LeakIX - Host mczuis.com

Domain mczuis.com

United States

Zhejiang Taobao Network Co.,Ltd

Software information

Tengine

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 163.181.254.192
Domain: mczuis.com
Port: 443
URL: https://mczuis.com

First seen 2025-07-05 23:43
Last seen 2025-12-26 13:18
Open for 173 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814eb40dc2baa19d85c7f77379bcf3b4d643
```
Found 6 files trough .DS_Store spidering:

/img
/img/bg.jpg
/img/footer.png
/img/icon.png
/index.html
/js
```
  Found on 2025-12-26 13:18
Create report

Open service 163.181.254.192:443 · mczuis.com

2026-01-09 02:02

HTTP/1.1 400 Bad Request
Server: Tengine
Date: Fri, 09 Jan 2026 02:02:56 GMT
Content-Type: text/html
Content-Length: 263
Connection: close
Via: ens-cache14.de10[,0]
EagleId: 0000000017679241763148752e

Page title: 400 The plain HTTP request was sent to HTTPS port

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<h1>400 Bad Request</h1>
<p>The plain HTTP request was sent to HTTPS port.<hr/>Powered by Tengine</body>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 163.181.254.192:443 · mczuis.com

2026-01-02 07:48

HTTP/1.1 400 Bad Request
Server: Tengine
Date: Fri, 02 Jan 2026 07:48:12 GMT
Content-Type: text/html
Content-Length: 263
Connection: close
Via: ens-cache13.de10[,0]
EagleId: 0000000017673400923705733e

Page title: 400 The plain HTTP request was sent to HTTPS port

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<h1>400 Bad Request</h1>
<p>The plain HTTP request was sent to HTTPS port.<hr/>Powered by Tengine</body>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 163.181.254.192:443 · mczuis.com

2025-12-30 13:21

HTTP/1.1 400 Bad Request
Server: Tengine
Date: Tue, 30 Dec 2025 13:21:55 GMT
Content-Type: text/html
Content-Length: 263
Connection: close
Via: ens-cache24.de10[,0]
EagleId: 0000000017671009151564028e

Page title: 400 The plain HTTP request was sent to HTTPS port

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<h1>400 Bad Request</h1>
<p>The plain HTTP request was sent to HTTPS port.<hr/>Powered by Tengine</body>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 163.181.254.192:443 · mczuis.com

2025-12-22 14:47

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 14:47:12 GMT
Via: ens-cache25.l2de4[1184,1184,304-0,H], ens-cache10.l2de4[1185,0], ens-cache13.de10[1193,38,200-0,C], ens-cache8.de10[50,0]
Last-Modified: Tue, 22 Apr 2025 09:32:40 GMT
Vary: Accept-Encoding
ETag: "68076238-966"
Age: 0
Ali-Swift-Global-Savetime: 1766414832
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Mon, 22 Dec 2025 14:47:12 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5fe9c17664148327004528e

Page title: Lucky72

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<script src="./js/adjust-1.0.2.js"></script>
<title>Lucky72</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:41%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:-17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()"></div>
<img src="./img/logo.png" alt="" class="logo" />
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon" />
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>Facebook.init({fbpxid:'659098293401935',adjustToken:'1nc9b1ia',})
function handleBtnDown1() {const url =Facebook.getAdjustUrl('https://download.uzrh6w6e.com/android/FesgxHjopBcHxHfPAO6_WE.apk',)
window.open(url,'_blank')
}
function handleBtnDown2() {const url =Facebook.getAdjustUrl('https://download.uzrh6w6e.com/android/FesgxHjopBcHxHfPAO6_WE.apk',)
window.open(url,'_blank')
}
</script>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 163.181.254.192:443 · mczuis.com

2025-12-20 12:31

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Sat, 20 Dec 2025 12:31:20 GMT
Via: ens-cache25.l2de4[1203,1226,304-0,H], ens-cache26.l2de4[1227,0], ens-cache13.de10[1234,18,200-0,C], ens-cache5.de10[22,0]
Last-Modified: Tue, 22 Apr 2025 09:32:40 GMT
Vary: Accept-Encoding
ETag: "68076238-966"
Age: 0
Ali-Swift-Global-Savetime: 1766233880
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Sat, 20 Dec 2025 12:31:20 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5fe9917662338807851038e

Page title: Lucky72

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<script src="./js/adjust-1.0.2.js"></script>
<title>Lucky72</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:41%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:-17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()"></div>
<img src="./img/logo.png" alt="" class="logo" />
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon" />
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>Facebook.init({fbpxid:'659098293401935',adjustToken:'1nc9b1ia',})
function handleBtnDown1() {const url =Facebook.getAdjustUrl('https://download.uzrh6w6e.com/android/FesgxHjopBcHxHfPAO6_WE.apk',)
window.open(url,'_blank')
}
function handleBtnDown2() {const url =Facebook.getAdjustUrl('https://download.uzrh6w6e.com/android/FesgxHjopBcHxHfPAO6_WE.apk',)
window.open(url,'_blank')
}
</script>
</html>

Found 2025-12-20 by HttpPlugin

Create report

*.mczuis.commczuis.com

Fingerprint:

0dfd592b20373d16f7215db5e7d724b973f8673371ec884f71adb963522de801

CN:

*.mczuis.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-10-06 12:35

Not after:

2026-01-04 12:35

Domain summary

mczuis.com 5

1 recorded

IP summary

163.181.254.192 2

1 recorded

Domain mczuis.com

United States

Software information

MacOS file listing through .DS_Store file

Create report

Create report

Create report

Create report

Create report

*.mczuis.commczuis.com

Domain summary

IP summary