Host 18.239.69.47
United States
AMAZON-02
Software information

AmazonS3 AmazonS3

tcp/443

Apache Apache

tcp/443

CloudFront

tcp/443 tcp/80

cloudflare cloudflare

tcp/443

nginx nginx

tcp/443

  • Git configuration and history exposed
    First seen 2024-01-27 08:13
    Last seen 2024-05-24 07:46
    Open for 117 days

    • Severity: medium
      Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652205c2db34

      [core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/bb/bb-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
      Found on 2024-05-24 07:46
      237 Bytes
    Create report
  • Git configuration and history exposed
    First seen 2023-10-08 12:07
    Last seen 2024-02-03 16:40
    Open for 118 days

    • Severity: medium
      Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b011144f

      [core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/pzhan/pzhan-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
      Found on 2024-02-03 16:40
      220 Bytes
    Create report
  • Git configuration and history exposed
    First seen 2023-10-08 12:07
    Last seen 2024-02-03 14:41
    Open for 118 days

    • Severity: medium
      Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b011144f

      [core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/pzhan/pzhan-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
      Found on 2024-02-03 14:41
      220 Bytes
    Create report
  • Git configuration and history exposed
    First seen 2023-10-08 12:07
    Last seen 2024-02-03 11:32
    Open for 117 days

    • Severity: medium
      Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522b011144f

      [core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/pzhan/pzhan-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
      Found on 2024-02-03 11:32
      220 Bytes
    Create report

  • Open service 18.239.69.47:443 · 866789.com

    2026-01-12 16:15 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6888
Connection: close
Server: nginx
Date: Mon, 12 Jan 2026 16:15:21 GMT
Last-Modified: Mon, 05 May 2025 14:47:17 GMT
Accept-Ranges: bytes
ETag: "6818cf75-1ae8"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 0f98b23785e0aac311e2d09ea5460eb8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: ZVHlm5_GGR3qzW6XM-aWvms-_2A39pVZAqyGvQiNcQFWLS-poOxkcA==
Age: 2

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)
}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
<script>

            var domainMap = { cb: ['49108.link', '49108.link', '49108.link']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        f
    Found 2 days ago by HttpPlugin
    Create report

  • Open service 18.239.69.47:80 · 866789.com

    2026-01-12 16:15 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 12 Jan 2026 16:15:23 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://866789.com/
X-Cache: Redirect from cloudfront
Via: 1.1 6fe2d3277e4f5f1aafe45d46bdc36cf0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: hInQYwH5A9b9gVJcn81zB68gxw8-bUKvG70dBTpH7wOTFFz5_O4LOA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2 days ago by HttpPlugin
    Create report

  • Open service 18.239.69.47:80 · 978234.com

    2026-01-11 20:22 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 11 Jan 2026 20:22:23 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://978234.com/
X-Cache: Redirect from cloudfront
Via: 1.1 d419ac9a83ef724c262c5f07f9b5a8da.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: tJkRMRP8XRaCuswmtfJjTdzaw5xXnW67RWfBaEaW6mPWiOWfFW6t2Q==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 3 days ago by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · 978234.com

    2026-01-11 20:22 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6886
Connection: close
Server: nginx
Date: Sun, 11 Jan 2026 20:22:21 GMT
Last-Modified: Mon, 05 May 2025 14:48:14 GMT
Accept-Ranges: bytes
ETag: "6818cfae-1ae6"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 2837e32f921e7e7517dd6f5461c37dfa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: 3GzAYrRvGk3wnqffeG9JwFnl-v_8Ut_yvhmcgAphwa4NOXU5FaccbA==
Age: 2

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)
}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
<script>

            var domainMap = { cb: ['49119.link', '49119.link', '49119.link']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        f
    Found 3 days ago by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · www.467444.com

    2026-01-10 15:57 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6712
Connection: close
Server: nginx
Date: Sat, 10 Jan 2026 15:57:29 GMT
Last-Modified: Mon, 05 May 2025 14:49:46 GMT
Accept-Ranges: bytes
ETag: "6818d00a-1a38"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 7785d4956cb908a17db2e556c11a4ea4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: f8RyLEj-7bV0jKoym7fkAV1-R-Y6qrf7aIQPeBNkURpFmKSpcavneg==
Age: 3

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)
}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
<script>

            var domainMap = { cb: ['49123.link', '49123.link', '49123.link']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))
        }
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 18.239.69.47:80 · www.837234.cc

    2026-01-10 15:57 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 15:57:32 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://www.837234.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 6099a68d04a7ee2150888338bfdc451a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: 082Dq_MenJW689yNEXcgm35JLFxbqzsawUW8JHi2jQed93UaxUs6yA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · yolo.trade

    2026-01-10 05:36 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 3204
Connection: close
Last-Modified: Fri, 02 Jan 2026 03:59:12 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 10 Jan 2026 05:36:42 GMT
ETag: "86c58753754f9b2b1479b4d60e19df1d"
X-Cache: Hit from cloudfront
Via: 1.1 6fe2d3277e4f5f1aafe45d46bdc36cf0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: AXGMlImOabbzS2PLDeLCgGItQn_73rsVnoXsgGitMyyqVbOF7gIy_Q==
Age: 7561

Page title: Joyride

<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <meta
      name="viewport"
      content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=contain"
    />
    <meta
      name="description"
      content="Mobile-first options trading platform for BTC, ETH, & SOL"
    />
    <meta
      name="keywords"
      content="options trading, crypto, mobile trading, BTC, ETH, SOL"
    />
    <meta name="author" content="Origin" />

    <!-- PWA Meta Tags -->
    <meta name="theme-color" content="#0D0D0E" />
    <meta name="mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="default" />
    <meta name="apple-mobile-web-app-title" content="YOLO" />
    <meta name="msapplication-TileColor" content="#0D0D0E" />

    <!-- Icons and Manifest -->
    <link rel="manifest" href="/manifest.json" />
    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
    <link rel="icon" type="image/png" href="/favicon.png" />
    <link rel="apple-touch-icon" href="/apple-touch-icon.png" />

