LeakIX - Host staging.ghin.com

Open service 18.173.154.32:80 · staging.ghin.com

2026-01-11 04:25

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 11 Jan 2026 04:25:50 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://staging.ghin.com/
X-Cache: Redirect from cloudfront
Via: 1.1 7ad01e16cb039e6f25a50f4e294fd0ae.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: uGwhZBU3rHwzEjA7IHiHrp2IPJJu-YGxGq1zVHD-eSqGH6JRwePDAA==
Content-Security-Policy: default-src 'self' *.usopen.com *.uswomensopen.com *.usga.org http://usopen.com http://uswomensopen.com http://usga.org; img-src 'self' data: blob: *; media-src 'self' data: blob: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' blob: *; font-src 'self' data: *; connect-src 'self' data: *; child-src 'self' blob: *; frame-src 'self' *; object-src 'self' *; frame-ancestors 'self' *.hcp2020.com:* *.usopen.com *.uswomensopen.com *.usga.org http://hcp2020.com http://usopen.com http://uswomensopen.com http://usga.org usgastaticsitesstpd.z20.web.core.windows.net

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.173.154.32:443 · staging.ghin.com

2026-01-11 04:25

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 4358
Connection: close
Last-Modified: Mon, 05 Jan 2026 12:13:07 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-codebuild-content-sha256: eb0ba6a13b4608ec5ccf2f5645cfb38db94dc94f640ca4447c56af285e018ec4
x-amz-version-id: pxS5JJ01Zy3vRd5x2vVTNbaPD6g32XC3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:144687958424:build/stg-ghin-fe-app-react-build:62f3b445-755d-4ac9-9653-08ecf56ddd6e
x-amz-meta-codebuild-content-md5: 14880b91bd56a11a2652b986120624f6
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 11 Jan 2026 04:25:49 GMT
ETag: "90f7a8bf4ca69d4cef51338c939e0d8f"
X-Cache: Hit from cloudfront
Via: 1.1 bc8243121fd94c5b2714caac07caccde.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: kkB-1Ath-ZIMjOh5bGi9jnMHntFI1IX6F74gK9-R4FOCBEKlmQ5vTA==
Age: 2
Content-Security-Policy: default-src 'self' *.usopen.com *.uswomensopen.com *.usga.org http://usopen.com http://uswomensopen.com http://usga.org; img-src 'self' data: blob: *; media-src 'self' data: blob: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' blob: *; font-src 'self' data: *; connect-src 'self' data: *; child-src 'self' blob: *; frame-src 'self' *; object-src 'self' *; frame-ancestors 'self' *.hcp2020.com:* *.usopen.com *.uswomensopen.com *.usga.org http://hcp2020.com http://usopen.com http://uswomensopen.com http://usga.org usgastaticsitesstpd.z20.web.core.windows.net

Page title: GHIN - United States Golf Association Service

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="utf-8" />
    <link rel="shortcut icon" href="favicon.ico" />
    <link rel="apple-touch-icon" sizes="180x180" href="apple-touch-icon.png">
    <link rel="icon" type="image/png" sizes="32x32" href="favicon-32x32.png">
    <link rel="icon" type="image/png" sizes="16x16" href="favicon-16x16.png">
    <link rel="manifest" href="site.webmanifest">
    <link rel="mask-icon" href="safari-pinned-tab.svg" color="#5bbad5">
    <meta name="msapplication-TileColor" content="#da532c">
    <meta name="theme-color" content="#ffffff">

    <meta name="apple-itunes-app" content="app-id=491796218">
    <meta name="google-play-app" content="app-id=com.advancedmobile.android.ghin">

    <meta name="viewport" content="width=device-width, initial-scale=1" />
    <meta name="theme-color" content="#000000" />
    <!--
      manifest.json provides metadata used when your web app is installed on a 
      user's mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/
    -->
    <link rel="manifest" href="manifest.json" />
    <!--
      Notice the use of %PUBLIC_URL% in the tags above.
      It will be replaced with the URL of the `public` folder during the build.
      Only files inside the `public` folder can be referenced from the HTML.

