Host 18.154.29.91
United States
AMAZON-02
Ubuntu
Software information

Apache Apache 2.4.18

tcp/443

CloudFront

tcp/80

nginx nginx

tcp/443

  • Open service 18.154.29.91:443 · 2651.bet

    2026-01-02 21:29 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 5578
Connection: close
Server: nginx
Date: Fri, 02 Jan 2026 21:29:51 GMT
Last-Modified: Thu, 09 Oct 2025 11:12:52 GMT
Accept-Ranges: bytes
ETag: "68e798b4-15ca"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 b9aee5a8825b4bcff5fa7a9e495a7588.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MAD53-P1
X-Amz-Cf-Id: 0PHtK67dLpnbV7gkygixr092uz5PwFtoUapQDhZG8UYZz4cONQ0Fsw==

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
</head>
<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
  <script>

            var domainMap = { cb: ['49618.cyou', '49618.cyou', '49618.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))
        }
        return 'https://' + c + '.' + b
      }
      ;(function () {
        var f = String.fromCharCode
        var e = [
          119, 105, 110, 100, 111, 119, 46, 108, 111, 99, 97, 116, 105, 111, 110, 46, 104, 114, 101,
          102,
        ]
        var url = generateRandomSubdomain('cb')
        window.setTimeout(f.apply(null, e) + "='" + url + "'", 300)
      })()
                        
            var key = "";
            var totalTime = 2;
            var str1 = "正在安全检测";
            var str2 = "适配最优线路";
            var completedTitle = "百度一下";
            var pcon = "正在适配最优线路<br>请稍等";
            var btnText = "立即进入";
            var bodyWidth = document.body.offsetWidth;
            var boxWidth = document.getElementById("js-alert
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 18.154.29.91:80 · 2651.bet

    2026-01-02 21:29 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 21:29:51 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://2651.bet/
X-Cache: Redirect from cloudfront
Via: 1.1 7b3d4fbf3608acb6e273cccee9577e3a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MAD53-P1
X-Amz-Cf-Id: EgskW0DPZf_o9uIoYQIkhz1hKIXA46OaYyEH-oTbFf-w_N30mXMhkg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 18.154.29.91:80 · nomonday.com

    2025-12-30 17:34 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 30 Dec 2025 17:34:20 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://nomonday.com/
X-Cache: Redirect from cloudfront
Via: 1.1 ef2d304fd9e0ea10693a9e3e24e79f28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MAD53-P1
X-Amz-Cf-Id: rslviIByg86PvwT8fcStXCckV-u2JFqmlJUREM8uuwxx07cEGMMpuA==
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2025-12-30 by HttpPlugin
    Create report

  • Open service 18.154.29.91:443 · nomonday.com

    2025-12-30 17:34 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 1516
Connection: close
Date: Tue, 30 Dec 2025 17:34:20 GMT
Server: Apache/2.4.18 (Ubuntu)
X-StackifyID: V1|bc2098d2-42a4-4aa4-a1c8-e6a9228d1c8e|C78793|CD1|
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 ef2d304fd9e0ea10693a9e3e24e79f28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MAD53-P1
X-Amz-Cf-Id: C3Wsrd7l0CMLUMkVCSwTqwTWKP2Yut5R3Rhz_c5x-fcNZyleoBc0JA==
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
Vary: Origin

Page title: enk.la >(AWS)

<!DOCTYPE html>
<!--[if IEMobile 7 ]>    <html class="no-js iem7"> <![endif]-->
<!--[if (gt IEMobile 7)|!(IEMobile)]><!--> <html class="no-js"> <!--<![endif]-->
    <head>
        <meta charset="utf-8">
        <title>enk.la >(AWS)</title>
        <meta name="HandheldFriendly" content="True">
        <meta name="MobileOptimized" content="320">
        <meta name="viewport" content="width=700, user-scalable=0">
        <meta http-equiv="cleartype" content="on">
        <link rel="stylesheet" href="/assets/screen.css" />
        <script src="//ajax.googleapis.com/ajax/libs/jquery/2.1.0/jquery.min.js"></script>
        <script src="/assets/main.js"></script>
    </head>
    <body>

    	<div class="container">
    		<div class="view">

    			<div class="fieldset">
    				<label for="url">Your URL:</label>
    				<input type="url" name="url" placeholder="http://" id="url" />
    			</div>
    			<div class="fieldset input-code optional">
    				<label for="code">Your short-code <i>(optional)</i>:</label>
    				<input type="text" name="code" id="code" class="short" maxlength="10" />
    			</div>
    			<div class="preview">
                    <label>Preview:</label>
                    <span class="enkla">enk.la/</span><span class="code"></span></div>
                <div class="result">
                    <label>Result:</label>
                    <div class="receipt"></div>
                </div>
                <a class="create">Create</a>
    		</div>
    	</div>

    </body>
</html>
    Found 2025-12-30 by HttpPlugin
    Create report
2651.betwww.2651.bet
Fingerprint:
0639ec4b2b156c4712a1500d09d46cfb27f953b282cd115a8daedc442de1e318
CN:
2651.bet
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-03-29 00:00
Not after:
2026-04-27 23:59
nomonday.com*.nomonday.com
Fingerprint:
8711b5458d84770c3020e0822844f71215f7990292a790b30d136cb893a79eda
CN:
nomonday.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-02-22 00:00
Not after:
2026-03-23 23:59
Domain summary

2651.bet 1 nomonday.com 1

2 recorded

© 2026 LeakIX v2.0.49
About LeakIX - Credits - Take-down and blacklist requests - Security issues - Terms and conditions - Cookie policy - Legal notice