    <!-- Preload critical resources -->
    <link rel="preconnect" href="https://fonts.googleapis.com" />
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
    <link
      href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap"
      rel="stylesheet"
    />

    <title>Joyride</title>

    <!-- Redirect app subdomain to main domain (unless on app path) -->
    <script>
      if (window.location.hostname === 'app.joyride.exchange') {
        const pathname = window.location.pathname;
        if (pathname !== '/micah') {
          window.location.href = 'https://joyride.exchange';
        }
      }
    </script>

    <!-- Google tag (gtag.js) - Only load on production -->
    <script>
      // Only load Google Analytics if not on localhost
      if (
        window.location.hostname !== 'localhost' &&
        window.location.hostname !== '127.0.0.1'
      ) {
        // Load gtag script
        (function () {
          var script = document.createElement('script');
          script.async = true;
          script.src =
            'https://www.googletagmanager.com/gtag/js?id=AW-11326136924';
          document.head.appendChild(script);
        })();

        // Initialize gtag
        window.dataLayer = window.dataLayer || [];
        function gtag() {
          dataLayer.push(arguments);
        }
        window.gtag = gtag;
        gtag('js', new Date());
        gtag('config', 'AW-11326136924');
      } else {
        // Mock gtag for localhost to prevent errors
        window.gtag = function () {
          console.log('gtag (localhost mock):', arguments);
        };
      }
    </script>
    <script type="module" crossorigin src="/assets/index-CoGX0Snu.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-WhS7ZqiD.css">
  <link rel="manifest" href="/manifest.json"><script id="vite-plugin-pwa:register-sw" src="/registerSW.js"></script></head>
  <body>
    <div id="root" style="background-color: #0d0d0e"></div>
  </body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 18.239.69.47:80 · d1757i.offib.com

    2026-01-09 23:03 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 09 Jan 2026 23:03:23 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://d1757i.offib.com/
X-Cache: Redirect from cloudfront
Via: 1.1 78e03c1b28d33ab75a53563ffdf54ba6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: b8yrKbroZdoh1a2ZBEVLGm-khZPDhjhv3xPoDN5rZt2xKtpnaN0aaA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-09 by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · mbimobiliairia.site.arboimoveis.com.br

    2026-01-09 22:04 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 35195
Connection: close
Date: Fri, 09 Jan 2026 20:27:19 GMT
Last-Modified: Wed, 25 Jun 2025 14:44:55 GMT
ETag: "7457d6c737885f8daafc3892573a770d"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 cf65dbfe06da8e543052ca7066d0e458.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: tVtEMAnerTcEboE4JCCvkGuLjfTSvkADX955CinLZXq_pG8Ilh_wxA==
Age: 5804
X-Frame-Options: DENY


<!doctype html><html ng-app=arboWeb lang=pt><head><meta name=fragment content=!><meta charset=utf-8><title ng-bind=ngMeta.title></title><meta name=description content="{{ ngMeta.description ? ngMeta.description : ''}}"><meta name=keywords content="{{ ngMeta['keywords'] }}"><link rel=canonical href="{{ ngMeta['canonical'] ? ngMeta['canonical'] : ''}}"><meta name=twitter:card content=summary><meta name=twitter:site content="{{ ngMeta['type'] ? ngMeta['type'] : 'website' }}"><meta name=twitter:title content="{{ ngMeta['og:title'] ? ngMeta['og:title'] : ''}}"><meta name=twitter:description content="{{ ngMeta.description ? ngMeta.description : ''}}"><meta name=twitter:image content="{{ ngMeta['og:image'] ? ngMeta['og:image'] : ''}}"><meta property=type content="{{ ngMeta['type'] ? ngMeta['type'] : 'website' }}"><meta property=og:url content="{{ ngMeta['og:url'] ? ngMeta['og:url'] : ''}}"><meta property=og:type content=website><meta property=og:site_name content="{{ ngMeta['og:site_name'] }}"><meta property=image content="{{ ngMeta['image'] ? ngMeta['image'] : ''}}"><meta property=og:image:url itemprop=image content="{{ ngMeta['og:image'] ? ngMeta['og:image'] : ''}}"><meta property=og:image:width content="{{ ngMeta['og:image:width'] ? ngMeta['og:image:width'] : 640}}"><meta property=og:image:height content="{{ ngMeta['og:image:height'] ? ngMeta['og:image:height'] : 640}}"><meta property=og:title content="{{ ngMeta['og:title'] ? ngMeta['og:title'] : ''}}"><meta property=og:description content="{{ ngMeta['og:description'] ? ngMeta['og:description'] : '' }}"><meta property=fb:app_id content="{{ngMeta['fb:app_id']}}"><link href="https://fonts.googleapis.com/css2?family=Ubuntu:wght@300;400;500;700&display=swap" rel=stylesheet><link rel=manifest href=/assets/images/favicon/manifest.json><meta name=application-name content="{{ ngMeta['application-name'] }}"><meta name=msapplication-TileColor content=#FFFFFF><meta name=msapplication-TileImage content=mstile-144x144.png><meta name=msapplication-square70x70logo content=mstile-70x70.png><meta name=msapplication-square150x150logo content=mstile-150x150.png><meta name=msapplication-wide310x150logo content=mstile-310x150.png><meta name=msapplication-square310x310logo content=mstile-310x310.png><meta name=theme-color content=#ffffff><meta name=apple-mobile-web-app-capable content=yes><meta name=apple-mobile-web-app-status-barstyle content=black-translucent><meta name=mobile-web-app-capable content=yes><meta name=viewport content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no"><base href=/ ><script type=text/javascript src=https://cdn.jsdelivr.net/npm/browser-image-compression@2.0.1/dist/browser-image-compression.js></script><script type=text/javascript>;window.NREUM||(NREUM={});NREUM.init={distributed_tracing:{enabled:true},privacy:{cookies_enabled:true}};
    window.NREUM||(NREUM={}),__nr_require=function(t,e,n){function r(n){if(!e[n]){var o=e[n]={exports:{}};t[n][0].call(o.exports,function(e){var o=t[n][1][e];return r(o||e)},o,o.exports)}return e[n].exports}if("function"==typeof __nr_require)return __nr_require;for(var o=0;o<n.length;o++)r(n[o]);return r}({1:[function(t,e,n){function r(t){try{s.console&&console.log(t)}catch(e){}}var o,i=t("ee"),a=t(29),s={};try{o=localStorage.getItem("__nr_flags").split(","),console&&"function"==typeof console.log&&(s.console=!0,o.indexOf("dev")!==-1&&(s.dev=!0),o.indexOf("nr_dev")!==-1&&(s.nrDev=!0))}catch(c){}s.nrDev&&i.on("internal-error",function(t){r(t.stack)}),s.dev&&i.on("fn-err",function(t,e,n){r(n.stack)}),s.dev&&(r("NR AGENT IN DEVELOPMENT MODE"),r("flags: "+a(s,function(t,e){return t}).join(", ")))},{}],2:[function(t,e,n){function r(t,e,n,r,s){try{l?l-=1:o(s||new UncaughtException(t,e,n),!0)}catch(f){try{i("ierr",[f,c.now(),!0])}catch(d){}}return"function"==typeof u&&u.apply(this,a(arguments))}function UncaughtException(t,e,n){this.message=t||"Uncaught error with no additional information",this.sourceURL=e,this.line=n}function o(t,e){var n=e?null:c.now();i("err",[t,n])}var i=t("handle"),a=t(30),s=t("ee"),c=t("loader"),f=t("
    Found 2026-01-09 by HttpPlugin
    Create report

