issuer_dn: CN=Amazon RSA 2048 M04, O=Amazon, C=US

issuer_cn: Amazon RSA 2048 M04

tls_connection: ztls

cdn_name: cloudfront

cdn_type: cdn

title: 404 Not Found

scheme: http

webserver: nginx

content_type: text/html

method: GET

tech:
Amazon CloudFront
Amazon Web Services
Nginx

request:
GET / HTTP/1.1
Host: gslink.hackerone.com
Accept-Charset: utf-8
User-Agent: Mozilla/5.0 (compatible; Osmedeus/v4; +https://github.com/j3ssie/osmedeus)

response:
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 167
Content-Type: text/html
Date: Sat, 17 Jan 2026 15:20:42 GMT
Location: https://gslink.hackerone.com/
Server: CloudFront
Via: 1.1 b7692c0af3d0a9b53e41747046def3fe.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 4wvWLgLtWwepKXumxEO7GDbia4ksaPPqLCQG6uCEX3puohMRO4lYDg==
X-Amz-Cf-Pop: SIN2-P5
X-Cache: Redirect from cloudfront

request:
GET / HTTP/0.0
Host: gslink.hackerone.com
Accept-Charset: utf-8
Referer: http://gslink.hackerone.com
User-Agent: Mozilla/5.0 (compatible; Osmedeus/v4; +https://github.com/j3ssie/osmedeus)

response:
HTTP/1.1 404 Not Found
Connection: close
Content-Length: 146
Content-Type: text/html
Date: Sat, 17 Jan 2026 15:20:42 GMT
Server: nginx
Via: 1.1 cc18dd7fa2c068ac22479a63cf9e820e.cloudfront.net (CloudFront)
X-Amz-Cf-Id: NEJC3EN25KqhdRyuUbbHTsk9YPZhHEdLa-P8CEls0GKlPeOr-xH6jg==
X-Amz-Cf-Pop: SIN2-P5
X-Cache: Error from cloudfront

PageType: error


subject_dn: CN=hackerone.com, O=HackerOne Inc., L=San Francisco, ST=California, C=US, serialNumber=5308693, businessCategory=Private Organization, jurisdictionStateOrProvince=Delaware, jurisdictionCountry=US, businessCategory=Private Organization, jurisdictionStateOrProvince=Delaware, jurisdictionCountry=US

issuer_dn: CN=DigiCert EV RSA CA G2, O=DigiCert Inc, C=US

issuer_cn: DigiCert EV RSA CA G2

cdn_name: cloudflare

cdn_type: waf

webserver: cloudflare

tech:
Amazon S3
Amazon Web Services
Cloudflare
HSTS

request:
GET / HTTP/1.1
Host: hackerone.com
Accept-Charset: utf-8
User-Agent: Mozilla/5.0 (compatible; Osmedeus/v4; +https://github.com/j3ssie/osmedeus)

response:
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 167
Cache-Control: max-age=3600
Cf-Ray: 9bf6d68e5c98ce13-SIN
Content-Type: text/html
Date: Sat, 17 Jan 2026 15:20:42 GMT
Expires: Sat, 17 Jan 2026 16:20:42 GMT
Location: https://hackerone.com/
Server: cloudflare
Vary: Accept-Encoding
X-Content-Type-Options: nosniff

request:
GET / HTTP/0.0
Host: hackerone.com
Accept-Charset: utf-8
Referer: http://hackerone.com
User-Agent: Mozilla/5.0 (compatible; Osmedeus/v4; +https://github.com/j3ssie/osmedeus)

