LeakIX - Host 18.239.36.20

Host 18.239.36.20

United States

AMAZON-02

Software information

AmazonS3

tcp/443

CloudFront

tcp/443 tcp/80

Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.36.20
Domain: o0ml1bg4n.xyz
Port: 443
URL: https://o0ml1bg4n.xyz

First seen 2023-12-07 15:39
Last seen 2024-02-04 17:33
Open for 59 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652205c2db34
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/bb/bb-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-04 17:33
  
  237 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.36.20
Domain: uvqmalb6y.xyz
Port: 443
URL: https://uvqmalb6y.xyz

First seen 2023-12-24 11:29
Last seen 2024-02-02 15:49
Open for 40 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b011144f
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/pzhan/pzhan-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-02 15:49
  
  220 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.36.20
Domain: zaeaq9qmz.xyz
Port: 443
URL: https://zaeaq9qmz.xyz

First seen 2023-12-24 11:30
Last seen 2024-02-02 08:58
Open for 39 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b011144f
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/pzhan/pzhan-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-02 08:58
  
  220 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.36.20
Domain: d.ixigua1.site
Port: 443
URL: https://d.ixigua1.site

First seen 2023-09-20 17:36
Last seen 2023-09-23 08:03
Open for 2 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652228a30bca
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://www.yc2common.com/web-page/xiguaweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2023-09-20 17:36
  
  272 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.36.20
Domain: d.ixigua2.site
Port: 80
URL: http://d.ixigua2.site

First seen 2023-09-20 17:36
Last seen 2023-09-23 06:29
Open for 2 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652228a30bca
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://www.yc2common.com/web-page/xiguaweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2023-09-20 17:36
  
  272 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.36.20
Domain: d.ixigua6.site
Port: 443
URL: https://d.ixigua6.site

First seen 2023-09-20 17:36
Last seen 2023-09-23 06:15
Open for 2 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652228a30bca
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://www.yc2common.com/web-page/xiguaweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2023-09-20 17:36
  
  272 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.36.20
Domain: d.ixigua7.site
Port: 80
URL: http://d.ixigua7.site

First seen 2023-09-20 17:36
Last seen 2023-09-23 06:15
Open for 2 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652228a30bca
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://www.yc2common.com/web-page/xiguaweb.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2023-09-20 17:36
  
  272 Bytes
Create report

Open service 18.239.36.20:443 · hetschild21.nl

2026-01-10 13:11

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 404349
Connection: close
Date: Sat, 10 Jan 2026 13:11:45 GMT
Last-Modified: Mon, 24 Nov 2025 21:16:32 GMT
ETag: "8c7098936d4af46b4dde404ba59ecdf8"
x-amz-server-side-encryption: AES256
Cache-Control: public, max-age=60
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 fa7c071d9391a32eff94728584435f34.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: BUrw-xkAoyNWX5hFJoAxtMDgJHnbWtiwoqp_k4Ngtd-oLHZKpvPbUg==

