LeakIX - Host 278jd.com

Domain 278jd.com

Germany

Zhejiang Taobao Network Co.,Ltd

Software information

Tengine

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 163.181.92.202
Domain: 278jd.com
Port: 443
URL: https://278jd.com

First seen 2025-11-22 20:32
Last seen 2026-01-02 19:22
Open for 40 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d80e49b1cc0e3d081538dc5846988a9461
```
Found 8 files trough .DS_Store spidering:

/img
/img/bg.jpg
/img/footer.png
/img/icon.png
/img/kefu.png
/img/logo.png
/index.html
/js
```
  Found on 2026-01-02 19:22
Create report

Open service 163.181.92.202:443 · 278jd.com

2026-01-10 00:58

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Sat, 10 Jan 2026 00:58:39 GMT
Via: ens-cache25.l2de4[843,842,304-0,H], ens-cache11.l2de4[845,0], ens-cache23.de5[0,0,200-0,H], ens-cache15.de5[6,0]
Last-Modified: Mon, 08 Sep 2025 09:01:52 GMT
ETag: "68be9b80-922"
Age: 2
Ali-Swift-Global-Savetime: 1768006719
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Sat, 10 Jan 2026 00:58:39 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b55ca317680067219973198e

Page title: RVIP2

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<meta name="page-desc" content="dnpnc3Z6c3lrcnlsaXZ6emh6eHpncw==">
<title>RVIP2</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:15%;top:19.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:15.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>Facebook.init({fbpxid:'3970452576600838',adjustToken:'1s4xow7e',})
function handleBtnDown1() {const url ='https://h5.rvip2.co?chn=cnZpcDJfaWQ1X250bGEyMzc1'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.g1iw23.com/android/qqyxScnadoB2yNCfAypxJ6.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 163.181.92.202:443 · 278jd.com

2026-01-02 19:22

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Fri, 02 Jan 2026 19:22:22 GMT
Via: ens-cache25.l2de4[878,878,304-0,H], ens-cache18.l2de4[880,0], ens-cache23.de5[0,0,200-0,H], ens-cache17.de5[4,0]
Last-Modified: Mon, 08 Sep 2025 09:01:52 GMT
ETag: "68be9b80-922"
Age: 0
Ali-Swift-Global-Savetime: 1767381742
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Fri, 02 Jan 2026 19:22:22 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b55cec17673817425601190e

Page title: RVIP2

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<meta name="page-desc" content="dnpnc3Z6c3lrcnlsaXZ6emh6eHpncw==">
<title>RVIP2</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:15%;top:19.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:15.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>Facebook.init({fbpxid:'3970452576600838',adjustToken:'1s4xow7e',})
function handleBtnDown1() {const url ='https://h5.rvip2.co?chn=cnZpcDJfaWQ1X250bGEyMzc1'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.g1iw23.com/android/qqyxScnadoB2yNCfAypxJ6.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 163.181.92.202:443 · 278jd.com

2025-12-22 21:08

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 21:08:03 GMT
Via: ens-cache25.l2de4[1223,1223,304-0,H], ens-cache9.l2de4[1225,0], ens-cache23.de5[1231,226,200-0,C], ens-cache4.de5[234,0]
Last-Modified: Mon, 08 Sep 2025 09:01:52 GMT
ETag: "68be9b80-922"
Age: 0
Ali-Swift-Global-Savetime: 1766437684
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Mon, 22 Dec 2025 21:08:04 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b55c9817664376837915334e

Page title: RVIP2

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<meta name="page-desc" content="dnpnc3Z6c3lrcnlsaXZ6emh6eHpncw==">
<title>RVIP2</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:15%;top:19.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:15.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>Facebook.init({fbpxid:'3970452576600838',adjustToken:'1s4xow7e',})
function handleBtnDown1() {const url ='https://h5.rvip2.co?chn=cnZpcDJfaWQ1X250bGEyMzc1'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.g1iw23.com/android/qqyxScnadoB2yNCfAypxJ6.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 163.181.92.202:443 · 278jd.com

2025-12-20 21:48

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Sat, 20 Dec 2025 21:48:19 GMT
Via: ens-cache25.l2de4[1236,1236,304-0,H], ens-cache1.l2de4[1238,0], ens-cache23.de5[1245,201,200-0,C], ens-cache21.de5[211,0]
Last-Modified: Mon, 08 Sep 2025 09:01:52 GMT
ETag: "68be9b80-922"
Age: 0
Ali-Swift-Global-Savetime: 1766267299
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Sat, 20 Dec 2025 21:48:19 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b55cf017662672997306243e

Page title: RVIP2

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<meta name="page-desc" content="dnpnc3Z6c3lrcnlsaXZ6emh6eHpncw==">
<title>RVIP2</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:15%;top:19.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:15.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>Facebook.init({fbpxid:'3970452576600838',adjustToken:'1s4xow7e',})
function handleBtnDown1() {const url ='https://h5.rvip2.co?chn=cnZpcDJfaWQ1X250bGEyMzc1'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.g1iw23.com/android/qqyxScnadoB2yNCfAypxJ6.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2025-12-20 by HttpPlugin

Create report

*.278jd.com278jd.com

Fingerprint:

fe63b0a4199599de78a2b7e2b9e37fe89e5c76fd128fdba05977bc750c921551

CN:

278jd.com

Key:

RSA-4096

Issuer:

R12

Not before:

2025-11-26 19:43

Not after:

2026-02-24 19:43

Domain summary

278jd.com 4

1 recorded

IP summary

163.181.92.202 2

1 recorded

Domain 278jd.com

Germany

Software information

MacOS file listing through .DS_Store file

Create report

Create report

Create report

Create report

*.278jd.com278jd.com

Domain summary

IP summary