id: akamai-detect

info:
  name: akamai cdn detection
  author: pdteam
  severity: info
  reference:
    - https://support.globaldots.com/hc/en-us/articles/115003996705-Akamai-Pragma-Headers-overview
    - https://community.akamai.com/customers/s/article/Using-Akamai-Pragma-headers-to-investigate-or-troubleshoot-Akamai-content-delivery?language=en_US
    - https://spyclub.tech/2022/12/14/unusual-cache-poisoning-akamai-s3/
  tags: akamai,cdn,tech
  metadata:
    max-request: 1


http:
  - method: GET
    path:
      - "{{BaseURL}}"
    headers:
      Pragma: akamai-x-cache-on

    matchers:
      - type: word
        part: x_cache
        words:
          - "deploy.akamai"