      Unlike "/favicon.ico" or "favicon.ico", "favicon.ico" will
      work correctly both with client-side routing and a non-root public URL.
      Learn how to configure a non-root public URL by running `npm run build`.
    -->
    <title>GHIN - United States Golf Association Service</title>
    <link href="https://fonts.googleapis.com/icon?family=Material+Icons+Outlined" rel="stylesheet">
    <!-- OneTrust Cookies Consent Notice start for ghin.com -->
    <script type="text/javascript">
      const shouldLoadOneTrust =
        !window.location.pathname.includes("/leaderboard");

      if (shouldLoadOneTrust) {
        // Load OneTrust scripts
        const script1 = document.createElement("script");
        script1.type = "text/javascript";
        script1.src =
          "https://cdn.cookielaw.org/consent/94ee254f-e65d-4da3-9a9e-ef94939d7178-test/OtAutoBlock.js";
        document.head.appendChild(script1);

        const script2 = document.createElement("script");
        script2.src = "https://cdn.cookielaw.org/scripttemplates/otSDKStub.js";
        script2.type = "text/javascript";
        script2.charset = "UTF-8";
        script2.setAttribute("data-domain-script", "94ee254f-e65d-4da3-9a9e-ef94939d7178-test");
        document.head.appendChild(script2);

        window.OptanonWrapper = function () {};
      }
    </script>
    <!-- OneTrust Cookies Consent Notice end for ghin.com -->
<!--    <script>-->
<!--      window.pendo = null;-->
<!--      (function(apiKey){-->
<!--          (function(p,e,n,d,o){var v,w,x,y,z;o=p[d]=p[d]||{};o._q=o._q||[];-->
<!--          v=['initialize','identify','updateOptions','pageLoad','track'];for(w=0,x=v.length;w<x;++w)(function(m){-->
<!--              o[m]=o[m]||function(){o._q[m===v[0]?'unshift':'push']([m].concat([].slice.call(arguments,0)));};})(v[w]);-->
<!--              y=e.createElement(n);y.async=!0;y.src='https://cdn.pendo.io/agent/static/'+apiKey+'/pendo.js';-->
<!--              z=e.getElementsByTagName(n)[0];z.parentNode.insertBefore(y,z);})(window,document,'script','pendo');-->
<!--          window.pendo = pendo;-->
<!--      })("{VITE_PENDO_API_KEY%}");-->
<!--    </script>-->
    <link rel="preconnect" href="https://www.google.com">
    <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
    <script type="module" crossorigin src="/assets/index-xvzDM-zd.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-C-eBjf7g.css">
  </head>
  <body>
    <noscript>You need to enable JavaScript to run this app.</noscript>
    <div id="root" style="overflow-y: hidden"></div>
    <!--
      This HTML file is a template.
      If you open it directly in the browser, you will see an empty page.

      You can add webfonts, meta tags, or a

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.173.154.12:80 · staging.ghin.com

2026-01-11 04:25

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 11 Jan 2026 04:25:50 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://staging.ghin.com/
X-Cache: Redirect from cloudfront
Via: 1.1 fe6d656eba9969a63bb94889f81e9bf8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: ZSqwKIxRjyHc4Q5d-0HHbw91bhPtgnjIaZuAOnkaFgHZ_QVLQebneQ==
Content-Security-Policy: default-src 'self' *.usopen.com *.uswomensopen.com *.usga.org http://usopen.com http://uswomensopen.com http://usga.org; img-src 'self' data: blob: *; media-src 'self' data: blob: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' blob: *; font-src 'self' data: *; connect-src 'self' data: *; child-src 'self' blob: *; frame-src 'self' *; object-src 'self' *; frame-ancestors 'self' *.hcp2020.com:* *.usopen.com *.uswomensopen.com *.usga.org http://hcp2020.com http://usopen.com http://uswomensopen.com http://usga.org usgastaticsitesstpd.z20.web.core.windows.net

