LeakIX - Host 92.123.104.24

Host 92.123.104.24

Germany

Akamai International B.V.

Software information

AkamaiGHost

tcp/443 tcp/80

AkamaiNetStorage

tcp/443

BigIP

tcp/80

nginx nginx 1.28.0

tcp/443

GraphQL introspection is enabled.

This could leak to data leak if not properly configured.

IP: 92.123.104.24
Domain: uk.thevan.nike.com
Port: 443
URL: https://uk.thevan.nike.com

First seen 2025-12-01 11:34
Last seen 2026-01-23 08:59
Open for 52 days

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dd99305b8e7bfc1983da44da6566128bb1bd5d9e

GraphQL introspection enabled at /graphql
Types: 611 (by kind: ENUM: 60, INPUT_OBJECT: 125, INTERFACE: 36, OBJECT: 385, SCALAR: 5)
Operations:
- Query: Query | fields: adyenPaymentMethods, adyenPaymentMethodsBalance, adyenPaymentStatus, adyenRedeemedGiftcards, attributesForm
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addGiftRegistryRegistrants, addProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Detected: Magento

Found on 2026-01-23 08:59

985.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3dd99305b8e7bfc1983da44da6566128b2aa4f1f3

GraphQL introspection enabled at /graphql
Types: 611 (by kind: ENUM: 60, INPUT_OBJECT: 125, INTERFACE: 36, OBJECT: 385, SCALAR: 5)
Operations:
- Query: Query | fields: adyenPaymentMethods, adyenPaymentMethodsBalance, adyenPaymentStatus, adyenRedeemedGiftcards, attributesForm
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addGiftRegistryRegistrants, addProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-12-04 09:54

985.8 kBytes

Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa36de61bc58cf59c07f59212d0032750352223ef6d

GraphQL introspection enabled at /graphql
Types: 607 (by kind: ENUM: 59, INPUT_OBJECT: 125, INTERFACE: 35, OBJECT: 383, SCALAR: 5)
Operations:
- Query: Query | fields: adyenPaymentMethods, adyenPaymentMethodsBalance, adyenPaymentStatus, adyenRedeemedGiftcards, attributesForm
- Mutation: Mutation | fields: addBundleProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addGiftRegistryRegistrants, addProductsToCart
Directives: deprecated, include, oneOf, skip (total: 4)

Found on 2025-12-01 11:34

979.3 kBytes

Create report

Open service 92.123.104.24:80 · annamariaislandresorts.escapia.com

2026-02-05 20:40

HTTP/1.1 302 Moved Temporarily
Location: https://annamariaislandresorts.escapia.com/
Server: BigIP
Content-Length: 0
Expires: Thu, 05 Feb 2026 20:40:38 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 05 Feb 2026 20:40:38 GMT
Connection: close

Found 2026-02-05 by HttpPlugin

Create report

Open service 92.123.104.24:80 · img.pennathletics.com

2026-02-05 00:51

HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://img.pennathletics.com/
Expires: Thu, 05 Feb 2026 00:52:24 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 05 Feb 2026 00:52:24 GMT
Connection: close

Found 2026-02-05 by HttpPlugin

Create report

Open service 92.123.104.24:80 · image.marketing.hapoel.co.il

2026-02-04 16:12

HTTP/1.1 403 Forbidden
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 388
Expires: Wed, 04 Feb 2026 16:12:28 GMT
Date: Wed, 04 Feb 2026 16:12:28 GMT
Connection: close
NSLOCATION: /

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;image&#46;marketing&#46;hapoel&#46;co&#46;il&#47;" on this server.<P>
Reference&#32;&#35;18&#46;98a72917&#46;1770221548&#46;535069f
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;98a72917&#46;1770221548&#46;535069f</P>
</BODY>
</HTML>

Found 2026-02-04 by HttpPlugin

Create report

Open service 92.123.104.24:443 · image.marketing.hapoel.co.il

2026-02-04 16:12

HTTP/1.1 403 Forbidden
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 388
Expires: Wed, 04 Feb 2026 16:12:07 GMT
Date: Wed, 04 Feb 2026 16:12:07 GMT
Connection: close
NSLOCATION: /

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;image&#46;marketing&#46;hapoel&#46;co&#46;il&#47;" on this server.<P>
Reference&#32;&#35;18&#46;98a72917&#46;1770221527&#46;534c223
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;98a72917&#46;1770221527&#46;534c223</P>
</BODY>
</HTML>

Found 2026-02-04 by HttpPlugin

Create report

Open service 92.123.104.24:80 · image.mails.oxfam.de

2026-02-04 15:59

HTTP/1.1 403 Forbidden
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 376
Expires: Wed, 04 Feb 2026 16:00:03 GMT
Date: Wed, 04 Feb 2026 16:00:03 GMT
Connection: close
NSLOCATION: /