  • Open service 18.239.69.47:80 · d2xeq437i1si8m.amplifyapp.com

    2026-01-09 12:31 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 09 Jan 2026 12:31:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://d2xeq437i1si8m.amplifyapp.com/
X-Cache: Redirect from cloudfront
Via: 1.1 dc216c6741e47caf45c9d347f1061c8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: eDKQrZCr8e7lxp-_c6qmHJIgXU9q57Gmz4L9UOi_ZHvTjI2JeNAopw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-09 by HttpPlugin
    Create report

  • Open service 18.239.69.47:80 · admin.sandbox.upland.me

    2026-01-09 06:41 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 09 Jan 2026 06:41:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://admin.sandbox.upland.me/
X-Cache: Redirect from cloudfront
Via: 1.1 0f0656e015969f214cbb02d6f2a23f6a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: g1YfPmqXWxuZdYPDjLkIUJ0BxurXoUkmh0wWq6xUm6GfBqaWUrFl3w==
Content-Security-Policy: frame-ancestors 'self' upland.me *.upland.me
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-09 by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · mta-sts.dsaauctions.com

    2026-01-09 03:32 

    HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: close
Server: AmazonS3
Date: Fri, 09 Jan 2026 03:32:05 GMT
X-Cache: Error from cloudfront
Via: 1.1 391671221007e4a70643cc0de549779c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: RmBfD5ylZvigmSO-CUbhZHNvnmbqhxM8ILIEUGgfC3dWaiWDpGln2g==


<?xml version="1.0" encoding="UTF-8"?>
<Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>QE1TP688NGBDJ2BK</RequestId><HostId>z0LKT6oJIsw0O0OQoM9F4h8n66SzThMtxd8Y01LIxSApwTOkEJOBl6jMFmSp8StWVPMq5b220TFoufjoD2i2XJT2YfucsVWq</HostId></Error>
    Found 2026-01-09 by HttpPlugin
    Create report

  • Open service 18.239.69.47:80 · d1n7i9l31lr1ti.amplifyapp.com

    2026-01-09 02:00 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 09 Jan 2026 02:00:39 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://d1n7i9l31lr1ti.amplifyapp.com/
X-Cache: Redirect from cloudfront
Via: 1.1 c3d7a569db567dde78a645781f9949a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: u4IPN7kw4UdbAr9OhJ4TyRK7T1BG7gJ7L4_D7q4DPICbkV4lLqP0PA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-09 by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · status.retarus.io

    2026-01-09 01:49 

    HTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 551
Connection: close
Date: Thu, 08 Jan 2026 06:32:01 GMT
Last-Modified: Mon, 20 Jun 2016 20:42:32 GMT
ETag: "886d80a0f6e35e080cb891087dcfe212"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 d419ac9a83ef724c262c5f07f9b5a8da.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: 05Kem7neOBKerXtllw7sFJAd6hB42qv2m8MNewBWu5FBrDSbtpwh_w==
Age: 69465

Page title: Access Denied

<html>
  <head>
    <title>Access Denied</title>
  </head>
  <body>
    <style>

      body {
        background-color: #272822;
        font-family: 'Helvetica Neue', Arial, Helvetica, Geneva, sans-serif;
        font-size: 55px;
        font-style: normal;
        font-variant: normal;
        color: rgb(255, 255, 255);
        text-align: center;
        opacity: 0.7;
      }

    </style>

    <p style='margin-top:200px; opacity: 0.7; font-size: 25px;'>Access Denied</p>
    <p style='margin-top:5px; font-size: 20px;'></p>

  </body>
</html>
    Found 2026-01-09 by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · www.hcdforwash.org

    2026-01-08 22:19 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Thu, 08 Jan 2026 22:19:48 GMT
Server: Apache
X-Cache-Handler: cache-enabler-engine
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 9f9de4292c90d3b00804c3fd5a50677e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: 3btXJ-yG2ygIaQ6RA6lXbGXJcz_ccQHqUaIUEi182CIOvA5ShhIqzg==
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · my275grove.com