Page title: Te koop: Het Schild 21

<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="/_next/static/css/bcee07513472f663.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/3805a8132aee07f6.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-da51cd98be7eb896.js"/><script src="/_next/static/chunks/4bd1b696-38803287e44ba73d.js" async=""></script><script src="/_next/static/chunks/684-8f7400ede9d9ffac.js" async=""></script><script src="/_next/static/chunks/main-app-f38f0d9153b95312.js" async=""></script><script src="/_next/static/chunks/493-5a9c6576d442f019.js" async=""></script><script src="/_next/static/chunks/app/layout-fd591600e83da0fe.js" async=""></script><script src="/_next/static/chunks/4e6af11a-57b4ceafb6aba441.js" async=""></script><script src="/_next/static/chunks/647-07801750e43ee87c.js" async=""></script><script src="/_next/static/chunks/app/%5Bdomain%5D/page-33fd9dc0607c0678.js" async=""></script><meta name="next-size-adjust" content=""/><title>Te koop: Het Schild 21</title><meta name="description" content="Nieuw in de verkoop, de Het Schild 21. Meer weten, bekijk alle info in deze digitale woningbrochure!"/><link rel="icon" href="/favicon.ico" type="image/x-icon" sizes="400x400"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body class="__variable_73ee6c __variable_188709 __variable_9a8899 antialiased"><div class="font-sans"><header style="background-color:#17b193" class="h-10 fixed top-0 w-full left-0 z-20 text-white "><div class="max-w-7xl px-8 sm:px-0 md:px-2 flex items-center justify-end gap-5 mx-auto h-full box-border"><a href="tel:0628248640" class=" hover:underline flex gap-2 items-center"><i class="fa-solid fa-phone block sm:hidden"></i><span class="hidden sm:block">0628248640</span></a><a href="mailto:Info@elinemakelaardij.nl" class=" hover:underline flex gap-2 items-center"><i class="fa-solid fa-envelope-open-text block sm:hidden"></i><span class="hidden sm:block">Info@elinemakelaardij.nl</span></a><a href="https://www.elinemakelaardij.nl" target="_blank" rel="noopener noreferrer" class=" hover:underline flex gap-2 items-center"><i class="fa-solid fa-globe block sm:hidden"></i><span class="hidden sm:block">Bezoek onze website</span></a></div></header><nav class="sticky top-10 z-20 bg-white shadow-md w-full"><div class="w-full max-w-7xl mx-auto px-4 sm:px-0  "><div class="flex justify-between items-center h-20 overflow-hidden"><a href="https://www.elinemakelaardij.nl" class="flex items-center " target="_blank"><img alt="Eline Makelaardij" loading="lazy" width="200" height="200" decoding="async" data-nimg="1" class="max-w-[200px] max-h-[80px] mr-3 object-contain" style="color:transparent;width:200;height:100px" src="https://venumfilestore.blob.core.windows.net/pub/d1993b69/2025/44d4/9ab4/a569b44d6ba3/$s/eline%20logo%20groen-paars.png?returnFile=true"/></a><div class="hidden sm:flex gap-16 md:gap-8"><div class="flex items-center gap-4 md:gap-6"><a href="#Media" class="font-semibold text-gray-600 hover:text-gray-900">Media</a><a href="#Description" class="font-semibold text-gray-600 hover:text-gray-900">Alles over deze woning</a><a href="#Allfeatures" class="font-semibold text-gray-600 hover:text-gray-900">Kenmerken</a><button class="font-semibold text-gray-600 hover:text-gray-900 cursor-pointer">Documentatie</button><a href="#Buurt" class="font-semibold text-gray-600 hover:text-gray-900">Buurt</a><a href="#Contact" class="font-semibold text-gray-600 hover:text-gray-900">Contact</a></div><div class="flex items-center gap-2 md:gap-4"><button style="background-color:#17b193" class="inline-flex cursor-pointer items-center justify-center px-6 py-3 text-white font-semibold rounded-lg shadow-md hover:opacity-90 transition-opacity focus:outline-none focus:ring-2

Found 2026-01-10 by HttpPlugin

Create report

Open service 18.239.36.20:443 · docs.festivalscope.com

2026-01-09 22:49

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Content-Length: 365
Connection: close
Date: Fri, 09 Jan 2026 22:49:15 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 0b7cb67940347be0c4ee6f93e9091938.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: Ad7YZ2opHeGgr3WBp8FL8J5AZZGwx-z0oH6Plk_aufhMJqNhWCYbPQ==
Age: 3

Page title: 404 Not Found

<html>
<head><title>404 Not Found</title></head>
<body>
<h1>404 Not Found</h1>
<ul>
<li>Code: NoSuchKey</li>
<li>Message: The specified key does not exist.</li>
<li>Key: index.html</li>
<li>RequestId: CTP64XKWJP9YDSKW</li>
<li>HostId: qfo19auZiFxFT+M33ssC3XLkEk+qbIz9s4nnwjHCadudrCT09MM8ckykI4rp72BfJkFCTDYINJ66tcnHFJ5H1m/CkdgA54Kw</li>
</ul>
<hr/>
</body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 18.239.36.20:443 · westernmountain.app