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;image&#46;mails&#46;oxfam&#46;de&#47;" on this server.<P>
Reference&#32;&#35;18&#46;98a72917&#46;1770220803&#46;52b612a
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;98a72917&#46;1770220803&#46;52b612a</P>
</BODY>
</HTML>

Found 2026-02-04 by HttpPlugin

Create report

Open service 92.123.104.24:443 · www.exploreamerican.com

2026-02-03 16:30

HTTP/1.1 200 OK
Content-Type: text/html
ETag: "6a37cb3cebeb820b23cb039fc9948161:1769741401.617893"
Last-Modified: Thu, 29 Jan 2026 22:21:34 GMT
Server: AkamaiNetStorage
Cache-Control: max-age=247
Expires: Tue, 03 Feb 2026 16:34:14 GMT
Date: Tue, 03 Feb 2026 16:30:07 GMT
Content-Length: 3125
Connection: close
Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Page title: Flagship from American Airlines

<!DOCTYPE html>
<html lang="en">
	<!-- head -->
	<head>
		<title>Flagship from American Airlines</title>
		<meta charset="utf-8">
		<meta name="description" content="Upgrade your international travel experience with newest class of service from American Airlines. Enjoy more legroom, enhanced dining and more.">
		<meta http-equiv="X-UA-Compatible" content="IE=edge">
		<!-- Tell the browser to be responsive to screen width -->
		<meta content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" name="viewport">
		<link rel="shortcut icon" href="resources/images/favicon.ico" type="images/x-icon"/>
		<!-- Bootstrap -->
		<link rel="stylesheet" href="resources/css/bootstrap.min.css">
		<!-- Animate CSS -->
		<link rel="stylesheet" href="resources/css/animate.css">
		<!-- Animate on Scroll CSS -->
		<link rel="stylesheet" href="resources/css/aos.css">
		<!-- Custom CSS -->
		<link rel="stylesheet" href="resources/css/custom.css">
	</head>
	<!-- head ends -->

<script>
  window.dataLayer = window.dataLayer || [];
  function gtag(){dataLayer.push(arguments);}
  gtag('js', new Date());

  gtag('config', 'G-BDRVKW2CS4');
</script>
	<body>
		
		<header class="animated fadeIn">
			<div class="container">
				<div class="row">
					<div class="col-md-3 col-sm-6 col-xs-5 headerSec">
						<a href="javascript:"><img src="resources/images/logo.png" class="img-responsive logoSection" /></a>
					</div>
					<div class="col-md-9 col-sm-6 col-xs-7 headerSec menu text-right">
						<ul class="list-inline">
							<li><a href="javascript:" onclick="window.open('https://www.aa.com/homePage.do')" target="_blank" class="bookNow">Book Now</a></li>
						</ul>
					</div>
				</div>
			</div>
		</header>
		
		<main>
			<div id="splashBanner" class="sectionsplash">
				<ul class="list-inline pull-left leftStich">
					<li><img src="resources/images/stich.png"/></li>
					<li><img src="resources/images/stich.png"/></li>
					<li><img src="resources/images/stich.png"/></li>
					<li><img src="resources/images/stich.png"/></li>
					<li><img src="resources/images/stich.png"/></li>
					<li><img src="resources/images/stich.png"/></li>
					<li><img src="resources/images/stich.png"/></li>
					<li><img src="resources/images/stich.png"/></li>
					<li><img src="resources/images/stich.png"/></li>
				</ul>
				<ul class="list-inline pull-right rightStich">
					<li><img src="resources/images/stich.png"/></li>
					<li><img src="resources/images/stich.png"/></li>
				</ul>
				<div class="clearfix"></div>
				<a href="premiumeconomy/" class="splashLink">PREMIUM ECONOMY</a>
			</div>
		
			<div id="flagship"  class="sectionsplash">
				<a href="flagshipfirstdining/" class="splashLinkFlagship">FLAGSHIP FIRST DINING</a>	
			</div>
		</main>
	
	<!--script src="js/jquery-1.11.1.min.js"></script--> 
	<script src="resources/js/jquery.min.js"></script>
	<script src="resources/js/bootstrap.min.js"></script>
	<script src="resources/js/aos.js"></script>
	<script src="resources/js/custom.js"></script> 
	</body>
</html>

Found 2026-02-03 by HttpPlugin

Create report

Open service 92.123.104.24:443 · hr-manualadjustment-dr-rules.aa.com

2026-02-03 16:30

HTTP/1.1 403 Forbidden
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 401
Expires: Tue, 03 Feb 2026 16:30:07 GMT
Date: Tue, 03 Feb 2026 16:30:07 GMT
Connection: close
Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Page title: Access Denied