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.173.154.96:80 · staging.ghin.com

2026-01-11 04:25

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 11 Jan 2026 04:25:50 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://staging.ghin.com/
X-Cache: Redirect from cloudfront
Via: 1.1 549ff9961325ec88cf02baa6f818172a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: KOC2RGlvCRb74OwnrNnjsDmvy1jZv5DKLcGlFLHtHaw6yAAyRxAe2Q==
Content-Security-Policy: default-src 'self' *.usopen.com *.uswomensopen.com *.usga.org http://usopen.com http://uswomensopen.com http://usga.org; img-src 'self' data: blob: *; media-src 'self' data: blob: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' blob: *; font-src 'self' data: *; connect-src 'self' data: *; child-src 'self' blob: *; frame-src 'self' *; object-src 'self' *; frame-ancestors 'self' *.hcp2020.com:* *.usopen.com *.uswomensopen.com *.usga.org http://hcp2020.com http://usopen.com http://uswomensopen.com http://usga.org usgastaticsitesstpd.z20.web.core.windows.net

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.173.154.96:443 · staging.ghin.com

2026-01-11 04:25

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 4358
Connection: close
Last-Modified: Mon, 05 Jan 2026 12:13:07 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-codebuild-content-sha256: eb0ba6a13b4608ec5ccf2f5645cfb38db94dc94f640ca4447c56af285e018ec4
x-amz-version-id: pxS5JJ01Zy3vRd5x2vVTNbaPD6g32XC3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:144687958424:build/stg-ghin-fe-app-react-build:62f3b445-755d-4ac9-9653-08ecf56ddd6e
x-amz-meta-codebuild-content-md5: 14880b91bd56a11a2652b986120624f6
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 11 Jan 2026 04:25:49 GMT
ETag: "90f7a8bf4ca69d4cef51338c939e0d8f"
X-Cache: Hit from cloudfront
Via: 1.1 fe6d656eba9969a63bb94889f81e9bf8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: gCH8NbRXOxs67FgH52kjsBQBTW75UKrOZxeX8WR2w3yEL0Xy_Bx69Q==
Age: 2
Content-Security-Policy: default-src 'self' *.usopen.com *.uswomensopen.com *.usga.org http://usopen.com http://uswomensopen.com http://usga.org; img-src 'self' data: blob: *; media-src 'self' data: blob: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' blob: *; font-src 'self' data: *; connect-src 'self' data: *; child-src 'self' blob: *; frame-src 'self' *; object-src 'self' *; frame-ancestors 'self' *.hcp2020.com:* *.usopen.com *.uswomensopen.com *.usga.org http://hcp2020.com http://usopen.com http://uswomensopen.com http://usga.org usgastaticsitesstpd.z20.web.core.windows.net

Page title: GHIN - United States Golf Association Service

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="utf-8" />
    <link rel="shortcut icon" href="favicon.ico" />
    <link rel="apple-touch-icon" sizes="180x180" href="apple-touch-icon.png">
    <link rel="icon" type="image/png" sizes="32x32" href="favicon-32x32.png">
    <link rel="icon" type="image/png" sizes="16x16" href="favicon-16x16.png">
    <link rel="manifest" href="site.webmanifest">
    <link rel="mask-icon" href="safari-pinned-tab.svg" color="#5bbad5">
    <meta name="msapplication-TileColor" content="#da532c">
    <meta name="theme-color" content="#ffffff">

    <meta name="apple-itunes-app" content="app-id=491796218">
    <meta name="google-play-app" content="app-id=com.advancedmobile.android.ghin">

    <meta name="viewport" content="width=device-width, initial-scale=1" />
    <meta name="theme-color" content="#000000" />
    <!--
      manifest.json provides metadata used when your web app is installed on a 
      user's mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/
    -->
    <link rel="manifest" href="manifest.json" />
    <!--
      Notice the use of %PUBLIC_URL% in the tags above.
      It will be replaced with the URL of the `public` folder during the build.
      Only files inside the `public` folder can be referenced from the HTML.

