="
          default-src 'self' https:;
          script-src 'unsafe-inline' 'unsafe-eval' https:;
          connect-src https: wss://*.northerntrust.com wss://*.amzext.ntrs.com;
          style-src 'unsafe-inline' https:;
          object-src 'none';
          font-src 'self' https: data:;
          img-src 'self' https://*.northerntrust.com https://www.google-analytics.com https://www.googletagmanager.com data:;
          frame-src 'self' https: com-okta-authenticator: about: data: blob:;
        "
      >
    
  <!-- If you wish to turn off import-map-overrides for specific environments (prod), uncomment the line below -->
  <!-- More info at https://github.com/joeldenning/import-map-overrides/blob/master/docs/configuration.md#domain-list -->
  <!-- <meta name="import-map-overrides-domains" content="denylist:prod.example.com" /> -->

  <!-- Shared dependencies go into this import map. Your shared dependencies must be of one of the following formats:

    1. System.register (preferred when possible) - https://github.com/systemjs/systemjs/blob/master/docs/system-register.md
    2. UMD - https://github.com/umdjs/umd
    3. Global variable

    More information about shared dependencies can be found at https://single-spa.js.org/docs/recommended-setup#sharing-with-import-maps.
  -->
  
  <link rel="preload" href="https://cdn.jsdelivr.net/npm/single-spa@6.0.3/lib/es2015/system/single-spa.min.js" as="script" crossorigin>
  <link rel="preload" href="/apps/v2/fos-nav-bar/images/logo-fos-main.svg" as="image">
  

  <!-- Add your organization's prod import map URL to this script's src  -->
  <!-- <script type="systemjs-importmap" src="/importmap.json"></script> -->

  <meta name="importmap-type" content="systemjs-importmap" />
  <script type="systemjs-importmap" src="/importmap.json"></script>

  <!--
    If you need to support Angular applications, uncomment the script tag below to ensure only one instance of ZoneJS is loaded
    Learn more about why at https://single-spa.js.org/docs/ecosystem-angular/#zonejs
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/zone.js@0.11.3/dist/zone.min.js"></script> -->

  
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/system.min.js"></script>
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/amd.min.js"></script>
  

  <style>
    body, html {
      background-color: white;
    }

    single-spa-router { 
      height: 100vh;
      display: flex;
      flex-direction: column;
    }

    single-spa-router > nav > div:not(:empty) { 
      height: 48px;
    }

    single-spa-router > nav > div:empty { 
      display: none;
    }

    .root-error-page {
      height: 100vh;
      width: 100vw;
      position: relative;
      color: #4a4d4f; 
      display: flex;
      align-items: center;
      justify-content: center;
    }

    .root-error-container {
      display: flex;
      flex-direction: column;
      align-items: center;
      justify-content: center;
      text-align: center;
      transform: translateY(-50%);
    }

    .root-error-summary {
      font-size: 1.8rem;
      line-height: 2.4rem;
      margin-top: 2.5rem;
    }

Found 2026-01-07 by HttpPlugin

Create report

Open service 2a02:26f0:3500:14::1724:a255:80 · pentestfos.northerntrust.com

2026-01-07 13:34

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://pentestfos.northerntrust.com/
Date: Wed, 07 Jan 2026 13:34:59 GMT
Connection: close
Set-Cookie: NTRS_VISIT_ID=15a024176437240003615e6905010000c20f0000; path=/; domain=.ntrs.com

Found 2026-01-07 by HttpPlugin

Create report

Open service 2a02:26f0:3500:14::1724:a247:443 · pentestfos.northerntrust.com

2026-01-07 13:34

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Mon, 15 Dec 2025 17:48:19 GMT
x-amz-version-id: KQzxYXbjKOc7oy44fC6noecyHihqIGy1
ETag: W/"4ee94b3d46fd7b76934c6e771763eb54"
Server: AmazonS3
Cache-Control: no-store
Expires: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-FOS-URI: /index.html
X-Amz-Cf-Pop: JFK50-P13
X-Amz-Cf-Id: fVtNnmYAhyScYBwgzpwb20k9706TuGTLO3MiXXazjZjHCe6Azu-xVQ==
Date: Wed, 07 Jan 2026 13:34:19 GMT
Content-Length: 6146
Connection: close
Set-Cookie: NTRS_VISIT_ID=07a024172fe23300db605e69340100009f030000; path=/; domain=.ntrs.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Page title: Front Office Solutions

