AkamaiGHost
tcp/443 tcp/80
.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).
They store information about the files within a folder, including display options of folders, such as icon positions and view settings.
It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.
Severity: high
Fingerprint: 5f32cf5d6962f09c248e4f81248e4f812296a4ac5e2c7756c958e556508ad849
Found 41 files trough .DS_Store spidering: /empty.html /empty.map /fixpath.js /fixpath.js.gz /giving-marketplace /images /images/basket /images/cause-community-assets /images/cause-education-assets /images/cause-environment-assets /images/cause-health-assets /images/cause-hunger-assets /images/cause-science-assets /images/charity-admin-onboarding /images/charity-cards-combination /images/charity-signup /images/client-onboarding /images/components /images/curated-opportunity-assets /images/daf /images/demo /images/donor-goal /images/donor-onboarding /images/donor-profile /images/email /images/explore /images/favicons /images/giving-list /images/gmp-logos /images/hero-homepage-assets /images/home /images/lottie-animations /images/match-approval /images/nonprofit-info /images/npo-profile /images/nra /images/onboarding /images/small-illustrations /images/volunteering-profile /loader.css /ntee-codes
Severity: high
Fingerprint: 5f32cf5d6962f09cccd847a3ccd847a34d17448207510854af3f11bc328aca95
Found 43 files trough .DS_Store spidering: /empty.html /empty.map /fixpath.js /fixpath.js.gz /giving-marketplace /images /images/basket /images/cause-community-assets /images/cause-education-assets /images/cause-environment-assets /images/cause-health-assets /images/cause-hunger-assets /images/cause-science-assets /images/charity-admin-onboarding /images/charity-cards-combination /images/charity-signup /images/client-onboarding /images/components /images/curated-opportunity-assets /images/daf /images/demo /images/donor-goal /images/donor-onboarding /images/donor-profile /images/email /images/explore /images/favicons /images/giving-list /images/giving-list/gl-charitable-virus-assets /images/giving-list/gl-child-health-assets /images/gmp-logos /images/hero-homepage-assets /images/home /images/lottie-animations /images/match-approval /images/nonprofit-info /images/npo-profile /images/nra /images/onboarding /images/small-illustrations /images/volunteering-profile /loader.css /ntee-codes
Severity: high
Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d80f608ca74ce0181d068c73afcdb45e83
Found 8 files trough .DS_Store spidering: /empty.html /empty.map /fixpath.js /fixpath.js.gz /giving-marketplace /images /loader.css /ntee-codes
Open service 104.110.240.155:80 · www.dancereflections-vancleefarpels.cn
2026-01-12 20:10
HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Mon, 12 Jan 2026 20:11:32 GMT Date: Mon, 12 Jan 2026 20:11:32 GMT Connection: close Page title: Invalid URL <HTML><HEAD> <TITLE>Invalid URL</TITLE> </HEAD><BODY> <H1>Invalid URL</H1> The requested URL "[no URL]", is invalid.<p> Reference #9.97f06e68.1768248692.1cc981d <P>https://errors.edgesuite.net/9.97f06e68.1768248692.1cc981d</P> </BODY></HTML>
Open service 104.110.240.155:443 · www.dancereflections-vancleefarpels.cn
2026-01-12 20:10
HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Mon, 12 Jan 2026 20:10:49 GMT Date: Mon, 12 Jan 2026 20:10:49 GMT Connection: close Page title: Invalid URL <HTML><HEAD> <TITLE>Invalid URL</TITLE> </HEAD><BODY> <H1>Invalid URL</H1> The requested URL "[no URL]", is invalid.<p> Reference #9.97f06e68.1768248649.1cbc8ef <P>https://errors.edgesuite.net/9.97f06e68.1768248649.1cbc8ef</P> </BODY></HTML>
Open service 104.110.240.155:443 · benefitnavigator.edgepark.com
2026-01-12 19:46
HTTP/1.1 200 OK Strict-Transport-Security: max-age=15724800 Content-Type: text/html; charset=utf-8 ETag: W/"17348-GYzn9akJhubKudbFajizeZZJq2Y-gzip" X-Content-Type-Options: nosniff X-SAP-Pad: 2 Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: wss: *.typekit.net fonts.gstatic.com *.google-analytics.