AkamaiGHost
tcp/443 tcp/80
Microsoft-IIS 10.0
tcp/443
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa39812e2c7762da2f5fbc1d838f61101bd62f9ea19
GraphQL introspection enabled at /graphql Types: 33 (by kind: ENUM: 3, INPUT_OBJECT: 6, OBJECT: 20, SCALAR: 4) Operations: - Query: Query | fields: availableDashboards, dashboardById, dashboardProductTypes, dashboardTypesWithIndications, dashboards - Mutation: Mutation | fields: createDashboard, createOrganization, deleteDashboard, reportEvent, updateDashboard Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3019ed8402192b1849084ef1fd64e8abef70869aa
GraphQL introspection enabled at /graphql Types: 32 (by kind: ENUM: 3, INPUT_OBJECT: 6, OBJECT: 19, SCALAR: 4) Operations: - Query: Query | fields: availableDashboards, dashboardById, dashboardProductTypes, dashboardTypesWithIndications, dashboards - Mutation: Mutation | fields: createDashboard, createOrganization, deleteDashboard, updateDashboard, updateOrganization Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Open service 23.55.163.165:443 · bzees.com
2026-01-23 23:19
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://www.bzees.com/ Date: Fri, 23 Jan 2026 23:19:43 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Cache-Control: no-transform Akamai-GRN: 0.a5a23717.1769210383.b494db1 Server-Timing: ak_p; desc="1769210383152_389522085_189353393_17_2105_0_4_-";dur=1
Open service 23.55.163.165:80 · bzees.com
2026-01-23 23:19
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://bzees.com/ Date: Fri, 23 Jan 2026 23:20:05 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Cache-Control: no-transform Akamai-GRN: 0.a5a23717.1769210405.b495f65 Server-Timing: ak_p; desc="1769210405079_389522085_189357925_11_1367_0_0_-";dur=1
Open service 23.55.163.165:443 · api.rwd.natera.com
2026-01-23 08:21
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Access-Control-Allow-Origin: https://rwd.natera.com Vary: Origin Access-Control-Allow-Credentials: true ETag: W/"27-2r/wJZyqR//Afg1J4HofX9njjJM" X-Akamai-Transformed: 9 39 0 pmb=mRUM,1 Expires: Fri, 23 Jan 2026 08:22:00 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 23 Jan 2026 08:22:00 GMT Content-Length: 39 Connection: close Server-Timing: edge; dur=1 Server-Timing: origin; dur=149 Server-Timing: cdn-cache; desc=MISS Alt-Svc: h3=":443"; ma=93600 Server-Timing: ak_p; desc="1769156520089_389522085_150864783_15020_10231_94_98_-";dur=1 Hello World! RWD Portal API is running.
Open service 23.55.163.165:443 · dnbportal.fi
2026-01-22 21:58
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Microsoft-IIS/10.0 X-Frame-Options: SAMEORIGIN X-Powered-By: PHP/8.1.33 Link: <https://dnbportal.fi/wp-json/>; rel="https://api.w.org/" Link: <https://dnbportal.fi/wp-json/wp/v2/pages/7824>; rel="alternate"; title="JSON"; type="application/json" Link: <https://dnbportal.fi/>; rel=shortlink X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: unsafe-none Content-Security-Policy: default-src *.kundo.se; frame-ancestors 'self'; form-action 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:; style-src *.kundo.se 'self' 'unsafe-inline'; connect-src *; font-src 'self' data:; object-src 'self'; child-src *; X-Powered-By: ARR/3.0 X-Powered-By: ASP.NET Expires: Thu, 22 Jan 2026 21:58:13 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 22 Jan 2026 21:58:13 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: pll_language=fi; expires=Fri, 22-Jan-2027 21:58:13 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload
Open service 23.55.163.165:443 · api.rwd.natera.com
2026-01-09 22:24
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Access-Control-Allow-Origin: https://rwd.natera.com Vary: Origin Access-Control-Allow-Credentials: true ETag: W/"27-2r/wJZyqR//Afg1J4HofX9njjJM" X-Akamai-Transformed: 9 39 0 pmb=mRUM,1 Expires: Fri, 09 Jan 2026 22:24:05 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 09 Jan 2026 22:24:05 GMT Content-Length: 39 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=146 Server-Timing: origin; dur=15 Alt-Svc: h3=":443"; ma=93600 Server-Timing: ak_p; desc="1767997445004_389522085_422670385_16142_12858_158_169_-";dur=1 Hello World! RWD Portal API is running.