      Unlike "/favicon.ico" or "favicon.ico", "favicon.ico" will
      work correctly both with client-side routing and a non-root public URL.
      Learn how to configure a non-root public URL by running `npm run build`.
    -->
    <title>GHIN - United States Golf Association Service</title>
    <link href="https://fonts.googleapis.com/icon?family=Material+Icons+Outlined" rel="stylesheet">
    <!-- OneTrust Cookies Consent Notice start for ghin.com -->
    <script type="text/javascript">
      const shouldLoadOneTrust =
        !window.location.pathname.includes("/leaderboard");

      if (shouldLoadOneTrust) {
        // Load OneTrust scripts
        const script1 = document.createElement("script");
        script1.type = "text/javascript";
        script1.src =
          "https://cdn.cookielaw.org/consent/94ee254f-e65d-4da3-9a9e-ef94939d7178-test/OtAutoBlock.js";
        document.head.appendChild(script1);

        const script2 = document.createElement("script");
        script2.src = "https://cdn.cookielaw.org/scripttemplates/otSDKStub.js";
        script2.type = "text/javascript";
        script2.charset = "UTF-8";
        script2.setAttribute("data-domain-script", "94ee254f-e65d-4da3-9a9e-ef94939d7178-test");
        document.head.appendChild(script2);

        window.OptanonWrapper = function () {};
      }
    </script>
    <!-- OneTrust Cookies Consent Notice end for ghin.com -->
<!--    <script>-->
<!--      window.pendo = null;-->
<!--      (function(apiKey){-->
<!--          (function(p,e,n,d,o){var v,w,x,y,z;o=p[d]=p[d]||{};o._q=o._q||[];-->
<!--          v=['initialize','identify','updateOptions','pageLoad','track'];for(w=0,x=v.length;w<x;++w)(function(m){-->
<!--              o[m]=o[m]||function(){o._q[m===v[0]?'unshift':'push']([m].concat([].slice.call(arguments,0)));};})(v[w]);-->
<!--              y=e.createElement(n);y.async=!0;y.src='https://cdn.pendo.io/agent/static/'+apiKey+'/pendo.js';-->
<!--              z=e.getElementsByTagName(n)[0];z.parentNode.insertBefore(y,z);})(window,document,'script','pendo');-->
<!--          window.pendo = pendo;-->
<!--      })("{VITE_PENDO_API_KEY%}");-->
<!--    </script>-->
    <link rel="preconnect" href="https://www.google.com">
    <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
    <script type="module" crossorigin src="/assets/index-xvzDM-zd.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-C-eBjf7g.css">
  </head>
  <body>
    <noscript>You need to enable JavaScript to run this app.</noscript>
    <div id="root" style="overflow-y: hidden"></div>
    <!--
      This HTML file is a template.
      If you open it directly in the browser, you will see an empty page.

      You can add webfonts, meta tags, or a

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.173.154.24:80 · staging.ghin.com

2026-01-11 04:25

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 11 Jan 2026 04:25:50 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://staging.ghin.com/
X-Cache: Redirect from cloudfront
Via: 1.1 cb7ecd2473bf95a71af8d1ff8d1034fa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: 4_Som-p3mbjQtWImelyWQqMEUzcDZRFNZxO6Um-hdFimH8uQvM_dTw==
Content-Security-Policy: default-src 'self' *.usopen.com *.uswomensopen.com *.usga.org http://usopen.com http://uswomensopen.com http://usga.org; img-src 'self' data: blob: *; media-src 'self' data: blob: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' blob: *; font-src 'self' data: *; connect-src 'self' data: *; child-src 'self' blob: *; frame-src 'self' *; object-src 'self' *; frame-ancestors 'self' *.hcp2020.com:* *.usopen.com *.uswomensopen.com *.usga.org http://hcp2020.com http://usopen.com http://uswomensopen.com http://usga.org usgastaticsitesstpd.z20.web.core.windows.net

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.173.154.24:443 · staging.ghin.com