2026-01-09 22:20

HTTP/1.1 307 Temporary Redirect
Content-Type: application/json
Content-Length: 0
Connection: close
Date: Fri, 09 Jan 2026 22:20:27 GMT
X-Amzn-Trace-Id: Root=1-69617f2b-54a7d9a95af10ef835e41d7c;Parent=5045fcda4d2e4c97;Sampled=0;Lineage=1:8e7c8e79:0
x-amzn-RequestId: 96f2ef5e-728b-4587-911f-7798d372d445
Set-Cookie: wmi_auth=Fe26.2**6f597e05adb51a6c74e09f5fdfb8b148af02d7057ce63225024700727f9a5807*qMW8FXuEDJbt7hA7pjoI_w*eLU4uVJVi_J1LR29C7KEFRRrh6XPAg0qqA_ASI9s8b6Kdgr0JAoLqK96DYnPfSaMMvRP7TnMcVhRvGC77VnwGJaMrrgm0zDH18-AeCeLTibISIiG3qIN1Rg_RobSIbYg*1770589227452*79f6168156acb729fde3aaa1a9005103b3c72cb46be7b614b3ad98a03006c1ab*-yg89R2YcQ5b4eM6rZkH-5Tsc-ooNNhQnuZasdLUp_o; Path=/; Expires=Sun, 08 Feb 2026 22:20:27 GMT; HttpOnly; Secure; SameSite=Lax
Location: /login?redirect=%2F
X-Cache: Miss from cloudfront
Via: 1.1 7cc8e1a489398403da487298ad363b2a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: SMHkAITcIFti7bXupttTPSWnWDPhMKbXZeXElPNMxsAYx_t7UlZFBg==

Found 2026-01-09 by HttpPlugin

Create report

Open service 18.239.36.20:443 · the-campus-at-marlborough.web.getequiem.com

2026-01-09 15:57

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 36234
Connection: close
Date: Fri, 09 Jan 2026 15:57:35 GMT
Cache-Control: public,must-revalidate,max-age=0,s-maxage=300
x-frame-options: DENY
x-content-type-options: nosniff
reporting-endpoints: csp-endpoint="https://q8mlgy0mu5.execute-api.us-east-1.amazonaws.com/default/production/web-ng/report"
content-security-policy-report-only: frame-ancestors 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.iframe.ly https://js.stripe.com https://js-agent.newrelic.com https://bam.nr-data.net https://*.nr-data.net https://embed.tawk.to; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.iframe.ly https://js.stripe.com https://js-agent.newrelic.com https://bam.nr-data.net https://*.nr-data.net https://embed.tawk.to; report-to csp-endpoint; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.getequiem.com https://fonts.googleapis.com wss://*.iot.us-east-1.amazonaws.com wss://*.iot.ap-southeast-2.amazonaws.com wss://*.iot.eu-west-1.amazonaws.com https://bam.nr-data.net https://*.nr-data.net https://api.stripe.com https://iframe.ly; object-src 'self' data:; form-action 'self'; base-uri 'self'
content-security-policy: frame-ancestors 'none'
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000
referrer-policy: strict-origin-when-cross-origin
X-Powered-By: Next.js
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 95e331271d583b113f2793246bc6205c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: JvAr1wY1CxesRnWqMc78ZUIQhLEsAlTqq9K_iqsHc5QzvjQMIRBbrg==
Age: 2