response:
HTTP/1.1 302 Found
Connection: close
Transfer-Encoding: chunked
Cache-Control: no-store
Cf-Cache-Status: DYNAMIC
Cf-Ray: 9bf6d68f1fbaf92e-SIN
Content-Disposition: inline; filename="response.html"
Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src 'self' www.youtube-nocookie.com a5s.hackerone-ext-content.com intercom-sheets.com www.intercom-reporting.com www.youtube.com player.vimeo.com fast.wistia.net www.loom.com checkout.stripe.com b5s.hackerone-ext-content.com; connect-src 'self' data: errors.hackerone.net *.browser-intake-datadoghq.com browser-intake-datadoghq.com hackerone-us-west-2-production-attachments.s3.us-west-2.amazonaws.com wss://nexus-websocket-a.intercom.io api-iam.intercom.io via.intercom.io uploads.intercomcdn.com *.intercom-messenger.com wss://*.intercom-messenger.com checkout.stripe.com; font-src 'self' fonts.intercomcdn.com js.intercomcdn.com fonts.gstatic.com; form-action 'self' intercom.help api-iam.intercom.io api-iam.eu.intercom.io api-iam.au.intercom.io calendly.com messenger-apps.intercom.io messenger-apps.intercom.io/statuspage/view_status js.intercomcdn.com; frame-ancestors 'none'; frame-src blob: hackerone.integration-configuration.com api-iam.intercom.io/messenger/web/metrics intercom-sheets.com a5s.hackerone-ext-content.com www.youtube.com youtube.com www.loom.com checkout.stripe.com js.stripe.com b5s.hackerone-ext-content.com; img-src data: blob: *; media-src 'self' marketing-assets.hackerone-user-content.com hackerone-us-west-2-production-attachments.s3.us-west-2.amazonaws.com js.intercomcdn.com hackerone.com video-messages.intercomcdn.com; object-src blob: data:; script-src 'self' js.intercomcdn.com widget.intercom.io/widget/zlmaz2pu checkout.stripe.com js.stripe.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com checkout.stripe.com; report-uri https://errors.hackerone.net/api/30/security/?sentry_key=374aea95847f4040a69f9c8d49a3a59d&sentry_environment=production
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin-allow-popups
Date: Sat, 17 Jan 2026 15:20:42 GMT
Expect-Ct: enforce, max-age=86400
Location: https://www.hackerone.com/
Referrer-Policy: strict-origin-when-cross-origin
Server: cloudflare
Set-Cookie: h1_device_id=f53b59b2-d074-4c78-90c4-ca537af1b50c; path=/; expires=Sun, 17 Jan 2027 15:20:42 GMT; secure; httponly; samesite=none
Set-Cookie: __Host-session=MUJhQi8xcG5nZllPeFpvcmFpVk5vMWNaUHdtU0lvaEVGMWQrYk9KVUhGTEw1RjBWcjBmMDJSelNJK1U4QTJHSUNiYUtNMUFSNHFMaE1OQ3RERnpRN3F3cHpJMDlPdWNiK200ZFJaTjg3K2tuT2FZdjZBSnk3eDIrTml5Uy9ob3hRQzdGYmU0WmNyT2lTNDlMaU5Wc3pHb0Rselkyd0NGZW96eXNCeUZtWnViUHRPZlRsSzhSMTBJcjYvZ1l1YWk2azNYL0E2MVZ4bmhHWURYQlNlUm5DSzMrMVVXOHUrNTJ1NWtCYll5RTlvYkk0TW5PaGVuTWRiSjlZeW5mWWorbDRaR0NZcTZhV0psWVovK2ZKNjkvV3BGcmpGMHNQMm1saWl6ejFzSzF6NU09LS1GbUU4UzlCa3JZeU9WUnBvbFZ3bWJnPT0%3D--aa6cef9399a8a5ce56eebea85054b0249f01f4dc; path=/; expires=Sat, 31 Jan 2026 15:20:42 GMT; secure; httponly; samesite=none
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
User-Authenticated: false
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 843e776a-3934-49e1-81d3-b960cb522e68
X-Xss-Protection: 1; mode=block

PageType: other


title: HackerOne API

tech: Algolia Cloudflare HSTS jQuery jsDelivr

request:
GET / HTTP/1.1
Host: api.hackerone.com
Accept-Charset: utf-8
User-Agent: Mozilla/5.0 (compatible; Osmedeus/v4; +https://github.com/j3ssie/osmedeus)

response:
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 167
Cache-Control: max-age=3600
Cf-Ray: 9bf6d68e3ed2fcef-SIN
Content-Type: text/html
Date: Sat, 17 Jan 2026 15:20:41 GMT
Expires: Sat, 17 Jan 2026 16:20:41 GMT
Location: https://api.hackerone.com/
Server: cloudflare
Vary: Accept-Encoding
X-Content-Type-Options: nosniff

request:
GET / HTTP/0.0
Host: api.hackerone.com
Accept-Charset: utf-8
Referer: http://api.hackerone.com
User-Agent: Mozilla/5.0 (compatible; Osmedeus/v4; +https://github.com/j3ssie/osmedeus)

response:
HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Cf-Cache-Status: DYNAMIC
Cf-Ray: 9bf6d68ed954f87a-SIN
Content-Security-Policy: default-src 'none'; block-all-mixed-content; connect-src 'self' www.google-analytics.com cdn.jsdelivr.net *.algolia.net *.algolianet.com; font-src 'self'; img-src 'self' data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google-analytics.com cdn.jsdelivr.net *.algolia.net *.algolianet.com; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net; form-action 'self';
Content-Type: text/html
Date: Sat, 17 Jan 2026 15:20:42 GMT
Etag: W/"696a8920-23a6"
Expect-Ct: enforce, max-age=86400
Last-Modified: Fri, 16 Jan 2026 18:53:20 GMT
Referrer-Policy: strict-origin-when-cross-origin
Server: cloudflare
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 1; mode=block

PageType: nonerror