    2026-01-02 23:23 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 36008
Connection: close
Date: Fri, 02 Jan 2026 23:23:30 GMT
Cache-Control: public,must-revalidate,max-age=0,s-maxage=300
x-frame-options: DENY
x-content-type-options: nosniff
reporting-endpoints: csp-endpoint="https://q8mlgy0mu5.execute-api.us-east-1.amazonaws.com/default/production/web-ng/report"
content-security-policy-report-only: frame-ancestors 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.iframe.ly https://js.stripe.com https://js-agent.newrelic.com https://bam.nr-data.net https://*.nr-data.net https://embed.tawk.to; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.iframe.ly https://js.stripe.com https://js-agent.newrelic.com https://bam.nr-data.net https://*.nr-data.net https://embed.tawk.to; report-to csp-endpoint; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.getequiem.com https://fonts.googleapis.com wss://*.iot.us-east-1.amazonaws.com wss://*.iot.ap-southeast-2.amazonaws.com wss://*.iot.eu-west-1.amazonaws.com https://bam.nr-data.net https://*.nr-data.net https://api.stripe.com https://iframe.ly; object-src 'self' data:; form-action 'self'; base-uri 'self'
content-security-policy: frame-ancestors 'none'
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000
referrer-policy: strict-origin-when-cross-origin
X-Powered-By: Next.js
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 0f98b23785e0aac311e2d09ea5460eb8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: J9au26e35YqcvlhLdywjwtyM83KNZtsPKt6Xd56ur-OLgHsYfqnszA==

Page title: 275 Grove

<!DOCTYPE html><html><head><meta charSet="utf-8" data-next-head=""/><script type="text/javascript" data-next-head="">
;window.NREUM||(NREUM={});NREUM.init={"distributed_tracing":{"enabled":true,"cors_use_newrelic_header":true,"cors_use_tracecontext_headers":true,"allowed_origins":["https://us.gateway.getequiem.com"]},"privacy":{"cookies_enabled":false}};
window.NREUM||(NREUM={}),__nr_require=function(t,e,n){function r(n){if(!e[n]){var o=e[n]={exports:{}};t[n][0].call(o.exports,function(e){var o=t[n][1][e];return r(o||e)},o,o.exports)}return e[n].exports}if("function"==typeof __nr_require)return __nr_require;for(var o=0;o<n.length;o++)r(n[o]);return r}({1:[function(t,e,n){function r(t){try{c.console&&console.log(t)}catch(e){}}var o,i=t("ee"),a=t(25),c={};try{o=localStorage.getItem("__nr_flags").split(","),console&&"function"==typeof console.log&&(c.console=!0,o.indexOf("dev")!==-1&&(c.dev=!0),o.indexOf("nr_dev")!==-1&&(c.nrDev=!0))}catch(s){}c.nrDev&&i.on("internal-error",function(t){r(t.stack)}),c.dev&&i.on("fn-err",function(t,e,n){r(n.stack)}),c.dev&&(r("NR AGENT IN DEVELOPMENT MODE"),r("flags: "+a(c,function(t,e){return t}).join(", ")))},{}],2:[function(t,e,n){function r(t,e,n,r,c){try{l?l-=1:o(c||new UncaughtException(t,e,n),!0)}catch(f){try{i("ierr",[f,s.now(),!0])}catch(d){}}return"function"==typeof u&&u.apply(this,a(arguments))}function UncaughtException(t,e,n){this.message=t||"Uncaught error with no additional information",this.sourceURL=e,this.line=n}function o(t,e){var n=e?null:s.now();i("err",[t,n])}var i=t("handle"),a=t(26),c=t("ee"),s=t("loader"),f=t("gos"),u=window.onerror,d=!1,p="nr@seenError",l=0;s.features.err=!0,t(1),window.onerror=r;try{throw new Error}catch(h){"stack"in h&&(t(13),t(12),"addEventListener"in window&&t(6),s.xhrWrappable&&t(14),d=!0)}c.on("fn-start",function(t,e,n){d&&(l+=1)}),c.on("fn-err",function(t,e,n){d&&!n[p]&&(f(n,p,function(){return!0}),this.thrown=!0,o(n))}),c.on("fn-end",function(){d&&!this.thrown&&l>0&&(l-=1)}),c.on("internal-error",function(t){i("ierr",[t,s.now(),!0])})},{}],3:[function(t,e,n){t("loader").features.ins=!0},{}],4:[function(t,e,n){function r(){_++,T=g.hash,this[u]=y.now()}function o(){_--,g.hash!==T&&i(0,!0);var t=y.now();this[h]=~~this[h]+t-this[u],this[d]=t}function i(t,e){E.emit("newURL",[""+g,e])}function a(t,e){t.on(e,function(){this[e]=y.now()})}var c="-start",s="-end",f="-body",u="fn"+c,d="fn"+s,p="cb"+c,l="cb"+s,h="jsTime",m="fetch",v="addEventListener",w=window,g=w.location,y=t("loader");if(w[v]&&y.xhrWrappable){var x=t(10),b=t(11),E=t(8),R=t(6),O=t(13),N=t(7),M=t(14),P=t(9),C=t("ee"),S=C.get("tracer");t(16),y.features.spa=!0;var T,_=0;C.on(u,r),C.on(p,r),C.on(d,o),C.on(l,o),C.buffer([u,d,"xhr-done","xhr-resolved"]),R.buffer([u]),O.buffer(["setTimeout"+s,"clearTimeout"+c,u]),M.buffer([u,"new-xhr","send-xhr"+c]),N.buffer([m+c,m+"-done",m+f+c,m+f+s]),E.buffer(["newURL"]),x.buffer([u]),b.buffer(["propagate",p,l,"executor-err","resolve"+c]),S.buffer([u,"no-"+u]),P.buffer(["new-jsonp","cb-start","jsonp-error","jsonp-end"]),a(M,"send-xhr"+c),a(C,"xhr-resolved"),a(C,"xhr-done"),a(N,m+c),a(N,m+"-done"),a(P,"new-jsonp"),a(P,"jsonp-end"),a(P,"cb-start"),E.on("pushState-end",i),E.on("replaceState-end",i),w[v]("hashchange",i,!0),w[v]("load",i,!0),w[v]("popstate",function(){i(0,_>1)},!0)}},{}],5:[function(t,e,n){function r(t){}if(window.performance&&window.performance.timing&&window.performance.getEntriesByType){var o=t("ee"),i=t("handle"),a=t(13),c=t(12),s="learResourceTimings",f="addEventListener",u="resourcetimingbufferfull",d="bstResource",p="resource",l="-start",h="-end",m="fn"+l,v="fn"+h,w="bstTimer",g="pushState",y=t("loader");y.features.stn=!0,t(8),"addEventListener"in window&&t(6);var x=NREUM.o.EV;o.on(m,function(t,e){var n=t[0];n instanceof x&&(this.bstStart=y.now())}),o.on(v,function(t,e){var n=t[0];n instanceof x&&i("bst",[n,e,this.bstStart,y.now()])}),a.on(m,function(t,e,n){this.bstStart=y.now(),this.bstType=n}),a.on(v,function(t,e){i(w,[e,this.bstStart,y.now(),this.bstType])}),c.on(m,function(){this.bstStart=y.now()}),c.on(v,function(t,e){i(w,[e,this.bst
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 18.239.69.47:80 · my275grove.com