2026-01-11 04:25

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 4358
Connection: close
Last-Modified: Mon, 05 Jan 2026 12:13:07 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-codebuild-content-sha256: eb0ba6a13b4608ec5ccf2f5645cfb38db94dc94f640ca4447c56af285e018ec4
x-amz-version-id: pxS5JJ01Zy3vRd5x2vVTNbaPD6g32XC3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:144687958424:build/stg-ghin-fe-app-react-build:62f3b445-755d-4ac9-9653-08ecf56ddd6e
x-amz-meta-codebuild-content-md5: 14880b91bd56a11a2652b986120624f6
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 11 Jan 2026 04:25:49 GMT
ETag: "90f7a8bf4ca69d4cef51338c939e0d8f"
X-Cache: Hit from cloudfront
Via: 1.1 667b60dd320c04dc9adf041517122fc2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: uP2l0Gihx8xeb36cCR214ZkyVbrs73tF0qAGT-nAHOyn7YWxHR977A==
Age: 2
Content-Security-Policy: default-src 'self' *.usopen.com *.uswomensopen.com *.usga.org http://usopen.com http://uswomensopen.com http://usga.org; img-src 'self' data: blob: *; media-src 'self' data: blob: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' blob: *; font-src 'self' data: *; connect-src 'self' data: *; child-src 'self' blob: *; frame-src 'self' *; object-src 'self' *; frame-ancestors 'self' *.hcp2020.com:* *.usopen.com *.uswomensopen.com *.usga.org http://hcp2020.com http://usopen.com http://uswomensopen.com http://usga.org usgastaticsitesstpd.z20.web.core.windows.net

Page title: GHIN - United States Golf Association Service

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="utf-8" />
    <link rel="shortcut icon" href="favicon.ico" />
    <link rel="apple-touch-icon" sizes="180x180" href="apple-touch-icon.png">
    <link rel="icon" type="image/png" sizes="32x32" href="favicon-32x32.png">
    <link rel="icon" type="image/png" sizes="16x16" href="favicon-16x16.png">
    <link rel="manifest" href="site.webmanifest">
    <link rel="mask-icon" href="safari-pinned-tab.svg" color="#5bbad5">
    <meta name="msapplication-TileColor" content="#da532c">
    <meta name="theme-color" content="#ffffff">

    <meta name="apple-itunes-app" content="app-id=491796218">
    <meta name="google-play-app" content="app-id=com.advancedmobile.android.ghin">

    <meta name="viewport" content="width=device-width, initial-scale=1" />
    <meta name="theme-color" content="#000000" />
    <!--
      manifest.json provides metadata used when your web app is installed on a 
      user's mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/
    -->
    <link rel="manifest" href="manifest.json" />
    <!--
      Notice the use of %PUBLIC_URL% in the tags above.
      It will be replaced with the URL of the `public` folder during the build.
      Only files inside the `public` folder can be referenced from the HTML.

      Unlike "/favicon.ico" or "favicon.ico", "favicon.ico" will
      work correctly both with client-side routing and a non-root public URL.
      Learn how to configure a non-root public URL by running `npm run build`.
    -->
    <title>GHIN - United States Golf Association Service</title>
    <link href="https://fonts.googleapis.com/icon?family=Material+Icons+Outlined" rel="stylesheet">
    <!-- OneTrust Cookies Consent Notice start for ghin.com -->
    <script type="text/javascript">
      const shouldLoadOneTrust =
        !window.location.pathname.includes("/leaderboard");

      if (shouldLoadOneTrust) {
        // Load OneTrust scripts
        const script1 = document.createElement("script");
        script1.type = "text/javascript";
        script1.src =
          "https://cdn.cookielaw.org/consent/94ee254f-e65d-4da3-9a9e-ef94939d7178-test/OtAutoBlock.js";
        document.head.appendChild(script1);

