LeakIX - Host 28333h.com

Domain 28333h.com

Hong Kong

CLOUDFLARENET

Software information

cloudflare

tcp/443 tcp/80 tcp/8443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 43.199.73.115
Domain: 28333h.com
Port: 443
URL: https://28333h.com

First seen 2024-08-18 20:04
Last seen 2025-03-07 02:58
Open for 200 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d86812efb5dac32385ece57168f2a9622a
```
Found 8 files trough .DS_Store spidering:

/888
/check.html
/event
/index.html
/m
/robots.txt
/static
/static-hg99
```
  Found on 2025-03-07 02:58
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 43.199.73.115
Domain: www.28333h.com
Port: 443
URL: https://www.28333h.com

First seen 2024-08-18 20:04
Last seen 2025-03-07 02:58
Open for 200 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d86812efb5dac32385ece57168f2a9622a
```
Found 8 files trough .DS_Store spidering:

/888
/check.html
/event
/index.html
/m
/robots.txt
/static
/static-hg99
```
  Found on 2025-03-07 02:58
Create report

Open service 2606:4700:3035::ac43:c833:80 · 28333h.com

2026-01-10 05:58

HTTP/1.1 301 Moved Permanently
Date: Sat, 10 Jan 2026 05:58:22 GMT
Content-Length: 0
Connection: close
Location: https://28333h.com/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=oYnmZgkHTOPKt44HaqP1fO5ik7fA5IqkZg56CloAOB%2FW5zIUSSYKQGCQ0Jm%2BWeTGOtj7EDzWMfCwOQQqUG6alPP%2BTT3Aejk2UBFRldneE4YcLUyL1uc%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfEdge;dur=11,cfOrigin;dur=0
Server: cloudflare
CF-RAY: 9bb9f137a9fa429b-EWR
alt-svc: h3=":443"; ma=86400

Found 3 days ago by HttpPlugin

Create report

Open service 2606:4700:3035::ac43:c833:443 · 28333h.com

2026-01-10 05:58

HTTP/1.1 403 Forbidden
Date: Sat, 10 Jan 2026 05:58:23 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=q6ejepg%2FulE8Rf7hYMzI%2BnrKGC5%2F%2FN2pAYdaw1M%2B28e1wJoJfz%2FV%2Ffgery9HiGXUk3hF907WHLNfdnvV1A0vJ5yNTuNKMz92oiqNJFc%2BVxNj7ABF7RI%3D"}]}
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=4,cfOrigin;dur=482
CF-RAY: 9bb9f13a5cbbcdf0-EWR
alt-svc: h3=":443"; ma=86400

Page title: ✅发发✅

<!DOCTYPE html PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <meta http-equiv="Content-Language" content="zh-cn">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <title>✅发发✅</title>
       <!-- 51 tag (gtag.js) -->
<script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
<script>LA.init({id:"3I9IL3ptayd6Zncd",ck:"3I9IL3ptayd6Zncd"})</script>


       
 <body><marquee behavior=alternate  style="font-family: Arial, sans-serif; font-size: 18px; color: red;">线路不通时请尝试其他线路</marquee><br> <br><marquee behavior=alternate  style="font-family: Arial, sans-serif; font-size: 18px; color: red;"><专业，品牌，安全，实力></marquee><br>
        <p style="font-size:30pt;text-align:center;padding:118px 0px;">
           <a href="https://35.220.211.122:9876" target="_blank" style="background:#077727;padding:10px;color:#fff;border-radius:10px;cursor:pointer;text-decoration:none;">安全线路①进入</a><br>  <br><a href="https://34.92.85.46:9876" target="_blank" style="background:#077727;padding:10px;color:#fff;border-radius:10px;cursor:pointer;text-decoration:none;">安全线路②进入</a><br> <br>
             <a href="https://www.9yh88.com:9300/promo" target="_blank" style="background:#EA7D75;padding:10px;color:#fff;border-radius:9px;cursor:pointer;text-decoration:none;">💖免费领取福利</a><br>
           <br><a href="https://lgclub.9yh66.com:9300/" target="_blank" style="background:#f28500;padding:10px;color:#fff;border-radius:10px;cursor:pointer;text-decoration:none;">😍美女直播➨进入</a>
<br>            <br><a href="https://35.220.211.122:9876" target="_blank" style="background:#f28500;padding:10px;color:#fff;border-radius:10px;cursor:pointer;text-decoration:none;">🎰online</a>

        </p>
    <script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"7002e25f23d74bcc84d4fb4ac60c43b2","r":1,"server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>
</body>
</html>

Found 3 days ago by HttpPlugin

Create report

Open service 2606:4700:3035::ac43:c833:8443 · 28333h.com

2026-01-10 05:58

HTTP/1.1 523 <none>
Date: Sat, 10 Jan 2026 05:58:23 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
Server-Timing: cfEdge;dur=210,cfOrigin;dur=0
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9bb9f138f9e793b7-EWR
alt-svc: h3=":8443"; ma=86400


error code: 523

Found 3 days ago by HttpPlugin

Create report

Open service 2606:4700:3031::6815:3a29:80 · 28333h.com

2026-01-10 05:58

HTTP/1.1 301 Moved Permanently
Date: Sat, 10 Jan 2026 05:58:22 GMT
Content-Length: 0
Connection: close
Location: https://28333h.com/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Nt%2Bybeec73lZp0EgXl9NkJmbjqFkFKUsrX%2Bq97YmO2SgL7xiqZtowl6xeLgstPIcOIZfLCbivaDoNpEAwCqa7oPFOBO4%2Ffclkl5flCNo3%2BTinFhwLQQ%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfEdge;dur=9,cfOrigin;dur=0
Server: cloudflare
CF-RAY: 9bb9f137a95a5da8-EWR
alt-svc: h3=":443"; ma=86400

Found 3 days ago by HttpPlugin

Create report

Open service 172.67.200.51:80 · 28333h.com

2026-01-10 05:58

HTTP/1.1 301 Moved Permanently
Date: Sat, 10 Jan 2026 05:58:22 GMT
Content-Length: 0
Connection: close
Location: https://28333h.com/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=DjCszPennFyuYSumhbTfobBcU%2BHYwFqkCROfJdbSY93KNR3Cx2s4s3YbseW%2Fu37NjUtmkiwX82ZpTS370QlfbXro0oIPKxMHqMo%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfEdge;dur=7,cfOrigin;dur=0
Server: cloudflare
CF-RAY: 9bb9f137acaafbfb-EWR
alt-svc: h3=":443"; ma=86400

Found 3 days ago by HttpPlugin

Create report

Open service 2606:4700:3031::6815:3a29:443 · 28333h.com

2026-01-10 05:58

HTTP/1.1 403 Forbidden
Date: Sat, 10 Jan 2026 05:58:24 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=o3ZuXPhdm3lYyDIdIJJ56jKILOh%2BGja%2FiXzXByZb7L7Ly6RjyLtt0VnCxrZ3vjpvV%2BI1uyCQvX3%2F8cSRlt%2FO4zFn6oZoFpYnYFx7bC2pmGmh8nYiZ%2F0%3D"}]}
cf-cache-status: DYNAMIC
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=8,cfOrigin;dur=483
CF-RAY: 9bb9f13d6bf85930-EWR
alt-svc: h3=":443"; ma=86400

Page title: ✅发发✅

<!DOCTYPE html PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <meta http-equiv="Content-Language" content="zh-cn">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <title>✅发发✅</title>
       <!-- 51 tag (gtag.js) -->
<script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
<script>LA.init({id:"3I9IL3ptayd6Zncd",ck:"3I9IL3ptayd6Zncd"})</script>


       
 <body><marquee behavior=alternate  style="font-family: Arial, sans-serif; font-size: 18px; color: red;">线路不通时请尝试其他线路</marquee><br> <br><marquee behavior=alternate  style="font-family: Arial, sans-serif; font-size: 18px; color: red;"><专业，品牌，安全，实力></marquee><br>
        <p style="font-size:30pt;text-align:center;padding:118px 0px;">
           <a href="https://35.220.211.122:9876" target="_blank" style="background:#077727;padding:10px;color:#fff;border-radius:10px;cursor:pointer;text-decoration:none;">安全线路①进入</a><br>  <br><a href="https://34.92.85.46:9876" target="_blank" style="background:#077727;padding:10px;color:#fff;border-radius:10px;cursor:pointer;text-decoration:none;">安全线路②进入</a><br> <br>
             <a href="https://www.9yh88.com:9300/promo" target="_blank" style="background:#EA7D75;padding:10px;color:#fff;border-radius:9px;cursor:pointer;text-decoration:none;">💖免费领取福利</a><br>
           <br><a href="https://lgclub.9yh66.com:9300/" target="_blank" style="background:#f28500;padding:10px;color:#fff;border-radius:10px;cursor:pointer;text-decoration:none;">😍美女直播➨进入</a>
<br>            <br><a href="https://35.220.211.122:9876" target="_blank" style="background:#f28500;padding:10px;color:#fff;border-radius:10px;cursor:pointer;text-decoration:none;">🎰online</a>

        </p>
    <script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"version":"2024.11.0","token":"7002e25f23d74bcc84d4fb4ac60c43b2","r":1,"server_timing":{"name":{"cfCacheStatus":true,"cfEdge":true,"cfExtPri":true,"cfL4":true,"cfOrigin":true,"cfSpeedBrain":true},"location_startswith":null}}' crossorigin="anonymous"></script>
</body>
</html>

Found 3 days ago by HttpPlugin

Create report

Open service 2606:4700:3031::6815:3a29:8443 · 28333h.com

2026-01-10 05:58
Found 3 days ago by HttpPlugin
Create report
Open service 172.67.200.51:8443 · 28333h.com

2026-01-10 05:58
Found 3 days ago by HttpPlugin
Create report

Open service 104.21.58.41:80 · 28333h.com

2026-01-10 05:58

HTTP/1.1 301 Moved Permanently
Date: Sat, 10 Jan 2026 05:58:22 GMT
Content-Length: 0
Connection: close
Location: https://28333h.com/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=8zHdFejrqfHcd9LRl2KJg0icqbO5g%2F2l8QLaEKPB1fRP4CZB%2BLj1uziHUmo0XDiHx2hk9MFooVLP1v%2FhgciugsehCphhYsDlYqg%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server-Timing: cfEdge;dur=8,cfOrigin;dur=0
Server: cloudflare
CF-RAY: 9bb9f13759e72dae-EWR
alt-svc: h3=":443"; ma=86400

Found 3 days ago by HttpPlugin

Create report

Open service 104.21.58.41:8443 · 28333h.com

2026-01-10 05:58

HTTP/1.1 523 <none>
Date: Sat, 10 Jan 2026 05:58:23 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 15
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
Server-Timing: cfEdge;dur=219,cfOrigin;dur=0
X-Frame-Options: SAMEORIGIN
Server: cloudflare
CF-RAY: 9bb9f138bb198c83-EWR
alt-svc: h3=":8443"; ma=86400


error code: 523

Found 3 days ago by HttpPlugin

Create report

Open service 172.67.200.51:443 · 28333h.com

2026-01-10 05:58

HTTP/1.1 403 Forbidden
Date: Sat, 10 Jan 2026 05:58:23 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=wrdx8b4cVo%2FWxx%2BTT7VVkeHo75e2dl0z02wdcB3fbRWqJHdNHAkO9%2FKfRJOVjdiCYyW2EvE%2BLmQaZjIOWkTaAZfXAvrTAevz%2F5c%3D"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9bb9f13979aa9cd3-AMS
alt-svc: h3=":443"; ma=86400

Page title: ✅发发✅

<!DOCTYPE html PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <meta http-equiv="Content-Language" content="zh-cn">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <title>✅发发✅</title>
       <!-- 51 tag (gtag.js) -->
<script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
<script>LA.init({id:"3I9IL3ptayd6Zncd",ck:"3I9IL3ptayd6Zncd"})</script>