<HTML><HEAD>
<TITLE>Access Denied</TITLE>
</HEAD><BODY>
<H1>Access Denied</H1>
 
You don't have permission to access "http&#58;&#47;&#47;hr&#45;manualadjustment&#45;dr&#45;rules&#46;aa&#46;com&#47;" on this server.<P>
Reference&#32;&#35;18&#46;8ca72917&#46;1770136206&#46;114733b5
<P>https&#58;&#47;&#47;errors&#46;edgesuite&#46;net&#47;18&#46;8ca72917&#46;1770136206&#46;114733b5</P>
</BODY>
</HTML>

Found 2026-02-03 by HttpPlugin

Create report

Open service 92.123.104.24:443 · uk.thevan.nike.com

2026-01-23 08:59

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
x-xss-protection: 1; mode=block
Server: nginx/1.28.0
X-Powered-By: Express
Cache-Control: s-maxage=60
Content-Security-Policy: script-src 'unsafe-eval' *.qualtrics.com 'unsafe-inline' https://js-agent.newrelic.com https://static.zdassets.com http: https: https://backend.thevan-pwa-prod-natechap.nikecloud.com; style-src 'unsafe-eval' 'self' blob: https: 'unsafe-inline' https://backend.thevan-pwa-prod-natechap.nikecloud.com; img-src data: http: https:; object-src 'none'; base-uri 'none'; child-src 'self'; font-src 'self' fonts.gstatic.com; frame-src * assets.braintreegateway.com *.google.com *.youtube.com *.youtu.be *.vimeo.com
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
ETag: W/"1b8e-q0yBF/N6Yt/rq9d9TglSt1hhDs8"
X-Amz-Cf-Pop: FRA56-P11
X-Amz-Cf-Id: Sy792dGTdYH5VuD4gU88UmcDZnrXhJVapEMsIf126ZpgtzL0rQFM9w==
X-EdgeConnect-MidMile-RTT: 0
X-EdgeConnect-Origin-MEX-Latency: 176
Date: Fri, 23 Jan 2026 08:59:32 GMT
Content-Length: 7054
Connection: close
Strict-Transport-Security: max-age=15768000 ; preload
Akamai-GRN: 0.b0a72917.1769158771.a2e821c


<!DOCTYPE html><html lang="en-GB" data-image-optimizing-origin="auto" data-media-backend="https://uk.thevan.nike.com/media/"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#ff6334"><link rel="manifest" href="/assets/manifest.json"><link rel="apple-touch-icon" sizes="180x180" href="/assets/apple-touch-icon.png"><link rel="icon" type="image/png" sizes="32x32" href="/assets/favicon-32x32.png"><link rel="icon" type="image/png" sizes="16x16" href="/assets/favicon-16x16.png"><link rel="mask-icon" href="/assets/safari-pinned-tab.svg" color="#7b7b7b"><meta name="msapplication-TileColor" content="#000000"><meta name="theme-color" content="#ffffff"><link rel="preconnect" href="https://backend.thevan-pwa-prod-natechap.nikecloud.com"><style type="text/css">@font-face {
                font-family: 'Helvetica Neue';
                font-style: normal;
                font-weight: 400;
                src: local('Helvetica Neue'), url("/assets/fonts/HelveticaNeueRoman.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: italic;
                font-weight: 400;
                src: local('HelveticaNeue-Italic'), url("/assets/fonts/HelveticaNeueItalic.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: normal;
                font-weight: 100;
                src: local('HelveticaNeue-UltraLight'), url("/assets/fonts/HelveticaNeueUltraLight.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: italic;
                font-weight: 100;
                src: local('HelveticaNeue-UltraLightItalic'), url("/assets/fonts/HelveticaNeueUltraLightItalic.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: normal;
                font-weight: 200;
                src: local('HelveticaNeue-Thin'), url("/assets/fonts/HelveticaNeueThin.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: italic;
                font-weight: 200;
                src: local('HelveticaNeue-ThinItalic'), url("/assets/fonts/HelveticaNeueThinItalic.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: normal;
                font-weight: 300;
                src: local('HelveticaNeue-Light'), url("/assets/fonts/HelveticaNeueLight.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: italic;
                font-weight: 300;
                src: local('HelveticaNeue-LightItalic'), url("/assets/fonts/HelveticaNeueLightItalic.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: normal;
                font-weight: 500;
                src: local('HelveticaNeue-Medium'), url("/assets/fonts/HelveticaNeueMedium.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: italic;
                font-weight: 500;
                src: local('HelveticaNeue-MediumItalic'), url("/assets/fonts/HelveticaNeueMediumItalic.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: normal;
                font-weight: 700;
                src: local('HelveticaNeue-Bold'), url("/assets/fonts/HelveticaNeueBold.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: italic;
                font-weight: 700;
                src: local('HelveticaNeue-BoldItalic')