        const script2 = document.createElement("script");
        script2.src = "https://cdn.cookielaw.org/scripttemplates/otSDKStub.js";
        script2.type = "text/javascript";
        script2.charset = "UTF-8";
        script2.setAttribute("data-domain-script", "94ee254f-e65d-4da3-9a9e-ef94939d7178-test");
        document.head.appendChild(script2);

        window.OptanonWrapper = function () {};
      }
    </script>
    <!-- OneTrust Cookies Consent Notice end for ghin.com -->
<!--    <script>-->
<!--      window.pendo = null;-->
<!--      (function(apiKey){-->
<!--          (function(p,e,n,d,o){var v,w,x,y,z;o=p[d]=p[d]||{};o._q=o._q||[];-->
<!--          v=['initialize','identify','updateOptions','pageLoad','track'];for(w=0,x=v.length;w<x;++w)(function(m){-->
<!--              o[m]=o[m]||function(){o._q[m===v[0]?'unshift':'push']([m].concat([].slice.call(arguments,0)));};})(v[w]);-->
<!--              y=e.createElement(n);y.async=!0;y.src='https://cdn.pendo.io/agent/static/'+apiKey+'/pendo.js';-->
<!--              z=e.getElementsByTagName(n)[0];z.parentNode.insertBefore(y,z);})(window,document,'script','pendo');-->
<!--          window.pendo = pendo;-->
<!--      })("{VITE_PENDO_API_KEY%}");-->
<!--    </script>-->
    <link rel="preconnect" href="https://www.google.com">
    <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
    <script type="module" crossorigin src="/assets/index-xvzDM-zd.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-C-eBjf7g.css">
  </head>
  <body>
    <noscript>You need to enable JavaScript to run this app.</noscript>
    <div id="root" style="overflow-y: hidden"></div>
    <!--
      This HTML file is a template.
      If you open it directly in the browser, you will see an empty page.

      You can add webfonts, meta tags, or a

Found 2026-01-11 by HttpPlugin

Create report

Open service 18.173.154.12:443 · staging.ghin.com

2026-01-11 04:25

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 4358
Connection: close
Last-Modified: Mon, 05 Jan 2026 12:13:07 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-codebuild-content-sha256: eb0ba6a13b4608ec5ccf2f5645cfb38db94dc94f640ca4447c56af285e018ec4
x-amz-version-id: pxS5JJ01Zy3vRd5x2vVTNbaPD6g32XC3
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:144687958424:build/stg-ghin-fe-app-react-build:62f3b445-755d-4ac9-9653-08ecf56ddd6e
x-amz-meta-codebuild-content-md5: 14880b91bd56a11a2652b986120624f6
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 11 Jan 2026 04:25:49 GMT
ETag: "90f7a8bf4ca69d4cef51338c939e0d8f"
X-Cache: Hit from cloudfront
Via: 1.1 bc8243121fd94c5b2714caac07caccde.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MUC50-P3
X-Amz-Cf-Id: 79uGMNKuqHrrpY99LjleojseXtBtGzHNcRRM5oZR6QytsZEQt_C9-w==
Age: 2
Content-Security-Policy: default-src 'self' *.usopen.com *.uswomensopen.com *.usga.org http://usopen.com http://uswomensopen.com http://usga.org; img-src 'self' data: blob: *; media-src 'self' data: blob: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *; style-src 'self' 'unsafe-inline' blob: *; font-src 'self' data: *; connect-src 'self' data: *; child-src 'self' blob: *; frame-src 'self' *; object-src 'self' *; frame-ancestors 'self' *.hcp2020.com:* *.usopen.com *.uswomensopen.com *.usga.org http://hcp2020.com http://usopen.com http://uswomensopen.com http://usga.org usgastaticsitesstpd.z20.web.core.windows.net

Page title: GHIN - United States Golf Association Service

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="utf-8" />
    <link rel="shortcut icon" href="favicon.ico" />
    <link rel="apple-touch-icon" sizes="180x180" href="apple-touch-icon.png">
    <link rel="icon" type="image/png" sizes="32x32" href="favicon-32x32.png">
    <link rel="icon" type="image/png" sizes="16x16" href="favicon-16x16.png">
    <link rel="manifest" href="site.webmanifest">
    <link rel="mask-icon" href="safari-pinned-tab.svg" color="#5bbad5">
    <meta name="msapplication-TileColor" content="#da532c">
    <meta name="theme-color" content="#ffffff">