Page title: The Campus at Marlborough

<!DOCTYPE html><html><head><meta charSet="utf-8" data-next-head=""/><script type="text/javascript" data-next-head="">
;window.NREUM||(NREUM={});NREUM.init={"distributed_tracing":{"enabled":true,"cors_use_newrelic_header":true,"cors_use_tracecontext_headers":true,"allowed_origins":["https://us.gateway.getequiem.com"]},"privacy":{"cookies_enabled":false}};
window.NREUM||(NREUM={}),__nr_require=function(t,e,n){function r(n){if(!e[n]){var o=e[n]={exports:{}};t[n][0].call(o.exports,function(e){var o=t[n][1][e];return r(o||e)},o,o.exports)}return e[n].exports}if("function"==typeof __nr_require)return __nr_require;for(var o=0;o<n.length;o++)r(n[o]);return r}({1:[function(t,e,n){function r(t){try{c.console&&console.log(t)}catch(e){}}var o,i=t("ee"),a=t(25),c={};try{o=localStorage.getItem("__nr_flags").split(","),console&&"function"==typeof console.log&&(c.console=!0,o.indexOf("dev")!==-1&&(c.dev=!0),o.indexOf("nr_dev")!==-1&&(c.nrDev=!0))}catch(s){}c.nrDev&&i.on("internal-error",function(t){r(t.stack)}),c.dev&&i.on("fn-err",function(t,e,n){r(n.stack)}),c.dev&&(r("NR AGENT IN DEVELOPMENT MODE"),r("flags: "+a(c,function(t,e){return t}).join(", ")))},{}],2:[function(t,e,n){function r(t,e,n,r,c){try{l?l-=1:o(c||new UncaughtException(t,e,n),!0)}catch(f){try{i("ierr",[f,s.now(),!0])}catch(d){}}return"function"==typeof u&&u.apply(this,a(arguments))}function UncaughtException(t,e,n){this.message=t||"Uncaught error with no additional information",this.sourceURL=e,this.line=n}function o(t,e){var n=e?null:s.now();i("err",[t,n])}var i=t("handle"),a=t(26),c=t("ee"),s=t("loader"),f=t("gos"),u=window.onerror,d=!1,p="nr@seenError",l=0;s.features.err=!0,t(1),window.onerror=r;try{throw new Error}catch(h){"stack"in h&&(t(13),t(12),"addEventListener"in window&&t(6),s.xhrWrappable&&t(14),d=!0)}c.on("fn-start",function(t,e,n){d&&(l+=1)}),c.on("fn-err",function(t,e,n){d&&!n[p]&&(f(n,p,function(){return!0}),this.thrown=!0,o(n))}),c.on("fn-end",function(){d&&!this.thrown&&l>0&&(l-=1)}),c.on("internal-error",function(t){i("ierr",[t,s.now(),!0])})},{}],3:[function(t,e,n){t("loader").features.ins=!0},{}],4:[function(t,e,n){function r(){_++,T=g.hash,this[u]=y.now()}function o(){_--,g.hash!==T&&i(0,!0);var t=y.now();this[h]=~~this[h]+t-this[u],this[d]=t}function i(t,e){E.emit("newURL",[""+g,e])}function a(t,e){t.on(e,function(){this[e]=y.now()})}var c="-start",s="-end",f="-body",u="fn"+c,d="fn"+s,p="cb"+c,l="cb"+s,h="jsTime",m="fetch",v="addEventListener",w=window,g=w.location,y=t("loader");if(w[v]&&y.xhrWrappable){var x=t(10),b=t(11),E=t(8),R=t(6),O=t(13),N=t(7),M=t(14),P=t(9),C=t("ee"),S=C.get("tracer");t(16),y.features.spa=!0;var T,_=0;C.on(u,r),C.on(p,r),C.on(d,o),C.on(l,o),C.buffer([u,d,"xhr-done","xhr-resolved"]),R.buffer([u]),O.buffer(["setTimeout"+s,"clearTimeout"+c,u]),M.buffer([u,"new-xhr","send-xhr"+c]),N.buffer([m+c,m+"-done",m+f+c,m+f+s]),E.buffer(["newURL"]),x.buffer([u]),b.buffer(["propagate",p,l,"executor-err","resolve"+c]),S.buffer([u,"no-"+u]),P.buffer(["new-jsonp","cb-start","jsonp-error","jsonp-end"]),a(M,"send-xhr"+c),a(C,"xhr-resolved"),a(C,"xhr-done"),a(N,m+c),a(N,m+"-done"),a(P,"new-jsonp"),a(P,"jsonp-end"),a(P,"cb-start"),E.on("pushState-end",i),E.on("replaceState-end",i),w[v]("hashchange",i,!0),w[v]("load",i,!0),w[v]("popstate",function(){i(0,_>1)},!0)}},{}],5:[function(t,e,n){function r(t){}if(window.performance&&window.performance.timing&&window.performance.getEntriesByType){var o=t("ee"),i=t("handle"),a=t(13),c=t(12),s="learResourceTimings",f="addEventListener",u="resourcetimingbufferfull",d="bstResource",p="resource",l="-start",h="-end",m="fn"+l,v="fn"+h,w="bstTimer",g="pushState",y=t("loader");y.features.stn=!0,t(8),"addEventListener"in window&&t(6);var x=NREUM.o.EV;o.on(m,function(t,e){var n=t[0];n instanceof x&&(this.bstStart=y.now())}),o.on(v,function(t,e){var n=t[0];n instanceof x&&i("bst",[n,e,this.bstStart,y.now()])}),a.on(m,function(t,e,n){this.bstStart=y.now(),this.bstType=n}),a.on(v,function(t,e){i(w,[e,this.bstStart,y.now(),this.bstType])}),c.on(m,function(){this.bstStart=y.now()}),c.on(v,function(t,e){i(w,[e,this.bst

