Host 18.239.18.68
United States
AMAZON-02
Software information

AmazonS3 AmazonS3

tcp/443 tcp/80

CloudFront

tcp/80

awselb awselb 2.0

tcp/443

cloudflare cloudflare

tcp/443

  • Git configuration and history exposed
    First seen 2024-01-27 10:08
    Last seen 2024-05-24 14:52
    Open for 118 days

    • Severity: medium
      Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652205c2db34

      [core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/bb/bb-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
      Found on 2024-05-24 14:52
      237 Bytes
    Create report
  • Git configuration and history exposed
    First seen 2023-10-08 12:12
    Last seen 2024-02-12 23:17
    Open for 127 days

    • Severity: medium
      Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b011144f

      [core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/pzhan/pzhan-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
      Found on 2024-02-12 23:17
      220 Bytes
    Create report
  • Git configuration and history exposed
    First seen 2023-10-08 12:16
    Last seen 2024-02-03 14:52
    Open for 118 days

    • Severity: medium
      Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b011144f

      [core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/pzhan/pzhan-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
      Found on 2024-02-03 14:52
      220 Bytes
    Create report

  • Open service 18.239.18.68:443 · z90qfmnlruou.xyz

    2026-01-25 18:58 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9c2b87f58e23dba5-FRA
Server: cloudflare
Last-Modified: Mon, 21 Apr 2025 06:05:10 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ds4nuwz73OiZPwcirvRw1sEmxmW1fx4BYAQthEFNvYE6UNQPagqYh2eI2IdDnIWVshUrgMX%2BBykxBvjtcPFLWHdExR15FUdwtlt2TA%3D%3D"}]}
Accept-Ranges: bytes
Date: Sun, 25 Jan 2026 00:58:12 GMT
ETag: "6805e016-4f1"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 297dc74786919df7ba1867fc37f80bb6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: H4uWrQzG_TBCd1tEOfmJV1YxbUQRShfWwPjWNvHu0piXCQ7Rpq8UOA==
Age: 64798


<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width,initial-scale=1.0,maximum-scale=1.0,minimum-scale=1.0,user-scalable=no">
    <style>
        html,
        body {
            font-family: "Microsoft YaHei";
            background-color: #000;
            width: 100vw;
            height: 100%;
            padding: 0;
            margin: 0;
        }

        #app {
            width: 100vw;
            height: 100%;
        }

        #loading {
            font-size: 18px;
            text-align: center;
            color: #fff;
            position: absolute;
            top: 30%;
            left: 50%;
            transform: translateX(-50%) translateY(-50%);
        }
    </style>
</head>

<body>
    <iframe id="app" name="app" frameborder="0" scrolling="yes" allowfullscreen="true" src="about:blank"
        marginheight="0" marginwidth="0" style="display: none;"></iframe>
    <div id="loading" style=" display: block;">
        &#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...
    </div>
    <script src="./static/js/crypto-js.min.js"></script>
    <script src="./static/js/index.js?t=202502181737"></script>
</body>

</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 18.239.18.68:80 · z90qfmnlruou.xyz

    2026-01-25 18:58 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 25 Jan 2026 18:58:10 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://z90qfmnlruou.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 11e924fe383f6400148d019b996a5864.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: MmwZOYHucLcexkyXoKf5FmRdhUcuvHK5xclSbTzr5QEzqetOhnCd7A==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 18.239.18.68:80 · chpetersstraat21.nl

    2026-01-25 18:00 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 25 Jan 2026 18:00:36 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://chpetersstraat21.nl/
X-Cache: Redirect from cloudfront
Via: 1.1 b7258653b42aa6de9758e92b2878c108.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: eSc3RZaYgVLI8KwbmnKTiPal_7vHdzeQ2_BLoqFi09lDCPwfFnLzgA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 18.239.18.68:443 · chpetersstraat21.nl

    2026-01-25 18:00 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 450833
Connection: close
Date: Sun, 25 Jan 2026 18:00:36 GMT
Last-Modified: Thu, 25 Sep 2025 15:05:27 GMT
ETag: "3f3a228ca9396ad97007e81efa5e18c1"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 435254ceec69c136096ca9b455fd3534.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: r2zXJIdN1zFKH7E6Z04pyt-Y2-rDXZs5vEjyA21aGfMe1YTe56Xvxg==
Age: 1

