LeakIX - Host 600tkvip.com

Domain 600tkvip.com

CLOUDFLARENET

Software information

cloudflare

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 172.67.216.77
Domain: 600tkvip.com
Port: 443
URL: https://600tkvip.com

First seen 2025-12-20 08:35
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fbf3ed663295ce3793470c83e3470c83e
```
Found 3 files trough .DS_Store spidering:

/index.html
/index2.html
/第三级
```
  Found on 2025-12-20 08:35
Create report

Open service 172.67.216.77:443 · 600tkvip.com

2026-01-09 02:05

HTTP/1.1 200 OK
Date: Fri, 09 Jan 2026 02:05:11 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Last-Modified: Wed, 31 Dec 2025 09:04:50 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Speculation-Rules: "/cdn-cgi/speculation"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=hcOrWZhgWDzF7OFMk9ncDMZTGTVoq5PS2eJlfVPcAMW90IDvzDpAdauI%2Bb56lfSDC%2FA4SJPLYfluyVb9v93v9GYgLlQGooSQBy4xrg%3D%3D"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9bb05e41fdfdd991-AMS
alt-svc: h3=":443"; ma=86400

Page title: 49

<!DOCTYPE html>
<html>

<head>
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    <meta charset="utf-8">
    <meta name="viewport"
        content="width=device-width,initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no">
    <title>49</title>
    <link rel="shortcut icon" href="favicon.ico" type="image/x-icon">
    <link rel="stylesheet" href="css/main.css?i=223">
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/Swiper/5.4.5/css/swiper.min.css">
    <script type="text/javascript">
        let fun = 1;
        function pupclose() {
            document.getElementById("footer").style.display = "none";
        }
        function tz1() {
            let u = "https";
            u += ":";
            u += "//";
            let urls = [
                "h5a@b492884a@bcom:8443",
                "h5a@b492827a@bcom:8443",
                "h6a@b492876a@bcom:8443"
            ];
            u += urls[Math.round(Math.random() * 2)];
            window.location.href = (u.replace(/a@b/g, '.'));
        }
        function tz2() {
            let u = "https";
            u += ":";
            u += "//";
            let urls = [
                "h5a@b492869a@bcom:8443",
                "h5a@b492876a@bcom:8443",
                "h5a@b492914a@bcom:8443"
            ];
            u += urls[Math.round(Math.random() * 2)];
            window.location.href = (u.replace(/a@b/g, '.'));
        }
        function tz3() {
            let u = "https";
            u += ":";
            u += "//";
            let urls = [
                "h5a@b493979a@bcom:8443",
                "h5a@b492864a@bcom:8443",
                "h5a@b492892a@bcom:8443"
            ];
            u += urls[Math.round(Math.random() * 2)];
            window.location.href = (u.replace(/a@b/g, '.'));
        }
        function xiazai() {
            let u = navigator.userAgent;
            console.log(u);
            if (u.indexOf("Android") > -1 || u.indexOf("Adr") > -1) {
                window.location.href = ("https://luoqi.s3.ap-east-1.amazonaws.com/download/49android/49tk.apk");
            } else {
                window.location.href = ("https://down.949tkapp.com/49tk/");
            }
        }

        function change(index) {
            $('.popup').show();
            fun = index
        }
    </script>
</head>

<body>
    <div class="body_view">
        <div class="header_title clearfix">
            <a class="logo fl" href="javascript:void();">
                <img src="images/logo.png">
            </a>
            <a class="download" onclick="xiazai()">
                <span class="download-icon"></span>
            </a>
            <div class="title_tips fr">温馨提示：尊敬的用户，如发现备用线路无法正常访问时，请更换其他浏览器（推荐浏览器：火狐、谷歌）进行访问！</div>
        </div>
        <div class="swiper" onclick="tz2()">
            <div class="swiper-wrapper">
                <div class="swiper-slide"><img src="images/b1.png" /></div>
                <div class="swiper-slide"><img src="images/b2.png" /></div>
                <div class="swiper-slide"><img src="images/b3.png" /></div>
            </div>

            <div class="swiper-pagination"></div>
        </div>

        <div class="content_view">
            <div class="title_tips_text m_show">线路入口</div>
            <div class="xianlu">
                <div class="clearfix">
                    <a class="xianlu_item j_xl_1 ml" onclick="change(1)">
                        <div class="text">线路入口一</div>

                        <div class="icon m_show"></div>
                    </a>
                    <a class="xianlu_item j_xl_2" onclick="change(2)">
                        <div class="text">线路入口二</div>
                        <div class="icon m_show"></div>
                    </a>
                    <a class="xianlu_item j_xl_3" onclick="change(3)">
                        <div class="text">线路入口三</div>
                        <div class="i