Found 2026-01-09 by HttpPlugin

Create report

Open service 18.239.36.20:443 · status-eu2.sysdig.com

2026-01-09 12:39

HTTP/1.1 405 Not Allowed
Server: CloudFront
Date: Fri, 09 Jan 2026 12:39:47 GMT
Content-Length: 2515
Connection: close
x-amzn-waf-action: captcha
Cache-Control: no-store, max-age=0
Content-Type: text/html; charset=UTF-8
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 86400
Access-Control-Allow-Methods: OPTIONS,GET,POST
Access-Control-Expose-Headers: x-amzn-waf-action
X-Cache: Error from cloudfront
Via: 1.1 9a81383d5a4095cd87ee33985e4b2bf8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: 29DJVJfDnCfDdA1VqNVUH2VL3mQlhitM8uAqGszrF4lwVupVbJIZaA==

Page title: Human Verification

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>Human Verification</title>
    <style>
        body {
            font-family: "Arial";
        }
    </style>
    <script type="text/javascript">
    window.awsWafCookieDomainList = [];
    window.gokuProps = {
"key":"AQIDAHjcYu/GjX+QlghicBgQ/7bFaQZ+m5FKCMDnO+vTbNg96AHNLTiyoRfhbks50luFtEDEAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMKHukL9uPoM/cmKtaAgEQgDsW6lzrbjFjMyrXqCeKHrpqxcotywZzAgJZSCG35NkP045s6VWNLikKHuOYzGU0EIPsKIDjzgQq/mSuOw==",
          "iv":"EkQz7ACDFgAABHjB",
          "context":"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"
};
    </script>
    <script src="https://91288dfb5764.88268ff2.eu-west-1.token.awswaf.com/91288dfb5764/35f099fbb110/33ec649e736f/challenge.js"></script>
    <script src="https://91288dfb5764.88268ff2.eu-west-1.captcha.awswaf.com/91288dfb5764/35f099fbb110/33ec649e736f/captcha.js"></script>
</head>
<body>
    <div id="captcha-container"></div>
    <script type="text/javascript">
        AwsWafIntegration.saveReferrer();
        window.addEventListener("load", function() {
          const container = document.querySelector("#captcha-container");
          CaptchaScript.renderCaptcha(container, async (voucher) => {
              await ChallengeScript.submitCaptcha(voucher);
              window.location.reload(true);
          }
      );
    });
    </script>
    <noscript>
        <h1>JavaScript is disabled</h1>
        In order to continue, you need to verify that you're not a robot by solving a CAPTCHA puzzle.
         The CAPTCHA puzzle requires JavaScript. Enable JavaScript and then reload the page.
    </noscript>
</body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 18.239.36.20:80 · enjoy-work.app

2026-01-04 16:33

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 04 Jan 2026 16:33:41 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://enjoy-work.app/
X-Cache: Redirect from cloudfront
Via: 1.1 705c998367f4340ee8f7d23508c84626.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: tmYYrjCbgJwOT-Q4crDbkC9OHlbe7JwULUo_YkgIjR4KpkXEJ4Al1Q==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-04 by HttpPlugin

Create report

Open service 18.239.36.20:443 · enjoy-work.app

2026-01-04 16:33

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 36468
Connection: close
Date: Sun, 04 Jan 2026 16:33:41 GMT
Cache-Control: public,must-revalidate,max-age=0,s-maxage=300
x-frame-options: DENY
x-content-type-options: nosniff
reporting-endpoints: csp-endpoint="https://q8mlgy0mu5.execute-api.us-east-1.amazonaws.com/default/production/web-ng/report"
content-security-policy-report-only: frame-ancestors 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.iframe.ly https://js.stripe.com https://js-agent.newrelic.com https://bam.nr-data.net https://*.nr-data.net https://embed.tawk.to; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.iframe.ly https://js.stripe.com https://js-agent.newrelic.com https://bam.nr-data.net https://*.nr-data.net https://embed.tawk.to; report-to csp-endpoint; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.getequiem.com https://fonts.googleapis.com wss://*.iot.us-east-1.amazonaws.com wss://*.iot.ap-southeast-2.amazonaws.com wss://*.iot.eu-west-1.amazonaws.com https://bam.nr-data.net https://*.nr-data.net https://api.stripe.com https://iframe.ly; object-src 'self' data:; form-action 'self'; base-uri 'self'
content-security-policy: frame-ancestors 'none'
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000
referrer-policy: strict-origin-when-cross-origin
X-Powered-By: Next.js
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 ae0d2a327c332a4081a71ea179abdd70.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: tJBKuJIgABVIhhgb7kDaI-DgH5kNS8yQ83c8K-G2tMXMlRj38qC2bg==