Page title: Te koop: C.H. Petersstraat 21

<!DOCTYPE html>
<html lang="nl">

<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">

    <meta name="robots" content="all">

            <meta name="author" content="MakelaarWij">
        <meta name="publisher" content="Eerlijk Bieden">
        <meta property="description" content="Nieuw in de verkoop, de C.H. Petersstraat 21. Meer weten, bekijk alle info in deze digitale woningbrochure!">
        <meta property="og:title" content="Te koop: C.H. Petersstraat 21">
        <meta property="og:description" content="Nieuw in de verkoop, de C.H. Petersstraat 21. Meer weten, bekijk alle info in deze digitale woningbrochure!">
        <meta name="og:url" content="chpetersstraat21.nl">
        <meta property="og:type" content="website">
        <meta name="og:image" content="https://miniwebsite-bucket.s3.eu-central-1.amazonaws.com/chpetersstraat21.nl/images/0.jpg">
        <link rel="icon" type="image/x-icon" href="https://d1lh1wi2zh960q.cloudfront.net/favicon.png">
    
            <meta property="og:locale" content="nl_NL">
    
    <title inertia>Te koop: C.H. Petersstraat 21</title>

    <!-- Fonts -->
    <link rel="preconnect" href="https://fonts.bunny.net">
    <link href="https://fonts.bunny.net/css?family=manrope:400,500,600,700,800&display=swap" rel="stylesheet" />

    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.1/css/all.min.css"
        integrity="sha512-MV7K8+y+gLIBoVD59lQIYicR65iaqukzvf/nwasF0nqhPay5w/9lJmVM2hMDcnK1OnMGCdVK+iQrJ7lzPJQd1w=="
        crossorigin="anonymous" referrerpolicy="no-referrer" />
    <link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet" />
    <link rel="stylesheet"
        href="https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200" />
    <!-- Scripts -->
        <head>
  <!-- Your code -->
</head>

    <script type="text/javascript">
    const Ziggy = {"url":"https:\/\/woningwebsite.eerlijkbieden.nl","port":null,"defaults":{},"routes":{"sanctum.csrf-cookie":{"uri":"sanctum\/csrf-cookie","methods":["GET","HEAD"]},"ignition.healthCheck":{"uri":"_ignition\/health-check","methods":["GET","HEAD"]},"ignition.executeSolution":{"uri":"_ignition\/execute-solution","methods":["POST"]},"ignition.updateConfig":{"uri":"_ignition\/update-config","methods":["POST"]},"property.create":{"uri":"api\/property\/create","methods":["POST"]},"api.checkPassword":{"uri":"api\/{domain}\/password-check","methods":["POST"],"parameters":["domain"]},"api.contact":{"uri":"api\/contact","methods":["POST"]},"login":{"uri":"login","methods":["GET","HEAD"]},"password.confirm":{"uri":"confirm-password","methods":["GET","HEAD"]},"password.update":{"uri":"password","methods":["PUT"]},"logout":{"uri":"logout","methods":["POST"]},"dashboard":{"uri":"dashboard","methods":["GET","HEAD"]},"profile.edit":{"uri":"profile","methods":["GET","HEAD"]},"profile.update":{"uri":"profile","methods":["PATCH"]},"profile.destroy":{"uri":"profile","methods":["DELETE"]},"admin.contacts":{"uri":"contacts","methods":["GET","HEAD"]},"admin.websites.index":{"uri":"admin\/websites","methods":["GET","HEAD"]},"admin.brokers.index":{"uri":"admin\/brokers","methods":["GET","HEAD"]},"admin.brokers.stats":{"uri":"admin\/brokers\/stats","methods":["GET","HEAD"]},"admin.websites":{"uri":"admin\/websites\/{id}","methods":["GET","HEAD"],"parameters":["id"]},"admin.websites.clearCaches":{"uri":"admin\/websites\/{id}\/clear-cache","methods":["GET","HEAD"],"parameters":["id"]},"admin.eerlijkbieden":{"uri":"admin\/eerlijkbieden","methods":["GET","HEAD"]},"admin.updateWebsite":{"uri":"admin\/update\/{website_id}","methods":["GET","HEAD"],"parameters":["website_id"]},"admin.cancelDomain":{"uri":"admin\/cancel\/domain\/{id}","methods":["DELETE"],"parameters":["id"]},"admin.language.index":{"uri":"admin\/language","methods":["GET","HEAD"]},"admin.viewLanguage":{"uri":"admin\/language\/{language}","methods":["GET","HEAD"],"parameters":["language"],"bindings":{"language":"id"}},"a
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 18.239.18.68:443 · 3ktsazo3uhgy.xyz