Found 2026-01-09 by HttpPlugin

Create report

Open service 172.67.216.77:443 · 600tkvip.com

2026-01-02 01:15

HTTP/1.1 200 OK
Date: Fri, 02 Jan 2026 01:15:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Last-Modified: Wed, 31 Dec 2025 09:04:50 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Speculation-Rules: "/cdn-cgi/speculation"
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=mB9%2Fk5X2BGDFNE6OI95dbiWcDZedgbd4qhu8usSI0aF8lVUwyRyDgtMHGHuDfYmiSOu%2B0kwQkXhMwyOK%2FaoihvBHM72KvfCXYAQVAg%3D%3D"}]}
cf-cache-status: DYNAMIC
CF-RAY: 9b7668533eb13a68-FRA
alt-svc: h3=":443"; ma=86400

Page title: 49

<!DOCTYPE html>
<html>

<head>
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    <meta charset="utf-8">
    <meta name="viewport"
        content="width=device-width,initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no">
    <title>49</title>
    <link rel="shortcut icon" href="favicon.ico" type="image/x-icon">
    <link rel="stylesheet" href="css/main.css?i=223">
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/Swiper/5.4.5/css/swiper.min.css">
    <script type="text/javascript">
        let fun = 1;
        function pupclose() {
            document.getElementById("footer").style.display = "none";
        }
        function tz1() {
            let u = "https";
            u += ":";
            u += "//";
            let urls = [
                "h5a@b492884a@bcom:8443",
                "h5a@b492827a@bcom:8443",
                "h6a@b492876a@bcom:8443"
            ];
            u += urls[Math.round(Math.random() * 2)];
            window.location.href = (u.replace(/a@b/g, '.'));
        }
        function tz2() {
            let u = "https";
            u += ":";
            u += "//";
            let urls = [
                "h5a@b492869a@bcom:8443",
                "h5a@b492876a@bcom:8443",
                "h5a@b492914a@bcom:8443"
            ];
            u += urls[Math.round(Math.random() * 2)];
            window.location.href = (u.replace(/a@b/g, '.'));
        }
        function tz3() {
            let u = "https";
            u += ":";
            u += "//";
            let urls = [
                "h5a@b493979a@bcom:8443",
                "h5a@b492864a@bcom:8443",
                "h5a@b492892a@bcom:8443"
            ];
            u += urls[Math.round(Math.random() * 2)];
            window.location.href = (u.replace(/a@b/g, '.'));
        }
        function xiazai() {
            let u = navigator.userAgent;
            console.log(u);
            if (u.indexOf("Android") > -1 || u.indexOf("Adr") > -1) {
                window.location.href = ("https://luoqi.s3.ap-east-1.amazonaws.com/download/49android/49tk.apk");
            } else {
                window.location.href = ("https://down.949tkapp.com/49tk/");
            }
        }

        function change(index) {
            $('.popup').show();
            fun = index
        }
    </script>
</head>

<body>
    <div class="body_view">
        <div class="header_title clearfix">
            <a class="logo fl" href="javascript:void();">
                <img src="images/logo.png">
            </a>
            <a class="download" onclick="xiazai()">
                <span class="download-icon"></span>
            </a>
            <div class="title_tips fr">温馨提示：尊敬的用户，如发现备用线路无法正常访问时，请更换其他浏览器（推荐浏览器：火狐、谷歌）进行访问！</div>
        </div>
        <div class="swiper" onclick="tz2()">
            <div class="swiper-wrapper">
                <div class="swiper-slide"><img src="images/b1.png" /></div>
                <div class="swiper-slide"><img src="images/b2.png" /></div>
                <div class="swiper-slide"><img src="images/b3.png" /></div>
            </div>

            <div class="swiper-pagination"></div>
        </div>

        <div class="content_view">
            <div class="title_tips_text m_show">线路入口</div>
            <div class="xianlu">
                <div class="clearfix">
                    <a class="xianlu_item j_xl_1 ml" onclick="change(1)">
                        <div class="text">线路入口一</div>

                        <div class="icon m_show"></div>
                    </a>
                    <a class="xianlu_item j_xl_2" onclick="change(2)">
                        <div class="text">线路入口二</div>
                        <div class="icon m_show"></div>
                    </a>
                    <a class="xianlu_item j_xl_3" onclick="change(3)">
                        <div class="text">线路入口三</div>
                        <div class="i