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.go-mpulse.net *.facebook.com *.facebook.net *.pinimg.com *.pinterest.com *.doubleclick.net *.bing.com *.userway.org *.tiktok.com *.googleapis.com *.youtube.com *.byspotify.com *.impactcdn.com *.clarity.ms *.akstat.io *.loggly.com *.akamaihd.net *.googleadservices.com *.chasepaymentechhostedpay-var.com *.cardinalhealth.com *.cardinalhealth.net *.edgepark.com *.contextweb.com *.chasepaymentechhostedpay.com *.hybris.com *.cahcloud.net *.mouseflow.com edgepark.sjv.io *.crf8uvnnzg-cardinalh1-p2-public.model-t.cc.commerce.ondemand.com *.serviceobjects.com *.google.com www.gstatic.com www.edgeparkhealth.com *.mc-content.com *.fuelcdn.com; object-src 'self'; frame-ancestors 'self' *.crf8uvnnzg-cardinalh1-p2-public.model-t.cc.commerce.ondemand.com; X-Frame-Options: DENY X-Akamai-Transformed: 9 26198 0 pmb=mRUM,2 Vary: user-agent Expires: Mon, 12 Jan 2026 19:46:10 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 12 Jan 2026 19:46:10 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: ROUTE=.jsapps-79c956dff5-w4kg6; Path=/; Secure; HttpOnly; SameSite=None Server-Timing: edge; dur=106 Server-Timing: origin; dur=803 Server-Timing: cdn-cache; desc=MISS Alt-Svc: h3=":443"; ma=93600 Server-Timing: ak_p; desc="1768247169549_1752101012_833862488_82690_13918_153_89_-";dur=1
Open service 104.110.240.155:80 · benefitnavigator.edgepark.com
2026-01-12 19:46
HTTP/1.1 301 Moved Permanently Location: https://benefitnavigator.edgepark.com/ Content-Length: 246 Content-Type: text/html; charset=iso-8859-1 Expires: Mon, 12 Jan 2026 19:46:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 12 Jan 2026 19:46:49 GMT Connection: close Server-Timing: edge; dur=1 Server-Timing: origin; dur=180 Server-Timing: cdn-cache; desc=MISS Server-Timing: ak_p; desc="1768247209288_1752101015_28418243_18049_10158_13_0_-";dur=1 Page title: 301 Moved Permanently <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="https://benefitnavigator.edgepark.com/">here</a>.</p> </body></html>
Open service 104.110.240.155:443 · benefitnavigator.stage.edgepark.com
2026-01-12 19:46
HTTP/1.1 200 OK Strict-Transport-Security: max-age=15724800 Content-Type: text/html; charset=utf-8 ETag: W/"171af-xsGN9aA/Py/W5qSLH8wG1KlmTsU-gzip" X-Content-Type-Options: nosniff X-SAP-Pad: 628 Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: wss: *.typekit.net fonts.gstatic.com *.google-analytics.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.go-mpulse.net *.facebook.com *.facebook.net *.pinimg.com *.pinterest.com *.doubleclick.net *.bing.com *.userway.org *.tiktok.com *.googleapis.com *.youtube.com *.byspotify.com *.impactcdn.com *.clarity.ms *.akstat.io *.loggly.com *.akamaihd.net *.googleadservices.com *.chasepaymentechhostedpay-var.com *.cardinalhealth.com *.cardinalhealth.net *.edgepark.com *.contextweb.com *.chasepaymentechhostedpay.com *.hybris.com *.cahcloud.net *.mouseflow.com edgepark.sjv.io *.crf8uvnnzg-cardinalh1-p1-public.model-t.cc.commerce.ondemand.com *.serviceobjects.com *.google.com www.gstatic.com www.edgeparkhealth.com *.mc-content.com *.fuelcdn.com; object-src 'self'; frame-ancestors 'self' *.crf8uvnnzg-cardinalh1-p1-public.model-t.cc.commerce.ondemand.com; X-Frame-Options: DENY X-Akamai-Transformed: 9 - 0 pmb=mRUM,2 Vary: user-agent Expires: Mon, 12 Jan 2026 19:46:10 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 12 Jan 2026 19:46:10 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: ROUTE=.jsapps-6cd998bddf-rxdjt; Path=/; Secure; HttpOnly; SameSite=None Server-Timing: edge; dur=87 Server-Timing: origin; dur=1585 Server-Timing: cdn-cache; desc=MISS Alt-Svc: h3=":443"; ma=93600 Server-Timing: ak_p; desc="1768247169030_1752101015_28374308_167310_12588_12_39_-";dur=1
Open service 104.110.240.155:80 · benefitnavigator.stage.edgepark.com
2026-01-12 19:46
HTTP/1.1 301 Moved Permanently Location: https://benefitnavigator.stage.edgepark.com/ Content-Length: 252 Content-Type: text/html; charset=iso-8859-1 Expires: Mon, 12 Jan 2026 19:46:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 12 Jan 2026 19:46:49 GMT Connection: close Server-Timing: edge; dur=1 Server-Timing: origin; dur=169 Server-Timing: cdn-cache; desc=MISS Server-Timing: ak_p; desc="1768247209133_1752101015_28418030_17077_9309_7_0_-";dur=1 Page title: 301 Moved Permanently <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="https://benefitnavigator.stage.edgepark.com/">here</a>.</p> </body></html>
Open service 104.110.240.155:443 · kat.open.api.be.acc.kbc-group.com
2026-01-10 13:45
HTTP/1.1 403 Forbidden
Content-Type: application/json
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-request-id: f1537476-b49e-4a93-9510-65c27a442af8