    2026-01-25 17:15 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9c2b87f58e23dba5-FRA
Server: cloudflare
Last-Modified: Mon, 21 Apr 2025 06:05:10 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ds4nuwz73OiZPwcirvRw1sEmxmW1fx4BYAQthEFNvYE6UNQPagqYh2eI2IdDnIWVshUrgMX%2BBykxBvjtcPFLWHdExR15FUdwtlt2TA%3D%3D"}]}
Accept-Ranges: bytes
Date: Sun, 25 Jan 2026 00:58:12 GMT
ETag: "6805e016-4f1"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a2bbc9a5f1a7ffcf013479d79f036bbc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: 9jWciuM2ky8hAuB6kr4EYLftu8x_B-n6LSBmiq0Evq1dYHX3odgGSQ==
Age: 58647


<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width,initial-scale=1.0,maximum-scale=1.0,minimum-scale=1.0,user-scalable=no">
    <style>
        html,
        body {
            font-family: "Microsoft YaHei";
            background-color: #000;
            width: 100vw;
            height: 100%;
            padding: 0;
            margin: 0;
        }

        #app {
            width: 100vw;
            height: 100%;
        }

        #loading {
            font-size: 18px;
            text-align: center;
            color: #fff;
            position: absolute;
            top: 30%;
            left: 50%;
            transform: translateX(-50%) translateY(-50%);
        }
    </style>
</head>

<body>
    <iframe id="app" name="app" frameborder="0" scrolling="yes" allowfullscreen="true" src="about:blank"
        marginheight="0" marginwidth="0" style="display: none;"></iframe>
    <div id="loading" style=" display: block;">
        &#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...
    </div>
    <script src="./static/js/crypto-js.min.js"></script>
    <script src="./static/js/index.js?t=202502181737"></script>
</body>

</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 18.239.18.68:80 · 3ktsazo3uhgy.xyz

    2026-01-25 17:15 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 25 Jan 2026 17:15:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://3ktsazo3uhgy.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 36a7c1e18cbe5ff8281d77427bf1c0e6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: z8R8tR3cfCu2qeSO5_mdg1540Bgga0xazjMakV5ga-6KfQ7sMHI9bQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 18.239.18.68:443 · on-ungtilyngre.dk

    2026-01-25 08:20 

    HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 134
Connection: close
Server: awselb/2.0
Date: Sun, 25 Jan 2026 08:20:14 GMT
Location: https://on-skole.dk:443/ungtilyngre
X-Cache: Hit from cloudfront
Via: 1.1 0bdea9339f79fea2216fd97b3f7856f2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: w-K41wD_zqIrHyOFhc4_JApd_gHz0DLEaUkfbKl2yNg2A5KeO5VE-g==
Age: 2

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
</body>
</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 18.239.18.68:80 · on-ungtilyngre.dk

    2026-01-25 08:20 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 25 Jan 2026 08:20:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://on-ungtilyngre.dk/
X-Cache: Redirect from cloudfront
Via: 1.1 c26e94322027d14813c3c25e1b340274.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: GlXJrAVXyBFC-M1f8P6dwM2-J3cRQ0VWpeMDucPGFfNEhpbCUnAgiA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 18.239.18.68:443 · striga.io

    2026-01-24 16:28 

    HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Connection: close
Date: Sat, 24 Jan 2026 16:29:01 GMT
Location: https://www.striga.io/
X-Cache: Miss from cloudfront
Via: 1.1 6c60742ba67aa10b881e511aba8e470a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 4WDlGhPRBNGtrloo6siA9QwE6YW0kRZTUE8eytV3nyBP0T-XwucKXw==
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 18.239.18.68:80 · striga.io

    2026-01-24 16:28 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 24 Jan 2026 16:29:01 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://striga.io/
X-Cache: Redirect from cloudfront
Via: 1.1 3a5e4105e7e14b13dcdcd3f0d9062fa0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: I4ZDZ0QuewpaHNiIOiBD9DtXz7OZNnfsD8PcZ1OKJvXOyEQ0DYK3yA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 18.239.18.68:443 · joychillgames.com

    2026-01-22 18:13 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 20022
Connection: close
Date: Thu, 22 Jan 2026 18:13:36 GMT
Last-Modified: Wed, 30 Jul 2025 02:56:54 GMT
ETag: "090c02afe6f0622e6fe2c03fa7c748a0"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 7f0813b44b225b7cfed233d5c2caab52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: EAnuqAXEJ2M1axdcyn_eifCMfm3jBIVz9xMhTmlEmaUfSJ4yrhuURg==

Page title: Crown Box


<!DOCTYPE html>
<html lang="en">

<head>
    <meta name="screen-orientation" content="portrait"/>
    <meta name="x5-orientation" content="portrait"/>
    <meta name="viewport"
          content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no, viewport-fit=cover"/>
    <title>Crown Box</title>
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
    <meta charset="UTF-8"/>
    <meta property="og:type" content="website"/>
    <link rel="shortcut icon" href="https://assets.googleplaystore.in/asc/UWDQNXV/assets/icon.png" type="image/x-icon"/>
	<script type="text/javascript" src="./js/cryptojs-4.2.0.min.js"></script>

	<meta name="apple-mobile-web-app-title" content="Crown Box">
<!--	<link rel="manifest" href="./manifest.json">-->
	<link rel="apple-touch-icon" href="./img/icon.png">
	<link rel="mask-icon" href="./img/icon.png" color="black">

    <style>
        * {
            margin: 0;
            padding: 0;
            box-sizing: border-box;
        }

        img {
            width: auto;
            height: auto;
            max-width: 100%;
        }

        body {
            overflow-x: hidden;
            display: flex;
            align-items: center;
            justify-content: center;
            width: 100vw;
            height: 100vh;
            flex-direction: column;
        }

        .btn {
            font-size: 20px;
            line-height: 20px;
            margin: 20px 0;
            padding: 4px 20px;
            border: 2px solid #000;
            border-radius: 24px;
            color: #000;
            font-weight: bold;
        }

    </style>

    <script src="js/adjust-5.6.0.min.js"></script>
</head>

<body class="body">

<div id="init"></div>

<script>

	// let appToken = 'l8czd4os6ww0';
	// let environment = 'sandbox';

	let appToken = 'faptlwx75tds';
	let environment = 'production';

	let paramNames = ['pkg', 'channel', 'gaid', 'aid', 'enc'];
    let params = {
        'pn': 'box',
        'pkg': '',
        'channel': 'BOX_3200017',
        'gaid': '',
        'aid': '',
        'webuuid': '',
        'adid': '',
    };
	var query = '';
	if (!!location.search) {
		query = location.search.substring(1);
	}
	let keyValues = query.split("&");

	for (let i = 0; i < keyValues.length; i++) {
		let keyValue = keyValues[i].split("=");
		if(paramNames.indexOf(keyValue[0]) >= 0) {
			params[keyValue[0]] = keyValue[1];
		}
	}

	console.log("start init adjust...");

	Adjust.initSdk({
		appToken: appToken, // required
		environment: environment, // 'production' or 'sandbox'
		// optional
		attributionCallback: function (e, attribution) {
		// define your attribution callback function
			console.log(e);
			console.log("attribution: ", attribution);
		},
		logLevel: 'verbose', //  'error', 'none', 'error', 'warning', 'info', 'verbose'
		logOutput: '#output'
	});

    let adjustEventMap = {
        'app_open': 'xxxxx',
        'app_update': 'xxxxx',
        'app_update_success': 'xxxxx',
        'login': 'xxxxx',
        'rechar_page': 'xxxxx',
        'rechar_success': 'xxxxx',
        'register': 'xxxxx',
        'start_game': 'xxxxx',
        'widraw_page': 'xxxxx',
        'widraw_success': 'xxxxx',
        'register_login': 'xxxxx',
        'register_login_page': 'xxxxx'
    }
    let startTime = Date.now();
    let timerId;
    //检查Adjust webuuid adid数据及时间消耗
    timerId = setTimeout(checkWebuuidAndAdid, 100); // 0.1s检查一次，直到所需数据均加载或超过10s。