Page title: Enjoy-Work

<!DOCTYPE html><html><head><meta charSet="utf-8" data-next-head=""/><script type="text/javascript" data-next-head="">
;window.NREUM||(NREUM={});NREUM.init={"distributed_tracing":{"enabled":true,"cors_use_newrelic_header":true,"cors_use_tracecontext_headers":true,"allowed_origins":["https://eu.gateway.getequiem.com"]},"privacy":{"cookies_enabled":false}};
window.NREUM||(NREUM={}),__nr_require=function(t,e,n){function r(n){if(!e[n]){var o=e[n]={exports:{}};t[n][0].call(o.exports,function(e){var o=t[n][1][e];return r(o||e)},o,o.exports)}return e[n].exports}if("function"==typeof __nr_require)return __nr_require;for(var o=0;o<n.length;o++)r(n[o]);return r}({1:[function(t,e,n){function r(t){try{c.console&&console.log(t)}catch(e){}}var o,i=t("ee"),a=t(25),c={};try{o=localStorage.getItem("__nr_flags").split(","),console&&"function"==typeof console.log&&(c.console=!0,o.indexOf("dev")!==-1&&(c.dev=!0),o.indexOf("nr_dev")!==-1&&(c.nrDev=!0))}catch(s){}c.nrDev&&i.on("internal-error",function(t){r(t.stack)}),c.dev&&i.on("fn-err",function(t,e,n){r(n.stack)}),c.dev&&(r("NR AGENT IN DEVELOPMENT MODE"),r("flags: "+a(c,function(t,e){return t}).join(", ")))},{}],2:[function(t,e,n){function r(t,e,n,r,c){try{l?l-=1:o(c||new UncaughtException(t,e,n),!0)}catch(f){try{i("ierr",[f,s.now(),!0])}catch(d){}}return"function"==typeof u&&u.apply(this,a(arguments))}function UncaughtException(t,e,n){this.message=t||"Uncaught error with no additional information",this.sourceURL=e,this.line=n}function o(t,e){var n=e?null:s.now();i("err",[t,n])}var i=t("handle"),a=t(26),c=t("ee"),s=t("loader"),f=t("gos"),u=window.onerror,d=!1,p="nr@seenError",l=0;s.features.err=!0,t(1),window.onerror=r;try{throw new Error}catch(h){"stack"in h&&(t(13),t(12),"addEventListener"in window&&t(6),s.xhrWrappable&&t(14),d=!0)}c.on("fn-start",function(t,e,n){d&&(l+=1)}),c.on("fn-err",function(t,e,n){d&&!n[p]&&(f(n,p,function(){return!0}),this.thrown=!0,o(n))}),c.on("fn-end",function(){d&&!this.thrown&&l>0&&(l-=1)}),c.on("internal-error",function(t){i("ierr",[t,s.now(),!0])})},{}],3:[function(t,e,n){t("loader").features.ins=!0},{}],4:[function(t,e,n){function r(){_++,T=g.hash,this[u]=y.now()}function o(){_--,g.hash!==T&&i(0,!0);var t=y.now();this[h]=~~this[h]+t-this[u],this[d]=t}function i(t,e){E.emit("newURL",[""+g,e])}function a(t,e){t.on(e,function(){this[e]=y.now()})}var c="-start",s="-end",f="-body",u="fn"+c,d="fn"+s,p="cb"+c,l="cb"+s,h="jsTime",m="fetch",v="addEventListener",w=window,g=w.location,y=t("loader");if(w[v]&&y.xhrWrappable){var x=t(10),b=t(11),E=t(8),R=t(6),O=t(13),N=t(7),M=t(14),P=t(9),C=t("ee"),S=C.get("tracer");t(16),y.features.spa=!0;var T,_=0;C.on(u,r),C.on(p,r),C.on(d,o),C.on(l,o),C.buffer([u,d,"xhr-done","xhr-resolved"]),R.buffer([u]),O.buffer(["setTimeout"+s,"clearTimeout"+c,u]),M.buffer([u,"new-xhr","send-xhr"+c]),N.buffer([m+c,m+"-done",m+f+c,m+f+s]),E.buffer(["newURL"]),x.buffer([u]),b.buffer(["propagate",p,l,"executor-err","resolve"+c]),S.buffer([u,"no-"+u]),P.buffer(["new-jsonp","cb-start","jsonp-error","jsonp-end"]),a(M,"send-xhr"+c),a(C,"xhr-resolved"),a(C,"xhr-done"),a(N,m+c),a(N,m+"-done"),a(P,"new-jsonp"),a(P,"jsonp-end"),a(P,"cb-start"),E.on("pushState-end",i),E.on("replaceState-end",i),w[v]("hashchange",i,!0),w[v]("load",i,!0),w[v]("popstate",function(){i(0,_>1)},!0)}},{}],5:[function(t,e,n){function r(t){}if(window.performance&&window.performance.timing&&window.performance.getEntriesByType){var o=t("ee"),i=t("handle"),a=t(13),c=t(12),s="learResourceTimings",f="addEventListener",u="resourcetimingbufferfull",d="bstResource",p="resource",l="-start",h="-end",m="fn"+l,v="fn"+h,w="bstTimer",g="pushState",y=t("loader");y.features.stn=!0,t(8),"addEventListener"in window&&t(6);var x=NREUM.o.EV;o.on(m,function(t,e){var n=t[0];n instanceof x&&(this.bstStart=y.now())}),o.on(v,function(t,e){var n=t[0];n instanceof x&&i("bst",[n,e,this.bstStart,y.now()])}),a.on(m,function(t,e,n){this.bstStart=y.now(),this.bstType=n}),a.on(v,function(t,e){i(w,[e,this.bstStart,y.now(),this.bstType])}),c.on(m,function(){this.bstStart=y.now()}),c.on(v,function(t,e){i(w,[e,this.bst