Open service 23.55.163.165:443 · dnbportal.fi
2026-01-09 03:41
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Microsoft-IIS/10.0 X-Frame-Options: SAMEORIGIN X-Powered-By: PHP/8.1.33 Link: <https://dnbportal.fi/wp-json/>; rel="https://api.w.org/" Link: <https://dnbportal.fi/wp-json/wp/v2/pages/7824>; rel="alternate"; title="JSON"; type="application/json" Link: <https://dnbportal.fi/>; rel=shortlink X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: unsafe-none Content-Security-Policy: default-src *.kundo.se; frame-ancestors 'self'; form-action 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:; style-src *.kundo.se 'self' 'unsafe-inline'; connect-src *; font-src 'self' data:; object-src 'self'; child-src *; X-Powered-By: ARR/3.0 X-Powered-By: ASP.NET Expires: Fri, 09 Jan 2026 03:41:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 09 Jan 2026 03:41:20 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: pll_language=fi; expires=Sat, 09-Jan-2027 03:41:20 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax Set-Cookie: BIGipServerPL_Applikator_FI_Prod_WEB_DMZ_443=rd3o00000000000000000000ffff0aae0064o443; path=/; Httponly; Secure Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload
Open service 23.55.163.165:443 · api.rwd.natera.com
2026-01-02 15:50
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Access-Control-Allow-Origin: * ETag: W/"27-2r/wJZyqR//Afg1J4HofX9njjJM" X-Akamai-Transformed: 9 39 0 pmb=mRUM,1 Expires: Fri, 02 Jan 2026 15:50:58 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 02 Jan 2026 15:50:58 GMT Content-Length: 39 Connection: close Server-Timing: edge; dur=1 Server-Timing: origin; dur=174 Server-Timing: cdn-cache; desc=MISS Alt-Svc: h3=":443"; ma=93600 Server-Timing: ak_p; desc="1767369058058_389522085_196463208_17471_7792_11_16_-";dur=1 Hello World! RWD Portal API is running.
Open service 23.55.163.165:443 · dnbportal.fi
2026-01-02 04:04
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Microsoft-IIS/10.0 X-Frame-Options: SAMEORIGIN X-Powered-By: PHP/8.1.33 Link: <https://dnbportal.fi/wp-json/>; rel="https://api.w.org/" Link: <https://dnbportal.fi/wp-json/wp/v2/pages/7824>; rel="alternate"; title="JSON"; type="application/json" Link: <https://dnbportal.fi/>; rel=shortlink X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: unsafe-none Content-Security-Policy: default-src *.kundo.se; frame-ancestors 'self'; form-action 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:; style-src *.kundo.se 'self' 'unsafe-inline'; connect-src *; font-src 'self' data:; object-src 'self'; child-src *; X-Powered-By: ARR/3.0 X-Powered-By: ASP.NET Expires: Fri, 02 Jan 2026 04:05:04 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 02 Jan 2026 04:05:04 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: pll_language=fi; expires=Sat, 02-Jan-2027 04:05:04 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax Set-Cookie: BIGipServerPL_Applikator_FI_Prod_WEB_DMZ_443=rd3o00000000000000000000ffff0aae0064o443; path=/; Httponly; Secure Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload
Open service 23.55.163.165:443 · api.rwd.natera.com
2025-12-22 17:55
HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Access-Control-Allow-Origin: * ETag: W/"27-2r/wJZyqR//Afg1J4HofX9njjJM" X-Akamai-Transformed: 9 39 0 pmb=mRUM,1 Expires: Mon, 22 Dec 2025 17:55:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 17:55:48 GMT Content-Length: 39 Connection: close Server-Timing: edge; dur=1 Server-Timing: origin; dur=153 Server-Timing: cdn-cache; desc=MISS Alt-Svc: h3=":443"; ma=93600 Server-Timing: ak_p; desc="1766426148760_389522085_71355085_15372_7728_23_28_-";dur=1 Hello World! RWD Portal API is running.
Open service 23.55.163.165:443 · dnbportal.fi
2025-12-22 14:47
HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: Microsoft-IIS/10.0 X-Frame-Options: SAMEORIGIN X-Powered-By: PHP/8.1.33 Link: <https://dnbportal.fi/wp-json/>; rel="https://api.w.org/" Link: <https://dnbportal.fi/wp-json/wp/v2/pages/7824>; rel="alternate"; title="JSON"; type="application/json" Link: <https://dnbportal.fi/>; rel=shortlink X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Cross-Origin-Opener-Policy: unsafe-none Content-Security-Policy: default-src *.kundo.se; frame-ancestors 'self'; form-action 'self'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:; style-src *.kundo.se 'self' 'unsafe-inline'; connect-src *; font-src 'self' data:; object-src 'self'; child-src *; X-Powered-By: ARR/3.0 X-Powered-By: ASP.NET Expires: Mon, 22 Dec 2025 14:47:33 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 22 Dec 2025 14:47:33 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: pll_language=fi; expires=Tue, 22-Dec-2026 14:47:33 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax Set-Cookie: BIGipServerPL_Applikator_FI_Prod_WEB_DMZ_443=rd3o00000000000000000000ffff0aae0064o443; path=/; Httponly; Secure Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload