Host 65.9.175.70
United States
AMAZON-02
Ubuntu
Software information

Acadle

tcp/443

AmazonS3 AmazonS3

tcp/443 tcp/80

Apache Apache

tcp/443 tcp/80

AtlassianEdge

tcp/443

CloudFront

tcp/443 tcp/80

Microsoft-IIS Microsoft-IIS 10.0

tcp/443

cloudflare cloudflare

tcp/443

nginx nginx

tcp/443 tcp/80

nginx nginx 1.22.1

tcp/443

nginx nginx 1.28.0

tcp/443

nginx nginx 1.21.6

tcp/443

openresty openresty

tcp/443

  • Apache server-status page is publicly available
    First seen 2024-10-09 04:15
    Last seen 2026-01-17 00:12
    Open for 464 days

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae43876b4f

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 17-Jan-2026 00:12:55 UTC
Restart Time: Tuesday, 16-Dec-2025 06:43:44 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  31 days 17 hours 29 minutes 11 seconds
Server load: 1.13 0.74 0.63
Total accesses: 663839 - Total Traffic: 2.2 GB - Total Duration: 59405183
CPU Usage: u35.75 s49.03 cu162.58 cs107.54 - .0129% CPU load
.242 requests/sec - 866 B/second - 3578 B/request - 89.4873 ms/request
2 requests currently being processed, 48 idle workers
____________________W_________________________K___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0248610/846/13315_
9.011161212129250.02.8945.19
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0248610/967/13261_
9.002961311704120.03.3545.19
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0248610/886/13304_
9.003739111424140.02.9545.37
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0248610/913/13240_
9.01551210234950.03.0245.15
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0248610/875/12810_
9.004161210437090.02.8543.97
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0248610/824/13248_
8.99495012518310.02.8544.88
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0248610/924/13640_
8.997874512752210.03.0346.35
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bfab64a053e68

0-0248610/893/12655_
8.99820110507090.03.0742.61
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0248610/903/13679_
8.997263512438770.03.0646.56
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4bcafc53cfbaa

0-0248610/839/13250_
8.99699410743680.02.7145.02
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0248610/985/13345_
8.996674911540710.03.4746.50
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bbce6a8833e07

0-0248610/825/13121_
9.00364011856800.02.7844.93
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0248610/842/12767_
8.995771311301670.02.8643.73
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

0-0248610/1058/13759_
8.994761311690930.03.5746.71
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0248610/846/13754_
8.995361212379090.02.9546.92
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0248610/817/13165_
9.003271411151250.02.8745.11
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

0-0248610/901/12989_
9.012361312042880.02.9044.08
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0248610/909/13729_
9.011761212562950.03.0946.63
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0248610/828/13197_
9.0180212622830.02.7845.17
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0248610/877/13188_
8.996075012521890.03.1245.45
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0dffacba20a55

0-02486129/934/13471W
9.0100123882946.63.1345.97
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /server-status HTTP/1.1

0-0248610/839/13060_
8.998961213019150.02.8144.19
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0248610/883/12721_
8.998474110471730.03.0343.23
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9fe2e0aeefcaf

0-0248610/882/13183_
8.989561215504900.02.8144.75
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0248610/784/13538_
8.97976010974490.02.6446.10
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0247310/960/13499_
9.461273912192400.03.1945.97
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0f2245b6b557b

1-0247310/896/13594_
9.46992413079040.02.9145.56
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0247310/899/13681_
9.462474312153910.03.0846.40
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fe20ba94a932e

1-0247310/900/13048_
9.461874711044180.02.9444.48
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2ac35f56234d3

1-0247310/811/12761_
9.463074511144500.02.6443.40
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_18c35bfe0d595

1-0247310/968/13364_
9.463353911739440.03.2946.06
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0247310/921/13065_
9.463561311857230.03.1945.21
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0247310/858/12943_
9.453763412161930.02.8944.13
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0247310/1017/13909_
9.43871111664000.03.4447.78
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0247310/841/13306_
9.437161211843490.02.7745.64
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0247310/830/12793_
9.437761211392520.02.7143.77
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0247310/977/13166_
9.43673211664890.03.4444.93
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0247310/819/13079_
9.445474312135630.02.6545.05
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3f2aa213e7c8b

1-0247310/1089/13014_
9.43803111831760.03.7144.36
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0247310/926/13233_
9.446561210488590.03.1345.15
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0247310/998/13167_
9.444873711619060.03.4145.24
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5c049c985ec67

1-0247310/1027/13349_
9.46673512499790.03.4445.68
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4b04a786348aa

1-0247310/920/13301_
9.439073411594610.03.3145.68
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e739c7937011b

1-0247310/982/13387_
9.439673512308010.03.2446.10
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_309c1defe4441

1-0247310/941/13402_
9.438361211292150.03.1345.56
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.c
      Found on 2026-01-17 00:12

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae917a790b

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 09-Jan-2026 20:27:31 UTC
Restart Time: Tuesday, 16-Dec-2025 06:43:44 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  24 days 13 hours 43 minutes 46 seconds
Server load: 0.73 0.59 0.60
Total accesses: 454007 - Total Traffic: 1.5 GB - Total Duration: 42352461
CPU Usage: u24.24 s36.31 cu116.5 cs75.85 - .0119% CPU load
.214 requests/sec - 772 B/second - 3613 B/request - 93.2859 ms/request
1 requests currently being processed, 49 idle workers
________________________W_________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0233140/417/9057_
4.3561348663590.01.3830.88
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f5395dcd73582

0-0233140/376/8939_
4.35631128203750.01.2930.80
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0233140/319/9055_
4.346793018415020.01.0531.56
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0233140/374/9132_
4.3470137576690.01.3131.72
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1718119359a64

0-0233140/447/8979_
4.3853357655990.01.4131.39
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0233140/419/9107_
4.3626848503120.01.3830.94
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0233140/607/9456_
4.36462378573350.02.1432.66
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a8acf6e2494e6

0-0233140/484/8726_
4.3553938148020.01.5729.75
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2894c56ecf15a

0-0233140/501/9234_
4.3556948911020.01.7731.80
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0233140/588/9131_
4.3549747978670.02.0931.52
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0233140/484/9012_
4.35522358611070.01.7731.59
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_418d196af3927

0-0233140/441/9138_
4.35588118998070.01.5431.61
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Flowth

0-0233140/347/8777_
4.3644257959850.01.1930.24
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0233140/365/9282_
4.3640628525000.01.2632.10
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0233140/415/9427_
4.3637538937060.01.4832.33
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0233140/366/9182_
4.36342468342820.01.2431.76
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_430f7ee04eba2

0-0233140/386/8781_
4.3631048282230.01.2530.37
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0233140/362/9421_
4.37222359137590.01.2332.16
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5fba5f8001fa2

0-0233140/357/9263_
4.362493628403740.01.1832.02
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0233140/373/9163_
4.3720149104180.01.2631.60
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0233140/348/9228_
4.3714649010310.01.1331.75
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0233140/363/8965_
4.3711238545320.01.1630.74
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2df4d5bb33a2b

0-0233140/371/8672_
4.3891147689240.01.2129.63
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0233140/393/9122_
4.38661079924660.01.3331.36
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-02331422/398/9349W
4.380081516930.71.3132.06
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /server-status HTTP/1.1

1-0232440/353/8977_
4.5020838276060.01.2131.05
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7c40c4fbd361d

1-0232440/343/9122_
4.5024228691260.01.1531.23
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d5a0128ff30bf

1-0232440/395/9434_
4.5025848042050.01.3732.34
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0232440/320/8867_
4.5029747920540.01.0630.78
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0232440/373/8836_
4.5032558126270.01.2130.52
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0232440/601/8966_
4.4953348548700.02.0931.04
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0232440/361/8912_
4.50184988355240.01.2330.94
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0232440/346/8861_
4.50119348802400.01.1630.57
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0232440/343/9433_
4.50102408351200.01.1432.38
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_af869db9b0f7b

1-0232440/433/9070_
4.505938369880.01.5631.30
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_10a3c9bd71d11

1-0232440/425/8694_
4.512848345340.01.4029.98
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0232440/415/9003_
4.508058219460.01.3830.98
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0232440/390/9044_
4.4771438760560.01.4431.30
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e7c40fa0d0a56

1-0232440/467/8709_
4.47691138733700.01.6929.90
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0232440/492/8965_
4.4765837740590.01.7330.98
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_31d539b375abe

1-0232440/430/8983_
4.4762348364180.01.4231.24
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0232440/368/9247_
4.48588119222030.01.2631.95
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Flowth

1-0232440/528/9049_
4.4948548270040.01.7931.01
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0232440/540/9193_
4.48582439006870.01.8431.65
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_847fde53b6159

1-0232440/578/9240_
4.4855658052750.0
      Found on 2026-01-09 20:27

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abaea7c24592

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 02-Jan-2026 17:22:50 UTC
Restart Time: Tuesday, 16-Dec-2025 06:43:44 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  17 days 10 hours 39 minutes 6 seconds
Server load: 0.32 0.51 0.67
Total accesses: 312286 - Total Traffic: 1.0 GB - Total Duration: 30228847
CPU Usage: u21.1 s28.03 cu75.97 cs50.21 - .0116% CPU load
.207 requests/sec - 746 B/second - 3600 B/request - 96.7986 ms/request
1 requests currently being processed, 49 idle workers
______________________________________________W___..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0114410/490/6237_
6.1265736084820.01.6521.24
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0114410/406/5973_
6.126911395703550.01.4020.53
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0114410/572/6521_
6.153015648210.01.9322.81
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1

0-0114410/622/6435_
6.12722405661820.02.1722.22
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_eebeaf2e8ed7e

0-0114410/498/5869_
6.1414335338240.01.7720.54
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0114410/665/6069_
6.1411196005970.02.3720.58
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0114410/517/6381_
6.1263626041180.01.7821.78
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0114410/502/5871_
6.1261515965602580.01.7319.94
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0114410/642/6331_
6.12542366244130.02.3221.62
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2819c60cc4d9d

0-0114410/527/6038_
6.1256935707150.01.7920.59
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0114410/568/6310_
6.1259415386420380.01.9421.96
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0114410/551/6307_
6.1250631216316360.01.9721.77
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0114410/648/6106_
6.1249225754270.02.2820.96
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d287626930435

0-0114410/639/6532_
6.1244663386025620.02.1822.54
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0114410/501/6549_
6.1247086083810.01.7722.28
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0114410/623/6532_
6.1248130956181890.02.2022.51
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0114410/461/5985_
6.1242135897400.01.5920.78
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0114410/635/6603_
6.123871465892620.02.3022.44
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0114410/588/6267_
6.13362366194900.02.1021.58
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d8c69a67a9197

0-0114410/597/6382_
6.1331427000990.02.2021.83
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_849ce8b5f4fe8

0-0114410/625/6301_
6.133011146661930.02.2421.48
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_74a879a5bfb3c

0-0114410/569/6188_
6.1328386341490.02.0221.28
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0114410/506/6068_
6.13241435405550.01.7620.79
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_efd896fcf8492

0-0114410/517/6131_
6.1320127141630.01.8020.88
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ad87706e65f60

0-0114410/612/6399_
6.14171105625450.02.1321.75
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0114080/558/6136_
6.1965026081650.01.9921.31
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a9f80ed43605a

1-0114080/621/6346_
6.18710106253380.02.2821.81
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0114080/589/6536_
6.1962035749480.02.0922.47
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_01eaf08eabe51

1-0114080/691/6020_
6.19601375781230.02.3920.95
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8b44275cfdfc0

1-0114080/641/5864_
6.1957421715764270.02.2820.13
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0114080/484/6144_
6.1955646124500.01.6721.32
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0114080/602/5931_
6.1953095872450.02.1420.43
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0114080/520/6075_
6.1947430856331760.01.8221.01
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0114080/692/6720_
6.194991296158300.02.4223.06
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0114080/643/6237_
6.1946444856011810.02.3121.49
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0114080/527/6114_
6.1948630846127260.01.8321.13
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0114080/539/6325_
6.2041186041050.01.8921.74
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0114080/503/6263_
6.19431276055490.01.8021.61
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0114080/479/6046_
6.2035186468560.01.6720.60
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0114080/431/6086_
6.2038145500410.01.4820.94
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0114080/440/6301_
6.2030725717150.01.5921.97
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2659ce416e805

1-0114080/636/6552_
6.2025136318910.02.2422.59
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b575a3f255d68

1-0114080/406/6185_
6.2029195658210.01.4021.08
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0114080/605/6315_
6.2023095884380.02.2021.46
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0114080/478/6328_
6.20182305762270.01.6921.79
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-
      Found on 2026-01-02 17:22

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abaeb2b51d4c

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 26-Dec-2025 21:25:25 UTC
Restart Time: Tuesday, 16-Dec-2025 06:43:44 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  10 days 14 hours 41 minutes 41 seconds
Server load: 1.02 0.73 0.77
Total accesses: 203076 - Total Traffic: 697.9 MB - Total Duration: 16675150
CPU Usage: u20.23 s22.57 cu44.23 cs29.04 - .0127% CPU load
.221 requests/sec - 798 B/second - 3603 B/request - 82.1129 ms/request
1 requests currently being processed, 49 idle workers
___________________________________________W______..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0128410/949/4183_
9.877601104020460.03.3314.31
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0128410/1013/4146_
9.8769333454290.03.4314.32
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0128410/1180/4277_
9.87745123105430.04.1315.07
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0128410/1005/4117_
9.8765953174120.03.3814.25
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cf162a6204759

0-0128410/944/3815_
9.87577372865140.03.2013.26
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7cbb924f56fe3

0-0128410/1002/3882_
9.8761543445760.03.3313.17
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0128410/993/4146_
9.87517383547670.03.3414.13
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9d5917592c5cb

0-0128410/884/3703_
9.874921553126730.02.9512.54
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0128410/936/4034_
9.87481983526410.03.1513.82
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0128410/813/3883_
9.87552122967180.02.7213.35
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/core/frontpage_welcome.php HTTP/1.1

0-0128410/762/4101_
9.88446123661870.02.6614.36
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0128410/898/4112_
9.88397363313260.03.0914.13
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dfa1f752ade4d

0-0128410/822/3905_
9.88337433417670.02.7913.48
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_525dd7187bfae

0-0128410/1012/4142_
9.8829043138040.03.4714.39
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0128410/983/4179_
9.88265123429810.03.2214.24
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0128410/882/4157_
9.882431073340440.02.9214.43
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0128410/851/3882_
9.88206123170660.02.8313.59
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0128410/869/4245_
9.8912233853540.02.8814.23
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d24a05808c558

0-0128410/798/4034_
9.8915433435720.02.7614.01
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_af9708f48fb48

0-0128410/961/4346_
9.894833238860.03.2214.96
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dd35497945e39

0-0128410/921/3957_
9.8985123094320.03.0413.66
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0128410/1042/4098_
9.8918633185930.03.5314.04
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c9493070b7c6c

0-0128410/870/4037_
9.8925122953530.02.8013.75
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0128410/994/4057_
9.87806123505120.03.3113.71
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0128410/1055/4168_
9.8682942772910.03.6213.97
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0128700/953/3992_
9.79505123057650.03.1313.88
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0128700/895/4231_
9.7917133509830.03.0214.45
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4c92f1a22aa89

1-0128700/1078/4360_
9.8037473140190.03.6014.94
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a376f00ae623d

1-0128700/947/3889_
9.805853455920.03.3013.71
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0128700/836/3755_
9.79276453504770.02.9212.83
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4e00590096a93

1-0128700/1049/4115_
9.8096333601170.03.5914.37
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3d444e3896e57

1-0128700/885/3813_
9.79457393013030.03.0113.17
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_483a6b04ceef1

1-0128700/793/3906_
9.7948442887090.02.6513.36
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0128700/1013/4309_
9.7859303288360.03.3014.85
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

1-0128700/832/3853_
9.78565123036540.02.7613.18
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0128700/992/3971_
9.7952943579660.03.3413.79
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7134b02d5fb5f

1-0128700/816/4084_
9.79386123711520.02.6614.01
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0128700/955/3869_
9.7924953490220.03.2413.21
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0128700/930/3981_
9.794251793636820.03.1013.64
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0128700/775/3847_
9.79217363157380.02.6413.32
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_22fd6008de04e

1-0128700/1035/4226_
9.7772333559010.03.4514.87
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f61ea8c5fd050

1-0128700/948/4382_
9.80146124048980.03.2215.23
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0128700/800/4097_
9.7919933014520.02.6314.17
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_967128f175303

1-01287026/1019/4119W
9.810031010532.23.2413.87
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /server-status HTTP/1.1

1-0128700/943/4161_
9.79325133147040.03.2014.34
127.0.0.1http/1.1
      Found on 2025-12-26 21:24

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae1feb292e

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 24-Dec-2025 23:31:07 UTC
Restart Time: Tuesday, 16-Dec-2025 06:43:44 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  8 days 16 hours 47 minutes 23 seconds
Server load: 0.79 0.58 0.64
Total accesses: 164940 - Total Traffic: 568.0 MB - Total Duration: 13801553
CPU Usage: u9.27 s14.12 cu44.23 cs29.04 - .0129% CPU load
.219 requests/sec - 792 B/second - 3610 B/request - 83.6762 ms/request
1 requests currently being processed, 49 idle workers
_______________W__________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0128410/174/3408_
2.02499353130520.00.5411.53
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b52fbd1ed6e2a

0-0128410/164/3297_
2.0246952823850.00.5211.41
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0128410/185/3282_
2.02453322526100.00.5811.53
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0128410/176/3288_
2.02439372567260.00.5511.43
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_63378f9e6d218

0-0128410/146/3017_
2.03368122391430.00.4710.53
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0128410/166/3046_
2.0239272970730.00.5210.36
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0128410/191/3344_
2.033251352977980.00.6011.38
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0128410/145/2964_
2.03307342559390.00.4610.05
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_56ebefd458342

0-0128410/193/3291_
2.0326833146810.00.6011.28
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dce276080a0ae

0-0128410/157/3227_
2.03247122515650.00.4911.12
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0128410/141/3480_
2.0322933273730.00.4612.16
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_177b00ad26006

0-0128410/177/3391_
2.03199372709990.00.5611.60
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_99993a30373bf

0-0128410/175/3258_
2.03139352615150.00.5911.28
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fb9e9f617f46d

0-0128410/217/3347_
2.039032542520.00.6911.61
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a9c9b4857bb33

0-0128410/207/3403_
2.043912794660.00.5811.60
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1

0-01284131/184/3459W
2.040028067851.50.5512.06
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /server-status HTTP/1.1

0-0128410/194/3225_
2.0168642592660.00.6111.37
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0128410/166/3542_
2.0166033001580.00.5211.87
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_355ede879501e

0-0128410/168/3404_
2.0164742817030.00.5311.78
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_06bf44ff649a5

0-0128410/185/3570_
2.0162532738860.00.5612.31
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b3b937c604a56

0-0128410/179/3215_
2.01608122571060.00.5911.21
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0128410/163/3219_
2.0158462443530.00.5211.03
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0128410/162/3329_
2.01559352554440.00.5111.45
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_46cdc5ef692aa

0-0128410/179/3242_
2.02523372790610.00.5710.97
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0128410/183/3296_
2.025141042371540.00.5710.91
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0128700/215/3254_
1.9833242617790.00.6811.43
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7f173bdd2d30c

1-0128700/148/3484_
1.992652738240.00.4711.90
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0128700/180/3462_
1.98591292585170.00.5711.91
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0128700/147/3089_
1.9765342722910.00.4910.91
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0128700/175/3094_
1.99128122937720.00.5810.50
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0128700/202/3268_
1.976321623067770.00.6511.43
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0128700/169/3097_
1.9929432431020.00.5510.71
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0128700/158/3271_
1.9931532491070.00.4911.20
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a3cdc7f6d87d0

1-0128700/188/3484_
1.9837632673070.00.5912.14
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_22dfcddba7715

1-0128700/178/3199_
1.98427122585820.00.5710.99
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0128700/149/3128_
1.9844733019030.00.4610.91
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f9abbbeed94b1

1-0128700/159/3427_
1.9925833101420.00.5011.85
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8324cc03733df

1-0128700/189/3103_
1.99187152944750.00.6510.61
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0128700/151/3202_
1.99237273066200.00.5011.04
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0128700/156/3228_
1.9979332681430.00.4911.18
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7bbe4123029f6

1-0128700/163/3354_
1.98548122979180.00.5211.94
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0128700/166/3600_
1.991602981620.00.5212.53
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /graphql/api HTTP/1.1

1-0128700/166/3463_
1.9766742595370.00.5312.07
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0128700/153/3253_
1.97619402764510.00.5011.12
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bcb1ede51d190

1-0128700/167/3385_
1.9920642589490.00.531
      Found on 2025-12-24 23:30

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae48642def

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 23-Dec-2025 01:27:22 UTC
Restart Time: Tuesday, 16-Dec-2025 06:43:44 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  6 days 18 hours 43 minutes 37 seconds
Server load: 0.44 0.73 0.75
Total accesses: 133131 - Total Traffic: 461.7 MB - Total Duration: 11445639
CPU Usage: u18.26 s17.96 cu24.69 cs16.17 - .0132% CPU load
.227 requests/sec - 826 B/second - 3636 B/request - 85.9728 ms/request
1 requests currently being processed, 49 idle workers
________________________W_________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-097720/924/2758_
10.55813382609700.03.099.34
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fd4903588b39d

0-097720/906/2675_
10.5893442372880.03.159.37
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_14ce56d29cdaa

0-097720/862/2584_
10.5833452138790.02.919.12
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_935077b7c9be2

0-097720/956/2616_
10.55982132148860.03.249.14
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097720/877/2302_
10.57213411803150.03.158.06
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_02a83918bd158

0-097720/851/2485_
10.572281692557360.02.908.47
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2gWDoT

0-097720/996/2640_
10.56682132448530.03.489.08
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097720/900/2394_
10.55873372191940.03.058.12
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-097720/838/2586_
10.55933432653500.02.978.97
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b62e022b43af7

0-097720/941/2590_
10.5572712099600.03.329.05
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-097720/977/2934_
10.5666522567910.03.4210.34
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_efcdf6869ddc2

0-097720/968/2797_
10.55699152358330.03.249.63
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

0-097720/1088/2693_
10.55753472220020.03.769.38
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9eb73a2351572

0-097720/944/2675_
10.5665502101680.03.359.34
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-097720/988/2710_
10.57502132389590.03.429.38
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097720/1040/2839_
10.56562132289410.03.7410.04
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097720/964/2521_
10.57393352009640.03.368.76
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_334174adb6521

0-097720/921/2884_
10.56622142540470.03.129.75
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097720/1019/2834_
10.57453472428440.03.519.86
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_515a08a6a7f3e

0-097720/1123/2874_
10.57273482307310.03.939.85
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_135d2fde996e8

0-097720/1030/2650_
10.5736652136310.03.519.32
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-097720/1062/2622_
10.57322152018920.03.549.06
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097720/1091/2716_
10.5722822124310.03.699.44
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_482237091f6c4

0-097720/1016/2621_
10.57153382315420.03.578.96
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5b5aead73f407

0-0977220/1026/2655W
10.580017874724.23.508.81
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /server-status HTTP/1.1

1-097420/920/2569_
10.70726512144830.03.299.10
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-097420/974/2878_
10.70693402278700.03.389.90
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_092d5077d234a

1-097420/990/2807_
10.69802132105130.03.449.65
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-097420/921/2492_
10.69862142328230.03.308.87
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-097420/883/2502_
10.69922382533190.03.008.55
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1b8821bc107d7

1-097420/959/2581_
10.69993362465710.03.399.10
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_eb2ec9bc20943

1-097420/935/2522_
10.70633392028650.03.308.80
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c80e969ba65c1

1-097420/971/2688_
10.70665102065280.03.419.28
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Flowth

1-097420/944/2899_
10.706651862261760.03.2910.21
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2PMzkM

1-097420/881/2589_
10.71382132209890.03.038.99
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-097420/804/2567_
10.70573362620430.02.789.02
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a4fb867b4c356

1-097420/970/2754_
10.71442132594010.03.529.68
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-097420/929/2427_
10.71469462454510.03.208.22
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-097420/969/2575_
10.71333422668860.03.418.89
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_932123c7c8439

1-097420/920/2617_
10.70513452192730.03.299.13
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5d7fdd6320edd

1-097420/993/2688_
10.72262132408500.03.649.66
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-097420/1149/2985_
10.72286152501080.04.0610.50
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

1-097420/1067/2779_
10.72202142077640.03.719.75
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-097420/915/2677_
10.7222812221850.03.219.30
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-097420/950/2699_
10.7222822124420.03.279.38
127.0.0.1http/1.1ip
      Found on 2025-12-23 01:26

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae03d83ea2

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 20-Dec-2025 14:59:16 UTC
Restart Time: Tuesday, 16-Dec-2025 06:43:44 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  4 days 8 hours 15 minutes 31 seconds
Server load: 0.28 0.43 0.51
Total accesses: 91118 - Total Traffic: 315.4 MB - Total Duration: 8108698
CPU Usage: u5.04 s7.73 cu24.69 cs16.17 - .0143% CPU load
.243 requests/sec - 881 B/second - 3629 B/request - 88.9912 ms/request
1 requests currently being processed, 49 idle workers
_________________________________________W________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-097720/123/1957_
1.4530641837910.00.396.65
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-097720/111/1880_
1.45327381736450.00.456.66
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f261097f6b341

0-097720/138/1860_
1.453651251624870.00.486.70
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-097720/109/1769_
1.44376141610750.00.346.24
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097720/119/1544_
1.44426401190430.00.435.34
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-097720/113/1747_
1.44447411905160.00.355.92
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f2ef774ff09cf

0-097720/180/1824_
1.45207361806440.00.666.26
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6f2476fbcda11

0-097720/146/1640_
1.45256131656590.00.475.54
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097720/125/1873_
1.4517451917760.00.436.43
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-097720/124/1773_
1.45135371429000.00.426.15
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_613e8fba7eadc

0-097720/121/2078_
1.42927491974840.00.437.35
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9e2a92216badc

0-097720/135/1964_
1.4527391661860.00.456.83
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_92ca9aacf82ff

0-097720/138/1743_
1.4587461663900.00.426.04
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ab0cb789ed59c

0-097720/118/1849_
1.4287421499060.00.406.39
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-097720/124/1846_
1.42856131623400.00.396.35
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097720/116/1915_
1.42807431693940.00.366.66
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_280f2698c374c

0-097720/125/1682_
1.427891671480620.00.415.81
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-097720/95/2058_
1.42736131842960.00.306.93
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097720/135/1950_
1.43676141690660.00.476.82
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097720/112/1863_
1.43627501615110.00.376.29
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dea8fdf14cdee

0-097720/101/1721_
1.43616141421040.00.416.22
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097720/158/1718_
1.43576111379210.00.465.99
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://lowtherhall

0-097720/155/1780_
1.43507471463570.00.506.26
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_79f2ed125ed81

0-097720/109/1714_
1.43555441475390.00.395.79
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ac52a06392dd1

0-097720/113/1742_
1.434941271197330.00.395.69
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-097420/106/1755_
1.54387401487850.00.356.15
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b1d726a275649

1-097420/109/2013_
1.54436131528320.00.356.88
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-097420/112/1929_
1.54472121541310.00.386.60
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://lowtherhall

1-097420/142/1713_
1.54496141642220.00.546.11
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-097420/133/1752_
1.54567791921240.00.476.01
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2c9fa57a9a57c

1-097420/125/1747_
1.545371111666250.00.436.14
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-097420/106/1693_
1.55368541407360.00.335.83
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_73356740091fb

1-097420/163/1880_
1.5535641442310.00.586.46
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-097420/140/2095_
1.56316141605120.00.527.44
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-097420/124/1832_
1.56267391593550.00.406.37
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cf0a34a4748aa

1-097420/119/1882_
1.562301061885560.00.376.62
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-097420/137/1921_
1.56147461752630.00.556.71
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4c5b58541981d

1-097420/176/1674_
1.56196131771930.00.605.63
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-097420/172/1778_
1.563511898230.00.536.01
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /?rest_route=/wp/v2/users/ HTTP/1.1

1-097420/160/1857_
1.569921685030.00.566.40
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-097420/142/1837_
1.53916161703640.00.546.56
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0974230/177/2013W
1.570017960245.20.556.99
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /server-status HTTP/1.1

1-097420/119/1831_
1.53867411420050.00.386.43
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b4660dfc11559

1-097420/96/1858_
1.5381741544520.00.356.43
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-097420/134/1883_
1.53796151619580.00.426.53
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1
      Found on 2025-12-20 14:58

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae4eee6f61

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 18-Dec-2025 15:38:04 UTC
Restart Time: Tuesday, 16-Dec-2025 06:43:44 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  2 days 8 hours 54 minutes 20 seconds
Server load: 0.37 0.74 0.73
Total accesses: 48857 - Total Traffic: 169.4 MB - Total Duration: 4681608
CPU Usage: u16.6 s12.88 cu0 cs0 - .0144% CPU load
.238 requests/sec - 867 B/second - 3635 B/request - 95.8227 ms/request
1 requests currently being processed, 49 idle workers
__________________________W_______________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0370/1134/1134_
12.05115540977070.03.893.89
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cdd20d48531e5

0-0370/1122/1122_
12.051216411080420.03.973.97
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_de82c7b578325

0-0370/979/979_
12.09160992020.03.533.53
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /graphql/api HTTP/1.1

0-0370/937/937_
12.0824413859280.03.293.29
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0370/729/729_
12.086513661940.02.482.48
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0370/913/913_
12.05109642970190.03.203.20
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a00ad8b3489d9

0-0370/886/886_
12.0796515904720.03.033.03
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0370/814/814_
12.0790515892430.02.802.80
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0370/1058/1058_
12.061008271112590.03.703.70
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0370/922/922_
12.06103553877870.03.243.24
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3ff4712cb92e1

0-0370/1284/1284_
12.07736601261260.04.534.53
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_57b6977ec8fb1

0-0370/1121/1121_
12.07795269982970.03.993.99
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2eba01df72b91

0-0370/893/893_
12.0784517909850.03.033.03
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0370/1061/1061_
12.0749646958170.03.563.56
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_030349110d284

0-0370/1002/1002_
12.0760415963780.03.513.51
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0370/1082/1082_
12.07638188982470.03.783.78
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0370/816/816_
12.0754514793330.02.822.82
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0370/1102/1102_
12.0740861110600.03.753.75
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0370/1148/1148_
12.0769751099480.04.024.02
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0370/1143/1143_
12.0736513998730.03.883.88
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0370/827/827_
12.0738755640400.02.942.94
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0370/747/747_
12.0743649651690.02.652.65
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cc86ef4fd656c

0-0370/947/947_
12.0830513889750.03.253.25
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0370/934/934_
12.0818513956470.03.153.15
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0370/973/973_
12.0812513685490.03.153.15
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0380/882/882_
11.94126137773670.03.163.16
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_27630a4d02974

1-03830/1006/1006W
11.99008270248.23.503.50
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /server-status HTTP/1.1

1-0380/1076/1076_
11.95120514970450.03.783.78
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0380/880/880_
11.9819646811630.03.093.09
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8ebab17f44ac9

1-0380/877/877_
11.9737638969660.02.992.99
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_87ab6132e3450

1-0380/930/930_
11.9731639978250.03.263.26
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_71fbcb41e06dc

1-0380/973/973_
11.997643881670.03.313.31
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cb241a11dc83d

1-0380/1024/1024_
11.95114514854430.03.523.52
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0380/1156/1156_
11.95102514863740.04.094.09
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0380/1005/1005_
11.9591551948510.03.513.51
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_35d61267da834

1-0380/1053/1053_
11.95976391041400.03.853.85
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9f3004004606a

1-0380/1031/1031_
11.951085161121920.03.553.55
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0380/863/863_
11.9578413873340.02.892.89
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0380/934/934_
11.9583549943540.03.233.23
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6cf9831bfe5b0

1-0380/962/962_
11.95855451093560.03.393.39
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ce4e73b8f6bf7

1-0380/1040/1040_
11.96725141067090.03.703.70
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0380/1064/1064_
11.97556451201330.03.643.64
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_94bddca98bdc1

1-0380/915/915_
11.9761645674800.03.103.10
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b7ca116a6bbe8

1-0380/1016/1016_
11.9766135998020.03.553.55
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0463937a88039

1-0380/1024/1024_
11.975141391101820.03.513.51
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0380/889/889_
11.974851389413
      Found on 2025-12-18 15:37

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae1d5025c5

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 16-Dec-2025 11:39:13 UTC
Restart Time: Tuesday, 16-Dec-2025 06:43:44 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  4 hours 55 minutes 29 seconds
Server load: 0.67 0.74 0.89
Total accesses: 3881 - Total Traffic: 13.7 MB - Total Duration: 387941
CPU Usage: u1.36 s1.03 cu0 cs0 - .0135% CPU load
.219 requests/sec - 808 B/second - 3692 B/request - 99.959 ms/request
1 requests currently being processed, 49 idle workers
____________________W_____________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0370/65/65_
0.89643338730.00.210.21
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0370/75/75_
0.896741448970.00.280.28
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0370/106/106_
0.896944028730.00.420.42
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0370/64/64_
0.897023963480.00.250.25
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0370/56/56_
0.878054858640.00.220.22
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d5640f87635b7

0-0370/69/69_
0.896141348970.00.270.27
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0370/86/86_
0.8956548136110.00.350.35
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_250b43696a78d

0-0370/49/49_
0.895434024660.00.160.16
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fb49c50b2b6ab

0-0370/82/82_
0.9049019139660.00.340.34
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0370/54/54_
0.90483351310.00.180.18
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b7670bb6121ee

0-0370/77/77_
0.9143414171510.00.250.25
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0370/61/61_
0.91418477460.00.240.24
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0370/69/69_
0.913741572250.00.240.24
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0370/90/90_
0.922541466980.00.270.27
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0370/77/77_
0.9132545105600.00.250.25
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9942f9d6771a3

0-0370/81/81_
0.922054276410.00.270.27
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2c68199fba7d1

0-0370/138/138_
0.9313414139100.00.490.49
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0370/107/107_
0.92169175117410.00.320.32
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0370/63/63_
0.92295335830.00.240.24
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_876ef2030318f

0-0370/104/104_
0.9450388170.00.310.31
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_82fb78359d592

0-03727/94/94W
0.9500361039.40.290.29
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /server-status HTTP/1.1

0-0370/50/50_
0.87983351870.00.200.20
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9096fe2c20399

0-0370/86/86_
0.8792538117000.00.280.28
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ad276c8fc9d3b

0-0370/92/92_
0.878654044180.00.350.35
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_06e2b4d3eb4df

0-0370/48/48_
0.887454019940.00.160.16
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5055d54638d15

1-0380/63/63_
0.9462549102620.00.250.25
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_03adda793602a

1-0380/85/85_
0.93665487550.00.340.34
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0380/70/70_
0.936854295550.00.280.28
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_45523bc926750

1-0380/67/67_
0.9370245114320.00.280.28
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0380/71/71_
0.93732382540.00.260.26
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_83de4138516f9

1-0380/116/116_
0.9385414154630.00.460.46
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0380/56/56_
0.93789364030.00.190.19
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_041bc942bbfe0

1-0380/69/69_
0.9460618246120.00.260.26
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0380/144/144_
0.945541472800.00.510.51
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0380/72/72_
0.94490149108600.00.230.23
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0380/72/72_
0.945046563220.00.230.23
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_18a2a0c6a6405

1-0380/52/52_
0.94477649980.00.170.17
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0380/58/58_
0.944401376790.00.190.19
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Flowth

1-0380/89/89_
0.943854979100.00.340.34
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4b24b411da1b9

1-0380/84/84_
0.94361466400.00.300.30
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0380/81/81_
0.952654679510.00.250.25
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_84ea1e6fee536

1-0380/65/65_
0.9531414129060.00.210.21
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0380/77/77_
0.951941495200.00.280.28
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0380/124/124_
0.95239375350.00.410.41
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1e3c304b52d82

1-0380/81/81_
0.951454655320.00.260.26
127.0.0.1http/1.1ip-10-1-90-218.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5a312c65c8841

1-0380/74/74_
0.95115763800.00.270.27
127.0.0.1http/1.1ip-10-1-9
      Found on 2025-12-16 11:38

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae4f876c82

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 12-Dec-2025 20:40:10 UTC
Restart Time: Sunday, 10-Aug-2025 22:41:01 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  123 days 21 hours 59 minutes 9 seconds
Server load: 0.30 0.62 0.82
Total accesses: 4028049 - Total Traffic: 14.5 GB - Total Duration: 858007795
CPU Usage: u136.64 s166.9 cu1155.23 cs685.07 - .02% CPU load
.376 requests/sec - 1450 B/second - 3856 B/request - 213.008 ms/request
1 requests currently being processed, 74 idle workers
_______________________________________________W________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0202520/777/52114_
9.5264594398520.02.55189.96
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0202520/1056/51201_
9.5295493620460.03.95185.32
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0202520/895/51964_
9.512013696268960.03.19188.69
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a4f44037291d5

0-0202520/730/52642_
9.5011426100537400.02.66191.78
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0202520/801/52545_
9.513213799825650.02.86189.96
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_610b9909e7c99

0-0202520/716/51434_
9.505014295250860.02.58186.57
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5cdef81026d10

0-0202520/852/51923_
9.5010901299831250.03.05188.40
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0202520/912/52198_
9.49122238102336180.03.55190.93
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a4172d565d54f

0-0202520/830/51714_
9.50629698254690.03.06189.07
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0202520/760/51969_
9.504145101157960.02.63189.77
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0202520/839/49758_
9.50830499614230.03.11181.93
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0202520/1008/51321_
9.505856102027760.03.69188.14
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_aa534d0cf98a8

0-0202520/793/53553_
9.5091013105680030.02.78193.02
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0202520/771/51442_
9.50956199070680.02.77187.07
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0202520/742/51118_
9.521214794873400.02.69187.15
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0202520/950/52433_
9.507603101609630.03.54190.38
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0202520/774/52305_
9.49139012106934530.02.76190.52
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0202520/744/51677_
9.491168096601860.02.78188.75
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /robots.txt HTTP/1.1

0-0202520/905/53310_
9.50456498249250.03.18194.88
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1639361aa13bf

0-0202520/781/50006_
9.501005394675640.02.70183.06
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_23db1cbd35e8f

0-0202520/740/50291_
9.49133820994658900.02.47182.62
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0202520/848/49778_
9.5068137102324710.03.01182.28
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_04e6e67a239bb

0-0202520/854/51384_
9.5126233100956460.03.22187.28
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_10eba02d123d6

0-0202520/833/52602_
9.511481098624160.02.97191.35
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://lowtherhall

0-0202520/786/52747_
9.4912933100486640.02.84192.94
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1d95b03a8e983

1-056130/200/44391_
1.7611024180361110.00.73159.69
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_69fb7ad9d33d3

1-056130/211/44255_
1.7611501280726710.00.77159.58
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056130/135/44327_
1.76118419783712360.00.49160.62
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-056130/149/43128_
1.7612701478110510.00.56157.41
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056130/130/43469_
1.78711582015330.00.50157.85
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056130/212/42754_
1.7610301276680620.00.78155.18
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056130/143/44394_
1.7678820383936990.00.49160.67
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-056130/139/42586_
1.768501280465700.00.50154.58
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056130/128/42744_
1.769223980655490.00.44153.97
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b7e81d5075601

1-056130/142/44147_
1.769632682925440.00.53158.79
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a7bbd443783b6

1-056130/116/45309_
1.777304782214170.00.39164.31
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f1b40fd4d2d94

1-056130/213/44417_
1.775501380157900.00.86161.49
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056130/152/44688_
1.77607383438490.00.54161.24
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_41b9255780ac7

1-056130/191/44053_
1.77652179584560.00.75159.84
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-056130/113/44847_
1.77480481487610.00.38161.66
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-056130/181/43739_
1.784301376595750.00.71156.41
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056130/250/42810_
1.7828419181702560.01.04155.48
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-056130/153/42363_
1.783701378728140.00.54152.86
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056130/125/42012_
1.78233479827910.00.44152.52
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_987930e313bee
      Found on 2025-12-12 20:39

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abaec3133cdd

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 12-Dec-2025 18:06:02 UTC
Restart Time: Sunday, 10-Aug-2025 22:41:01 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  123 days 19 hours 25 minutes 1 second
Server load: 1.16 1.27 1.11
Total accesses: 4026539 - Total Traffic: 14.5 GB - Total Duration: 857879879
CPU Usage: u136.19 s166.48 cu1155.23 cs685.07 - .02% CPU load
.376 requests/sec - 1451 B/second - 3856 B/request - 213.056 ms/request
1 requests currently being processed, 74 idle workers
_____________________________________________W__________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0202520/739/52076_
9.261750494350020.02.41189.82
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d63d5e884703c

0-0202520/1028/51173_
9.2618144593610620.03.87185.24
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a094a7305f98c

0-0202520/876/51945_
9.291343696244780.03.13188.63
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_56ba5b1785b2e

0-0202520/716/52628_
9.2612833100520630.02.62191.73
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6cff116bf4ecc

0-0202520/781/52525_
9.282996499803340.02.79189.89
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7dcabef157247

0-0202520/702/51420_
9.284943195217650.02.53186.52
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f7d71447bdd2f

0-0202520/825/51896_
9.2612148199823340.02.93188.28
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9cf67877ccc42

0-0202520/889/52175_
9.261452181102326170.03.47190.86
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0202520/817/51701_
9.286144398244730.03.02189.03
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_07d5f3e39ba10

0-0202520/739/51948_
9.2836212101143440.02.56189.70
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0202520/825/49744_
9.289031399601570.03.06181.88
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0202520/994/51307_
9.28565202102016160.03.64188.10
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0202520/761/53521_
9.2897335105643600.02.68192.93
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d9b5256cb9884

0-0202520/747/51418_
9.2710823499041590.02.70187.00
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4293befef87f9

0-0202520/722/51098_
9.2914094861260.02.60187.06
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /swagger-ui.html HTTP/1.1

0-0202520/935/52418_
9.2879438101597030.03.49190.33
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_031e2d07a916c

0-0202520/753/52284_
9.26168312106917490.02.69190.45
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0202520/735/51668_
9.2613831396590230.02.76188.72
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0202520/886/53291_
9.284231298212360.03.12194.81
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0202520/745/49970_
9.2711501494635580.02.57182.92
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0202520/727/50278_
9.2616231294648120.02.43182.58
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0202520/831/49761_
9.2872312102312250.02.95182.22
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0202520/831/51361_
9.28214119100907600.03.15187.21
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0202520/804/52573_
9.29631298603760.02.84191.22
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0202520/768/52729_
9.2615314100480880.02.79192.88
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-056130/188/44379_
1.571258380339690.00.69159.65
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0ae3c9e72835c

1-056130/194/44238_
1.5713231380720480.00.71159.53
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056130/115/44307_
1.5713945083697940.00.42160.55
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e05fdd3ccdf6a

1-056130/134/43113_
1.5715031278097170.00.51157.36
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056130/106/43445_
1.561773381990260.00.42157.77
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_27e482f5a5188

1-056130/196/42738_
1.571194476674440.00.73155.13
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b42034f8cc486

1-056130/124/44375_
1.588431283928040.00.43160.61
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056130/119/42566_
1.589144180448660.00.43154.51
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_09b403717708b

1-056130/105/42721_
1.5810224280644820.00.37153.90
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_eaecad4ac11d4

1-056130/127/44132_
1.5710943882915760.00.48158.74
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1b83288b0e569

1-056130/101/45294_
1.587333982209390.00.34164.26
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dc6a5ff8d52cc

1-056130/199/44403_
1.585431480153370.00.82161.46
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056130/131/44667_
1.58570383425220.00.47161.18
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6cbe77ad9a79d

1-056130/176/44038_
1.586631379576150.00.70159.79
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056130/101/44835_
1.584344581481630.00.34161.62
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3c70e36d1d187

1-056130/165/43723_
1.583743776584060.00.66156.36
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f6e3f1bd32cf5

1-056130/238/42798_
1.582431381692870.01.00155.45
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-056130/138/42348_
1.583134878709130.00.49152.81
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_820cba8692ef6

1-056130/108/41995_
1.581794479778890.00.39152.46
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_85e14c48d105a
      Found on 2025-12-12 18:05

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae30e1e51e

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 01-Dec-2025 07:39:50 UTC
Restart Time: Sunday, 10-Aug-2025 22:41:01 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  112 days 8 hours 58 minutes 49 seconds
Server load: 0.94 2.07 2.23
Total accesses: 3721424 - Total Traffic: 13.4 GB - Total Duration: 800434272
CPU Usage: u137.75 s158.27 cu1052.21 cs622.36 - .0203% CPU load
.383 requests/sec - 1478 B/second - 3856 B/request - 215.088 ms/request
2 requests currently being processed, 73 idle workers
_________________________.......................................
...........______W__________________.........................___
__________________W___..........................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0123850/1170/49166_
12.02613789531820.04.15179.28
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5ef2a09b6ba9f

0-0123850/1031/48005_
12.04146388274970.03.59173.26
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/wstrust/username.php HTTP/1.1

0-0123850/1059/48861_
12.01345990844360.03.71177.37
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Flowth

0-0123850/1348/49974_
12.00467194907590.04.94181.75
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0123850/1263/49562_
11.99518394193200.04.36178.96
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4e6f0c1836cf7

0-0123850/1059/48419_
11.979023989887940.04.00175.30
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5d7d1886bd8c1

0-0123850/965/48997_
12.01151095127290.03.35177.65
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0123850/1170/48748_
11.99719495952650.04.15177.58
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0123850/1115/48643_
11.997823692682640.04.09177.63
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c56b6f162cd47

0-0123850/1034/48846_
12.021111395544270.03.75178.25
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0123850/1099/46996_
11.996794794752350.03.85171.63
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0123850/1148/48338_
12.01298397369300.04.26176.88
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0123850/1122/50492_
12.0042248100129510.03.96181.80
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_632b8fda65a3e

0-0123850/1053/48649_
11.9794364093890420.03.72176.71
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0123850/1169/48385_
12.00394489966830.04.04177.00
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0123850/1343/49092_
12.012542996670760.04.61177.78
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0123850/1113/49146_
12.013383101349550.03.61178.55
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0123850/1079/48842_
11.978712592110160.03.81177.97
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_36b44ae73f01eb590

0-0123850/1153/50181_
12.01180493181810.04.30183.09
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0123850/1144/47205_
12.003511489673410.04.20172.63
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0123850/946/47440_
11.988311289442490.03.60172.11
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0123850/965/46784_
11.995621897028840.03.51171.50
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0123850/1097/48443_
11.9958695095334620.03.94175.88
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0123850/1037/49639_
11.99633293927200.03.67180.34
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0123850/1206/49671_
12.01216117396116920.03.90181.54
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9sgFLznV0S%2B%2B

1-0-0/0/42247.
0.0026147432476786180.00.00151.49
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PAsMW

1-0-0/0/42063.
0.0026147431676881860.00.00151.46
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2PIdpJ

1-0-0/0/42154.
0.0026147444880138400.00.00152.66
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_73db1e56814bf

1-0-0/0/41219.
0.0026147410174580630.00.00150.11
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0e2dd03557771

1-0-0/0/41225.
0.0026147419678667530.00.00149.41
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_74a49ee8d6a48

1-0-0/0/40765.
0.0026147432972975390.00.00147.90
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2Bdw

1-0-0/0/42336.
0.0026147433180527270.00.00152.80
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f289eb83e8c99

1-0-0/0/40371.
0.0026147436876111470.00.00146.12
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/40520.
0.0026147411276350180.00.00145.46
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/41991.
0.0026147439577851240.00.00150.62
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ad50f500e8447

1-0-0/0/43272.
0.0026147429278437790.00.00156.58
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7vGgYg

1-0-0/0/42168.
0.0026147439776741540.00.00152.82
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_65b8cc05f56af

1-0-0/0/42796.
0.0026147423579480070.00.00154.49
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSh78poUB

1-0-0/0/41815.
0.0026147438575713850.00.00151.00
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcAUPYT

1-0-0/0/42810.
0.0026147452677964210.00.00153.95
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a5abda667a9af

1-0-0/0/41894.
0.0026147439873620580.00.00149.40
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PGdIG

1-0-0/0/40665.
0.0026147432678281830.00.00147.46
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5978dfd4b722a

1-0-0/0/40351.
0.0026147432575070050.00.00145.26
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcgTgkm

1-0-0/0/39885.
0.0026147411275887400.00.00144.68
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.c
      Found on 2025-12-01 07:39

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abaeb2958332

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 29-Nov-2025 04:28:03 UTC
Restart Time: Sunday, 10-Aug-2025 22:41:01 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  110 days 5 hours 47 minutes 2 seconds
Server load: 0.38 0.86 1.17
Total accesses: 3663506 - Total Traffic: 13.2 GB - Total Duration: 791508587
CPU Usage: u120.38 s145.92 cu1052.21 cs622.36 - .0204% CPU load
.385 requests/sec - 1483 B/second - 3857 B/request - 216.052 ms/request
1 requests currently being processed, 74 idle workers
_________________________.......................................
..........._________________________.........................___
_________________W____..........................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0123850/377/48373_
3.69138388405550.01.34176.47
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0123850/320/47294_
3.68224386936780.01.07170.75
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0123850/336/48138_
3.65418289418000.01.13174.79
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0123850/383/49009_
3.61515393400170.01.40178.22
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_31e1856a00871

0-0123850/357/48656_
3.60590293088440.01.20175.79
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_50b7850e19693

0-0123850/390/47750_
3.6963188710120.01.41172.71
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0123850/281/48313_
3.68296394102990.00.95175.25
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SingleLogoutService.php?SAMLResponse=fZLJTsMwEIb

0-0123850/341/47919_
3.7022294892360.01.21174.64
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7080612511a52

0-0123850/246/47774_
3.60698491649970.00.87174.41
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0123850/255/48067_
3.6832719294256910.00.95175.45
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0123850/312/46209_
3.60672293670190.01.06168.84
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_71c6d13de6e60

0-0123850/415/47605_
3.68356296099070.01.52174.15
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d8a7a9fbf0c0e

0-0123850/348/49718_
3.61477098810750.01.25179.09
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0123850/309/47905_
3.68201392849250.01.09174.08
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a035cda1a03e2

0-0123850/456/47672_
3.63439288782900.01.60174.56
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9YztR

0-0123850/480/48229_
3.68398395618380.01.74174.92
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PCdAs

0-0123850/330/48363_
3.674052100550700.01.15176.09
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0123850/279/48042_
3.6993291108110.01.01175.17
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1b3f2f37cfbf5

0-0123850/386/49414_
3.68261392078130.01.45180.23
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2fca481a7f4f1

0-0123850/336/46397_
3.61458088484240.01.18169.62
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0123850/269/46763_
3.69165288412800.01.03169.54
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_47ad7576f8da6

0-0123850/255/46074_
3.61471295876750.00.85168.84
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f28ab702ba06f

0-0123850/305/47651_
3.61539494115080.01.08173.02
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0123850/245/48847_
3.60644292428660.00.84177.51
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f0c617d9467a1

0-0123850/312/48777_
3.68375294784810.01.06178.69
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_99fc299363a61

1-0-0/0/42247.
0.007716732476786180.00.00151.49
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PAsMW

1-0-0/0/42063.
0.007716731676881860.00.00151.46
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2PIdpJ

1-0-0/0/42154.
0.007716744880138400.00.00152.66
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_73db1e56814bf

1-0-0/0/41219.
0.007716710174580630.00.00150.11
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0e2dd03557771

1-0-0/0/41225.
0.007716719678667530.00.00149.41
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_74a49ee8d6a48

1-0-0/0/40765.
0.007716732972975390.00.00147.90
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2Bdw

1-0-0/0/42336.
0.007716733180527270.00.00152.80
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f289eb83e8c99

1-0-0/0/40371.
0.007716736876111470.00.00146.12
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/40520.
0.007716711276350180.00.00145.46
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/41991.
0.007716739577851240.00.00150.62
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ad50f500e8447

1-0-0/0/43272.
0.007716729278437790.00.00156.58
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7vGgYg

1-0-0/0/42168.
0.007716739776741540.00.00152.82
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_65b8cc05f56af

1-0-0/0/42796.
0.007716723579480070.00.00154.49
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSh78poUB

1-0-0/0/41815.
0.007716738575713850.00.00151.00
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcAUPYT

1-0-0/0/42810.
0.007716752677964210.00.00153.95
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a5abda667a9af

1-0-0/0/41894.
0.007716739873620580.00.00149.40
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PGdIG

1-0-0/0/40665.
0.007716732678281830.00.00147.46
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5978dfd4b722a

1-0-0/0/40351.
0.007716732575070050.00.00145.26
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcgTgkm

1-0-0/0/39885.
0.007716711275887400.00.00144.68
127.0.0.1http/1.1
      Found on 2025-11-29 04:27

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae9d065884

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 26-Nov-2025 03:54:51 UTC
Restart Time: Sunday, 10-Aug-2025 22:41:01 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  107 days 5 hours 13 minutes 50 seconds
Server load: 2.83 2.04 1.91
Total accesses: 3568793 - Total Traffic: 12.8 GB - Total Duration: 761432765
CPU Usage: u129.52 s148.27 cu1012.18 cs598.83 - .0204% CPU load
.385 requests/sec - 1486 B/second - 3857 B/request - 213.359 ms/request
1 requests currently being processed, 74 idle workers
................................................................
...................................._________________________...
......................_____________________________W____________
________........................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/47990.
0.00161637195987650320.00.00175.11
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_439a188fd7c00

0-0-0/0/46970.
0.00161637156186192720.00.00169.66
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4e4215b68f796

0-0-0/0/47793.
0.00161637129588577880.00.00173.63
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PClMs

0-0-0/0/48619.
0.00161637126992379240.00.00176.79
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7ed561fab8cce

0-0-0/0/48288.
0.00161637188592307320.00.00174.56
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ff2feb99e347d

0-0-0/0/47355.
0.00161637188287718400.00.00171.28
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fde6f32a15b81

0-0-0/0/48019.
0.0016163729493408510.00.00174.25
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_212f0db8f3575

0-0-0/0/47568.
0.0016163731993829750.00.00173.39
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b9efa04f9d383

0-0-0/0/47524.
0.0016163726390917270.00.00173.52
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2Bdw

0-0-0/0/47807.
0.00161637122893539040.00.00174.48
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du%2BWI

0-0-0/0/45888.
0.0016163719992741910.00.00167.75
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3802fd17a0d5d

0-0-0/0/47147.
0.00161637154895134440.00.00172.47
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bd7fbb8fa7144

0-0-0/0/49363.
0.001616371697935280.00.00177.81
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BUp

0-0-0/0/47588.
0.00161637126292075850.00.00172.96
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcAUOST

0-0-0/0/47212.
0.00161637135987979230.00.00172.94
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_51d8ccf34e4c6

0-0-0/0/47742.
0.00161637441294765940.00.00173.15
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BVx

0-0-0/0/48026.
0.0016163748699718390.00.00174.91
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4cf89193d582e

0-0-0/0/47752.
0.0016163779690210930.00.00174.13
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0-0/0/49024.
0.00161637111191262080.00.00178.77
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2daee066aeff0

0-0-0/0/46054.
0.0016163767787669560.00.00168.41
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5ab63de9302a1

0-0-0/0/46487.
0.00161637123787632480.00.00168.48
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0-0/0/45798.
0.0016163735494999860.00.00167.91
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_108ab3136d683

0-0-0/0/47320.
0.00161637107693185660.00.00171.84
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_46469b58dc517

0-0-0/0/48598.
0.0016163771091692780.00.00176.66
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0-0/0/48455.
0.00161637169593993990.00.00177.60
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_523a1396b3e4d

1-0-0/0/42236.
0.00161635178176312080.00.00151.46
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8a0d7df377d90

1-0-0/0/42053.
0.00161635142176420750.00.00151.42
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2PEPKy

1-0-0/0/42141.
0.00161635124979599340.00.00152.61
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcAcMu2

1-0-0/0/41205.
0.00161635157574162130.00.00150.06
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f0cc1030c4b5d

1-0-0/0/41200.
0.0016163551978135880.00.00149.32
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4a4622e11468b

1-0-0/0/40752.
0.00161635135072416500.00.00147.85
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdtdpWU

1-0-0/0/42323.
0.0016163541479988710.00.00152.76
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PGFgs

1-0-0/0/40318.
0.00161635104075598030.00.00145.93
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BSy

1-0-0/0/40505.
0.0016163510175815660.00.00145.40
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_01ab8482033f0

1-0-0/0/41951.
0.0016163529077310370.00.00150.47
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3b766a233c1cd

1-0-0/0/43252.
0.00161635174677962910.00.00156.51
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_607caa2987d90

1-0-0/0/42153.
0.00161635176476226650.00.00152.77
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2f4cb77039f39

1-0-0/0/42729.
0.00161635119178928120.00.00154.24
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BSx

1-0-0/0/41808.
0.00161635114775354440.00.00150.97
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9YydW

1-0-0/0/42795.
0.001616354477441960.00.00153.90
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c424497ab6912

1-0-0/0/41836.
0.00161635108573031410.00.00149.19
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d1bfbd3379f1b

1-0-0/0/40649.
0.00161635134477783480.00.00147.40
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_21c319bfdb07c

1-0-0/0/40333.
0.0016163530574571120.00.00145.20
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5b0d9f8aba375

1-0-0/0/39871.
0.00161635122875463370.00.00144.6
      Found on 2025-11-26 03:54

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae4cf6dab5

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 24-Nov-2025 14:06:05 UTC
Restart Time: Sunday, 10-Aug-2025 22:41:01 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  105 days 15 hours 25 minutes 4 seconds
Server load: 2.04 1.87 1.52
Total accesses: 3521920 - Total Traffic: 12.6 GB - Total Duration: 751186401
CPU Usage: u113.11 s138.32 cu1012.18 cs598.83 - .0204% CPU load
.386 requests/sec - 1487 B/second - 3855 B/request - 213.289 ms/request
1 requests currently being processed, 74 idle workers
................................................................
...................................._______W_________________...
......................__________________________________________
________........................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/47990.
0.0025511195987650320.00.00175.11
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_439a188fd7c00

0-0-0/0/46970.
0.0025511156186192720.00.00169.66
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4e4215b68f796

0-0-0/0/47793.
0.0025511129588577880.00.00173.63
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PClMs

0-0-0/0/48619.
0.0025511126992379240.00.00176.79
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7ed561fab8cce

0-0-0/0/48288.
0.0025511188592307320.00.00174.56
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ff2feb99e347d

0-0-0/0/47355.
0.0025511188287718400.00.00171.28
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fde6f32a15b81

0-0-0/0/48019.
0.002551129493408510.00.00174.25
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_212f0db8f3575

0-0-0/0/47568.
0.002551131993829750.00.00173.39
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b9efa04f9d383

0-0-0/0/47524.
0.002551126390917270.00.00173.52
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2Bdw

0-0-0/0/47807.
0.0025511122893539040.00.00174.48
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du%2BWI

0-0-0/0/45888.
0.002551119992741910.00.00167.75
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3802fd17a0d5d

0-0-0/0/47147.
0.0025511154895134440.00.00172.47
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bd7fbb8fa7144

0-0-0/0/49363.
0.00255111697935280.00.00177.81
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BUp

0-0-0/0/47588.
0.0025511126292075850.00.00172.96
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcAUOST

0-0-0/0/47212.
0.0025511135987979230.00.00172.94
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_51d8ccf34e4c6

0-0-0/0/47742.
0.0025511441294765940.00.00173.15
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BVx

0-0-0/0/48026.
0.002551148699718390.00.00174.91
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4cf89193d582e

0-0-0/0/47752.
0.002551179690210930.00.00174.13
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0-0/0/49024.
0.0025511111191262080.00.00178.77
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2daee066aeff0

0-0-0/0/46054.
0.002551167787669560.00.00168.41
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5ab63de9302a1

0-0-0/0/46487.
0.0025511123787632480.00.00168.48
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0-0/0/45798.
0.002551135494999860.00.00167.91
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_108ab3136d683

0-0-0/0/47320.
0.0025511107693185660.00.00171.84
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_46469b58dc517

0-0-0/0/48598.
0.002551171091692780.00.00176.66
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0-0/0/48455.
0.0025511169593993990.00.00177.60
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_523a1396b3e4d

1-0-0/0/42236.
0.0025509178176312080.00.00151.46
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8a0d7df377d90

1-0-0/0/42053.
0.0025509142176420750.00.00151.42
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2PEPKy

1-0-0/0/42141.
0.0025509124979599340.00.00152.61
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcAcMu2

1-0-0/0/41205.
0.0025509157574162130.00.00150.06
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f0cc1030c4b5d

1-0-0/0/41200.
0.002550951978135880.00.00149.32
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4a4622e11468b

1-0-0/0/40752.
0.0025509135072416500.00.00147.85
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdtdpWU

1-0-0/0/42323.
0.002550941479988710.00.00152.76
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PGFgs

1-0-0/0/40318.
0.0025509104075598030.00.00145.93
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BSy

1-0-0/0/40505.
0.002550910175815660.00.00145.40
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_01ab8482033f0

1-0-0/0/41951.
0.002550929077310370.00.00150.47
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3b766a233c1cd

1-0-0/0/43252.
0.0025509174677962910.00.00156.51
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_607caa2987d90

1-0-0/0/42153.
0.0025509176476226650.00.00152.77
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2f4cb77039f39

1-0-0/0/42729.
0.0025509119178928120.00.00154.24
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BSx

1-0-0/0/41808.
0.0025509114775354440.00.00150.97
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9YydW

1-0-0/0/42795.
0.00255094477441960.00.00153.90
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c424497ab6912

1-0-0/0/41836.
0.0025509108573031410.00.00149.19
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d1bfbd3379f1b

1-0-0/0/40649.
0.0025509134477783480.00.00147.40
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_21c319bfdb07c

1-0-0/0/40333.
0.002550930574571120.00.00145.20
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5b0d9f8aba375

1-0-0/0/39871.
0.0025509122875463370.00.00144.63
127.0.0.1http/1.1
      Found on 2025-11-24 14:05

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae2a2d3115

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 22-Nov-2025 12:21:36 UTC
Restart Time: Sunday, 10-Aug-2025 22:41:01 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  103 days 13 hours 40 minutes 35 seconds
Server load: 0.88 1.00 1.09
Total accesses: 3436502 - Total Traffic: 12.3 GB - Total Duration: 716688915
CPU Usage: u123.79 s144.05 cu975.28 cs576.56 - .0203% CPU load
.384 requests/sec - 1479 B/second - 3853 B/request - 208.552 ms/request
1 requests currently being processed, 49 idle workers
W_________________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-02512225/1180/46793W
14.1600849681029.44.44170.51
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /server-status HTTP/1.1

0-0251220/1468/45855_
14.136484483325290.05.33165.43
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_035f0f7ca696d

0-0251220/1144/46732_
14.151781085710700.04.40169.62
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Flowth

0-0251220/1064/47331_
14.12858289030210.03.97171.96
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0251220/1099/47178_
14.1424434589261300.04.01170.44
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0251220/1066/46345_
14.136971384596640.03.96167.35
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0251220/1321/46839_
14.1353519089966760.04.90170.02
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0251220/1165/46369_
14.1372021090870860.04.49168.82
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7vIwYB

0-0251220/1167/46415_
14.137683587969070.04.48169.19
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_18188b214edca

0-0251220/1057/46483_
14.134084689781920.03.96169.40
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fa27775c24588

0-0251220/1307/44779_
14.13619387672710.04.82163.45
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0251220/1210/45703_
14.135883891410570.04.51167.34
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8da0bd2df98f5

0-0251220/1248/48274_
14.135171294656560.04.62173.88
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0251220/1173/46349_
14.12825188839220.04.49168.36
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0251220/1203/46076_
14.133487184894110.04.48168.57
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4c24b98bd9b47

0-0251220/1215/46456_
14.14321191062640.04.57168.28
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0251220/1248/46944_
14.133891195841940.04.49170.95
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9ffdbebdeaf92

0-0251220/1194/46316_
14.13445386738010.04.44169.09
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f153829b944dc

0-0251220/1144/47834_
14.142771287726320.04.16174.22
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0251220/1100/45028_
14.134683984645440.04.12164.67
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_847977d7cc41c

0-0251220/1129/45185_
14.152171283438360.04.12163.54
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0251220/1021/44445_
14.14294290079200.03.56162.76
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0251220/1078/46069_
14.15971390097340.04.03167.17
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0251220/1113/47343_
14.16371388245170.04.27171.89
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0251220/1170/47246_
14.151571291292310.04.38172.90
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0251580/1312/41350_
13.982888273536220.04.91148.09
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_64e8544def9b5

1-0251580/1122/41157_
13.9818573921730.04.16148.16
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_99c012ea1a491

1-0251580/1123/41245_
13.98260276953930.04.24149.41
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0251580/1249/40485_
13.982284772538830.04.99147.32
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3c86541d170ba

1-0251580/1155/40292_
13.974571274914130.04.41145.78
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0251580/993/39963_
13.973971370216390.03.76144.92
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0251580/1196/41493_
13.97421377918120.04.56149.58
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f4b42271f8c3c

1-0251580/1223/39514_
13.968771273340400.04.53142.96
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0251580/1231/39682_
13.968171273508230.04.45142.28
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0251580/1119/41182_
13.967083675008350.04.14147.65
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4f365e0977538

1-0251580/1218/42329_
13.981083474946550.04.54153.07
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_465d035950383

1-0251580/1224/41142_
13.97480373345830.04.53148.93
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_146919df398d6

1-0251580/1080/42062_
13.965771276641130.03.96151.84
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0251580/1105/41132_
13.965284373700950.04.19148.54
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_89bbf13fcbadd

1-0251580/1137/41995_
13.96604175414700.04.15150.90
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0251580/1226/40836_
13.973781170026260.04.54145.41
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://lowtherhall

1-0251580/1129/39915_
13.981684675800530.04.22144.71
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c3a507dd47e58

1-0251580/1074/39601_
13.966371272629760.03.93142.47
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0251580/942/38952_
13.983371273524130.03.50141.27
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0
      Found on 2025-11-22 12:21

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae92679cec

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 20-Nov-2025 12:40:54 UTC
Restart Time: Sunday, 10-Aug-2025 22:41:01 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  101 days 13 hours 59 minutes 53 seconds
Server load: 0.71 1.14 1.05
Total accesses: 3396696 - Total Traffic: 12.2 GB - Total Duration: 708946377
CPU Usage: u110.32 s134.25 cu975.28 cs576.56 - .0205% CPU load
.387 requests/sec - 1491 B/second - 3853 B/request - 208.716 ms/request
1 requests currently being processed, 49 idle workers
________________________________________W_________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0251220/341/45954_
4.61698183841610.01.28167.35
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0251220/513/44900_
4.615457081677660.01.86161.96
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_06c85924439ea

0-0251220/392/45980_
4.599171584605110.01.57166.79
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

0-0251220/324/46591_
4.618066787656440.01.23169.21
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0251220/319/46398_
4.59888288192940.01.24167.67
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0251220/263/45542_
4.616058683135790.01.04164.43
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_25b67c38b959b

0-0251220/396/45914_
4.624853788627210.01.46166.59
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_446af2d697159

0-0251220/359/45563_
4.62476489729980.01.37165.70
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0251220/421/45669_
4.61570186431510.01.61166.33
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0251220/310/45736_
4.624141588356280.01.29166.73
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0251220/407/43879_
4.616654886238200.01.49160.13
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_45c69d6266f4e

0-0251220/424/44917_
4.623541389545400.01.58164.41
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0251220/456/47482_
4.622941593260470.01.76171.02
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0251220/419/45595_
4.617253587304670.01.58165.44
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7dff4437bb5f6

0-0251220/425/45298_
4.631264282483490.01.58165.67
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_41541ed4b0f92

0-0251220/466/45707_
4.62200288264310.01.89165.60
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0251220/424/46120_
4.622453593302430.01.53167.99
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9b3e914a64d45

0-0251220/344/45466_
4.621741685548250.01.31165.96
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0251220/257/46947_
4.63541486341350.00.90170.96
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0251220/298/44226_
4.6310120783351320.01.17161.72
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0251220/331/44387_
4.636082114230.01.20160.62
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /webjars/swagger-ui/index.html HTTP/1.1

0-0251220/304/43728_
4.599541389164530.01.14160.34
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0251220/317/45308_
4.608344188149420.01.26164.40
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0251220/320/46550_
4.60827086759730.01.25168.87
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0251220/343/46419_
4.617855088762460.01.46169.97
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0eb5f064e1c66

1-0251580/441/40479_
4.565941372335500.01.72144.89
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0251580/357/40392_
4.565341372889690.01.41145.41
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0251580/383/40505_
4.55678374655190.01.50146.67
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_eb08329371b9c

1-0251580/334/39570_
4.557141371040400.01.48143.80
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0251580/400/39537_
4.5718914173571210.01.62142.98
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0251580/317/39287_
4.558454768662700.01.28142.44
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_549c5d3dac9d8

1-0251580/455/40752_
4.55834075533980.01.76146.78
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET / HTTP/1.1

1-0251580/457/38748_
4.5656130271743620.01.67140.09
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0251580/403/38854_
4.564741372288530.01.52139.35
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0251580/399/40462_
4.563653973715750.01.54145.05
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_241bd2056bf75

1-0251580/362/41473_
4.55771273682990.01.33149.86
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0251580/373/40291_
4.57167271696400.01.49145.89
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0251580/323/41305_
4.562341575564430.01.19149.08
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0251580/354/40381_
4.571141471598800.01.38145.74
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0251580/299/41157_
4.58654073517860.01.09147.85
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6353cde363f2a

1-02515826/333/39943W
4.5800685342335.81.21142.09
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /server-status HTTP/1.1

1-0251580/302/39088_
4.559053873693090.01.17141.66
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8db124659375b

1-0251580/260/38787_
4.54945271677160.01.01139.55
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0251580/287/38297_
4.55806172516810.01.07138.84
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0251580/270/39737_
4.549655172337290.01.02143.32
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /
      Found on 2025-11-20 12:40

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae34081906

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 16-Nov-2025 07:32:30 UTC
Restart Time: Sunday, 10-Aug-2025 22:41:01 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  97 days 8 hours 51 minutes 29 seconds
Server load: 2.55 3.15 2.34
Total accesses: 3281429 - Total Traffic: 11.8 GB - Total Duration: 682811259
CPU Usage: u113.22 s134.05 cu929.16 cs547.51 - .0205% CPU load
.39 requests/sec - 1501 B/second - 3849 B/request - 208.084 ms/request
1 requests currently being processed, 74 idle workers
_____________W___________.......................................
................................................................
..............................................._________________
________........................................................
............................................____________________
_____...........................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-097150/630/44370_
8.018101880287000.02.39161.50
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097150/619/43152_
7.99860077909700.02.43155.36
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-097150/634/44225_
8.03626281061330.02.33159.98
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-097150/629/45040_
7.99896082423940.02.34163.23
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-097150/663/44606_
8.06497283814780.02.33161.07
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-097150/651/43913_
7.98927078974150.02.37158.22
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-097150/691/44175_
8.073183684188490.02.67160.27
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-097150/643/44022_
8.09156585528930.02.59159.79
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSh78pqhg

0-097150/567/43700_
8.091965181722400.02.24158.73
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-097150/526/44173_
8.064501784163860.01.96160.77
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097150/576/42160_
7.9711101783390920.02.12153.51
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097150/555/43197_
7.9710018184466190.02.10157.75
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_15ff46574c448

0-097150/752/45688_
8.07374102489396810.02.87164.34
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0971523/762/43898W
8.1000834834634.12.92159.00
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /server-status HTTP/1.1

0-097150/596/43717_
8.036793878738180.02.34159.66
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-097150/599/43920_
8.027015484570880.02.28159.02
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1bf22fa6780f6

0-097150/649/44285_
8.0969189212310.02.54161.23
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-097150/546/43907_
7.971156081071470.02.05160.13
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-097150/650/45258_
8.035701683003050.02.41164.75
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097150/600/42811_
8.072311480887920.02.08156.17
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https://lowtherhall

0-097150/619/42894_
8.06400278970200.02.36155.17
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-097150/755/42104_
8.055083585851860.02.84154.23
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-097150/453/43806_
8.017614884228420.01.65158.76
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6c6b97504c163

0-097150/539/44947_
7.979511982595030.01.94162.78
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

0-097150/746/44798_
8.07289117284042000.02.85163.72
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0-0/0/40038.
0.0017462923870917210.00.00143.18
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_667ac5a604bfd

1-0-0/0/40035.
0.0017462942671355320.00.00144.00
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9f2ea1ce5056c

1-0-0/0/40122.
0.0017462945473119130.00.00145.17
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4ddbaa345be89

1-0-0/0/39236.
0.0017462989369702040.00.00142.33
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c056040656c8b

1-0-0/0/39137.
0.0017462996471395410.00.00141.36
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fbb6a5c9d4c42

1-0-0/0/38970.
0.0017462947268019000.00.00141.16
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a603f1e7783e9

1-0-0/0/40297.
0.0017462945174754560.00.00145.02
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_862447b814864

1-0-0/0/38291.
0.0017462990469953440.00.00138.42
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7d972adffaec2

1-0-0/0/38451.
0.0017462994770604860.00.00137.83
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6169c5fe7eff0

1-0-0/0/40063.
0.0017462994572497270.00.00143.51
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2d940d8e60d03

1-0-0/0/41111.
0.0017462977273114110.00.00148.52
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bea6237af6626

1-0-0/0/39918.
0.0017462943570666680.00.00144.39
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1010bd7447294

1-0-0/0/40982.
0.0017462948874945860.00.00147.89
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7af308b782589

1-0-0/0/40027.
0.0017462984270809940.00.00144.35
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7a867fbc9de12

1-0-0/0/40858.
0.0017462983672803390.00.00146.75
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5e7e4feb3a9bf

1-0-0/0/39610.
0.00174629113367808220.00.00140.87
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1aedafa506f93

1-0-0/0/38786.
0.0017462955972477590.00.00140.49
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9aCjx

1-0-0/0/38527.
0.0017462955871178220.00.00138.54
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bdc7df9985d1b

1-0-0/0/38010.
0.00174629113170955680.00.00137.77
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_88e4f09f55c49

1-0-0/0/39467.
0.0017462991771665950.00.00
      Found on 2025-11-16 07:30

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae78a20274

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Friday, 14-Nov-2025 07:59:43 UTC
Restart Time: Sunday, 10-Aug-2025 22:41:01 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  95 days 9 hours 18 minutes 42 seconds
Server load: 0.60 0.79 1.19
Total accesses: 3237135 - Total Traffic: 11.6 GB - Total Duration: 674230947
CPU Usage: u96.45 s122.06 cu929.16 cs547.51 - .0206% CPU load
.393 requests/sec - 1511 B/second - 3848 B/request - 208.28 ms/request
1 requests currently being processed, 74 idle workers
_________________________.......................................
................................................................
..............................................._________________
________........................................................
............................................_________________W__
_____...........................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-097150/20/43760_
0.26583979472420.00.07159.17
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097150/10/42543_
0.267631076573450.00.03152.97
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097150/19/43610_
0.265343780468980.00.10157.75
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_56a4545bd937c

0-097150/27/44438_
0.26773179982350.00.12161.01
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-097150/17/43960_
0.28362082970140.00.05158.79
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-097150/24/43286_
0.249543577731950.00.07155.92
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_928195d24444b

0-097150/23/43507_
0.28163983223310.00.08157.68
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097150/34/43413_
0.2310743584782750.00.15157.35
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_decf714819f34

0-097150/24/43157_
0.2843681138530.00.07156.56
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Flowth

0-097150/21/43668_
0.28321083146440.00.10158.92
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-097150/9/41593_
0.231024282004740.00.03151.41
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-097150/15/42657_
0.25907083553250.00.05155.71
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-097150/12/44948_
0.2825835887928460.00.05161.52
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BQx

0-097150/37/43173_
0.231003981978200.00.22156.30
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097150/12/43133_
0.26513077829400.00.05157.37
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-097150/12/43333_
0.26674082768860.00.08156.81
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-097150/33/43669_
0.231123987967650.00.18158.87
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-097150/20/43381_
0.258348979320200.00.06158.14
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e9649cfc47503

0-097150/27/44635_
0.28406082010430.00.14162.48
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-097150/28/42239_
0.2879179923090.00.09154.18
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-097150/16/42291_
0.28217777801070.00.05152.86
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Flowth

0-097150/15/41364_
0.28340184863290.00.05151.45
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-097150/10/43363_
0.264743783365660.00.04157.15
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6cbd1d2404289

0-097150/21/44429_
0.26643381748530.00.07160.91
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-097150/48/44100_
0.28208083043820.00.26161.13
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0-0/0/40038.
0.00346223870917210.00.00143.18
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_667ac5a604bfd

1-0-0/0/40035.
0.00346242671355320.00.00144.00
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9f2ea1ce5056c

1-0-0/0/40122.
0.00346245473119130.00.00145.17
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4ddbaa345be89

1-0-0/0/39236.
0.00346289369702040.00.00142.33
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c056040656c8b

1-0-0/0/39137.
0.00346296471395410.00.00141.36
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fbb6a5c9d4c42

1-0-0/0/38970.
0.00346247268019000.00.00141.16
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a603f1e7783e9

1-0-0/0/40297.
0.00346245174754560.00.00145.02
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_862447b814864

1-0-0/0/38291.
0.00346290469953440.00.00138.42
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7d972adffaec2

1-0-0/0/38451.
0.00346294770604860.00.00137.83
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6169c5fe7eff0

1-0-0/0/40063.
0.00346294572497270.00.00143.51
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2d940d8e60d03

1-0-0/0/41111.
0.00346277273114110.00.00148.52
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bea6237af6626

1-0-0/0/39918.
0.00346243570666680.00.00144.39
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1010bd7447294

1-0-0/0/40982.
0.00346248874945860.00.00147.89
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7af308b782589

1-0-0/0/40027.
0.00346284270809940.00.00144.35
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7a867fbc9de12

1-0-0/0/40858.
0.00346283672803390.00.00146.75
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5e7e4feb3a9bf

1-0-0/0/39610.
0.003462113367808220.00.00140.87
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1aedafa506f93

1-0-0/0/38786.
0.00346255972477590.00.00140.49
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9aCjx

1-0-0/0/38527.
0.00346255871178220.00.00138.54
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bdc7df9985d1b

1-0-0/0/38010.
0.003462113170955680.00.00137.77
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_88e4f09f55c49

1-0-0/0/39467.
0.00346291771665950.00.00142.30
127.0.0.1http/1.1
      Found on 2025-11-14 07:59

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abaec5cfb0d4

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Wednesday, 12-Nov-2025 06:36:51 UTC
Restart Time: Sunday, 10-Aug-2025 22:41:01 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  93 days 7 hours 55 minutes 50 seconds
Server load: 1.90 1.97 1.92
Total accesses: 3174633 - Total Traffic: 11.4 GB - Total Duration: 653527638
CPU Usage: u134.8 s142.69 cu869.33 cs511.87 - .0206% CPU load
.394 requests/sec - 1514 B/second - 3847 B/request - 205.859 ms/request
1 requests currently being processed, 74 idle workers
..................................................______________
______W_____________________________.........................___
______________________..........................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/42731.
0.004304814776339600.00.00155.31
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b8fa7d5a4383e

0-0-0/0/41343.
0.0043048111273628250.00.00148.41
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_da373236e7c60

0-0-0/0/42518.
0.0043048116777985470.00.00153.62
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7KwzdJVnyK

0-0-0/0/43331.
0.0043048116776732880.00.00156.99
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du%2BVw

0-0-0/0/42919.
0.0043048180680367790.00.00155.07
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_65c53201ae03e

0-0-0/0/42175.
0.0043048177375127890.00.00151.89
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_937b42b390cfb

0-0-0/0/42474.
0.0043048179980442400.00.00153.74
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2b9cc0862de6f

0-0-0/0/42433.
0.0043048170681384350.00.00153.76
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d433136cc6457

0-0-0/0/42162.
0.0043048121679072410.00.00152.97
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d9ac1f2101b8a

0-0-0/0/42648.
0.0043048179879769440.00.00155.03
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1466a242ddff9

0-0-0/0/40596.
0.0043048172079600810.00.00147.67
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6e7806db08e9a

0-0-0/0/41669.
0.0043048119080925600.00.00152.25
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0-0/0/43979.
0.0043048178184561530.00.00158.07
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a9635c2898ad1

0-0-0/0/42146.
0.0043048123679156790.00.00152.47
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9912670c54453

0-0-0/0/42005.
0.0043048116774933050.00.00153.11
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPbjpswFHzPV0S8AwGSw

0-0-0/0/42232.
0.00430481080390690.00.00152.91
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /resources/script.js HTTP/1.1

0-0-0/0/42459.
0.00430481469583327860.00.00154.28
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4ce35478f94b0

0-0-0/0/42362.
0.004304819276719140.00.00154.22
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0-0/0/43644.
0.00430481110679024250.00.00159.00
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cf6e299ba2ab0

0-0-0/0/41202.
0.00430481429577307920.00.00150.23
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9bJdK

0-0-0/0/41377.
0.00430481611975494870.00.00149.39
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c3f43b96abb8c

0-0-0/0/40296.
0.0043048175682377310.00.00147.56
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9XQS2

0-0-0/0/42295.
0.00430481429780368070.00.00153.03
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f0cc3d1a2187e

0-0-0/0/43463.
0.00430481437779520880.00.00157.38
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du5Guho

0-0-0/0/43042.
0.0043048165780015500.00.00157.19
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c58ba87f4be99

1-0-0/0/38974.
0.0043048070867865090.00.00139.26
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BSy

1-0-0/0/38936.
0.00430480444668630120.00.00139.95
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdtQZuF

1-0-0/0/38984.
0.00430480442670672730.00.00140.96
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcAZNsI

1-0-0/0/38224.
0.0043048080467090740.00.00138.63
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/38178.
0.0043048059568850880.00.00137.82
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_38ef818906953

1-0-0/0/37693.
0.0043048039065605440.00.00136.39
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2aedba063f684

1-0-0/0/39246.
0.00430480569672071390.00.00141.10
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6877bfee49375

1-0-0/0/37494.
0.0043048024367945120.00.00135.53
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_317b066dc5a62

1-0-0/0/37441.
0.00430480453867836370.00.00134.07
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9sgFLznV0S%2B%2B

1-0-0/0/38931.
0.0043048076967343390.00.00139.25
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a73a08f668861

1-0-0/0/39984.
0.004304801770535860.00.00144.27
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9TRsp

1-0-0/0/38977.
0.00430480533468805280.00.00140.93
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4739197b22e38

1-0-0/0/39855.
0.00430480271871170.00.00143.65
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdtRqCA

1-0-0/0/38977.
0.0043048054968712260.00.00140.50
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9Y5qi

1-0-0/0/39919.
0.00430480443769731370.00.00143.22
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSh78hINM

1-0-0/0/38647.
0.0043048069865332680.00.00137.22
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9XRUK

1-0-0/0/37626.
0.0043048074569976470.00.00136.00
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdtbHeQ

1-0-0/0/37409.
0.00430480119868507190.00.00134.31
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_444c247753385

1-0-0/0/36952.
0.00430480184767733310.00.00133.71
127.0.0.1http/1.1
      Found on 2025-11-12 06:36

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae105c3eeb

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Monday, 10-Nov-2025 06:14:20 UTC
Restart Time: Sunday, 10-Aug-2025 22:41:01 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  91 days 7 hours 33 minutes 19 seconds
Server load: 0.60 1.06 1.45
Total accesses: 3115753 - Total Traffic: 11.2 GB - Total Duration: 639236851
CPU Usage: u114.9 s130.07 cu869.33 cs511.87 - .0206% CPU load
.395 requests/sec - 1518 B/second - 3845 B/request - 205.163 ms/request
1 requests currently being processed, 74 idle workers
.................................................._______W______
____________________________________.........................___
______________________..........................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/42731.
0.002563294776339600.00.00155.31
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b8fa7d5a4383e

0-0-0/0/41343.
0.0025632911273628250.00.00148.41
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_da373236e7c60

0-0-0/0/42518.
0.0025632916777985470.00.00153.62
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7KwzdJVnyK

0-0-0/0/43331.
0.0025632916776732880.00.00156.99
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du%2BVw

0-0-0/0/42919.
0.0025632980680367790.00.00155.07
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_65c53201ae03e

0-0-0/0/42175.
0.0025632977375127890.00.00151.89
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_937b42b390cfb

0-0-0/0/42474.
0.0025632979980442400.00.00153.74
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2b9cc0862de6f

0-0-0/0/42433.
0.0025632970681384350.00.00153.76
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d433136cc6457

0-0-0/0/42162.
0.0025632921679072410.00.00152.97
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d9ac1f2101b8a

0-0-0/0/42648.
0.0025632979879769440.00.00155.03
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1466a242ddff9

0-0-0/0/40596.
0.0025632972079600810.00.00147.67
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6e7806db08e9a

0-0-0/0/41669.
0.0025632919080925600.00.00152.25
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0-0/0/43979.
0.0025632978184561530.00.00158.07
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a9635c2898ad1

0-0-0/0/42146.
0.0025632923679156790.00.00152.47
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9912670c54453

0-0-0/0/42005.
0.0025632916774933050.00.00153.11
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPbjpswFHzPV0S8AwGSw

0-0-0/0/42232.
0.00256329080390690.00.00152.91
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /resources/script.js HTTP/1.1

0-0-0/0/42459.
0.00256329469583327860.00.00154.28
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4ce35478f94b0

0-0-0/0/42362.
0.002563299276719140.00.00154.22
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0-0/0/43644.
0.00256329110679024250.00.00159.00
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cf6e299ba2ab0

0-0-0/0/41202.
0.00256329429577307920.00.00150.23
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9bJdK

0-0-0/0/41377.
0.00256329611975494870.00.00149.39
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c3f43b96abb8c

0-0-0/0/40296.
0.0025632975682377310.00.00147.56
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9XQS2

0-0-0/0/42295.
0.00256329429780368070.00.00153.03
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f0cc3d1a2187e

0-0-0/0/43463.
0.00256329437779520880.00.00157.38
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du5Guho

0-0-0/0/43042.
0.0025632965780015500.00.00157.19
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c58ba87f4be99

1-0-0/0/38974.
0.0025632870867865090.00.00139.26
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BSy

1-0-0/0/38936.
0.00256328444668630120.00.00139.95
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdtQZuF

1-0-0/0/38984.
0.00256328442670672730.00.00140.96
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcAZNsI

1-0-0/0/38224.
0.0025632880467090740.00.00138.63
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/38178.
0.0025632859568850880.00.00137.82
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_38ef818906953

1-0-0/0/37693.
0.0025632839065605440.00.00136.39
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2aedba063f684

1-0-0/0/39246.
0.00256328569672071390.00.00141.10
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6877bfee49375

1-0-0/0/37494.
0.0025632824367945120.00.00135.53
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_317b066dc5a62

1-0-0/0/37441.
0.00256328453867836370.00.00134.07
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9sgFLznV0S%2B%2B

1-0-0/0/38931.
0.0025632876967343390.00.00139.25
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a73a08f668861

1-0-0/0/39984.
0.002563281770535860.00.00144.27
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9TRsp

1-0-0/0/38977.
0.00256328533468805280.00.00140.93
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4739197b22e38

1-0-0/0/39855.
0.00256328271871170.00.00143.65
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdtRqCA

1-0-0/0/38977.
0.0025632854968712260.00.00140.50
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9Y5qi

1-0-0/0/39919.
0.00256328443769731370.00.00143.22
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSh78hINM

1-0-0/0/38647.
0.0025632869865332680.00.00137.22
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9XRUK

1-0-0/0/37626.
0.0025632874569976470.00.00136.00
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdtbHeQ

1-0-0/0/37409.
0.00256328119868507190.00.00134.31
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_444c247753385

1-0-0/0/36952.
0.00256328184767733310.00.00133.71
127.0.0.1http/1.1ip
      Found on 2025-11-10 06:14

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae1f324cef

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Saturday, 08-Nov-2025 04:57:27 UTC
Restart Time: Sunday, 10-Aug-2025 22:41:01 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  89 days 6 hours 16 minutes 26 seconds
Server load: 1.00 1.16 1.40
Total accesses: 3056644 - Total Traffic: 10.9 GB - Total Duration: 624891336
CPU Usage: u95.77 s117.61 cu869.33 cs511.87 - .0207% CPU load
.396 requests/sec - 1523 B/second - 3844 B/request - 204.437 ms/request
1 requests currently being processed, 74 idle workers
..................................................______________
_________W__________________________.........................___
______________________..........................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/42731.
0.00789164776339600.00.00155.31
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b8fa7d5a4383e

0-0-0/0/41343.
0.007891611273628250.00.00148.41
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_da373236e7c60

0-0-0/0/42518.
0.007891616777985470.00.00153.62
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7KwzdJVnyK

0-0-0/0/43331.
0.007891616776732880.00.00156.99
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du%2BVw

0-0-0/0/42919.
0.007891680680367790.00.00155.07
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_65c53201ae03e

0-0-0/0/42175.
0.007891677375127890.00.00151.89
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_937b42b390cfb

0-0-0/0/42474.
0.007891679980442400.00.00153.74
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2b9cc0862de6f

0-0-0/0/42433.
0.007891670681384350.00.00153.76
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d433136cc6457

0-0-0/0/42162.
0.007891621679072410.00.00152.97
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d9ac1f2101b8a

0-0-0/0/42648.
0.007891679879769440.00.00155.03
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1466a242ddff9

0-0-0/0/40596.
0.007891672079600810.00.00147.67
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6e7806db08e9a

0-0-0/0/41669.
0.007891619080925600.00.00152.25
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0-0/0/43979.
0.007891678184561530.00.00158.07
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a9635c2898ad1

0-0-0/0/42146.
0.007891623679156790.00.00152.47
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9912670c54453

0-0-0/0/42005.
0.007891616774933050.00.00153.11
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPbjpswFHzPV0S8AwGSw

0-0-0/0/42232.
0.0078916080390690.00.00152.91
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /resources/script.js HTTP/1.1

0-0-0/0/42459.
0.0078916469583327860.00.00154.28
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4ce35478f94b0

0-0-0/0/42362.
0.00789169276719140.00.00154.22
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0-0/0/43644.
0.0078916110679024250.00.00159.00
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cf6e299ba2ab0

0-0-0/0/41202.
0.0078916429577307920.00.00150.23
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9bJdK

0-0-0/0/41377.
0.0078916611975494870.00.00149.39
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c3f43b96abb8c

0-0-0/0/40296.
0.007891675682377310.00.00147.56
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9XQS2

0-0-0/0/42295.
0.0078916429780368070.00.00153.03
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f0cc3d1a2187e

0-0-0/0/43463.
0.0078916437779520880.00.00157.38
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du5Guho

0-0-0/0/43042.
0.007891665780015500.00.00157.19
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c58ba87f4be99

1-0-0/0/38974.
0.007891570867865090.00.00139.26
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BSy

1-0-0/0/38936.
0.0078915444668630120.00.00139.95
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdtQZuF

1-0-0/0/38984.
0.0078915442670672730.00.00140.96
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcAZNsI

1-0-0/0/38224.
0.007891580467090740.00.00138.63
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/38178.
0.007891559568850880.00.00137.82
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_38ef818906953

1-0-0/0/37693.
0.007891539065605440.00.00136.39
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2aedba063f684

1-0-0/0/39246.
0.0078915569672071390.00.00141.10
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6877bfee49375

1-0-0/0/37494.
0.007891524367945120.00.00135.53
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_317b066dc5a62

1-0-0/0/37441.
0.0078915453867836370.00.00134.07
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9sgFLznV0S%2B%2B

1-0-0/0/38931.
0.007891576967343390.00.00139.25
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a73a08f668861

1-0-0/0/39984.
0.00789151770535860.00.00144.27
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9TRsp

1-0-0/0/38977.
0.0078915533468805280.00.00140.93
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4739197b22e38

1-0-0/0/39855.
0.0078915271871170.00.00143.65
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdtRqCA

1-0-0/0/38977.
0.007891554968712260.00.00140.50
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9Y5qi

1-0-0/0/39919.
0.0078915443769731370.00.00143.22
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSh78hINM

1-0-0/0/38647.
0.007891569865332680.00.00137.22
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9XRUK

1-0-0/0/37626.
0.007891574569976470.00.00136.00
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdtbHeQ

1-0-0/0/37409.
0.0078915119868507190.00.00134.31
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_444c247753385

1-0-0/0/36952.
0.0078915184767733310.00.00133.71
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.c
      Found on 2025-11-08 04:57

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae2f9ea5c1

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Thursday, 06-Nov-2025 09:48:38 UTC
Restart Time: Sunday, 10-Aug-2025 22:41:01 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  87 days 11 hours 7 minutes 37 seconds
Server load: 1.63 1.36 1.42
Total accesses: 3007693 - Total Traffic: 10.8 GB - Total Duration: 612761088
CPU Usage: u97.42 s117.22 cu851.99 cs502.27 - .0208% CPU load
.398 requests/sec - 1529 B/second - 3842 B/request - 203.731 ms/request
2 requests currently being processed, 48 idle workers
_______W___________________K______________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0231190/584/42221_
7.65454375289090.02.26153.39
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0231190/704/40764_
7.6458916472291460.02.84146.15
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=hZJLb9swEIT%2FCsG7SOo

0-0231190/488/42076_
7.64510176837140.01.89151.99
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0231190/653/42744_
7.626493575134380.02.54154.65
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0e9d87d2e9835

0-0231190/667/42420_
7.7097278734280.02.56153.10
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d6540a16ece3b

0-0231190/550/41738_
7.70142073691780.02.04150.15
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-0231190/644/41900_
7.66338878307760.02.52151.45
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-02311925/800/41949W
7.7000797738737.93.18151.89
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /server-status HTTP/1.1

0-0231190/701/41678_
7.65441977637360.02.75151.03
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

0-0231190/577/42194_
7.64485078450200.02.20153.26
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0231190/761/40085_
7.66258177702380.03.02145.76
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0231190/712/41081_
7.681798579209630.02.83150.02
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ad225932df1c7

0-0231190/996/43435_
7.6915265483037980.03.64155.89
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/wstrust/username.php HTTP/1.1

0-0231190/575/41675_
7.62698977954960.02.31150.65
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

0-0231190/562/41537_
7.6821573273795150.02.35151.29
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0231190/790/41719_
7.64552079174400.03.39150.98
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0231190/629/41900_
7.701094282021810.02.54152.03
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a628d68418271

0-0231190/670/41848_
7.62684275265940.02.69152.15
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0231190/699/43170_
7.62664378033020.02.81157.23
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du%2BWS

0-0231190/772/40747_
7.62620476270560.03.03148.48
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_965a718e7c489

0-0231190/596/40879_
7.654093974394730.02.35147.44
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3c3d0702b1f40

0-0231190/561/39782_
7.70493581009550.02.22145.49
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a0b4b369025ed

0-0231190/674/41783_
7.64485436878801730.02.52151.08
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/accountinfo/check.php?code=9441008065+&username

0-0231190/756/43063_
7.6636616578137080.02.90155.76
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0231190/495/42500_
7.645095078660430.02.10155.15
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0232960/588/38518_
7.845293766712170.02.33137.49
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0a9169f96b227

1-0232960/602/38379_
7.82615467521200.02.40137.65
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0232964/556/38486K
7.883069495934.42.10139.01
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /api/swagger.json HTTP/1.1

1-0232960/652/37822_
7.84442765656230.02.77137.15
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/accountinfo/complete.php HTTP/1.1

1-0232960/566/37727_
7.844324767793610.02.31136.11
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0232960/674/37085_
7.844693864266240.02.57134.07
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_94ba98ffdc304

1-0232960/733/38805_
7.8619772671164490.02.96139.34
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tcw0caa

1-0232960/841/37066_
7.8624921466953440.03.31133.95
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVJNbxMxEL0j9T9Yvu9XW

1-0232960/486/37042_
7.83573151366808440.02.01132.57
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/accountinfo/check.php?code=8729093220&username=

1-0232960/709/38516_
7.84479066269550.02.85137.74
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0232960/792/39504_
7.8867069015090.03.24142.40
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0232960/769/38358_
7.82659232867643460.03.02138.51
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0232960/744/39420_
7.86382070748410.02.95141.87
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0232960/644/38420_
7.871696266842590.02.46138.33
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3917a87104791

1-0232960/720/39467_
7.863493468666790.02.76141.53
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1db41569b65b6

1-0232960/639/38227_
7.871341163927190.02.60135.75
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

1-0232960/695/37115_
7.81691268784690.02.65133.95
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0232960/706/36782_
7.826373867220030.02.83131.93
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b4a7231db1568

1-0232960/659/36464_
7.84510166572650.02.73131.69
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0232960/731/38083_
7.8838867993630.02.78137.14
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2
      Found on 2025-11-06 09:48

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae7d86414d

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Tuesday, 04-Nov-2025 09:04:59 UTC
Restart Time: Sunday, 10-Aug-2025 22:41:01 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  85 days 10 hours 23 minutes 58 seconds
Server load: 0.87 1.81 1.64
Total accesses: 2936879 - Total Traffic: 10.5 GB - Total Duration: 592200645
CPU Usage: u110.2 s124.56 cu816.9 cs480.97 - .0208% CPU load
.398 requests/sec - 1526 B/second - 3836 B/request - 201.643 ms/request
1 requests currently being processed, 74 idle workers
........................._________________________..............
................................................................
...............................................___________W_____
_________________________________...............................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/41637.
0.00352979140972789120.00.00151.14
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9Yysu

0-0-0/0/40060.
0.0035297920869895720.00.00143.31
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0840419f27ab4

0-0-0/0/41588.
0.003529794475174530.00.00150.10
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_84881df5b471b

0-0-0/0/42091.
0.0035297966172659000.00.00152.11
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4ec8a1fa75bd2

0-0-0/0/41753.
0.0035297960877525350.00.00150.53
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2Bcz

0-0-0/0/41188.
0.0035297965572419700.00.00148.11
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d5e8e4aecb351

0-0-0/0/41256.
0.0035297963476183110.00.00148.93
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcgfCRX

0-0-0/0/41149.
0.0035297969676376780.00.00148.71
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e8167c6bd414a

0-0-0/0/40977.
0.003529795276213020.00.00148.28
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a23fc1a3a0bed

0-0-0/0/41617.
0.0035297968776749850.00.00151.06
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0cb7d49832253

0-0-0/0/39324.
0.0035297961675323770.00.00142.74
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e53c8ea0262b3

0-0-0/0/40369.
0.00352979101077635430.00.00147.19
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e5cda09083ea6

0-0-0/0/42439.
0.0035297956981253550.00.00152.25
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9bItG

0-0-0/0/41100.
0.00352979105575695320.00.00148.35
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_94cde4479f291

0-0-0/0/40975.
0.0035297972971590870.00.00148.94
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7ac681aa092ce

0-0-0/0/40929.
0.0035297990476944200.00.00147.59
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du%2BWS

0-0-0/0/41271.
0.0035297954880381850.00.00149.49
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswEL37KwzdtTteC

0-0-0/0/41178.
0.0035297913372952380.00.00149.46
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f9d7be7685805

0-0-0/0/42471.
0.003529794575233960.00.00154.42
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ca1fee5e033e6

0-0-0/0/39975.
0.0035297959073861690.00.00145.45
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7vCADw

0-0-0/0/40283.
0.0035297963971374620.00.00145.09
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c1cd3a98cf7dc

0-0-0/0/39221.
0.0035297968179611690.00.00143.28
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_68d09a7b08fd5

0-0-0/0/41109.
0.0035297956875669050.00.00148.56
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdtXmJU

0-0-0/0/42307.
0.00352979164475471840.00.00152.87
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0-0/0/42005.
0.0035297956076599880.00.00153.06
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BQp

1-0181290/1134/37462_
13.136704462725290.04.19133.38
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_89613d5b1135f

1-0181290/1166/37152_
13.161191763857610.04.37132.97
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0181290/1144/37500_
13.1189555566654850.04.30135.32
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/wstrust/username.php HTTP/1.1

1-0181290/1201/36783_
13.13539562580020.04.79132.92
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9bAeS

1-0181290/1170/36618_
13.144303864358580.04.29131.67
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a577e4c44003a

1-0181290/1275/36000_
13.111070561548100.04.84129.92
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0181290/1122/37620_
13.1193621267382260.04.11134.64
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du%2BYL

1-0181290/1008/35719_
13.11969563748940.03.79128.58
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0181290/1015/36015_
13.111019063096010.03.57128.49
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET / HTTP/1.1

1-0181290/1160/37309_
13.142571962681840.04.32132.97
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

1-0181290/1222/38154_
13.1519919364029750.04.66137.05
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0181290/1129/37135_
13.135991664651570.04.32133.70
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0181290/1090/37957_
13.145153966220240.04.01136.23
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0181290/1160/37303_
13.16591663749870.04.19133.97
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0181290/1011/38217_
13.14355465868960.03.68136.64
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0181290/1079/37099_
13.144791661115660.04.09131.29
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0181290/1094/35917_
13.13636166055650.04.07129.39
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0181290/1000/35664_
13.1423615264242900.03.76127.67
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_abd73897d24f9

1-0181290/1033/35343_
13.1432619961827400.03.85127.11
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2
      Found on 2025-11-04 09:04

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae6a7fb9e7

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-07-17T18:57:26

Current Time: Sunday, 02-Nov-2025 15:32:22 UTC
Restart Time: Sunday, 10-Aug-2025 22:41:01 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  83 days 16 hours 51 minutes 21 seconds
Server load: 0.52 0.89 0.93
Total accesses: 2902989 - Total Traffic: 10.4 GB - Total Duration: 584854195
CPU Usage: u98 s116.19 cu816.9 cs480.97 - .0209% CPU load
.401 requests/sec - 1539 B/second - 3835 B/request - 201.466 ms/request
1 requests currently being processed, 74 idle workers
........................._________________________..............
................................................................
..............................................._________________
_W_______________________________...............................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/41637.
0.00203422140972789120.00.00151.14
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9Yysu

0-0-0/0/40060.
0.0020342220869895720.00.00143.31
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0840419f27ab4

0-0-0/0/41588.
0.002034224475174530.00.00150.10
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_84881df5b471b

0-0-0/0/42091.
0.0020342266172659000.00.00152.11
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4ec8a1fa75bd2

0-0-0/0/41753.
0.0020342260877525350.00.00150.53
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2Bcz

0-0-0/0/41188.
0.0020342265572419700.00.00148.11
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d5e8e4aecb351

0-0-0/0/41256.
0.0020342263476183110.00.00148.93
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcgfCRX

0-0-0/0/41149.
0.0020342269676376780.00.00148.71
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e8167c6bd414a

0-0-0/0/40977.
0.002034225276213020.00.00148.28
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a23fc1a3a0bed

0-0-0/0/41617.
0.0020342268776749850.00.00151.06
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0cb7d49832253

0-0-0/0/39324.
0.0020342261675323770.00.00142.74
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e53c8ea0262b3

0-0-0/0/40369.
0.00203422101077635430.00.00147.19
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e5cda09083ea6

0-0-0/0/42439.
0.0020342256981253550.00.00152.25
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9bItG

0-0-0/0/41100.
0.00203422105575695320.00.00148.35
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_94cde4479f291

0-0-0/0/40975.
0.0020342272971590870.00.00148.94
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7ac681aa092ce

0-0-0/0/40929.
0.0020342290476944200.00.00147.59
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du%2BWS

0-0-0/0/41271.
0.0020342254880381850.00.00149.49
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswEL37KwzdtTteC

0-0-0/0/41178.
0.0020342213372952380.00.00149.46
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f9d7be7685805

0-0-0/0/42471.
0.002034224575233960.00.00154.42
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ca1fee5e033e6

0-0-0/0/39975.
0.0020342259073861690.00.00145.45
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7vCADw

0-0-0/0/40283.
0.0020342263971374620.00.00145.09
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c1cd3a98cf7dc

0-0-0/0/39221.
0.0020342268179611690.00.00143.28
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_68d09a7b08fd5

0-0-0/0/41109.
0.0020342256875669050.00.00148.56
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdtXmJU

0-0-0/0/42307.
0.00203422164475471840.00.00152.87
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0-0/0/42005.
0.0020342256076599880.00.00153.06
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BQp

1-0181290/680/37008_
7.7514631761847450.02.48131.68
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0181290/669/36655_
7.783946062652530.02.55131.15
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e80e370f55046

1-0181290/680/37036_
7.741878165808870.02.51133.52
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0181290/770/36352_
7.7711031761843030.03.17131.30
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0181290/719/36167_
7.779334463150120.02.66130.04
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2d3cef6439ee7

1-0181290/786/35511_
7.78231760810780.02.98128.05
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0181290/668/37166_
7.7419544366392880.02.38132.91
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6ecf2bd5afc76

1-0181290/589/35300_
7.7420135762480200.02.19126.98
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_685d1f92da5ec

1-0181290/613/35613_
7.78943962163610.02.12127.04
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d7ceb04fe79e1

1-0181290/756/36905_
7.786831761510760.02.75131.39
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0181290/746/37678_
7.782031663017490.02.86135.24
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0181290/707/36713_
7.7612831963914480.02.71132.09
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0181290/552/37419_
7.7710431965301580.02.03134.26
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0181290/704/36847_
7.783231762775490.02.46132.24
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/frontpage_welcome.php HTTP/1.1

1-0181290/603/37809_
7.777534265163830.02.21135.17
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8187cb04c79dc

1-0181290/641/36661_
7.7711734160270920.02.47129.66
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e4c7b7b3aad55

1-0181290/657/35480_
7.7613534264650950.02.44127.75
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_10dd88c12a627

1-0181290/633/35297_
7.785744963725310.02.33126.24
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ab2e8e27d93c8

1-0181290/585/34895_
7.778631861086450.02.10125.35
127.0.0.1http/1.1ip-10-1-96-111.ap-southeast-2.cGET /modu
      Found on 2025-11-02 15:32

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abaede6e250f

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 20-Nov-2024 07:29:21 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  111 days 21 hours 19 minutes 47 seconds
Server load: 1.95 1.82 1.99
Total accesses: 2371329 - Total Traffic: 9.0 GB - Total Duration: 749836658
CPU Usage: u105.78 s167.02 cu841.6 cs446.85 - .0161% CPU load
.245 requests/sec - 1002 B/second - 4086 B/request - 316.209 ms/request
1 requests currently being processed, 49 idle workers
___W______________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0226290/15/25386_
0.261387978316980.00.0598.14
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0226290/9/25331_
0.251454090071570.00.0398.58
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET //lowtherhall-login.cloudworkengine.net/module.php/core/log

0-0226290/10/25473_
0.2515144885950280.00.0599.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0226297/24/24986W
0.310080506318.10.0697.41
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

0-0226290/20/25246_
0.31225193973060.00.1099.47
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f2b287dcf5018

0-0226290/58/24511_
0.278623782259150.00.3096.11
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8fddc78eee5e3

0-0226290/23/25904_
0.2713434183915830.00.15101.03
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b4cd50884e2cc

0-0226290/16/25504_
0.2712244186308080.00.0699.74
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b71a0313cd9b1

0-0226290/21/24685_
0.271183384395650.00.0797.15
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0226290/10/24867_
0.271130483265230.00.0497.60
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0226290/22/25583_
0.271080384301280.00.12100.53
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0226290/13/25040_
0.279834581207530.00.0596.81
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_abe8ab6eab84a

0-0226290/15/25429_
0.27855090390670.00.0499.41
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0226290/7/26203_
0.2780310889398380.00.03101.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_476bb9e9bfd33

0-0226290/29/25138_
0.27709792523130.00.1697.39
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0226290/12/25132_
0.27788278880820.00.0898.89
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0226290/25/24947_
0.27637383552020.00.1298.46
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0226290/8/24945_
0.2760638682662330.00.0397.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9sgFLznV0S%2B%2B

0-0226290/10/25066_
0.285225480535710.00.0497.65
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0226290/10/25784_
0.285034687150370.00.04100.95
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cf47b76eba69c

0-0226290/13/24519_
0.2840514092037440.00.0595.06
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0226290/12/24993_
0.28347289825150.00.0497.70
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0226290/27/24929_
0.283154389116560.00.0797.18
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a61aa1d04e6b8

0-0226290/24/24453_
0.30201092049410.00.1296.50
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0226290/15/24176_
0.3113838287163020.00.0995.15
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PKcwj

1-0227190/11/22603_
0.227447862655030.00.0487.86
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7165ba407213b

1-0227190/11/22406_
0.22794357414380.00.0590.37
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0227190/13/22342_
0.228554665742690.00.0592.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0227190/8/22281_
0.2286224463309190.00.0386.30
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du%2BQS

1-0227190/11/21760_
0.229233860389590.00.0592.53
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c32664e749124

1-0227190/14/21377_
0.2110425657466870.00.0583.35
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2e84a4d0c7992

1-0227190/25/22729_
0.226824865863680.00.1588.89
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5e0648a9636c8

1-0227190/21/21651_
0.22620261189130.00.0884.58
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0227190/10/21777_
0.225625862575100.00.0486.35
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b4f2008fa4514

1-0227190/10/21513_
0.23515065436180.00.0583.81
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0227190/23/21499_
0.234424372587960.00.0883.83
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ed5f60095a5d7

1-0227190/13/21621_
0.233824963725790.00.0584.66
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4bef2f67beaa3

1-0227190/25/22786_
0.233244562360950.00.1288.83
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d0e01b4c79115

1-0227190/13/22370_
0.232644061828840.00.0585.78
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a0c70a2e255b6

1-0227190/18/22865_
0.23209168008170.00.0788.54
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0227190/23/21242_
0.23824658879700.00.0784.09
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b41759bb25121

1-0227190/12/21992_
0.2315163823530.00.0586.63
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET / HTTP/1.1

1-0227190/8/21076_
0.2115224765645840.00.0381.58
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9031181085548

1-0227190/6/21557_
0.2114624970113260.00.0384.91
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a653e2ebff1da

1-0227190/16/21430_
0.2114034561674180.00.0983.26
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/
      Found on 2024-11-20 07:28

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae8407e5ec

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 18-Nov-2024 20:46:54 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  110 days 10 hours 37 minutes 21 seconds
Server load: 2.12 2.10 2.27
Total accesses: 2343385 - Total Traffic: 8.9 GB - Total Duration: 738746947
CPU Usage: u129.14 s179.74 cu804.13 cs425.48 - .0161% CPU load
.246 requests/sec - 1003 B/second - 4084 B/request - 315.248 ms/request
3 requests currently being processed, 72 idle workers
__________________K______.......................................
..........._______K_________________............................
...............................................____________W____
________........................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0295320/933/25051_
14.047164777038770.03.4496.80
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_eec5e5ba3e57e

0-0295320/884/24990_
14.05511288519560.03.2297.27
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295320/981/25082_
14.0467418183071310.03.6297.87
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdtVtuT

0-0295320/1028/24511_
14.07216079015060.03.7195.38
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0295320/873/24818_
14.08156292169000.03.5297.69
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295320/874/24044_
14.108717780969200.03.0594.18
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7fa3564282475

0-0295320/921/25502_
14.05456483080200.03.5999.39
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_98014dddf8ddb

0-0295320/943/25096_
14.1021085048780.03.6198.03
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0295320/1021/24245_
14.06383083056980.03.9595.35
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0295320/787/24457_
14.04765282102630.03.1595.95
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295320/876/25224_
14.054163882774830.03.2499.16
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fab8fff91a682

0-0295320/1081/24684_
14.07267380150100.03.8895.39
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_85a98bd30ef69

0-0295320/880/25112_
14.1035387973840.03.1398.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bb9dd8c05ae50

0-0295320/1028/25728_
14.081763987754340.03.6299.39
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1daa155459ff0

0-0295320/1100/24747_
14.05567391594600.04.2195.67
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0aeb50411d4a9

0-0295320/859/24791_
14.0479535377598350.03.2897.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0295320/993/24600_
14.05534482587640.03.9296.93
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1433194098e2a

0-0295320/990/24500_
14.10100881252870.03.6995.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3cb2cf8bc2036

0-0295322/1006/24775K
14.111078955222.13.8596.34
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /.vscode/sftp.json HTTP/1.1

0-0295320/1020/25323_
14.0560319683185640.03.9599.24
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9XYcg

0-0295320/911/24152_
14.0465116290075290.03.5193.52
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0295320/938/24600_
14.07328488660110.03.4996.18
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0295320/1015/24564_
14.072973888124040.03.7095.89
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b072d074b068d

0-0295320/956/24063_
14.04842290540660.03.5194.90
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0295320/835/23875_
14.04920386348030.03.1393.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/22592.
0.0030867674762614480.00.0087.82
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ef3bfe593325b

1-0-0/0/22395.
0.0030867657057408310.00.0090.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7KwzdrVetW

1-0-0/0/22329.
0.0030867692465694810.00.0092.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_15b701a66d4af

1-0-0/0/22273.
0.0030867676363284030.00.0086.27
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0a67ce3ef1e02

1-0-0/0/21749.
0.00308676298860379510.00.0092.49
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PBsgW

1-0-0/0/21363.
0.0030867682257454760.00.0083.29
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a9f27e16b7df2

1-0-0/0/22704.
0.0030867680265837100.00.0088.74
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_44269ec827a88

1-0-0/0/21630.
0.0030867685361141060.00.0084.50
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b516dde68366f

1-0-0/0/21767.
0.00308676313262558510.00.0086.31
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtsgFN3nKyLv%2Fcz

1-0-0/0/21503.
0.0030867688265405980.00.0083.76
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b5426836f9506

1-0-0/0/21476.
0.0030867659772526510.00.0083.76
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b819e61d199a1

1-0-0/0/21608.
0.0030867689863428740.00.0084.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_74e1b6567d9e7

1-0-0/0/22761.
0.0030867656562237320.00.0088.71
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/22357.
0.0030867689261798820.00.0085.73
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_632f318d0a686

1-0-0/0/22847.
0.00308676307467981050.00.0088.48
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9bKt2

1-0-0/0/21219.
0.00308676286858844100.00.0084.02
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSh78ho6M

1-0-0/0/21980.
0.0030867685563815130.00.0086.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ee72f4d2f4fa5

1-0-0/0/21068.
0.0030867688365619580.00.0081.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ed6bd21cec7ef

1-0-0/0/21551.
0.00308676292870087680.00.0084.88
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2PBNEs

1-0-0/0/21414.
0.00
      Found on 2024-11-18 20:46

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae97d40999

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 16-Nov-2024 17:34:50 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  108 days 7 hours 25 minutes 16 seconds
Server load: 0.68 2.40 2.35
Total accesses: 2299208 - Total Traffic: 8.8 GB - Total Duration: 727542582
CPU Usage: u110.4 s166.13 cu804.13 cs425.48 - .0161% CPU load
.246 requests/sec - 1004 B/second - 4088 B/request - 316.432 ms/request
1 requests currently being processed, 74 idle workers
_W_______________________.......................................
..........._________________________............................
..............................................._________________
________........................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0295320/294/24412_
4.90338475992950.01.0694.41
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e1f86f9096cf5

0-0295329/332/24438W
4.9100867608012.51.2695.31
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

0-0295320/256/24357_
4.903103181438760.00.9795.23
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0295320/419/23902_
4.897493577609270.01.6493.30
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0295320/312/24257_
4.906043590334250.01.3595.52
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0295320/300/23470_
4.9049515279929180.01.0892.22
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0295320/296/24877_
4.88864381994450.01.1496.94
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_80df7994a8c5e

0-0295320/320/24473_
4.9056117083925300.01.2695.68
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0295320/393/23617_
4.888292181459540.01.4492.83
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0295320/306/23976_
4.9022814880798630.01.1893.97
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f981b848b474a

0-0295320/297/24645_
4.888914180459410.01.1397.05
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_296bcd55a7764

0-0295320/423/24026_
4.897124178606940.01.6693.18
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a1b24b445b037

0-0295320/334/24566_
4.90445386461860.01.1696.21
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_eb64022d835a1

0-0295320/393/25093_
4.89688385982850.01.3997.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_63d745f2108cd

0-0295320/440/24087_
4.9042690235820.01.7693.23
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0295320/281/24213_
4.902715776421120.01.0995.24
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_646f1a3a9bb90

0-0295320/322/23929_
4.90158480938660.01.3194.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0295320/359/23869_
4.906524179468460.01.3293.23
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0d71d6d1d46e7

0-0295320/340/24109_
4.905324377396330.01.2393.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_26a5aba020c10

0-0295320/386/24689_
4.90107581404240.01.4796.76
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_254826cabb107

0-0295320/271/23512_
4.90189388311000.01.0991.10
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_36677f1b8846f

0-0295320/332/23994_
4.9059485716920.01.2793.95
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0295320/356/23905_
4.89785386566930.01.2093.39
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b239165879b1e

0-0295320/297/23404_
4.90411488593650.01.1192.50
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0295320/329/23369_
4.90363385136190.01.1691.88
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b30d12f11fe8c

1-0-0/0/22592.
0.0012435174762614480.00.0087.82
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ef3bfe593325b

1-0-0/0/22395.
0.0012435157057408310.00.0090.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7KwzdrVetW

1-0-0/0/22329.
0.0012435192465694810.00.0092.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_15b701a66d4af

1-0-0/0/22273.
0.0012435176363284030.00.0086.27
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0a67ce3ef1e02

1-0-0/0/21749.
0.00124351298860379510.00.0092.49
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PBsgW

1-0-0/0/21363.
0.0012435182257454760.00.0083.29
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a9f27e16b7df2

1-0-0/0/22704.
0.0012435180265837100.00.0088.74
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_44269ec827a88

1-0-0/0/21630.
0.0012435185361141060.00.0084.50
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b516dde68366f

1-0-0/0/21767.
0.00124351313262558510.00.0086.31
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtsgFN3nKyLv%2Fcz

1-0-0/0/21503.
0.0012435188265405980.00.0083.76
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b5426836f9506

1-0-0/0/21476.
0.0012435159772526510.00.0083.76
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b819e61d199a1

1-0-0/0/21608.
0.0012435189863428740.00.0084.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_74e1b6567d9e7

1-0-0/0/22761.
0.0012435156562237320.00.0088.71
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/22357.
0.0012435189261798820.00.0085.73
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_632f318d0a686

1-0-0/0/22847.
0.00124351307467981050.00.0088.48
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9bKt2

1-0-0/0/21219.
0.00124351286858844100.00.0084.02
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSh78ho6M

1-0-0/0/21980.
0.0012435185563815130.00.0086.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ee72f4d2f4fa5

1-0-0/0/21068.
0.0012435188365619580.00.0081.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ed6bd21cec7ef

1-0-0/0/21551.
0.00124351292870087680.00.0084.88
127.0.0.1http/1.1ip-10
      Found on 2024-11-16 17:34

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae8ca473c9

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 14-Nov-2024 19:43:54 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  106 days 9 hours 34 minutes 21 seconds
Server load: 0.85 1.45 1.75
Total accesses: 2255036 - Total Traffic: 8.6 GB - Total Duration: 710871642
CPU Usage: u125.56 s171.4 cu770.5 cs407.37 - .016% CPU load
.245 requests/sec - 1003 B/second - 4090 B/request - 315.237 ms/request
1 requests currently being processed, 49 idle workers
_________W________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



<SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-097250/1358/23870_
20.02547673902640.05.0692.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/1276/23729_
20.03256483682220.05.0492.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/1374/23769_
20.02416579463620.05.2292.81
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/1196/23030_
20.03205675162510.04.7090.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/1225/23647_
20.03183788414350.04.7592.96
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/1166/22903_
20.0322617077399060.04.4890.04
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/1342/24234_
20.0323479956680.05.4194.40
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/1318/23837_
20.01579581620480.05.1993.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/1343/22929_
20.024754879513320.05.4690.22
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cb637a3246412

0-0972512/1218/23444W
20.0300788416221.24.6991.94
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

0-097250/1302/24121_
20.02542278803010.05.0694.98
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-097250/1125/23325_
20.015963876595650.04.2690.37
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3cb811120f0fd

0-097250/1317/23887_
20.02502484712460.05.1593.82
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/1456/24320_
20.0362384116730.05.6894.28
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2520a94da05cd

0-097250/1337/23391_
20.03136588280870.04.9790.51
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_61cb7ffdb1c12

0-097250/1212/23645_
20.0316035174590650.04.6993.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2QExJy

0-097250/1218/23310_
20.0252317278324910.04.6591.89
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/1152/23235_
20.03282477468480.04.5990.91
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/1120/23544_
20.033271675895670.04.1491.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

0-097250/1328/23971_
20.02460879401320.05.2394.08
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2ff2bc834090a

0-097250/1244/22918_
20.03306485603240.04.7088.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/1147/23291_
20.02370283740760.04.7491.29
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-097250/1240/23139_
20.02400383928150.04.7590.48
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f2c2dcf69c92d

0-097250/1211/22793_
20.0340486768340.04.7790.34
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/1365/22779_
20.0397483107340.05.4189.67
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fa38a20e4458b

1-097730/1262/22218_
19.90588361093350.04.9886.49
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3f813a6366663

1-097730/1266/22087_
19.9331356306830.05.0089.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4977675d6803d

1-097730/1281/21900_
19.93116464097100.04.7890.98
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-097730/1252/21943_
19.92215462139000.04.8085.10
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dd9a378378bc6

1-097730/1462/21448_
19.937317359315060.05.6891.38
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-097730/1173/21008_
19.92321055928250.04.6681.94
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-097730/1320/22267_
19.90564363454080.05.2187.12
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_43bbdbd602a49

1-097730/1281/21287_
19.90512459367290.05.1483.19
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ed8f0885b707f

1-097730/1118/21406_
19.90602561270830.04.2685.04
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-097730/1223/21193_
19.9311563526030.04.7182.60
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ec5456b62232b

1-097730/1199/21173_
19.90534371148140.04.6382.63
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2d20d7e0c6ac4

1-097730/1270/21171_
19.90542261949550.04.7982.86
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-097730/1375/22440_
19.92175160651720.05.2387.60
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/adfs/assets/js/postResponse.js HTTP/1.1

1-097730/1252/21985_
19.92406060378000.04.9584.38
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-097730/1366/22501_
19.91469566706440.05.3887.27
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-097730/1127/20842_
19.91434357507590.04.1782.52
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d3c5cfe854c99

1-097730/1238/21477_
19.90490362622800.05.1284.67
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ed76be10f13fe

1-097730/1171/20630_
19.92295364452770.04.5479.87
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b44b164357a1c

1-097730/1104/21263_
19.92194368698620.04.4583.79
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e98ae3fe01156
      Found on 2024-11-14 19:43

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae643e713d

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 12-Nov-2024 16:30:36 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  104 days 6 hours 21 minutes 2 seconds
Server load: 27.18 7.46 3.22
Total accesses: 2215987 - Total Traffic: 8.4 GB - Total Duration: 698409255
CPU Usage: u107.36 s158.96 cu770.5 cs407.37 - .016% CPU load
.246 requests/sec - 1006 B/second - 4090 B/request - 315.168 ms/request
1 requests currently being processed, 49 idle workers
____________________________________W_____________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-097250/519/23031_
7.3925019170809260.01.8189.18
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/494/22947_
7.39318581156450.01.9089.45
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cfba162e449c1

0-097250/563/22958_
7.392184077378260.02.1389.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b6d7bc4f3cb22

0-097250/514/22348_
7.39416472440520.02.0287.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/443/22865_
7.39444585737330.01.6689.87
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/432/22169_
7.386594674724320.01.5687.12
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-097250/450/23342_
7.39289377425880.01.9290.91
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4c84a6991e73a

0-097250/469/22988_
7.39193679028110.01.7689.88
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/402/21988_
7.39272476543880.01.5686.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-097250/427/22653_
7.39141376696100.01.6188.87
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-097250/517/23336_
7.4058476409400.02.0391.94
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-097250/391/22591_
7.40116774775280.01.4487.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/527/23097_
7.4084482349450.01.9590.63
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/548/23412_
7.386384280959310.02.2590.84
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c8d0701c81afa

0-097250/468/22522_
7.40183385215400.01.7787.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/415/22848_
7.37682271919170.01.6489.95
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-097250/464/22556_
7.3916817376288660.01.6888.93
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/432/22515_
7.385794874854100.01.7788.09
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_af316e9034970

0-097250/476/22900_
7.3947016474036400.01.8989.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/585/23228_
7.395184376526440.02.2991.15
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_23be4f96fbb4a

0-097250/571/22245_
7.3954618282409490.02.2186.23
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/441/22585_
7.38618381550630.01.8888.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cf7259d7a3337

0-097250/496/22395_
7.39498480975740.01.9187.64
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/446/22028_
7.39353484296140.01.7087.27
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-097250/548/21962_
7.39379681420360.02.1386.40
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-097730/492/21448_
7.30677758673730.02.0483.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-097730/482/21303_
7.32179454423230.01.9286.09
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d8eb26c76dcad

1-097730/479/21098_
7.33374062165940.01.8288.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9d89b2e17f8cb

1-097730/504/21195_
7.32155360108820.02.0282.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f8477c707d433

1-097730/535/20521_
7.32129357002480.01.9687.66
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c869c4afd7b34

1-097730/443/20278_
7.32260353683010.01.8679.14
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9d6a13cfb0e3a

1-097730/493/21440_
7.33994761011730.01.9883.89
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b71e3f98a7f3d

1-097730/517/20523_
7.30631455995650.01.9279.96
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-097730/461/20749_
7.30654459076190.01.7282.50
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-097730/490/20460_
7.3374561469060.01.8879.76
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ec3bf66e47f15

1-097730/364/20338_
7.30590368346960.01.3079.30
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8b133fe687c1d

1-0977310/478/20379W
7.3400593061815.61.7679.83
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

1-097730/481/21546_
7.31535357445070.01.7284.09
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_da27efa5f1819

1-097730/508/21241_
7.31559358186630.01.8781.30
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9667d266c5b4a

1-097730/556/21691_
7.32484364438180.02.2584.14
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_53a04757357f1

1-097730/415/20130_
7.32457355371360.01.5479.89
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4d46a278feb89

1-097730/471/20710_
7.32512359478350.01.8781.42
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_45046d1491902

1-097730/479/19938_
7.323595061786810.01.8977.21
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-097730/447/20606_
7.32428466353400.01.8481.19
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c789684055fd7

1-0</
      Found on 2024-11-12 16:30

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae4fb86ac1

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 10-Nov-2024 15:14:27 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  102 days 5 hours 4 minutes 53 seconds
Server load: 0.31 0.62 0.81
Total accesses: 2158046 - Total Traffic: 8.2 GB - Total Duration: 681870337
CPU Usage: u108.94 s158.34 cu745.06 cs392.44 - .0159% CPU load
.244 requests/sec - 999 B/second - 4089 B/request - 315.967 ms/request
1 requests currently being processed, 49 idle workers
................................................................
................................................................
......................_________________________.................
.................................__________________W______......
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/22512.
0.009704924369544930.00.0087.38
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0-0/0/22453.
0.00970494979239720.00.0087.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_223e41986b91a

0-0-0/0/22395.
0.0097049575233080.00.0087.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0-0/0/21834.
0.0097049570999550.00.0085.31
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2Bcx

0-0-0/0/22422.
0.0097049484399220.00.0088.21
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0-0/0/21737.
0.0097049473495370.00.0085.56
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_02d31f1d5324a

0-0-0/0/22892.
0.0097049575752980.00.0088.99
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0-0/0/22519.
0.0097049477548510.00.0088.13
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ce1e5b809bc28

0-0-0/0/21586.
0.0097049475071010.00.0084.76
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2790646ac946f

0-0-0/0/22226.
0.0097049575801400.00.0087.26
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0-0/0/22819.
0.0097049474715420.00.0089.92
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_094e95a038220

0-0-0/0/22200.
0.0097049473607920.00.0086.11
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0-0/0/22570.
0.009704917779731960.00.0088.67
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0-0/0/22864.
0.00970492878919270.00.0088.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0-0/0/22054.
0.0097049384418740.00.0085.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_545ce2ad53bbd

0-0-0/0/22433.
0.00970493570882110.00.0088.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0-0/0/22092.
0.0097049374265320.00.0087.24
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dc1822d30726f

0-0-0/0/22083.
0.0097049473878050.00.0086.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9c7853f79ed6e

0-0-0/0/22424.
0.0097049372297040.00.0087.47
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d6073e42d3f79

0-0-0/0/22643.
0.009704920874955310.00.0088.86
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVLLbtswELwXyD8QvOuJH

0-0-0/0/21674.
0.0097049681388990.00.0084.02
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0-0/0/22144.
0.0097049480350120.00.0086.56
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_25841df03df9c

0-0-0/0/21899.
0.0097049479521810.00.0085.73
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0-0/0/21582.
0.0097049481896280.00.0085.57
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0-0/0/21414.
0.0097049479621410.00.0084.27
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a55712375d6a6

1-0-0/0/20956.
0.00202324135156734020.00.0081.51
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_295ef54799d51

1-0-0/0/20821.
0.00202324121253522300.00.0084.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/20619.
0.00202324113560575040.00.0086.20
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2vNKQh

1-0-0/0/20691.
0.00202324116958913150.00.0080.31
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLrtMwFNz3K6rs83CBp

1-0-0/0/19986.
0.00202324173655388890.00.0085.70
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_46c74db59836f

1-0-0/0/19835.
0.00202324142652793580.00.0077.28
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d4a569605f438

1-0-0/0/20947.
0.00202324143859888490.00.0081.91
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_18831636a3a9d

1-0-0/0/20006.
0.00202324137854912800.00.0078.05
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7b20af41056ba

1-0-0/0/20288.
0.00202324101457947670.00.0080.79
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c2ce4e06e6bdb

1-0-0/0/19970.
0.00202324174960504640.00.0077.89
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a65ce77d5ad13

1-0-0/0/19974.
0.00202324120767422150.00.0078.00
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLrtMwFNz3K6rs83AaU

1-0-0/0/19901.
0.00202324131257746780.00.0078.07
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c8642ee9e4f74

1-0-0/0/21065.
0.00202324158456652970.00.0082.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_34101088b1dd2

1-0-0/0/20733.
0.00202324116957204750.00.0079.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdJVFeo

1-0-0/0/21135.
0.00202324152862491000.00.0081.89
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9bQVW

1-0-0/0/19715.
0.00202324142853927340.00.0078.35
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e195b0e3fb684

1-0-0/0/20239.
0.00202324199657759580.00.0079.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_be26db52ce1d2

1-0-0/0/19459.
0.0020232495459927860.00.0075.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/20159.
0.0020232494765127500.00.0079.35
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?Aut
      Found on 2024-11-10 15:14

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abaea9b66be0

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 08-Nov-2024 21:23:33 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  100 days 11 hours 13 minutes 59 seconds
Server load: 0.53 1.14 1.60
Total accesses: 2125095 - Total Traffic: 8.1 GB - Total Duration: 675249782
CPU Usage: u109.4 s156.31 cu730.78 cs384.38 - .0159% CPU load
.245 requests/sec - 1001 B/second - 4089 B/request - 317.75 ms/request
1 requests currently being processed, 74 idle workers
_________________________.......................................
................................................................
......................_________W_______________.................
................................._________________________......
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0299830/1135/22269_
19.46552369053100.04.4286.49
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_18b32204dbd0e

0-0299830/1326/22226_
19.48202578746620.05.6386.68
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0299830/1373/22185_
19.496910574873840.05.6186.74
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0299830/1217/21665_
19.46415370454690.04.7484.67
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_60ab6aab9a6dd

0-0299830/1290/22244_
19.48145383902370.05.3187.53
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5bcaa7b032b1b

0-0299830/1075/21537_
19.46520473119660.04.4584.78
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0299830/1220/22629_
19.46389375525440.05.0188.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e9353bf851b63

0-0299830/1247/22301_
19.48109477088010.05.1087.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0299830/1295/21385_
19.48263574414180.05.2583.93
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0299830/1193/21987_
19.48231475370290.04.9286.29
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0299830/1278/22595_
19.463232574108890.05.4189.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fef4bef83a01a

0-0299830/1172/22026_
19.46443373091230.04.8485.42
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c540db34d1213

0-0299830/1234/22404_
19.4945379408780.05.1688.08
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_92b1011b55b77

0-0299830/1214/22689_
19.46364378675040.04.8287.94
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_632aadf2828ba

0-0299830/1369/21814_
19.46469384114720.05.4284.62
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e888f4977463a

0-0299830/1149/22226_
19.4827116470463130.04.6987.48
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0299830/1198/21918_
19.45754373686050.05.1186.60
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c16bc5ae1b9b8

0-0299830/1201/21899_
19.456954573612570.05.0285.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_28aabc732f1e7

0-0299830/1287/22216_
19.48179471993130.05.3886.63
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0299830/1205/22467_
19.45654474467310.04.8088.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0299830/1149/21499_
19.46630281152040.04.8083.38
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0299830/1272/21965_
19.4913479996700.05.3185.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0299830/1204/21723_
19.464992379258610.04.9285.00
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0299830/1301/21419_
19.46593481739840.05.1784.98
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0299830/1183/21216_
19.45720379180900.04.6783.45
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2989775063ee5

1-0-0/0/20956.
0.0051670135156734020.00.0081.51
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_295ef54799d51

1-0-0/0/20821.
0.0051670121253522300.00.0084.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/20619.
0.0051670113560575040.00.0086.20
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2vNKQh

1-0-0/0/20691.
0.0051670116958913150.00.0080.31
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLrtMwFNz3K6rs83CBp

1-0-0/0/19986.
0.0051670173655388890.00.0085.70
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_46c74db59836f

1-0-0/0/19835.
0.0051670142652793580.00.0077.28
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d4a569605f438

1-0-0/0/20947.
0.0051670143859888490.00.0081.91
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_18831636a3a9d

1-0-0/0/20006.
0.0051670137854912800.00.0078.05
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7b20af41056ba

1-0-0/0/20288.
0.0051670101457947670.00.0080.79
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c2ce4e06e6bdb

1-0-0/0/19970.
0.0051670174960504640.00.0077.89
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a65ce77d5ad13

1-0-0/0/19974.
0.0051670120767422150.00.0078.00
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLrtMwFNz3K6rs83AaU

1-0-0/0/19901.
0.0051670131257746780.00.0078.07
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c8642ee9e4f74

1-0-0/0/21065.
0.0051670158456652970.00.0082.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_34101088b1dd2

1-0-0/0/20733.
0.0051670116957204750.00.0079.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdJVFeo

1-0-0/0/21135.
0.0051670152862491000.00.0081.89
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9bQVW

1-0-0/0/19715.
0.0051670142853927340.00.0078.35
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e195b0e3fb684

1-0-0/0/20239.
0.0051670199657759580.00.0079.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_be26db52ce1d2

1-0-0/0/19459.
0.005167095459927860.00.0075.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/20159.
0.005167094765127500.00.0079.35
127.0.0.1http/1.1ip-1
      Found on 2024-11-08 21:23

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae8df2112b

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 06-Nov-2024 18:09:59 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  98 days 8 hours 25 seconds
Server load: 0.69 1.34 1.34
Total accesses: 2069497 - Total Traffic: 7.9 GB - Total Duration: 651293566
CPU Usage: u97.57 s147.11 cu718.65 cs377.92 - .0158% CPU load
.244 requests/sec - 995 B/second - 4085 B/request - 314.711 ms/request
1 requests currently being processed, 49 idle workers
_____________________________W____________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0299830/242/21376_
4.7724364765680.00.8582.92
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0e9e8005104b9

0-0299830/343/21243_
4.7544931376207120.01.4782.52
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0299830/362/21174_
4.75416571778470.01.5082.63
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0299830/293/20741_
4.76329367323930.01.1781.09
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6a77987f44ac8

0-0299830/318/21272_
4.755013681231660.01.3783.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0299830/327/20789_
4.76142570961230.01.3381.66
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7ef78d4143369

0-0299830/308/21717_
4.76115072717680.01.1984.19
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /robots.txt HTTP/1.1

0-0299830/347/21401_
4.761804473463670.01.4483.67
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_31ea5ef6669e2

0-0299830/291/20381_
4.7474916671151050.01.2079.88
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0299830/318/21112_
4.7553313772366870.01.3382.70
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0299830/316/21633_
4.77614469995110.01.2984.90
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_690b1e1e3be88

0-0299830/234/21088_
4.75699470413500.00.9781.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2fa09562c3646

0-0299830/254/21424_
4.75388875694210.01.0883.99
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0299830/283/21758_
4.763615675313870.01.0984.22
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5a9491a9a0254

0-0299830/221/20666_
4.7627717381144810.00.7979.99
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0299830/230/21307_
4.7567715967072810.00.9983.78
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0299830/346/21066_
4.763024370485450.01.5182.99
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0299830/333/21031_
4.76214370252510.01.3981.98
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0299830/315/21244_
4.7560615369433710.01.3182.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0299830/268/21530_
4.75554471900990.01.0684.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9313f8f1aeb27

0-0299830/253/20603_
4.756402278284530.01.1879.75
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0299830/278/20971_
4.757214475363700.01.1581.69
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_39ad0d11aa5c9

0-0299830/229/20748_
4.755881176408000.00.9581.03
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fa396fa3eab7b

0-0299830/295/20413_
4.7784478490450.01.1880.98
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0299830/318/20351_
4.76240475267340.01.3380.10
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0300910/241/20224_
4.37687354433530.01.0078.38
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0300910/340/20153_
4.37714451372650.01.3381.38
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0300910/262/19825_
4.3866557208630.01.0982.96
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_84f39b5f83b2f

1-0300910/291/19973_
4.381205455892760.01.1577.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1c06fd684cc1b

1-03009111/269/19290W
4.3900522965321.40.9782.92
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

1-0300910/289/18971_
4.38294348814410.01.2173.73
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6aa7f88497ee9

1-0300910/277/20025_
4.37660356498740.01.2477.92
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_86a438e8e123c

1-0300910/264/19269_
4.376004652146110.01.0575.23
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bf8087d37eb2f

1-0300910/245/19377_
4.3756923555159390.01.0977.27
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0300910/246/19154_
4.38401456968550.00.9674.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d94cbf9eb6e83

1-0300910/312/19190_
4.37628564185410.01.2274.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_267fdf8c6e534

1-0300910/302/19159_
4.37521455587950.01.1575.04
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6d2923ea10bbf

1-0300910/240/20254_
4.375399554072330.01.0478.87
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8ed90bcce8c68

1-0300910/233/19856_
4.38477453603540.01.0175.79
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_726ab5ea95947

1-0300910/296/20405_
4.383482558736220.01.2478.82
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0300910/231/18940_
4.38432350380090.00.9775.29
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d89294472ca30

1-0300910/246/19449_
4.38371355298820.00.9476.25
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6f8ffe127dda7

1-0300910/293/18685_
4.38310755001450.01.1972.41
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0300910/300/19433_
4.38261362503930.01.2676.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserp
      Found on 2024-11-06 18:09

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae86304837

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 05-Nov-2024 00:31:14 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  96 days 14 hours 21 minutes 40 seconds
Server load: 8.55 5.44 4.65
Total accesses: 2033641 - Total Traffic: 7.7 GB - Total Duration: 640918102
CPU Usage: u105.05 s149.69 cu695.13 cs364.41 - .0157% CPU load
.244 requests/sec - 995 B/second - 4084 B/request - 315.158 ms/request
3 requests currently being processed, 47 idle workers
__________________WK_____.......................................
................................................................
...............................................___________W_____
________........................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0161490/745/20716_
11.932441562459660.02.9080.38
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

0-0161490/736/20444_
11.95754674572990.02.7579.31
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0161490/839/20281_
11.91470069411580.03.1779.14
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

0-0161490/735/19989_
11.94120465570840.02.8278.02
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0161490/871/20494_
11.932191178543090.03.4080.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0161490/885/19968_
11.90507158067750060.03.4178.48
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0161490/803/20984_
11.93234151570679710.03.0881.39
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/username.php HTTP/1.1

0-0161490/958/20581_
11.93224270718760.03.6180.30
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0161490/955/19555_
11.90485369447160.03.9076.66
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0161490/817/20427_
11.91454470375080.03.1379.98
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0161490/933/20917_
11.9412617967940890.03.5682.06
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tcw1dCa

0-0161490/826/20476_
11.923911568983420.02.8979.03
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0161490/783/20582_
11.931963772861190.02.9980.62
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2d546f364b901

0-0161490/841/21052_
11.924209872719360.03.2481.45
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

0-0161490/863/20018_
11.9661079358030.03.3877.52
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

0-0161490/910/20588_
11.9497465305410.03.7481.00
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0161490/907/20238_
11.923767868062080.03.6079.47
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_00c889785132b

0-0161490/823/20230_
11.92412316768454670.03.3678.93
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0161493/854/20508W
11.962067650134.63.2079.51
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jZJPb9swDMXvA%2FYdBN3

0-0161494/716/20850K
11.960069761504.22.6381.84
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /ecp/Current/exporttool/microsoft.exchange.ediscovery.expor

0-0161490/732/19998_
11.923166077025710.02.8777.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ad78a6b6ab43a

0-0161490/803/20241_
11.9234517673531480.03.0978.81
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0161490/805/20089_
11.961623774062040.03.0978.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b4e9097f2522a

0-0161490/802/19697_
11.91462076056050.03.0778.19
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-0161490/758/19607_
11.96481373070660.02.8576.96
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5fedc50447649

1-0-0/0/19983.
0.0085216353780480.00.0077.39
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ede7318e60459

1-0-0/0/19813.
0.0085216650684260.00.0080.04
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/19563.
0.0085216356400250.00.0081.86
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_12956f519ed5d

1-0-0/0/19682.
0.0085216455334660.00.0076.27
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0-0/0/19021.
0.0085216351442750.00.0081.96
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/18682.
0.00852163748208760.00.0072.52
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/19748.
0.0085216155964480.00.0076.69
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/19005.
0.0085216451532340.00.0074.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_182726e6345b8

1-0-0/0/19132.
0.00852163854362820.00.0076.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_91bfbf4ff7c90

1-0-0/0/18908.
0.008521615655597830.00.0073.48
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPbitswEH3PVwS%2F%2B

1-0-0/0/18878.
0.0085216563310080.00.0073.63
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0-0/0/18857.
0.0085216555026870.00.0073.89
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0-0/0/20014.
0.00852164853253240.00.0077.83
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6e29b6ab7971b

1-0-0/0/19623.
0.0085216452537790.00.0074.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0-0/0/20109.
0.0085216458000740.00.0077.58
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0-0/0/18709.
0.0085216449881360.00.0074.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0-0/0/19203.
0.0085216055033200.00.0075.31
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/18392.
0.0085216554437800.00.0071.22
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-0-0/0/19133.
0.0085216461567630.00.0075.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8698558128e29

1-0-0/0/18853.
0.00852164851752200.00.0072.77
127.0.0.1http/1.1<
      Found on 2024-11-05 00:31

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abaee32b09c6

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 02-Nov-2024 23:22:20 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  94 days 13 hours 12 minutes 46 seconds
Server load: 1.21 1.34 1.60
Total accesses: 2004784 - Total Traffic: 7.6 GB - Total Duration: 634083178
CPU Usage: u106.23 s148.04 cu681.16 cs356.44 - .0158% CPU load
.245 requests/sec - 1002 B/second - 4084 B/request - 316.285 ms/request
1 requests currently being processed, 74 idle workers
_______________________W__________________________..............
................................................................
..............................................._________________
________........................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0161490/306/20277_
4.95708361355040.01.1478.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_df35273203aa8

0-0161490/343/20051_
4.973825673933960.01.2977.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_940c7f1d72870

0-0161490/364/19806_
4.97553968617600.01.3877.35
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_61e404338e045

0-0161490/304/19558_
4.974413964379120.01.1376.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0ecdb3ff1745f

0-0161490/379/20002_
4.975615276705960.01.4678.50
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8606c940cb88d

0-0161490/402/19485_
4.97201366823690.01.6176.68
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0161490/303/20484_
4.97590569591610.01.1379.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d0cd0084baddd

0-0161490/376/19999_
4.97661569813910.01.4178.10
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

0-0161490/418/19018_
4.9798468270310.01.6974.45
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0161490/359/19969_
4.941019469423000.01.3478.19
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0161490/377/20361_
4.9751810165339140.01.4179.91
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0161490/361/20011_
4.95907368206200.01.2877.42
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3a5178f5ae45d

0-0161490/362/20161_
4.97495271885650.01.3478.96
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0161490/339/20550_
4.9497817271662500.01.3379.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0161490/340/19495_
4.97475177403320.01.3475.48
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0161490/425/20103_
4.9741642764095250.01.7679.02
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0161490/337/19668_
4.957414566645790.01.3177.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d49899de495b1

0-0161490/360/19767_
4.958624767095080.01.5377.10
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5967bf1e2baf8

0-0161490/358/20012_
4.97246866300830.01.3977.70
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0161490/292/20426_
4.97152569114630.01.0180.22
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0161490/333/19599_
4.956816476131480.01.2675.56
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c4cdeeb974a68

0-0161490/354/19792_
4.958034072487960.01.4477.16
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f5393e2513dba

0-0161490/332/19616_
4.97343272951070.01.2976.75
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0161498/339/19234W
4.980075081649.81.3776.49
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

0-0161490/313/19162_
4.97314471968940.01.2375.34
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_32a630890db91

1-0217730/1421/19771_
18.78306453336800.05.6076.62
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c5b4f6963e17e

1-0217730/1444/19586_
18.77405450474750.05.5379.19
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0217730/1330/19338_
18.741002356131370.04.8781.00
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e0dedf6b82b32

1-0217730/1499/19478_
18.8053054769050.05.7075.46
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0217730/1328/18752_
18.75772050668520.05.3581.05
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0217730/1240/18465_
18.741055347910880.04.7171.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_71e2377de1d87

1-0217730/1171/19581_
18.76576355479620.04.3976.09
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bb74d948d60cc

1-0217730/1313/18758_
18.7667118450823800.05.2673.22
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0217730/1277/18941_
18.78354453902770.04.8375.46
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0217730/1013/18642_
18.77455254966550.04.1272.49
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0217730/1270/18677_
18.7654520962212020.05.0872.81
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcgUA2y

1-0217730/1086/18678_
18.74896354817710.04.2573.23
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_229d0555e157e

1-0217730/1316/19767_
18.80135252889620.05.0776.98
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0217730/1376/19376_
18.74824352030640.05.3073.82
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_21ff38ac45ecf

1-0217730/1260/19916_
18.79212457725280.04.7076.86
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0217730/1271/18497_
18.78334449311210.04.8673.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0217730/1350/18996_
18.77489354435240.05.2574.54
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3e7c06106c119

1-0217730/1126/18145_
18.76658453901130.04.1470.15
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0217730/1210/18886_
18.74935761235460.04.7274.15
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0217730/1163/18678_
      Found on 2024-11-02 23:22

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abaefaffcc64

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 01-Nov-2024 22:05:01 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  93 days 11 hours 55 minutes 27 seconds
Server load: 0.94 1.55 1.44
Total accesses: 1988864 - Total Traffic: 7.6 GB - Total Duration: 631066719
CPU Usage: u99.55 s143.07 cu681.16 cs356.44 - .0158% CPU load
.246 requests/sec - 1005 B/second - 4085 B/request - 317.3 ms/request
1 requests currently being processed, 74 idle workers
__________________W_______________________________..............
................................................................
..............................................._________________
________........................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0161490/113/20084_
2.18510361091440.00.4177.89
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_aa1c9f89ccddc

0-0161490/124/19832_
2.199225873420500.00.5177.07
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0161490/106/19548_
2.16861368149590.00.4676.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0161490/100/19354_
2.18190564192820.00.3575.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0161490/161/19784_
2.1832121676009430.00.6977.73
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcgQDZJ

0-0161490/217/19300_
2.15989466477070.00.8875.96
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2436741c5dafb

0-0161490/119/20300_
2.183623869294910.00.4878.79
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9bb5998398823

0-0161490/162/19785_
2.18433469428740.00.5977.28
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b59d251bd1d1b

0-0161490/164/18764_
2.1690110967812360.00.7273.48
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/username.php HTTP/1.1

0-0161490/169/19779_
2.16774568858100.00.6877.53
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ee3901b307751

0-0161490/159/20143_
2.182943665021770.00.6379.13
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0161490/178/19828_
2.166633967778540.00.6376.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_33afd32d8b8be

0-0161490/165/19964_
2.18267471234140.00.6478.27
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e7b84df723d9d

0-0161490/160/20371_
2.167144771018760.00.6278.84
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0161490/145/19300_
2.18237377170460.00.5774.71
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d6cea735f93cd

0-0161490/173/19851_
2.18150463751700.00.7177.97
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0161490/137/19468_
2.175434466260530.00.5276.38
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d9b11aba8039f

0-0161490/167/19574_
2.16619566783050.00.7576.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-01614910/162/19816W
2.1900658308016.80.6776.98
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

0-0161490/100/20234_
2.1595916668489500.00.3479.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0161490/131/19397_
2.18475775690130.00.5474.83
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0161490/177/19615_
2.16578372289290.00.7976.51
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3057e70c77cda

0-0161490/133/19417_
2.1940672662960.00.5676.02
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_00ff422f45e14

0-0161490/122/19017_
2.16815474620120.00.5275.64
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0161490/142/18991_
2.196211071735070.00.6074.71
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/username.php HTTP/1.1

1-0217730/1192/19542_
15.761006453095400.04.7475.76
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0217730/1223/19365_
15.7977250074000.04.6178.27
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0217730/1159/19167_
15.76706455963660.04.2580.38
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_63c0f31a8cf07

1-0217730/1301/19280_
15.76801354409280.04.9874.74
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e25fd6d6236fc

1-0217730/1095/18519_
15.77525450333710.04.4380.13
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4d24cc771fa02

1-0217730/1069/18294_
15.767585547373340.04.0670.94
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0217730/925/19335_
15.77316455086100.03.4475.14
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c8a348b7c9130

1-0217730/1146/18591_
15.774224450265110.04.6672.63
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e1be3ddd612db

1-0217730/1069/18733_
15.79534053468020.04.0574.68
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b324e95503018

1-0217730/794/18423_
15.78178354641610.03.3471.71
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b8008bcb7de7a

1-0217730/1084/18491_
15.7828696861862270.04.3172.04
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcAUM2h

1-0217730/884/18476_
15.776035454347240.03.5172.49
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_312f7daa05afd

1-0217730/1075/19526_
15.76886352445800.04.1176.02
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7b06be6511fc9

1-0217730/1146/19146_
15.7757510851370420.04.3872.90
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0217730/1074/19730_
15.76980457446810.03.9976.15
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0217730/1063/18289_
15.792720549122360.04.1572.88
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0217730/1039/18685_
15.78229166453952100.03.9973.28
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0217730/930/17949_
15.773411853654970.03.4669.47
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

1-0217730/997/18673_
15.77645460950700.03.9973.42
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /mod
      Found on 2024-11-01 22:04

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abaef4d3d89b

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 30-Oct-2024 16:46:48 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  91 days 6 hours 37 minutes 14 seconds
Server load: 2.27 2.01 1.75
Total accesses: 1929013 - Total Traffic: 7.3 GB - Total Duration: 611069027
CPU Usage: u84.94 s132.18 cu671.11 cs350.67 - .0157% CPU load
.245 requests/sec - 999 B/second - 4086 B/request - 316.778 ms/request
1 requests currently being processed, 49 idle workers
_______________________________________W__________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0217340/45/19293_
0.154541259124460.00.1574.86
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/no_cookie.php?retryURL=https%3A%2F%2Flowth

0-0217340/30/18837_
0.16325470348070.00.1073.27
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0217340/34/18512_
0.16443465486470.00.1272.20
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0217340/11/18426_
0.1448013861771600.00.0472.02
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0217340/11/18955_
0.14498373451570.00.0474.56
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_34b3e35c04e27

0-0217340/9/18210_
0.145294361865300.00.0371.45
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_39df80c131641

0-0217340/7/19286_
0.13550466354370.00.0274.83
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_79e2fd709e1f4

0-0217340/9/18868_
0.18125366999890.00.0373.84
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2d7fa23918ab7

0-0217340/8/17910_
0.162884165345270.00.0270.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_432d869b9de46

0-0217340/15/18819_
0.17257266352910.00.0573.90
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0217340/15/19280_
0.172315961666300.00.0575.93
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ea0d2b676c3ff

0-0217340/15/18776_
0.17212365035460.00.0572.88
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_23a017ada07e0

0-0217340/22/19108_
0.18168468731540.00.0774.97
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0217340/9/19466_
0.18145468916300.00.0375.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_11ac804c733d1

0-0217340/11/18314_
0.18103474394810.00.0470.94
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0217340/11/18800_
0.1885460915110.00.0473.82
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0217340/15/18566_
0.185023663274950.00.0572.91
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8f2b0a0193673

0-0217340/9/18648_
0.186364218960.00.0372.64
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5a7b538141d79

0-0217340/10/18900_
0.127704262964140.00.0373.26
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9b3af563a35b4

0-0217340/9/19423_
0.12747365087740.00.0376.57
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d4c98552bde03

0-0217340/10/18242_
0.1272617972845760.00.0470.41
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0217340/9/18659_
0.12689469937890.00.0372.73
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9509a75b23670

0-0217340/16/18647_
0.136514369394870.00.0572.89
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_24250de223a7c

0-0217340/8/18239_
0.13625471233680.00.0372.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0217340/10/18220_
0.13590369223780.00.0371.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ecf6d080c1691

1-0217730/17/18367_
0.171103748867380.00.0671.08
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_046a91ef622ff

1-0217730/11/18153_
0.17134346598320.00.0473.70
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_db1cc3ee70d24

1-0217730/11/18019_
0.17203353771920.00.0476.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c86d6afe12f82

1-0217730/11/17990_
0.1715617450105880.00.0469.80
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0217730/13/17437_
0.17220448017660.00.0475.74
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0217730/10/17235_
0.17244344947790.00.0366.91
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_037ff06981452

1-0217730/9/18419_
0.17268352680310.00.0371.74
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3bf89a1488abb

1-0217730/14/17459_
0.17296447049400.00.0568.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0217730/29/17693_
0.174105651653220.00.1070.74
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d64b829b00e02

1-0217730/13/17642_
0.15454352495590.00.0468.41
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0217730/9/17416_
0.14485358129820.00.0367.76
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4c658c2e968a9

1-0217730/12/17604_
0.179380951438270.00.0469.02
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0217730/15/18466_
0.1780348799420.00.0571.96
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6956e2e5250ea

1-0217730/13/18013_
0.1717177947772610.00.0468.56
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0217739/24/18680W
0.1800536990513.80.0772.23
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

1-0217730/12/17238_
0.14763445986640.00.0468.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_02989624688a9

1-0217730/10/17656_
0.14734650863370.00.0369.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0217730/16/17035_
0.14708250792400.00.0566.06
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0217730/23/17699_
0.14667657284690.00.0769.50
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0</
      Found on 2024-10-30 16:46

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae5398eeaf

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 26-Oct-2024 13:36:28 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  87 days 3 hours 26 minutes 54 seconds
Server load: 0.72 1.15 1.38
Total accesses: 1839809 - Total Traffic: 7.0 GB - Total Duration: 582393861
CPU Usage: u89.71 s130.77 cu625.12 cs325.79 - .0156% CPU load
.244 requests/sec - 998 B/second - 4084 B/request - 316.551 ms/request
1 requests currently being processed, 74 idle workers
................................................................
.............................................................___
_W______________________________________________________________
________........................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/19248.
0.0011012592959110750.00.0074.70
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtsgFN3nKyLv%2FQi

0-0-0/0/18807.
0.00110125134770334390.00.0073.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_649f1106e1c69

0-0-0/0/18478.
0.00110125192965471570.00.0072.09
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_131d040ef5949

0-0-0/0/18415.
0.0011012574361757560.00.0071.98
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owEL3zK1Du%2BYS

0-0-0/0/18944.
0.0011012559973442600.00.0074.52
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7Kwzdra1Wr

0-0-0/0/18201.
0.0011012575261860300.00.0071.42
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PHkMW

0-0-0/0/19279.
0.001101258966350010.00.0074.80
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtMwFN33K6rs82gmA

0-0-0/0/18859.
0.00110125466994630.00.0073.82
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2PBuSy

0-0-0/0/17902.
0.00110125118465340250.00.0070.14
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9918bffc6f99f

0-0-0/0/18804.
0.00110125136466337720.00.0073.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2Bcx

0-0-0/0/19265.
0.0011012599661661760.00.0075.88
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f81f20a51a4be

0-0-0/0/18761.
0.0011012567765023480.00.0072.83
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPJbtswFLz7KwzdtcaOL

0-0-0/0/19086.
0.00110125103268635740.00.0074.89
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9WLsR

0-0-0/0/19457.
0.0011012597468908890.00.0075.14
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_45a48771e1609

0-0-0/0/18303.
0.0011012586774391820.00.0070.90
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPbjpswEH3PV0S8cwkiI

0-0-0/0/18789.
0.0011012591360908870.00.0073.79
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNdb5swFH3Pr4h45yOkG

0-0-0/0/18551.
0.00110125135363267040.00.0072.87
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0246d8cf13c1a

0-0-0/0/18639.
0.00110125185264192000.00.0072.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bc9e4e443f50f

0-0-0/0/18890.
0.0011012596662957640.00.0073.23
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_95b67a1221a88

0-0-0/0/19414.
0.00110125134465080780.00.0076.54
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_44e65bbb77ae9

0-0-0/0/18232.
0.00110125136872830150.00.0070.37
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PAgwo

0-0-0/0/18650.
0.0011012599069932790.00.0072.70
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_b68d0ff3c901d

0-0-0/0/18631.
0.00110125141669385150.00.0072.84
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0-0/0/18231.
0.0011012596971225760.00.0072.58
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_46f164ea41457

0-0-0/0/18210.
0.0011012575769217780.00.0071.68
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_546e6f77e726d

1-0-0/0/18350.
0.0011015619948820110.00.0071.02
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PDUMw

1-0-0/0/18142.
0.00110156115046571500.00.0073.67
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ee155b0fdae01

1-0-0/0/18008.
0.0011015691453769460.00.0076.13
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c8f4788b48568

1-0-0/0/17979.
0.00110156116750024960.00.0069.76
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLrtMwFNz3K6rs82xDw

1-0-0/0/17424.
0.0011015621348013220.00.0075.70
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/17225.
0.0011015690644942550.00.0066.87
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d3ac10ad40578

1-0-0/0/18410.
0.0011015693852670840.00.0071.71
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7vDNQL

1-0-0/0/17445.
0.00110156323547043010.00.0067.96
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9cf325565a3a9

1-0-0/0/17664.
0.00110156134351644570.00.0070.64
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcAZMND

1-0-0/0/17629.
0.0011015670952488300.00.0068.37
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fd0c489467952

1-0-0/0/17407.
0.0011015691658121170.00.0067.73
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/17592.
0.0011015644951366740.00.0068.98
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PDAwM

1-0-0/0/18451.
0.0011015619148777410.00.0071.91
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2PEISG

1-0-0/0/18000.
0.0011015621147731680.00.0068.52
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0-0/0/18656.
0.00110156132553683590.00.0072.16
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PCcIs

1-0-0/0/17226.
0.0011015650345978980.00.0068.73
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f2c02fa3eb00e

1-0-0/0/17646.
0.00110156113650853920.00.0069.29
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcAcNuw

1-0-0/0/17019.
0.0011015671550786250.00.0066.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8ef176838c3bc

1-0-0/0/17676.
0.0011015647257281280.00.0069.43
127.0.0.1http/1.1ip-10-1
      Found on 2024-10-26 13:36

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae0d4a62a6

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 24-Oct-2024 14:46:33 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  85 days 4 hours 36 minutes 59 seconds
Server load: 1.03 1.10 1.11
Total accesses: 1790756 - Total Traffic: 6.8 GB - Total Duration: 569108839
CPU Usage: u99.12 s132.97 cu596.4 cs310.11 - .0155% CPU load
.243 requests/sec - 994 B/second - 4086 B/request - 317.804 ms/request
1 requests currently being processed, 49 idle workers
_________________________W________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-042650/878/18720_
15.53964157761080.03.5072.62
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9a113bad1b3be

0-042650/948/18361_
15.501007369282800.03.8571.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-042650/1080/18132_
15.51654264560200.04.2270.65
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-042650/973/17999_
15.52537360980800.03.8470.53
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-042650/879/18527_
15.518153972482640.03.4672.89
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5f866176083b1

0-042650/1119/17895_
15.5347360797400.04.6370.18
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_44c3f11fe2d3c

0-042650/934/18648_
15.51716465042470.03.5472.37
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d99b3ae540deb

0-042650/976/18504_
15.51587466047880.03.6272.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e45c4aadfb5a2

0-042650/918/17518_
15.50896463816440.03.6768.74
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2b6b1e34da7da

0-042650/1054/18442_
15.51617265131300.04.3072.56
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-042650/1042/18862_
15.525164660353320.04.2174.46
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fff709d515d4b

0-042650/1090/18361_
15.52394663770290.04.3071.29
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-042650/991/18499_
15.524564467678570.04.2572.74
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9862fbe846193

0-042650/1251/18941_
15.50956366943410.05.0573.02
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_820bec1b577be

0-042650/1337/17954_
15.539373593250.05.3169.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bc55c6c91ca52

0-042650/1150/18415_
15.52499459905620.04.6072.41
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-042650/997/18274_
15.52227262227510.03.7471.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-042650/1020/18281_
15.52245262334350.03.9871.15
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-042650/966/18537_
15.52200861741350.03.6371.78
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-042650/1022/19120_
15.52332564246450.04.1575.34
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3d954f03b9d39

0-042650/882/17781_
15.50935371455570.03.4468.68
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6d17776cff3d7

0-042650/926/18295_
15.53155468985610.03.5771.31
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-042650/1103/18200_
15.51867568283790.04.4871.21
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-042650/1166/17883_
15.509812069624410.04.7571.25
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-042650/953/17846_
15.51779667620250.03.8270.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-044019/1011/17884W
16.4300474478212.43.9869.25
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

1-044010/987/17674_
16.40468445314960.03.9471.90
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-044010/1108/17572_
16.422164752830440.04.5874.41
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8427ca5bfe48b

1-044010/1113/17550_
16.405764348543490.04.5768.06
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dea29088fc166

1-044010/1048/17068_
16.42261446547350.04.1874.19
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-044010/1082/16741_
16.4223716643577170.04.6064.96
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-044010/1005/18095_
16.42176551670630.04.0570.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-044010/1186/17030_
16.38924546242160.04.8466.38
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-044010/1098/17339_
16.42132750911390.04.5469.40
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-044010/932/17207_
16.4038320450612080.03.7366.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-044010/1030/17085_
16.397554756980030.04.2266.38
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a081e0c43b206

1-044010/904/17196_
16.38946550412270.03.4667.39
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-044010/1098/17866_
16.3895619547176670.04.4569.39
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-044010/1114/17644_
16.396954246682760.04.1667.05
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_09e1342f657d3

1-044010/1105/18235_
16.39885151966360.04.3570.39
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-044010/972/16836_
16.43365544986250.03.7367.20
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0dbbc7e4a9ca0

1-044010/1152/17275_
16.39801450223280.04.4767.67
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-044010/958/16640_
16.389954349700050.03.7564.50
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1dd2afa17cb72

1-044010/1078/17300_
16.39631455766990.04.3167.97
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ffbaa648ccf74
      Found on 2024-10-24 14:46

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae50bf67ed

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Tuesday, 22-Oct-2024 06:30:07 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  82 days 20 hours 20 minutes 33 seconds
Server load: 3.38 1.54 1.52
Total accesses: 1735297 - Total Traffic: 6.6 GB - Total Duration: 553269122
CPU Usage: u106.65 s133.57 cu564.99 cs293.64 - .0154% CPU load
.242 requests/sec - 989 B/second - 4080 B/request - 318.833 ms/request
1 requests currently being processed, 49 idle workers
........................._______________W_________..............
.............................................................___
______________________..........................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/17842.
0.00343664176455361950.00.0069.12
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du%2BVx

0-0-0/0/17413.
0.0034366421566723970.00.0067.58
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcAYPCb

0-0-0/0/17052.
0.00343664225261361860.00.0066.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2PDN5W

0-0-0/0/17026.
0.0034366440157617120.00.0066.69
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9axiW

0-0-0/0/17648.
0.00343664244370047300.00.0069.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPbjtowEH3nK1Dec6MsB

0-0-0/0/16776.
0.00343664127358056790.00.0065.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9YwbK

0-0-0/0/17714.
0.00343664216562067630.00.0068.82
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNdb5swFH3Pr4h4BwxL1

0-0-0/0/17528.
0.003436646263633550.00.0068.74
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSh78gRSL

0-0-0/0/16600.
0.0034366431861591930.00.0065.07
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_82cc83855e21b

0-0-0/0/17388.
0.003436645362901320.00.0068.26
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bdbdbea6a76af

0-0-0/0/17820.
0.0034366451258117900.00.0070.25
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6fd9705db061a

0-0-0/0/17271.
0.00343664157661571900.00.0066.99
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcA4ZsN

0-0-0/0/17508.
0.0034366429165301460.00.0068.49
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_199c865a0e9dc

0-0-0/0/17690.
0.0034366448461112740.00.0067.98
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_068fb9e6689f5

0-0-0/0/16617.
0.0034366433269267250.00.0064.25
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du%2BVw

0-0-0/0/17265.
0.003436648657331970.00.0067.81
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1e0d2dd7e8cff

0-0-0/0/17277.
0.00343664167359278480.00.0068.03
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2PNPmY

0-0-0/0/17261.
0.0034366469760204280.00.0067.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5be88b5bd25eb

0-0-0/0/17571.
0.00343664348659206090.00.0068.15
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9MwFLz3V1S555NCU

0-0-0/0/18098.
0.00343664560162300.00.0071.19
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcAZOQZ

0-0-0/0/16899.
0.0034366463367814180.00.0065.23
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d98475dbf9eb4

0-0-0/0/17369.
0.00343664143664767270.00.0067.74
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7KwzdrafTG

0-0-0/0/17097.
0.00343664386064359010.00.0066.73
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7vCDlY

0-0-0/0/16717.
0.00343664204465393030.00.0066.50
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7KwzdJVFKY

0-0-0/0/16893.
0.0034366433564834290.00.0066.35
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_13a1a521bf20f

1-0292530/1732/16834_
23.468233245096470.07.0865.12
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PCkDs

1-0292530/1790/16651_
23.436094542468700.07.1067.82
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_166f84889048a

1-0292530/1651/16408_
23.45158148235150.06.6369.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

1-0292530/1593/16398_
23.43515045810520.06.5463.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0292530/1605/15941_
23.452252643229920.06.5669.69
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0292530/1651/15612_
23.45395440181890.06.6360.15
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c0469b52ab1fe

1-0292530/2192/17036_
23.461920349202410.09.0766.00
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0292530/1844/15795_
23.46126442507050.07.1561.35
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5ad59e381254a

1-0292530/1660/16193_
23.444894648479040.06.7864.67
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dd5edea68cc8b

1-0292530/1556/16222_
23.44459046808390.06.2062.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0292530/1708/16012_
23.46705053785650.06.6861.99
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ba20889d88605

1-0292530/1836/16250_
23.45355447694590.07.4763.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0292530/1892/16692_
23.43628044675480.07.7564.60
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0292530/1701/16463_
23.45436443694740.06.9262.60
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3a19c4634d493

1-0292530/1943/17063_
23.45263348053110.08.0665.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a74a9bad42557

1-0292538/1715/15800W
23.460042165419.87.1963.18
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

1-0292530/2060/16054_
23.45303047362130.08.6062.92
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0292530/1867/15619_
23.4353718246216660.07.8260.50
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PJsZB

1-0292530/1642/16164_
23.4532215552823200.06.6163.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0292
      Found on 2024-10-22 06:30

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abaee6414dd7

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Sunday, 20-Oct-2024 06:26:13 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  80 days 20 hours 16 minutes 39 seconds
Server load: 0.38 0.84 1.20
Total accesses: 1674757 - Total Traffic: 6.4 GB - Total Duration: 539341391
CPU Usage: u97.1 s126.99 cu550.29 cs285.46 - .0152% CPU load
.24 requests/sec - 976 B/second - 4073 B/request - 322.042 ms/request
1 requests currently being processed, 74 idle workers
.........................________W______________________________
___________..................................................___
______________________..........................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/17842.
0.00170630176455361950.00.0069.12
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du%2BVx

0-0-0/0/17413.
0.0017063021566723970.00.0067.58
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcAYPCb

0-0-0/0/17052.
0.00170630225261361860.00.0066.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2PDN5W

0-0-0/0/17026.
0.0017063040157617120.00.0066.69
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9axiW

0-0-0/0/17648.
0.00170630244370047300.00.0069.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPbjtowEH3nK1Dec6MsB

0-0-0/0/16776.
0.00170630127358056790.00.0065.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7Kwzd9YwbK

0-0-0/0/17714.
0.00170630216562067630.00.0068.82
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNdb5swFH3Pr4h4BwxL1

0-0-0/0/17528.
0.001706306263633550.00.0068.74
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSh78gRSL

0-0-0/0/16600.
0.0017063031861591930.00.0065.07
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_82cc83855e21b

0-0-0/0/17388.
0.001706305362901320.00.0068.26
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bdbdbea6a76af

0-0-0/0/17820.
0.0017063051258117900.00.0070.25
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6fd9705db061a

0-0-0/0/17271.
0.00170630157661571900.00.0066.99
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcA4ZsN

0-0-0/0/17508.
0.0017063029165301460.00.0068.49
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_199c865a0e9dc

0-0-0/0/17690.
0.0017063048461112740.00.0067.98
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_068fb9e6689f5

0-0-0/0/16617.
0.0017063033269267250.00.0064.25
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du%2BVw

0-0-0/0/17265.
0.001706308657331970.00.0067.81
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1e0d2dd7e8cff

0-0-0/0/17277.
0.00170630167359278480.00.0068.03
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2PNPmY

0-0-0/0/17261.
0.0017063069760204280.00.0067.17
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5be88b5bd25eb

0-0-0/0/17571.
0.00170630348659206090.00.0068.15
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9MwFLz3V1S555NCU

0-0-0/0/18098.
0.00170630560162300.00.0071.19
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0TcAZOQZ

0-0-0/0/16899.
0.0017063063367814180.00.0065.23
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d98475dbf9eb4

0-0-0/0/17369.
0.00170630143664767270.00.0067.74
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7KwzdrafTG

0-0-0/0/17097.
0.00170630386064359010.00.0066.73
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7vCDlY

0-0-0/0/16717.
0.00170630204465393030.00.0066.50
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7KwzdJVFKY

0-0-0/0/16893.
0.0017063033564834290.00.0066.35
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_13a1a521bf20f

1-0292530/645/15747_
6.78369642657070.02.5960.63
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0292530/581/15442_
6.791884240016640.02.3263.04
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0292530/660/15417_
6.78419445821720.02.7065.69
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0292530/566/15371_
6.76827343335130.02.4859.28
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_400ece83052ba

1-0292530/642/14978_
6.78278241174860.02.6665.78
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0292530/565/14526_
6.76702237758310.02.3155.82
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0292530/649/15493_
6.78464446156400.02.6559.58
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0292530/776/14727_
6.78303440267710.03.0657.26
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0292538/470/15003W
6.800045821599.81.8759.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

1-0292530/591/15257_
6.76636244710760.02.2758.69
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0292530/520/14824_
6.79214051624250.02.0157.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /resources/script.js HTTP/1.1

1-0292530/539/14953_
6.76763644882460.02.2158.46
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjpswFN3nKyL2PMswG

1-0292530/698/15498_
6.76732341595950.02.9059.75
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_07ab491207226

1-0292530/508/15270_
6.7912133140503530.02.0657.74
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0292530/656/15776_
6.76592344804860.02.6660.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d813d47065f0e

1-0292530/644/14729_
6.7975340091980.02.8958.88
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_764c8aa0fd158

1-0292530/632/14626_
6.77545143097100.02.5156.84
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0292530/513/14265_
6.8024143982970.02.1354.81
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0292530/471/14993_
6.77505349291060.01.7658.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4da7636eaefba

1-0292530/668/15067_
      Found on 2024-10-20 06:26

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae7baa98ee

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Friday, 18-Oct-2024 05:13:25 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  78 days 19 hours 3 minutes 51 seconds
Server load: 1.63 1.64 1.86
Total accesses: 1625125 - Total Traffic: 6.2 GB - Total Duration: 528264872
CPU Usage: u102.04 s128.73 cu529.17 cs273.28 - .0152% CPU load
.239 requests/sec - 970 B/second - 4067 B/request - 325.061 ms/request
1 requests currently being processed, 74 idle workers
________________W_______________________________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0135840/979/17700_
15.67637555051080.03.7068.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0135840/946/17342_
15.67773266224630.03.4767.30
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0135840/1111/17030_
15.68450161187570.04.7166.35
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0135840/891/17002_
15.69234157478830.03.5966.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0135840/1107/17592_
15.685683969819650.04.2169.23
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c1d96a768c35c

0-0135840/965/16656_
15.68513057898320.03.6765.12
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /resources/post.js HTTP/1.1

0-0135840/1285/17679_
15.669262461638060.05.1068.69
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0135840/1058/17470_
15.66953163193100.04.1868.54
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0135840/1067/16558_
15.70151161136750.04.1564.93
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0135840/1143/17351_
15.6783516262631460.04.5968.13
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0135840/1139/17750_
15.71633957658420.04.5470.02
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0135840/1020/17134_
15.71113061075590.03.7966.50
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0135840/1214/17465_
15.6610233864878100.04.8868.35
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4d57eb570b9f3

0-0135840/1140/17653_
15.69195260888770.04.3667.81
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0135840/892/16577_
15.661062668912530.03.5864.11
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du%2BYI

0-0135840/907/17127_
15.661000456856280.03.4767.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0135848/1119/17209W
15.710058858439.84.2667.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

0-0135840/985/17139_
15.676837859846230.03.9566.73
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0e738a129d7da

0-0135840/976/17455_
15.67861358688630.03.6967.70
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_87f1af56be68a

0-0135840/1160/17977_
15.68609359818600.04.5970.75
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a48a7c7a7cc65

0-0135840/954/16867_
15.683294467582950.03.6465.11
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a0a0501cb0d14

0-0135840/995/17254_
15.68487564578550.03.8167.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0135840/1162/17036_
15.68372164142340.04.3866.51
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0135840/1238/16579_
15.67733464997360.04.6966.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0135840/856/16858_
15.692684064718930.03.2866.20
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6426e73b9f8a1

1-0136810/1073/15069_
15.8547116441425980.04.0657.89
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0136810/1077/14815_
15.85407138318440.04.7060.56
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0136810/1106/14738_
15.85434544477620.04.1462.91
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0136810/1025/14783_
15.8562335342066600.03.9656.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0136810/1025/14296_
15.855074139223190.03.8062.99
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fadd559d35423

1-0136810/1065/13917_
15.84945536727100.04.0053.30
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0136810/1108/14788_
15.87501444852970.04.2856.75
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

1-0136810/1004/13900_
15.86224338802860.04.0354.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_34b3aad1cd063

1-0136810/1069/14497_
15.8310133844308760.04.2357.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5b90aaab1a89a

1-0136810/1019/14630_
15.831039143480410.03.9356.24
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0136810/1044/14287_
15.85726250535330.03.9255.25
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0136810/1125/14378_
15.87101243620770.04.5556.13
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0136810/1108/14741_
15.85372139624560.04.4056.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0136810/1007/14733_
15.87143107438834780.03.8055.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-0136810/924/15087_
15.86187343812860.03.2757.51
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/idp/resumelogout.php?id=_a5352684bd96742e4

1-0136810/988/14066_
15.86319238354500.03.8255.93
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0136810/1150/13968_
15.8489614541863160.05.0354.24
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0136810/923/13713_
15.86257341648450.03.5152.49
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e59dd45b07eba

1-0136810/1168/14497_
15.85654448180180.04.6356.75
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c7c398eb4ee7b

1-0136810/1288/14376_
15.8575928239755070.04.87
      Found on 2024-10-18 05:13

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abaec6966448

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 16-Oct-2024 12:02:59 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  77 days 1 hour 53 minutes 25 seconds
Server load: 3.25 2.76 2.08
Total accesses: 1577096 - Total Traffic: 6.0 GB - Total Duration: 513229703
CPU Usage: u81.08 s113.79 cu529.17 cs273.28 - .015% CPU load
.237 requests/sec - 963 B/second - 4068 B/request - 325.427 ms/request
1 requests currently being processed, 74 idle workers
______________________________________W_________________________
___________.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0135840/414/17135_
5.361097452713580.01.5066.41
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_accb664b8dc00

0-0135840/356/16752_
5.3922264158910.01.2965.11
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0135840/518/16437_
5.36802458849770.02.3664.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0135840/352/16463_
5.36702356387500.01.3864.37
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_5caccce615969

0-0135840/490/16975_
5.369105167015010.01.8466.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0135840/340/16031_
5.36753155964300.01.3062.74
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/css/theme.css HTTP/1.1

0-0135840/486/16880_
5.381815159455370.02.1365.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_8f5cdc6408bc7

0-0135840/361/16773_
5.38343461314560.01.4065.76
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php HTTP/1.1

0-0135840/371/15862_
5.38239459244070.01.4162.18
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0135840/453/16661_
5.39104160918380.01.9765.51
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0135840/388/16999_
5.37435455204560.01.5066.97
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0135840/466/16580_
5.37570458928370.01.6664.38
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0135840/547/16798_
5.38384063386030.02.3665.83
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

0-0135840/395/16908_
5.36629359209820.01.5064.95
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1d3f34dd17075

0-0135840/301/15986_
5.3753514766570510.01.0961.63
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0135840/349/16569_
5.36102117155518370.01.3065.15
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fb2611dedefcd

0-0135840/334/16424_
5.38402356742840.01.2364.69
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_34699f5820160

0-0135840/401/16555_
5.38136245057051480.01.6664.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0135840/331/16810_
5.361053252857207650.01.3365.34
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

0-0135840/437/17254_
5.38273357217170.01.6567.81
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_bb3786ab804e3

0-0135840/418/16331_
5.3745624766357000.01.6163.09
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BUo

0-0135840/377/16636_
5.36733463311290.01.5365.05
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

0-0135840/398/16272_
5.3689154861700110.01.5263.65
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0135840/445/15786_
5.3697935963136390.01.7263.04
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

0-0135840/391/16393_
5.3667416263952580.01.6264.54
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0136810/435/14431_
5.44440339342390.01.5455.37
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f0e0308c614e3

1-0136810/516/14254_
5.444224336294030.02.4658.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2c71c5db4abe8

1-0136810/273/13905_
5.4446515342057550.01.0659.83
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0136810/372/14130_
5.4454113439186740.01.3954.15
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_dc75adb1bc9f3

1-0136810/406/13677_
5.43646436960210.01.4260.60
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_176845ccdf5fa

1-0136810/344/13196_
5.42994434903860.01.3650.66
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0136810/389/14069_
5.453845142063190.01.5253.99
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0136810/417/13313_
5.4624121037688220.01.7151.69
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du5BMW1

1-0136810/501/13929_
5.4210814542705940.02.1155.64
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_04f56f8d5e358

1-0136810/398/14009_
5.4643240890360.01.4753.78
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0136810/382/13625_
5.42900147667760.01.4052.73
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0136810/492/13745_
5.46144441141620.02.0053.57
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0136810/381/14014_
5.45358337973870.01.5953.80
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e549eaf8380cb

1-01368115/360/14086W
5.4700375826823.31.2753.05
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

1-0136810/361/14524_
5.46285442459710.01.3155.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-0136810/349/13427_
5.46194137232480.01.2853.39
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0136810/441/13259_
5.421028440329190.02.2251.42
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c3a584bc18ad1

1-0136810/358/13148_
5.46118340209780.01.3050.28
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_475510f7606c3

1-0136810/651/13980_
5.43707045608780.02.7354.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0136810/404/13492_
5.42940
      Found on 2024-10-16 12:02

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae9a46476e

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Monday, 14-Oct-2024 09:45:25 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  74 days 23 hours 35 minutes 51 seconds
Server load: 1.72 1.41 1.48
Total accesses: 1513918 - Total Traffic: 5.7 GB - Total Duration: 496026104
CPU Usage: u86.77 s114.91 cu499.42 cs257.78 - .0148% CPU load
.234 requests/sec - 949 B/second - 4065 B/request - 327.644 ms/request
1 requests currently being processed, 49 idle workers
.................................................._W____________
___________.....................................................
................................................................
..........................................................______
___________________.............................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/16721.
0.0026907186751767200.00.0064.91
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_77656bd704a1e

0-0-0/0/16396.
0.00269071195963311720.00.0063.82
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3f443ca8d3778

0-0-0/0/15919.
0.00269071208957500480.00.0061.65
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0bcfb71188e0a

0-0-0/0/16111.
0.0026907172854960830.00.0063.00
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c4c7414caa229

0-0-0/0/16485.
0.0026907174365626100.00.0065.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0-0/0/15691.
0.0026907176454439020.00.0061.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0-0/0/16394.
0.0026907147257048770.00.0063.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c8e83ac2e994d

0-0-0/0/16412.
0.0026907127360245860.00.0064.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a7c90bc0623e3

0-0-0/0/15491.
0.0026907125058055120.00.0060.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtMwFN33K6rs82xgi

0-0-0/0/16208.
0.0026907122859355520.00.0063.54
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1cc3008e7b143

0-0-0/0/16611.
0.0026907133654280850.00.0065.48
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_72ff02a547470

0-0-0/0/16114.
0.0026907117257626040.00.0062.71
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e11d3b325e70e

0-0-0/0/16251.
0.0026907144961919000.00.0063.47
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d224164ace92d

0-0-0/0/16513.
0.0026907113558265090.00.0063.45
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BVx

0-0-0/0/15685.
0.002690711265827220.00.0060.53
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BQw

0-0-0/0/16220.
0.00269071454034250.00.0063.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNdb5swFH3Pr4h457O0N

0-0-0/0/16090.
0.0026907147955899990.00.0063.46
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3096c47f01428

0-0-0/0/16154.
0.0026907148555143110.00.0062.78
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_40f10d734d6af

0-0-0/0/16479.
0.00269071203656109830.00.0064.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_85b3fdee3cf6a

0-0-0/0/16817.
0.0026907188656187550.00.0066.16
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_af50adebddb19

0-0-0/0/15913.
0.0026907113765433520.00.0061.48
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3a7f11095b887

0-0-0/0/16259.
0.0026907156362112700.00.0063.52
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_88499c215b217

0-0-0/0/15874.
0.00269071106459346600.00.0062.13
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fbeaa0a32c0fd

0-0-0/0/15341.
0.00269071349261920190.00.0061.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1168d4905ecad

0-0-0/0/16002.
0.00269071207163191220.00.0062.92
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_16ffae03a4a67

1-0-0/0/13996.
0.0082161538696640.00.0053.83
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

1-0-0/0/13738.
0.0082164235225400.00.0055.86
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_38a79571f6291

1-0-0/0/13632.
0.008216247841285090.00.0058.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0-0/0/13758.
0.008216538341330.00.0052.76
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c085787f40222

1-0-0/0/13271.
0.008216336143910.00.0059.18
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_322cf6485b146

1-0-0/0/12852.
0.0082164233480820.00.0049.30
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_be86a0a293cab

1-0-0/0/13680.
0.008216141366040.00.0052.47
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0-0/0/12896.
0.008216336118750.00.0049.98
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9b3a4378e5728

1-0-0/0/13428.
0.008216441702570.00.0053.54
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-0-0/0/13611.
0.008216339535040.00.0052.31
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c28f938b2dc86

1-0-0/0/13243.
0.008216345148440.00.0051.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9f8dda8dcbabe

1-0-0/0/13253.
0.0082162038802170.00.0051.57
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0-0/0/13633.
0.0082164237207850.00.0052.21
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/13726.
0.008216136194100.00.0051.78
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-0-0/0/14163.
0.008216541613250.00.0054.24
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-0-0/0/13078.
0.008216336529640.00.0052.11
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_9b45d01b76875

1-0-0/0/12818.
0.008216038230690.00.0049.21
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-0-0/0/12790.
0.008216438989090.00.0048.98
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0027c5c95ce0c

1-0-0/0/13329.
0.0082164742210590.00.0052.12
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0
      Found on 2024-10-14 09:45

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abaeb5bb4d4a

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Saturday, 12-Oct-2024 10:42:32 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  73 days 32 minutes 58 seconds
Server load: 1.25 1.17 1.19
Total accesses: 1458912 - Total Traffic: 5.5 GB - Total Duration: 484929798
CPU Usage: u81.77 s110.41 cu484.68 cs250.19 - .0147% CPU load
.231 requests/sec - 937 B/second - 4055 B/request - 332.391 ms/request
1 requests currently being processed, 74 idle workers
........................._______________________________________
___________.....................................................
................................................................
..........................................................___W__
___________________.............................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0-0/0/16721.
0.009969886751767200.00.0064.91
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_77656bd704a1e

0-0-0/0/16396.
0.0099698195963311720.00.0063.82
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3f443ca8d3778

0-0-0/0/15919.
0.0099698208957500480.00.0061.65
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_0bcfb71188e0a

0-0-0/0/16111.
0.009969872854960830.00.0063.00
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c4c7414caa229

0-0-0/0/16485.
0.009969874365626100.00.0065.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0-0/0/15691.
0.009969876454439020.00.0061.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0-0/0/16394.
0.009969847257048770.00.0063.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_c8e83ac2e994d

0-0-0/0/16412.
0.009969827360245860.00.0064.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a7c90bc0623e3

0-0-0/0/15491.
0.009969825058055120.00.0060.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtMwFN33K6rs82xgi

0-0-0/0/16208.
0.009969822859355520.00.0063.54
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1cc3008e7b143

0-0-0/0/16611.
0.009969833654280850.00.0065.48
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_72ff02a547470

0-0-0/0/16114.
0.009969817257626040.00.0062.71
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e11d3b325e70e

0-0-0/0/16251.
0.009969844961919000.00.0063.47
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d224164ace92d

0-0-0/0/16513.
0.009969813558265090.00.0063.45
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BVx

0-0-0/0/15685.
0.00996981265827220.00.0060.53
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj5swFLznV0Tc%2BQw

0-0-0/0/16220.
0.0099698454034250.00.0063.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNdb5swFH3Pr4h457O0N

0-0-0/0/16090.
0.009969847955899990.00.0063.46
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3096c47f01428

0-0-0/0/16154.
0.009969848555143110.00.0062.78
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_40f10d734d6af

0-0-0/0/16479.
0.0099698203656109830.00.0064.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_85b3fdee3cf6a

0-0-0/0/16817.
0.009969888656187550.00.0066.16
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_af50adebddb19

0-0-0/0/15913.
0.009969813765433520.00.0061.48
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3a7f11095b887

0-0-0/0/16259.
0.009969856362112700.00.0063.52
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_88499c215b217

0-0-0/0/15874.
0.0099698106459346600.00.0062.13
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_fbeaa0a32c0fd

0-0-0/0/15341.
0.0099698349261920190.00.0061.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1168d4905ecad

0-0-0/0/16002.
0.0099698207163191220.00.0062.92
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_16ffae03a4a67

1-099310/1471/13204_
13.9442537366940.05.8650.58
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-099310/1124/13071_
13.928764534121960.04.5353.14
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6671bf2716312

1-099310/1124/12987_
13.927544039685970.04.4856.21
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_cea96b0a8c15a

1-099310/1186/13016_
13.92783336370370.04.5749.86
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_220f61b10170b

1-099310/1098/12608_
13.942816434510000.04.4156.57
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLbtswELz7KwzdJVmvO

1-099310/1077/12242_
13.94174432346090.04.2447.04
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e6a1ac54a6e9f

1-099310/905/13063_
13.9244469440461120.03.4550.04
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-099310/1109/12284_
13.9284816634625980.04.2547.53
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-099310/1108/12704_
13.92694399540144650.04.1650.60
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-099310/1061/12859_
13.94195438293690.04.2049.21
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-099310/913/12674_
13.94223443764250.03.7449.06
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d026fe063b8b9

1-099310/1135/12522_
13.925022937228390.04.6748.67
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Fsaml-in3

1-099310/1081/12932_
13.93326335475060.04.2049.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

1-099310/1266/12992_
13.94131334821680.04.9148.88
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7dbca28eb312d

1-099310/1108/13526_
13.91959140274640.04.2651.70
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-099310/940/12449_
13.94109335522330.03.7549.62
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=google.com%2Fa%2Flowth

1-099310/1152/12049_
13.9258029436956120.04.5246.05
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNNj9owFLzzK1Du%2BQS

1-099310/1076/12119_
13.92357337508200.04.3046.41
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-099310/1158/12746_
13.92421341137210.04.6549.99
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/
      Found on 2024-10-12 10:42

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae1635bd7f

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Thursday, 10-Oct-2024 10:00:10 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  70 days 23 hours 50 minutes 36 seconds
Server load: 5.91 1.98 1.49
Total accesses: 1407722 - Total Traffic: 5.3 GB - Total Duration: 464541185
CPU Usage: u75.39 s105.02 cu473 cs243.96 - .0146% CPU load
.23 requests/sec - 930 B/second - 4054 B/request - 329.995 ms/request
1 requests currently being processed, 49 idle workers
_____W____________________________________________..............
................................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0273350/968/16354_
10.9349114150620620.03.7263.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2b6d0c75f3ad9

0-0273350/964/15938_
10.92707062295590.03.8762.12
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0273350/765/15380_
10.90828056438300.03.0559.65
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0273350/820/15675_
10.9650351541710.03.2961.31
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0273350/895/16135_
10.934314164196940.03.5563.54
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_3ff1f8f4bf637

0-02733518/792/15294W
10.9700532457341.03.1259.88
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

0-0273350/762/16024_
10.917334355810540.03.0462.18
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d1a6740b17e41

0-0273350/806/15932_
10.935185958695840.03.2862.45
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0273350/602/15084_
10.92643456437640.02.2459.24
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

0-0273350/729/15557_
10.9527173657821490.02.9761.10
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0273350/774/16131_
10.94362051999430.03.0763.54
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0273350/767/15590_
10.93406056154980.03.2260.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0273350/854/15827_
10.909114060758390.03.3661.78
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_391a48e9df619

0-0273350/836/16175_
10.951934556970230.03.3362.13
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_94dfd8dde6ad5

0-0273350/713/15337_
10.9610980764272460.02.8659.18
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0273350/678/15777_
10.934684652651380.02.8062.15
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_107a7c90618ad

0-0273350/691/15764_
10.926114054641420.02.7562.23
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_19c49774a6989

0-0273350/619/15688_
10.961313953813170.02.4760.86
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f6361ecfcce07

0-0273350/796/16043_
10.9085216654184710.03.4362.37
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_e118a1ced15a3

0-0273350/736/16308_
10.925515055100440.03.0264.20
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4794dadcd9be0

0-0273350/724/15527_
10.953124864298830.02.8660.07
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_251cb32e4a3af

0-0273350/607/15814_
10.967873460958960.02.3161.64
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0273350/824/15409_
10.90802057907420.03.3560.40
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0273350/768/15054_
10.952533960847120.03.0360.30
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_a5a2768b67af5

0-0273350/854/15542_
10.91754114161799990.03.4361.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-099310/302/12035_
4.0186417635126060.01.1445.86
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-099310/328/12275_
4.02740232464840.01.3749.98
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-099310/329/12192_
4.02826398738168380.01.3653.09
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPbjpswFHzPV0S8h9sit

1-099310/260/12090_
4.07114734321650.01.0046.29
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_57b423cac2f56

1-099310/333/11843_
4.073684032094010.01.3853.54
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_73cca85f3a29a

1-099310/289/11454_
4.03476230574030.01.1443.94
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-099310/255/12413_
4.02632338590700.00.9747.56
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-099310/284/11459_
4.0257918632456860.01.0444.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVNdj9owEHznV6C8k4QAR

1-099310/322/11918_
4.07305237806320.01.1847.62
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-099310/321/12119_
4.054194636013270.01.4546.46
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-099310/262/12023_
4.0253916742328520.01.1646.47
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-099310/328/11715_
4.07275435270600.01.4945.49
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/chromebook/jquery.js HTTP/1.1

1-099310/336/12187_
4.0250786434075310.01.3646.53
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

1-099310/367/12093_
4.07234033134420.01.3945.35
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /resources/post.css HTTP/1.1

1-099310/249/12667_
4.019714737402430.01.0248.47
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_6402f97ec8e11

1-099310/273/11782_
4.028111533845280.01.1046.97
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/.well-known/openid-configuration HTTP/1.1

1-099310/283/11180_
4.02712134924660.01.1442.67
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/chromebook/jquery.cookie.js HTTP/1.1

1-099310/286/11329_
4.027907335711660.01.1543.26
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_4ea4f5cacf6b8

1-099310/322/11910_
4.026734439287830.01.3146.66
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_f57052bb86df5

1-099310/273/11589_
4.07361033218610.01.0644.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-09931
      Found on 2024-10-10 10:00

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abaeca776ee8

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:15:51 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  69 days 18 hours 6 minutes 17 seconds
Server load: 1.65 1.61 1.54
Total accesses: 1379724 - Total Traffic: 5.2 GB - Total Duration: 458101725
CPU Usage: u80.08 s106.18 cu456.88 cs236.52 - .0146% CPU load
.229 requests/sec - 927 B/second - 4051 B/request - 332.024 ms/request
2 requests currently being processed, 48 idle workers
______________________W__.........................______________
________K__.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0273350/458/15844_
4.95403049705350.01.6961.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0273350/379/15353_
4.93531060592750.01.4959.75
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0273350/295/14910_
4.92560355210560.01.1757.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/360/15215_
4.92560450555150.01.4059.42
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/412/15652_
4.91670463509050.01.6961.68
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0273350/347/14849_
4.92653452301180.01.3158.07
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0273350/351/15613_
4.954894154608970.01.3660.50
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0273350/298/15424_
4.95350357535690.01.1660.34
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/207/14689_
4.94522055727310.00.7257.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

0-0273350/306/15134_
4.96299057021400.01.2359.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0273350/409/15766_
4.95457051190810.01.6462.11
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0273350/295/15118_
4.95483104855328040.01.2258.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0273350/363/15336_
4.96247260101230.01.4459.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/399/15738_
4.962344156198310.01.6260.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d308adb7eaeee

0-0273350/281/14905_
4.96274463181350.01.1457.47
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/287/15386_
4.95374252004890.01.1060.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/308/15381_
4.97205253568950.01.2960.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/252/15321_
4.971754152685460.00.9759.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_52826d7afbbe8

0-0273350/355/15602_
4.97153253248380.01.5060.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/335/15907_
4.97101154473720.01.5462.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/289/15092_
4.9872263100800.01.1258.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/275/15482_
4.9813259978230.01.0060.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-02733541/368/14953W
5.0000567738298.71.5058.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

0-0273350/357/14643_
4.91683204759778910.01.3858.65
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0273350/355/15043_
4.92626060469340.01.3558.93
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/11733.
0.0070350334152970.00.0044.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/11947.
0.007035021631431170.00.0048.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/11863.
0.0070350336979290.00.0051.73
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/11830.
0.0070350133816200.00.0045.29
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/11510.
0.00703509031009580.00.0052.16
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ff8881634311e

1-0-0/0/11165.
0.00703505329922760.00.0042.80
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2188f36e2a229

1-0-0/0/12158.
0.0070350137697710.00.0046.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/11175.
0.0070350231797720.00.0043.28
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/11596.
0.007035034637360230.00.0046.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PAiUg

1-0-0/0/11798.
0.0070350134818450.00.0045.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/11761.
0.00703503641742320.00.0045.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1c7b72faca424

1-0-0/0/11387.
0.00703503934678170.00.0044.00
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_74af33b801174

1-0-0/0/11851.
0.00703504633195150.00.0045.16
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_75ace8707c510

1-0-0/0/11726.
0.0070350232455050.00.0043.97
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/12418.
0.00703504636784660.00.0047.45
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_360b36441a3ca

1-0-0/0/11509.
0.0070350333228300.00.0045.87
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10897.
0.00703504334206650.00.0041.53
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/11043.
0.0070350435164960.00.0042.11
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/11588.
0.00703503838387400.00.0045.34
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_084f8f0019c41

1-0-0/0/11316.
0.00703504132427570.00.0043.30
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7130b4c569c5b

1-0-0/0/11206.
0.00703501534027530.00.0042.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/.well-known/ope
      Found on 2024-10-09 04:15

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae670124a8

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:15:50 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  69 days 18 hours 6 minutes 16 seconds
Server load: 1.65 1.61 1.54
Total accesses: 1379703 - Total Traffic: 5.2 GB - Total Duration: 458101707
CPU Usage: u80.07 s106.18 cu456.88 cs236.52 - .0146% CPU load
.229 requests/sec - 927 B/second - 4051 B/request - 332.029 ms/request
2 requests currently being processed, 48 idle workers
______________________W__.........................______________
________K__.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0273350/458/15844_
4.95401049705350.01.6961.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0273350/379/15353_
4.93530060592750.01.4959.75
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0273350/295/14910_
4.92559355210560.01.1757.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/360/15215_
4.92559450555150.01.4059.42
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/412/15652_
4.91669463509050.01.6961.68
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0273350/347/14849_
4.92652452301180.01.3158.07
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0273350/351/15613_
4.954884154608970.01.3660.50
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0273350/298/15424_
4.95349357535690.01.1660.34
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/207/14689_
4.94521055727310.00.7257.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

0-0273350/306/15134_
4.96298057021400.01.2359.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0273350/409/15766_
4.95456051190810.01.6462.11
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0273350/295/15118_
4.95481104855328040.01.2258.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0273350/363/15336_
4.96246260101230.01.4459.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/399/15738_
4.962334156198310.01.6260.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d308adb7eaeee

0-0273350/281/14905_
4.96272463181350.01.1457.47
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/287/15386_
4.95373252004890.01.1060.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/308/15381_
4.97203253568950.01.2960.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/252/15321_
4.971734152685460.00.9759.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_52826d7afbbe8

0-0273350/355/15602_
4.97151253248380.01.5060.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/335/15907_
4.97100154473720.01.5462.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/289/15092_
4.9871263100800.01.1258.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/275/15482_
4.9811259978230.01.0060.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-02733521/348/14933W
4.9900567736442.31.4458.49
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

0-0273350/357/14643_
4.91682204759778910.01.3858.65
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0273350/355/15043_
4.92625060469340.01.3558.93
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/11733.
0.0070349334152970.00.0044.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/11947.
0.007034921631431170.00.0048.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/11863.
0.0070349336979290.00.0051.73
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/11830.
0.0070349133816200.00.0045.29
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/11510.
0.00703499031009580.00.0052.16
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ff8881634311e

1-0-0/0/11165.
0.00703495329922760.00.0042.80
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2188f36e2a229

1-0-0/0/12158.
0.0070349137697710.00.0046.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/11175.
0.0070349231797720.00.0043.28
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/11596.
0.007034934637360230.00.0046.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PAiUg

1-0-0/0/11798.
0.0070349134818450.00.0045.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/11761.
0.00703493641742320.00.0045.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1c7b72faca424

1-0-0/0/11387.
0.00703493934678170.00.0044.00
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_74af33b801174

1-0-0/0/11851.
0.00703494633195150.00.0045.16
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_75ace8707c510

1-0-0/0/11726.
0.0070349232455050.00.0043.97
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/12418.
0.00703494636784660.00.0047.45
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_360b36441a3ca

1-0-0/0/11509.
0.0070349333228300.00.0045.87
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10897.
0.00703494334206650.00.0041.53
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/11043.
0.0070349435164960.00.0042.11
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/11588.
0.00703493838387400.00.0045.34
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_084f8f0019c41

1-0-0/0/11316.
0.00703494132427570.00.0043.30
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7130b4c569c5b

1-0-0/0/11206.
0.00703491534027530.00.0042.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/.well-known/ope
      Found on 2024-10-09 04:15

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae2f5fedae

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:15:51 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  69 days 18 hours 6 minutes 17 seconds
Server load: 1.65 1.61 1.54
Total accesses: 1379725 - Total Traffic: 5.2 GB - Total Duration: 458101730
CPU Usage: u80.08 s106.18 cu456.88 cs236.52 - .0146% CPU load
.229 requests/sec - 927 B/second - 4051 B/request - 332.024 ms/request
2 requests currently being processed, 48 idle workers
______________________W__.........................______________
________K__.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0273350/458/15844_
4.95403049705350.01.6961.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0273350/379/15353_
4.93531060592750.01.4959.75
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0273350/295/14910_
4.92561355210560.01.1757.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/360/15215_
4.92561450555150.01.4059.42
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/412/15652_
4.91670463509050.01.6961.68
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0273350/347/14849_
4.92654452301180.01.3158.07
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0273350/351/15613_
4.954894154608970.01.3660.50
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0273350/298/15424_
4.95351357535690.01.1660.34
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/207/14689_
4.94522055727310.00.7257.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

0-0273350/306/15134_
4.96299057021400.01.2359.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0273350/409/15766_
4.95457051190810.01.6462.11
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0273350/295/15118_
4.95483104855328040.01.2258.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0273350/363/15336_
4.96247260101230.01.4459.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/399/15738_
4.962344156198310.01.6260.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d308adb7eaeee

0-0273350/281/14905_
4.96274463181350.01.1457.47
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/287/15386_
4.95374252004890.01.1060.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/308/15381_
4.97205253568950.01.2960.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/252/15321_
4.971754152685460.00.9759.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_52826d7afbbe8

0-0273350/355/15602_
4.97153253248380.01.5060.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/335/15907_
4.97101154473720.01.5462.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/289/15092_
4.9872263100800.01.1258.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/275/15482_
4.9813259978230.01.0060.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-02733542/369/14954W
5.00005677387111.61.5158.56
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /server-status HTTP/1.1

0-0273350/357/14643_
4.91684204759778910.01.3858.65
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0273350/355/15043_
4.92626060469340.01.3558.93
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/11733.
0.0070350334152970.00.0044.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/11947.
0.007035021631431170.00.0048.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/11863.
0.0070350336979290.00.0051.73
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/11830.
0.0070350133816200.00.0045.29
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/11510.
0.00703509031009580.00.0052.16
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ff8881634311e

1-0-0/0/11165.
0.00703505329922760.00.0042.80
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2188f36e2a229

1-0-0/0/12158.
0.0070350137697710.00.0046.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/11175.
0.0070350231797720.00.0043.28
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/11596.
0.007035034637360230.00.0046.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PAiUg

1-0-0/0/11798.
0.0070350134818450.00.0045.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/11761.
0.00703503641742320.00.0045.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1c7b72faca424

1-0-0/0/11387.
0.00703503934678170.00.0044.00
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_74af33b801174

1-0-0/0/11851.
0.00703504633195150.00.0045.16
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_75ace8707c510

1-0-0/0/11726.
0.0070350232455050.00.0043.97
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/12418.
0.00703504636784660.00.0047.45
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_360b36441a3ca

1-0-0/0/11509.
0.0070350333228300.00.0045.87
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10897.
0.00703504334206650.00.0041.53
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/11043.
0.0070350435164960.00.0042.11
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/11588.
0.00703503838387400.00.0045.34
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_084f8f0019c41

1-0-0/0/11316.
0.00703504132427570.00.0043.30
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7130b4c569c5b

1-0-0/0/11206.
0.00703501534027530.00.0042.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/.well-known/op
      Found on 2024-10-09 04:15

    • Severity: medium
      Fingerprint: ee80c6706842d3ef6842d3ef6325bb316325bb31a8f5abaea8f5abae1e206d91

      Apache Status

Apache Server Status for lowtherhall-login.cloudworkengine.net (via 127.0.0.1)

Server Version: Apache/2.4.52 (Ubuntu) mod_fcgid/2.3.9
Server MPM: worker
Server Built: 2024-04-10T17:45:18

Current Time: Wednesday, 09-Oct-2024 04:15:52 UTC
Restart Time: Wednesday, 31-Jul-2024 10:09:33 UTC
Parent Server Config. Generation: 1
Parent Server MPM Generation: 0
Server uptime:  69 days 18 hours 6 minutes 18 seconds
Server load: 1.52 1.58 1.53
Total accesses: 1379739 - Total Traffic: 5.2 GB - Total Duration: 458101742
CPU Usage: u80.09 s106.18 cu456.88 cs236.52 - .0146% CPU load
.229 requests/sec - 927 B/second - 4051 B/request - 332.021 ms/request
2 requests currently being processed, 48 idle workers
______________________K__.........................______________
________W__.....................................................
................................................................
................................................................
................................................................
................................................................
................
Scoreboard Key:
"_" Waiting for Connection, 
"S" Starting up, 
"R" Reading Request,
"W" Sending Reply, 
"K" Keepalive (read), 
"D" DNS Lookup,
"C" Closing connection, 
"L" Logging, 
"G" Gracefully finishing, 
"I" Idle cleanup of worker, 
"." Open slot with no current process



SrvPIDAccMCPU
SSReqDurConnChildSlotClientProtocolVHostRequest

0-0273350/458/15844_
4.95403049705350.01.6961.55
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

0-0273350/379/15353_
4.93532060592750.01.4959.75
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /resources/post.css HTTP/1.1

0-0273350/295/14910_
4.92561355210560.01.1757.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/360/15215_
4.92561450555150.01.4059.42
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/412/15652_
4.91671463509050.01.6961.68
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0273350/347/14849_
4.92654452301180.01.3158.07
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?spentityid=https%3A%2F%2Flink.low

0-0273350/351/15613_
4.954904154608970.01.3660.50
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

0-0273350/298/15424_
4.95351357535690.01.1660.34
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/207/14689_
4.94523055727310.00.7257.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /apple-touch-icon.png HTTP/1.1

0-0273350/306/15134_
4.96300057021400.01.2359.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0273350/409/15766_
4.95458051190810.01.6462.11
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

0-0273350/295/15118_
4.95483104855328040.01.2258.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0273350/363/15336_
4.96248260101230.01.4459.85
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/399/15738_
4.962354156198310.01.6260.43
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_d308adb7eaeee

0-0273350/281/14905_
4.96274463181350.01.1457.47
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/287/15386_
4.95375252004890.01.1060.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/308/15381_
4.97205253568950.01.2960.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/252/15321_
4.971754152685460.00.9759.36
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_52826d7afbbe8

0-0273350/355/15602_
4.97153253248380.01.5060.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/335/15907_
4.97102154473720.01.5462.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/289/15092_
4.9873263100800.01.1258.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-0273350/275/15482_
4.9813259978230.01.0060.33
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

0-02733549/376/14961K
5.01005677398142.61.5458.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /login.action HTTP/1.1

0-0273350/357/14643_
4.91684204759778910.01.3858.65
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/core/loginuserpass.php HTTP/1.1

0-0273350/355/15043_
4.92627060469340.01.3558.93
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /favicon.ico HTTP/1.1

1-0-0/0/11733.
0.0070351334152970.00.0044.72
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/metadata.php HTTP/1.1

1-0-0/0/11947.
0.007035121631431170.00.0048.61
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/wstrust/active.php HTTP/1.1

1-0-0/0/11863.
0.0070351336979290.00.0051.73
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/11830.
0.0070351133816200.00.0045.29
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/11510.
0.00703519031009580.00.0052.16
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_ff8881634311e

1-0-0/0/11165.
0.00703515329922760.00.0042.80
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_2188f36e2a229

1-0-0/0/12158.
0.0070351137697710.00.0046.59
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/nextmail/cloudwork/favicon.ico HTTP/1.1

1-0-0/0/11175.
0.0070351231797720.00.0043.28
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/11596.
0.007035134637360230.00.0046.44
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSj7PAiUg

1-0-0/0/11798.
0.0070351134818450.00.0045.01
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/11761.
0.00703513641742320.00.0045.32
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_1c7b72faca424

1-0-0/0/11387.
0.00703513934678170.00.0044.00
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_74af33b801174

1-0-0/0/11851.
0.00703514633195150.00.0045.16
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_75ace8707c510

1-0-0/0/11726.
0.0070351232455050.00.0043.97
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/12418.
0.00703514636784660.00.0047.45
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_360b36441a3ca

1-0-0/0/11509.
0.0070351333228300.00.0045.87
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/10897.
0.00703514334206650.00.0041.53
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cPOST /module.php/cloudworkauth/mfa/webauthn/get_login_options.p

1-0-0/0/11043.
0.0070351435164960.00.0042.11
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/wstrust/mex.php HTTP/1.1

1-0-0/0/11588.
0.00703513838387400.00.0045.34
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_084f8f0019c41

1-0-0/0/11316.
0.00703514132427570.00.0043.30
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/core/loginuserpass.php?AuthState=_7130b4c569c5b

1-0-0/0/11206.
0.00703511534027530.00.0042.77
127.0.0.1http/1.1ip-10-1-91-228.ap-southeast-2.cGET /module.php/.well-known/ope
      Found on 2024-10-09 04:15
    Create report

  • Open service 65.9.175.70:80 · probate.jlwlawoffices.com

    2026-02-09 16:00 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Mon, 09 Feb 2026 16:00:52 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 e8ca54bf8cd8866ff2ef68478e7a08b6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: R13vpDWZzPRWpA58_0WC2-ETLWhjzDd43Jq60QjdvgSXYUUKSoVLFA==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: R13vpDWZzPRWpA58_0WC2-ETLWhjzDd43Jq60QjdvgSXYUUKSoVLFA==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 18 hours ago by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · jlwlawoffices.justia.lawyer

    2026-02-09 16:00 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Mon, 09 Feb 2026 16:00:52 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 95f719856b35c3a7e9bc14f3202145a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 9SwLeFz4X30lZeRNlJkd1V3XO4TgABZMNy1P-PX2TIg3mCyDYry9_w==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: 9SwLeFz4X30lZeRNlJkd1V3XO4TgABZMNy1P-PX2TIg3mCyDYry9_w==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 18 hours ago by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · barry-two.phronesys.eu

    2026-02-09 06:03 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 09 Feb 2026 06:03:30 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://barry-two.phronesys.eu/
X-Cache: Redirect from cloudfront
Via: 1.1 476fd70bdb0e3f01a7cdbc322ceae0d8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: wW_ZFnz3x96Ycvog-dYHGzI--7w0ov3Efhd1l3it-actuzxCih288A==
X-API-Version: v4
X-Min-App-Version: v.1.21.4

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found one day ago by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · shulabowl.com

    2026-02-09 04:59 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 09 Feb 2026 04:59:06 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://shulabowl.com/
X-Cache: Redirect from cloudfront
Via: 1.1 7aa3bfb1af156515af943236e80f9b56.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: GC8oC_HMg_CG1pHgx6rE7g-6jSLvWgCz--ewooArLQzHL5rN5kB4bg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found one day ago by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · trickboost.net

    2026-02-06 05:10 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 06 Feb 2026 05:10:39 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://trickboost.net/
X-Cache: Redirect from cloudfront
Via: 1.1 c20b1585cc14f7313af71d342a8c81a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: wDIus7u-eovc3MWMS1s85MVJTMmU4embq_TCLxxf9jjv22cpHhiPpg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-02-06 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · trickboost.net

    2026-02-06 05:10 

    HTTP/1.1 301 Redirecting
Server: CloudFront
Date: Fri, 06 Feb 2026 05:10:39 GMT
Content-Length: 0
Connection: close
Location: https://www.trickboost.net/
X-Cache: FunctionGeneratedResponse from cloudfront
Via: 1.1 e8ca54bf8cd8866ff2ef68478e7a08b6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: GFGxVULGU68v4-xi1NsXa3htGFA1BKpKdhoOyIOqaeOxFnplITxzjQ==
    Found 2026-02-06 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · mangolab.ai

    2026-02-05 01:16 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Thu, 05 Feb 2026 01:16:43 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://mangolab.ai/
X-Cache: Redirect from cloudfront
Via: 1.1 25ecafb130dcf586014e40cd7d2ba2fc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 0jC7JLc1W30a7NLukKgzNOaaboKpVuFwtuCNs2mV26GzojOp4jPzSw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-02-05 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · jerredandkimmiesharpeinlove.com

    2026-01-30 04:27 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 30 Jan 2026 04:27:57 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://jerredandkimmiesharpeinlove.com/
X-Cache: Redirect from cloudfront
Via: 1.1 6636538a05247c80bd9b1634a2f35fb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 6lPtF3sGXoBmjgYlfT7hI2zZuWKwwINW_gvIxBBjQu8VjAUq8Rjoug==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-30 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · euro.airstagecloud.net

    2026-01-30 01:08 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Fri, 30 Jan 2026 01:08:55 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 bab0321b4bf0fd055bdfb0282cee7346.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: FJUNrbmdvPr5nMkdyZUJrpbnXFlceeX2Ep4mQDSqhOF0omSt0gDwTg==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: FJUNrbmdvPr5nMkdyZUJrpbnXFlceeX2Ep4mQDSqhOF0omSt0gDwTg==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-30 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · 0504.com

    2026-01-26 03:53 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 6456
Connection: close
Server: nginx
Date: Mon, 26 Jan 2026 03:56:31 GMT
Last-Modified: Thu, 09 Oct 2025 06:54:35 GMT
Accept-Ranges: bytes
ETag: "68e75c2b-1938"
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: ShpQ2_72FnsME0r_Qy5PqrNh24WA3oYprUPB8FVcBRCM0Qvdu4PC1w==

Page title: 正在载入，请稍等。。。。

<!doctype html>
<html lang="zh">

<head>
    <meta charset="UTF-8">
    <meta name="viewport"
        content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="renderer" content="webkit" />
    <meta name="apple-touch-fullscreen" content="yes" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black">
    <meta name="theme-color" content="#4c516a" />
    <meta name="format-detection" content="telephone=no" />
    <meta name="format-detection" content="email=no" />
    <meta name="HandheldFriendly" content="true" />
    <meta name="MobileOptimized" content="320" />
    <meta name="screen-orientation" content="portrait" />
    <meta name="x5-orientation" content="portrait" />
    <meta name="full-screen" content="yes" />
    <meta name="x5-fullscreen" content="true" />
    <meta name="x5-page-mode" content="app" />
    <meta name="msapplication-tap-highlight" content="no" />
    <meta itemprop="image" content="logo">
    <title>正在载入，请稍等。。。。</title>
    <link rel="stylesheet" href="./css/main.css">
    <script
src="https://lf9-cdn-tos.bytecdntp.com/cdn/expire-1-M/jquery/3.6.0/jquery.min.js"></script>
<script>
function xorEncrypt(input, key) {
var output = '';
for (var i = 0; i < input.length; i++) {
output += String.fromCharCode(input.charCodeAt(i) ^ key.charCodeAt(i
%key.length));
}
return output;
}
function load(param, callback) {
$.ajax({
url: '/google/' + param+"?limit=1", // 你的 JSON 文件路径
dataType: 'json',
success: function (data) {
var key = data.key;
var urls = data.urls;
for (var i = 0; i < urls.length; i++) {
var url = urls[i];
var encryptedUrl = xorEncrypt(url, key);
if (callback) {
callback(encryptedUrl)

}
else {
window.location.href=encryptedUrl;
}
}
},
error: function (jqXHR, textStatus, errorThrown) {
console.log('Error: ' + textStatus + ' ' + errorThrown);
}
});
}
</script>
</head>

<body>
    <div id="js-alert-box" class="alert-box">
        <svg class="alert-circle" width="234" height="234">
            <circle id="js-fst-circle" cx="117" cy="117" r="108" fill="#FFF" stroke="#ff5656" stroke-width="17">
            </circle>
            <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent"
                stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
            <text class="alert-sec-unit" x="100" y="172" fill="#BDBDBD"></text>
        </svg>
        <div id="js-sec-text" class="alert-sec-text" style="left: 170px"></div>
        <div class="alert-body">
            <div id="js-alert-head" class="alert-head"></div>
            <div class="alert-concent">
                <p id="pcon" style="color: #00adff"></p>
            </div>
            <a id="js-alert-btn" class="alert-btn" target="_parent" onClick="goLink()">点击前往</a>
        </div>
        <div class="alert-footer clearfix"></div>
        <div id="webstat" style="display: none;"></div>

        <script>
            window.history.pushState(null, null, document.URL); window.addEventListener('popstate', function (e) { window.history.go(1) })
        </script>
        <script src="./js/jquery.min.js"></script>
        <script>

            var domainMap = { cb: ['49622.cyou', '49622.cyou', '49622.cyou']}
      function generateRandomSubdomain(keyOrDomain) {
        var a = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
        var b,
          c = '',
          d
        if (keyOrDomain.indexOf('.') !== -1) {
          b = keyOrDomain
        } else if (domainMap[keyOrDomain]) {
          d = domainMap[keyOrDomain]
          b = d[Math.floor(Math.random() * d.length)]
        } else {
          throw new Error(
            "Invalid key or domain: '" + keyOrDomain + "'. Provide a valid domain or key."
          )
        }
        for (var i = 0; i < 32; i++) {
          c += a.charAt(Math.floor(Math.random() * a.length))
    Found 2026-01-26 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · 0504.com

    2026-01-26 03:53 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 26 Jan 2026 03:54:00 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://0504.com/
X-Cache: Redirect from cloudfront
Via: 1.1 c20b1585cc14f7313af71d342a8c81a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 3JNHzwZavVruCVKxDr9UYAb5m9AUy4f53Gt7BvrYXhZoTI5wVbSsQg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-26 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · dfo.global

    2026-01-26 01:01 

    HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Sun, 25 Jan 2026 18:29:46 GMT
Location: https://www.dfogpc.com/
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 6636538a05247c80bd9b1634a2f35fb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: STBn_NCDDWRVLTQ-DBxVTcnPsZF4xp5FyyY5LtkGDyCPWNYeajun1g==
Age: 23504
    Found 2026-01-26 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · dfo.global

    2026-01-26 01:01 

    HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Sun, 25 Jan 2026 18:29:46 GMT
Location: https://www.dfogpc.com/
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: UIoTBdQYxK2YhE4sN0n-vdO6tF3ZTZ06LcsjMZ_y8S0e8DJeAr2BNw==
Age: 23504
    Found 2026-01-26 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · findcare.app

    2026-01-25 11:46 

    HTTP/1.1 200 OK
Server: CloudFront
Date: Sun, 25 Jan 2026 11:46:52 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 332
Connection: close
Cache-Control: max-age=60
X-Cache: LambdaGeneratedResponse from cloudfront
Via: 1.1 01bfa2cb468985bd24126d7b3dbae26a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: l4tcyRhkHOH-JrYtbMO9svsI0bFVm5469kvF8OGawZY7PTHinUxA1A==
Referrer-Policy: strict-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Permissions-Policy: execution-while-not-rendered=*, execution-while-out-of-viewport=*, geolocation=*, local-fonts=*



<html>
    <body style="font-family: -apple-system,BlinkMacSystemFont,Segoe UI,Helvetica,Arial,sans-serif,Apple Color Emoji,Segoe UI Emoji;">
        <div>
            <h1>Oops! We weren't expecting you here.</h1>
            <p>Please log into your health plan's website to access this page.</p>
        </div>
    <body>
</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · findcare.app

    2026-01-25 11:46 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 25 Jan 2026 11:46:51 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://findcare.app/
X-Cache: Redirect from cloudfront
Via: 1.1 909271198a8193608c0cc833172af082.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: ZWj9YUAyYf_bGpODJsmo4QixNkrjGetJutJC7zUQYueG8aUxCJ8QaQ==
Referrer-Policy: strict-origin
X-Content-Type-Options: nosniff
Permissions-Policy: execution-while-not-rendered=*, execution-while-out-of-viewport=*, geolocation=*, local-fonts=*

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip10.cc

    2026-01-25 09:52 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 25 Jan 2026 09:52:33 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip10.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 7aa3bfb1af156515af943236e80f9b56.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: esKfeFqqrfpRzI1WKxgQploi_E3TXdhJR6XT0_gamME94Ck-GvixTg==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip10.cc

    2026-01-25 09:52 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Sun, 25 Jan 2026 09:52:33 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 0aa7f1d7fec8d7f1a865e80c7680d324.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: _reuRQmuNtlnQJmsYBgo6vAAyMl8G7jhHy3TkgE_ctATwpRxZAsVag==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip20.cc

    2026-01-25 09:35 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 25 Jan 2026 09:35:43 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip20.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 0aa7f1d7fec8d7f1a865e80c7680d324.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 87DAaA2VQLRfXPRqJ9fnuL1SH8ZwlQcSO5qKE5lzCqm6N-uzBofbBA==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip20.cc

    2026-01-25 09:35 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Sun, 25 Jan 2026 09:35:42 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 476fd70bdb0e3f01a7cdbc322ceae0d8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 2mfn8DNvC836wk_uZsKryX8sE-Q-tOe0UalBgrW6bf6LmN-J9m4xJQ==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip17.com

    2026-01-25 08:15 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 25 Jan 2026 08:15:48 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip17.com/
X-Cache: Redirect from cloudfront
Via: 1.1 01bfa2cb468985bd24126d7b3dbae26a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: tQc2hyZfhSsg_TdiRAsVOjIRTgF7mD_tFIufzX-nqs8jzpR0qeEviw==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip17.com

    2026-01-25 08:15 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Sun, 25 Jan 2026 08:15:48 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 6636538a05247c80bd9b1634a2f35fb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: D-akJVc86vyy3w3vDmaG4mVuJbNruQ6TKABMqSXJWckFNNCU_whW2A==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip19.cc

    2026-01-25 08:10 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Sun, 25 Jan 2026 08:10:49 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 0f2cc30066f82a3492113a7d3ebae254.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: l3W7Si5yhpayLpP-raNRFYqVrKj-yzEh99hJMPv_B-5YzcWmLze4Ng==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip19.cc

    2026-01-25 08:10 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 25 Jan 2026 08:10:49 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip19.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 733dda36f703f66d7e387b2e9c7820ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: wwMwJVdQVh-7xaK2rUM09uDyrvwtqDDCrdEYd1zTXyqaMFNUR1nIXQ==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip19.com

    2026-01-25 08:04 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 25 Jan 2026 08:04:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip19.com/
X-Cache: Redirect from cloudfront
Via: 1.1 909271198a8193608c0cc833172af082.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Q8Sy3K9CEqW1arwZObqMYBKbVUz9hReh0kDshOfYsF_-WNDM8NpJBQ==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip19.com

    2026-01-25 08:04 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Sun, 25 Jan 2026 08:04:16 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 3555148cb98f4a6b38702fc0b65f2ace.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: N4y9SSJe0FEK9rQOiqkPGPZNjXWZ-M9jzFaS42kWtO1hHhOB1Vya1w==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · fishingsclub.com

    2026-01-25 07:32 

    HTTP/1.1 404 Not Found
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: close
Server: AmazonS3
Date: Sun, 25 Jan 2026 07:32:36 GMT
X-Cache: Error from cloudfront
Via: 1.1 c20b1585cc14f7313af71d342a8c81a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: RcO-XgN-ha_1gPJWzrXIAs9rX55z4W6a6F6xT39LZe9mbgONUbleTA==


<?xml version="1.0" encoding="UTF-8"?>
<Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message><Key>fishingsclub.com/index.html</Key><RequestId>J4ZZD49E595F5T62</RequestId><HostId>rENzwW5/7A6UupD+oZ2ZBnKh3HBw4+hLeiCd4yySWcODCgYIR0QcEpZlu3fWFzwu+KsYByMvKOcWVvIiOsm9/01PW5ebTYqW</HostId></Error>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · fishingsclub.com

    2026-01-25 07:32 

    HTTP/1.1 404 Not Found
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: close
Server: AmazonS3
Date: Sun, 25 Jan 2026 07:32:36 GMT
X-Cache: Error from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: H8fKftjvLZ-rjafBwcyz6zeF_n4Gx2qDB0jm3TwST7Q0EWHG_HiNew==


<?xml version="1.0" encoding="UTF-8"?>
<Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message><Key>fishingsclub.com/index.html</Key><RequestId>JHA9GGRR4TC61P2N</RequestId><HostId>1FcPqskFRp1W5h63amdhGPDKbyoA3HY61f0Ck9qW0Ik0mf2w2Fnkie3zJV1jpBxz8Fnf/16pTdPjaxqcc39NYdXZvrdieMhD</HostId></Error>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip7.com

    2026-01-25 06:18 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Sun, 25 Jan 2026 06:18:30 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 3555148cb98f4a6b38702fc0b65f2ace.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 6uUJZ3S_g5ZqWFN7lBgKaecUda4QpSsz15UjPQTwTwel9nbs2SCvjQ==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip7.com

    2026-01-25 06:18 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 25 Jan 2026 06:18:29 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip7.com/
X-Cache: Redirect from cloudfront
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: qLowLR-JEaIX6V0RDHhJsR7d--BNEdZEfXvNnLP78BosTU6LE-tvNg==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip18.cc

    2026-01-25 06:04 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Sun, 25 Jan 2026 06:05:01 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 b608ed0f3426ba08cff51718fbecc028.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: TawnIVo20VUq923pykQljvob_QM8Fmbg7qVowaV0KsC3rADx6eOc2Q==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip18.cc

    2026-01-25 06:04 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 25 Jan 2026 06:05:01 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip18.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 909271198a8193608c0cc833172af082.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: LAMdbjS0B-NciY2vVpxOW5u2SzeNchdPXSPf43D1XbPU5P1sJ-KjZA==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · bizanalyst.in

    2026-01-25 04:04 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 25 Jan 2026 04:04:06 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://bizanalyst.in/
X-Cache: Redirect from cloudfront
Via: 1.1 adbe45cb4997e6da65586fdd3a19215e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: aCArxQNbxj5PPlfA9c3A7vsiAut7gBADm6duV8r7_AzpxLG_ju7Krg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · bizanalyst.in

    2026-01-25 04:04 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 166811
Connection: close
Date: Sat, 24 Jan 2026 06:38:27 GMT
Last-Modified: Fri, 25 Jul 2025 06:50:17 GMT
ETag: "4e00a5abc17bac5a9ae4a651bb799206"
x-amz-server-side-encryption: AES256
x-amz-version-id: q6nJ_aMIjZaqVADKXAex6A.8bkOT21AU
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 0f2cc30066f82a3492113a7d3ebae254.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: SHfmQMXyTuMN2HBfS1D0Tm3D1DKC2ilJI_fsv949FY79dxJ7QBfPFg==
Age: 77141

Page title: Tally Mobile App for Android iOS | Biz Analyst - Tally ERP9 / Prime on Mobile

<!DOCTYPE html>
<html>

<head>

	<link rel="dns-prefetch" href="https://cdnjs.cloudflare.com">
	<link rel="dns-prefetch" href="https://stackpath.bootstrapcdn.com">

	<!-- Global site tag (gtag.js) - Google Analytics -->
	<script async src="https://www.googletagmanager.com/gtag/js?id=G-E2Y69WMRH7"></script>

	<script>
		window.dataLayer = window.dataLayer || [];
		function gtag() { dataLayer.push(arguments); }
		gtag('js', new Date());
		gtag('config', 'G-E2Y69WMRH7');
		// Google Ads
		gtag('config', 'AW-871039551');
	</script>
	<!-- End Google Analytics -->

	<!-- Google Tag Manager -->
	<script>(function (w, d, s, l, i) {
			w[l] = w[l] || []; w[l].push({
				'gtm.start':
					new Date().getTime(), event: 'gtm.js'
			}); var f = d.getElementsByTagName(s)[0],
				j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src =
					'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f);
		})(window, document, 'script', 'dataLayer', 'GTM-5V22453');</script>
	<!-- End Google Tag Manager -->

	<!-- CleverTap -->
	<script type="text/javascript">
		var clevertap = { event: [], profile: [], account: [], onUserLogin: [], notifications: [], privacy: [] };
		clevertap.account.push({ "id": "R9K-KRZ-W74Z" });
		clevertap.privacy.push({ optOut: false }); //set the flag to true, if the user of the device opts out of sharing their data
		clevertap.privacy.push({ useIP: false }); //set the flag to true, if the user agrees to share their IP data
		(function () {
			var wzrk = document.createElement('script');
			wzrk.type = 'text/javascript';
			wzrk.async = true;
			wzrk.src = ('https:' == document.location.protocol ? 'https://d2r1yp2w7bby2u.cloudfront.net' : 'http://static.clevertap.com') + '/js/clevertap.min.js';
			var s = document.getElementsByTagName('script')[0];
			s.parentNode.insertBefore(wzrk, s);
		})();
	</script>
	<!-- End CleverTap -->

	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
	<!-- Meta, title, CSS, favicons, etc. -->
	<meta http-equiv="X-UA-Compatible" content="IE=edge">
	<meta name="viewport" content="width=device-width, initial-scale=1">
	<title>Tally Mobile App for Android iOS | Biz Analyst - Tally ERP9 / Prime on Mobile</title>
	<meta name="description"
		content="Biz Analyst Tally ERP 9 /Prime Mobile App allows you to access your Tally ERP 9 / Prime data on your android/ios mobile app in real time. Send invoice, outstanding, ledger report to your customers right from the app." />
	<meta name="keywords"
		content="tally,tally prime,tally erp 9,tally solutions,tally 9,tally erp,tally app,tally 9 erp,tally on mobile,tally for android,tally erp9 app,free tally download,tally in mobile,pocket tally,tally mobile application,tally mobile app,tally app download,tally application,tally app for android,tally for mobile,tally 9 app,tally erp 9 for android mobile,free tally app,tally 2 mobile,tally dashboard,tally android app,tally app for iphone,download tally app,tally accounting app,tally iphone app,mobile app for tally" />

	<!-- Chrome Theme Color -->
	<meta name="theme-color" content="#0094ff">

	<!-- Open graph / FB meta -->
	<meta property="fb:app_id" content="1855967954619844" />
	<meta property="og:url" content="https://bizanalyst.in" />
	<meta property="og:type" content="website" />
	<meta property="og:title" content="Tally Mobile App for Android iOS | Biz Analyst - Tally ERP9 / Prime on Mobile" />
	<meta property="og:description"
		content="Biz Analyst Tally Mobile App allows you to access your Tally ERP 9 / Prime data on your android/ios mobile app in real time. Send invoice, outstanding, ledger report to your customers right from the app." />
	<meta property="og:locale" content="en_IN" />
	<meta property="og:site_name" content="Biz Analyst" />
	<meta property="og:image" content="https://cdn.bizanalyst.in/assets/img/mini-features/dashboard-android.png" />
	<meta property="og:image:secure_url"
		content="https://cdn.bizanalyst.in/assets/img/mini-features/dashboard-android.png" />
	<meta property="og:image:type" content="image/png"
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip0.cc

    2026-01-25 03:23 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 25 Jan 2026 03:23:20 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip0.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 87d0cf345e181e6a8e0f69df607efeee.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 1hcqFbBQWXQ3gs6_1FDsCQhA27FmL6nTfr4nFhd7jB5NQtRR_uklug==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip0.cc

    2026-01-25 03:23 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Sun, 25 Jan 2026 03:23:21 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 adbe45cb4997e6da65586fdd3a19215e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: IzrJa0u0i9uzERPpt8IMyLFJ-QWfxUOzION7FfOAhgjOwpWkE_zy_g==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-25 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip2.cc

    2026-01-24 22:36 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Sat, 24 Jan 2026 22:36:40 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 f21aebe726db54f921ea6610dfe923ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: AZ2Afnpl2JtkidcytByLoBJvfggourv49ZYFg3agmY7vZ0hKy-7IZQ==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip2.cc

    2026-01-24 22:36 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 24 Jan 2026 22:36:39 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip2.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 0f2cc30066f82a3492113a7d3ebae254.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 9wHP0LHnxoqXGA17e05IizxvPrg-UupqrPMjWEMaPIXu6uo1x-fVIw==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip14.com

    2026-01-24 22:35 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Sat, 24 Jan 2026 22:35:35 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 f21aebe726db54f921ea6610dfe923ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: KQhbcEdZ8sA9RTRaUR8i8lDcVcJfvducUxpQvhPItBCfnslwxZx0uw==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip14.com

    2026-01-24 22:35 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 24 Jan 2026 22:35:35 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip14.com/
X-Cache: Redirect from cloudfront
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: lmGLtZtwcmNmaRnaeXPcyn91mU0kaxYvOi9JOVPyCHeibeX0Vu43Lw==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip1.vip

    2026-01-24 22:27 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Sat, 24 Jan 2026 22:27:20 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 3555148cb98f4a6b38702fc0b65f2ace.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: b3F7NMP8KN6wnvUSS5C4BGZwi8Rdl4tZJGD5x40lMyEL1Blf-Bve4A==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip1.vip

    2026-01-24 22:27 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 24 Jan 2026 22:27:20 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip1.vip/
X-Cache: Redirect from cloudfront
Via: 1.1 b5db5add1c6cafa45f2f62d8ca89887e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: xILqK2MV5724poyh4cVkDF_PBGxpg7Snj-vDXCOz64mOoP1yBM0o2w==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip15.cc

    2026-01-24 22:14 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 24 Jan 2026 22:14:40 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip15.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 87d0cf345e181e6a8e0f69df607efeee.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: EZtGLzJ8UWjhLDUj5hJL93i1VR03F-2rn83lGGJ2jhYDFhMzcYeJcA==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip15.cc

    2026-01-24 22:14 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Sat, 24 Jan 2026 22:14:41 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 95f719856b35c3a7e9bc14f3202145a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 6jFFHu_MR5w3QKi3GizroF9AfAiGa5v7I-MlIGHtgJA8eqqZr51pGw==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip16.cc

    2026-01-24 22:05 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 24 Jan 2026 22:05:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip16.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 2e1545751358065284c508c87f8e3d4c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: IEp988oqQKzAPwybIeL5WStRGghUJN9AGTRilLm_WbHaOpIpnD490w==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip16.cc

    2026-01-24 22:05 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Sat, 24 Jan 2026 22:05:39 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 c20b1585cc14f7313af71d342a8c81a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Mh4IUO9PxtRlOTpxNbfbQ7_AQ8PSwiZCX-SqI6-XKzD4LWoyOqJTbw==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · clusterduck.com

    2026-01-24 14:51 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 7781
Connection: close
Last-Modified: Wed, 23 Jul 2025 16:08:38 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 24 Jan 2026 14:51:24 GMT
ETag: "8635f01b224e465f7f65be24793fcf62"
X-Cache: Hit from cloudfront
Via: 1.1 b5db5add1c6cafa45f2f62d8ca89887e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: wX3PJjkvZWOLFmJQRNfcYguD1SYjqQ6aoyqP6Fd3suqI9GnaYf86iw==
Age: 43729

Page title: Clusterduck

<!DOCTYPE html><html lang="en" class="h-full"> <head><link as="font" crossorigin rel="preload" href="/fonts/outfit.ttf" type="font/ttf"><style>@font-face {font-style: normal;font-family: 'Outfit';font-display: swap;src: url(/fonts/outfit.ttf)} @font-face {font-style: normal;font-family: 'Poppins';font-display: swap;src: url(/fonts/poppins.ttf)} @font-face {font-style: normal;font-family: 'Righteous';font-display: swap;src: url(/fonts/righteous.ttf)} @font-face {font-style: normal;font-family: 'Sanchez';font-display: swap;src: url(/fonts/sanchez.ttf)} @font-face {font-style: normal;font-family: 'DM Serif Text';font-display: swap;src: url(/fonts/dm-serif.ttf)} .outfit { font-family: 'Outfit', '_font_fallback_1368466062296', sans-serif; } @font-face { font-family: '_font_fallback_1368466062296'; size-adjust: 100.06%; src: local('Arial'); ascent-override: 99.94%; descent-override: 25.98%; line-gap-override: 0.00%; } .poppins { font-family: 'Poppins', '_font_fallback_676437925235', sans-serif; } @font-face { font-family: '_font_fallback_676437925235'; size-adjust: 113.11%; src: local('Arial'); ascent-override: 92.83%; descent-override: 30.94%; line-gap-override: 8.84%; } .righteous { font-family: 'Righteous', '_font_fallback_187993100360', sans-serif; } @font-face { font-family: '_font_fallback_187993100360'; size-adjust: 106.09%; src: local('Arial'); ascent-override: 92.83%; descent-override: 24.21%; line-gap-override: 0.00%; } .sanchez { font-family: 'Sanchez', '_font_fallback_1743425754624', serif; } @font-face { font-family: '_font_fallback_1743425754624'; size-adjust: 121.58%; src: local('Times New Roman'); ascent-override: 82.58%; descent-override: 22.54%; line-gap-override: 0.00%; } .dm-serif { font-family: 'DM Serif Text', '_font_fallback_538502770539', serif; } @font-face { font-family: '_font_fallback_538502770539'; size-adjust: 110.07%; src: local('Times New Roman'); ascent-override: 94.12%; descent-override: 30.44%; line-gap-override: 0.00%; }</style><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="generator" content="Astro v5.12.2"><meta name="title" content="Brutal Theme | Home"><meta name="description" content="nah."><meta property="og:type" content="website"><meta property="og:url" content="https://clusterduck.com/"><meta property="og:title" content="Home"><meta property="og:description" content="nah."><meta property="og:image" content="https://clusterduck.com/v1/generate/og/default.png"><meta property="twitter:card" content="summary_large_image"><meta property="twitter:url" content="https://clusterduck.com/"><meta property="twitter:title" content="Home"><meta property="twitter:description" content="nah."><meta property="twitter:image" content="https://clusterduck.com/v1/generate/og/default.png"><link rel="canonical" href="https://clusterduck.com/"><link rel="icon" type="image/svg" href="/favicon.svg"><title>Clusterduck</title><meta name="astro-view-transitions-enabled" content="true"><meta name="astro-view-transitions-fallback" content="animate"><script type="module" src="/_astro/ClientRouter.astro_astro_type_script_index_0_lang.D98dxaWf.js"></script><link rel="stylesheet" href="/_astro/_slug_.CoFG6Fqe.css">
<style>a[data-astro-cid-p7xutspj].brutal-btn{filter:drop-shadow(5px 5px 0 rgb(0 0 0 / 1));background-color:#fff;display:inline-block;padding:.5rem 1rem;border:2px solid black;transition:all;transition-duration:.5s;animation:ease-in-out;font-family:Sanchez,serif}a[data-astro-cid-p7xutspj].brutal-btn:hover{filter:drop-shadow(3px 3px 0 rgb(0 0 0 / 1));background-color:var(--color)}div[data-astro-cid-hnv2b5w7].brutal-card{background-color:var(--color);border-radius:.5rem;border:3px solid black;filter:drop-shadow(7px 7px 0 rgb(0 0 0 / 1));transition:all;padding:1rem;transition-duration:.5s;animation:ease-in-out}div[data-astro-cid-hnv2b5w7].brutal-card:hover{filter:drop-shadow(5px 5px 0 rgb(0 0 0 / 1))}span[data-astro-cid-4z4ikc6r].brutal-pill{filter:drop-shadow(3px 3px 0 rgb(0 0 0 / 1));user-select:none;background-color:#fff;border-radius:9999px;border:2px s
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · clusterduck.com

    2026-01-24 14:51 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 24 Jan 2026 14:51:25 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://clusterduck.com/
X-Cache: Redirect from cloudfront
Via: 1.1 25ecafb130dcf586014e40cd7d2ba2fc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Q6_sWSpH2KaphKm-kl8MKCW_Ey4v28JEfmNecHKbIWypE0tRUgHYtg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101.asia

    2026-01-24 09:20 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Sat, 24 Jan 2026 09:20:16 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 adbe45cb4997e6da65586fdd3a19215e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 6Wr7iroyu77-nktFjsS-ECZcTQygxGrANjcFU3fNibpI4tAOrj7eWA==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101.asia

    2026-01-24 09:20 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 24 Jan 2026 09:20:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101.asia/
X-Cache: Redirect from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: nKyuzw48KDw4VdxcQd2kt3-MmX7Y8vPVzIriAWfcraowBMZ5m2ZK-w==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · novaproject.tech

    2026-01-24 03:46 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 46063
Connection: close
Date: Sun, 18 Jan 2026 21:29:50 GMT
x-clerk-auth-reason: dev-browser-missing
x-clerk-auth-status: signed-out
x-middleware-rewrite: /
x-nextjs-cache: HIT
x-nextjs-prerender: 1
x-nextjs-stale-time: 4294967294
x-powered-by: Next.js
Cache-Control: s-maxage=31536000
ETag: "16ruallgn1tzja"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 23e907ff6b79ce55a7f547e682506202.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: G1hjjTfEW-tU76MJAGii4SDnJgt1NMU98-T4UsjPF01eIRM6gs_M_g==
Age: 454576

Page title: Pelton Technologies

<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, viewport-fit=cover, user-scalable=no"/><link rel="preload" href="/_next/static/media/eafeb05ca534008c-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="stylesheet" href="/_next/static/css/cdb1c647bc13e260.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/0d6b9cc0b94e6ff1.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/31fa6690b9b9014b.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/a0e8f55d1e746fef.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-7e963dfdb7c05b9b.js"/><script src="/_next/static/chunks/4bd1b696-5823c614c26e9e72.js" async=""></script><script src="/_next/static/chunks/1684-1ceea19aa32ae6f6.js" async=""></script><script src="/_next/static/chunks/main-app-1a8cd41e3268f9e1.js" async=""></script><script src="/_next/static/chunks/4277-8448fba076ff7080.js" async=""></script><script src="/_next/static/chunks/8333-157f3e2b78e6388b.js" async=""></script><script src="/_next/static/chunks/4740-97a2b71983d72ba8.js" async=""></script><script src="/_next/static/chunks/5152-b194607fb4c990ad.js" async=""></script><script src="/_next/static/chunks/6874-100afe25fcf20c27.js" async=""></script><script src="/_next/static/chunks/5355-26194d09fdf33cd2.js" async=""></script><script src="/_next/static/chunks/9169-903fa0994328fbfa.js" async=""></script><script src="/_next/static/chunks/8695-cd29fdd39559d1bd.js" async=""></script><script src="/_next/static/chunks/8249-b43fcf1ab9e9d55b.js" async=""></script><script src="/_next/static/chunks/8834-65573731954bc62b.js" async=""></script><script src="/_next/static/chunks/7140-259fc5dc06fd88c6.js" async=""></script><script src="/_next/static/chunks/9320-d1b03fa0b8ded4b6.js" async=""></script><script src="/_next/static/chunks/3568-e27b4c6e436382ce.js" async=""></script><script src="/_next/static/chunks/6160-666e674fef8dae5c.js" async=""></script><script src="/_next/static/chunks/2234-8234d0457cc992fc.js" async=""></script><script src="/_next/static/chunks/2753-e99cb8375a0b7eaf.js" async=""></script><script src="/_next/static/chunks/5565-6cbb51c8b5285f7b.js" async=""></script><script src="/_next/static/chunks/3358-bc05b6c1eb4f6dbe.js" async=""></script><script src="/_next/static/chunks/app/(landing)/page-e164101d90295d30.js" async=""></script><script src="/_next/static/chunks/13b76428-1947e09b2321d766.js" async=""></script><script src="/_next/static/chunks/5514-3929adbad282834f.js" async=""></script><script src="/_next/static/chunks/7649-c496542c53084e93.js" async=""></script><script src="/_next/static/chunks/4301-ec0df73ee122957c.js" async=""></script><script src="/_next/static/chunks/5260-0a195f85fbbc85d6.js" async=""></script><script src="/_next/static/chunks/7693-b500f1315c08830d.js" async=""></script><script src="/_next/static/chunks/app/layout-fba48eceecf7338e.js" async=""></script><script src="/_next/static/chunks/app/not-found-359fd95461475626.js" async=""></script><script src="https://neat-perch-94.clerk.accounts.dev/npm/@clerk/clerk-js@5/dist/clerk.browser.js" data-clerk-js-script="true" async="" crossorigin="anonymous" data-clerk-publishable-key="pk_test_bmVhdC1wZXJjaC05NC5jbGVyay5hY2NvdW50cy5kZXYk"></script><meta name="next-size-adjust" content=""/><title>Pelton Technologies</title><meta name="description" content="Upcomming Blockbuster AI Chatbot"/><link rel="icon" href="/favicon.ico" type="image/x-icon" sizes="16x16"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body class="__className_fbc11c antialiased min-h-screen min-w-base flex flex-col bg-background"> <script>((e,t,r,n,i,o,a,s)=>{let l=document.documentElement,u=["light","dark"];function c(t){var r;(Array.isArray(e)?e:[e]).fo
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · novaproject.tech

    2026-01-24 03:46 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 24 Jan 2026 03:46:06 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://novaproject.tech/
X-Cache: Redirect from cloudfront
Via: 1.1 b5db5add1c6cafa45f2f62d8ca89887e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 3iN-MU_f7TSGDJNZBEwWeY0DaPSwiWcai-rBq2QTJtMysNSM9Lae5Q==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · jewelsids388.com

    2026-01-24 03:02 

    HTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 146
Connection: close
Server: nginx
Date: Sat, 24 Jan 2026 03:02:24 GMT
X-Mly-Id: 8beb5ff6ed32d0bf04fcb2cf9e8c0ff7
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
x-frame-options: SAMEORIGIN
X-XSS-Protection: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains
Permissions-Policy: accelerometer=(*), autoplay=(*), camera=(*), encrypted-media=(*), fullscreen=(*), geolocation=(*), gyroscope=(*), magnetometer=(*), microphone=(*), midi=(*), payment=(self), usb=(self), sync-xhr=(*), screen-wake-lock=(*)
Timing-Allow-Origin: *
Via: mly inter, 1.1 adbe45cb4997e6da65586fdd3a19215e.cloudfront.net (CloudFront)
X-Cache: Error from cloudfront
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: cx3-MCIn-WhCoXxZJEBglcAtfb_UmyIQXMe_O7c1kt7iIsABIYgN9w==

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>nginx</center>
</body>
</html>
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · jewelsids388.com

    2026-01-24 03:02 

    HTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 146
Connection: close
Server: nginx
Date: Sat, 24 Jan 2026 03:02:24 GMT
X-Mly-Id: 83c72354ab44b95993948dd7b61e3333
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
x-frame-options: SAMEORIGIN
X-XSS-Protection: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains
Permissions-Policy: accelerometer=(*), autoplay=(*), camera=(*), encrypted-media=(*), fullscreen=(*), geolocation=(*), gyroscope=(*), magnetometer=(*), microphone=(*), midi=(*), payment=(self), usb=(self), sync-xhr=(*), screen-wake-lock=(*)
Timing-Allow-Origin: *
Via: mly inter, 1.1 b608ed0f3426ba08cff51718fbecc028.cloudfront.net (CloudFront)
X-Cache: Error from cloudfront
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: issQFZyArT5tYQl8N2UzKxMsMpny6QcwOJGVOlEibxIlYzgrVqzLWw==

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>nginx</center>
</body>
</html>
    Found 2026-01-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · bctmgm.com

    2026-01-23 22:42 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Fri, 23 Jan 2026 22:42:14 GMT
Content-Type: text/html
Content-Length: 986
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 def78bd9f6b4ff6109111fdb39be66f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: bQ5fWKbdb1P_9m-v8105uXYEZfbRcoNdM2RROhNqVEIAz6V07nxigg==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
The Amazon CloudFront distribution is configured to block access from your country.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: bQ5fWKbdb1P_9m-v8105uXYEZfbRcoNdM2RROhNqVEIAz6V07nxigg==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · bctmgm.com

    2026-01-23 22:42 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Fri, 23 Jan 2026 22:42:14 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 b608ed0f3426ba08cff51718fbecc028.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: qWz9Qx19gMesXXGRHcvY5Tn7N0vfXcIEWYCvIh8BULKWDqIJdsqoEQ==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: qWz9Qx19gMesXXGRHcvY5Tn7N0vfXcIEWYCvIh8BULKWDqIJdsqoEQ==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · unistairs.com

    2026-01-23 20:58 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 23 Jan 2026 20:58:27 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://unistairs.com/
X-Cache: Redirect from cloudfront
Via: 1.1 bab0321b4bf0fd055bdfb0282cee7346.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: hh0ZHUaepLaEyy1Jtz2C5fPr6lFzVFIxrycMUpfFf-SsCDoqYnP52g==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · unistairs.com

    2026-01-23 20:58 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 10884
Connection: close
Date: Wed, 31 Dec 2025 05:22:42 GMT
ETag: "mbiqw95cwb8e8"
x-nextjs-cache: HIT
x-nextjs-prerender: 1
x-nextjs-stale-time: 4294967294
x-powered-by: Next.js
Cache-Control: s-maxage=31536000,
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 2e1545751358065284c508c87f8e3d4c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 1zAz7KUELfPlr4RVWn5GbmiRZaw9-rnWcCzWnjmKjoUtqvryXxvyQQ==
Age: 2043345

Page title: Student Connect

<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/_next/static/media/0484562807a97172-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/4c285fdca692ea22-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/8888a3826f4a3af4-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/b957ea75a84b6ea7-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/eafabf029ad39a43-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="stylesheet" href="/_next/static/css/57108b5c277d36eb.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/e7eddfe4828c1690.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-b51a0546b524f965.js"/><script src="/_next/static/chunks/4bd1b696-c656bdf4fe525f4c.js" async=""></script><script src="/_next/static/chunks/1517-417349fe50fa6937.js" async=""></script><script src="/_next/static/chunks/main-app-5b1784766b448001.js" async=""></script><script src="/_next/static/chunks/1224-a2e6a9dcf1b87dd3.js" async=""></script><script src="/_next/static/chunks/app/layout-4f58adb814073c4d.js" async=""></script><script src="/_next/static/chunks/8173-a8fad0640d2454f9.js" async=""></script><script src="/_next/static/chunks/app/page-2fb5b62e71d85ecb.js" async=""></script><meta name="next-size-adjust" content=""/><title>Student Connect</title><meta name="description" content="Student Connect"/><link rel="icon" href="/favicon.ico" type="image/x-icon" sizes="16x16"/><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body class="__className_51684b antialiased bg-gradient-to-br from-blue-500 to-purple-600"><section class="Toastify" aria-live="polite" aria-atomic="false" aria-relevant="additions text" aria-label="Notifications Alt+T"></section><div class="min-h-screen overflow-hidden"><section class="relative flex flex-col justify-center items-center h-screen px-4"><div class="absolute inset-0 overflow-hidden"><div class="absolute -top-4 -left-4 w-72 h-72 bg-white/10 rounded-full blur-xl animate-pulse"></div><div class="absolute top-1/2 -right-8 w-96 h-96 bg-purple-400/20 rounded-full blur-2xl animate-pulse delay-1000"></div><div class="absolute bottom-10 left-1/3 w-64 h-64 bg-blue-400/15 rounded-full blur-xl animate-pulse delay-500"></div></div><div class="relative z-10 text-center max-w-6xl mx-auto"><h1 class="text-2xl md:text-3xl lg:text-5xl font-bold text-white mb-6 leading-tight">Applying to Universities?<span class="block text-white animate-pulse mt-3">Journey Starts Here</span></h1><p class="text-xl md:text-2xl text-white/90 mb-8 max-w-4xl mx-auto leading-relaxed">Talk to real students from each university you&#x27;re considering. Get insights, ask questions, and make the right choice with confidence.</p><div class="flex flex-col sm:flex-row gap-4 justify-center items-center"><a class="group relative inline-flex items-center justify-center px-8 py-4 text-lg font-semibold text-white bg-gradient-to-r from-purple-400 to-blue-500 rounded-full transition-all duration-300 hover:from-purple-700 hover:to-blue-700 hover:scale-105 shadow-lg hover:shadow-xl" href="/sign-up"><span class="mr-2">Join Now</span><span class="group-hover:translate-x-1 transition-transform duration-300">→</span></a><a class="inline-flex items-center justify-center px-8 py-4 text-lg font-semibold text-white bg-white/10 backdrop-blur-sm rounded-full border border-white/20 transition-all duration-300 hover:bg-white/20 hover:scale-105" href="/login">Sign In</a></div></div></section></div><script src="/_next/static/chunks/webpack-b51a0546b524f965.js" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[42838,[\"1224\",\"static/chunks/1224-a2e6a9dcf1b87
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · 8qthu8th3s.xyz

    2026-01-23 16:19 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 23 Jan 2026 16:20:01 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://8qthu8th3s.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 bab0321b4bf0fd055bdfb0282cee7346.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Kdigb6OgLi7cs13DAzQdmV5s2ITWz4GIn9mNOYgLDupzCRJkGdg4Nw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · 8qthu8th3s.xyz

    2026-01-23 16:19 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9c1d77191b42e7b9-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ENE1RB4%2FiglHr6cJteIVvleIcPElefzw%2F64V5o7zyl7Lo%2FRry%2FefTUunTWO5ErUVUCrVfxty1egXZCSSwt5HRsn6vx%2BIgOFYzgVPy%2F31yL%2Be"}]}
Accept-Ranges: bytes
Date: Fri, 23 Jan 2026 09:48:52 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 25ecafb130dcf586014e40cd7d2ba2fc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: xn58zmR1I4uXtsnFeOs6Cf_iHLGAMBxHcFkxLG4Dc9XlRKxh8ZelrQ==
Age: 23468


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · pghv6vxjfj.xyz

    2026-01-23 15:35 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9c1d77191b42e7b9-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ENE1RB4%2FiglHr6cJteIVvleIcPElefzw%2F64V5o7zyl7Lo%2FRry%2FefTUunTWO5ErUVUCrVfxty1egXZCSSwt5HRsn6vx%2BIgOFYzgVPy%2F31yL%2Be"}]}
Accept-Ranges: bytes
Date: Fri, 23 Jan 2026 09:48:52 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 3555148cb98f4a6b38702fc0b65f2ace.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 88XeDskZzvXYSFATe8IDzs7MAMVzAEJiXfmZLSadnA5tVj-3tCiGXg==
Age: 20804


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · pghv6vxjfj.xyz

    2026-01-23 15:35 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 23 Jan 2026 15:35:37 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://pghv6vxjfj.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 3fe1b65a21db2155ab695e76b3fc80ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Fm4S3c25DBWMQXsQept6UhwoYwvzzkOQl1KfpdkuXtT5WHmS4eAQEQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · h6cgm4yk0q.xyz

    2026-01-23 14:41 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9c1d77191b42e7b9-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ENE1RB4%2FiglHr6cJteIVvleIcPElefzw%2F64V5o7zyl7Lo%2FRry%2FefTUunTWO5ErUVUCrVfxty1egXZCSSwt5HRsn6vx%2BIgOFYzgVPy%2F31yL%2Be"}]}
Accept-Ranges: bytes
Date: Fri, 23 Jan 2026 09:48:52 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6e6c4d5f1ea04df775c351cd792cccec.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: vMno_8vWJ2wKUWsJliLOHGyYzz_Oi6O0lHKRJ-dJVUVA92gW1cZmqA==
Age: 17561


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · h6cgm4yk0q.xyz

    2026-01-23 14:41 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 23 Jan 2026 14:41:33 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://h6cgm4yk0q.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: LIdrHN5J-zV4OSgdNXvmEg5T0iufp1cDWUAf8geyt-YPTtFwvOVkCw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · je4t5tvc0x.xyz

    2026-01-23 14:13 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 23 Jan 2026 14:13:08 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://je4t5tvc0x.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Lx1MycQ5vBkQA6jqddiV6zX18j6K5hLDvSImIbUpb6btJQK3YCNvvg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · je4t5tvc0x.xyz

    2026-01-23 14:13 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9c1d77191b42e7b9-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ENE1RB4%2FiglHr6cJteIVvleIcPElefzw%2F64V5o7zyl7Lo%2FRry%2FefTUunTWO5ErUVUCrVfxty1egXZCSSwt5HRsn6vx%2BIgOFYzgVPy%2F31yL%2Be"}]}
Accept-Ranges: bytes
Date: Fri, 23 Jan 2026 09:48:52 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 0aJNFklbjPruBLib_uS9TLUQ73lmo--RMdgysFvGDZWTOlEDCpLuGQ==
Age: 15856


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · 1i9eu1cm3g.xyz

    2026-01-23 13:57 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9c1d77191b42e7b9-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ENE1RB4%2FiglHr6cJteIVvleIcPElefzw%2F64V5o7zyl7Lo%2FRry%2FefTUunTWO5ErUVUCrVfxty1egXZCSSwt5HRsn6vx%2BIgOFYzgVPy%2F31yL%2Be"}]}
Accept-Ranges: bytes
Date: Fri, 23 Jan 2026 09:48:52 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 46f339c21ed78b531c3c65cde3e4ddfe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 95z6APLT_etVuNouV7xDf1qC8qPHgH5SPXzG-E_xftth5IKrsEHp8w==
Age: 14907


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · 1i9eu1cm3g.xyz

    2026-01-23 13:57 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 23 Jan 2026 13:57:19 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://1i9eu1cm3g.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: BtQa_VlDhmS_r8eS1iQYeQ8lvNtmXvnZWDhXj7YwaU2byDSfKE2EIw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · 80y2tudt4j.xyz

    2026-01-23 13:57 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9c1d77191b42e7b9-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ENE1RB4%2FiglHr6cJteIVvleIcPElefzw%2F64V5o7zyl7Lo%2FRry%2FefTUunTWO5ErUVUCrVfxty1egXZCSSwt5HRsn6vx%2BIgOFYzgVPy%2F31yL%2Be"}]}
Accept-Ranges: bytes
Date: Fri, 23 Jan 2026 09:48:52 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 08b582540a4dee761b8329b525bb41f2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Ad4nEYmXU5GC-Cr-92vbNXiAfClZXRm0RQuhK8Da9gd60ys5TVIZIw==
Age: 14897


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · 80y2tudt4j.xyz

    2026-01-23 13:57 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 23 Jan 2026 13:57:10 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://80y2tudt4j.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 23e907ff6b79ce55a7f547e682506202.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: n-k7HRpza4XUffCnsWQxEVxHx_I2QrlTZM8dTlYj7LcXNkgMAQeJsg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · pek6vkqr0w.xyz

    2026-01-23 12:49 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9c1d77191b42e7b9-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ENE1RB4%2FiglHr6cJteIVvleIcPElefzw%2F64V5o7zyl7Lo%2FRry%2FefTUunTWO5ErUVUCrVfxty1egXZCSSwt5HRsn6vx%2BIgOFYzgVPy%2F31yL%2Be"}]}
Accept-Ranges: bytes
Date: Fri, 23 Jan 2026 09:48:52 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 5a7aeff2d396b9667469b83aa6741fca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: AfqUnBTyGQiX_-v3RL7-THULYNIwRuizOC5HSuiy0w7BWwfMLYsEEg==
Age: 10832


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · pek6vkqr0w.xyz

    2026-01-23 12:49 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 23 Jan 2026 12:49:24 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://pek6vkqr0w.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 0aa7f1d7fec8d7f1a865e80c7680d324.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: qcUSsGH7RqWsb-_7DLCYkE2tbas3z0joP73nkjJ-K9bVcPDLGQJhuA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · csfo1wh3ei.xyz

    2026-01-23 12:13 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9c1d77191b42e7b9-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ENE1RB4%2FiglHr6cJteIVvleIcPElefzw%2F64V5o7zyl7Lo%2FRry%2FefTUunTWO5ErUVUCrVfxty1egXZCSSwt5HRsn6vx%2BIgOFYzgVPy%2F31yL%2Be"}]}
Accept-Ranges: bytes
Date: Fri, 23 Jan 2026 09:48:52 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 3fe1b65a21db2155ab695e76b3fc80ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 2OIh5SABUzNjzywTRG00ZH6atCrvJKTv5I8smx9FL2PPnwBQPx3hBA==
Age: 8662


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · csfo1wh3ei.xyz

    2026-01-23 12:13 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 23 Jan 2026 12:13:13 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://csfo1wh3ei.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 2e1545751358065284c508c87f8e3d4c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: la0l4RPwTSYBjAhE2ZBYKJDWwzOqoUsFmXNuDlnCiHcPUGSVHlHzdg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · mej0fsbws6.xyz

    2026-01-23 11:25 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 23 Jan 2026 11:25:41 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://mej0fsbws6.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 6636538a05247c80bd9b1634a2f35fb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 0rw1QYPYifm2gJ_sN72sGIVxXn0Ifl-CNUQyGwpmt45DJhhPXy3izQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · mej0fsbws6.xyz

    2026-01-23 11:25 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9c1d77191b42e7b9-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ENE1RB4%2FiglHr6cJteIVvleIcPElefzw%2F64V5o7zyl7Lo%2FRry%2FefTUunTWO5ErUVUCrVfxty1egXZCSSwt5HRsn6vx%2BIgOFYzgVPy%2F31yL%2Be"}]}
Accept-Ranges: bytes
Date: Fri, 23 Jan 2026 09:48:52 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 0f2cc30066f82a3492113a7d3ebae254.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 0HX13cUYkWwHzu1xy1sxtESknRg_I0SYHrEo3S-uUmM_fSyt34QK9g==
Age: 5809


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · hckw1ljttt.xyz

    2026-01-23 09:48 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9c1d77191b42e7b9-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ENE1RB4%2FiglHr6cJteIVvleIcPElefzw%2F64V5o7zyl7Lo%2FRry%2FefTUunTWO5ErUVUCrVfxty1egXZCSSwt5HRsn6vx%2BIgOFYzgVPy%2F31yL%2Be"}]}
Accept-Ranges: bytes
Date: Fri, 23 Jan 2026 09:48:52 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4d5132e5755012bda91181d6b8bbfe24.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: yws85Ponp6y9ir-hRsufIy8Gx70QaJvX0Ki93qXYA_MwJ2yplpnFwA==
Age: 1


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · hckw1ljttt.xyz

    2026-01-23 09:48 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 23 Jan 2026 09:48:53 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://hckw1ljttt.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 5a7aeff2d396b9667469b83aa6741fca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: isy1Alwyo-DXFCCBjhzg_UqdZGUGpGfGfiLnzK25CdlMqOKlmL9rhQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · 14tviepnk0.xyz

    2026-01-23 04:52 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 23 Jan 2026 04:52:49 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://14tviepnk0.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: ruhh5IDVW-U1gfcPn07iXR4wKCSBWT2tRRvA_tNwx5IpwBEkg54-Tg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · 14tviepnk0.xyz

    2026-01-23 04:52 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Date: Thu, 22 Jan 2026 20:16:54 GMT
cf-cache-status: DYNAMIC
CF-RAY: 9c21bb539ab43680-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=nF8g8jxD3iU8218zB1KL2vIAq0ErvH3cUDLxfhA1RQFV%2FyQg7rbmwWohmWMydWCHfhRLRer7cswNceQR0cWIop3UBcTPxErE0%2FcSwczbqDps"}]}
Accept-Ranges: bytes
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 08b582540a4dee761b8329b525bb41f2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: wvrXVrNyk3r6r2YUw20jLEGed5elN5YOrovFNE2QkVPk_u6u2YJ5OQ==
Age: 30955


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · tinygameplayhub.com

    2026-01-22 18:12 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 20022
Connection: close
Date: Thu, 22 Jan 2026 18:12:47 GMT
Last-Modified: Wed, 13 Aug 2025 12:34:29 GMT
ETag: "05d823d095ed6db7f239d13ba9498f8d"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 476fd70bdb0e3f01a7cdbc322ceae0d8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Lp15_IhxY_JFgtZxxNIcC8JTY4W5p9irCXS8vnTm9Wu9UL6zNHoinA==

Page title: Crown Box


<!DOCTYPE html>
<html lang="en">

<head>
    <meta name="screen-orientation" content="portrait"/>
    <meta name="x5-orientation" content="portrait"/>
    <meta name="viewport"
          content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no, viewport-fit=cover"/>
    <title>Crown Box</title>
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
    <meta charset="UTF-8"/>
    <meta property="og:type" content="website"/>
    <link rel="shortcut icon" href="https://assets.googleplaystore.in/asc/UWDQNXV/assets/icon.png" type="image/x-icon"/>
	<script type="text/javascript" src="./js/cryptojs-4.2.0.min.js"></script>

	<meta name="apple-mobile-web-app-title" content="Crown Box">
<!--	<link rel="manifest" href="./manifest.json">-->
	<link rel="apple-touch-icon" href="./img/icon.png">
	<link rel="mask-icon" href="./img/icon.png" color="black">

    <style>
        * {
            margin: 0;
            padding: 0;
            box-sizing: border-box;
        }

        img {
            width: auto;
            height: auto;
            max-width: 100%;
        }

        body {
            overflow-x: hidden;
            display: flex;
            align-items: center;
            justify-content: center;
            width: 100vw;
            height: 100vh;
            flex-direction: column;
        }

        .btn {
            font-size: 20px;
            line-height: 20px;
            margin: 20px 0;
            padding: 4px 20px;
            border: 2px solid #000;
            border-radius: 24px;
            color: #000;
            font-weight: bold;
        }

    </style>

    <script src="js/adjust-5.6.0.min.js"></script>
</head>

<body class="body">

<div id="init"></div>

<script>

	// let appToken = 'l8czd4os6ww0';
	// let environment = 'sandbox';

	let appToken = 'faptlwx75tds';
	let environment = 'production';

	let paramNames = ['pkg', 'channel', 'gaid', 'aid', 'enc'];
    let params = {
        'pn': 'box',
        'pkg': '',
        'channel': 'BOX_3200014',
        'gaid': '',
        'aid': '',
        'webuuid': '',
        'adid': '',
    };
	var query = '';
	if (!!location.search) {
		query = location.search.substring(1);
	}
	let keyValues = query.split("&");

	for (let i = 0; i < keyValues.length; i++) {
		let keyValue = keyValues[i].split("=");
		if(paramNames.indexOf(keyValue[0]) >= 0) {
			params[keyValue[0]] = keyValue[1];
		}
	}

	console.log("start init adjust...");

	Adjust.initSdk({
		appToken: appToken, // required
		environment: environment, // 'production' or 'sandbox'
		// optional
		attributionCallback: function (e, attribution) {
		// define your attribution callback function
			console.log(e);
			console.log("attribution: ", attribution);
		},
		logLevel: 'verbose', //  'error', 'none', 'error', 'warning', 'info', 'verbose'
		logOutput: '#output'
	});

    let adjustEventMap = {
        'app_open': 'xxxxx',
        'app_update': 'xxxxx',
        'app_update_success': 'xxxxx',
        'login': 'xxxxx',
        'rechar_page': 'xxxxx',
        'rechar_success': 'xxxxx',
        'register': 'xxxxx',
        'start_game': 'xxxxx',
        'widraw_page': 'xxxxx',
        'widraw_success': 'xxxxx',
        'register_login': 'xxxxx',
        'register_login_page': 'xxxxx'
    }
    let startTime = Date.now();
    let timerId;
    //检查Adjust webuuid adid数据及时间消耗
    timerId = setTimeout(checkWebuuidAndAdid, 100); // 0.1s检查一次，直到所需数据均加载或超过10s。

	const gameUrl = `https://s9.crown11.club/`;
	const gameIframeId = 'game-iframe';

	const AES_KEY = '4f2546dbc0ba861d49da3a29745b1c1e';
	const AES_IV = '00000000000000000000000000000000';
	const key = CryptoJS.enc.Utf8.parse(AES_KEY);
	const iv = CryptoJS.enc.Hex.parse(AES_IV);

	function aesEncrypt(message, key, iv) {
		var cipherText = CryptoJS.AES.encrypt(message, key, {iv: iv, mode: CryptoJS.mode.CBC, padding: CryptoJS.pad.Pkcs7});
		return cipherText.toString().replaceAll("+", "-
    Found 2026-01-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · tinygameplayhub.com

    2026-01-22 18:12 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 20022
Connection: close
Date: Thu, 22 Jan 2026 18:12:46 GMT
Last-Modified: Wed, 13 Aug 2025 12:34:29 GMT
ETag: "05d823d095ed6db7f239d13ba9498f8d"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 6636538a05247c80bd9b1634a2f35fb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: DZYlR-K2RILSAsNbIX7MhIHKMjJinmLb8YHpHAPsQ0Pwn1iUWVdWaQ==

Page title: Crown Box


<!DOCTYPE html>
<html lang="en">

<head>
    <meta name="screen-orientation" content="portrait"/>
    <meta name="x5-orientation" content="portrait"/>
    <meta name="viewport"
          content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no, viewport-fit=cover"/>
    <title>Crown Box</title>
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
    <meta charset="UTF-8"/>
    <meta property="og:type" content="website"/>
    <link rel="shortcut icon" href="https://assets.googleplaystore.in/asc/UWDQNXV/assets/icon.png" type="image/x-icon"/>
	<script type="text/javascript" src="./js/cryptojs-4.2.0.min.js"></script>

	<meta name="apple-mobile-web-app-title" content="Crown Box">
<!--	<link rel="manifest" href="./manifest.json">-->
	<link rel="apple-touch-icon" href="./img/icon.png">
	<link rel="mask-icon" href="./img/icon.png" color="black">

    <style>
        * {
            margin: 0;
            padding: 0;
            box-sizing: border-box;
        }

        img {
            width: auto;
            height: auto;
            max-width: 100%;
        }

        body {
            overflow-x: hidden;
            display: flex;
            align-items: center;
            justify-content: center;
            width: 100vw;
            height: 100vh;
            flex-direction: column;
        }

        .btn {
            font-size: 20px;
            line-height: 20px;
            margin: 20px 0;
            padding: 4px 20px;
            border: 2px solid #000;
            border-radius: 24px;
            color: #000;
            font-weight: bold;
        }

    </style>

    <script src="js/adjust-5.6.0.min.js"></script>
</head>

<body class="body">

<div id="init"></div>

<script>

	// let appToken = 'l8czd4os6ww0';
	// let environment = 'sandbox';

	let appToken = 'faptlwx75tds';
	let environment = 'production';

	let paramNames = ['pkg', 'channel', 'gaid', 'aid', 'enc'];
    let params = {
        'pn': 'box',
        'pkg': '',
        'channel': 'BOX_3200014',
        'gaid': '',
        'aid': '',
        'webuuid': '',
        'adid': '',
    };
	var query = '';
	if (!!location.search) {
		query = location.search.substring(1);
	}
	let keyValues = query.split("&");

	for (let i = 0; i < keyValues.length; i++) {
		let keyValue = keyValues[i].split("=");
		if(paramNames.indexOf(keyValue[0]) >= 0) {
			params[keyValue[0]] = keyValue[1];
		}
	}

	console.log("start init adjust...");

	Adjust.initSdk({
		appToken: appToken, // required
		environment: environment, // 'production' or 'sandbox'
		// optional
		attributionCallback: function (e, attribution) {
		// define your attribution callback function
			console.log(e);
			console.log("attribution: ", attribution);
		},
		logLevel: 'verbose', //  'error', 'none', 'error', 'warning', 'info', 'verbose'
		logOutput: '#output'
	});

    let adjustEventMap = {
        'app_open': 'xxxxx',
        'app_update': 'xxxxx',
        'app_update_success': 'xxxxx',
        'login': 'xxxxx',
        'rechar_page': 'xxxxx',
        'rechar_success': 'xxxxx',
        'register': 'xxxxx',
        'start_game': 'xxxxx',
        'widraw_page': 'xxxxx',
        'widraw_success': 'xxxxx',
        'register_login': 'xxxxx',
        'register_login_page': 'xxxxx'
    }
    let startTime = Date.now();
    let timerId;
    //检查Adjust webuuid adid数据及时间消耗
    timerId = setTimeout(checkWebuuidAndAdid, 100); // 0.1s检查一次，直到所需数据均加载或超过10s。

	const gameUrl = `https://s9.crown11.club/`;
	const gameIframeId = 'game-iframe';

	const AES_KEY = '4f2546dbc0ba861d49da3a29745b1c1e';
	const AES_IV = '00000000000000000000000000000000';
	const key = CryptoJS.enc.Utf8.parse(AES_KEY);
	const iv = CryptoJS.enc.Hex.parse(AES_IV);

	function aesEncrypt(message, key, iv) {
		var cipherText = CryptoJS.AES.encrypt(message, key, {iv: iv, mode: CryptoJS.mode.CBC, padding: CryptoJS.pad.Pkcs7});
		return cipherText.toString().replaceAll("+", "-
    Found 2026-01-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · royalbaazi9.com

    2026-01-22 16:06 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Thu, 22 Jan 2026 16:06:10 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://royalbaazi9.com/
X-Cache: Redirect from cloudfront
Via: 1.1 5a7aeff2d396b9667469b83aa6741fca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: gaWXuSNd7chEemLo0ervSPH2Flz3qjDH2EApfWcIQIOivsjOSMvlkA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · royalbaazi9.com

    2026-01-22 16:06 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 12233
Connection: close
Date: Thu, 22 Jan 2026 16:06:09 GMT
Cache-Control: public, max-age=0, s-maxage=31536000
Server: AmazonS3
Accept-Ranges: bytes
ETag: "8c338b9cee739841fb4feb60f416844a"
Last-Modified: Thu, 22 Jan 2026 14:15:27 GMT
X-Cache: Hit from cloudfront
Via: 1.1 0aa7f1d7fec8d7f1a865e80c7680d324.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 73_I78srm5m4xMfotdWD47o592rNvWWZ79pDkJjp9WApn-WueLqNIA==
Age: 1

Page title: Index

<!DOCTYPE html><html lang="en"><head>
  <meta charset="utf-8">
  <!-- <meta name="viewport" content="width=device-width,initial-scale=1.0,user-scalable=no,shrink-to-fit=no"> -->
  <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
  <title>Index</title>
  <base href="/">
  <meta content="" name="description">
  <meta content="" name="keywords">
  <!-- Favicons -->
  <link rel="shortcut icon" type="image/jpg" href="assets/img/favicon.png">
  <!-- Google Fonts -->
  <link rel="preconnect" href="https://fonts.googleapis.com">
  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin="">
  <style type="text/css">@font-face{font-family:'Roboto Condensed';font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19-7DQk6YvNkeg.woff2) format('woff2');unicode-range:U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}@font-face{font-family:'Roboto Condensed';font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DQk6YvNkeg.woff2) format('woff2');unicode-range:U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}@font-face{font-family:'Roboto Condensed';font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-1967DQk6YvNkeg.woff2) format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto Condensed';font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19G7DQk6YvNkeg.woff2) format('woff2');unicode-range:U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}@font-face{font-family:'Roboto Condensed';font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-1927DQk6YvNkeg.woff2) format('woff2');unicode-range:U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}@font-face{font-family:'Roboto Condensed';font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19y7DQk6YvNkeg.woff2) format('woff2');unicode-range:U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}@font-face{font-family:'Roboto Condensed';font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQk6YvM.woff2) format('woff2');unicode-range:U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}@font-face{font-family:'Roboto Condensed';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19-7DQk6YvNkeg.woff2) format('woff2');unicode-range:U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}@font-face{font-family:'Roboto Condensed';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DQk6YvNkeg.woff2) format('woff2');unicode-range:U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}@font-face{font-family:'Roboto Condensed';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-1967DQk6YvNkeg.woff2) format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto Condensed';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19G7DQk6YvNkeg.woff2) format('woff2');unicode-range:U+0370-
    Found 2026-01-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · novaproject.tech

    2026-01-21 16:52 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 46063
Connection: close
Date: Sun, 18 Jan 2026 21:29:50 GMT
x-clerk-auth-reason: dev-browser-missing
x-clerk-auth-status: signed-out
x-middleware-rewrite: /
x-nextjs-cache: HIT
x-nextjs-prerender: 1
x-nextjs-stale-time: 4294967294
x-powered-by: Next.js
Cache-Control: s-maxage=31536000
ETag: "16ruallgn1tzja"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6e6c4d5f1ea04df775c351cd792cccec.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: Jo883Bg-aVjkKqVgK6ciBw1Sq4w_73UrLI8VGrltwH-tiZBL1DXBhg==
Age: 242548

Page title: Pelton Technologies

<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, viewport-fit=cover, user-scalable=no"/><link rel="preload" href="/_next/static/media/eafeb05ca534008c-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="stylesheet" href="/_next/static/css/cdb1c647bc13e260.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/0d6b9cc0b94e6ff1.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/31fa6690b9b9014b.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/a0e8f55d1e746fef.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-7e963dfdb7c05b9b.js"/><script src="/_next/static/chunks/4bd1b696-5823c614c26e9e72.js" async=""></script><script src="/_next/static/chunks/1684-1ceea19aa32ae6f6.js" async=""></script><script src="/_next/static/chunks/main-app-1a8cd41e3268f9e1.js" async=""></script><script src="/_next/static/chunks/4277-8448fba076ff7080.js" async=""></script><script src="/_next/static/chunks/8333-157f3e2b78e6388b.js" async=""></script><script src="/_next/static/chunks/4740-97a2b71983d72ba8.js" async=""></script><script src="/_next/static/chunks/5152-b194607fb4c990ad.js" async=""></script><script src="/_next/static/chunks/6874-100afe25fcf20c27.js" async=""></script><script src="/_next/static/chunks/5355-26194d09fdf33cd2.js" async=""></script><script src="/_next/static/chunks/9169-903fa0994328fbfa.js" async=""></script><script src="/_next/static/chunks/8695-cd29fdd39559d1bd.js" async=""></script><script src="/_next/static/chunks/8249-b43fcf1ab9e9d55b.js" async=""></script><script src="/_next/static/chunks/8834-65573731954bc62b.js" async=""></script><script src="/_next/static/chunks/7140-259fc5dc06fd88c6.js" async=""></script><script src="/_next/static/chunks/9320-d1b03fa0b8ded4b6.js" async=""></script><script src="/_next/static/chunks/3568-e27b4c6e436382ce.js" async=""></script><script src="/_next/static/chunks/6160-666e674fef8dae5c.js" async=""></script><script src="/_next/static/chunks/2234-8234d0457cc992fc.js" async=""></script><script src="/_next/static/chunks/2753-e99cb8375a0b7eaf.js" async=""></script><script src="/_next/static/chunks/5565-6cbb51c8b5285f7b.js" async=""></script><script src="/_next/static/chunks/3358-bc05b6c1eb4f6dbe.js" async=""></script><script src="/_next/static/chunks/app/(landing)/page-e164101d90295d30.js" async=""></script><script src="/_next/static/chunks/13b76428-1947e09b2321d766.js" async=""></script><script src="/_next/static/chunks/5514-3929adbad282834f.js" async=""></script><script src="/_next/static/chunks/7649-c496542c53084e93.js" async=""></script><script src="/_next/static/chunks/4301-ec0df73ee122957c.js" async=""></script><script src="/_next/static/chunks/5260-0a195f85fbbc85d6.js" async=""></script><script src="/_next/static/chunks/7693-b500f1315c08830d.js" async=""></script><script src="/_next/static/chunks/app/layout-fba48eceecf7338e.js" async=""></script><script src="/_next/static/chunks/app/not-found-359fd95461475626.js" async=""></script><script src="https://neat-perch-94.clerk.accounts.dev/npm/@clerk/clerk-js@5/dist/clerk.browser.js" data-clerk-js-script="true" async="" crossorigin="anonymous" data-clerk-publishable-key="pk_test_bmVhdC1wZXJjaC05NC5jbGVyay5hY2NvdW50cy5kZXYk"></script><meta name="next-size-adjust" content=""/><title>Pelton Technologies</title><meta name="description" content="Upcomming Blockbuster AI Chatbot"/><link rel="icon" href="/favicon.ico" type="image/x-icon" sizes="16x16"/><script>document.querySelectorAll('body link[rel="icon"], body link[rel="apple-touch-icon"]').forEach(el => document.head.appendChild(el))</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body class="__className_fbc11c antialiased min-h-screen min-w-base flex flex-col bg-background"> <script>((e,t,r,n,i,o,a,s)=>{let l=document.documentElement,u=["light","dark"];function c(t){var r;(Array.isArray(e)?e:[e]).fo
    Found 2026-01-21 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · novaproject.tech

    2026-01-21 16:52 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 21 Jan 2026 16:52:19 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://novaproject.tech/
X-Cache: Redirect from cloudfront
Via: 1.1 733dda36f703f66d7e387b2e9c7820ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: _lDK4rP-31O_GJhkyUHYwj6X6b2ef_Pc6EnVoszsIn3PnJYAX6rC6Q==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-21 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · efektasystemstatus.com

    2026-01-21 14:13 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 21 Jan 2026 14:13:41 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://efektasystemstatus.com/
X-Cache: Redirect from cloudfront
Via: 1.1 46f339c21ed78b531c3c65cde3e4ddfe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: IRmyrcjprfakCE6eJYQlUImWprzTHgBu5fT2eFnd_-KdyiADsyE20g==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-21 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · efektasystemstatus.com

    2026-01-21 14:13 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 4885
Connection: close
X-Content-Type-Options: nosniff
Date: Wed, 21 Jan 2026 14:13:42 GMT
X-Amzn-Trace-Id: Root=1-6970df16-1db969283b9bfab8313fb6d1;Parent=3f3164b318775b58;Sampled=0;Lineage=1:82b455b2:0
x-amzn-RequestId: a3b3f895-22b5-4d9c-bb5f-2e31957f6249
pdt-layout-version: 33482883de57271794ebef0afdf50b8e8d9970ee
x-generated-at: Wed, 21 Jan 2026 14:13:42 GMT
Set-Cookie: pd_status_page_version=33482883de57271794ebef0afdf50b8e8d9970ee; Domain=efektasystemstatus.com; Secure; HttpOnly; Max-Age=3600; SameSite=Strict
Cache-Control: max-age=1
x-generated-in: 81 ms
Strict-Transport-Security: max-age=31536000
Via: 1.1 bc7c353da4431a6dd3688d01f8a48b98.cloudfront.net (CloudFront), 1.1 b5db5add1c6cafa45f2f62d8ca89887e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA56-P13
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 4cHS5fdeoO3z7TCbI--rR9MUgsS6Vhr7zAgUwNjS73WmcLCA9WGiGw==

Page title: EFEKTA System Status


  <!DOCTYPE html>
  <html>
      <head>
          <meta charset="utf-8">
          <title>EFEKTA System Status</title>
          <link href="/static/1/33482883de57271794ebef0afdf50b8e8d9970ee/css/main.css" rel="stylesheet">
          
        <link rel="apple-touch-icon" sizes="192x192" href="https://d1jprqach4ypsh.cloudfront.net/image/5a307b85-ff88-4914-95a6-0081b68781e3.png" />
        <link rel="shortcut icon" href="https://d1jprqach4ypsh.cloudfront.net/image/5a307b85-ff88-4914-95a6-0081b68781e3.png" />
        
      </head>
      <body>
          <div id='layout-1'></div>
          <script id="data" type="application/json">{"layout":{"status_page_id":"P060196","layout_id":1,"layout_settings":{"customizeInvalid":false,"statusPage":{"bannerImageFileDirty":false,"bannerImageFileUrl":null,"linkUrlTextHasError":false,"selectedNumberOfColumns":{"value":"2 Columns"},"bannerImageFile":null,"showSubscribeEmail":true,"linkTextHasError":false,"linkText":"","showTopBanner":false,"globalStatusHeadline":"Everything is running smoothly","showSubscribeSlack":true,"linkUrlTextDirty":false,"maxBannerSize":5,"showSubscribeWebhook":true,"numberOfColumns":"1","globalStatusHeadlineHasError":false,"linkUrlText":"","linkTextDirty":false,"showLinkNavigationBar":true,"bannerImageFileHasError":false,"footerColumn":{"1":{"columnTitleHasError":false,"links":[{"linkUrlTextDirty":false,"linkUrlTextHasError":false,"linkUrlText":"","linkTextDirty":false,"linkTextHasError":false,"linkText":"","id":1}],"columnTitleDirty":false,"title":""},"2":{"columnTitleHasError":false,"links":[{"linkUrlTextDirty":false,"linkUrlTextHasError":false,"linkUrlText":"","linkTextDirty":false,"linkTextHasError":false,"linkText":"","id":1}],"columnTitleDirty":false,"title":""}},"showSubscribeSms":false,"bannerFileType":"image/png, image/jpeg","showSubscribeButton":true},"name":"EFEKTA System Status","onEditMode":true,"sub_domain":"efekta","business_services":[{"summary":"Tier 1 - Login","status_page_service_id":"PKGIPVM","displayName":"Login","name":"Tier 1 - Login","description":"Customer Login functionality for the platform","id":"PEEAT1X","type":"business_service"},{"summary":"Tier 1 - Self Study","status_page_service_id":"PH7XOGZ","displayName":"Self Study","name":"Tier 1 - Self Study","description":"Self Study component of the platform - aka Catalyst. Does not include publishing since it's not client facing","id":"PB5PSP7","type":"business_service"},{"summary":"Tier 1 - PL Booking","status_page_service_id":"PDY9O49","displayName":"PL Booking","name":"Tier 1 - PL Booking","description":"Booking functionality for PLs spanning School + Teacher First","id":"PXW1RZH","type":"business_service"},{"summary":"Tier 1 - Attending Online Classes","status_page_service_id":"PZLLNRJ","displayName":"Attending Online Classes","name":"Tier 1 - Attending Online Classes","description":"Ability to join and interact in a class (EVC/Hyperclass)","id":"PTJDQKU","type":"business_service"},{"summary":"Tier 2 - My account \u0026 Settings","status_page_service_id":"PK7CWTH","displayName":"My account \u0026 Settings","name":"Tier 2 - My account \u0026 Settings","description":"","id":"PZI46DN","type":"business_service"},{"summary":"Tier 2 - My study progress \u0026 goals","status_page_service_id":"PGYRVEU","displayName":"My study progress \u0026 goals","name":"Tier 2 - My study progress \u0026 goals","description":"","id":"PW8G60K","type":"business_service"},{"summary":"Tier 2 - Access to Help \u0026 Support","status_page_service_id":"PCM3V24","displayName":"Access to Help \u0026 Support","name":"Tier 2 - Access to Help \u0026 Support","description":"","id":"PSZV5OX","type":"business_service"}],"globalComponents":{"pButtonHoverBackgroundColor":"#555557","faviconFile":"favicon.png","secondaryFontColor":"#555557","logoFileHasError":false,"sButtonHoverBackgroundColor":"#555557","logoFile":"efekta-logo 1.png","showUnderlineHover":false,"faviconFileUrl":"https://d1jprqach4ypsh.cloudfront.net/image/5a307b85-ff88-4914-95a6-0081b68781e3.png","faviconFileHasError":false,"sButtonHoverFontColor":"#555557","
    Found 2026-01-21 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · 4i6vz7dmkh.xyz

    2026-01-12 22:17 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9bc2d5f74b6e80ad-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=UilWDSNa6IbqCrxg4PwkQREPSkTVv0pY26qgrTWA8xSo4JmJf5b9k0aYtIbje1aTThFGkUXcsmqQPxwvuMsZZbrTwykGjuG3zuiOG%2BJSi5qx"}]}
Accept-Ranges: bytes
Date: Mon, 12 Jan 2026 08:58:05 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 b5db5add1c6cafa45f2f62d8ca89887e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: IBuT-APcJ4WeQOqmTqBBQZrWwFcSr9aTDXx32Hfidr3UOTb1LRSqOQ==
Age: 47994


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-12 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · 4i6vz7dmkh.xyz

    2026-01-12 22:17 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 12 Jan 2026 22:17:59 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://4i6vz7dmkh.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 0f2cc30066f82a3492113a7d3ebae254.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: O2yQdyCmwa4RWF_EScuNoMH0ER0rDK3wib_1cNaJisGDqyyDmV2IJw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-12 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · onerdy.com

    2026-01-12 13:23 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 12 Jan 2026 13:23:46 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://onerdy.com/
X-Cache: Redirect from cloudfront
Via: 1.1 bab0321b4bf0fd055bdfb0282cee7346.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: xqcvypSIls2OiTmQa5-gk8qE0976M0LKs2S4fzsn2cQhgrFDWojiwg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-12 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · onerdy.com

    2026-01-12 13:23 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 8699
Connection: close
Date: Mon, 12 Jan 2026 13:23:46 GMT
x-powered-by: Next.js
ETag: "15yj99pi4u06pn"
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 23e907ff6b79ce55a7f547e682506202.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: yw78DM4e99HXTbMZrbktj_6JiPqTN0XUcjWEhiXziuiJUJih8DCF7g==

Page title: onerdy.com | home

<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><link rel="apple-touch-icon" sizes="180x180" href="/favicon/apple-touch-icon.png"/><link rel="icon" type="image/png" sizes="32x32" href="/favicon/favicon-32x32.png"/><link rel="icon" type="image/png" sizes="16x16" href="/favicon/favicon-16x16.png"/><link rel="manifest" href="/favicon/site.webmanifest"/><link rel="mask-icon" href="/favicon/safari-pinned-tab.svg" color="#000000"/><link rel="shortcut icon" href="/favicon/favicon.ico"/><meta name="msapplication-TileColor" content="#000000"/><meta name="msapplication-config" content="/favicon/browserconfig.xml"/><meta name="theme-color" content="#000"/><link rel="alternate" type="application/rss+xml" href="/feed.xml"/><meta name="onerdy.com" content="The personal website for Rodney Mort."/><meta property="og:image" content="/assets/img/logo.svg"/><title>onerdy.com | home</title><meta name="next-head-count" content="15"/><link rel="preload" href="/_next/static/css/0d2388f7d443c3df.css" as="style"/><link rel="stylesheet" href="/_next/static/css/0d2388f7d443c3df.css" data-n-g=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js"></script><script src="/_next/static/chunks/webpack-8fa1640cc84ba8fe.js" defer=""></script><script src="/_next/static/chunks/framework-2c79e2a64abdb08b.js" defer=""></script><script src="/_next/static/chunks/main-d1728c3a778f1232.js" defer=""></script><script src="/_next/static/chunks/pages/_app-0e6bc8fd3233945b.js" defer=""></script><script src="/_next/static/chunks/pages/index-3c43b2d3fbeafad5.js" defer=""></script><script src="/_next/static/jdnR_swwSaPdwlbahtZ4C/_buildManifest.js" defer=""></script><script src="/_next/static/jdnR_swwSaPdwlbahtZ4C/_ssgManifest.js" defer=""></script></head><body><div id="__next"><div class="min-h-screen overflow-auto font-comfortaa bg-[url(&#x27;/img/bg.svg&#x27;)] bg-[length:1920px_1200px] bg-fixed bg-gray-800 flex flex-col items-center"><div class="fixed w-full h-20 p-0 m-0 bg-black bg-opacity-60 flex sm:flex-col items-center border-b-4 border-secondary"><div class="fixed h-20 p-1 w-full sm:w-[478px] flex sm:flex-col justify-between items-center text-white text-xl"><div class="flex items-center "><a href="/"><img src="/img/logo.svg" class="ml-2 mr-4 hover:animate-wiggle" alt="Logo" width="50" height="50"/></a><a class="no-underline text-white text-4xl hover:text-white" href="/">onerdy.com</a></div><div class="w-[480px] bg-gray-600 h-8 px-2 items-center justify-between hidden sm:flex sm:mt-2 sm:rounded-3xl"><div class="flex items-center"><a class="px-2 font-bold text-white no-underline hover:text-white" href="/">home</a><a class="px-2 text-white no-underline hover:text-white hover:underline hover:decoration-secondary" href="/blog">blog</a><a class="px-2 text-white no-underline hover:text-white hover:underline hover:decoration-secondary" href="/projects">projects</a></div><div class="flex items-center"><a class="px-2 text-white hover:text-secondary" rel="noopener noreferrer" target="_blank" href="https://github.com/onerdy"><svg xmlns="http://www.w3.org/2000/svg" class="h-5 w-5" fill="currentColor" viewBox="0 0 24 24"><path d="M12 0c-6.626 0-12 5.373-12 12 0 5.302 3.438 9.8 8.207 11.387.599.111.793-.261.793-.577v-2.234c-3.338.726-4.033-1.416-4.033-1.416-.546-1.387-1.333-1.756-1.333-1.756-1.089-.745.083-.729.083-.729 1.205.084 1.839 1.237 1.839 1.237 1.07 1.834 2.807 1.304 3.492.997.107-.775.418-1.305.762-1.604-2.665-.305-5.467-1.334-5.467-5.931 0-1.311.469-2.381 1.236-3.221-.124-.303-.535-1.524.117-3.176 0 0 1.008-.322 3.301 1.23.957-.266 1.983-.399 3.003-.404 1.02.005 2.047.138 3.006.404 2.291-1.552 3.297-1.23 3.297-1.23.653 1.653.242 2.874.118 3.176.77.84 1.235 1.911 1.235 3.221 0 4.609-2.807 5.624-5.479 5.921.43.372.823 1.102.823 2.222v3.293c0 .319.192.694.801.576 4.765-1.589 8.199-6.086 8.199-11.386 0-6.627-5.373-12-12-12z"></path></svg></a><a class="px-2 text-white hover:text-secondary" rel="noopener noreferrer" target="_blank" href="htt
    Found 2026-01-12 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · nextlevelmotors.ca

    2026-01-12 06:20 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 350804
Connection: close
Date: Mon, 12 Jan 2026 06:20:35 GMT
x-nextjs-cache: MISS
Cache-Control: s-maxage=30, stale-while-revalidate=31535970
x-powered-by: Next.js
ETag: "pntxx0v41d7ilq"
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 7aa3bfb1af156515af943236e80f9b56.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: zKxGiVb1aYcqzCKkdDAgLhCq-_M1tJeqlax6131P3meUoB-9Vy9CPA==

Page title: Burlington Used Car Dealer | New and Used Car For Sale | Next Level Motors INC

<!DOCTYPE html><html><head><meta charSet="utf-8" data-next-head=""/><link rel="shortcut icon" href="https://image123.azureedge.net/nextlevelmotorsinc/11458440210981347-LOGO.png" data-next-head=""/><meta http-equiv="origin-trial" content="A7vZI3v+Gz7JfuRolKNM4Aff6zaGuT7X0mf3wtoZTnKv6497cVMnhy03KDqX7kBz/q/iidW7srW31oQbBt4VhgoAAACUeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==" data-next-head=""/><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0" data-next-head=""/><meta name="google-site-verification" content="ujvif5QMvQ8ZxoCx6f4UPfvbXkQSIc9dLrESPAzyTV8" data-next-head=""/><meta name="description" content="Next Level Motors INC is the One Stop Used Car Dealership for all Makes and Models of both New and Used Cars for Sale. We Offer Car Loans on Low interest Rates and Assure You of Quick and Easy Car Loan Approvals." data-next-head=""/><meta name="keywords" content="used cars Burlington, car dealerships Burlington, ford dealership Burlington, used car dealerships Burlington, cars for sale in Burlington, used cars Burlington ON, used car dealers Burlington ON, second hand cars Burlington, cheap cars for sale in Burlington, cars for sale in Burlington ON, used pickup trucks for sale in Burlington, cars in Burlington, auto traders Burlington ON, autotrader ON Burlington, Burlington mercedes benz dealer, mercedes dealer Burlington, used trucks Burlington, car for sale by owner Burlington ON, honda dealership Burlington" data-next-head=""/><meta property="og:image" content="https://image123.azureedge.net/nextlevelmotorsinc/29448566752193694-LOGO.png" data-next-head=""/><title data-next-head="">Burlington Used Car Dealer | New and Used Car For Sale | Next Level Motors INC</title><link rel="icon" sizes="50x24" href="https://image123.azureedge.net/nextlevelmotorsinc/11458440210981347-LOGO.png" data-next-head=""/><script type="application/ld+json" data-next-head="">{"@context":"https://schema.org","@type":"AutoDealer","name":"Next Level Motors INC","image":"https://image123.azureedge.net/nextlevelmotorsinc/11458440210981347-LOGO.png","@id":"https://www.nextlevelmotors.ca/","url":"https://www.nextlevelmotors.ca/","telephone":["+1-4375578987"],"address":{"@type":"PostalAddress","streetAddress":"1364 Plains Rd E","addressLocality":"Burlington","addressRegion":"ON","postalCode":"L7R 3P8","addressCountry":"CA"},"openingHoursSpecification":[]}</script><link rel="preload" href="/_next/static/media/0f3a385557f1712f-s.p.woff2" as="font" type="font/woff2" crossorigin="anonymous" data-next-font="size-adjust"/><link rel="preload" href="/_next/static/media/47cbc4e2adbc5db9-s.p.woff2" as="font" type="font/woff2" crossorigin="anonymous" data-next-font="size-adjust"/><link rel="preload" href="/_next/static/media/1dcb4bb6f2068eb9-s.p.woff2" as="font" type="font/woff2" crossorigin="anonymous" data-next-font="size-adjust"/><link rel="preload" href="/_next/static/media/5ed273b77d2a1951-s.p.woff2" as="font" type="font/woff2" crossorigin="anonymous" data-next-font="size-adjust"/><link rel="preload" href="/_next/static/media/d82e28177b31af90-s.p.woff2" as="font" type="font/woff2" crossorigin="anonymous" data-next-font="size-adjust"/><link rel="preload" href="/_next/static/media/5d258b355fefebcb-s.p.woff2" as="font" type="font/woff2" crossorigin="anonymous" data-next-font="size-adjust"/><link rel="preload" href="/_next/static/css/64afdcb75192a80d.css" as="style"/><link rel="stylesheet" href="/_next/static/css/64afdcb75192a80d.css" data-n-g=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-42372ed130431b0a.js"></script><script src="/_next/static/chunks/webpack-e67b0ff03d96edf5.js" defer=""></script><script src="/_next/static/chunks/framework-b9fd9bcc3ecde907.js" defer=""></script><script src="/_next/static/chunks/main-289372f5a0719634.js" defer=""></script><script src="/_next/static/chunks/pages/_app-1a6b7ae6f422a70
    Found 2026-01-12 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · nextlevelmotors.ca

    2026-01-12 06:20 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 12 Jan 2026 06:20:34 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://nextlevelmotors.ca/
X-Cache: Redirect from cloudfront
Via: 1.1 c20b1585cc14f7313af71d342a8c81a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: rLFxHCi_Hkl9HmObjC1eG2F3RehPYbAbVQYAqqRcwwDx7vaM4v_KRg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-12 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · megson.net

    2026-01-12 03:55 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 12 Jan 2026 03:55:40 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://megson.net/
X-Cache: Redirect from cloudfront
Via: 1.1 b5db5add1c6cafa45f2f62d8ca89887e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: mH5vX-fXvN2ExLkQZX8y8p9vrP8Mtk7nH2f7UgawVyAqMbGFY0nKmg==
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-12 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · megson.net

    2026-01-12 03:55 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Mon, 12 Jan 2026 03:55:40 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: WOuL4EKWN9R45I9DEGDhtizprtT2-2V22pBqkdbSZi5RV5He43Djew==
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: WOuL4EKWN9R45I9DEGDhtizprtT2-2V22pBqkdbSZi5RV5He43Djew==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-12 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · mangoopaybox.com

    2026-01-12 03:50 

    HTTP/1.1 504 Gateway Timeout
Content-Type: text/html
Content-Length: 941
Connection: close
date: Mon, 12 Jan 2026 03:50:38 GMT
X-Cache: Error from cloudfront
Via: 1.1 b608ed0f3426ba08cff51718fbecc028.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: OrLJzRww5amyZBdirdsMb_SVyU6k3Tz8-wRUHWlSLlhpHF7PImQAHw==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>504 Gateway Timeout ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront) HTTP3 Server
Request ID: ElW4hPw7PKrRBMjwxtHslxbi2ZxCV34II1xOyFPATQ3SGq1MAkqLSA&#x3D;&#x3D;
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-12 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · mangoopayapi.com

    2026-01-12 03:50 

    HTTP/1.1 504 Gateway Timeout
Content-Type: text/html
Content-Length: 941
Connection: close
date: Mon, 12 Jan 2026 03:50:37 GMT
X-Cache: Error from cloudfront
Via: 1.1 b608ed0f3426ba08cff51718fbecc028.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 065-wg3NJGwdLANry8pv2ftdOGpB1UHpKrn1iRqMTBQgYFaCjuiklw==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>504 Gateway Timeout ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront) HTTP3 Server
Request ID: ra0BCZsbVyriJVyg5JtQDhh5hfZZbk2OF_HDamq5eZePq7UshvIXpA&#x3D;&#x3D;
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-12 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · mangoopayapi.com

    2026-01-12 03:50 

    HTTP/1.1 504 Gateway Timeout
Content-Type: text/html
Content-Length: 941
Connection: close
date: Mon, 12 Jan 2026 03:50:37 GMT
X-Cache: Error from cloudfront
Via: 1.1 476fd70bdb0e3f01a7cdbc322ceae0d8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: gpiNynWZKay1JAD7fYueCDK81uY1Re2CjzK7mA1dMfm0vRUeU5bR-g==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>504 Gateway Timeout ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront) HTTP3 Server
Request ID: 95rSlZeI0aoQy6_URdSK4GS2I5Hnd_KebLceUz3F51LKCZ0OfZ1RuA&#x3D;&#x3D;
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-12 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · mangoopaybox.com

    2026-01-12 03:50 

    HTTP/1.1 504 Gateway Timeout
Content-Type: text/html
Content-Length: 941
Connection: close
date: Mon, 12 Jan 2026 03:50:37 GMT
X-Cache: Error from cloudfront
Via: 1.1 3fe1b65a21db2155ab695e76b3fc80ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: z2eAs4fcOpvThxrMBbmPlFa2-69MQQqiqWxHOudYiHEp9iph46HUMQ==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>504 Gateway Timeout ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront) HTTP3 Server
Request ID: C8z2YPRJMK-gyh_MhMqQZWPrrwhMVwf3LW4K-0gMEekQLt6yt7ochQ&#x3D;&#x3D;
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-12 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · yonogamesapi.com

    2026-01-12 03:50 

    HTTP/1.1 504 Gateway Timeout
Content-Type: text/html
Content-Length: 941
Connection: close
date: Mon, 12 Jan 2026 03:50:36 GMT
X-Cache: Error from cloudfront
Via: 1.1 def78bd9f6b4ff6109111fdb39be66f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: DihVrRM4SofxXxIk38PE7SwW_IpMm_wcIi1VzGFE969iRtTKXG2kew==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>504 Gateway Timeout ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront) HTTP3 Server
Request ID: bPnC6UNIGAT6T6ml0eWTxWbVUvjzJJt4eO9-W59GjIvKUwZeiZL1lQ&#x3D;&#x3D;
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-12 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · yonogamesapi.com

    2026-01-12 03:50 

    HTTP/1.1 504 Gateway Timeout
Content-Type: text/html
Content-Length: 941
Connection: close
date: Mon, 12 Jan 2026 03:50:37 GMT
X-Cache: Error from cloudfront
Via: 1.1 95f719856b35c3a7e9bc14f3202145a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: At36oJ9kOQZHyOURaxcGCBhUiWj_DfPTw4oMzSAz4SdygaeY_u657g==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>504 Gateway Timeout ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront) HTTP3 Server
Request ID: QimwshbwObuQ9XwLK3eAKE80QUITu1nI_aRzPds3i03c7TLEmmif8Q&#x3D;&#x3D;
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-12 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · mangoopay.com

    2026-01-12 03:50 

    HTTP/1.1 504 Gateway Timeout
Content-Type: text/html
Content-Length: 941
Connection: close
date: Mon, 12 Jan 2026 03:50:37 GMT
X-Cache: Error from cloudfront
Via: 1.1 01bfa2cb468985bd24126d7b3dbae26a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: u-Q_bAtWSNahbfU4g3HmgN_6vUgY375Vh3iaw8sNowpktg_IkxEUHw==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>504 Gateway Timeout ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront) HTTP3 Server
Request ID: rDRYJRcM8QpuLHG406zceaDFuMwPjLnuzLaC8wMSwJ4FlnIq-bbtmw&#x3D;&#x3D;
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-12 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · mangoopay.com

    2026-01-12 03:50 

    HTTP/1.1 504 Gateway Timeout
Content-Type: text/html
Content-Length: 941
Connection: close
date: Mon, 12 Jan 2026 03:50:36 GMT
X-Cache: Error from cloudfront
Via: 1.1 6e6c4d5f1ea04df775c351cd792cccec.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 2tORoMYCabDtYdn7D1a-uBs-NnRmaFAO-2FOIwjccGsvGJKwHNCapQ==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>504 Gateway Timeout ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront) HTTP3 Server
Request ID: kafV7BDgCOZKmarV9EZEKvETl_Mgd-B1es2jIJOiX0OK--9QuQKegg&#x3D;&#x3D;
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-12 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · moxel.co

    2026-01-11 09:11 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 18099
Connection: close
Date: Sun, 11 Jan 2026 09:11:52 GMT
ETag: "8wbygdz1z9dxc"
x-nextjs-cache: HIT
x-powered-by: Next.js
Cache-Control: s-maxage=31536000, stale-while-revalidate
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: -7pwT5V6WgetMAaG5jL65SWQJjHdhDAL95YYJVWzUkTN0ZwCaGgPpQ==
Age: 3

Page title: Moxel - Interactive Web Agency

<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/_next/static/media/0484562807a97172-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/b957ea75a84b6ea7-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/e807dee2426166ad-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/eafabf029ad39a43-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" as="image" href="/images/logo.svg"/><link rel="preload" as="image" href="/images/footer_logo.svg"/><link rel="preload" as="image" href="/images/icons/service_icon_1.svg"/><link rel="preload" as="image" href="/images/icons/service_icon_2.svg"/><link rel="preload" as="image" href="/images/icons/service_icon_3.svg"/><link rel="stylesheet" href="/_next/static/css/bef403e4b51110e5.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/edd788a438895035.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/151d4885868e1312.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/31f240360121b849.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/88a32e634cc85936.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-d26f501f76d17cb0.js"/><script src="/_next/static/chunks/fd9d1056-e8d620389350fe1d.js" async=""></script><script src="/_next/static/chunks/23-124ca7b5997969b7.js" async=""></script><script src="/_next/static/chunks/main-app-f04cf96204a735bf.js" async=""></script><script src="/_next/static/chunks/138-4932a27445bcb28d.js" async=""></script><script src="/_next/static/chunks/359-a7c17e3b666adb2d.js" async=""></script><script src="/_next/static/chunks/463-1fbe589d283cbb86.js" async=""></script><script src="/_next/static/chunks/153-d1bdcc40d64dd426.js" async=""></script><script src="/_next/static/chunks/915-96594b9fb4d3ca1e.js" async=""></script><script src="/_next/static/chunks/app/page-85cd8fcde0a74082.js" async=""></script><script src="/_next/static/chunks/335-50047bcd311b569c.js" async=""></script><script src="/_next/static/chunks/app/layout-8c889647a81e8a3c.js" async=""></script><script src="/_next/static/chunks/app/not-found-11418278f3d8763d.js" async=""></script><meta name="author" content="Laralink"/><link rel="icon" href="/images/favicon.ico" sizes="any"/><title>Moxel - Interactive Web Agency</title><meta name="next-size-adjust"/><script src="/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js" noModule=""></script></head><body class="__variable_67e863 __variable_44151c"><header class="cs-site_header cs-style1 text-uppercase  cs-sticky_header "><div class="cs-main_header"><div class="container"><div class="cs-main_header_in"><div class="cs-main_header_left"><a class="cs-site_branding" href="/"><img src="/images/logo.svg" alt="Logo"/></a></div><div class="cs-main_header_center"><div class="cs-nav cs-primary_font cs-medium"><ul class="cs-nav_list" style="display:none"><li><a href="/">Home</a></li><li><a href="/about">About</a></li><li class="menu-item-has-children"><a href="/service">Services</a><span class="cs-munu_dropdown_toggle"></span><ul><li><a href="/service">Product Configurator</a></li><li><a href="/service">Interactive Web Applications</a></li><li><a href="/service">Digital Twins</a></li><li><a href="/service">Web Development</a></li></ul></li><li class="menu-item-has-children"><a href="/projects">Projects</a><span class="cs-munu_dropdown_toggle"></span><ul><li><a href="/projects">Guitar Configurator</a></li><li><a href="/projects">Jersey Configurator</a></li></ul></li><li><a href="/contact">Contact Us</a></li></ul><span class="cs-munu_toggle"><span></span></span></div></div><div class="cs-main_header_right"><div class="cs-toolbox"><span class="cs-icon_btn"><span class="cs-icon_btn_in"><span></span><span></span><span></span><span></span></span></span></
    Found 2026-01-11 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · moxel.co

    2026-01-11 09:11 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 11 Jan 2026 09:11:53 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://moxel.co/
X-Cache: Redirect from cloudfront
Via: 1.1 adbe45cb4997e6da65586fdd3a19215e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: Sf5j3h8hOxa4nlHcdQAhH8Kze0ni2ZpgKYtPNN0So3DaY_DF04lnKA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-11 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · 23oy0507fm.xyz

    2026-01-10 17:51 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 17:51:20 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://23oy0507fm.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 3555148cb98f4a6b38702fc0b65f2ace.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: w8t5IlnxVipvpxG_VJeRD8swr3viCRvUd0kbm_OxkfjS8410L_eXrg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · 23oy0507fm.xyz

    2026-01-10 17:51 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9bb15b297fc5dc98-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VNLtKQ9i%2BdUAb3dddAG1N%2BKDwiy0IHPOAcQ5djJ%2BwQCDwl8EovqeZiCCFDdQ2IyxAuw6Dq9zml8SQRQyjC9rtZvonOPTw%2BxU38qS4UMjC6JJ"}]}
Accept-Ranges: bytes
Date: Sat, 10 Jan 2026 06:01:18 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 7aa3bfb1af156515af943236e80f9b56.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: xYN4xNepdlZlKekcOuu1qEvgRqUquqA4whVwX69z1V3LXH2OLGwlGA==
Age: 42601


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · postgres.guide

    2026-01-10 17:15 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 17:15:26 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://postgres.guide/
X-Cache: Redirect from cloudfront
Via: 1.1 6636538a05247c80bd9b1634a2f35fb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: HJ47xi98ar87-rP8i0uaZqOAz20XbK9teT2jIqT9VYDmO5QwpZvkpQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · postgres.guide

    2026-01-10 17:15 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 13357
Connection: close
Date: Wed, 29 Oct 2025 07:25:53 GMT
Cache-Control: public, max-age=0, s-maxage=31536000
Server: AmazonS3
Accept-Ranges: bytes
ETag: "fdc48b6e87939443d7d45f35045c13a6"
Last-Modified: Mon, 24 Mar 2025 11:23:15 GMT
X-Cache: Hit from cloudfront
Via: 1.1 0aa7f1d7fec8d7f1a865e80c7680d324.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: axomdQU0TCsUtfcWa8388lzn6R6OlCQhMlD1e-Y6hTONy0BHy2XYEg==
Age: 6342573

Page title: Postgres Guide - The Complete PostgreSQL Resource

<!doctype html>
<html lang="en" dir="ltr" class="plugin-pages plugin-id-default" data-has-hydrated="false">
<head>
<meta charset="UTF-8">
<meta name="generator" content="Docusaurus v3.7.0">
<title data-rh="true">Postgres Guide - The Complete PostgreSQL Resource</title><meta data-rh="true" property="og:title" content="Postgres Guide - The Complete PostgreSQL Resource"><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" property="og:url" content="https://postgres.guide/"><meta data-rh="true" property="og:locale" content="en"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docusaurus_tag" content="default"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docsearch:docusaurus_tag" content="default"><meta data-rh="true" name="twitter:card" content="summary"><meta data-rh="true" name="twitter:image" content="https://postgres.guide/img/elephant.png"><meta data-rh="true" name="og:image" content="https://postgres.guide/img/elephant.png"><meta data-rh="true" name="twitter:title" content="Postgres Guide - The Complete PostgreSQL Resource"><meta data-rh="true" name="twitter:description" content="A complete PostgreSQL resource with tutorials, best practices, performance tips, and real-world examples for developers of all levels"><meta data-rh="true" name="og:type" content="website"><meta data-rh="true" name="robots" content="index, follow"><meta data-rh="true" name="description" content="A complete PostgreSQL resource with tutorials, best practices, performance tips, and real-world examples for developers of all levels"><link data-rh="true" rel="icon" href="/img/elephant.png"><link data-rh="true" rel="canonical" href="https://postgres.guide/"><link data-rh="true" rel="alternate" href="https://postgres.guide/" hreflang="en"><link data-rh="true" rel="alternate" href="https://postgres.guide/" hreflang="x-default"><script data-rh="true">function insertBanner(){var n=document.createElement("div");n.id="__docusaurus-base-url-issue-banner-container";n.innerHTML='\n<div id="__docusaurus-base-url-issue-banner" style="border: thick solid red; background-color: rgb(255, 230, 179); margin: 20px; padding: 20px; font-size: 20px;">\n   <p style="font-weight: bold; font-size: 30px;">Your Docusaurus site did not load properly.</p>\n   <p>A very common reason is a wrong site <a href="https://docusaurus.io/docs/docusaurus.config.js/#baseUrl" style="font-weight: bold;">baseUrl configuration</a>.</p>\n   <p>Current configured baseUrl = <span style="font-weight: bold; color: red;">/</span>  (default value)</p>\n   <p>We suggest trying baseUrl = <span id="__docusaurus-base-url-issue-banner-suggestion-container" style="font-weight: bold; color: green;"></span></p>\n</div>\n',document.body.prepend(n);var e=document.getElementById("__docusaurus-base-url-issue-banner-suggestion-container"),s=window.location.pathname,o="/"===s.substr(-1)?s:s+"/";e.innerHTML=o}document.addEventListener("DOMContentLoaded",(function(){void 0===window.docusaurus&&insertBanner()}))</script><link rel="preconnect" href="https://www.google-analytics.com">
<link rel="preconnect" href="https://www.googletagmanager.com">
<script async src="https://www.googletagmanager.com/gtag/js?id=G-W0VHMXHRTQ"></script>
<script>function gtag(){dataLayer.push(arguments)}window.dataLayer=window.dataLayer||[],gtag("js",new Date),gtag("config","G-W0VHMXHRTQ",{})</script>



<link rel="preconnect" href="https://www.googletagmanager.com">
<script type="application/ld+json">{"@context":"https://schema.org/","@type":"WebSite","name":"Postgres Guide","url":"https://postgres.guide/","description":"Your complete resource for PostgreSQL"}</script><link rel="stylesheet" href="/assets/css/styles.98975a6b.css">
<script src="/assets/js/runtime~main.f9452d59.js" defer="defer"></script>
<script src="/assets/js/main.fb3f49e9.js" defer="defer"></script>
</head>
<body class="navigation-with-keyboard">
<script>!function(){function t(t){document.documentElement.setAttribute("data-theme",t)}var e=func
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · v8ldo7gx67.xyz

    2026-01-10 15:34 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 15:34:17 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://v8ldo7gx67.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 08b582540a4dee761b8329b525bb41f2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: CC3ET5UFNs47CXqokB-g4sgP911rtz_CtTdFWWsfLHAh6CXXo265Mw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · v8ldo7gx67.xyz

    2026-01-10 15:34 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9bb15b297fc5dc98-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VNLtKQ9i%2BdUAb3dddAG1N%2BKDwiy0IHPOAcQ5djJ%2BwQCDwl8EovqeZiCCFDdQ2IyxAuw6Dq9zml8SQRQyjC9rtZvonOPTw%2BxU38qS4UMjC6JJ"}]}
Accept-Ranges: bytes
Date: Sat, 10 Jan 2026 06:01:18 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Mb8dopG0JiBWK4LMh-dQE276jeklOOxNP2tysIFzVdkJ8zZBQ2-55g==
Age: 34379


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ibc22sg.co

    2026-01-10 15:24 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 15:24:09 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://ibc22sg.co/
X-Cache: Redirect from cloudfront
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: _MpKa11opazyf0xFois1I9x-y0NDqo41be60DQojoUTsYfcMO4mXUw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ibc22sg.co

    2026-01-10 15:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 5251
Connection: close
Server: nginx/1.22.1
Date: Sat, 10 Jan 2026 15:24:07 GMT
Last-Modified: Sat, 10 Jan 2026 12:26:33 GMT
Accept-Ranges: bytes
ETag: "69624579-1483"
X-Cache: Hit from cloudfront
Via: 1.1 def78bd9f6b4ff6109111fdb39be66f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: AKWIyJHuqeG3GKTBmbhfT9a-XBSfGHfU5dleEl6gfkX-zypMeiZISQ==
Age: 2

Page title: IBC22 | Top Online Casino in Malaysia & Singapore

<!doctype html>
<html lang="en">
<head>
  <script src="/seo-script.js" code="qp2a" device="desktop" isProd="true"></script>
  <meta charset="utf-8">
  <title>IBC22 | Top Online Casino in Malaysia & Singapore</title>
  <base href="/">
  <meta name="robots">
  <meta name="viewport" content="width=device-width, initial-scale=1" />
  <link rel="icon" type="image/x-icon" id="favicon">

  <link rel="amphtml" href="https://pub-abc8dde2dc8b427d9264636e755bfc4d.r2.dev/index.html">
  <link rel="canonical" href="https://ibc22.com/">

  <!-- 1. Google Tag Manager -->
  <!-- <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
    new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
    j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
    'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
    })(window,document,'script','dataLayer','GTM-TGM54JL');
  </script> -->

  <!-- <link rel="preconnect" href="https://www.googletagmanager.com" crossorigin> -->
  <link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet">
  <link href="https://fonts.googleapis.com/css?family=Montserrat:300,400,400i,700|Poppins:300,400,500,600,700|PT+Serif:400,400i&display=swap" rel="stylesheet" type="text/css" />
  <link rel="stylesheet" href="/assets/css/bootstrap.css" type="text/css" />
  <link rel="stylesheet" href="/assets/css/swiper.css" type="text/css" />
  <link rel="stylesheet" href="/assets/css/font-icons.css" type="text/css" />
  <link rel="stylesheet" href="/assets/css/animate.css" type="text/css" />
  <!-- <link rel="stylesheet" href="/assets/css/magnific-popup.css" type="text/css" />
  <link rel="stylesheet" href="/assets/css/dark.css" type="text/css" />
  <link rel="stylesheet" href="/assets/css/custom.css" type="text/css" />
  <link rel="stylesheet" href="/assets/css/custom2.css" type="text/css" />
  <link rel="stylesheet" href="/assets/css/colors.css" type="text/css" />
  <link rel="stylesheet" href="/assets/css/responsive.css" type="text/css" /> -->
  <link href="https://fonts.googleapis.com/css?family=Montserrat:100,200,300,400,500,600,700" rel="stylesheet">

  <!-- 4. SEO -->
  <meta name="title" content="IBC22 | Top Online Casino For Malaysia & Singapore Players">
  <meta name="description" content="IBC22 aims to deliver an unparalleled gaming adventure to all players in Malaysia & Singapore. Join now & explore high winning betting games!">
  <meta name="keywords" content="918kiss, Online Casino Malaysia, IBC bet, SBO bet, CMD bet, citibet, maxbet, malaysia casino, casino games, online slots, sportsbook">
  <link rel="preload" as="fetch" href="./assets/i18n/seo-desc.json" crossorigin="anonymous">

  <!-- OG -->
  <meta property="og:title" content="IBC22 Malaysia & Singapore | Top Online Casino | Best Mobile Casino" />
  <meta property="og:type" content="website" />
  <meta property="og:url" content="https://ibc22mys.com" />
  <meta property=”og:description” content="IBC22 is the top leading online casino Malaysia & Singapore. Play live casino, slot casino games, sports, esports, fishing under a roof. Win real money!"/>
  <meta property="og:image" content="https://4d6089f6.quickcdn.org/favicon/lgSeHalEfvk2j6d0JXaZ8tW7pNNlsBdDKsFtYQ1a.jpg" />
  <meta property="og:image:width" content="500"/>
  <meta property="og:image:height" content="500"/>
  
  <!-- 2. Global site tag (gtag.js) - Google Analytics -->
  <!-- <script async src="https://www.googletagmanager.com/gtag/js?id=G-FDQ3R36BQV"></script> -->
  <script>
    window.dataLayer = window.dataLayer || [];
    function gtag(){dataLayer.push(arguments);}
    gtag('js', new Date());

    //gtag('config', 'G-FDQ3R36BQV');
  </script>
<link rel="stylesheet" href="styles.bdb666a4b8f6208f48f4.css"></head>
<body class="stretched dark max-body">
  <app-root></app-root>
  <!-- 3. Google Tag Manager (noscript) -->
  <!-- <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-TGM54JL" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript> -->
  <sc
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · zewgly9ac2.xyz

    2026-01-10 13:59 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9bb15b297fc5dc98-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VNLtKQ9i%2BdUAb3dddAG1N%2BKDwiy0IHPOAcQ5djJ%2BwQCDwl8EovqeZiCCFDdQ2IyxAuw6Dq9zml8SQRQyjC9rtZvonOPTw%2BxU38qS4UMjC6JJ"}]}
Accept-Ranges: bytes
Date: Sat, 10 Jan 2026 06:01:18 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 2e1545751358065284c508c87f8e3d4c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: v9t1z40mD2Kkk72MNYNlZyZz9BlOsXWpjd2WeJvJYnKkQAbJvsA-3g==
Age: 28715


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · zewgly9ac2.xyz

    2026-01-10 13:59 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 13:59:53 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://zewgly9ac2.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 476fd70bdb0e3f01a7cdbc322ceae0d8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: cFfZ-h9BZvvlx1pnWCfYp1Pt9wqeV2znVev57aB_85bu6SPSUWpuAQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · svhvqiy4xn.xyz

    2026-01-10 13:20 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9bb15b297fc5dc98-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VNLtKQ9i%2BdUAb3dddAG1N%2BKDwiy0IHPOAcQ5djJ%2BwQCDwl8EovqeZiCCFDdQ2IyxAuw6Dq9zml8SQRQyjC9rtZvonOPTw%2BxU38qS4UMjC6JJ"}]}
Accept-Ranges: bytes
Date: Sat, 10 Jan 2026 06:01:18 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 733dda36f703f66d7e387b2e9c7820ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: WQdqxfS-9LQ3t9w0jgc8odOHNnrnBv1oZacI6IObQYXMtDoJzEJIjw==
Age: 26380


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · svhvqiy4xn.xyz

    2026-01-10 13:20 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 13:20:57 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://svhvqiy4xn.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 476fd70bdb0e3f01a7cdbc322ceae0d8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: LIR8UzmQmpC9T-Nmx0ebVUMLTqwtrhfoZmHyyry05bvExAPDkgisHQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · uz1zcnxrld.xyz

    2026-01-10 13:12 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9bb15b297fc5dc98-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VNLtKQ9i%2BdUAb3dddAG1N%2BKDwiy0IHPOAcQ5djJ%2BwQCDwl8EovqeZiCCFDdQ2IyxAuw6Dq9zml8SQRQyjC9rtZvonOPTw%2BxU38qS4UMjC6JJ"}]}
Accept-Ranges: bytes
Date: Sat, 10 Jan 2026 06:01:18 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6636538a05247c80bd9b1634a2f35fb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: c8tCe0ZO-8Eli-XFA4ihNPiUe8x14Gflh5gltTgs4r-2h1qKptePyw==
Age: 25897


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · uz1zcnxrld.xyz

    2026-01-10 13:12 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 13:12:55 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://uz1zcnxrld.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 bab0321b4bf0fd055bdfb0282cee7346.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: U9XQgfie7eS3HCy4rcvDDboL9JX7SFDj-bg9ERoddQWHoT_WmMH6EQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · 14tviepnk0.xyz

    2026-01-10 12:04 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 12:04:58 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://14tviepnk0.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 909271198a8193608c0cc833172af082.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: FP7a1qQK047ZuYQFdkfYxXFl83Ezr_TpQOQ62gyl3k-5FAkZIR5LxA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · 14tviepnk0.xyz

    2026-01-10 12:04 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9bb15b297fc5dc98-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VNLtKQ9i%2BdUAb3dddAG1N%2BKDwiy0IHPOAcQ5djJ%2BwQCDwl8EovqeZiCCFDdQ2IyxAuw6Dq9zml8SQRQyjC9rtZvonOPTw%2BxU38qS4UMjC6JJ"}]}
Accept-Ranges: bytes
Date: Sat, 10 Jan 2026 06:01:18 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 25ecafb130dcf586014e40cd7d2ba2fc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: SzUDaoN1xRsQtLix3ZkipX_HQesLVVEECTD9LzBJ53p_-epWFSF58w==
Age: 21820


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · dfo.global

    2026-01-10 11:03 

    HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Fri, 09 Jan 2026 16:08:43 GMT
Location: https://www.dfogpc.com/
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 3fe1b65a21db2155ab695e76b3fc80ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: zup0lYNfnrBLrawsdhUtVl6dvgPp4vQ7mSxH2SlLoD53lEjO_y7ZmQ==
Age: 68061
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · dfo.global

    2026-01-10 11:03 

    HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Fri, 09 Jan 2026 16:08:43 GMT
Location: https://www.dfogpc.com/
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 46f339c21ed78b531c3c65cde3e4ddfe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: flxQPBvc2H1Snagnj_HMl89HZGkUqTkqtQnKIkdX_st7Y4z-eCUkWQ==
Age: 68060
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · hadrianhealthcentre.co.uk

    2026-01-10 10:01 

    HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Amz-Cf-Pop: FRA60-P8
Date: Sat, 10 Jan 2026 10:01:14 GMT
Location: https://www.hadrianhealthcentre.co.uk/
X-Batcache: HIT
Server: nginx
X-Redirect-By: WordPress
Last-Modified: Sat, 10 Jan 2026 10:01:05 GMT
Cache-Control: max-age=291, must-revalidate
Vary: Cookie,Origin
Via: 1.1 db38c5279288cd1c6aea4fa2c0409120.cloudfront.net (CloudFront), 1.1 476fd70bdb0e3f01a7cdbc322ceae0d8.cloudfront.net (CloudFront)
X-Cache: Miss from cloudfront
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 2Z7rsW579Qdee3OsTjLDuCPPjLg5bWxMH9bUgocypAs4UduJD-N39A==
Age: 2
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · hadrianhealthcentre.co.uk

    2026-01-10 10:01 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 10:01:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://hadrianhealthcentre.co.uk/
X-Cache: Redirect from cloudfront
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: K8-S4HEuUrpwcNRW8oGczJHqilyk0hA28UT3-fGW4qMZDyV1Xprx6A==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · 1g5w3bjwq1.xyz

    2026-01-10 08:37 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 08:37:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://1g5w3bjwq1.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 7aa3bfb1af156515af943236e80f9b56.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: RYZ9PYHS-7pgfsZqTR-MNioUaQMpNV8I9rQj1iBRg9VvAYdFY5UsMg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · 1g5w3bjwq1.xyz

    2026-01-10 08:37 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9bb15b297fc5dc98-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VNLtKQ9i%2BdUAb3dddAG1N%2BKDwiy0IHPOAcQ5djJ%2BwQCDwl8EovqeZiCCFDdQ2IyxAuw6Dq9zml8SQRQyjC9rtZvonOPTw%2BxU38qS4UMjC6JJ"}]}
Accept-Ranges: bytes
Date: Sat, 10 Jan 2026 06:01:18 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 5a7aeff2d396b9667469b83aa6741fca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: j63j2SUT-qFdyYmFNdoINtT86awyV1Vst_GwVvd0zoUUNh3zluKkBw==
Age: 9380


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · 4i6vz7dmkh.xyz

    2026-01-10 08:29 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 08:29:56 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://4i6vz7dmkh.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 733dda36f703f66d7e387b2e9c7820ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: yxCgdh2w0O1huqahZtEAbP2bVuKDEA72P8cw8QICxwaMAzvqCtVknw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · 4i6vz7dmkh.xyz

    2026-01-10 08:29 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9bb15b297fc5dc98-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VNLtKQ9i%2BdUAb3dddAG1N%2BKDwiy0IHPOAcQ5djJ%2BwQCDwl8EovqeZiCCFDdQ2IyxAuw6Dq9zml8SQRQyjC9rtZvonOPTw%2BxU38qS4UMjC6JJ"}]}
Accept-Ranges: bytes
Date: Sat, 10 Jan 2026 06:01:18 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: EGYsugVZ1Le0qLcXPms12m1PWJvb2QvJKuDheZmlpgRHaxfvUNXUHw==
Age: 8918


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · 7xv44ll6a2.xyz

    2026-01-10 07:12 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
cf-cache-status: DYNAMIC
CF-RAY: 9bb15b297fc5dc98-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VNLtKQ9i%2BdUAb3dddAG1N%2BKDwiy0IHPOAcQ5djJ%2BwQCDwl8EovqeZiCCFDdQ2IyxAuw6Dq9zml8SQRQyjC9rtZvonOPTw%2BxU38qS4UMjC6JJ"}]}
Accept-Ranges: bytes
Date: Sat, 10 Jan 2026 06:01:18 GMT
ETag: "68823d89-12ee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f21aebe726db54f921ea6610dfe923ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: O3h2bedN5WxWKuF2djKFNsL82yb2A7Y85HDfm1WzhGqRQ6inmlTaEQ==
Age: 4279


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · 7xv44ll6a2.xyz

    2026-01-10 07:12 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 07:12:37 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://7xv44ll6a2.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 08b582540a4dee761b8329b525bb41f2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: NB77dId1tON_KYgYYLdrOwE0L5vejoVkbidsmZ2G12OeOrGnSuwV4g==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · catchot-online.com

    2026-01-10 04:11 

    HTTP/1.1 404 Not Found
Server: CloudFront
Date: Sat, 10 Jan 2026 04:11:52 GMT
Content-Length: 0
Connection: close
x-block-rule: not-jp
X-Cache: Error from cloudfront
Via: 1.1 f21aebe726db54f921ea6610dfe923ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: WOLVPuHDWBwM9zbcxMTOy5NP3GZLXyCXs-erIz38rkwO5eiIRmhm-g==
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · catchot-online.com

    2026-01-10 04:11 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 04:11:51 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://catchot-online.com/
X-Cache: Redirect from cloudfront
Via: 1.1 6636538a05247c80bd9b1634a2f35fb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Yjd8nkBP2tJbxO3KYOHfsarOYJe_D933JpYdOo0ZwG6XgKsgN2mSKA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · 3h4c22il4r.xyz

    2026-01-10 03:24 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 10 Jan 2026 03:24:07 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://3h4c22il4r.xyz/
X-Cache: Redirect from cloudfront
Via: 1.1 476fd70bdb0e3f01a7cdbc322ceae0d8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 1p3tTTzEzqY2kXRT2Mlz6yLA8sNQ9HdcyDr8umnMDF9XYnMWnCVXAg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · 3h4c22il4r.xyz

    2026-01-10 03:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Date: Fri, 09 Jan 2026 04:57:50 GMT
cf-cache-status: DYNAMIC
CF-RAY: 9bb15b297fc5dc98-FRA
Server: cloudflare
Last-Modified: Thu, 24 Jul 2025 14:04:57 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VNLtKQ9i%2BdUAb3dddAG1N%2BKDwiy0IHPOAcQ5djJ%2BwQCDwl8EovqeZiCCFDdQ2IyxAuw6Dq9zml8SQRQyjC9rtZvonOPTw%2BxU38qS4UMjC6JJ"}]}
Accept-Ranges: bytes
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6e6c4d5f1ea04df775c351cd792cccec.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: fvfS1RNmElThlINWddwIL8Z8mCJ-h2O5WNnmoL5iRu9dNO3b2fJbKw==
Age: 80777


<!DOCTYPE html><html lang="zh-CN"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,minimum-scale=1,user-scalable=no"><meta name="referrer" content="no-referrer"><meta name="theme-color" content="#ffffff"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="format-detection" content="telphone=no, email=no"><meta name="renderer" content="webkit"><meta name="HandheldFriendly" content="true"><meta name="MobileOptimized" content="320"><meta name="screen-orientation" content="portrait"><meta name="x5-orientation" content="portrait"><meta name="full-screen" content="yes"><meta name="x5-fullscreen" content="true"><meta name="browsermode" content="application"><meta name="x5-page-mode" content="app"><meta name="msapplication-tap-highlight" content="no"><link rel="icon" href="./favicon.ico"><title></title><script>window["\x64\x6f\x63\x75\x6d\x65\x6e\x74"]['\x74\x69\x74\x6c\x65'] = "\x50\u7ad9\u89c6\u9891"
        window.parent.postMessage({ type: "child" }, '*');
        var pathIndex = getCookie('pathIndex') || 0;
        var hadSetNext = false;

        function setCookie(name, value) {
          document.cookie = name + '=' + encodeURI(value);
        }
        function getCookie(name) {
          let arr, reg = new RegExp('(^| )' + name + '=([^;]*)(;|$)');
          if (arr = document.cookie.match(reg)) {
            return decodeURI(arr[2]);
          } else {
            return null;
          }
        }
        function loadError() {
          if (hadSetNext) return;
          if (pathIndex >= pathList.length - 1) {
            if (pathList[pathIndex] == './') {
              return;
            }
            pathIndex = 0;
          } else {
            pathIndex++;
          }
          hadSetNext = true;
          setCookie('pathIndex', pathIndex);
          window.location.reload();
        };</script><style type="text/css">html,
        body {
          font-family: "Microsoft YaHei";
          background-color: #000;
        }

        #appLoading {
          font-size: 18px;
          text-align: center;
          color: #fff;
          position: absolute;
          top: 30%;
          left: 50%;
          transform: translateX(-50%) translateY(-50%);
        }</style><link href="static/cdn/css/nprogress.css?v=4.6.0" rel="stylesheet"><link href="static/20250724220001/css/chunk-vendors.css" rel="stylesheet"><link href="static/20250724220001/css/styles.css" rel="stylesheet"><link href="static/20250724220001/css/app.css" rel="stylesheet"></head><body><div id="app"><div id="appLoading">&#x9875;&#x9762;&#x52A0;&#x8F7D;&#x4E2D;...</div></div><script src="static/cdn/js/crypto-js.min.js?v=4.6.0"></script><script src="static/cdn/js/axios.min.js?v=4.6.0"></script><script src="static/cdn/js/lodash.min.js?v=4.6.0"></script><script src="static/cdn/js/nprogress.js?v=4.6.0"></script><script src="static/cdn/js/hls.min.js?v=4.6.0"></script><script src="static/cdn/js/artplayer.js?v=4.6.0"></script><script src="static/cdn/js/DPlayer.min.js?v=4.6.0"></script><script src="static/cdn/js/jsjiami.js?v=4.6.0"></script><script>var osType = `h5`,
              googletagmanager = osType === "h5" ? 'G-VSYFB4DK6Y' : 'G-403XVWWB0G',
              immediately = true;
            window.onload = function () {
              setTimeout(() => {
                loadJS("https://www.googletagmanager.com/gtag/js?id=" + googletagmanager, true)
                window.dataLayer = window.dataLayer || [];
                function gtag() { dataLayer.push(arguments); }
                gtag('js', new Date());
                gtag('config', googletagmanager);
              }, 1000)
            }
            function loadJS(url, bol = false) {
              var script = document.createElement('script')
              script.setAttribute("src", url);
              if (bol) {
                script.setAttribute("async
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · academy.williamandwall.com

    2026-01-10 00:04 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Sat, 10 Jan 2026 00:05:01 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6Ijk3dFwvYjEra05nNnNHeTZqVGRUQlFRPT0iLCJ2YWx1ZSI6IjFpZWtNMnJhQ0h6Q1J3SUtyR2F1WjlmR1drektqWWlOVFBvazlLSEdqRFlZUkxyRHRSVFNFM3NcL1lQOXdzYUpLQ0ViaWx0cnQ2cWhjV1wvZDErelZxSDR0T0s3eHNqbXBmMmdVbmh3b1hoVkd0TE91ckJUdXdaVksrM3I1SjdNMysiLCJtYWMiOiJjNzc3MWJkYWIxN2EyZDc4MjA2YjczNTYzNWZlNjViZDgzNTBjOTU0M2ZjYjUwMmRmNDM1ZDI0ZWQ1NjIzNTc5In0%3D; expires=Sat, 10-Jan-2026 02:05:01 GMT; Max-Age=7200; path=/; secure
Set-Cookie: acadle_session=eyJpdiI6IlJZQzZ5M0dKT2ZkdjZxSjdJNzBGRnc9PSIsInZhbHVlIjoiWUpNKzk1bzlwNEg2TEVXQVN0K2lpUjd3a2xiY1R5OWxWempLaXpBbis3YVpEM3pcL1wvQ1RqQVwvRnR1bFgyZmxMTVlBZUpSOFZPUUE0MkRoc1BVZ0dJN1wvNW5zVzNDUDNjelViUEFrM2tlbVh3WlhuMzY4dzNPNEs5c1NrS09acWQ2IiwibWFjIjoiOGI5OGNjOGVkOWJjNTA5Zjk1MDUxM2E3NmIwMmMyZjI3N2Y1YzBmNmEwNmVkM2IxMjdhM2IyM2NhZTA5ZWRmZCJ9; expires=Sat, 10-Jan-2026 02:05:01 GMT; Max-Age=7200; path=/; secure; httponly
Server: Acadle
Vary: Accept-Encoding
Cache-Control: no-cache, private
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 59
X-Frame-Options: SAMEORIGIN
X-Cache: Miss from cloudfront
Via: 1.1 3fe1b65a21db2155ab695e76b3fc80ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 3g3Y45XMqzkek04FvC2BR4e0JG597Ez-VMQCPuW5AFtPnu_bCMT_lA==
    Found 2026-01-10 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · china1sp.com

    2026-01-09 21:31 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 09 Jan 2026 21:31:50 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://china1sp.com/
X-Cache: Redirect from cloudfront
Via: 1.1 0f2cc30066f82a3492113a7d3ebae254.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 3FNuOfnJLWdJdZN1RlE1jL8Pi6lUU209zRj0Tbgh1uhbRFhI97MaoA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-09 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · china1sp.com

    2026-01-09 21:31 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 15555
Connection: close
Date: Fri, 09 Jan 2026 10:53:46 GMT
Last-Modified: Wed, 03 Apr 2024 18:49:06 GMT
x-amz-version-id: hjeEI7IZ45LpIdqutbOkcju6y8kb_bCs
ETag: "03bb068c1b8b770ef911ebb9b7d488e9"
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: _fN4LFqUoyxEZMrH4zFCRJR1j_8GP41oSF31oOAw0Viq-WuC27R6ag==
Age: 38284

Page title: Home | China 1

<!doctype html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate">
    <meta http-equiv="Pragma" content="no-cache">
    <meta http-equiv="Expires" content="0">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=6.0, minimum-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <meta name="description" content="East Point, GA 30344 Chinese food for Pickup -  Order from China 1 in East Point, GA 30344, phone: 404-349-3373 ">
    <meta name="keywords" content="East Point, GA 30344 Chinese food for Pickup  Order Chinese food for Pickup,  Best Chinese food for Pickup">
    <link rel="shortcut icon" href="/assets/images/ico/favicon.ico">
    <link rel="apple-touch-icon-precomposed" sizes="144x144"
          href="/assets/images/ico/apple-touch-icon-144-precomposed.png">
    <link rel="apple-touch-icon-precomposed" sizes="114x114"
          href="/assets/images/ico/apple-touch-icon-114-precomposed.png">
    <link rel="apple-touch-icon-precomposed" sizes="72x72"
          href="/assets/images/ico/apple-touch-icon-72-precomposed.png">
    <link rel="apple-touch-icon-precomposed" href="/assets/images/ico/apple-touch-icon-57-precomposed.png">
    <title>Home | China 1</title>
    <link rel="canonical" href="https://china1sp.com">
    <link rel="stylesheet" href="/assets/css/main.css"/>
    <script>
        !function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.async=!0,p.src=s.api_host+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="capture identify alias people.set people.set_once set_config register register_once unregister opt_out_capturing has_opted_out_capturing opt_in_capturing reset isFeatureEnabled onFeatureFlags".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[]);
        posthog.init('phc_wRTKEH4zhknRP3t80Ttjj05BeWL43PdhQQGpg0mE6OV',{api_host:'https://app.posthog.com'})
    </script>
</head>
<body>
<section style="display: none;">
    <a href="#header" aria-label="skip to navigation">Skip to Navigation</a>
    <a href="#main" aria-label="skip to main content">Skip to Main Content</a>
</section>
<header id="header">
    <nav class="navbar" aria-label="Navigation">
        <ul id="navlinks" class="navbar__container"><li><a class="navbar--link" href="/#home">Home</a></li><li><a class="navbar--link" href="/order/">Order Online</a></li><li><a class="navbar--link" href="/#contact">Contact Us</a></li></ul>
    </nav>
</header>

<main id="main">
    <section id="home" class="hero__container">
        <div class="hero__sliders-container"><img id="hero-slider1" class="hero--image" loading="lazy" src="/assets/images/slider1.jpg" alt="Chinese Food"><img id="hero-slider2" class="hero--image" loading="lazy" src="/assets/images/slider2.jpg" alt="Chinese Food"><ol class="carousel-indicators"><li></li><li></li></ol></div>
        <div class="hero__overlay">
            <h1 id="name" class="title"><span class="welcome-title">Welcome To China 1</span></h1>
            <div class="stars mt-3" aria-hidden="true">★★★★★★★★★★★★★★★★★★★★</div>
            <h2 id="slogan" class="slogan mt-1 mb-3">Best food, Great value</h2>
            <a id="order_online_link" class="button button-primary" href="/order/">Order Online</a>
        </div>
    </section>
    <section id="specialties" class="mt-5">
        <h2 id="specialty_title" class="specialty--title text-center">Our Speciality</h2>
        <div class="stars text-center mb-4" aria-hi
    Found 2026-01-09 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · gofacultyofimpact.nl

    2026-01-09 15:52 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 09 Jan 2026 15:52:09 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://gofacultyofimpact.nl/
X-Cache: Redirect from cloudfront
Via: 1.1 bab0321b4bf0fd055bdfb0282cee7346.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: t3IYgjrsKUEOsj2EwBQ2GO8EIOWXToNzM2xKuF-ui-rjC7SzST_ERQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-09 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · gofacultyofimpact.nl

    2026-01-09 15:52 

    HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: close
Date: Fri, 09 Jan 2026 14:17:13 GMT
Location: https://facultyofimpact.nl/
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 733dda36f703f66d7e387b2e9c7820ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: aq9JtxzVqTSl4_v5bQnEdzS9puU6w2dWxDDKdGJ3xuNMwikj3w1-lg==
Age: 5697
    Found 2026-01-09 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · api-container-price-finder.test.webservice-test.de

    2026-01-09 13:17 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 09 Jan 2026 13:17:12 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://api-container-price-finder.test.webservice-test.de/
X-Cache: Redirect from cloudfront
Via: 1.1 5a7aeff2d396b9667469b83aa6741fca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: a8sgVbC6IU5lYmxbMx05w01gHBrZGFnrZIkQbUH6i0z4OAcU0lj8aQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-09 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · americandream11uat.us

    2026-01-09 07:21 

    HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=utf-8
Content-Length: 303
Connection: close
Date: Fri, 09 Jan 2026 07:21:51 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 733dda36f703f66d7e387b2e9c7820ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: BoWmXKmiX7C0POW-dSvN7UK4NNOwXkmL-LwwVCJSDDx4nUGfysr-IA==

Page title: 403 Forbidden

<html>
<head><title>403 Forbidden</title></head>
<body>
<h1>403 Forbidden</h1>
<ul>
<li>Code: AccessDenied</li>
<li>Message: Access Denied</li>
<li>RequestId: FG73SBGHB98542C8</li>
<li>HostId: rWsxZ3OeDVOcOJSwbduEymf5swfp1ADsgjYB5qVTmHvRP7w64O2dmmkJxdjhtSpeLp2R8sI8rvw=</li>
</ul>
<hr/>
</body>
</html>
    Found 2026-01-09 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · valueinsightsplatform-admin-stage.accentureanalytics.com

    2026-01-09 04:34 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 13771
Connection: close
Last-Modified: Sat, 19 Oct 2024 09:29:18 GMT
X-Amz-Server-Side-Encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 09 Jan 2026 04:34:44 GMT
Etag: "d1ba5fe2cd1b54e1c0be7d06176ab231"
Via: 1.1 adbe45cb4997e6da65586fdd3a19215e.cloudfront.net (CloudFront)
Age: 2
Cache-Control: private, no-store, must-revalidate, no-cache, max-age=0
Content-Security-Policy: default-src * data: 'unsafe-eval' 'unsafe-inline' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com secure.aadcdn.microsoftonline-p.com https://valueinsightsplatform-stage.accentureanalytics.com/assets/js/jquery-3.6.0.slim.min.js https://valueinsightsplatform-stage.accentureanalytics.com/assets/js/all.js; worker-src 'self' blob: *.accentureanalytics.com; img-src 'self' *.amazonaws.com data:; connect-src 'self' *.amazonaws.com wss://*.amazonaws.com *.accentureanalytics.com *.accenture.com login.microsoftonline.com *.amazonaws.com *.awsapps.com *.my.connect.aws *.googleapis.com *.amazoncognito.com https://managemydelivery.ciostage.accenture.com; frame-src *.amazonaws.com *.awsapps.com *.my.connect.aws *.aws.amazon.com https://managemydelivery.ciostage.accenture.com; frame-ancestors 'self' *.awsapps.com *.my.connect.aws  ;
Permissions-Policy: geolocation=(), camera=(), microphone=()
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 9lL0apNKgpqw8Bvxj73nVm83YaJg-aZY6PWZBW8nX2pIdzjWGg--8A==

Page title: AdminConsole

<!DOCTYPE html><html lang="en"><head>
  <meta charset="utf-8">
  <title>AdminConsole</title>
  <base href="/">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <link rel="icon" type="image/x-icon" href="favicon.ico">
  <link rel="preconnect" href="https://fonts.gstatic.com">
  <style type="text/css">@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4AMP6lbBP.woff2) format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4AMP6lQ.woff2) format('woff2');unicode-range:U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKKTU1Kvnz.woff2) format('woff2');unicode-range:U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2) format('woff2');unicode-range:U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKKTU1Kvnz.woff2) format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKKTU1Kvnz.woff2) format('woff2');unicode-range:U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKKTU1Kvnz.woff2) format('woff2');unicode-range:U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKKTU1Kvnz.woff2) format('woff2');unicode-range:U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308,
    Found 2026-01-09 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · it.help.reflectionsholiday.com.au

    2026-01-08 22:22 

    HTTP/1.1 302 Found
Content-Type: text/html;charset=UTF-8
Content-Length: 0
Connection: close
Date: Thu, 08 Jan 2026 22:22:09 GMT
Server: AtlassianEdge
Timing-Allow-Origin: *
X-Arequestid: 4699470499cde44b15901322f8d30170
Location: https://it.help.reflectionsholiday.com.au/servicedesk
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Atl-Traceid: 3bd090e4c5c94874a08b6c8edbaa0204
Atl-Request-Id: 3bd090e4-c5c9-4874-a08b-6c8edbaa0204
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Report-To: {"endpoints": [{"url": "https://dz8aopenkvv6s.cloudfront.net"}], "group": "endpoint-1", "include_subdomains": true, "max_age": 600}
Nel: {"failure_fraction": 0.01, "include_subdomains": true, "max_age": 600, "report_to": "endpoint-1"}
Server-Timing: atl-edge;dur=301,atl-edge-internal;dur=11,atl-edge-upstream;dur=291,atl-edge-pop;desc="aws-eu-central-1"
X-Cache: Miss from cloudfront
Via: 1.1 c20b1585cc14f7313af71d342a8c81a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: ZGXAWDS4qOJQfINuPzsQCmFb9PZQkzPBoSUTcXlVIl7xxg4jqwuhlg==
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · sieps.app

    2026-01-08 07:00 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 49259
Connection: close
Date: Thu, 08 Jan 2026 07:00:02 GMT
Cache-Control: max-age=3600
Last-Modified: Mon, 25 Oct 2021 23:40:06 GMT
Etag: "f7fed253b51e2facf5d2024b216efa0e"
Server: AmazonS3
Via: 1.1 476fd70bdb0e3f01a7cdbc322ceae0d8.cloudfront.net (CloudFront)
Age: 2
Strict-Transport-Security: max-age=63072000
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: gEIpjzgc0xArBFxkSULhFmMwjsdJuyTB1NGVe_B80LvqnrrETBzifg==

Page title: SIEPS - Software para Gestión de Procesos e Información en EPS

<!DOCTYPE html>
<html lang="en-US">
<head>
	<meta charset="UTF-8" />
<meta name="description" content="Tecnología, procesos, información y conocimiento para la gestión integral de servicios de salud" /><meta name="keywords" content="EPS, Software, Afiliaciones, Autorizaciones, Cuentas Médicas, Gestión del Riesgo, Contratación, Atención en Salud, Reserva Técnica" /><meta http-equiv="X-UA-Compatible" content="IE=edge">
	

	<script type="text/javascript">
		document.documentElement.className = 'js';
	</script>

	<script>var et_site_url='https://sieps.app';var et_post_id='28';function et_core_page_resource_fallback(a,b){"undefined"===typeof b&&(b=a.sheet.cssRules&&0===a.sheet.cssRules.length);b&&(a.onerror=null,a.onload=null,a.href?a.href=et_site_url+"/?et_core_page_resource="+a.id+et_post_id:a.src&&(a.src=et_site_url+"/?et_core_page_resource="+a.id+et_post_id))}
</script><title>SIEPS - Software para Gestión de Procesos e Información en EPS</title>
<meta name='robots' content='noindex, nofollow' />
<link rel='dns-prefetch' href='//fonts.googleapis.com' />
<link rel='dns-prefetch' href='//s.w.org' />
		<script type="text/javascript">
			window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/13.1.0\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/13.1.0\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/sieps.app\/wp-includes\/js\/wp-emoji-release.min.js?ver=5.8.1"}};
			!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,e),0,0);e=i.toDataURL();return p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,t),0,0),e===i.toDataURL()}function c(e){var t=a.createElement("script");t.src=e,t.defer=t.type="text/javascript",a.getElementsByTagName("head")[0].appendChild(t)}for(o=Array("flag","emoji"),t.supports={everything:!0,everythingExceptFlag:!0},r=0;r<o.length;r++)t.supports[o[r]]=function(e){if(!p||!p.fillText)return!1;switch(p.textBaseline="top",p.font="600 32px Arial",e){case"flag":return s([127987,65039,8205,9895,65039],[127987,65039,8203,9895,65039])?!1:!s([55356,56826,55356,56819],[55356,56826,8203,55356,56819])&&!s([55356,57332,56128,56423,56128,56418,56128,56421,56128,56430,56128,56423,56128,56447],[55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,56128,56430,8203,56128,56423,8203,56128,56447]);case"emoji":return!s([10084,65039,8205,55357,56613],[10084,65039,8203,55357,56613])}return!1}(o[r]),t.supports.everything=t.supports.everything&&t.supports[o[r]],"flag"!==o[r]&&(t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&t.supports[o[r]]);t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything||(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload",n),a.attachEvent("onreadystatechange",function(){"complete"===a.readyState&&t.readyCallback()})),(n=t.source||{}).concatemoji?c(n.concatemoji):n.wpemoji&&n.twemoji&&(c(n.twemoji),c(n.wpemoji)))}(window,document,window._wpemojiSettings);
		</script>
		<meta content="Divi v.4.9.2" name="generator"/><style type="text/css">
img.wp-smiley,
img.emoji {
	display: inline !important;
	border: none !important;
	box-shadow: none !important;
	height: 1em !important;
	width: 1em !important;
	margin: 0 .07em !important;
	vertical-align: -0.1em !important;
	background: none !important;
	padding: 0 !important;
}
</style>
	<link rel='stylesheet' id='wp-block-library-css'  href='/wp-includes/css/dist/block-library/style.min.css?ver=5.8.1' type='text/css' media='all' />
<link rel='stylesheet' id='contact-form-7-css'  href='/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3.2' type='text/css' media='all' />
<link rel='stylesheet' id='divi-style-css'  href='/wp-content/themes/Divi/style.css?ver=4.9.2' type='text/css' media='all' />
<link rel='styleshe
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · sieps.app

    2026-01-08 07:00 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Thu, 08 Jan 2026 07:00:03 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://sieps.app/
X-Cache: Redirect from cloudfront
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: vluMToMH0LS5uFq1jm5l9hTOmbEim2C0R9Fcw9WF6ec0v3RHihj-Zw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · rockymountaineye.com

    2026-01-08 06:59 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Thu, 08 Jan 2026 06:59:52 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://rockymountaineye.com/
X-Cache: Redirect from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: XPDMeXA95MOUyWkrEwmrQSFb1nu0G9EtygUXu-wI_guyhRaubqbRbw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · rockymountaineye.com

    2026-01-08 06:59 

    HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 169
Connection: close
Date: Thu, 08 Jan 2026 06:59:50 GMT
Location: https://www.rockymountaineye.com/
Server: nginx/1.28.0
X-Cache: Hit from cloudfront
Via: 1.1 c20b1585cc14f7313af71d342a8c81a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: nAZW4G1L3v7ujTlDtyPit0lj3sA5aDdES-a2C-e5nIo22_yuE-pSmA==
Age: 2

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.28.0</center>
</body>
</html>
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ladyseductress.com

    2026-01-08 04:51 

    HTTP/1.1 404 Not Found
Server: CloudFront
Date: Thu, 08 Jan 2026 04:51:24 GMT
Content-Length: 0
Connection: close
x-block-rule: not-jp
X-Cache: Error from cloudfront
Via: 1.1 909271198a8193608c0cc833172af082.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: EKSROg1F27lpZp28Jw4PT2foNWEqnCJd7lzF2n7eLj9eI8HalstTTw==
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ladyseductress.com

    2026-01-08 04:51 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Thu, 08 Jan 2026 04:51:24 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://ladyseductress.com/
X-Cache: Redirect from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: kZ8p6jIOJP6RVOUzTYjVZ7L9N6ZyfJAADDcBa7QGsxVSloVNUNN4SQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · dresivo.com

    2026-01-08 04:45 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Thu, 08 Jan 2026 04:45:24 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 adbe45cb4997e6da65586fdd3a19215e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: U1GHCIitLtNMb27s90pi8CIlK6rCEkgpGFtGfhnQVwmVH1KeSkCbAw==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: U1GHCIitLtNMb27s90pi8CIlK6rCEkgpGFtGfhnQVwmVH1KeSkCbAw==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · dresivo.com

    2026-01-08 04:45 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Thu, 08 Jan 2026 04:45:23 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://dresivo.com/
X-Cache: Redirect from cloudfront
Via: 1.1 0f2cc30066f82a3492113a7d3ebae254.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: RV98sN7l_GDd3Ct0VJV97QS2oMRf8qcZCC2AMpB_LfA2giyKuof4pw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-08 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · fulltank.us

    2026-01-07 19:26 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 07 Jan 2026 19:26:47 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://fulltank.us/
X-Cache: Redirect from cloudfront
Via: 1.1 95f719856b35c3a7e9bc14f3202145a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 7Wz3AMM1_QF1nNGGz3L91oc0Xm7seMElZCOPjb3RmEjs5cjs_MtNSw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-07 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · www.fulltank.us

    2026-01-07 19:26 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 07 Jan 2026 19:26:46 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://www.fulltank.us/
X-Cache: Redirect from cloudfront
Via: 1.1 6e6c4d5f1ea04df775c351cd792cccec.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: xvw79oKKhKdHsnQ9j4VIcq4qRigvlGs5kVgip3Onkk5gPyQEpSRo9g==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-07 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · www.fulltank.us

    2026-01-07 19:26 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Wed, 07 Jan 2026 19:26:46 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 46f339c21ed78b531c3c65cde3e4ddfe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: e6qyn7QkyBVd93CrcC32qunvs22ECfM-QWszacOlrs8cdjqvuNL1Yw==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: e6qyn7QkyBVd93CrcC32qunvs22ECfM-QWszacOlrs8cdjqvuNL1Yw==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-07 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · fulltank.us

    2026-01-07 19:26 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Wed, 07 Jan 2026 19:26:46 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 01bfa2cb468985bd24126d7b3dbae26a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: etJzbaKTH8a8sYO9kUMqljhc-igJVR65CTU6m1OVJNwI1thozLr-Xg==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: etJzbaKTH8a8sYO9kUMqljhc-igJVR65CTU6m1OVJNwI1thozLr-Xg==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-07 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · voyagerstudios.games

    2026-01-07 13:57 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 437
Connection: close
Last-Modified: Wed, 20 Nov 2024 06:43:42 GMT
Server: AmazonS3
Date: Tue, 06 Jan 2026 23:24:14 GMT
ETag: "1eb2751923580a36465ebe869669604c"
X-Cache: Hit from cloudfront
Via: 1.1 909271198a8193608c0cc833172af082.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 1PLXMefDVOrByiOvDhiYRGlteggriJZzwa8T2QyXslxjQE5o5hTN2A==
Age: 52375

Page title: Voyager Studios

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8">
    <link rel="icon" href="/favicon.ico">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Voyager Studios</title>
    <script type="module" crossorigin src="/assets/index-Cssx-4VL.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-CZD2t-lE.css">
  </head>
  <body>
    <div id="app"></div>
  </body>
</html>
    Found 2026-01-07 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · voyagerstudios.games

    2026-01-07 13:57 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 437
Connection: close
Last-Modified: Wed, 20 Nov 2024 06:43:42 GMT
Server: AmazonS3
Date: Tue, 06 Jan 2026 23:24:14 GMT
ETag: "1eb2751923580a36465ebe869669604c"
X-Cache: Hit from cloudfront
Via: 1.1 7aa3bfb1af156515af943236e80f9b56.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: mH8ktItV5JNgWSUE3I7f0OEtrloq0zPomriOipnyFPp4buD15Rq0nQ==
Age: 52375

Page title: Voyager Studios

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8">
    <link rel="icon" href="/favicon.ico">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Voyager Studios</title>
    <script type="module" crossorigin src="/assets/index-Cssx-4VL.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-CZD2t-lE.css">
  </head>
  <body>
    <div id="app"></div>
  </body>
</html>
    Found 2026-01-07 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · calm-hari.com

    2026-01-07 13:35 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Wed, 07 Jan 2026 13:35:26 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
X-Powered-By: PHP/7.2.34
Cache-Control: max-age=1
Expires: Wed, 07 Jan 2026 13:35:27 GMT
Vary: Accept-Encoding
Access-Control-Allow-Headers: *
Access-Control-Allow-Origin: *
X-Cache: Miss from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: Wvy6tGYz2y_jeUYy6jO-KuDlMCPUlgRxC_0n344DrsSd5uWpOPULvQ==
    Found 2026-01-07 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · www.calm-hari.com

    2026-01-07 13:35 

    HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
Content-Length: 234
Connection: close
Date: Wed, 07 Jan 2026 13:35:25 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Location: https://www.calm-hari.com/
Cache-Control: max-age=1
Expires: Wed, 07 Jan 2026 13:35:26 GMT
X-Cache: Miss from cloudfront
Via: 1.1 2e1545751358065284c508c87f8e3d4c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 8wqA8Aq8o0yqFtq13IxKO34Kc5wd7mr10FdwjbD4sszC5g4v0JHp6A==

Page title: 301 Moved Permanently

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://www.calm-hari.com/">here</a>.</p>
</body></html>
    Found 2026-01-07 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · calm-hari.com

    2026-01-07 13:35 

    HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
Content-Length: 230
Connection: close
Date: Wed, 07 Jan 2026 13:35:25 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Location: https://calm-hari.com/
Cache-Control: max-age=1
Expires: Wed, 07 Jan 2026 13:35:26 GMT
X-Cache: Miss from cloudfront
Via: 1.1 b5db5add1c6cafa45f2f62d8ca89887e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: SP-DJmVFjA9amU1eV3uVQadqCwWm_UqNO5hzRxHsi7sbhGe2sK6xpQ==

Page title: 301 Moved Permanently

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://calm-hari.com/">here</a>.</p>
</body></html>
    Found 2026-01-07 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · www.calm-hari.com

    2026-01-07 13:35 

    HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: close
Date: Wed, 07 Jan 2026 13:35:26 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
X-Powered-By: PHP/7.2.34
Location: https://calm-hari.com/
Cache-Control: max-age=1
Expires: Wed, 07 Jan 2026 13:35:27 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Origin: *
X-Cache: Miss from cloudfront
Via: 1.1 733dda36f703f66d7e387b2e9c7820ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: jkqcRbM3u0pkbfuJmq5xUSfSvdUpedAn1ybTRZRp_Kzr0tt_Ddpltg==
    Found 2026-01-07 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · leazergroup.com

    2026-01-07 11:02 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 07 Jan 2026 11:02:26 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://leazergroup.com/
X-Cache: Redirect from cloudfront
Via: 1.1 25ecafb130dcf586014e40cd7d2ba2fc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: K5T3-X1YEpZcckstNeUeixo4Qzu1mtjr2kHl5LNc-j1as-je6SPsjg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-07 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · leazergroup.com

    2026-01-07 11:02 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Wed, 07 Jan 2026 11:02:27 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 08b582540a4dee761b8329b525bb41f2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: y_12hPN94egi6E_wJWCqg1ryA3Wt_BG83QdGYP7Jy_JCNuv6BxjU8g==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: y_12hPN94egi6E_wJWCqg1ryA3Wt_BG83QdGYP7Jy_JCNuv6BxjU8g==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-07 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · paperbacks.co.nz

    2026-01-07 10:28 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 07 Jan 2026 10:28:29 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://paperbacks.co.nz/
X-Cache: Redirect from cloudfront
Via: 1.1 01bfa2cb468985bd24126d7b3dbae26a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: zaeJ8O2nBrXssYCvk_74tqDLieZjAZWCOedOpRO1JE80fyB0icki7A==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-07 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · paperbacks.co.nz

    2026-01-07 10:28 

    HTTP/1.1 308 Permanent Redirect
Transfer-Encoding: chunked
Connection: close
Date: Wed, 07 Jan 2026 10:28:29 GMT
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Set-Cookie: AWSALB=pvCp2NPd59ypRhRbfCWwNOR4x90eCVApQT7rZgviHizLFFWfxdTNyS5/mdYcjeimdq6ldwQKhjMzVCsiUFtCC6SK0O6toVtTJKkESOYdqZ7dEvFLtnATcStqqVjz; Expires=Wed, 14 Jan 2026 10:28:29 GMT; Path=/
Set-Cookie: AWSALBCORS=pvCp2NPd59ypRhRbfCWwNOR4x90eCVApQT7rZgviHizLFFWfxdTNyS5/mdYcjeimdq6ldwQKhjMzVCsiUFtCC6SK0O6toVtTJKkESOYdqZ7dEvFLtnATcStqqVjz; Expires=Wed, 14 Jan 2026 10:28:29 GMT; Path=/; SameSite=None
Location: http://www.paperbacks.co.nz/
X-Cache: Miss from cloudfront
Via: 1.1 f21aebe726db54f921ea6610dfe923ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: _lchizEj2RLGMKnR4-I9Oz87aG1Bla_TPMksdoly7hRBEjxt8DaB3A==
    Found 2026-01-07 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · glucoregen-co.com

    2026-01-06 16:31 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 06 Jan 2026 16:31:26 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://glucoregen-co.com/
X-Cache: Redirect from cloudfront
Via: 1.1 25ecafb130dcf586014e40cd7d2ba2fc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: EXYuTVPDd93ojeo6q4ek8WPAoqvyAbkfFJezlevl-Ahn3CTYwfdeRQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-06 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · glucoregen-co.com

    2026-01-06 16:31 

    HTTP/1.1 301 Redirecting
Server: CloudFront
Date: Tue, 06 Jan 2026 16:31:25 GMT
Content-Length: 0
Connection: close
Location: https://www.glucoregen-co.com/
X-Cache: FunctionGeneratedResponse from cloudfront
Via: 1.1 6e6c4d5f1ea04df775c351cd792cccec.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: eNPXwtMYChn1RnfxFW5SHFIdAh0IbslmyMBB2qZ99clm3YZJ4M_FEQ==
    Found 2026-01-06 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · foodiedelivery.es

    2026-01-05 14:53 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 137378
Connection: close
Date: Mon, 05 Jan 2026 14:54:04 GMT
x-nextjs-cache: HIT
x-powered-by: Next.js
Cache-Control: s-maxage=31536000, stale-while-revalidate
ETag: "d6f3nkjinv2wxr"
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 4d5132e5755012bda91181d6b8bbfe24.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: oyESLIfd5COBLR2pIV1EPSjbh_KfWLVV-fRv73V52db3US5b5xVbLg==


<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><meta name="application-name" content="Foodie Delivery"/><meta name="apple-mobile-web-app-capable" content="yes"/><meta name="apple-itunes-app" content="app-id=6739782406, app-argument=https://www.foodiedelivery.es"/><meta name="apple-mobile-web-app-status-bar-style" content="default"/><meta name="apple-mobile-web-app-title" content="Foodie Delivery"/><meta name="description" content="Comida a domicilio y más"/><meta name="format-detection" content="telephone=no"/><meta name="mobile-web-app-capable" content="yes"/><meta name="theme-color" content="#90C33C"/><meta name="facebook-domain-verification" content="x26re6lvlr2ho3hg6rhpb550lzd1qe"/><link rel="apple-touch-icon" sizes="180x180" href="/icons/apple-touch-icon.png"/><link rel="manifest" href="/manifest.json"/><link rel="shortcut icon" href="/favicon.ico"/><link rel="preconnect" href="https://fonts.gstatic.com"/><script type="text/javascript" src="https://maps.googleapis.com/maps/api/js?key=AIzaSyDy80slwpOlrhOhU-qLYFmGKN3FWgAsmGA&amp;libraries=places"></script><style>
            html, body, #__next {
              height: 100%;
              font-family: &#x27;Poppins&#x27;, sans-serif;
            }
            #__next {
              margin: 0 auto;
              font-family: &#x27;Poppins&#x27;, sans-serif;
            }
            h1 {
              text-align: center;
              font-family: &#x27;Poppins&#x27;, sans-serif;
            }
            </style><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin /><link rel="preload" href="/_next/static/css/197588283e365d95.css" as="style" crossorigin=""/><link rel="stylesheet" href="/_next/static/css/197588283e365d95.css" crossorigin="" data-n-g=""/><link rel="preload" href="/_next/static/css/84dc3d360e30cf11.css" as="style" crossorigin=""/><link rel="stylesheet" href="/_next/static/css/84dc3d360e30cf11.css" crossorigin="" data-n-p=""/><link rel="preload" href="/_next/static/css/94e4e0ab8adecd48.css" as="style" crossorigin=""/><link rel="stylesheet" href="/_next/static/css/94e4e0ab8adecd48.css" crossorigin="" data-n-p=""/><noscript data-n-css=""></noscript><script defer="" crossorigin="" nomodule="" src="/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js"></script><script src="/_next/static/chunks/webpack-d0487ecc9db5a46e.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/framework-a5ccbadc0b100feb.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/main-8533589e7b169676.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/pages/_app-1d0bfad8e973174e.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/ea88be26-66e91720af1911ce.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/33bb9847-0c8a3f5031408b13.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/420-5eb1b1f1c17a60e6.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/5400-7169fd8557599a72.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/247-9148aec418be236d.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/1187-76ec7a7751d68726.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/2656-f52e1905f1873702.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/3673-336bf4d7c90d38e2.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/5072-6c6608e3fcb0022b.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/9924-833412d2583fc5a9.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/1081-e1029e496a65b594.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/1917-03238f467a865158.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/7825-66d66d52cbfd1ff3.js" defer="" crossorigin=""></script><script src="/_next/static/chunks/1764-7229ba26aff2b9de.js" defer="" crossorigin=""></script><script src="/_next
    Found 2026-01-05 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · foodiedelivery.es

    2026-01-05 14:53 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 05 Jan 2026 14:53:59 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://foodiedelivery.es/
X-Cache: Redirect from cloudfront
Via: 1.1 08b582540a4dee761b8329b525bb41f2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: _KOx_IswB-1UDo_6TsmveLrfcaDhbTvMDeb_I9tQy05iiuKyeqnklA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-05 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · thepainswick.co.uk

    2026-01-05 13:31 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Sun, 04 Jan 2026 19:45:28 GMT
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Access-Control-Allow-Origin: *
Content-Security-Policy: frame-ancestors 'self' *.roomlynx.net
Link: <https://thepainswick.co.uk/wp-json/>; rel="https://api.w.org/"
Link: <https://thepainswick.co.uk/wp-json/wp/v2/pages/6>; rel="alternate"; title="JSON"; type="application/json"
Link: <https://thepainswick.co.uk/>; rel=shortlink
Permissions-Policy: geolocation=(self),midi=(),notifications=(),push=(),sync-xhr=*,microphone=(),camera=(),magnetometer=(),gyroscope=(),speaker=(self),fullscreen=(self),payment=()
Referrer-Policy: no-referrer-when-downgrade
Server: nginx/1.21.6
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Fastcgi-Cache: MISS
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
Via: 1.1 5a7aeff2d396b9667469b83aa6741fca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: SPwSbAl45J1XgNrmIW0pukuuZE9I-8t3WOnSWKaItFYrA6Y6s3NSmw==
Age: 63984
    Found 2026-01-05 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · loudbasstard-jp.com

    2026-01-04 23:39 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 04 Jan 2026 23:39:59 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://loudbasstard-jp.com/
X-Cache: Redirect from cloudfront
Via: 1.1 5a7aeff2d396b9667469b83aa6741fca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: oI6xkjW2-q8IDLS7neq9VJmPqOSP-PLZlnI3C4sy4bZILb7NCSInrw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-04 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · loudbasstard-jp.com

    2026-01-04 23:39 

    HTTP/1.1 404 Not Found
Server: CloudFront
Date: Sun, 04 Jan 2026 23:40:00 GMT
Content-Length: 0
Connection: close
x-block-rule: not-jp
X-Cache: Error from cloudfront
Via: 1.1 3fe1b65a21db2155ab695e76b3fc80ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: xhoL4rcr3Vx5KSYx5y4FGWG15Erx8o7BDRupEVqxVCrca6ULNa1Rrg==
    Found 2026-01-04 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · entity-identity.com

    2026-01-04 07:27 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 04 Jan 2026 07:27:02 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://entity-identity.com/
X-Cache: Redirect from cloudfront
Via: 1.1 def78bd9f6b4ff6109111fdb39be66f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: qW03AiwbvhgTJsiWugG6z7mdw1QoWOSEVVJh72vbTsG6LllW4tZDjg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-04 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · entity-identity.com

    2026-01-04 07:27 

    HTTP/1.1 404 Not Found
Server: CloudFront
Date: Sun, 04 Jan 2026 07:27:02 GMT
Content-Length: 0
Connection: close
x-block-rule: not-jp
X-Cache: Error from cloudfront
Via: 1.1 b608ed0f3426ba08cff51718fbecc028.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: fwdGFPt4ai_EJoc-oHxWLWXBrgkP3za34AHuBpYgHzOWU9UJ2O-VpQ==
    Found 2026-01-04 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · cloudsmartuk.com

    2026-01-04 06:56 

    HTTP/1.1 404 Not Found
Server: CloudFront
Date: Sun, 04 Jan 2026 06:56:01 GMT
Content-Length: 0
Connection: close
x-block-rule: not-jp
X-Cache: Error from cloudfront
Via: 1.1 2e1545751358065284c508c87f8e3d4c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: bIHg4wX97TiW2NqXbw1IhAmbPb-6xeGyMBevW-Za4UQsGZLuFl7n-Q==
    Found 2026-01-04 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · cloudsmartuk.com

    2026-01-04 06:56 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 04 Jan 2026 06:56:00 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://cloudsmartuk.com/
X-Cache: Redirect from cloudfront
Via: 1.1 def78bd9f6b4ff6109111fdb39be66f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: xfUCGvEYMklMwEuvCw0vFl-QUa4GWRGff6Q4lXOGAznQxllYjGTy-w==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-04 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · unistairs.com

    2026-01-03 08:58 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 03 Jan 2026 08:58:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://unistairs.com/
X-Cache: Redirect from cloudfront
Via: 1.1 0aa7f1d7fec8d7f1a865e80c7680d324.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: EWV8G80BjVvVi-XNnvX5i6xIr_5mMujJCBzTmN6JVucvKs83S1U-Bw==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-03 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · unistairs.com

    2026-01-03 08:58 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 10884
Connection: close
Date: Wed, 31 Dec 2025 05:22:42 GMT
ETag: "mbiqw95cwb8e8"
x-nextjs-cache: HIT
x-nextjs-prerender: 1
x-nextjs-stale-time: 4294967294
x-powered-by: Next.js
Cache-Control: s-maxage=31536000,
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6e6c4d5f1ea04df775c351cd792cccec.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: vj7OaPD_L9UNtnld2WSt4fVKUUB-7rs0_sdMhta1tM0YgzsW-VfFhg==
Age: 272156

Page title: Student Connect

<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/_next/static/media/0484562807a97172-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/4c285fdca692ea22-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/8888a3826f4a3af4-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/b957ea75a84b6ea7-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/eafabf029ad39a43-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="stylesheet" href="/_next/static/css/57108b5c277d36eb.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/e7eddfe4828c1690.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-b51a0546b524f965.js"/><script src="/_next/static/chunks/4bd1b696-c656bdf4fe525f4c.js" async=""></script><script src="/_next/static/chunks/1517-417349fe50fa6937.js" async=""></script><script src="/_next/static/chunks/main-app-5b1784766b448001.js" async=""></script><script src="/_next/static/chunks/1224-a2e6a9dcf1b87dd3.js" async=""></script><script src="/_next/static/chunks/app/layout-4f58adb814073c4d.js" async=""></script><script src="/_next/static/chunks/8173-a8fad0640d2454f9.js" async=""></script><script src="/_next/static/chunks/app/page-2fb5b62e71d85ecb.js" async=""></script><meta name="next-size-adjust" content=""/><title>Student Connect</title><meta name="description" content="Student Connect"/><link rel="icon" href="/favicon.ico" type="image/x-icon" sizes="16x16"/><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body class="__className_51684b antialiased bg-gradient-to-br from-blue-500 to-purple-600"><section class="Toastify" aria-live="polite" aria-atomic="false" aria-relevant="additions text" aria-label="Notifications Alt+T"></section><div class="min-h-screen overflow-hidden"><section class="relative flex flex-col justify-center items-center h-screen px-4"><div class="absolute inset-0 overflow-hidden"><div class="absolute -top-4 -left-4 w-72 h-72 bg-white/10 rounded-full blur-xl animate-pulse"></div><div class="absolute top-1/2 -right-8 w-96 h-96 bg-purple-400/20 rounded-full blur-2xl animate-pulse delay-1000"></div><div class="absolute bottom-10 left-1/3 w-64 h-64 bg-blue-400/15 rounded-full blur-xl animate-pulse delay-500"></div></div><div class="relative z-10 text-center max-w-6xl mx-auto"><h1 class="text-2xl md:text-3xl lg:text-5xl font-bold text-white mb-6 leading-tight">Applying to Universities?<span class="block text-white animate-pulse mt-3">Journey Starts Here</span></h1><p class="text-xl md:text-2xl text-white/90 mb-8 max-w-4xl mx-auto leading-relaxed">Talk to real students from each university you&#x27;re considering. Get insights, ask questions, and make the right choice with confidence.</p><div class="flex flex-col sm:flex-row gap-4 justify-center items-center"><a class="group relative inline-flex items-center justify-center px-8 py-4 text-lg font-semibold text-white bg-gradient-to-r from-purple-400 to-blue-500 rounded-full transition-all duration-300 hover:from-purple-700 hover:to-blue-700 hover:scale-105 shadow-lg hover:shadow-xl" href="/sign-up"><span class="mr-2">Join Now</span><span class="group-hover:translate-x-1 transition-transform duration-300">→</span></a><a class="inline-flex items-center justify-center px-8 py-4 text-lg font-semibold text-white bg-white/10 backdrop-blur-sm rounded-full border border-white/20 transition-all duration-300 hover:bg-white/20 hover:scale-105" href="/login">Sign In</a></div></div></section></div><script src="/_next/static/chunks/webpack-b51a0546b524f965.js" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[42838,[\"1224\",\"static/chunks/1224-a2e6a9dcf1b87
    Found 2026-01-03 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip7.cc

    2026-01-03 06:27 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Sat, 03 Jan 2026 06:27:14 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 4d5132e5755012bda91181d6b8bbfe24.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: ISnYAFO6RMZy66cOnqjg6smkqDoKuvbthiha7oBYgQYYkGHZY0NKEg==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-03 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip7.cc

    2026-01-03 06:27 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 03 Jan 2026 06:27:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip7.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 909271198a8193608c0cc833172af082.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: IW1nq0Gu66bRzeqarW2jcruF7RVYX945bELl0JeLGyn3mgoahB_XoA==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-03 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · catchot-online.com

    2026-01-03 00:55 

    HTTP/1.1 404 Not Found
Server: CloudFront
Date: Sat, 03 Jan 2026 00:55:39 GMT
Content-Length: 0
Connection: close
x-block-rule: not-jp
X-Cache: Error from cloudfront
Via: 1.1 0f2cc30066f82a3492113a7d3ebae254.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: DM2iEBc7LtBbVR2ySP9rdruH5YPFqUZbUIxTCFV9lsvK0f9qpdmgMg==
    Found 2026-01-03 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · catchot-online.com

    2026-01-03 00:55 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 03 Jan 2026 00:55:40 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://catchot-online.com/
X-Cache: Redirect from cloudfront
Via: 1.1 4d5132e5755012bda91181d6b8bbfe24.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: GoUFIjELvtGxuxljy3gFmV5NhPHcxXrgDoImoXYznTijfa3ch8uZDQ==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-03 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · myextensia.com

    2026-01-02 16:22 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Fri, 02 Jan 2026 16:22:01 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 8Zm0ABPKRwgw0yksUxIr2ayxNHdPbpmplR1Kq_jAueIbkjPKdbuZIA==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: 8Zm0ABPKRwgw0yksUxIr2ayxNHdPbpmplR1Kq_jAueIbkjPKdbuZIA==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · myextensia.com

    2026-01-02 16:22 

    HTTP/1.1 400 Bad Request
Server: CloudFront
Date: Fri, 02 Jan 2026 16:22:00 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 08b582540a4dee761b8329b525bb41f2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: iPp8R9zKr-JHu5du2ea8Q1zwPV-ehGMwopU1MAk2jtvHgoHUkTYLtg==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>400 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: iPp8R9zKr-JHu5du2ea8Q1zwPV-ehGMwopU1MAk2jtvHgoHUkTYLtg==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip9.cc

    2026-01-02 14:44 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 14:44:24 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 2e1545751358065284c508c87f8e3d4c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: iGgWEwbgY2JxFMDZwGXCocGZ-9hbdPuybL2r0JUGJU3OE3DRYTb-mg==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip9.cc

    2026-01-02 14:44 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 14:44:23 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip9.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 3fe1b65a21db2155ab695e76b3fc80ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: V9zCfb3-1YNF6Qrdykv5fJvWo-fO4kZENHqqATId9IJvSDBb3N7mbw==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip4.cc

    2026-01-02 14:07 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 14:07:48 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 6636538a05247c80bd9b1634a2f35fb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: SVoHW-UIwWZKZqDPJVI0BgkdTTgsAbNG9fKdHqcWFImfHnF29l5ikg==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip4.cc

    2026-01-02 14:07 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 14:07:47 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip4.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 0aa7f1d7fec8d7f1a865e80c7680d324.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: V6fhfGZtAAlJhIwmhb8nQPDDctjxfAIyWdibacYUvCevtpo_3LFcXg==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · n-plants.com

    2026-01-02 14:00 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 14:00:30 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://n-plants.com/
X-Cache: Redirect from cloudfront
Via: 1.1 b608ed0f3426ba08cff51718fbecc028.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: HmW2-_elIXvutecQq24W1J8TNAWmMDJwBHx163h0T1X7d-qWOADoUg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · n-plants.com

    2026-01-02 14:00 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Fri, 02 Jan 2026 14:00:30 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 c20b1585cc14f7313af71d342a8c81a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 8zYHAz9iYH6mtlJHP2-fC5xkWVNR3QwL0YhmtUPekt91evxVm1ha_w==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: 8zYHAz9iYH6mtlJHP2-fC5xkWVNR3QwL0YhmtUPekt91evxVm1ha_w==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip3.cc

    2026-01-02 13:38 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 13:38:15 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: t7dCXdVi_JUNQvQebae1lsBAgXYWHV0Z_33r50okPV4Hd2SAaOyUyA==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip3.cc

    2026-01-02 13:38 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 13:38:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip3.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 01bfa2cb468985bd24126d7b3dbae26a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: k2YC2eNf6_JXwWFqApzlohHZi1uMpSqT3IH8CKcgInoawrP-2HLuMw==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip2.com

    2026-01-02 13:23 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 13:23:36 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip2.com/
X-Cache: Redirect from cloudfront
Via: 1.1 4d5132e5755012bda91181d6b8bbfe24.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: RoSUqbhk3mED29r6Wjg7TU6Eow98nnJwD1dK6xP9kUdfipJNQn5HgQ==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip2.com

    2026-01-02 13:23 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 13:23:32 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 23e907ff6b79ce55a7f547e682506202.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Z-OUVdvnqIkKRceLFctC25-T-m7k_wefWBen7zhpUiqX2CiODuyg7Q==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip12.cc

    2026-01-02 13:03 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 13:03:42 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip12.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 46f339c21ed78b531c3c65cde3e4ddfe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: VWA7TwSZ4JwQ6OVsqwHn25w9qOTgyOqpVWX58UdKHtgNhKiSmYGR4Q==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip12.cc

    2026-01-02 13:03 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 13:03:42 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 5a7aeff2d396b9667469b83aa6741fca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: zTygpY4aws4Fekbvh04Nt_5jqwN0AJi-6uclyEvg3GdT_qbwqfQLoQ==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip1.cc

    2026-01-02 12:12 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 12:12:48 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 01bfa2cb468985bd24126d7b3dbae26a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: DAmTblUHWldYZdGJnbs7omvt91uJNkfcUr38jXUe2vP0nItTa7ihgQ==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip1.cc

    2026-01-02 12:12 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 12:12:47 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip1.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 b5db5add1c6cafa45f2f62d8ca89887e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: PHMQ9Q_eKZaoi4RA9JvCxd6cHDGJRUHKV9Zz9qTThw3pmw8_yPMDVg==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip11.cc

    2026-01-02 11:38 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 11:38:18 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip11.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 01bfa2cb468985bd24126d7b3dbae26a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 7pNROaolPz5WQhK0tjDkWNZ-B3DhQwAekwZJXxo5Ra9Y31SJ4KCgPA==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip11.cc

    2026-01-02 11:38 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 11:38:18 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 6e6c4d5f1ea04df775c351cd792cccec.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Ou4ty5zRC-HZFxTj08rCLT3Pb34xtnGdAsGS4rYZqzzLB_7D8xm-hg==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · sieps.app

    2026-01-02 09:47 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 49259
Connection: close
Date: Fri, 02 Jan 2026 09:47:19 GMT
Cache-Control: max-age=3600
Last-Modified: Mon, 25 Oct 2021 23:40:06 GMT
Server: AmazonS3
Etag: "f7fed253b51e2facf5d2024b216efa0e"
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
Age: 1
Strict-Transport-Security: max-age=63072000
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: rdAQTUDYbwwtRn7Ota8cIA2lHBN6dwxb3fUGKeFNHOAROkdr37MPNA==

Page title: SIEPS - Software para Gestión de Procesos e Información en EPS

<!DOCTYPE html>
<html lang="en-US">
<head>
	<meta charset="UTF-8" />
<meta name="description" content="Tecnología, procesos, información y conocimiento para la gestión integral de servicios de salud" /><meta name="keywords" content="EPS, Software, Afiliaciones, Autorizaciones, Cuentas Médicas, Gestión del Riesgo, Contratación, Atención en Salud, Reserva Técnica" /><meta http-equiv="X-UA-Compatible" content="IE=edge">
	

	<script type="text/javascript">
		document.documentElement.className = 'js';
	</script>

	<script>var et_site_url='https://sieps.app';var et_post_id='28';function et_core_page_resource_fallback(a,b){"undefined"===typeof b&&(b=a.sheet.cssRules&&0===a.sheet.cssRules.length);b&&(a.onerror=null,a.onload=null,a.href?a.href=et_site_url+"/?et_core_page_resource="+a.id+et_post_id:a.src&&(a.src=et_site_url+"/?et_core_page_resource="+a.id+et_post_id))}
</script><title>SIEPS - Software para Gestión de Procesos e Información en EPS</title>
<meta name='robots' content='noindex, nofollow' />
<link rel='dns-prefetch' href='//fonts.googleapis.com' />
<link rel='dns-prefetch' href='//s.w.org' />
		<script type="text/javascript">
			window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/13.1.0\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/13.1.0\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/sieps.app\/wp-includes\/js\/wp-emoji-release.min.js?ver=5.8.1"}};
			!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,e),0,0);e=i.toDataURL();return p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,t),0,0),e===i.toDataURL()}function c(e){var t=a.createElement("script");t.src=e,t.defer=t.type="text/javascript",a.getElementsByTagName("head")[0].appendChild(t)}for(o=Array("flag","emoji"),t.supports={everything:!0,everythingExceptFlag:!0},r=0;r<o.length;r++)t.supports[o[r]]=function(e){if(!p||!p.fillText)return!1;switch(p.textBaseline="top",p.font="600 32px Arial",e){case"flag":return s([127987,65039,8205,9895,65039],[127987,65039,8203,9895,65039])?!1:!s([55356,56826,55356,56819],[55356,56826,8203,55356,56819])&&!s([55356,57332,56128,56423,56128,56418,56128,56421,56128,56430,56128,56423,56128,56447],[55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,56128,56430,8203,56128,56423,8203,56128,56447]);case"emoji":return!s([10084,65039,8205,55357,56613],[10084,65039,8203,55357,56613])}return!1}(o[r]),t.supports.everything=t.supports.everything&&t.supports[o[r]],"flag"!==o[r]&&(t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&t.supports[o[r]]);t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything||(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload",n),a.attachEvent("onreadystatechange",function(){"complete"===a.readyState&&t.readyCallback()})),(n=t.source||{}).concatemoji?c(n.concatemoji):n.wpemoji&&n.twemoji&&(c(n.twemoji),c(n.wpemoji)))}(window,document,window._wpemojiSettings);
		</script>
		<meta content="Divi v.4.9.2" name="generator"/><style type="text/css">
img.wp-smiley,
img.emoji {
	display: inline !important;
	border: none !important;
	box-shadow: none !important;
	height: 1em !important;
	width: 1em !important;
	margin: 0 .07em !important;
	vertical-align: -0.1em !important;
	background: none !important;
	padding: 0 !important;
}
</style>
	<link rel='stylesheet' id='wp-block-library-css'  href='/wp-includes/css/dist/block-library/style.min.css?ver=5.8.1' type='text/css' media='all' />
<link rel='stylesheet' id='contact-form-7-css'  href='/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3.2' type='text/css' media='all' />
<link rel='stylesheet' id='divi-style-css'  href='/wp-content/themes/Divi/style.css?ver=4.9.2' type='text/css' media='all' />
<link rel='styleshe
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · sieps.app

    2026-01-02 09:47 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 09:47:18 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://sieps.app/
X-Cache: Redirect from cloudfront
Via: 1.1 46f339c21ed78b531c3c65cde3e4ddfe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 1Djt-KLu8UXWrYT-dZr8G0DZhyd5VlPw0fsaTkV_-KmLw-u7FL5Hjg==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip0.com

    2026-01-02 09:21 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 09:21:57 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 def78bd9f6b4ff6109111fdb39be66f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: TnshRxs4W3tx_47VIzyfinjj8yAypbKFlYVAZgdQnMBrKXQeBLjnBg==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip0.com

    2026-01-02 09:21 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 09:21:56 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip0.com/
X-Cache: Redirect from cloudfront
Via: 1.1 23e907ff6b79ce55a7f547e682506202.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: uu935SL42PL_Sd8xPuo341tx-G5gqFrD4UtQBMKfvV8plldCPVHLcA==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip10.com

    2026-01-02 09:13 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 09:13:44 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip10.com/
X-Cache: Redirect from cloudfront
Via: 1.1 3fe1b65a21db2155ab695e76b3fc80ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: LPpxu1Zo-M2w4mZllxdwzK_2CtJW-MAND47QbqSE8HuSUwte539eDw==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip10.com

    2026-01-02 09:13 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 09:13:45 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 b5db5add1c6cafa45f2f62d8ca89887e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: yYa54nhuNGa-XT_cfGKo2YhhNvzkYY0nooRqDAKZaXw46rEdgYGVcw==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip0.vip

    2026-01-02 09:08 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 09:08:27 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip0.vip/
X-Cache: Redirect from cloudfront
Via: 1.1 b5db5add1c6cafa45f2f62d8ca89887e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: L5uCJbrA1vvHAutXhJgk3Hz9zbwhJgTJR81TwK1d9BnvtckXJx6kqw==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip0.vip

    2026-01-02 09:08 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 09:08:28 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 23e907ff6b79ce55a7f547e682506202.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: hWb3AQQLo92aICkWgMMc6RK58V-qXisl8s1WC5cgp6fogcD0yVTkEA==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip12.com

    2026-01-02 09:05 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 09:05:49 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip12.com/
X-Cache: Redirect from cloudfront
Via: 1.1 0f2cc30066f82a3492113a7d3ebae254.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: ipwS4BgD6kraV-Q_eq0BCTkqZPWjeogBW8Pc04O1-SAKiJeNhu2uWw==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip12.com

    2026-01-02 09:05 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 09:05:48 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 b608ed0f3426ba08cff51718fbecc028.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: GNAds2uecXR9Qc4CVih_VA2WLhWteEo2Des8sm5_0VdaKa2mE9_3RQ==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip14.cc

    2026-01-02 08:52 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 08:52:23 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip14.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 4d5132e5755012bda91181d6b8bbfe24.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 7QtookqSeXhTpGf6Wl55sPgoWv9GprEgB7fOzDNdltP6XsMkVElUPw==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip14.cc

    2026-01-02 08:52 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 08:52:23 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 95f719856b35c3a7e9bc14f3202145a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: eJrqni-MFD7p4PRGmI_sh2yu7WduvRQ1awBUQIWGhKj43DDuHWNxhw==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip17.cc

    2026-01-02 08:40 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 08:40:17 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 3555148cb98f4a6b38702fc0b65f2ace.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: iNIIntdGR8RX8W4cOS78_JF6qUOXkGJnArPWlj1b7gsgq6Jzi8oVUw==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip17.cc

    2026-01-02 08:40 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 08:40:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip17.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 0aa7f1d7fec8d7f1a865e80c7680d324.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: D05h5Be8o0g3df93jELAROroda5aiaoCoCdQihg8VSbct84ZSQNd_Q==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip8.cc

    2026-01-02 08:26 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 08:26:08 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip8.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 476fd70bdb0e3f01a7cdbc322ceae0d8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: NqrEG28vCEYx38eQlBzmKKmnHW7ABHca4SVE0_ubiMWGWJ3FJb55Ww==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip8.cc

    2026-01-02 08:26 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 08:26:09 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 23e907ff6b79ce55a7f547e682506202.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: BUvkXGoTMBKNNkXSHPEfoQHCivpZ5ycjWXmx9FOaq3qIfz07uok2bg==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip13.com

    2026-01-02 07:54 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 07:54:55 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 b608ed0f3426ba08cff51718fbecc028.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: DK2i977cFtIzCzWclJP9cl7VwTBF08HQ6XfxH39odA-sZKW_23zfng==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip13.com

    2026-01-02 07:54 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 07:54:54 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip13.com/
X-Cache: Redirect from cloudfront
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: rFSKIbhbRPPF5pg2gdEXt5SxFy0MfafOEo-q_Fzi0UklpqjH8mW4aQ==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip5.com

    2026-01-02 07:41 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 07:41:19 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 6636538a05247c80bd9b1634a2f35fb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: cogg3CnJ0pDzhTmWneLVKvV7pa23RvtaRrg_R5HK1Ne3jnfF6DfDiQ==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip5.com

    2026-01-02 07:41 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 07:41:18 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip5.com/
X-Cache: Redirect from cloudfront
Via: 1.1 bab0321b4bf0fd055bdfb0282cee7346.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: y7zW7gt9e_Nrg8tsjhUNVsDLtHrABIXDNftGY79PiodtN8dlTnvLtA==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip16.com

    2026-01-02 07:25 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 07:25:19 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip16.com/
X-Cache: Redirect from cloudfront
Via: 1.1 bab0321b4bf0fd055bdfb0282cee7346.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: HTFOemhCyZxGexoHUwebxxKsZDX-gg8JHYJ54fmKk_l9f0_UHs7rrA==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip16.com

    2026-01-02 07:25 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 07:25:19 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 95f719856b35c3a7e9bc14f3202145a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: pfsaJB3dorNoDKWYygyHrrUPIKn8PXIfSY9WfK2qRrL4R0ktDT3M6A==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip11.com

    2026-01-02 07:23 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 07:23:07 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 909271198a8193608c0cc833172af082.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 9H0WrUjSWbyxOQagjF2boY2fqTOF1QXs5IrfRAnSTYCRhmpZ6Fh6NQ==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip11.com

    2026-01-02 07:23 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 07:23:05 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip11.com/
X-Cache: Redirect from cloudfront
Via: 1.1 08b582540a4dee761b8329b525bb41f2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: evhtHCsEABzG83yTEPu2ADOGLTyB8nOYqq9kcIbduH24dwm3p8LHfg==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip18.com

    2026-01-02 07:09 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 07:09:53 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip18.com/
X-Cache: Redirect from cloudfront
Via: 1.1 95f719856b35c3a7e9bc14f3202145a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: AL2GiFIvv3TK-iTJZ4nPNsi3RODt6tAsF1_4o4OfcvrLelWUSqnR_A==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip18.com

    2026-01-02 07:09 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 07:09:53 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 2e1545751358065284c508c87f8e3d4c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 00vuV5TjAl3sC38OUpCS2BMxnZA1o7PMHevPJr6it_P-5bg7MVFboA==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip13.cc

    2026-01-02 07:03 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 07:03:44 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip13.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 2e1545751358065284c508c87f8e3d4c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: EAnLkqN1anQwYACOdtyzctJZ5imTzZvyvCdS3_O3PpWOBLd8Xd-HUQ==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip13.cc

    2026-01-02 07:03 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 07:03:45 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 bab0321b4bf0fd055bdfb0282cee7346.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: mrZwZ0kc2p3boS2gk-LNjzxkNYRPVXLI2I5GF0R498PmHEuT48qvxg==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip6.cc

    2026-01-02 06:59 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 06:59:40 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip6.cc/
X-Cache: Redirect from cloudfront
Via: 1.1 909271198a8193608c0cc833172af082.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: PA1s-Ij2eLnCNxktkrnJzoPJDbCLXoOnbqVt1Zv1FarJ27xU-mA-hw==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip6.cc

    2026-01-02 06:59 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 06:59:41 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 733dda36f703f66d7e387b2e9c7820ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: iDrCc-vOc7J_ga3mYIcYS3PiiwsLjuRvb27nFC_tX6Td8oECyz7OdA==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip9.com

    2026-01-02 06:55 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 06:55:32 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip9.com/
X-Cache: Redirect from cloudfront
Via: 1.1 95f719856b35c3a7e9bc14f3202145a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: sqw4XwIh8_QgZD0JiNstcTzX1BHzI_C81NiTZffmJ_6cM1FNiqrpXg==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip9.com

    2026-01-02 06:55 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 06:55:32 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 95f719856b35c3a7e9bc14f3202145a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: AWum8REcMZXKa-7MN7wZLozQXvPZpJyfJ9qqo-kgm7_H0yHhtUjK6A==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip20.com

    2026-01-02 06:47 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 06:48:00 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip20.com/
X-Cache: Redirect from cloudfront
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: S3pYIchQ4Bv0mQkc_-aMa_eMqzNzPBXUYgnfPRVX07pOOUZH5zRy4A==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip20.com

    2026-01-02 06:47 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 06:48:00 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 def78bd9f6b4ff6109111fdb39be66f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 5zUG5Yrs3OCOYdacawtbYg-CE3kxbFG4-zv7HotdZSsM5aHcDXiQkQ==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · remi101vip6.com

    2026-01-02 06:28 

    HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Server: openresty
Date: Fri, 02 Jan 2026 06:28:42 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 3555148cb98f4a6b38702fc0b65f2ace.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: MUP-3l7hnaSq-n0vUvrC9QLNUvhbWpMvY9gZZqsdhXw-Sf9FWANehw==

Page title: Bergabunglah dalam Remi 101!

<!DOCTYPE html>
<html>
    <head>
        <meta property="og:url" content="/" />
        <meta property="og:type"          content="website" />
        <meta property="og:image:width"          content="600" />
        <meta property="og:image:height"          content="314" />
        <meta property="og:title"         content="Bergabunglah dengan anggota Remi 101!" />
        <meta property="og:description"   content="Mainkan 70+ Game. Menangkan Hingga 10 Miliar Setiap Hari.&lt;br&gt;Mainkan di Aplikasi Game Terbaik Indonesia untuk Poker Domino Slots Aviator." />
        <meta property="og:image"         content="./share102.jpg" />
        <meta property="fb:app_id" content="275231247713364" />

        <meta name="apple-mobile-web-app-capable" content="yes">
        <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
        <meta content="telephone=no" name="format-detection" /> 
        <meta property="url" content="/">
        <meta property="type" content="website">
        <meta property="title" content="Bergabunglah dalam Remi 101!">
        <meta property="description" content="Selamat datang di Remi 101! Temukan beragam permainan menarik, termasuk slot, Rummy, Teenpatti, Aviator, dan banyak lagi. Sebagai platform game online terkemuka di India, kami memberikan peluang tanpa batas untuk memenangkan hadiah uang tunai dalam jumlah besar. Jangan lewatkan bonus misteri harian kami untuk mendapatkan lebih banyak peluang mendapatkan jackpot! Bergabunglah dengan komunitas gamer kami dan mulailah menang di Remi 101 hari ini!">

        <meta charset="UTF-8">
        <meta name="viewport" content="width=720, user-scalable=no"> 
        <title>Bergabunglah dalam Remi 101!</title>
        <link rel="icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <link rel="shortcut icon" href="./favicon.png" mce_href="./favicon.png" type="image/png">
        <script>
            // Initialize the agent at application startup.
            const fpPromise = import('/src/js/fingerprintjs.js')
                .then(FingerprintJS => FingerprintJS.load())

            // Get the visitor identifier when you need it.
            fpPromise
                .then(fp => fp.get())
                .then(result => {
                    // This is the visitor identifier:
                    const visitorId = result.visitorId
                    console.log(visitorId);
                    var url = '/getapk.php?vid='+visitorId+'&code=&mb=';
                    var xhr = new XMLHttpRequest();
                    xhr.onreadystatechange = function() {
                        if (xhr.readyState == 4) {
                            if (xhr.status == 200) {
                                var data = xhr.responseText;
                                console.log(data);
                                if(data.indexOf('http') == 0) {
                                    // window.location.href = data;
                                    // document.getElementById("playnow").href=data;
                                    document.getElementById("down_apk_2").href=data;
                                    //document.getElementById("down_apk_2").target="_blank"
                                    //document.getElementById("playnow").target="_blank"
                                    document.getElementById("down_apk_2").setAttribute("target","_blank")
                                    //document.getElementById("playnow").setAttribute("target","_blank")
                                    document.getElementById("wait_download").style.display="none"
                                    document.getElementById("can_download").style.display="inline"
                                } else {
                                    alert('Gagal mendapatkan tautan dari server')
                                }
                            } else {
                                alert('Gagal mendapatkan tautan')
                            }
                        }
                    }
                    xhr.open('GET
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · remi101vip6.com

    2026-01-02 06:28 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 06:28:41 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://remi101vip6.com/
X-Cache: Redirect from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: D-j4hI2pLKOhyplWcIpwtt2M3GYHS10ER6aRhwFK5scK_cRwJ3_4Mw==
Vary: Origin

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ladyseductress.com

    2026-01-02 05:19 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 02 Jan 2026 05:19:06 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://ladyseductress.com/
X-Cache: Redirect from cloudfront
Via: 1.1 3fe1b65a21db2155ab695e76b3fc80ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: vc1otnTpfO0umNHByPW3LxVbxlUvrf0RowdPf9var8vLOjrSrJKaYA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ladyseductress.com

    2026-01-02 05:19 

    HTTP/1.1 404 Not Found
Server: CloudFront
Date: Fri, 02 Jan 2026 05:19:05 GMT
Content-Length: 0
Connection: close
x-block-rule: not-jp
X-Cache: Error from cloudfront
Via: 1.1 6e6c4d5f1ea04df775c351cd792cccec.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: XaV2vkC4FA1_yXSBgeCF8q7PtvVGtIZZUPU3ifXPgzyvQD2FotbbCw==
    Found 2026-01-02 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · softies.com.au

    2026-01-01 19:17 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Thu, 01 Jan 2026 19:17:13 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://softies.com.au/
X-Cache: Redirect from cloudfront
Via: 1.1 3555148cb98f4a6b38702fc0b65f2ace.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: u1_8siqxuIQHoMZKnBmnbqQYL60VJgDvO6VfvdUlONYVKGHVMPkCxA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-01 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · softies.com.au

    2026-01-01 19:17 

    HTTP/1.1 308 Permanent Redirect
Transfer-Encoding: chunked
Connection: close
Date: Thu, 01 Jan 2026 19:17:14 GMT
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Set-Cookie: AWSALB=tuGVyglJ3wVveMoypV3BRRrJ/yhC725yI8/M+f7anYlJJot8JxKJ03KoyRLd1Q/W7vvWgQo62W8jJxm8ghafvbZcHAEfHSfse3NsheM1cf9VTbvv5no/OC884+C/; Expires=Thu, 08 Jan 2026 19:17:14 GMT; Path=/
Set-Cookie: AWSALBCORS=tuGVyglJ3wVveMoypV3BRRrJ/yhC725yI8/M+f7anYlJJot8JxKJ03KoyRLd1Q/W7vvWgQo62W8jJxm8ghafvbZcHAEfHSfse3NsheM1cf9VTbvv5no/OC884+C/; Expires=Thu, 08 Jan 2026 19:17:14 GMT; Path=/; SameSite=None
Location: http://www.softies.com.au/
X-Cache: Miss from cloudfront
Via: 1.1 01bfa2cb468985bd24126d7b3dbae26a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: y6CmGvLP1eTYygyjmiHuvhNQ5RZABzx4CfFTY5wRTLZ1seTJZai0YA==
    Found 2026-01-01 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · oqzslot.vip

    2026-01-01 17:46 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Thu, 01 Jan 2026 17:46:45 GMT
Content-Type: text/html
Content-Length: 986
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 909271198a8193608c0cc833172af082.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: zrRqjBRyhP2cfASO3_0L486GgP22NhP_TSfjYeSdbRgkVtP0Ysa0hA==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
The Amazon CloudFront distribution is configured to block access from your country.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: zrRqjBRyhP2cfASO3_0L486GgP22NhP_TSfjYeSdbRgkVtP0Ysa0hA==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-01 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · oqzslot.vip

    2026-01-01 17:46 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Thu, 01 Jan 2026 17:46:44 GMT
Content-Type: text/html
Content-Length: 986
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 b5db5add1c6cafa45f2f62d8ca89887e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: DUROwecUAzHe7NE8_oH5eQb_BKmG2NAJyfq4v95VlfG5kXnApGV0Nw==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
The Amazon CloudFront distribution is configured to block access from your country.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: DUROwecUAzHe7NE8_oH5eQb_BKmG2NAJyfq4v95VlfG5kXnApGV0Nw==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-01 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · megson.net

    2026-01-01 04:30 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Thu, 01 Jan 2026 04:30:33 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 0f2cc30066f82a3492113a7d3ebae254.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: MmS0CjLNfWFPjjgWOyeHdgrTIKwsorUDAOWV0_b1MkUhs38Bcr3xCg==
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: MmS0CjLNfWFPjjgWOyeHdgrTIKwsorUDAOWV0_b1MkUhs38Bcr3xCg==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2026-01-01 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · megson.net

    2026-01-01 04:30 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Thu, 01 Jan 2026 04:30:33 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://megson.net/
X-Cache: Redirect from cloudfront
Via: 1.1 def78bd9f6b4ff6109111fdb39be66f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 7Z9_ucDkK97lGWraMSLL2Qup9H_YVfdENbUQROxjHiEVbVI9F6I8xQ==
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-01 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · bizanalyst.in

    2026-01-01 00:16 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Thu, 01 Jan 2026 00:16:49 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://bizanalyst.in/
X-Cache: Redirect from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 4P_0QtfBg2FG8E0T1KnN8pEFtY0JINgmzRuIJOlpYtEVJXFiJfpK6Q==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2026-01-01 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · bizanalyst.in

    2026-01-01 00:16 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 166811
Connection: close
Last-Modified: Fri, 25 Jul 2025 06:50:17 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: q6nJ_aMIjZaqVADKXAex6A.8bkOT21AU
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 31 Dec 2025 07:01:42 GMT
ETag: "4e00a5abc17bac5a9ae4a651bb799206"
X-Cache: Hit from cloudfront
Via: 1.1 25ecafb130dcf586014e40cd7d2ba2fc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: nnSs4I34LViQ3bRbly07xLPzrSWQB55p0TP5DqQDFRbQK7cGV0Pkug==
Age: 62107

Page title: Tally Mobile App for Android iOS | Biz Analyst - Tally ERP9 / Prime on Mobile

<!DOCTYPE html>
<html>

<head>

	<link rel="dns-prefetch" href="https://cdnjs.cloudflare.com">
	<link rel="dns-prefetch" href="https://stackpath.bootstrapcdn.com">

	<!-- Global site tag (gtag.js) - Google Analytics -->
	<script async src="https://www.googletagmanager.com/gtag/js?id=G-E2Y69WMRH7"></script>

	<script>
		window.dataLayer = window.dataLayer || [];
		function gtag() { dataLayer.push(arguments); }
		gtag('js', new Date());
		gtag('config', 'G-E2Y69WMRH7');
		// Google Ads
		gtag('config', 'AW-871039551');
	</script>
	<!-- End Google Analytics -->

	<!-- Google Tag Manager -->
	<script>(function (w, d, s, l, i) {
			w[l] = w[l] || []; w[l].push({
				'gtm.start':
					new Date().getTime(), event: 'gtm.js'
			}); var f = d.getElementsByTagName(s)[0],
				j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src =
					'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f);
		})(window, document, 'script', 'dataLayer', 'GTM-5V22453');</script>
	<!-- End Google Tag Manager -->

	<!-- CleverTap -->
	<script type="text/javascript">
		var clevertap = { event: [], profile: [], account: [], onUserLogin: [], notifications: [], privacy: [] };
		clevertap.account.push({ "id": "R9K-KRZ-W74Z" });
		clevertap.privacy.push({ optOut: false }); //set the flag to true, if the user of the device opts out of sharing their data
		clevertap.privacy.push({ useIP: false }); //set the flag to true, if the user agrees to share their IP data
		(function () {
			var wzrk = document.createElement('script');
			wzrk.type = 'text/javascript';
			wzrk.async = true;
			wzrk.src = ('https:' == document.location.protocol ? 'https://d2r1yp2w7bby2u.cloudfront.net' : 'http://static.clevertap.com') + '/js/clevertap.min.js';
			var s = document.getElementsByTagName('script')[0];
			s.parentNode.insertBefore(wzrk, s);
		})();
	</script>
	<!-- End CleverTap -->

	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
	<!-- Meta, title, CSS, favicons, etc. -->
	<meta http-equiv="X-UA-Compatible" content="IE=edge">
	<meta name="viewport" content="width=device-width, initial-scale=1">
	<title>Tally Mobile App for Android iOS | Biz Analyst - Tally ERP9 / Prime on Mobile</title>
	<meta name="description"
		content="Biz Analyst Tally ERP 9 /Prime Mobile App allows you to access your Tally ERP 9 / Prime data on your android/ios mobile app in real time. Send invoice, outstanding, ledger report to your customers right from the app." />
	<meta name="keywords"
		content="tally,tally prime,tally erp 9,tally solutions,tally 9,tally erp,tally app,tally 9 erp,tally on mobile,tally for android,tally erp9 app,free tally download,tally in mobile,pocket tally,tally mobile application,tally mobile app,tally app download,tally application,tally app for android,tally for mobile,tally 9 app,tally erp 9 for android mobile,free tally app,tally 2 mobile,tally dashboard,tally android app,tally app for iphone,download tally app,tally accounting app,tally iphone app,mobile app for tally" />

	<!-- Chrome Theme Color -->
	<meta name="theme-color" content="#0094ff">

	<!-- Open graph / FB meta -->
	<meta property="fb:app_id" content="1855967954619844" />
	<meta property="og:url" content="https://bizanalyst.in" />
	<meta property="og:type" content="website" />
	<meta property="og:title" content="Tally Mobile App for Android iOS | Biz Analyst - Tally ERP9 / Prime on Mobile" />
	<meta property="og:description"
		content="Biz Analyst Tally Mobile App allows you to access your Tally ERP 9 / Prime data on your android/ios mobile app in real time. Send invoice, outstanding, ledger report to your customers right from the app." />
	<meta property="og:locale" content="en_IN" />
	<meta property="og:site_name" content="Biz Analyst" />
	<meta property="og:image" content="https://cdn.bizanalyst.in/assets/img/mini-features/dashboard-android.png" />
	<meta property="og:image:secure_url"
		content="https://cdn.bizanalyst.in/assets/img/mini-features/dashboard-android.png" />
	<meta property="og:image:type" content="image/png"
    Found 2026-01-01 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · sibsnailsstockport.co.uk

    2025-12-31 18:32 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 31 Dec 2025 18:32:23 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://sibsnailsstockport.co.uk/
X-Cache: Redirect from cloudfront
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: xzyApV6FOjS5nPbmOmpaR7NdiiksOsCWrlYdFgiakeACmiDk2-X66A==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2025-12-31 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · sibsnailsstockport.co.uk

    2025-12-31 18:32 

    HTTP/1.1 302 Moved Temporarily
Content-Length: 0
Connection: close
Date: Wed, 31 Dec 2025 18:32:23 GMT
Location: https://www.sibsnailsstockport.co.uk/
X-Cache: Miss from cloudfront
Via: 1.1 25ecafb130dcf586014e40cd7d2ba2fc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: dMkT1yyzMIS9NHiA8ZjOt-3tdVxYZ5EiJKJAEm4nrKSPT5TfgdDbNA==
    Found 2025-12-31 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · pruicover.com

    2025-12-31 12:47 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 35768
Connection: close
Date: Wed, 31 Dec 2025 06:42:20 GMT
Last-Modified: Thu, 13 Mar 2025 02:33:17 GMT
ETag: "0f9444db2b1161927e44aa71d08a9aae"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 23e907ff6b79ce55a7f547e682506202.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Ix5UHSgQZBiAD4mgpi3XheIJbjaayQrjFrVOS2omXtevQif4GSRk_g==
Age: 21893
Strict-Transport-Security: max-age=7776000

Page title: Prudential

<!DOCTYPE html>
<html lang="en" data-critters-container>

<head><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
  <title>Prudential</title>
  <base href="/">

  <meta name="viewport" content="width=device-width, initial-scale=1">
  <link rel="icon" type="image/x-icon" href="favicon.ico">

  <style>@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2) format('woff2');unicode-range:U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2) format('woff2');unicode-range:U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2) format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2) format('woff2');unicode-range:U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2) format('woff2');unicode-range:U+0302-0303, U+0305, U+0307-0308, U+0310, U+0312, U+0315, U+031A, U+0326-0327, U+032C, U+032F-0330, U+0332-0333, U+0338, U+033A, U+0346, U+034D, U+0391-03A1, U+03A3-03A9, U+03B1-03C9, U+03D1, U+03D5-03D6, U+03F0-03F1, U+03F4-03F5, U+2016-2017, U+2034-2038, U+203C, U+2040, U+2043, U+2047, U+2050, U+2057, U+205F, U+2070-2071, U+2074-208E, U+2090-209C, U+20D0-20DC, U+20E1, U+20E5-20EF, U+2100-2112, U+2114-2115, U+2117-2121, U+2123-214F, U+2190, U+2192, U+2194-21AE, U+21B0-21E5, U+21F1-21F2, U+21F4-2211, U+2213-2214, U+2216-22FF, U+2308-230B, U+2310, U+2319, U+231C-2321, U+2336-237A, U+237C, U+2395, U+239B-23B7, U+23D0, U+23DC-23E1, U+2474-2475, U+25AF, U+25B3, U+25B7, U+25BD, U+25C1, U+25CA, U+25CC, U+25FB, U+266D-266F, U+27C0-27FF, U+2900-2AFF, U+2B0E-2B11, U+2B30-2B4C, U+2BFE, U+3030, U+FF5B, U+FF5D, U+1D400-1D7FF, U+1EE00-1EEFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2) format('woff2');unicode-range:U+0001-000C, U+000E-001F, U+007F-009F, U+20DD-20E0, U+20E2-20E4, U+2150-218F, U+2190, U+2192, U+2194-2199, U+21AF, U+21E6-21F0, U+21F3, U+2218-2219, U+2299, U+22C4-22C6, U+2300-243F, U+2440-244A, U+2460-24FF, U+25A0-27BF, U+2800-28FF, U+2921-2922, U+2981, U+29BF, U+29EB, U+2B00-2BFF, U+4DC0-4DFF, U+FFF9-FFFB, U+10140-1018E, U+10190-1019C, U+101A0, U+101D0-101FD, U+102E0-102FB, U+10E60-10E7E, U+1D2C0-1D2D3, U+1D2E0-1D37F, U+1F000-1F0FF, U+1F100-1F1AD, U+1F1E6-1F1FF, U+1F30D-1F30F, U+1F315, U+1F31C, U+1F31E, U+1F320-1F32C, U+1F336, U+1F378, U+1F37D, U+1F382, U+1F393-1F39F, U+1F3A7-1F3A8, U+1F3AC-1F3AF, U+1F3C2, U+1F3C4-1F3C6, U+1F3CA-1F3CE, U+1F3D4-1F3E0, U+1F3ED, U+1F3F1-1F3F3, U+1F3F5-1F3F7, U+1F408, U+1F415, U+1F41F, U+1F426, U+1F43F, U+1F441-1F442, U+1F444, U+1F446-1F449, U+1F44C-1F44E, U+1F453, U+1F46A, U+1F47D, U+1F4A3, U+1F4B0, U+1F4B3, U+1F4B9, U+1F4BB, U+1F4BF, U+1F4C8-1F4CB, U+1F4D6, U+1F4DA, U+1F4DF, U+1F4E3-1F4E6, U+1F4EA-1F4ED, U+1F4F7, U+1F4F9-1F4FB, U+1F4FD-1F4FE, U+1F503, U+1F507-1F50B, U+1F50D, U+1F512-1F513, U+1F53E-1F54A, U+1F54F-1F5FA, U+1F610, U+1F650-1F67F, U+1F687, U+1F68D, U+1F691, U+1F694, U+1F698, U+1F6AD, U+1F6B2, U+1F6B9-1F6BA, U+1F6BC, U+1F6C6-1F6CF, U+1F6D3-1F6D7, U+1F6E0-1F6EA, U+1F6F0-1F6F3, U+1F6F7-1F6FC, U+1F700-1F7FF, U+1F800-1F80B, U+1F810-1F847, U+1F850-1F859, U+1F860-1F887, U+1F890-1F8AD, U+1F8B0-1F8BB
    Found 2025-12-31 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · pruicover.com

    2025-12-31 12:47 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 35768
Connection: close
Date: Wed, 31 Dec 2025 06:42:20 GMT
Last-Modified: Thu, 13 Mar 2025 02:33:17 GMT
ETag: "0f9444db2b1161927e44aa71d08a9aae"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 01bfa2cb468985bd24126d7b3dbae26a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: rZWeqZuJU7NLs-heodtlvOoVwvNhHsLaD2_ocXUWnjtgUH76byTTGA==
Age: 21892

Page title: Prudential

<!DOCTYPE html>
<html lang="en" data-critters-container>

<head><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
  <title>Prudential</title>
  <base href="/">

  <meta name="viewport" content="width=device-width, initial-scale=1">
  <link rel="icon" type="image/x-icon" href="favicon.ico">

  <style>@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2) format('woff2');unicode-range:U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2) format('woff2');unicode-range:U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2) format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2) format('woff2');unicode-range:U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2) format('woff2');unicode-range:U+0302-0303, U+0305, U+0307-0308, U+0310, U+0312, U+0315, U+031A, U+0326-0327, U+032C, U+032F-0330, U+0332-0333, U+0338, U+033A, U+0346, U+034D, U+0391-03A1, U+03A3-03A9, U+03B1-03C9, U+03D1, U+03D5-03D6, U+03F0-03F1, U+03F4-03F5, U+2016-2017, U+2034-2038, U+203C, U+2040, U+2043, U+2047, U+2050, U+2057, U+205F, U+2070-2071, U+2074-208E, U+2090-209C, U+20D0-20DC, U+20E1, U+20E5-20EF, U+2100-2112, U+2114-2115, U+2117-2121, U+2123-214F, U+2190, U+2192, U+2194-21AE, U+21B0-21E5, U+21F1-21F2, U+21F4-2211, U+2213-2214, U+2216-22FF, U+2308-230B, U+2310, U+2319, U+231C-2321, U+2336-237A, U+237C, U+2395, U+239B-23B7, U+23D0, U+23DC-23E1, U+2474-2475, U+25AF, U+25B3, U+25B7, U+25BD, U+25C1, U+25CA, U+25CC, U+25FB, U+266D-266F, U+27C0-27FF, U+2900-2AFF, U+2B0E-2B11, U+2B30-2B4C, U+2BFE, U+3030, U+FF5B, U+FF5D, U+1D400-1D7FF, U+1EE00-1EEFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:300;font-stretch:100%;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2) format('woff2');unicode-range:U+0001-000C, U+000E-001F, U+007F-009F, U+20DD-20E0, U+20E2-20E4, U+2150-218F, U+2190, U+2192, U+2194-2199, U+21AF, U+21E6-21F0, U+21F3, U+2218-2219, U+2299, U+22C4-22C6, U+2300-243F, U+2440-244A, U+2460-24FF, U+25A0-27BF, U+2800-28FF, U+2921-2922, U+2981, U+29BF, U+29EB, U+2B00-2BFF, U+4DC0-4DFF, U+FFF9-FFFB, U+10140-1018E, U+10190-1019C, U+101A0, U+101D0-101FD, U+102E0-102FB, U+10E60-10E7E, U+1D2C0-1D2D3, U+1D2E0-1D37F, U+1F000-1F0FF, U+1F100-1F1AD, U+1F1E6-1F1FF, U+1F30D-1F30F, U+1F315, U+1F31C, U+1F31E, U+1F320-1F32C, U+1F336, U+1F378, U+1F37D, U+1F382, U+1F393-1F39F, U+1F3A7-1F3A8, U+1F3AC-1F3AF, U+1F3C2, U+1F3C4-1F3C6, U+1F3CA-1F3CE, U+1F3D4-1F3E0, U+1F3ED, U+1F3F1-1F3F3, U+1F3F5-1F3F7, U+1F408, U+1F415, U+1F41F, U+1F426, U+1F43F, U+1F441-1F442, U+1F444, U+1F446-1F449, U+1F44C-1F44E, U+1F453, U+1F46A, U+1F47D, U+1F4A3, U+1F4B0, U+1F4B3, U+1F4B9, U+1F4BB, U+1F4BF, U+1F4C8-1F4CB, U+1F4D6, U+1F4DA, U+1F4DF, U+1F4E3-1F4E6, U+1F4EA-1F4ED, U+1F4F7, U+1F4F9-1F4FB, U+1F4FD-1F4FE, U+1F503, U+1F507-1F50B, U+1F50D, U+1F512-1F513, U+1F53E-1F54A, U+1F54F-1F5FA, U+1F610, U+1F650-1F67F, U+1F687, U+1F68D, U+1F691, U+1F694, U+1F698, U+1F6AD, U+1F6B2, U+1F6B9-1F6BA, U+1F6BC, U+1F6C6-1F6CF, U+1F6D3-1F6D7, U+1F6E0-1F6EA, U+1F6F0-1F6F3, U+1F6F7-1F6FC, U+1F700-1F7FF, U+1F800-1F80B, U+1F810-1F847, U+1F850-1F859, U+1F860-1F887, U+1F890-1F8AD, U+1F8B0-1F8BB
    Found 2025-12-31 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · max777gaming.com

    2025-12-31 12:14 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 31 Dec 2025 12:14:54 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://max777gaming.com/
X-Cache: Redirect from cloudfront
Via: 1.1 01bfa2cb468985bd24126d7b3dbae26a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: K6vrq2AN6Nl48uMaVzDr0GmnhEB-9_P4ObG0Zrghg0E7BZCxnDdE3w==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2025-12-31 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · max777gaming.com

    2025-12-31 12:14 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Wed, 31 Dec 2025 12:14:54 GMT
Content-Type: text/html
Content-Length: 919
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 b608ed0f3426ba08cff51718fbecc028.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: sphl9upNM8csgavddJAJrGLKV7sY-lxEE9sc1QkHWIYV4DgGYOeR6w==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Request blocked.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: sphl9upNM8csgavddJAJrGLKV7sY-lxEE9sc1QkHWIYV4DgGYOeR6w==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2025-12-31 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · paperbacks.co.nz

    2025-12-24 01:08 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 24 Dec 2025 01:08:36 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://paperbacks.co.nz/
X-Cache: Redirect from cloudfront
Via: 1.1 01bfa2cb468985bd24126d7b3dbae26a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Yx5qK5pexyX8gbcEddg4swoM3ut9tBplezgmYQ5LAiWqaGi7USG2xA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2025-12-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · paperbacks.co.nz

    2025-12-24 01:08 

    HTTP/1.1 308 Permanent Redirect
Transfer-Encoding: chunked
Connection: close
Date: Wed, 24 Dec 2025 01:08:36 GMT
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Set-Cookie: AWSALB=46LYVJKqzWos3KO6aERrZUGuPpMmqJaWGWmeYydQjiC63lQhOFK/oaCKHbcWVNZUIXgE/0e6Qf9e637M9QxWD/cetV9Q+naoV5pItmPiROZ5kihYBAgd2IZDCJs/; Expires=Wed, 31 Dec 2025 01:08:36 GMT; Path=/
Set-Cookie: AWSALBCORS=46LYVJKqzWos3KO6aERrZUGuPpMmqJaWGWmeYydQjiC63lQhOFK/oaCKHbcWVNZUIXgE/0e6Qf9e637M9QxWD/cetV9Q+naoV5pItmPiROZ5kihYBAgd2IZDCJs/; Expires=Wed, 31 Dec 2025 01:08:36 GMT; Path=/; SameSite=None
Location: http://www.paperbacks.co.nz/
X-Cache: Miss from cloudfront
Via: 1.1 f21aebe726db54f921ea6610dfe923ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: GCb3AMqmFpPOPg90oLc8h3tKuwyE1uYY50M1nhK_FxQ7rI5ShGQcWQ==
    Found 2025-12-24 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · sukownart.com

    2025-12-23 11:28 

    HTTP/1.1 404 Not Found
Server: CloudFront
Date: Tue, 23 Dec 2025 11:28:22 GMT
Content-Length: 0
Connection: close
x-block-rule: not-jp
X-Cache: Error from cloudfront
Via: 1.1 7aa3bfb1af156515af943236e80f9b56.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: mX3a7EnldKd5UkHcFOCGW8xIaBmbhlQLL8HzPbDdOkSK0OmLrlZkJg==
    Found 2025-12-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · sukownart.com

    2025-12-23 11:28 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 23 Dec 2025 11:28:22 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://sukownart.com/
X-Cache: Redirect from cloudfront
Via: 1.1 733dda36f703f66d7e387b2e9c7820ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Yd98rmHd0o514_hJ2uWrxETgPsydRQCYWYAeaYjW8WfqaBGzkR1q5Q==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2025-12-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · severinegoffettre.fr

    2025-12-23 00:34 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 23 Dec 2025 00:34:52 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://severinegoffettre.fr/
X-Cache: Redirect from cloudfront
Via: 1.1 adbe45cb4997e6da65586fdd3a19215e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: bEt5zeB00uo8AauJcnk20zdRCWGTfbzkdStXCxhiYWEP9yFQrcKuPA==

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2025-12-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · severinegoffettre.fr

    2025-12-23 00:34 

    HTTP/1.1 301 Redirecting
Server: CloudFront
Date: Tue, 23 Dec 2025 00:34:52 GMT
Content-Length: 0
Connection: close
Location: https://www.severinegoffettre.fr/
X-Cache: FunctionGeneratedResponse from cloudfront
Via: 1.1 95f719856b35c3a7e9bc14f3202145a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Z_muj8SKIJa9iSgjyilVOTrJt6Rh3Z7nTsE3VSK13PuOBgyKmcXv0w==
    Found 2025-12-23 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · yonopayapi.com

    2025-12-22 21:00 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Mon, 22 Dec 2025 21:00:53 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 08b582540a4dee761b8329b525bb41f2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: BWC5xd57f7tpHu0nAGZ4nOlbBhEac8jDsSe_5xb3s5tjGzenY_vmoA==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: BWC5xd57f7tpHu0nAGZ4nOlbBhEac8jDsSe_5xb3s5tjGzenY_vmoA==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · yonopayapi.com

    2025-12-22 21:00 

    HTTP/1.1 400 Bad Request
Server: CloudFront
Date: Mon, 22 Dec 2025 21:00:54 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 f21aebe726db54f921ea6610dfe923ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 5nmSf2wZrIi2JycQOzk-dWqyDKTW4GAeUikD613n7zd5TiJJlt8aBg==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>400 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: 5nmSf2wZrIi2JycQOzk-dWqyDKTW4GAeUikD613n7zd5TiJJlt8aBg==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · gunturkarampodi.com

    2025-12-22 15:34 

    HTTP/1.1 400 Bad Request
Server: CloudFront
Date: Mon, 22 Dec 2025 15:34:12 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 b608ed0f3426ba08cff51718fbecc028.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: HEoIQjo8niRtgYNZjRcBFHGXDKFZSJj3eqcHCNymU7Un7-o5qyzMAQ==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>400 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: HEoIQjo8niRtgYNZjRcBFHGXDKFZSJj3eqcHCNymU7Un7-o5qyzMAQ==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · gunturkarampodi.com

    2025-12-22 15:34 

    HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Mon, 22 Dec 2025 15:34:13 GMT
Content-Type: text/html
Content-Length: 915
Connection: close
X-Cache: Error from cloudfront
Via: 1.1 f21aebe726db54f921ea6610dfe923ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: HF6_v802eKInt967ZaSAOX4AUI5CXKbjYYjgoB27BCr6n2tqFjRFgQ==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>403 ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
Bad request.
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront)
Request ID: HF6_v802eKInt967ZaSAOX4AUI5CXKbjYYjgoB27BCr6n2tqFjRFgQ==
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · mangoopaybox.com

    2025-12-22 12:30 

    HTTP/1.1 504 Gateway Timeout
Content-Type: text/html
Content-Length: 941
Connection: close
date: Mon, 22 Dec 2025 12:30:13 GMT
X-Cache: Error from cloudfront
Via: 1.1 b5db5add1c6cafa45f2f62d8ca89887e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: YoWGatCVebDfw93IrgMIlIymRJF2COaSop_jc8uMOAerpeSvYG-8eg==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>504 Gateway Timeout ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront) HTTP3 Server
Request ID: mypwTCgw7l9NebusomiVIMbMV76UY9GyqcopvCK5thzC_4rw5JQ3Tg&#x3D;&#x3D;
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · mangoopaybox.com

    2025-12-22 12:30 

    HTTP/1.1 504 Gateway Timeout
Content-Type: text/html
Content-Length: 941
Connection: close
date: Mon, 22 Dec 2025 12:30:12 GMT
X-Cache: Error from cloudfront
Via: 1.1 f21aebe726db54f921ea6610dfe923ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Sl2y7HP9k2J2P9hp1wbc_lG1b72qsIm60uMTjJZ8qi54AlWIvdnQTA==

Page title: ERROR: The request could not be satisfied

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>ERROR: The request could not be satisfied</TITLE>
</HEAD><BODY>
<H1>504 Gateway Timeout ERROR</H1>
<H2>The request could not be satisfied.</H2>
<HR noshade size="1px">
We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
<BR clear="all">
If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
<BR clear="all">
<HR noshade size="1px">
<PRE>
Generated by cloudfront (CloudFront) HTTP3 Server
Request ID: Ln_bxnVRF6kLVp6kesY0PTvIhbTw_Y5HGp8rmNz9ushb-ZQnUzVROg&#x3D;&#x3D;
</PRE>
<ADDRESS>
</ADDRESS>
</BODY></HTML>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.swssandbox.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 25ecafb130dcf586014e40cd7d2ba2fc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: niFJgllPDvPAwgnt_unWv_jd-6dzhmvlTRgrxpi47ZJ5tEDF5B18ZA==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.bntsandbox.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 95f719856b35c3a7e9bc14f3202145a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: ncULVuk_JpqYelSM3QfUtZ8Sq-x_ok6KIkzO3ygZkH9up3SVM-gWpQ==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.swssandbox.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 b5db5add1c6cafa45f2f62d8ca89887e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: _ItlnDgbkHpS89Xtfjnj_ucN3Tz7-7bPoTC0EqR5wi8GBxfVgfbtag==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.galdermasbx.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 bab0321b4bf0fd055bdfb0282cee7346.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: __arAGIy7ehSSkQJuuxSSPAsCo8BPQypnu3jTU2P873Sac95FYf9dw==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.gileadsandbox.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: yLl8LUDRZ_C1jxJQq0u5_q7dZ5bzbCq3N81xJARJ10BA8zaMfZ3jjQ==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.mercksandbox.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Dpyzs_YbdWQ6Hl2tdEuVchnlowQA7xxYP_UKvTO3NuoNmzzHe89gcA==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.bntsandbox.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 5a7aeff2d396b9667469b83aa6741fca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: yF9pnFAC04_JxrtLcP5jB2DJ4ZmGnT4ScGzpsvhOjUlr76O10CCHmw==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.k1sbx.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 bab0321b4bf0fd055bdfb0282cee7346.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: nuxQQOP2oephul_U9aIMlk324c6591lS22EwkCzc4Tw7otiovs3A4g==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.otsuka.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 95f719856b35c3a7e9bc14f3202145a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: CsTMy8AGCExB7RAWAszO5AUki3I_um1SBdUdseXiflJ6opwxX6f7_w==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.gileadval.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 3555148cb98f4a6b38702fc0b65f2ace.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: ehKxeE27oCtWYQsnBDOUyKgTe8mp8uQ87XMx4eV6ZYw5pXg5R3Ck9g==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.gileadsqa.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 c20b1585cc14f7313af71d342a8c81a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: FqBxVpWygBPMTcUD_NZRObGlgLMFp-voK91bfdabuiLJzhbvCS7Lgg==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.otsuka.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 bab0321b4bf0fd055bdfb0282cee7346.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: s-RXuIkW4i82TN_C4p2VyphkG0KIQdAI4_aJEDcVTSAcQNAFtKneOw==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.labelopssbx.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 bab0321b4bf0fd055bdfb0282cee7346.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: HdD7gz63vEOCtggN7svsEoh5r1PydYYBJ39jq7dOC9yeYeBTit3ySQ==
Age: 1081
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.otsukasandbox.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 25ecafb130dcf586014e40cd7d2ba2fc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 7MpNW4aVfkMO2hEAgJU5Qm7MDSERaej6QY3ydzHV5NS8w_yM-Rnukg==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.gilead.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 def78bd9f6b4ff6109111fdb39be66f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Kg6mAryyjK1Xe-xRDqAF9kae5ShQ5pRsdMMjWqk5jxWynoPXCOeqYg==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.galdermasbx.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 3fe1b65a21db2155ab695e76b3fc80ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: zKAcCcyDFc1tqKorrxz1y1YToMPX2SXnld02RufFWP8cNvAntoL3YA==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.takedasandbox.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 adbe45cb4997e6da65586fdd3a19215e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: szrc03br-4UuXjXat5snNXJfjDcK0B_s43uJjCNGaqBzkN7xT0f-dQ==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.otsukasandbox.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 6e6c4d5f1ea04df775c351cd792cccec.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: TFrFzyaOyyNyjCwbnt6XumC5lHzTm5B-O2ualfoVQA_UBx9hzOq6lg==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.gileaduat.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 0aa7f1d7fec8d7f1a865e80c7680d324.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: PWkGugfWzbFNw_9BGcc67jhF233dTMaQzjmAhaMH7aiEIFfzzGf08w==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.gilead.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 5a7aeff2d396b9667469b83aa6741fca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: _hNGnFcv7jnm1kkQVBV93HctQCeubKtzPQjd6KLAcPns_btqys329g==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.gileadsqa.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 b5db5add1c6cafa45f2f62d8ca89887e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: cOmWHxiLMycle_XZ1IGzfILvEhBU0riRczX9M4izHY6FknDZmefEyg==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.galdermacmg.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 9ea6b2381e0606355b2273f70ed5f416.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Vs8s49xNFklNaRjHnwaEGvRyK1v_zjUFSx6pyBb602Nlvj4y5UR1wQ==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.galdermacmg.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 23e907ff6b79ce55a7f547e682506202.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: Jv3fYrL-wpnGA2CEcfzkf_cvHIlCukzqVMHDjoVaYCY9ocCP79oJbg==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.gileaduat.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 f21aebe726db54f921ea6610dfe923ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 6PJA1K0us-lYOsY6KGh4uZ3V6qEy9Li82QyMuQihU6OwTJ9klf9NJw==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.kenvue.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 23e907ff6b79ce55a7f547e682506202.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 4Jbkmhn_iu9YM1CG4eegoTEs9hcvmEC_N6aROs3SpTkAD-0_0SnK9Q==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.olympustraining.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 c20b1585cc14f7313af71d342a8c81a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 1YCCqkqAMYyWQHNDoUh1L4o5yzuCOv0iQAMMpFaJtSTIc6N3c6p5MA==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.labelopssbx.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 4d5132e5755012bda91181d6b8bbfe24.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: lYmqSQs-sUmpuajJ_QmYgGzcvzlti8FOy4GwGs8pp6nb1OhYqEADcg==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.t1sbx.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 25ecafb130dcf586014e40cd7d2ba2fc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 1bGz5N5XZhK6BAB5r2YJ2t1d8hvvTgxWWSs5EO1CfUZgwtLkvZAatw==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.kenvue.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 0f2cc30066f82a3492113a7d3ebae254.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: AIHnvvXtyTmZSOeoLuuzgeNV8BZsvMhVyPdUOnwcx5DvlwjYLfCKWg==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.takedasandbox.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 f36a38ac79be129276a50d303bcc189a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: IvBQ9OMsoPDNLqWXqgiOjSwvc8F0XvoQHXGSjFfJolLC6ZT1zCrXMg==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.gileadsandbox.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 0aa7f1d7fec8d7f1a865e80c7680d324.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: m-U6hPAjv4XlaJ1odh3H3zIKITS8nZkr9NOusfZhheNSXI3AEBo_rg==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.gileadval.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 46f339c21ed78b531c3c65cde3e4ddfe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: I7jQ5iSJTenKVwTTcCPD1AwyRJBSoCQxMZ8rl1qRAZTdSKPcTKtpdg==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.t1sbx.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 909271198a8193608c0cc833172af082.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: f2bWn488x9dJDf4WM3THmd4qH0fyBpil32yDs1N5EI1Opl7jA6jRBg==
Age: 1080
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.k1sbx.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 733dda36f703f66d7e387b2e9c7820ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: cKA29SVTiYlrKQ7HB8xBonM5DMGrUz5nAAyb2AMWSCkDvL0ipwEpkA==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.mercksandbox.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 f21aebe726db54f921ea6610dfe923ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: d_gtlz9jijyi2t1YfYpqWT1JMAAXK2xhxOvIgJb0tGBB9Edw9ul09g==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.olympustraining.freyafusion.com

    2025-12-22 12:24 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 b5db5add1c6cafa45f2f62d8ca89887e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: oKae4kpLaLLjqSqjKmS0RgjmJHG--MD03CPV3-CpV5QcAp_YTn74HQ==
Age: 1079
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · ac.freyafusion.com

    2025-12-22 12:06 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 0aa7f1d7fec8d7f1a865e80c7680d324.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: FO5Otq8AGfRq4gS87WOPMRgWIpegMWQONCXpbKryokI-ojaIo6tvcQ==
Age: 1
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · ac.freyafusion.com

    2025-12-22 12:06 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1181
Connection: close
Last-Modified: Wed, 10 Dec 2025 02:28:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: VaMCSiFciUAPU_gLYsTCYUvmP4EQZPZs
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 12:07:00 GMT
ETag: "4138e0b01780e8ea0ccf3a13d78da9d7"
X-Cache: Error from cloudfront
Via: 1.1 3555148cb98f4a6b38702fc0b65f2ace.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: QHMjf-WzcL9Kuq23uu_TbaQFg8ZwTOp8PKAUugy9FW2svdxeVqe4BQ==
Cache-Control: no-cache
expire: 0

Page title: Freya Fusion

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.svg"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Your AI First Regulatory Solutions by Freyr"/><meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate"/><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="0"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="preconnect" href="https://design.freyafusion.com" crossorigin/><link rel="dns-prefetch" href="https://design.freyafusion.com"/><link rel="preload" href="https://design.freyafusion.com/design/designsystem.css" as="style" onload='this.onload=null,this.rel="stylesheet"'/><noscript><link rel="stylesheet" href="https://design.freyafusion.com/design/designsystem.css"/></noscript><title>Freya Fusion</title><script defer="defer" src="/static/js/main.1fd460fc.js"></script><link href="/static/css/main.876a2b3b.css" rel="stylesheet"></head><body class="freya-fusion"><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · fero-group.prod.aws.phronesys.eu

    2025-12-22 10:44 

    HTTP/1.1 503 Service Temporarily Unavailable
Content-Type: text/html
Content-Length: 190
Connection: close
Date: Mon, 22 Dec 2025 10:44:29 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Cache: Error from cloudfront
Via: 1.1 46f339c21ed78b531c3c65cde3e4ddfe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: jXdBHpCdaEnw45fbHibDDfXHoZjtV9eLdL8Iokf6mz6nuhgu2hrDDQ==
X-API-Version: v4
X-Min-App-Version: v0

Page title: 503 Service Temporarily Unavailable

<html>
<head><title>503 Service Temporarily Unavailable</title></head>
<body>
<center><h1>503 Service Temporarily Unavailable</h1></center>
<hr><center>nginx</center>
</body>
</html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · fero-group.prod.aws.phronesys.eu

    2025-12-22 10:44 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 10:44:29 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://fero-group.prod.aws.phronesys.eu/
X-Cache: Redirect from cloudfront
Via: 1.1 7aa3bfb1af156515af943236e80f9b56.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: BZLHdvcO4DtgCBX66NyGa2qTf4M7uRjcACYIXCqKA1z1u-ld_Qt9pw==
X-API-Version: v4
X-Min-App-Version: v0

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · fero-group.phronesys.eu

    2025-12-22 10:44 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 10:44:29 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://fero-group.phronesys.eu/
X-Cache: Redirect from cloudfront
Via: 1.1 6e6c4d5f1ea04df775c351cd792cccec.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: FaOrMPbmw7irncEwD-wYo6asmA3P7b96jHdq-AY8vK85rqto92ycjA==
X-API-Version: v4
X-Min-App-Version: v0

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · lineatrovata.phronesys.eu

    2025-12-22 10:39 

    HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Mon, 22 Dec 2025 10:39:08 GMT
X-RateLimit-Reset: 1766400007
Strict-Transport-Security: max-age=31536000; includeSubDomains
server-timing: intid;desc=cac7b4a99d989082
Set-Cookie: PHPSESSID=5tbn81r0ojl3bgb2jk73pcps0g; expires=Mon, 22 Dec 2025 22:39:08 GMT; Max-Age=43200; path=/; HttpOnly; SameSite=Lax
Set-Cookie: csrfToken=ffhBd76Xm6rgREDXllybGjc5MzZmNjVlMDY5MjBjYzZjMTJmYjUxYjliNjkzZGM3MmNjNzk0ZjM%3D; path=/; HttpOnly; SameSite=Strict
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: /login?redirect=%2F
X-RateLimit-Limit: 500
X-RateLimit-Remaining: 494
X-Cache: Miss from cloudfront
Via: 1.1 733dda36f703f66d7e387b2e9c7820ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: D4VNjqjZ5DLF8jmq7bpOHRCrAlBVT_ETJbHrvHmk-YyW2VOu2FFJNw==
X-API-Version: v4
X-Min-App-Version: v0
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · lineatrovata.phronesys.eu

    2025-12-22 10:39 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 10:39:08 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://lineatrovata.phronesys.eu/
X-Cache: Redirect from cloudfront
Via: 1.1 25ecafb130dcf586014e40cd7d2ba2fc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 5Lv7y_hCyoWRKYNQ8vxcvMwOEI0lGWfLF1aaasMTr13v7-nKyHNBDg==
X-API-Version: v4
X-Min-App-Version: v0

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · lineatrovata.prod.aws.phronesys.eu

    2025-12-22 10:39 

    HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 22 Dec 2025 10:39:08 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://lineatrovata.prod.aws.phronesys.eu/
X-Cache: Redirect from cloudfront
Via: 1.1 23e907ff6b79ce55a7f547e682506202.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: 7AkcnEw-uOLW2cUMh8PrG11oM7WqypNmc8B1LRzxIMwmC9ALtBdWqg==
X-API-Version: v4
X-Min-App-Version: v0

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>CloudFront</center>
</body>
</html>
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · lineatrovata.prod.aws.phronesys.eu

    2025-12-22 10:39 

    HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Date: Mon, 22 Dec 2025 10:39:07 GMT
X-RateLimit-Reset: 1766400007
Strict-Transport-Security: max-age=31536000; includeSubDomains
server-timing: intid;desc=3292ded98875b690
Set-Cookie: PHPSESSID=3jpiledinsmcd0is7amsung5b0; expires=Mon, 22 Dec 2025 22:39:07 GMT; Max-Age=43200; path=/; HttpOnly; SameSite=Lax
Set-Cookie: csrfToken=A5YxWPpNLo%2B14SUIztQu3GViOTJjNzJmMmU1MDk3NWE2OTdkYWM3ZTdjNDIwYTY4MjBhZGE1NDQ%3D; path=/; HttpOnly; SameSite=Strict
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: /login?redirect=%2F
X-RateLimit-Limit: 500
X-RateLimit-Remaining: 498
X-Cache: Miss from cloudfront
Via: 1.1 b5db5add1c6cafa45f2f62d8ca89887e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: _hIBMu-s7ZxvV7tUpbHGD4LpZYwDUxuY9WfcqnVPNCqf6SDXuhMWaw==
X-API-Version: v4
X-Min-App-Version: v0
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:443 · goldenbunnyslots.com

    2025-12-22 06:31 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 7234
Connection: close
Last-Modified: Tue, 30 Sep 2025 08:59:55 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 06:31:02 GMT
ETag: "ce432522bd843c4b6d316b341297164d"
X-Cache: Hit from cloudfront
Via: 1.1 adbe45cb4997e6da65586fdd3a19215e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: z5vrxGThel21f5a6lrElGxNKukK-QZL48pczJ9QX7VCUDCJ5aF4Pcw==

Page title: Golden Bunny Slots

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>Golden Bunny Slots</title>
  <script>
    function setFontSize(designWidth, minWidth, maxWidth) {
      var htmlEl = document.documentElement,
        momentWith = 0;
      momentWith = htmlEl.clientWidth > maxWidth ? maxWidth : htmlEl.clientWidth;
      momentWith = momentWith < minWidth ? minWidth : momentWith;
      htmlEl.style.fontSize = (momentWith / designWidth) * 100 + 'px';
    }
    setFontSize(1920, 1300, 1920);
    window.addEventListener('resize', function () {
      setTimeout(function () {
        if (document.getElementById('root')) {
          if (window.innerWidth > window.innerHeight) {
            document.getElementById('root').className = 'root landscape';
          } else {
            document.getElementById('root').className = 'root portrait';
          }
        }
        setFontSize(1920, 1300, 1920);
      }, 300);
    });


  </script>

<link href="/css/index.css" rel="stylesheet"></head>

<body>
  <div class="btn-wrap">
    <a href="/" class="item">Home</a>
    <a href="https://docs.google.com/document/d/17lcfdBQYl-ZnF8_5HjRRqi1WB6jIwc8j6ozXtwKyqD0/edit?usp=sharing" target="_blank" class="item">Privacy Policy</a>
    <a href="https://docs.google.com/document/d/196jD6se2DYnpmWVV_f69uV6xmf0zKXZBWVK5tabPYO0/edit?usp=sharing" class="item" target="_blank">Terms of Service</a>
    <a href="mailto:maiconrmartins666@gmail.com" class="item">Support</a>
  </div>
  <div class="img-box" id="nav1">
    <img src="/image/1551.png" alt="" class="img">
    <a class="google-btn" href="https://play.google.com/store/apps/details?id=com.goldenbunnyslots.guqinog" target="_blank">
        <img src="data:image/png;base64,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
    Found 2025-12-22 by HttpPlugin
    Create report

  • Open service 65.9.175.70:80 · goldenbunnyslots.com

    2025-12-22 06:31 

    HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 7234
Connection: close
Last-Modified: Tue, 30 Sep 2025 08:59:55 GMT
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 22 Dec 2025 06:31:02 GMT
ETag: "ce432522bd843c4b6d316b341297164d"
X-Cache: Hit from cloudfront
Via: 1.1 01bfa2cb468985bd24126d7b3dbae26a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: FRA60-P14
X-Amz-Cf-Id: ZS0ap38J1UKFdKIubhldVrjXfzZ0w0oqePd8FNaLDcpB3ia-flcBGg==

Page title: Golden Bunny Slots

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>Golden Bunny Slots</title>
  <script>
    function setFontSize(designWidth, minWidth, maxWidth) {
      var htmlEl = document.documentElement,
        momentWith = 0;
      momentWith = htmlEl.clientWidth > maxWidth ? maxWidth : htmlEl.clientWidth;
      momentWith = momentWith < minWidth ? minWidth : momentWith;
      htmlEl.style.fontSize = (momentWith / designWidth) * 100 + 'px';
    }
    setFontSize(1920, 1300, 1920);
    window.addEventListener('resize', function () {
      setTimeout(function () {
        if (document.getElementById('root')) {
          if (window.innerWidth > window.innerHeight) {
            document.getElementById('root').className = 'root landscape';
          } else {
            document.getElementById('root').className = 'root portrait';
          }
        }
        setFontSize(1920, 1300, 1920);
      }, 300);
    });


  </script>

<link href="/css/index.css" rel="stylesheet"></head>

<body>
  <div class="btn-wrap">
    <a href="/" class="item">Home</a>
    <a href="https://docs.google.com/document/d/17lcfdBQYl-ZnF8_5HjRRqi1WB6jIwc8j6ozXtwKyqD0/edit?usp=sharing" target="_blank" class="item">Privacy Policy</a>
    <a href="https://docs.google.com/document/d/196jD6se2DYnpmWVV_f69uV6xmf0zKXZBWVK5tabPYO0/edit?usp=sharing" class="item" target="_blank">Terms of Service</a>
    <a href="mailto:maiconrmartins666@gmail.com" class="item">Support</a>
  </div>
  <div class="img-box" id="nav1">
    <img src="/image/1551.png" alt="" class="img">
    <a class="google-btn" href="https://play.google.com/store/apps/details?id=com.goldenbunnyslots.guqinog" target="_blank">
        <img src="data:image/png;base64,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
    Found 2025-12-22 by HttpPlugin
    Create report
estateplanning.jlwlawoffices.comjlwlawoffices.justia.lawyerprobate.jlwlawoffices.comwww.estateplanning.jlwlawoffices.comwww.probate.jlwlawoffices.com
Fingerprint:
4e4af72c1fed9c3e010845494465b1f4d0ce39e0bdc3d474c1fb22d19f314541
CN:
jlwlawoffices.justia.lawyer
Key:
RSA-2048
Issuer:
R12
Not before:
2025-12-10 12:03
Not after:
2026-03-10 12:03
trickboost.net*.trickboost.net
Fingerprint:
e7567818f47cb19f1c77601973ff9778aea76ff76daae8d25e10cff0b72365fb
CN:
trickboost.net
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-04-11 00:00
Not after:
2026-05-10 23:59
*.euro.airstagecloud.neteuro.airstagecloud.net
Fingerprint:
880fbde4654885dbcb22a818d8e3069eec2cc4ebc4d0ee61b04791a68da9fa48
CN:
*.euro.airstagecloud.net
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M01
Not before:
2025-10-19 00:00
Not after:
2026-11-17 23:59
49cp.betwww.0504.com6548.com61114.ccwww.6546.comwww.91114.com81234.comwww.49cp.bet92837.com21114.com4295.com68376.comwww.61114.com49.bet6546.com0504.com61114.comwww.21114.comwww.61114.ccwww.4295.comwww.92837.comwww.49.betwww.6548.comwww.81234.com91114.comwww.68376.com
Fingerprint:
8c64b15d9b9eee9b5b3d991ca4ef43fd017eabccfc3b3a4a6c9752c6c3b339ca
CN:
49cp.bet
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M01
Not before:
2025-10-21 00:00
Not after:
2026-11-19 23:59
dfo.global*.dfo.global
Fingerprint:
c2f4c736ba75e083cb4a9f78c787168d600945116f75dc08d1e572768feaf24a
CN:
dfo.global
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-08-14 00:00
Not after:
2026-09-12 23:59
findcare.app
Fingerprint:
81e9b45141a37c27e07feaad4fc8112d6717a55edb5c000b65a1b5f5843a257d
CN:
findcare.app
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-06-03 00:00
Not after:
2026-07-02 23:59
remi101.asiaremi101vip4.comremi101vip5.ccremi101vip16.com*.remi101vip7.com*.remi101vip11.ccremi101vip1.cc*.remi101vip13.com*.remi101vip0.vip*.remi101vip20.comremi101vip17.ccremi101vip17.comremi101vip13.cc*.remi101vip19.ccremi101vip15.com*.remi101vip15.ccremi101vip5.com*.remi101vip1.vip*.remi101vip4.cc*.remi101vip20.cc*.remi101vip0.cc*.remi101vip8.ccremi101vip9.cc*.remi101vip12.com*.remi101vip10.comremi101vip6.ccremi101vip14.comremi101vip20.ccremi101vip7.comremi101vip6.comremi101vip2.cc*.remi101vip9.comremi101vip18.ccremi101vip13.com*.remi101.asia*.remi101vip0.com*.remi101vip11.comremi101vip14.cc*.remi101vip16.ccremi101vip10.cc*.remi101vip3.cc*.remi101vip19.com*.remi101vip12.cc*.remi101vip18.com*.remi101vip7.ccremi101vip9.comremi101vip7.cc*.remi101vip2.comremi101vip11.comremi101vip3.cc*.remi101vip17.comremi101vip1.vipremi101vip19.cc*.remi101vip16.com*.remi101vip17.ccremi101vip15.cc*.remi101vip2.ccremi101vip12.comremi101vip11.cc*.remi101vip6.cc*.remi101vip13.ccremi101vip0.com*.remi101vip3.comremi101vip20.com*.remi101vip15.comremi101vip8.cc*.remi101vip5.comremi101vip2.comremi101vip4.cc*.remi101vip10.ccremi101vip0.cc*.remi101vip4.comremi101vip16.ccremi101vip19.com*.remi101vip18.ccremi101vip12.ccremi101vip3.com*.remi101vip14.ccremi101vip0.vip*.remi101vip6.comremi101vip10.com*.remi101vip1.ccremi101vip18.com*.remi101vip5.cc*.remi101vip9.cc*.remi101vip14.com
Fingerprint:
de6922bf3cc3c172f46a4f59b4ee03ad50ca28375d54bc11e9456d5b4a2fbe53
CN:
remi101.asia
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-07-31 00:00
Not after:
2026-08-29 23:59
fishingsclub.comwww.fishingsclub.com
Fingerprint:
751b213ffc4071effca1f48a8b80d92fef84b7a888f71367ec5cd15e85f67952
CN:
fishingsclub.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-07-08 00:00
Not after:
2026-08-06 23:59
bizanalyst.in*.bizanalyst.in
Fingerprint:
af3ee6874ab909d7f8e5f87831ae12ea0b0d738d06aa4715a12b86fd319e1d54
CN:
bizanalyst.in
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-03-05 00:00
Not after:
2026-04-03 23:59
clusterduck.com*.clusterduck.com
Fingerprint:
4fdeac804750359d796c9c80cebbfcad250f7acee5fc9b400224439b8e12b4f0
CN:
clusterduck.com
Key:
ECDSA-256
Issuer:
Amazon ECDSA 256 M01
Not before:
2025-12-28 00:00
Not after:
2027-01-26 23:59
*.novaproject.technovaproject.tech
Fingerprint:
ff2222350f0daf5121bb15d58843bb9a7e944f4c7c5effacf41d2e41bb337403
CN:
*.novaproject.tech
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-02-23 00:00
Not after:
2026-03-24 23:59
jewelsids388.com
Fingerprint:
a498a2d3ed65c6123f5718ec20d2679ff58d9b9202c21b2a16566228d63fdfcf
CN:
jewelsids388.com
Key:
RSA-2048
Issuer:
R12
Not before:
2025-11-29 15:50
Not after:
2026-02-27 15:50
bctmgm.com*.bctmgm.com
Fingerprint:
2f48d07069b417dd6ddc5a275b798ce24bc3593a811a6000552ebe3a9432e0c4
CN:
bctmgm.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-04-03 00:00
Not after:
2026-05-02 23:59
*.unistairs.comunistairs.com
Fingerprint:
76bfb92c3990575326fcca3afceddb05027b71f38264b5b7da1f210e3f3f766e
CN:
*.unistairs.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-03-10 00:00
Not after:
2026-04-08 23:59
csfo1wh3ei.xyz1i9eu1cm3g.xyz8qthu8th3s.xyz80y2tudt4j.xyzh6cgm4yk0q.xyzje4t5tvc0x.xyzmej0fsbws6.xyzhckw1ljttt.xyzpek6vkqr0w.xyzpghv6vxjfj.xyz
Fingerprint:
5ccb980d1b89aca2918f8bf857e357f2c6b7661fb6059b000947471b040c0b69
CN:
csfo1wh3ei.xyz
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-10-01 00:00
Not after:
2026-10-30 23:59
23oy0507fm.xyzsvhvqiy4xn.xyz14tviepnk0.xyz7xv44ll6a2.xyz4i6vz7dmkh.xyzuz1zcnxrld.xyz1g5w3bjwq1.xyz3h4c22il4r.xyzzewgly9ac2.xyzv8ldo7gx67.xyz
Fingerprint:
150079e33843d701a374bd8d025c28c190319b8aa30a668ff2eb38aa08b62bc6
CN:
23oy0507fm.xyz
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-05-22 00:00
Not after:
2026-06-20 23:59
tinygameplayhub.comwww.tinygameplayhub.com
Fingerprint:
b5669d32277deed4154fe9c911494ec15f6ea1e0acb6216f1c4a4d851893c06c
CN:
tinygameplayhub.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-07-29 00:00
Not after:
2026-08-27 23:59
*.royalbaazi9.comroyalbaazi9.com
Fingerprint:
db73d4c9fd2d88c7b5c9d5e8a64f277b111845178c70af3bd49a927627a12905
CN:
*.royalbaazi9.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-11-11 00:00
Not after:
2026-12-10 23:59
efektasystemstatus.comcd-be394196855e80bade6b722cedb24786.hosted-status.pagerduty.com
Fingerprint:
e9377725fad0ec9df2718ce1533105c5a122cde2bb75303597c52f84dd4eda33
CN:
efektasystemstatus.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-04-04 00:00
Not after:
2026-05-03 23:59
*.onerdy.comonerdy.com
Fingerprint:
5cea8198837f5c7a85f9d81f9675a2743ab58250f6c7c5702ac7c4a90b99ef5a
CN:
*.onerdy.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-04-10 00:00
Not after:
2026-05-10 23:59
*.nextlevelmotors.canextlevelmotors.ca
Fingerprint:
eb5ce058f48b825154d3cfbf0d012e9665a85dd9c8c76bcf1d843af677c1aab8
CN:
*.nextlevelmotors.ca
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M01
Not before:
2025-09-16 00:00
Not after:
2026-10-15 23:59
www.megson.netmegson.net
Fingerprint:
49c36fcc268a47928008947020487962e601903b00c150c680ea8df7e346fa4f
CN:
www.megson.net
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-02-12 00:00
Not after:
2026-03-12 23:59
mangoopaybox.com*.mangoopaybox.commangoopay.com*.mangoopay.commangoopayapi.com*.mangoopayapi.com*.yonogamesapi.comyonogamesapi.com
Fingerprint:
75e09949ff3f7d81d6c31bf47edfdd425789a0da8b603ead95536aba800c80e5
CN:
mangoopaybox.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-02-10 00:00
Not after:
2026-03-12 23:59
*.moxel.comoxel.co
Fingerprint:
d88f8a3a2d4b4968917685d1b8e98a69054a1d615f7be59302cebb9afc6fb5b3
CN:
*.moxel.co
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M01
Not before:
2025-09-18 00:00
Not after:
2026-10-17 23:59
*.postgres.guidepostgres.guide
Fingerprint:
27c6174c958c7812fca1fd59b70545c57a5bb19a283aee6e75ff18bf5a7908da
CN:
*.postgres.guide
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-03-23 00:00
Not after:
2026-04-21 23:59
ibc22sg.co*.ibc22sg.co
Fingerprint:
30438557493bb1adf14298b29bdca8c829047789d18b7718652b93904ea549af
CN:
ibc22sg.co
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-09-22 00:00
Not after:
2026-10-21 23:59
www.hadrianhealthcentre.co.ukhadrianhealthcentre.co.uk
Fingerprint:
f6f4e2134e4e68bfc7c44594bc5cd5dbad14f0f638949a41e07d5969d5249049
CN:
www.hadrianhealthcentre.co.uk
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-11-12 00:00
Not after:
2026-12-11 23:59
catchot-online.comwww.catchot-online.com
Fingerprint:
5d067a2c85b96aa64c801f428ff33b70745df6a41cdf4bfd24b16288f6e07d3e
CN:
catchot-online.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-07-09 00:00
Not after:
2026-08-07 23:59
academy.williamandwall.com
Fingerprint:
392705237262169e0666de606d9a235e4edcf75bc5ac7f3985431615566ac2b4
CN:
academy.williamandwall.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-07-19 00:00
Not after:
2026-08-17 23:59
china1sp.com*.china1sp.com
Fingerprint:
0ff5c575996156d46e3f41fcd94c76523de425f5bd36da81d79f5e339b381d2c
CN:
china1sp.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-10-07 00:00
Not after:
2026-11-04 23:59
gofacultyofimpact.nl*.gofacultyofimpact.nl
Fingerprint:
4c26d7170a87ca0c4b9794be82259ac12a31e3f869dfbace07d65c3e173c8309
CN:
gofacultyofimpact.nl
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M01
Not before:
2025-12-20 00:00
Not after:
2027-01-18 23:59
americandream11uat.us
Fingerprint:
9ccc5d41a1331f6bb45818499660293847f5fb00849bf645d7dae0cf8701fd7e
CN:
americandream11uat.us
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-07-06 00:00
Not after:
2026-08-04 23:59
valueinsightsplatform-admin-stage.accentureanalytics.comwww.valueinsightsplatform-admin-stage.accentureanalytics.com
Fingerprint:
f6ed72501e13ff82987a53a47f9f3993ccfaaed82963da16cd607829f714ba72
CN:
valueinsightsplatform-admin-stage.accentureanalytics.com
Key:
RSA-2048
Issuer:
Entrust OV TLS Issuing RSA CA 2
Not before:
2025-07-29 00:00
Not after:
2026-08-01 23:59
it.help.reflectionsholiday.com.au
Fingerprint:
f67825bfb577622fab359f9931558c14b9713bf820007b35278c6f5f7251d792
CN:
it.help.reflectionsholiday.com.au
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-07-28 00:00
Not after:
2026-08-26 23:59
sieps.appwww.sieps.app
Fingerprint:
02e23eebc3abb7cc5ab4aa4bb17cca6237b168c8a21667d4949650d40f4bf182
CN:
sieps.app
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-07-30 00:00
Not after:
2026-08-27 23:59
*.rockymountaineye.comrockymountaineye.com
Fingerprint:
759bc6749d82683709a879d1aa7c2a4342eef49ce55522240a44aa657c6c7914
CN:
*.rockymountaineye.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-08-18 00:00
Not after:
2026-09-14 23:59
ladyseductress.comwww.ladyseductress.com
Fingerprint:
2cdfbf6abc19eddc135df190dee162bfec69cf742acad77a65e0396393b6b572
CN:
ladyseductress.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-07-09 00:00
Not after:
2026-08-07 23:59
dresivo.com*.dresivo.com
Fingerprint:
583f57b38c658a38da5f4e3965b1dc03c603db329bf6bb1dfa54bfe8e741cca3
CN:
dresivo.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-03-19 00:00
Not after:
2026-04-17 23:59
fulltank.us*.fulltank.us
Fingerprint:
dacf5c0dc578b9f4d8a8052d007259a0ec2d1b38b09d422edbd0b0323a4a16f3
CN:
fulltank.us
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-11-17 00:00
Not after:
2026-12-16 23:59
voyagerstudios.games
Fingerprint:
a96fbd38c47a209b0b9e3efb87821bdd1abcf9888175d0818cb462c224ec540f
CN:
voyagerstudios.games
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-11-28 00:00
Not after:
2026-12-27 23:59
calm-hari.com*.calm-hari.com
Fingerprint:
3a1e538fc68581269b32e15bdc35a62f3838e7f11abb48b32158d17793a40ce7
CN:
calm-hari.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-06-16 00:00
Not after:
2026-07-15 23:59
leazergroup.comwww.leazergroup.com
Fingerprint:
29d2e366d64a64fa1b5ea1c77ba5eed7908046b8ddca63dc75fb7429f2c556b0
CN:
leazergroup.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-12-28 00:00
Not after:
2027-01-26 23:59
paperbacks.co.nz*.paperbacks.co.nz
Fingerprint:
2e48b39383e5d44f3b15971d039573a7ecbe67fc866e864be4e87de7ab20bfed
CN:
paperbacks.co.nz
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-12-24 00:00
Not after:
2027-01-22 23:59
glucoregen-co.com*.glucoregen-co.com
Fingerprint:
b4ef4e5ffe4af3eb333f5b572ab8f9d75472811c3e2cf9acaf9d0dc8e0eea4e3
CN:
glucoregen-co.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-06-11 00:00
Not after:
2026-07-10 23:59
*.foodiedelivery.esfoodiedelivery.es
Fingerprint:
f7bd599f897ffbde4ee898e928e26f5fc6a7760a1db24ff7479e3833caa37db8
CN:
*.foodiedelivery.es
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-02-18 00:00
Not after:
2026-03-19 23:59
thepainswick.co.uk*.thepainswick.co.uk
Fingerprint:
b879e74d11e05240bb0c8db919b594539f62b17917800b52fda16233dec6c2e8
CN:
thepainswick.co.uk
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-02-18 00:00
Not after:
2026-03-19 23:59
loudbasstard-jp.comwww.loudbasstard-jp.com
Fingerprint:
593c9f136915e6b220361eca0d8af636f0ab1f21fdee30f19aee486dac0d927a
CN:
loudbasstard-jp.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M01
Not before:
2025-11-06 00:00
Not after:
2026-12-05 23:59
entity-identity.comwww.entity-identity.com
Fingerprint:
c37c73e365583d0699bb1f678f8f4e81642a331313e2d9e7f004dcbb0ba6557c
CN:
entity-identity.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-12-17 00:00
Not after:
2027-01-15 23:59
cloudsmartuk.comwww.cloudsmartuk.com
Fingerprint:
9a9dbb0e931f138795d28ab9eaa03e3fd8fc1936be1f3c740b0542bc9312c9b0
CN:
cloudsmartuk.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M01
Not before:
2025-12-17 00:00
Not after:
2027-01-15 23:59
n-plants.com*.n-plants.com
Fingerprint:
d7116f1bd109382a9a7550e1fd2e2555c9e719b7b11d7d97b8bc8c45c8392323
CN:
n-plants.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-04-28 00:00
Not after:
2026-05-27 23:59
softies.com.au*.softies.com.au
Fingerprint:
a14f4da235a8f5cdcf1cea08eca05316b06c16c23e087985c71b2a3a96a46c41
CN:
softies.com.au
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-09-06 00:00
Not after:
2026-10-05 23:59
oqzslot.vip*.oqzslot.vip
Fingerprint:
31ccadc5860f9167fc3d640d3cdbf8e94bc757118a79c12e33d7fd0fa1a33afa
CN:
oqzslot.vip
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-04-19 00:00
Not after:
2026-05-18 23:59
*.sibsnailsstockport.co.uksibsnailsstockport.co.uk
Fingerprint:
848507d8e9b1ac9d3f9c33a3cf49440486421ccc7621d43f3844b5e494da1bcd
CN:
*.sibsnailsstockport.co.uk
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-08-23 00:00
Not after:
2026-09-21 23:59
pruicover.com*.pruicover.com
Fingerprint:
5f017639ee132e48bd2d96e72fcccdb894f6f030fbc6a3bbc6703f4ed69d8baf
CN:
pruicover.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-06-09 00:00
Not after:
2026-07-08 23:59
max777gaming.com
Fingerprint:
e07c3e2aad31785bcbc8b42132a71055048cec3186c5dcfbdaceb16f094bf92e
CN:
max777gaming.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-11-26 00:00
Not after:
2026-12-25 23:59
paperbacks.co.nz*.paperbacks.co.nz
Fingerprint:
f5e6544335f384e0aff733387d6bd9eb888763c011b44f9cb28460d4d451b444
CN:
paperbacks.co.nz
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M02
Not before:
2025-01-22 00:00
Not after:
2026-02-21 23:59
sukownart.comwww.sukownart.com
Fingerprint:
040ab37daaec1f3ad40722bb28438127f0cbc20d88f62f8929759ab19103a2ea
CN:
sukownart.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-05-01 00:00
Not after:
2026-05-30 23:59
severinegoffettre.fr*.severinegoffettre.fr
Fingerprint:
5182f440eaa7a5dd3a2d05ce7bfc116431e5100805c02ebf188398aea3ccbdf1
CN:
severinegoffettre.fr
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M01
Not before:
2025-10-09 00:00
Not after:
2026-11-07 23:59
api.freyafusion.comac.bntsandbox.freyafusion.comac.gileadval.freyafusion.comac.mercksandbox.freyafusion.comac.otsukasandbox.freyafusion.comtm.freyafusion.comac.t1sbx.freyafusion.comac.t2sbx.freyafusion.comportal.freyafusion.comac.galdermasbx.freyafusion.comcontentpartnerapi.freyafusion.comac.otsuka.freyafusion.comac.olympustraining.freyafusion.comac.gileaduat.freyafusion.compdf.freyafusion.comac.galdermacmg.freyafusion.comdossierbuilderapi.freyafusion.comcontentpartner.freyafusion.comac.gilead.freyafusion.comdossierbuilder.freyafusion.comac.takedasandbox.freyafusion.comac.gileadsandbox.freyafusion.comac.freyafusion.comac.swssandbox.freyafusion.comac.gileadsqa.freyafusion.comapp.freyafusion.comac.k1sbx.freyafusion.comac.kenvue.freyafusion.comac.labelopssbx.freyafusion.com
Fingerprint:
f76dd27f52d3f247e2fafa437f7b83dbad2ce8dca367e4d535fd922035d02e2b
CN:
api.freyafusion.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M01
Not before:
2025-12-22 00:00
Not after:
2027-01-20 23:59
api.freyafusion.comac.bntsandbox.freyafusion.comac.gileadval.freyafusion.comac.mercksandbox.freyafusion.comac.otsukasandbox.freyafusion.comtm.freyafusion.comac.t1sbx.freyafusion.comac.t2sbx.freyafusion.comportal.freyafusion.comac.galdermasbx.freyafusion.comcontentpartnerapi.freyafusion.comac.otsuka.freyafusion.comac.gileaduat.freyafusion.compdf.freyafusion.comac.galdermacmg.freyafusion.comdossierbuilderapi.freyafusion.comcontentpartner.freyafusion.comdossierbuilder.freyafusion.comac.gilead.freyafusion.comac.takedasandbox.freyafusion.comac.gileadsandbox.freyafusion.comac.freyafusion.comac.swssandbox.freyafusion.comac.gileadsqa.freyafusion.comapp.freyafusion.comac.k1sbx.freyafusion.comac.kenvue.freyafusion.comac.labelopssbx.freyafusion.com
Fingerprint:
2c7a4900064e9cc8c55921d129f6b590039ea077619cb150f101c9aa526778ef
CN:
api.freyafusion.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M04
Not before:
2025-12-01 00:00
Not after:
2026-12-30 23:59
*.prod.aws.phronesys.eu*.phronesys.eu*.vca-online.eu
Fingerprint:
c2d6d2349861f563675abacd2f752beeef85757bd50b14e8a4c913053a69037c
CN:
*.prod.aws.phronesys.eu
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M03
Not before:
2025-07-23 00:00
Not after:
2026-08-21 23:59
goldenbunnyslots.com*.goldenbunnyslots.com
Fingerprint:
dbda152c40759ae10e05b81cce8d7e364a2ca2b2a79520d9d2d4aa05d80c9199
CN:
goldenbunnyslots.com
Key:
RSA-2048
Issuer:
Amazon RSA 2048 M01
Not before:
2025-09-30 00:00
Not after:
2026-10-29 23:59
Domain summary

lowtherhall-login.cloudworkengine.net 50 probate.jlwlawoffices.com 0 jlwlawoffices.justia.lawyer 0 barry-two.phronesys.eu 0 shulabowl.com 0 trickboost.net 1 mangolab.ai 0 jerredandkimmiesharpeinlove.com 0 euro.airstagecloud.net 0 0504.com 1 dfo.global 3 findcare.app 1 remi101vip10.cc 1 remi101vip20.cc 1 remi101vip17.com 1 remi101vip19.cc 1 remi101vip19.com 1 fishingsclub.com 1 remi101vip7.com 1 remi101vip18.cc 1 bizanalyst.in 3 remi101vip0.cc 1 remi101vip2.cc 1 remi101vip14.com 1 remi101vip1.vip 1 remi101vip15.cc 1 remi101vip16.cc 1 clusterduck.com 1 remi101.asia 1 novaproject.tech 3 jewelsids388.com 1 bctmgm.com 1 unistairs.com 3 8qthu8th3s.xyz 1 pghv6vxjfj.xyz 1 h6cgm4yk0q.xyz 1 je4t5tvc0x.xyz 1 1i9eu1cm3g.xyz 1 80y2tudt4j.xyz 1 pek6vkqr0w.xyz 1 csfo1wh3ei.xyz 1 mej0fsbws6.xyz 1 hckw1ljttt.xyz 1 14tviepnk0.xyz 3 tinygameplayhub.com 1 royalbaazi9.com 1 efektasystemstatus.com 1 4i6vz7dmkh.xyz 3 onerdy.com 1 nextlevelmotors.ca 1 megson.net 3 mangoopaybox.com 3 mangoopayapi.com 1 yonogamesapi.com 1 mangoopay.com 1 moxel.co 1 23oy0507fm.xyz 1 postgres.guide 1 v8ldo7gx67.xyz 1 ibc22sg.co 1 zewgly9ac2.xyz 1 svhvqiy4xn.xyz 1 uz1zcnxrld.xyz 1 hadrianhealthcentre.co.uk 1 1g5w3bjwq1.xyz 1 7xv44ll6a2.xyz 1 catchot-online.com 3 3h4c22il4r.xyz 1 academy.williamandwall.com 0 china1sp.com 1 gofacultyofimpact.nl 1 api-container-price-finder.test.webservice-test.de 0 americandream11uat.us 0 valueinsightsplatform-admin-stage.accentureanalytics.com 0 it.help.reflectionsholiday.com.au 0 sieps.app 3 rockymountaineye.com 1 ladyseductress.com 3 dresivo.com 1 fulltank.us 1 www.fulltank.us 1 voyagerstudios.games 1 calm-hari.com 1 www.calm-hari.com 1 leazergroup.com 1 paperbacks.co.nz 3 glucoregen-co.com 1 foodiedelivery.es 1 thepainswick.co.uk 0 loudbasstard-jp.com 1 entity-identity.com 1 cloudsmartuk.com 1 remi101vip7.cc 1 myextensia.com 1 remi101vip9.cc 1 remi101vip4.cc 1 n-plants.com 1 remi101vip3.cc 1 remi101vip2.com 1 remi101vip12.cc 1 remi101vip1.cc 1 remi101vip11.cc 1 remi101vip0.com 1 remi101vip10.com 1 remi101vip0.vip 1 remi101vip12.com 1 remi101vip14.cc 1 remi101vip17.cc 1 remi101vip8.cc 1 remi101vip13.com 1 remi101vip5.com 1 remi101vip16.com 1 remi101vip11.com 1 remi101vip18.com 1 remi101vip13.cc 1 remi101vip6.cc 1 remi101vip9.com 1 remi101vip20.com 1 remi101vip6.com 1 softies.com.au 1 oqzslot.vip 1 sibsnailsstockport.co.uk 1 pruicover.com 1 max777gaming.com 1 sukownart.com 1 severinegoffettre.fr 1 yonopayapi.com 1 gunturkarampodi.com 1 ac.swssandbox.freyafusion.com 1 ac.bntsandbox.freyafusion.com 1 ac.galdermasbx.freyafusion.com 1 ac.gileadsandbox.freyafusion.com 1 ac.mercksandbox.freyafusion.com 1 ac.k1sbx.freyafusion.com 1 ac.otsuka.freyafusion.com 1 ac.gileadval.freyafusion.com 1 ac.gileadsqa.freyafusion.com 1 ac.labelopssbx.freyafusion.com 1 ac.otsukasandbox.freyafusion.com 1 ac.gilead.freyafusion.com 1 ac.takedasandbox.freyafusion.com 1 ac.gileaduat.freyafusion.com 1 ac.galdermacmg.freyafusion.com 1 ac.kenvue.freyafusion.com 1 ac.olympustraining.freyafusion.com 1 ac.t1sbx.freyafusion.com 1 ac.freyafusion.com 1 fero-group.prod.aws.phronesys.eu 1 fero-group.phronesys.eu 0 lineatrovata.phronesys.eu 1 lineatrovata.prod.aws.phronesys.eu 1 goldenbunnyslots.com 1

152 recorded

© 2026 LeakIX v2.0.49
About LeakIX - Credits - Take-down and blacklist requests - Security issues - Terms and conditions - Cookie policy - Legal notice