    2026-01-02 23:23 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 23:23:30 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://my275grove.com/
X-Cache: Redirect from cloudfront
Via: 1.1 eb78cbb81a4ab555c78ae1168deff6e2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: arx1_MMUjJNk_OqAKsoyaTnSlV3vsGsc-Hp0JFFDydmJE84Tiv7zWQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · 694456.com

    2026-01-02 19:44 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6880
Connection: close
Server: nginx
Date: Fri, 02 Jan 2026 19:44:11 GMT
Last-Modified: Mon, 05 May 2025 14:49:16 GMT
Accept-Ranges: bytes
ETag: "6818cfec-1ae0"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 12d69f39c905d1c9441d392eddc25066.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: Y7aEtNRAtx9RUn7i8k45gg7O9l0TzsfczuBaQ4TVkR6gJVg8_MoB2g==

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)
}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
<script>

            var domainMap = { cb: ['5449.men', '5449.men', '5449.men']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (va
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 18.239.69.47:80 · 694456.com

    2026-01-02 19:44 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 19:44:11 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://694456.com/
X-Cache: Redirect from cloudfront
Via: 1.1 d419ac9a83ef724c262c5f07f9b5a8da.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: OyvCMcazvnehj64xFijLSnifeGOZ_ICtjr7BzeK0YJmiRxB6nQ3Zlg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 18.239.69.47:80 · csreainsurance.com

    2026-01-02 17:44 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 17:44:56 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://csreainsurance.com/
X-Cache: Redirect from cloudfront
Via: 1.1 7785d4956cb908a17db2e556c11a4ea4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: ZFFeoJhD4RpjeSMDxlQ8ENWzeNMojTrqDQKwm2GzMptLmiChpsFJzg==
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · csreainsurance.com

    2026-01-02 17:44 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Fri, 02 Jan 2026 17:44:56 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 6fe2d3277e4f5f1aafe45d46bdc36cf0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: TULqgS-XGYRbH4jXWbaIlBXAUuNagBqYhEY18GsVDlokMh_hrW8qIA==
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: TULqgS-XGYRbH4jXWbaIlBXAUuNagBqYhEY18GsVDlokMh_hrW8qIA==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · www.hcdforwash.org

    2026-01-02 11:35 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Fri, 02 Jan 2026 11:35:42 GMT
Server: Apache
X-Cache-Handler: cache-enabler-engine
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 9f9de4292c90d3b00804c3fd5a50677e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: xsGCeqT3DAbB07ywkP5OWRUWF3OU1d9QraOKw8xY9F3x0bJdmJJNDw==
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 18.239.69.47:80 · weleatherjacket.com

    2025-12-30 19:12 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 30 Dec 2025 19:12:44 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://weleatherjacket.com/
X-Cache: Redirect from cloudfront
Via: 1.1 78e03c1b28d33ab75a53563ffdf54ba6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: 9ltJMbRpS9IVtDv3tWPj3Cl7dpHW1ER4iXsIOtnXE9hpWzN9F7bKUQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2025-12-30 by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · weleatherjacket.com

    2025-12-30 19:12 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Tue, 30 Dec 2025 19:12:45 GMT
Server: Apache
Link: <https://weleatherjacket.com/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 eb78cbb81a4ab555c78ae1168deff6e2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: 8LPjjx94MrKmcSZjwixpnCdi5LeSFStrhwy96GvXjkoUt-RKSKZ6qg==
    Found 2025-12-30 by HttpPlugin
    Create report

  • Open service 18.239.69.47:80 · m3s-sta.fmbt.io

    2025-12-23 07:39 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Tue, 23 Dec 2025 07:39:20 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 b6b3214c2f1500227643824508cb5d1c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 9Gu95quwbbhv3eoc6p-NKpr2F2E5SBRzTksmGe3uWSNUuuJ76GoL2A==
blazor-environment: staging

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: 9Gu95quwbbhv3eoc6p-NKpr2F2E5SBRzTksmGe3uWSNUuuJ76GoL2A==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2025-12-23 by HttpPlugin
    Create report

  • Open service 18.239.69.47:80 · 1.org

    2025-12-23 02:23 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 23 Dec 2025 02:23:43 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://1.org/
X-Cache: Redirect from cloudfront
Via: 1.1 eb78cbb81a4ab555c78ae1168deff6e2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: sGKMEdMYf0lXwPyVgVIt_stY4Q8U3dfnbdSxt9zOHksDjMJd8lvYiw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2025-12-23 by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · mta-sts.dsaauctions.com

    2025-12-22 23:59 

    HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: close
Server: AmazonS3
Date: Mon, 22 Dec 2025 23:59:44 GMT
X-Cache: Error from cloudfront
Via: 1.1 391671221007e4a70643cc0de549779c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: ne_EwMqgVEUsf4KmfY4BL8IcyqKoLmayCHxvgZJXWWpIvoPG4xjx8g==


