LeakIX - Host fkr27.com

Domain fkr27.com

Germany

Zhejiang Taobao Network Co.,Ltd

Software information

Tengine

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 163.181.92.204
Domain: fkr27.com
Port: 443
URL: https://fkr27.com

First seen 2025-09-08 09:55
Last seen 2026-01-02 18:12
Open for 116 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c4239b3d84239b3d80e49b1cc0e3d081538dc5846988a9461
```
Found 8 files trough .DS_Store spidering:

/img
/img/bg.jpg
/img/footer.png
/img/icon.png
/img/kefu.png
/img/logo.png
/index.html
/js
```
  Found on 2026-01-02 18:12
- Severity: low
  Fingerprint: 5f32cf5d6962f09c1a5d9b0f1a5d9b0fb246cfc7bd9842ebcf582f43cf582f43
```
Found 3 files trough .DS_Store spidering:

/img
/index.html
/js
```
  Found on 2025-11-26 20:41
Create report

Open service 163.181.92.204:443 · fkr27.com

2026-01-10 01:18

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Sat, 10 Jan 2026 01:18:21 GMT
Via: ens-cache25.l2de4[919,919,304-0,H], ens-cache23.l2de4[921,0], ens-cache23.de5[0,0,200-0,H], ens-cache13.de5[3,0]
Last-Modified: Mon, 08 Sep 2025 08:57:55 GMT
ETag: "68be9a93-922"
Age: 2
Ali-Swift-Global-Savetime: 1768007902
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Sat, 10 Jan 2026 01:18:22 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b55ca117680079041456166e

Page title: RVIP2

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<meta name="page-desc" content="dnpnc3Z6c3lrcnlsaXZ6emh6eHpncw==">
<title>RVIP2</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:15%;top:19.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:15.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>Facebook.init({fbpxid:'1126795735545508',adjustToken:'1s7agh7g',})
function handleBtnDown1() {const url ='https://h5.rvip2.co?chn=cnZpcDJfaWQ1X250bGEyMzc3'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.g1iw23.com/android/0RhHw4I55eLcdrujgekqZD.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2026-01-10 by HttpPlugin

Create report

Open service 163.181.92.204:443 · fkr27.com

2026-01-02 18:12

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Fri, 02 Jan 2026 18:12:41 GMT
Via: ens-cache25.l2de4[881,881,304-0,H], ens-cache7.l2de4[883,0], ens-cache23.de5[0,0,200-0,H], ens-cache13.de5[5,0]
Last-Modified: Mon, 08 Sep 2025 08:57:55 GMT
ETag: "68be9a93-922"
Age: 0
Ali-Swift-Global-Savetime: 1767377561
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Fri, 02 Jan 2026 18:12:41 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b55ca117673775613591288e

Page title: RVIP2

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<meta name="page-desc" content="dnpnc3Z6c3lrcnlsaXZ6emh6eHpncw==">
<title>RVIP2</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:15%;top:19.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:15.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>Facebook.init({fbpxid:'1126795735545508',adjustToken:'1s7agh7g',})
function handleBtnDown1() {const url ='https://h5.rvip2.co?chn=cnZpcDJfaWQ1X250bGEyMzc3'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.g1iw23.com/android/0RhHw4I55eLcdrujgekqZD.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 163.181.92.204:443 · fkr27.com

2025-12-23 08:29

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Tue, 23 Dec 2025 08:30:00 GMT
Via: ens-cache25.l2de4[1238,1238,304-0,H], ens-cache24.l2de4[1239,0], ens-cache23.de5[1247,311,200-0,C], ens-cache16.de5[316,0]
Last-Modified: Mon, 08 Sep 2025 08:57:55 GMT
ETag: "68be9a93-922"
Age: 0
Ali-Swift-Global-Savetime: 1766478600
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Tue, 23 Dec 2025 08:30:00 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b55ca417664786001357159e

Page title: RVIP2

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<meta name="page-desc" content="dnpnc3Z6c3lrcnlsaXZ6emh6eHpncw==">
<title>RVIP2</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:15%;top:19.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:15.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>Facebook.init({fbpxid:'1126795735545508',adjustToken:'1s7agh7g',})
function handleBtnDown1() {const url ='https://h5.rvip2.co?chn=cnZpcDJfaWQ1X250bGEyMzc3'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.g1iw23.com/android/0RhHw4I55eLcdrujgekqZD.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 163.181.92.204:443 · fkr27.com

2025-12-21 10:28

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Sun, 21 Dec 2025 10:28:36 GMT
Via: ens-cache25.l2de4[1564,1564,304-0,H], ens-cache11.l2de4[1566,0], ens-cache23.de5[1573,384,200-0,C], ens-cache11.de5[389,0]
Last-Modified: Mon, 08 Sep 2025 08:57:55 GMT
ETag: "68be9a93-922"
Age: 0
Ali-Swift-Global-Savetime: 1766312916
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Sun, 21 Dec 2025 10:28:36 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b55c9f17663129162503271e

Page title: RVIP2

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<meta name="page-desc" content="dnpnc3Z6c3lrcnlsaXZ6emh6eHpncw==">
<title>RVIP2</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:15%;top:19.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:15.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>Facebook.init({fbpxid:'1126795735545508',adjustToken:'1s7agh7g',})
function handleBtnDown1() {const url ='https://h5.rvip2.co?chn=cnZpcDJfaWQ1X250bGEyMzc3'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.g1iw23.com/android/0RhHw4I55eLcdrujgekqZD.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2025-12-21 by HttpPlugin

Create report

*.fkr27.comfkr27.com

Fingerprint:

8a73b5af8ac581802b4cf7776f432c3a52eac3072cd15573e241e89b5b0ba95a

CN:

fkr27.com

Key:

RSA-4096

Issuer:

R12

Not before:

2025-11-26 19:42

Not after:

2026-02-24 19:42

Domain summary

fkr27.com 5

1 recorded

IP summary

163.181.92.204 2 155.102.51.7 1

2 recorded

Domain fkr27.com

Germany

Software information

MacOS file listing through .DS_Store file

Create report

Create report

Create report

Create report

*.fkr27.comfkr27.com

Domain summary

IP summary