Found 2026-01-04 by HttpPlugin

Create report

Open service 18.239.36.20:80 · digitalmodernfamily.com

2026-01-02 13:59

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 13:59:25 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://digitalmodernfamily.com/
X-Cache: Redirect from cloudfront
Via: 1.1 b9be498b57d2aee7c2096da28228e858.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: j06D7sZM0OvVppo0x7afNU2AAgaCejr__NTF050fMybEpaq5JjITCg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 18.239.36.20:443 · digitalmodernfamily.com

2026-01-02 13:59

HTTP/1.1 404 Not Found
Server: CloudFront
Date: Fri, 02 Jan 2026 13:59:25 GMT
Content-Length: 0
Connection: close
x-block-rule: not-jp
X-Cache: Error from cloudfront
Via: 1.1 d53a72f970327ac790782b2a7692e5f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: jBTYQeATg2I2vCziH4UBLT3aGc57--Bkh_OhR4Ukmg_vdOgdsw2bPQ==

Found 2026-01-02 by HttpPlugin

Create report

Open service 18.239.36.20:443 · savvythoughts.com

2025-12-22 21:19

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Mon, 22 Dec 2025 21:19:37 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 7cc8e1a489398403da487298ad363b2a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: DCg4KuAexibbpBfmxd-fESLL_YWfbdTxxz1ftbFdlL9zap99ytE1Og==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: DCg4KuAexibbpBfmxd-fESLL_YWfbdTxxz1ftbFdlL9zap99ytE1Og==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2025-12-22 by HttpPlugin

Create report

Open service 18.239.36.20:80 · savvythoughts.com

2025-12-22 21:19

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Mon, 22 Dec 2025 21:19:37 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 9a81383d5a4095cd87ee33985e4b2bf8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P2
X-Amz-Cf-Id: rr3hhVHT4s3zM8EmCui7B_Nd55xpfSi7UBtpJL3oHa-MPf8swweMtg==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: rr3hhVHT4s3zM8EmCui7B_Nd55xpfSi7UBtpJL3oHa-MPf8swweMtg==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>

Found 2025-12-22 by HttpPlugin

Create report

www.hetschild21.nlhetschild21.nl

Fingerprint:

df7df196f509cc63b8acae468c512755e70fc6200bc3ca5be51f0bb70ed47b43

CN:

www.hetschild21.nl

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M01

Not before:

2025-10-30 00:00

Not after:

2026-11-28 23:59

docs.festivalscope.com

Fingerprint:

db1557bd99e80da784b40154a956c101ce026625ff9c397a3714771e152dac07

CN:

docs.festivalscope.com

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M03

Not before:

2025-01-29 00:00

Not after:

2026-02-27 23:59

westernmountain.app

Fingerprint:

66d70e410dced454a3dabf85715d36603d5d499e139e1e53e32e70701e8617d7

CN:

westernmountain.app

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M04

Not before:

2025-11-12 00:00

Not after:

2026-12-11 23:59

222-exhibition.web.getequiem.comarlington-collective.web.getequiem.comeastbound.web.getequiem.comequiem-activated-au.web.getequiem.comliberty-place.web.getequiem.commy.222exhibition.com.aumy.libertyplace.com.aumy.paddingtoncentral.commy.queenandcollins.com.aumyeastbound.appmytcam.compaddington-central.web.getequiem.comqueen-and-collins.web.getequiem.comthe-campus-at-marlborough.web.getequiem.comthe-vic2.web.getequiem.comtheviccommunity.comwww.my.queenandcollins.com.auwww.myeastbound.appwww.mytcam.comwww.theviccommunity.com

Fingerprint:

6d0a1f0707976c9c32a4c8009869e266d1cf37d7e949250105e5e724c1e0ce0e

CN:

queen-and-collins.web.getequiem.com

Key:

RSA-2048

Issuer:

R12

Not before:

2026-01-02 00:02

Not after:

2026-04-02 00:02

status-eu2.sysdig.com

Fingerprint:

0f5cb9f936a6a0bc2a6eec3cb224504e09cfc3bc44aa9c20151265979964178a

CN:

status-eu2.sysdig.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-11-21 08:23

Not after:

2026-02-19 08:23

360-queen.web.getequiem.com88-green.web.getequiem.com88green.com.auaurora-place.web.getequiem.comauroraplace.myworklife.com.aucanada-square.web.getequiem.comcitigroup-place.web.getequiem.comenjoy-work.appenjoy-work.web.getequiem.comentrada-la.appentrada2.web.getequiem.comguinness-tower.web.getequiem.cominnovation-centre.web.getequiem.commemorial-city.web.getequiem.commetrocentre.web.getequiem.commy.360queen.com.aumy.sunlighthouse.co.ukone-nicholson.web.getequiem.comone-university-avenue.web.getequiem.comrichmondadelaide-centre.web.getequiem.comsunlight-house.web.getequiem.comtd-canada-trust-tower.web.getequiem.comthe-stack.web.getequiem.comvicx-tower.web.getequiem.comvicxtower.myworklife.com.auwaterpark-place.web.getequiem.comwelcome.onenicholson.com.au

Fingerprint:

c858507e24d23e93569d3eeae15aad28ecfef00fe9e729462eff1b80b78cfa18

CN:

sunlight-house.web.getequiem.com

Key:

RSA-2048

Issuer:

R12

Not before:

2025-12-05 07:41

Not after:

2026-03-05 07:41

digitalmodernfamily.comwww.digitalmodernfamily.com

Fingerprint:

bacab60e0cd7e78a8929e2b453762277558be15882f1078f0447f48145321db9

CN:

digitalmodernfamily.com

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M02

Not before:

2025-05-07 00:00

Not after:

2026-06-05 23:59

savvythoughts.com*.savvythoughts.com

Fingerprint:

ade9c29c522c0cf990d8d72beadb832d4f02d39d664d30d1243212499e7749ed

CN:

savvythoughts.com

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M04

Not before:

2025-10-06 00:00

Not after:

2026-11-04 23:59

Domain summary

o0ml1bg4n.xyz 1 d.ixigua7.site 1 d.ixigua6.site 1 d.ixigua2.site 1 d.ixigua1.site 1 zaeaq9qmz.xyz 1 uvqmalb6y.xyz 1 the-campus-at-marlborough.web.getequiem.com 0 savvythoughts.com 1 digitalmodernfamily.com 1 enjoy-work.app 1 status-eu2.sysdig.com 0 hetschild21.nl 0 westernmountain.app 0 docs.festivalscope.com 0

15 recorded

Host 18.239.36.20

United States

Software information

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

www.hetschild21.nlhetschild21.nl

docs.festivalscope.com

westernmountain.app

status-eu2.sysdig.com

digitalmodernfamily.comwww.digitalmodernfamily.com

savvythoughts.com*.savvythoughts.com

Domain summary