<?xml version="1.0" encoding="UTF-8"?>
<Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>TQ5QE1A8BBSCSFQC</RequestId><HostId>GcmqT4XK5puVFFtrWteF/5KlvX29blrtlq287MLAAze09UJ33Hah0VSMiHlDQZMqJU9VFndQEhoHLy/OfcQGJJukdkPhj7jX</HostId></Error>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · www.hcdforwash.org

    2025-12-22 21:26 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Mon, 22 Dec 2025 21:26:11 GMT
Server: Apache
X-Cache-Handler: cache-enabler-engine
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 6fe2d3277e4f5f1aafe45d46bdc36cf0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: k3gZ1alV2cj8MlGSzOURgDObMCwFYyd3waYmDPYRYyc8r9Wb6ewFag==
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · retreat.orases.com

    2025-12-22 21:07 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1523
Connection: close
Date: Sat, 06 Dec 2025 19:47:53 GMT
Cache-Control: public, max-age=0, s-maxage=31536000
Server: AmazonS3
Accept-Ranges: bytes
ETag: "87e23dcd938a64f7907001e72b664722"
Last-Modified: Tue, 30 Sep 2025 14:05:06 GMT
X-Cache: Hit from cloudfront
Via: 1.1 7785d4956cb908a17db2e556c11a4ea4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: bF6vNhlTMRQTwgcQf8jIPlH0O5MOeyuXoE4RX21loDHuRqHVYOOwNw==
Age: 1387193

Page title: retreat-bash-mashup-magic

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>retreat-bash-mashup-magic</title>
    <meta name="description" content="Lovable Generated Project" />
    <meta name="author" content="Lovable" />

    <link rel="icon" href="/cropped-orases-favicon-32x32.png" sizes="32x32">
    
    <!-- Brand Fonts -->
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    <link href="https://fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700&family=Bitter:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Gelasio:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700&display=swap" rel="stylesheet">

    <meta property="og:title" content="retreat-bash-mashup-magic" />
    <meta property="og:description" content="Lovable Generated Project" />
    <meta property="og:type" content="website" />
    <meta property="og:image" content="https://lovable.dev/opengraph-image-p98pqg.png" />

    <meta name="twitter:card" content="summary_large_image" />
    <meta name="twitter:site" content="@lovable_dev" />
    <meta name="twitter:image" content="https://lovable.dev/opengraph-image-p98pqg.png" />
    <script type="module" crossorigin src="/assets/index-pN6AsxOH.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-Th6HKekF.css">
  </head>

  <body>
    <div id="root"></div>
  </body>
</html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · voleongroupapp.com

    2025-12-22 21:00 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Date: Mon, 22 Dec 2025 09:28:51 GMT
cf-cache-status: DYNAMIC
CF-RAY: 9b1e97677b4a1e3e-FRA
Server: cloudflare
Last-Modified: Fri, 31 Oct 2025 21:18:00 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=J3mjP%2BFvAy5dOdn2KSKmb%2BJqhnw7nYh0op2U4XpoGpU0yxV3DmY0oNb4S4%2Fr5jfj%2FAs66CzRohvkPjXrScm%2F%2Bm7QW68Waf7Oeu3dEcK%2F1ghPsyP%2FR4U%3D"}]}
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 d1b1cc661d55a3f8a88f240826e4f38c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: AnZDB-xqYFslPeOj6lzLoS28eej3GiEk_L8OFlnt0oaO50xjfyW9jA==
Age: 41488

Page title: TVG


<!-- saved from url=(0031)https://millervaluepartner.xyz/ -->
<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>TVG</title>

    <meta http-equiv="X-UA-Compatible" content="IE=edge, chrome=1">
    <meta http-equiv="Cache-Control" content="no-transform">
    <meta http-equiv="Cache-Control" content="no-siteapp">
    <meta name="apple-mobile-web-app-capable" content="yes">
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
<style type="text/css">
	body{
		padding: 0;
		margin: 0;
	}
	
	img{
		display: block;
		width: 100%;
	}
	.content {
		background-image: url('./static/bg.png');
		background-size: 100% 100%;
		height: 100vh;
		display: flex;
		flex-direction: column;
		align-items: center;
		/* background: #fff; */

	}
	.btn1 {
		position: fixed;
		bottom: 18%;
		
	}
	.btn12 {
		position: fixed;
		bottom: 9%;
		
	}
	.btn13 {
		position: fixed;
		top: 26%;
		/* padding: 0 24px; */
	}
	.btn14 {
		position: fixed;
		top: 17%;
		/* padding: 0 24px; */
		
	}
	/* .foot-bg {
		position: fixed;
		bottom: 0;
		background-image: url('./1.png');
		background-size: 100% 100%;
		height: 25%;
		width: 100%;
		z-index: 99;
	} */
	
</style>
</head>
<body>

<div class="content">
   
 
<div style="margin-top: 15%;color: #252631;font-size: 20px;display: flex;align-items: center;font-weight: bold;">
	   <img src="static/logo.png" style="width: 64px;height: 64px;border-radius: 13px;box-shadow: 0px 3px 6px 1px rgba(0,0,0,0.16);margin-right: 10px;">
	   <!-- ‎bulk AiD han Pro -->
   </div>
   <!-- <div style="margin-top: 10%;">
	   <img src="./1.png"/>
   </div> -->
   <!-- <div style="color: #526195;font-size: 24px;font-weight: bold;margin-bottom: 1.3%;margin-top: 3%;padding: 0 30px;">
   Massive data, precise analysis, intelligent trading, AI scoring
   </div> -->
<!-- <div style="color: #666;font-size: 16px;margin-top: 5%;padding: 0 10%;text-align: justify;">
	Selected stocks | Discounted rates | Fast and convenient
</div> -->
	<div class="btn14" style="font-size: 24px;color: #fff;width: 80%;text-align: center;line-height: 32px;font-weight: 600;">
        市場新觀點，資產新思路
	</div>
	<!-- <div class="btn13" style="font-size: 16px;color: #003F8E;width: 80%;text-align: center;line-height: 24px;">
        The Voleon Group，隨心所投
	</div> -->
   <!-- <div class="btn13" style="font-size: 16px;color: #fff;width: 70%;text-align: center;line-height: 20px;">
	   An intelligent and secure platform for selected stock investments
   </div> -->
   <div onclick="onBtn(1)" class="btn1" style="display: flex;align-items: center;justify-content: center;padding: 18px 0;border-radius: 10px;color: #B27035;background: linear-gradient(180deg, #FFF 0%, #FADDB9 100%);font-size: 18px;font-weight: bold;margin-top: 15%;margin-bottom: 24px; width: 80%;">
	   <img style="width: 21px;height: 24px;margin-right: 14px;" src="static/apk.png">
	   Android 用戶入口
   </div>
	 