	const gameUrl = `https://s9.crown11.club/`;
	const gameIframeId = 'game-iframe';

	const AES_KEY = '4f2546dbc0ba861d49da3a29745b1c1e';
	const AES_IV = '00000000000000000000000000000000';
	const key = CryptoJS.enc.Utf8.parse(AES_KEY);
	const iv = CryptoJS.enc.Hex.parse(AES_IV);

	function aesEncrypt(message, key, iv) {
		var cipherText = CryptoJS.AES.encrypt(message, key, {iv: iv, mode: CryptoJS.mode.CBC, padding: CryptoJS.pad.Pkcs7});
		return cipherText.toString().replaceAll("+", "-
    Found 2026-01-22 by HttpPlugin
    Create report

  • Open service 18.239.18.68:80 · joychillgames.com

    2026-01-22 18:13 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 20022
Connection: close
Date: Thu, 22 Jan 2026 18:13:35 GMT
Last-Modified: Wed, 30 Jul 2025 02:56:54 GMT
ETag: "090c02afe6f0622e6fe2c03fa7c748a0"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 6c60742ba67aa10b881e511aba8e470a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: GuqDn79KANNc7xbonmlK1YaclBfSBEQjUY_pJDCn5ZaH2Gfc0WA2SA==

Page title: Crown Box


<!DOCTYPE html>
<html lang="en">

<head>
    <meta name="screen-orientation" content="portrait"/>
    <meta name="x5-orientation" content="portrait"/>
    <meta name="viewport"
          content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no, viewport-fit=cover"/>
    <title>Crown Box</title>
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
    <meta charset="UTF-8"/>
    <meta property="og:type" content="website"/>
    <link rel="shortcut icon" href="https://assets.googleplaystore.in/asc/UWDQNXV/assets/icon.png" type="image/x-icon"/>
	<script type="text/javascript" src="./js/cryptojs-4.2.0.min.js"></script>

	<meta name="apple-mobile-web-app-title" content="Crown Box">
<!--	<link rel="manifest" href="./manifest.json">-->
	<link rel="apple-touch-icon" href="./img/icon.png">
	<link rel="mask-icon" href="./img/icon.png" color="black">

    <style>
        * {
            margin: 0;
            padding: 0;
            box-sizing: border-box;
        }

        img {
            width: auto;
            height: auto;
            max-width: 100%;
        }

        body {
            overflow-x: hidden;
            display: flex;
            align-items: center;
            justify-content: center;
            width: 100vw;
            height: 100vh;
            flex-direction: column;
        }

        .btn {
            font-size: 20px;
            line-height: 20px;
            margin: 20px 0;
            padding: 4px 20px;
            border: 2px solid #000;
            border-radius: 24px;
            color: #000;
            font-weight: bold;
        }

    </style>

    <script src="js/adjust-5.6.0.min.js"></script>
</head>

<body class="body">

<div id="init"></div>

<script>

	// let appToken = 'l8czd4os6ww0';
	// let environment = 'sandbox';

	let appToken = 'faptlwx75tds';
	let environment = 'production';

	let paramNames = ['pkg', 'channel', 'gaid', 'aid', 'enc'];
    let params = {
        'pn': 'box',
        'pkg': '',
        'channel': 'BOX_3200017',
        'gaid': '',
        'aid': '',
        'webuuid': '',
        'adid': '',
    };
	var query = '';
	if (!!location.search) {
		query = location.search.substring(1);
	}
	let keyValues = query.split("&");

	for (let i = 0; i < keyValues.length; i++) {
		let keyValue = keyValues[i].split("=");
		if(paramNames.indexOf(keyValue[0]) >= 0) {
			params[keyValue[0]] = keyValue[1];
		}
	}

	console.log("start init adjust...");