Found 2026-01-02 by HttpPlugin

Create report

Open service 172.67.216.77:443 · 600tkvip.com

2025-12-22 13:24

HTTP/1.1 200 OK
Date: Mon, 22 Dec 2025 13:24:05 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Server: cloudflare
Last-Modified: Sun, 07 Dec 2025 18:13:40 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary: Accept-Encoding
Server-Timing: cfCacheStatus;desc="DYNAMIC"
Server-Timing: cfEdge;dur=8,cfOrigin;dur=406
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=7mPgPfB0UW2AjRp3xtwow61c3Ur9PoTdGXWFbjze62xoO5lXZrd5Gs%2BPGtp8qkKTOtqRM%2FKah%2Fci3R2MKWmOim6yM4V45Mc%2FAcpPTQ%3D%3D"}]}
cf-cache-status: DYNAMIC
Speculation-Rules: "/cdn-cgi/speculation"
CF-RAY: 9b1feffe7ceb52c6-EWR
alt-svc: h3=":443"; ma=86400

Page title: 49

<!DOCTYPE html>
<html>

<head>
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    <meta charset="utf-8">
    <meta name="viewport"
        content="width=device-width,initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no">
    <title>49</title>
    <link rel="shortcut icon" href="favicon.ico" type="image/x-icon">
    <link rel="stylesheet" href="css/main.css?i=223">
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/Swiper/5.4.5/css/swiper.min.css">
    <script type="text/javascript">
        let fun = 1;
        function pupclose() {
            document.getElementById("footer").style.display = "none";
        }
        function tz1() {
            let u = "https";
            u += ":";
            u += "//";
            let urls = [
                "h5a@b492884a@bcom:8443",
                "h5a@b492827a@bcom:8443",
                "h6a@b492876a@bcom:8443"
            ];
            u += urls[Math.round(Math.random() * 2)];
            window.location.href = (u.replace(/a@b/g, '.'));
        }
        function tz2() {
            let u = "https";
            u += ":";
            u += "//";
            let urls = [
                "h5a@b492869a@bcom:8443",
                "h5a@b492876a@bcom:8443",
                "h5a@b492914a@bcom:8443"
            ];
            u += urls[Math.round(Math.random() * 2)];
            window.location.href = (u.replace(/a@b/g, '.'));
        }
        function tz3() {
            let u = "https";
            u += ":";
            u += "//";
            let urls = [
                "h5a@b493979a@bcom:8443",
                "h5a@b492864a@bcom:8443",
                "h5a@b492990a@bcom:8443"
            ];
            u += urls[Math.round(Math.random() * 2)];
            window.location.href = (u.replace(/a@b/g, '.'));
        }
        function xiazai() {
            let u = navigator.userAgent;
            console.log(u);
            if (u.indexOf("Android") > -1 || u.indexOf("Adr") > -1) {
                window.location.href = ("https://luoqi.s3.ap-east-1.amazonaws.com/download/49android/49tk.apk");
            } else {
                window.location.href = ("https://down.949tkapp.com/49tk/");
            }
        }

        function change(index) {
            $('.popup').show();
            fun = index
        }
    </script>
</head>

<body>
    <div class="body_view">
        <div class="header_title clearfix">
            <a class="logo fl" href="javascript:void();">
                <img src="images/logo.png">
            </a>
            <a class="download" onclick="xiazai()">
                <span class="download-icon"></span>
            </a>
            <div class="title_tips fr">温馨提示：尊敬的用户，如发现备用线路无法正常访问时，请更换其他浏览器（推荐浏览器：火狐、谷歌）进行访问！</div>
        </div>
        <div class="swiper" onclick="tz2()">
            <div class="swiper-wrapper">
                <div class="swiper-slide"><img src="images/b1.png" /></div>
                <div class="swiper-slide"><img src="images/b2.png" /></div>
                <div class="swiper-slide"><img src="images/b3.png" /></div>
            </div>

            <div class="swiper-pagination"></div>
        </div>

        <div class="content_view">
            <div class="title_tips_text m_show">线路入口</div>
            <div class="xianlu">
                <div class="clearfix">
                    <a class="xianlu_item j_xl_1 ml" onclick="change(1)">
                        <div class="text">线路入口一</div>

                        <div class="icon m_show"></div>
                    </a>
                    <a class="xianlu_item j_xl_2" onclick="change(2)">
                        <div class="text">线路入口二</div>
                        <div class="icon m_show"></div>
                    </a>
                    <a class="xianlu_item j_xl_3" onclick="change(3)">
                        <div class="text">线路入口三</div>
                        <div class="i

Found 2025-12-22 by HttpPlugin

Create report

600tkvip.com*.600tkvip.com

Fingerprint:

148892035eec322155687bab67326e6ef236f891d9dd72730a445f56e51ab581

CN:

600tkvip.com

Key:

ECDSA-256

Issuer:

WE1

Not before:

2025-12-20 07:32

Not after:

2026-03-20 08:30

Domain summary

600tkvip.com 3

1 recorded

IP summary

172.67.216.77 2

1 recorded

Domain 600tkvip.com

Software information

MacOS file listing through .DS_Store file

Create report

Create report

Create report

600tkvip.com*.600tkvip.com

Domain summary

IP summary