LeakIX - Host 235433.vip

Domain 235433.vip

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 104.21.66.20
Domain: 235433.vip
Port: 443
URL: https://235433.vip

First seen 2025-07-05 05:45
Last seen 2025-11-01 03:31
Open for 118 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f87723895af61cd42b26629229826d7fb797e
```
Found 11 files trough .DS_Store spidering:

/imgs
/imgs/android_btn.png
/imgs/bg.png
/imgs/continue_btn.png
/imgs/corp.png
/imgs/faviconk8.ico
/imgs/ios_btn.png
/imgs/logo.png
/imgs/sponsors-1.png
/imgs/sponsors-2.png
/imgs/sponsors-3.png
```
  Found on 2025-11-01 03:31
- Severity: low
  Fingerprint: 5f32cf5d6962f09c63442d9d63442d9d2206f2e42206f2e42206f2e42206f2e4
```
Found 1 files trough .DS_Store spidering:

/imgs
```
  Found on 2025-07-07 16:14
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.67.155.79
Domain: 235433.vip
Port: 80
URL: http://235433.vip

First seen 2025-07-05 05:45
Last seen 2025-10-28 20:28
Open for 115 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09cec7f8772ec7f87723895af61cd42b26629229826d7fb797e
```
Found 11 files trough .DS_Store spidering:

/imgs
/imgs/android_btn.png
/imgs/bg.png
/imgs/continue_btn.png
/imgs/corp.png
/imgs/faviconk8.ico
/imgs/ios_btn.png
/imgs/logo.png
/imgs/sponsors-1.png
/imgs/sponsors-2.png
/imgs/sponsors-3.png
```
  Found on 2025-10-28 20:28
Create report

Open service 104.21.66.20:443 · 235433.vip

2025-12-30 06:35

HTTP/1.1 520 <none>
Date: Tue, 30 Dec 2025 06:35:45 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9b5f84d47a0ddb0e-FRA
alt-svc: h3=":443"; ma=86400


error code: 520

Found 2025-12-30 by HttpPlugin

Create report

Open service 104.21.66.20:443 · 235433.vip

2025-12-22 07:44

HTTP/1.1 520 <none>
Date: Mon, 22 Dec 2025 07:44:54 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
Server-Timing: cfEdge;dur=549,cfOrigin;dur=0
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9b1dff221a918095-EWR
alt-svc: h3=":443"; ma=86400


error code: 520

Found 2025-12-22 by HttpPlugin

Create report

Open service 172.67.155.79:80 · 235433.vip

2025-12-22 05:31

HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 05:31:46 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Last-Modified: Fri, 12 Dec 2025 16:41:48 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=13,cfOrigin;dur=315
Set-Cookie: server_name_session=7ac0db4cf28f7e15ed27a814a455538e; Max-Age=86400; httponly; path=/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=YugwsN2SBOkrYr7UBY6eUtRFCuINARef0M21akYkcirE%2FUv53YAXWgsv%2FV1AIs%2F23jxl%2FLxlopNwhQWCC%2Bv7yC5T9NOy0etm0oM%3D"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9b1d3c1bcc9f3d57-SJC
alt-svc: h3=":443"; ma=86400

Page title: K8凯发娱乐

<!DOCTYPE html>
<html lang="cn">

<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <link rel="icon" type="image/x-icon" href="favicon.ico">
  <title>K8凯发娱乐</title>
  <script>
    function isMobileDevice() {
      var ua = navigator.userAgent.toLowerCase();
      return /iphone|ipad|ipod|android|mobile|windows phone/.test(ua);
    }
    function generateJsLink(src) {
      var script = document.createElement('script');
      script.src = `${src}?t=${Date.now()}`;
      script.async = true;
      document.head.appendChild(script);
    }
    function generateCssLink(href) {
      var link = document.createElement('link');
      link.rel = 'stylesheet';
      link.href = `${href}?t=${Date.now()}`;
      document.head.appendChild(link);
    }

    generateJsLink('./js/config.js');
    generateCssLink('./css/index.css');

    function updateBodyClass() {
      if (isMobileDevice()) {
        document.body.classList.remove('is-pc');
        document.body.classList.add('is-mobile');
      } else {
        document.body.classList.remove('is-mobile');
        document.body.classList.add('is-pc');
      }
    }

    // 初始执行一次
    window.addEventListener('DOMContentLoaded', updateBodyClass);

    // 监听窗口大小变化
    window.addEventListener('resize', () => {
      // 可加节流优化
      updateBodyClass();
    });
  </script>
</head>

<body>
  <div class="video">
    <video src="./media/video.mp4" width="100%" height="100%" autoplay muted="false" loop playsinline>您的浏览器不支持 video
      标签。</video>
  </div>

  <div class="main">

    <div class="logo">
      <img src="./imgs/logo.png" alt="">
    </div>

    <div class="content">
      <div class="progress-circle">
        <svg viewBox="0 0 36 36" class="circular-chart">
          <path class="circle-bg" d="M18 2.0845
                a 15.9155 15.9155 0 0 1 0 31.831
                a 15.9155 15.9155 0 0 1 0 -31.831" />
          <path class="circle" stroke-dasharray="0, 100" d="M18 2.0845
                a 15.9155 15.9155 0 0 1 0 31.831
                a 15.9155 15.9155 0 0 1 0 -31.831" />
          <text x="18" y="20.35" class="percentage"></text>
        </svg>
      </div>
      <div class="continue_btn"></div>
      <div class="help">凯发娱乐·业界标杆·博娱首选</div>
      <div class="tips">注册享独家豪礼·亿万奖池·首存送88888元</div>
      <div class="domains"></div>
      <div class="corp-h5">
        <div class="imgs">
          <img src="./imgs/sponsors-1.png" alt="">
          <img src="./imgs/sponsors-2.png" alt="">
          <img src="./imgs/sponsors-3.png" alt="">
        </div>
      </div>
    </div>

    <div class="corp">
      <img src="./imgs/corp.png" alt="">
    </div>

  </div>
  <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
<script>LA.init({id:"3MYXLiUG2ChMwHGh",ck:"3MYXLiUG2ChMwHGh"})</script>

<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"b59ceedd8a95461882d5a55d6857e5f0","r":1,"server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>
</body>

</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 104.21.66.20:443 · 235433.vip

2025-12-20 08:11

HTTP/1.1 520 <none>
Date: Sat, 20 Dec 2025 08:11:17 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9b0dab06bc3f0e08-AMS
alt-svc: h3=":443"; ma=86400


error code: 520

Found 2025-12-20 by HttpPlugin

Create report

Open service 172.67.155.79:80 · 235433.vip

2025-12-20 05:58

HTTP/1.1 200 OK
Date: Sat, 20 Dec 2025 05:58:01 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Last-Modified: Fri, 12 Dec 2025 16:41:48 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Set-Cookie: server_name_session=26dacbe1c3d89dc14de47cf1816baede; Max-Age=86400; httponly; path=/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=F26GhlD4bOJWtHc9a3oD%2BQyzcJKVL5hlZXwqQzgce2A1QMf4RBS2AP7m%2B11up8rt9pQ8cGBYVG2jSaQppTguAKgBp%2ByB%2BOMsG2E%3D"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9b0ce7d23b09d2a2-FRA
alt-svc: h3=":443"; ma=86400

Page title: K8凯发娱乐

<!DOCTYPE html>
<html lang="cn">

<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <link rel="icon" type="image/x-icon" href="favicon.ico">
  <title>K8凯发娱乐</title>
  <script>
    function isMobileDevice() {
      var ua = navigator.userAgent.toLowerCase();
      return /iphone|ipad|ipod|android|mobile|windows phone/.test(ua);
    }
    function generateJsLink(src) {
      var script = document.createElement('script');
      script.src = `${src}?t=${Date.now()}`;
      script.async = true;
      document.head.appendChild(script);
    }
    function generateCssLink(href) {
      var link = document.createElement('link');
      link.rel = 'stylesheet';
      link.href = `${href}?t=${Date.now()}`;
      document.head.appendChild(link);
    }

    generateJsLink('./js/config.js');
    generateCssLink('./css/index.css');

    function updateBodyClass() {
      if (isMobileDevice()) {
        document.body.classList.remove('is-pc');
        document.body.classList.add('is-mobile');
      } else {
        document.body.classList.remove('is-mobile');
        document.body.classList.add('is-pc');
      }
    }

    // 初始执行一次
    window.addEventListener('DOMContentLoaded', updateBodyClass);

    // 监听窗口大小变化
    window.addEventListener('resize', () => {
      // 可加节流优化
      updateBodyClass();
    });
  </script>
</head>

<body>
  <div class="video">
    <video src="./media/video.mp4" width="100%" height="100%" autoplay muted="false" loop playsinline>您的浏览器不支持 video
      标签。</video>
  </div>

  <div class="main">

    <div class="logo">
      <img src="./imgs/logo.png" alt="">
    </div>

    <div class="content">
      <div class="progress-circle">
        <svg viewBox="0 0 36 36" class="circular-chart">
          <path class="circle-bg" d="M18 2.0845
                a 15.9155 15.9155 0 0 1 0 31.831
                a 15.9155 15.9155 0 0 1 0 -31.831" />
          <path class="circle" stroke-dasharray="0, 100" d="M18 2.0845
                a 15.9155 15.9155 0 0 1 0 31.831
                a 15.9155 15.9155 0 0 1 0 -31.831" />
          <text x="18" y="20.35" class="percentage"></text>
        </svg>
      </div>
      <div class="continue_btn"></div>
      <div class="help">凯发娱乐·业界标杆·博娱首选</div>
      <div class="tips">注册享独家豪礼·亿万奖池·首存送88888元</div>
      <div class="domains"></div>
      <div class="corp-h5">
        <div class="imgs">
          <img src="./imgs/sponsors-1.png" alt="">
          <img src="./imgs/sponsors-2.png" alt="">
          <img src="./imgs/sponsors-3.png" alt="">
        </div>
      </div>
    </div>

    <div class="corp">
      <img src="./imgs/corp.png" alt="">
    </div>

  </div>
  <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
<script>LA.init({id:"3MYXLiUG2ChMwHGh",ck:"3MYXLiUG2ChMwHGh"})</script>

</body>

</html>

Found 2025-12-20 by HttpPlugin

Create report

235433.vip*.235433.vip

Fingerprint:

d21bd477fe60518e27cba13499f668b6278978e73a908bbfbf4eb671f0b73585

CN:

235433.vip

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-12-25 22:03

Not after:

2026-03-25 23:01

235433.vip*.235433.vip

Fingerprint:

ba5983bb7c57c13f080382d439190bdad6f3dcf73a6fc19c80cc58bc7a20d734

CN:

235433.vip

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-10-27 21:25

Not after:

2026-01-25 22:21

Domain summary

235433.vip 7

1 recorded

IP summary

104.21.66.20 2 172.67.155.79 1

2 recorded

Domain 235433.vip

Software information

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

Create report

Create report

Create report

Create report

Create report

235433.vip*.235433.vip

235433.vip*.235433.vip

Domain summary

IP summary