Found 2026-01-23 by HttpPlugin

Create report

Open service 92.123.104.24:443 · uk.thevan.nike.com

2026-01-09 07:29

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
x-xss-protection: 1; mode=block
Server: nginx/1.28.0
X-Powered-By: Express
Cache-Control: s-maxage=60
Content-Security-Policy: script-src 'unsafe-eval' *.qualtrics.com 'unsafe-inline' https://js-agent.newrelic.com https://static.zdassets.com http: https: https://backend.thevan-pwa-prod-natechap.nikecloud.com; style-src 'unsafe-eval' 'self' blob: https: 'unsafe-inline' https://backend.thevan-pwa-prod-natechap.nikecloud.com; img-src data: http: https:; object-src 'none'; base-uri 'none'; child-src 'self'; font-src 'self' fonts.gstatic.com; frame-src * assets.braintreegateway.com *.google.com *.youtube.com *.youtu.be *.vimeo.com
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
ETag: W/"1b8e-igXzN1KbMR290TbhYVChWYNzx78"
X-Amz-Cf-Pop: FRA56-P11
X-Amz-Cf-Id: ptUX8_l117pA7hcNqEwa_lGsf2iMI454fEE3rLcDzZ7aivRc519MZw==
X-EdgeConnect-MidMile-RTT: 0
X-EdgeConnect-Origin-MEX-Latency: 297
Date: Fri, 09 Jan 2026 07:30:02 GMT
Content-Length: 7054
Connection: close
Strict-Transport-Security: max-age=15768000 ; preload
Akamai-GRN: 0.98a72917.1767943801.426b745c


<!DOCTYPE html><html lang="en-GB" data-image-optimizing-origin="auto" data-media-backend="https://uk.thevan.nike.com/media/"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#ff6334"><link rel="manifest" href="/assets/manifest.json"><link rel="apple-touch-icon" sizes="180x180" href="/assets/apple-touch-icon.png"><link rel="icon" type="image/png" sizes="32x32" href="/assets/favicon-32x32.png"><link rel="icon" type="image/png" sizes="16x16" href="/assets/favicon-16x16.png"><link rel="mask-icon" href="/assets/safari-pinned-tab.svg" color="#7b7b7b"><meta name="msapplication-TileColor" content="#000000"><meta name="theme-color" content="#ffffff"><link rel="preconnect" href="https://backend.thevan-pwa-prod-natechap.nikecloud.com"><style type="text/css">@font-face {
                font-family: 'Helvetica Neue';
                font-style: normal;
                font-weight: 400;
                src: local('Helvetica Neue'), url("/assets/fonts/HelveticaNeueRoman.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: italic;
                font-weight: 400;
                src: local('HelveticaNeue-Italic'), url("/assets/fonts/HelveticaNeueItalic.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: normal;
                font-weight: 100;
                src: local('HelveticaNeue-UltraLight'), url("/assets/fonts/HelveticaNeueUltraLight.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: italic;
                font-weight: 100;
                src: local('HelveticaNeue-UltraLightItalic'), url("/assets/fonts/HelveticaNeueUltraLightItalic.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: normal;
                font-weight: 200;
                src: local('HelveticaNeue-Thin'), url("/assets/fonts/HelveticaNeueThin.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: italic;
                font-weight: 200;
                src: local('HelveticaNeue-ThinItalic'), url("/assets/fonts/HelveticaNeueThinItalic.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: normal;
                font-weight: 300;
                src: local('HelveticaNeue-Light'), url("/assets/fonts/HelveticaNeueLight.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: italic;
                font-weight: 300;
                src: local('HelveticaNeue-LightItalic'), url("/assets/fonts/HelveticaNeueLightItalic.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: normal;
                font-weight: 500;
                src: local('HelveticaNeue-Medium'), url("/assets/fonts/HelveticaNeueMedium.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: italic;
                font-weight: 500;
                src: local('HelveticaNeue-MediumItalic'), url("/assets/fonts/HelveticaNeueMediumItalic.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: normal;
                font-weight: 700;
                src: local('HelveticaNeue-Bold'), url("/assets/fonts/HelveticaNeueBold.woff") format('woff');
            }

            @font-face {
                font-family: 'Helvetica Neue';
                font-style: italic;
                font-weight: 700;
                src: local('HelveticaNeue-BoldItalic')

Found 2026-01-09 by HttpPlugin