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>Front Office Solutions</title>

  <!--
    Remove this if you only support browsers that support async/await.
    This is needed by babel to share largeish helper code for compiling async/await in older
    browsers. More information at https://github.com/single-spa/create-single-spa/issues/112
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/regenerator-runtime@0.14.1/runtime.min.js"></script> -->

  <!--
    This CSP allows any SSL-enabled host and for arbitrary eval(), but you should limit these directives further to increase your app's security.
    Learn more about CSP policies at https://content-security-policy.com/#directive
  -->
  
      <meta
        http-equiv="Content-Security-Policy"
        content="
          default-src 'self' https:;
          script-src 'unsafe-inline' 'unsafe-eval' https:;
          connect-src https: wss://*.northerntrust.com wss://*.amzext.ntrs.com;
          style-src 'unsafe-inline' https:;
          object-src 'none';
          font-src 'self' https: data:;
          img-src 'self' https://*.northerntrust.com https://www.google-analytics.com https://www.googletagmanager.com data:;
          frame-src 'self' https: com-okta-authenticator: about: data: blob:;
        "
      >
    
  <!-- If you wish to turn off import-map-overrides for specific environments (prod), uncomment the line below -->
  <!-- More info at https://github.com/joeldenning/import-map-overrides/blob/master/docs/configuration.md#domain-list -->
  <!-- <meta name="import-map-overrides-domains" content="denylist:prod.example.com" /> -->

  <!-- Shared dependencies go into this import map. Your shared dependencies must be of one of the following formats:

    1. System.register (preferred when possible) - https://github.com/systemjs/systemjs/blob/master/docs/system-register.md
    2. UMD - https://github.com/umdjs/umd
    3. Global variable

    More information about shared dependencies can be found at https://single-spa.js.org/docs/recommended-setup#sharing-with-import-maps.
  -->
  
  <link rel="preload" href="https://cdn.jsdelivr.net/npm/single-spa@6.0.3/lib/es2015/system/single-spa.min.js" as="script" crossorigin>
  <link rel="preload" href="/apps/v2/fos-nav-bar/images/logo-fos-main.svg" as="image">
  

  <!-- Add your organization's prod import map URL to this script's src  -->
  <!-- <script type="systemjs-importmap" src="/importmap.json"></script> -->

  <meta name="importmap-type" content="systemjs-importmap" />
  <script type="systemjs-importmap" src="/importmap.json"></script>

  <!--
    If you need to support Angular applications, uncomment the script tag below to ensure only one instance of ZoneJS is loaded
    Learn more about why at https://single-spa.js.org/docs/ecosystem-angular/#zonejs
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/zone.js@0.11.3/dist/zone.min.js"></script> -->

  
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/system.min.js"></script>
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/amd.min.js"></script>
  

  <style>
    body, html {
      background-color: white;
    }

    single-spa-router { 
      height: 100vh;
      display: flex;
      flex-direction: column;
    }

    single-spa-router > nav > div:not(:empty) { 
      height: 48px;
    }

    single-spa-router > nav > div:empty { 
      display: none;
    }

    .root-error-page {
      height: 100vh;
      width: 100vw;
      position: relative;
      color: #4a4d4f; 
      display: flex;
      align-items: center;
      justify-content: center;
    }

    .root-error-container {
      display: flex;
      flex-direction: column;
      align-items: center;
      justify-content: center;
      text-align: center;
      transform: translateY(-50%);
    }

    .root-error-summary {
      font-size: 1.8rem;
      line-height: 2.4rem;
      margin-top: 2.5rem;
    }

Found 2026-01-07 by HttpPlugin

Create report

Open service 92.123.104.64:443 · pentestfos.northerntrust.com

2026-01-02 23:42

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Mon, 15 Dec 2025 17:48:19 GMT
x-amz-version-id: KQzxYXbjKOc7oy44fC6noecyHihqIGy1
ETag: W/"4ee94b3d46fd7b76934c6e771763eb54"
Server: AmazonS3
Cache-Control: no-store
Expires: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-FOS-URI: /index.html
X-Amz-Cf-Pop: JFK50-P13
X-Amz-Cf-Id: 6bOi51hee52vWPfRH3dTzOCcycka1VxErUiD4rsr9DAsiCHgAk3x_g==
Date: Fri, 02 Jan 2026 23:42:07 GMT
Content-Length: 6146
Connection: close
Set-Cookie: NTRS_VISIT_ID=c0a72917977e0000cf5758695c03000010130000; path=/; domain=.ntrs.com
Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Page title: Front Office Solutions