   <div onclick="onBtn(2)" class="btn12" style="display: flex;align-items: center;justify-content: center;padding: 18px 0;border-radius: 10px;color: #B27035;background: linear-gradient(180deg, #FFF 0%, #FADDB9 100%);font-size: 18px;font-weight: bold;width: 80%;">
   	   <img style="width: 21px;height: 24px;margin-right: 14px;" src="static/ios.png">
   	  iPhone 用戶入口
   </div>
   <!-- <div style="color: #fff;margin-top: 130px;font-size: 14px;">
	   版本：1.3.1
   </div> -->
   <!-- <div class="foot-bg">
	   
   </div> -->
</div>
<!-- onclick="onBtn()" -->
<div>

</div>
<!--<script type="text/javascript" src="./millervaluepartner.xyz_files/echo.js"></script>-->
<script>
     function onBtn(index) {
         var timestamp = Date.parse(new Date());
		 window.location.href = (index === 1 ? 'app.apk':'app.mobileconfig') + '?i=100'
	 }
</script>



</body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 18.239.69.47:80 · voleongroupapp.com

    2025-12-22 21:00 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 21:00:19 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://voleongroupapp.com/
X-Cache: Redirect from cloudfront
Via: 1.1 d0ade5b002ae847eefd25c219f24b24c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: t4Zf5d7qgJ3ifFdfpY-KKbqvvcK6XNZKh7LKUNlBMjmqYGcV3JP-3A==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · d2sup2t3m0ebhg.amplifyapp.com

    2025-12-22 18:58 

    HTTP/1.1 404 Not Found
Content-Length: 0
Connection: close
Date: Mon, 22 Dec 2025 18:58:52 GMT
X-Cache: Error from cloudfront
Via: 1.1 2837e32f921e7e7517dd6f5461c37dfa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: Z0fUR6JlqfVysmOt9OnKI4oeHCzwI3LiyM31JBIJhcCaAHlhM-9mog==
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 18.239.69.47:443 · www.hcdforwash.org