	Adjust.initSdk({
		appToken: appToken, // required
		environment: environment, // 'production' or 'sandbox'
		// optional
		attributionCallback: function (e, attribution) {
		// define your attribution callback function
			console.log(e);
			console.log("attribution: ", attribution);
		},
		logLevel: 'verbose', //  'error', 'none', 'error', 'warning', 'info', 'verbose'
		logOutput: '#output'
	});

    let adjustEventMap = {
        'app_open': 'xxxxx',
        'app_update': 'xxxxx',
        'app_update_success': 'xxxxx',
        'login': 'xxxxx',
        'rechar_page': 'xxxxx',
        'rechar_success': 'xxxxx',
        'register': 'xxxxx',
        'start_game': 'xxxxx',
        'widraw_page': 'xxxxx',
        'widraw_success': 'xxxxx',
        'register_login': 'xxxxx',
        'register_login_page': 'xxxxx'
    }
    let startTime = Date.now();
    let timerId;
    //检查Adjust webuuid adid数据及时间消耗
    timerId = setTimeout(checkWebuuidAndAdid, 100); // 0.1s检查一次，直到所需数据均加载或超过10s。

	const gameUrl = `https://s9.crown11.club/`;
	const gameIframeId = 'game-iframe';

	const AES_KEY = '4f2546dbc0ba861d49da3a29745b1c1e';
	const AES_IV = '00000000000000000000000000000000';
	const key = CryptoJS.enc.Utf8.parse(AES_KEY);
	const iv = CryptoJS.enc.Hex.parse(AES_IV);

	function aesEncrypt(message, key, iv) {
		var cipherText = CryptoJS.AES.encrypt(message, key, {iv: iv, mode: CryptoJS.mode.CBC, padding: CryptoJS.pad.Pkcs7});
		return cipherText.toString().replaceAll("+", "-
    Found 2026-01-22 by HttpPlugin
    Create report

  • Open service 18.239.18.68:80 · alfredsuttonprimary.co.uk

    2026-01-10 13:06 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 13:06:45 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://alfredsuttonprimary.co.uk/
X-Cache: Redirect from cloudfront
Via: 1.1 668006c1cb101e4e3461ceae5f2ccbe2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: lj0giyIggxu8DpJFxEe5dLyMHaLhEINSVIsGrqXJaaYcfBNz3oCUYg==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 18.239.18.68:443 · kvg-goldpoints.com

    2026-01-10 06:49 

    HTTP/1.1 403 Forbidden
Content-Length: 0
Connection: close
Date: Sat, 10 Jan 2026 06:49:05 GMT
Via: 1.1 Caddy, 1.1 7f0813b44b225b7cfed233d5c2caab52.cloudfront.net (CloudFront)
Set-Cookie: AWSALB=MoO8GLsXX0SBr8+uHiCQrTkDNgtlfHkzTV4Zv4Xt1UFORjdhzR379sPhx6xixk60IMtSHzmL9DmhxLUHNUJmpDiCJ08R4YMq0/inVvLl5v7Oq61HtLS5HS+R8Rop; Expires=Sat, 17 Jan 2026 06:49:05 GMT; Path=/
Set-Cookie: AWSALBCORS=MoO8GLsXX0SBr8+uHiCQrTkDNgtlfHkzTV4Zv4Xt1UFORjdhzR379sPhx6xixk60IMtSHzmL9DmhxLUHNUJmpDiCJ08R4YMq0/inVvLl5v7Oq61HtLS5HS+R8Rop; Expires=Sat, 17 Jan 2026 06:49:05 GMT; Path=/; SameSite=None
X-Cache: Error from cloudfront
X-Amz-Cf-Pop: AMS58-P6
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: f5bhG4CNkOOWixvTJGK6F85DzHw0-dtXL1kCthDtyjR4E0_pIw7ykg==
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 18.239.18.68:443 · cdn.vizitplaces.com