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <meta http-equiv="X-UA-Compatible" content="ie=edge">
  <title>Front Office Solutions</title>

  <!--
    Remove this if you only support browsers that support async/await.
    This is needed by babel to share largeish helper code for compiling async/await in older
    browsers. More information at https://github.com/single-spa/create-single-spa/issues/112
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/regenerator-runtime@0.14.1/runtime.min.js"></script> -->

  <!--
    This CSP allows any SSL-enabled host and for arbitrary eval(), but you should limit these directives further to increase your app's security.
    Learn more about CSP policies at https://content-security-policy.com/#directive
  -->
  
      <meta
        http-equiv="Content-Security-Policy"
        content="
          default-src 'self' https:;
          script-src 'unsafe-inline' 'unsafe-eval' https:;
          connect-src https: wss://*.northerntrust.com wss://*.amzext.ntrs.com;
          style-src 'unsafe-inline' https:;
          object-src 'none';
          font-src 'self' https: data:;
          img-src 'self' https://*.northerntrust.com https://www.google-analytics.com https://www.googletagmanager.com data:;
          frame-src 'self' https: com-okta-authenticator: about: data: blob:;
        "
      >
    
  <!-- If you wish to turn off import-map-overrides for specific environments (prod), uncomment the line below -->
  <!-- More info at https://github.com/joeldenning/import-map-overrides/blob/master/docs/configuration.md#domain-list -->
  <!-- <meta name="import-map-overrides-domains" content="denylist:prod.example.com" /> -->

  <!-- Shared dependencies go into this import map. Your shared dependencies must be of one of the following formats:

    1. System.register (preferred when possible) - https://github.com/systemjs/systemjs/blob/master/docs/system-register.md
    2. UMD - https://github.com/umdjs/umd
    3. Global variable

    More information about shared dependencies can be found at https://single-spa.js.org/docs/recommended-setup#sharing-with-import-maps.
  -->
  
  <link rel="preload" href="https://cdn.jsdelivr.net/npm/single-spa@6.0.3/lib/es2015/system/single-spa.min.js" as="script" crossorigin>
  <link rel="preload" href="/apps/v2/fos-nav-bar/images/logo-fos-main.svg" as="image">
  

  <!-- Add your organization's prod import map URL to this script's src  -->
  <!-- <script type="systemjs-importmap" src="/importmap.json"></script> -->

  <meta name="importmap-type" content="systemjs-importmap" />
  <script type="systemjs-importmap" src="/importmap.json"></script>

  <!--
    If you need to support Angular applications, uncomment the script tag below to ensure only one instance of ZoneJS is loaded
    Learn more about why at https://single-spa.js.org/docs/ecosystem-angular/#zonejs
  -->
  <!-- <script src="https://cdn.jsdelivr.net/npm/zone.js@0.11.3/dist/zone.min.js"></script> -->

  
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/system.min.js"></script>
  <script src="https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/amd.min.js"></script>
  

  <style>
    body, html {
      background-color: white;
    }

    single-spa-router { 
      height: 100vh;
      display: flex;
      flex-direction: column;
    }

    single-spa-router > nav > div:not(:empty) { 
      height: 48px;
    }

    single-spa-router > nav > div:empty { 
      display: none;
    }

    .root-error-page {
      height: 100vh;
      width: 100vw;
      position: relative;
      color: #4a4d4f; 
      display: flex;
      align-items: center;
      justify-content: center;
    }

    .root-error-container {
      display: flex;
      flex-direction: column;
      align-items: center;
      justify-content: center;
      text-align: center;
      transform: translateY(-50%);
    }

    .root-error-summary {
      font-size: 1.8rem;
      line-height: 2.4rem;
      margin-top: 2.5rem;
    }

Found 2026-01-02 by HttpPlugin