    2025-12-21 00:00 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Sun, 21 Dec 2025 00:00:38 GMT
Server: Apache
X-Cache-Handler: cache-enabler-engine
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 0f98b23785e0aac311e2d09ea5460eb8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P4
X-Amz-Cf-Id: MMxqY78ICItOVNE-yB_ZvlX7yYuFD1t-cY5maMTJpuActFLKwlJ_NQ==
    Found 2025-12-21 by HttpPlugin
    Create report
673345.com*.118548.com943678.com*.725234.com*.837456.com*.943678.com*.879234.com*.2424567.com*.948456.com945456.com948456.com118548.com*.945456.com*.9393123.com690345.com879234.com*.690345.com725234.com837456.com467444.com*.673345.com*.467444.com897456.com*.925345.com927234.com*.655234.com*.626345.com*.795234.com795234.com*.675234.com655234.com*.954345.com*.927234.com*.866789.com866789.com879345.com*.978234.com*.949345.com954345.com*.58158.com492123.com*.895345.com*.492123.com2130123.com895345.com949345.com*.897456.com925345.com626345.com58158.com*.807234.com807234.com975456.com*.694456.com*.857345.com*.865456.com*.725345.com694456.com978234.com*.879345.com675234.com725345.com*.49069.com*.975456.com857345.com2424567.com960234.com*.2130123.com787234.com546678.com225789.com*.813234.com*.960234.comhz949.com*.225789.com665234.com*.665234.com815234.com*.493123.com49069.com865456.com*.948345.com*.894456.com948345.com*.hz949.com*.815234.com*.546678.com493123.com813234.com*.787234.com894456.com*.767345.com924345.com767345.com*.924345.com9393123.com
Fingerprint:
7139a64fa69dc0631e1d7eaa47f4e6fd5566ae44fdc5482a34968b6974069266
CN:
673345.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-04-07 00:00
Not after:
2026-05-06 23:59
5858345.com963234.cc467444.cc815234.ccwww.118548.com2424567.men673345.ccwww.493123.ccwww.4141234.com118548.com837234.comwww.2525678.comwww.815234.ccwww.493123.comwww.492123.com2424567.cc467444.com675234.ccwww.2626789.comwww.633234.com4545678.cc673345.com492123.vip493123.vip949345.ccwww.837234.ccwww.963234.com815234.menwww.626345.com963234.comwww.675234.comwww.675234.ccwww.949345.com5858345.vipwww.978234.comwww.815234.menwww.673345.cc837234.ccwww.492123.vip492123.comwww.467444.comwww.5858345.comwww.949345.cc493123.cc949345.comwww.673345.comwww.493123.men626345.com945234.com633234.com807234.com675456.com493123.menwww.633234.cc2626789.comwww.694456.com492123.menwww.603234.comdh.492123.ccwww.2424567.menwww.675456.com694456.com978234.com633234.cc675234.com2525678.com4141234.comwww.5858345.vipwww.807234.com2424567.com813234.ccdh.493123.cc492123.ccwww.945234.comwww.4545678.ccwww.492123.ccwww.2424567.comwww.815234.comwww.813234.comwww.963234.cc4545678.com603234.com815234.comwww.837234.comwww.467444.ccwww.493123.vipwww.813234.cc813234.com493123.comwww.492123.menwww.4545678.comwww.2424567.cc
Fingerprint:
ad9fb487321498ca8ded298397dc6b79902160436a05f1c4c3f03600cb8f028c
CN:
5858345.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-09-13 00:00
Not after:
2026-10-12 23:59
joyride.exchangeyolo.trade*.joyride.exchange*.yolo.trade
Fingerprint:
bb89a7aca1ff636999565ca60554b40d0efb48e707057ec76e20703396a5ea86
CN:
joyride.exchange
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-10-20 00:00
Not after:
2026-11-18 23:59
*.site.arboimoveis.com.br
Fingerprint:
74df992b734ed5c79a45e3bc52bcbc0a663854446390dd312f68c3a42719d9b0
CN:
*.site.arboimoveis.com.br
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-05-24 00:00
Not after:
2026-06-22 23:59
mta-sts.dsaauctions.comdsaauctions-com.mta-sts.tech
Fingerprint:
4d966d41a82713f90d55b2a6ca680eef0f2b14f231ce2eef770aba2a8e5fdcc6
CN:
mta-sts.dsaauctions.com
Key:
RSA-2048
Issuer:
ZeroSSL RSA Domain Secure Site CA
Not before:
2025-10-30 00:00
Not after:
2026-01-28 23:59
status.retarus.io
Fingerprint:
a30858a2190174ad0d76a2c0f141265fba301180641da3575248e877777bced9
CN:
status.retarus.io
Key:
RSA-4096
Issuer:
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Not before:
2025-10-24 00:00
Not after:
2026-11-24 23:59
www.hcdforwash.orghcdforwash.org
Fingerprint:
ff133f47b84b01ea4d4141275b949edbe302984aac084576f8017f98996ef8e4
CN:
hcdforwash.org
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-08-09 00:00
Not after:
2026-09-07 23:59
10-bridge-street.web.getequiem.com1776-peachtree.web.getequiem.com2-4-dawn-fraser.web.getequiem.com2-4dawnfraser.dexuscommunity.com275-grove.web.getequiem.com400-george2.web.getequiem.com400george.cromwellconnect.com.auai-campus.web.getequiem.comapp.sancroftlondon.co.ukcanada-water.web.getequiem.commy.canadawater.co.ukmy.norton-folgate.co.ukmy1776peach.commy275grove.comnorton-folgate.web.getequiem.comregents-wharf.web.getequiem.comregentswharf.approbinsons-summit2.web.getequiem.comsancroft.web.getequiem.comscaling-spaces.web.getequiem.comseine-avenue.web.getequiem.comstorey.web.getequiem.comtenbridgestreet.comwork-ready.web.getequiem.comwww.my1776peach.com
Fingerprint:
bd9edc2ce0e355e61d741af0127d4d48902b034021d0b87cee111be0dbddbfa5
CN:
canada-water.web.getequiem.com
Key:
RSA-2048
Issuer:
R12
Not before:
2025-12-13 23:02
Not after:
2026-03-13 23:02
csreainsurance.com*.csreainsurance.com
Fingerprint:
e56fa9c02f5fbc262c9aa90d5b8f446ffc69f7a18e250be41c6c9ec4e2cc5602
CN:
csreainsurance.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-07-14 00:00
Not after:
2026-08-12 23:59
us5time.comfreshealthy.orgaerobilet.co.ukweleatherjacket.comhealthyroutinecares.comallseasonshealth.co.ukfat-burning-supplements.net
Fingerprint:
69ef502d88aaa001cc1ceccc798a91ccb1efec4b5093c9b59290e621abef6756
CN:
us5time.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-07-17 00:00
Not after:
2026-08-15 23:59
*.retreat.orases.comretreat.orases.com
Fingerprint:
e6d83704f5a2aaf6bbf44273b21a841f83d275c7d7671b9cdcdf014e60e47c52
CN:
*.retreat.orases.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-08-22 00:00
Not after:
2026-09-20 23:59
thevoleongroupvip.comvoleongroupapp.com*.voleongroupvip.comvoleongroupvip.comsmarttradinggroup.click*.thevoleongroupvip.com*.smarttradinggroup.click*.voleongroupapp.com
Fingerprint:
dbfc43310a386bfbe01abbad74dd7f5f0d0e76b3a6961a61f77baad378724126
CN:
thevoleongroupvip.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M01
Not before:
2025-10-23 00:00
Not after:
2026-11-21 23:59
*.d2sup2t3m0ebhg.amplifyapp.comd2sup2t3m0ebhg.amplifyapp.com
Fingerprint:
8f4e39d3a06e5238090963390638200c64ae7ecb0e9e189ed843bc63682c8136
CN:
*.d2sup2t3m0ebhg.amplifyapp.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-11-30 00:00
Not after:
2026-12-28 23:59
Domain summary

ywgu1e2fwiy.xyz 1 0xfl0dtitb4.xyz 1 jyj1ejlpsvq.xyz 1 j1cs2n3ju92.xyz 1 www.hcdforwash.org 3 csreainsurance.com 1 mbimobiliairia.site.arboimoveis.com.br 0 d2xeq437i1si8m.amplifyapp.com 0 admin.sandbox.upland.me 0 mta-sts.dsaauctions.com 1 d1n7i9l31lr1ti.amplifyapp.com 0 status.retarus.io 0 866789.com 1 my275grove.com 1 694456.com 1 d1757i.offib.com 0 weleatherjacket.com 1 m3s-sta.fmbt.io 0 1.org 0 retreat.orases.com 0 voleongroupapp.com 1 d2sup2t3m0ebhg.amplifyapp.com 0 yolo.trade 0 www.837234.cc 0 www.467444.com 0 978234.com 1

26 recorded

© 2026 LeakIX v2.0.49
About LeakIX - Credits - Take-down and blacklist requests - Security issues - Terms and conditions - Cookie policy - Legal notice