All these files are directly served by Apache (or a redirect demon as the one in /projects/helm/utils or webfsd).