    <meta name="apple-itunes-app" content="app-id=491796218">
    <meta name="google-play-app" content="app-id=com.advancedmobile.android.ghin">

    <meta name="viewport" content="width=device-width, initial-scale=1" />
    <meta name="theme-color" content="#000000" />
    <!--
      manifest.json provides metadata used when your web app is installed on a 
      user's mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/
    -->
    <link rel="manifest" href="manifest.json" />
    <!--
      Notice the use of %PUBLIC_URL% in the tags above.
      It will be replaced with the URL of the `public` folder during the build.
      Only files inside the `public` folder can be referenced from the HTML.

      Unlike "/favicon.ico" or "favicon.ico", "favicon.ico" will
      work correctly both with client-side routing and a non-root public URL.
      Learn how to configure a non-root public URL by running `npm run build`.
    -->
    <title>GHIN - United States Golf Association Service</title>
    <link href="https://fonts.googleapis.com/icon?family=Material+Icons+Outlined" rel="stylesheet">
    <!-- OneTrust Cookies Consent Notice start for ghin.com -->
    <script type="text/javascript">
      const shouldLoadOneTrust =
        !window.location.pathname.includes("/leaderboard");

      if (shouldLoadOneTrust) {
        // Load OneTrust scripts
        const script1 = document.createElement("script");
        script1.type = "text/javascript";
        script1.src =
          "https://cdn.cookielaw.org/consent/94ee254f-e65d-4da3-9a9e-ef94939d7178-test/OtAutoBlock.js";
        document.head.appendChild(script1);

        const script2 = document.createElement("script");
        script2.src = "https://cdn.cookielaw.org/scripttemplates/otSDKStub.js";
        script2.type = "text/javascript";
        script2.charset = "UTF-8";
        script2.setAttribute("data-domain-script", "94ee254f-e65d-4da3-9a9e-ef94939d7178-test");
        document.head.appendChild(script2);

        window.OptanonWrapper = function () {};
      }
    </script>
    <!-- OneTrust Cookies Consent Notice end for ghin.com -->
<!--    <script>-->
<!--      window.pendo = null;-->
<!--      (function(apiKey){-->
<!--          (function(p,e,n,d,o){var v,w,x,y,z;o=p[d]=p[d]||{};o._q=o._q||[];-->
<!--          v=['initialize','identify','updateOptions','pageLoad','track'];for(w=0,x=v.length;w<x;++w)(function(m){-->
<!--              o[m]=o[m]||function(){o._q[m===v[0]?'unshift':'push']([m].concat([].slice.call(arguments,0)));};})(v[w]);-->
<!--              y=e.createElement(n);y.async=!0;y.src='https://cdn.pendo.io/agent/static/'+apiKey+'/pendo.js';-->
<!--              z=e.getElementsByTagName(n)[0];z.parentNode.insertBefore(y,z);})(window,document,'script','pendo');-->
<!--          window.pendo = pendo;-->
<!--      })("{VITE_PENDO_API_KEY%}");-->
<!--    </script>-->
    <link rel="preconnect" href="https://www.google.com">
    <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
    <script type="module" crossorigin src="/assets/index-xvzDM-zd.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-C-eBjf7g.css">
  </head>
  <body>
    <noscript>You need to enable JavaScript to run this app.</noscript>
    <div id="root" style="overflow-y: hidden"></div>
    <!--
      This HTML file is a template.
      If you open it directly in the browser, you will see an empty page.

      You can add webfonts, meta tags, or a

Found 2026-01-11 by HttpPlugin

Domain staging.ghin.com

United States

Software information

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

stg-ghin-fe-app.hcp2020.comstaging.ghin.com*.hcp2020.com

Domain summary

IP summary