       
 <body><marquee behavior=alternate  style="font-family: Arial, sans-serif; font-size: 18px; color: red;">线路不通时请尝试其他线路</marquee><br> <br><marquee behavior=alternate  style="font-family: Arial, sans-serif; font-size: 18px; color: red;"><专业，品牌，安全，实力></marquee><br>
        <p style="font-size:30pt;text-align:center;padding:118px 0px;">
           <a href="https://35.220.211.122:9876" target="_blank" style="background:#077727;padding:10px;color:#fff;border-radius:10px;cursor:pointer;text-decoration:none;">安全线路①进入</a><br>  <br><a href="https://34.92.85.46:9876" target="_blank" style="background:#077727;padding:10px;color:#fff;border-radius:10px;cursor:pointer;text-decoration:none;">安全线路②进入</a><br> <br>
             <a href="https://www.9yh88.com:9300/promo" target="_blank" style="background:#EA7D75;padding:10px;color:#fff;border-radius:9px;cursor:pointer;text-decoration:none;">💖免费领取福利</a><br>
           <br><a href="https://lgclub.9yh66.com:9300/" target="_blank" style="background:#f28500;padding:10px;color:#fff;border-radius:10px;cursor:pointer;text-decoration:none;">😍美女直播➨进入</a>
<br>            <br><a href="https://35.220.211.122:9876" target="_blank" style="background:#f28500;padding:10px;color:#fff;border-radius:10px;cursor:pointer;text-decoration:none;">🎰online</a>

        </p>
    </body>
</html>

Found 3 days ago by HttpPlugin

Create report

Open service 104.21.58.41:443 · 28333h.com

2026-01-10 05:58

HTTP/1.1 403 Forbidden
Date: Sat, 10 Jan 2026 05:58:23 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=QrwB6GNWidwS%2BaoT0ISYnjrttrzYNNKZKlXRrtGYDdOwqhRmok9KLAKm367Wi9%2B6HLcsdRT7EagzLr0fSojwPWXlrmE1B8AS56c%3D"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9bb9f1398c650e10-AMS
alt-svc: h3=":443"; ma=86400

Page title: ✅发发✅

<!DOCTYPE html PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <meta http-equiv="Content-Language" content="zh-cn">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <title>✅发发✅</title>
       <!-- 51 tag (gtag.js) -->
<script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
<script>LA.init({id:"3I9IL3ptayd6Zncd",ck:"3I9IL3ptayd6Zncd"})</script>


       
 <body><marquee behavior=alternate  style="font-family: Arial, sans-serif; font-size: 18px; color: red;">线路不通时请尝试其他线路</marquee><br> <br><marquee behavior=alternate  style="font-family: Arial, sans-serif; font-size: 18px; color: red;"><专业，品牌，安全，实力></marquee><br>
        <p style="font-size:30pt;text-align:center;padding:118px 0px;">
           <a href="https://35.220.211.122:9876" target="_blank" style="background:#077727;padding:10px;color:#fff;border-radius:10px;cursor:pointer;text-decoration:none;">安全线路①进入</a><br>  <br><a href="https://34.92.85.46:9876" target="_blank" style="background:#077727;padding:10px;color:#fff;border-radius:10px;cursor:pointer;text-decoration:none;">安全线路②进入</a><br> <br>
             <a href="https://www.9yh88.com:9300/promo" target="_blank" style="background:#EA7D75;padding:10px;color:#fff;border-radius:9px;cursor:pointer;text-decoration:none;">💖免费领取福利</a><br>
           <br><a href="https://lgclub.9yh66.com:9300/" target="_blank" style="background:#f28500;padding:10px;color:#fff;border-radius:10px;cursor:pointer;text-decoration:none;">😍美女直播➨进入</a>
<br>            <br><a href="https://35.220.211.122:9876" target="_blank" style="background:#f28500;padding:10px;color:#fff;border-radius:10px;cursor:pointer;text-decoration:none;">🎰online</a>

        </p>
    </body>
</html>

Found 3 days ago by HttpPlugin

Create report

28333h.com*.28333h.com

Fingerprint:

b37971a40dead5395173f683e9f0f59be410f4f48e915882ca93228aa4d5ab53

CN:

28333h.com

Key:

ECDSA-256

Issuer:

WE1

Not before:

2026-01-10 04:57

Not after:

2026-04-10 05:55

Domain summary

28333h.com 12 www.28333h.com 1

2 recorded

IP summary

2606:4700:3035::ac43:c833 2 43.199.73.115 2 2606:4700:3031::6815:3a29 1 172.67.200.51 1 104.21.58.41 1

5 recorded

Domain 28333h.com

Hong Kong

Software information

MacOS file listing through .DS_Store file

MacOS file listing through .DS_Store file

28333h.com*.28333h.com

Domain summary

IP summary