Content-Length: 24
Date: Sat, 10 Jan 2026 13:45:34 GMT
Connection: close
X-N: S
{ "error": "forbidden" }
Open service 104.110.240.155:80 · cdn.dev.skfmediahub.skf.com
2026-01-07 12:09
HTTP/1.1 308 Permanent Redirect Content-Type: text/html Content-Length: 164 Location: https://cdn.dev.skfmediahub.skf.com Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization Access-Control-Max-Age: 1728000 Expires: Wed, 07 Jan 2026 12:09:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 12:09:59 GMT Connection: close Page title: 308 Permanent Redirect <html> <head><title>308 Permanent Redirect</title></head> <body> <center><h1>308 Permanent Redirect</h1></center> <hr><center>nginx</center> </body> </html>
Open service 104.110.240.155:443 · cdn.dev.skfmediahub.skf.com
2026-01-07 12:09
HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 146 Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization Access-Control-Max-Age: 1728000 Expires: Wed, 07 Jan 2026 12:09:18 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 12:09:18 GMT Connection: close Page title: 404 Not Found <html> <head><title>404 Not Found</title></head> <body> <center><h1>404 Not Found</h1></center> <hr><center>nginx</center> </body> </html>
Open service 104.110.240.155:443 · careertraining.blueridgectc.edu
2026-01-07 11:57
HTTP/1.1 403 Forbidden Mime-Version: 1.0 Content-Type: text/html Content-Length: 385 Expires: Wed, 07 Jan 2026 11:58:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 11:58:02 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Strict-Transport-Security: max-age=15768000 ; includeSubDomains ; preload Server-Timing: ak_p; desc="1767787082103_1752101015_519052599_27_12847_9_58_-";dur=1 Page title: Access Denied <HTML><HEAD> <TITLE>Access Denied</TITLE> </HEAD><BODY> <H1>Access Denied</H1> You don't have permission to access "http://careertraining.blueridgectc.edu/" on this server.<P> Reference #18.97f06e68.1767787082.1ef01d37 <P>https://errors.edgesuite.net/18.97f06e68.1767787082.1ef01d37</P> </BODY> </HTML>
Open service 104.110.240.155:80 · careertraining.blueridgectc.edu
2026-01-07 11:57
HTTP/1.1 403 Forbidden Mime-Version: 1.0 Content-Type: text/html Content-Length: 385 Expires: Wed, 07 Jan 2026 11:58:44 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 07 Jan 2026 11:58:44 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Server-Timing: ak_p; desc="1767787124384_1752101015_519088906_30_15528_166_0_-";dur=1 Page title: Access Denied <HTML><HEAD> <TITLE>Access Denied</TITLE> </HEAD><BODY> <H1>Access Denied</H1> You don't have permission to access "http://careertraining.blueridgectc.edu/" on this server.<P> Reference #18.97f06e68.1767787124.1ef0ab0a <P>https://errors.edgesuite.net/18.97f06e68.1767787124.1ef0ab0a</P> </BODY> </HTML>
Open service 104.110.240.155:443 · assets2-eu21-int1.dws.workzone.ondemand.com
2026-01-07 11:51
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Cache-Control: max-age=0, private, must-revalidate
x-xss-protection: 1; mode=block; report=/content_security_policy_report/xss
x-request-id: 59306738-e084-4d27-af14-a368ec50994c
content-security-policy-report-only: report-uri /content_security_policy_report/csp; frame-ancestors 'self' https:
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-frame-options: SAMEORIGIN
x-runtime: 0.032022
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
ETag: W/"b2aacaf4ead66ccb71cc3f2222563475-gzip"
status: 200 OK
x-envoy-upstream-service-time: 36
Date: Wed, 07 Jan 2026 11:51:10 GMT
Content-Length: 183
Connection: close
Access-Control-Allow-Origin: https://eu21-int1.dws.workzone.ondemand.com
<html>
<body>
<script>
//<![CDATA[
var l = window.location;
var h = l.href.replace('#','').split('?');
l.replace( h[0] + '?pass=true&' + h[1]);
//]]>
</script></body>
</html>
Open service 104.110.240.155:80 · assets2-eu21-int1.dws.workzone.ondemand.com
2026-01-07 11:51
HTTP/1.1 308 Permanent Redirect Content-Type: text/html Content-Length: 164 Location: https://assets2-eu21-int1.dws.workzone.ondemand.com Date: Wed, 07 Jan 2026 11:51:50 GMT Connection: close Access-Control-Allow-Origin: https://eu21-int1.dws.workzone.ondemand.com Page title: 308 Permanent Redirect <html> <head><title>308 Permanent Redirect</title></head> <body> <center><h1>308 Permanent Redirect</h1></center> <hr><center>nginx</center> </body> </html>