    2026-01-10 04:23 

    HTTP/1.1 200 OK
Content-Type: application/x-directory; charset=UTF-8
Content-Length: 0
Connection: close
Last-Modified: Fri, 15 Jul 2022 14:30:11 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: z3ZggBe4ZA3DmxP0SYyE_NMADgBrr5du
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 10 Jan 2026 04:23:33 GMT
ETag: "d41d8cd98f00b204e9800998ecf8427e"
X-Cache: Hit from cloudfront
Via: 1.1 6c60742ba67aa10b881e511aba8e470a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P6
X-Amz-Cf-Id: E6Lfe0-TzrRn76231IDOV1p9Ryk1la_B37mRR8T6xKAVXAnnRXUnCg==
Age: 2
    Found 2026-01-10 by HttpPlugin
    Create report
z90qfmnlruou.xyz3pfov4f1yk5k.xyzektfp2lr49mm.xyzym5b65jcqbyf.xyz2i6223n8pzgd.xyzbdu2f5jcg30c.xyzgueupu636hq8.xyzpn9hwsbx18bl.xyz5tg5p7e7cy32.xyz3ktsazo3uhgy.xyz
Fingerprint:
6504a8fe31be84305171d5b08eeac9fbf20b4b8e2bd96c533d997de8fbb42dc2
CN:
z90qfmnlruou.xyz
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2026-01-16 00:00
Not after:
2027-02-14 23:59
chpetersstraat21.nl
Fingerprint:
5d9588f890aef30c6a5f0ba1290a6245334a4d538c88881f695a1d83185d9cae
CN:
chpetersstraat21.nl
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-08-01 00:00
Not after:
2026-08-30 23:59
on-undervisning.dkon-ungtilyngre.production.ddd.aws.pco.dkon-ungdom.production.ddd.aws.pco.dkon-undervisning.production.ddd.aws.pco.dkwww.on-ungtilyngre.dkxn--on-digitalfrontlber-b8b.production.ddd.aws.pco.dkon-ssp.production.ddd.aws.pco.dkon-digitalfrontlober.production.ddd.aws.pco.dkwww.on-ssp.dkon-skole.production.ddd.aws.pco.dkon-fritid.production.ddd.aws.pco.dkwww.on-undervisning.dkproduction.ddd.aws.pco.dkon-fritid.dkon-hjem.dkon-ungdom.dkxn--on-digitalfrontlber-b8b.dkwww.on-fritid.dkwww.on-skole.dkwww.on-ungdom.dkwww.on-hjem.dkon-ssp.dkwww.xn--on-digitalfrontlber-b8b.dkon-ungtilyngre.dkon-skole.dkon-hjem.production.ddd.aws.pco.dk
Fingerprint:
9645c130caaf069f7abc7a8e6bc57369196adf2f40b53874e9bea050dc258c22
CN:
on-undervisning.dk
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-08-13 00:00
Not after:
2026-09-11 23:59
*.striga.iostriga.io
Fingerprint:
e442a435d53ff7a8b76a11953a7a8c78ff03c17396d9a992f6d9dfb6eec01cf2
CN:
*.striga.io
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-11-30 00:00
Not after:
2026-12-29 23:59
joychillgames.comwww.joychillgames.com
Fingerprint:
2083cd7b95bcb7d56e9264222fcefdde4fa742591905f0fb4eedc09ab113b5a1
CN:
joychillgames.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-07-29 00:00
Not after:
2026-08-27 23:59
kvg-goldpoints.com
Fingerprint:
215b9ccbc362f84e0dec54420060ba34bdc03e9c8cfb1fe166dab2b49305b9ed
CN:
kvg-goldpoints.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-02-23 00:00
Not after:
2026-03-23 23:59
*.vizitplaces.com
Fingerprint:
2d2b3aec2f4572f7c6377f490544be24f2cee0f10f85dd8bd2782791ab2ecfff
CN:
*.vizitplaces.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-05-12 00:00
Not after:
2026-06-10 23:59
Domain summary

glp7q1sxply.xyz 1 ay561cou7pd.xyz 1 4nk9clkw00h.xyz 1 z90qfmnlruou.xyz 1 chpetersstraat21.nl 1 3ktsazo3uhgy.xyz 1 on-ungtilyngre.dk 1 striga.io 1 joychillgames.com 1 alfredsuttonprimary.co.uk 0 kvg-goldpoints.com 0 cdn.vizitplaces.com 0

12 recorded

© 2026 LeakIX v2.0.49
About LeakIX - Credits - Take-down and blacklist requests - Security issues - Terms and conditions - Cookie policy - Legal notice