LeakIX - Host sp-2127.com

Domain sp-2127.com

United States

Zhejiang Taobao Network Co.,Ltd

Software information

Tengine

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 163.181.254.192
Domain: sp-2127.com
Port: 443
URL: https://sp-2127.com

First seen 2025-06-10 19:56
Last seen 2026-01-02 06:39
Open for 205 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c0215adfc0215adfc64097d285854c64504a9828c4d639422
```
Found 4 files trough .DS_Store spidering:

/img
/img/footer.png
/img/icon.png
/index.html
```
  Found on 2026-01-02 06:39
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176421954ce76382870143828701438287014
```
Found 2 files trough .DS_Store spidering:

/img
/index.html
```
  Found on 2025-10-22 12:10
Create report

Open service 163.181.254.192:443 · sp-2127.com

2026-01-09 18:27

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Fri, 09 Jan 2026 18:27:20 GMT
Via: ens-cache25.l2de4[868,868,304-0,H], ens-cache27.l2de4[870,0], ens-cache13.de10[0,0,200-0,H], ens-cache15.de10[2,0]
Last-Modified: Wed, 16 Apr 2025 01:54:56 GMT
Vary: Accept-Encoding
ETag: "67ff0df0-880"
Age: 2
Ali-Swift-Global-Savetime: 1767983240
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Fri, 09 Jan 2026 18:27:20 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5fea317679832422418017e

Page title: SP212

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>SP212</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:41.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:-17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>function handleBtnDown1() {const url ='https://h5.sp-2127.com?chn=c3BpbnJwX2lkX250bGExNjc%3D'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.spinrp2.com/android/spinrp_id_ntla167.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 163.181.254.192:443 · sp-2127.com

2026-01-02 06:39

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Fri, 02 Jan 2026 06:39:50 GMT
Via: ens-cache25.l2de4[837,837,304-0,H], ens-cache28.l2de4[838,0], ens-cache13.de10[0,0,200-0,H], ens-cache7.de10[2,0]
Last-Modified: Wed, 16 Apr 2025 01:54:56 GMT
Vary: Accept-Encoding
ETag: "67ff0df0-880"
Age: 1
Ali-Swift-Global-Savetime: 1767335990
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Fri, 02 Jan 2026 06:39:50 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5fe9b17673359910332109e

Page title: SP212

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>SP212</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:41.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:-17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>function handleBtnDown1() {const url ='https://h5.sp-2127.com?chn=c3BpbnJwX2lkX250bGExNjc%3D'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.spinrp2.com/android/spinrp_id_ntla167.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 163.181.254.192:443 · sp-2127.com

2025-12-30 11:17

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Tue, 30 Dec 2025 11:17:09 GMT
Via: ens-cache25.l2de4[986,987,304-0,H], ens-cache23.l2de4[988,0], ens-cache13.de10[0,0,200-0,H], ens-cache21.de10[8,0]
Last-Modified: Wed, 16 Apr 2025 01:54:56 GMT
Vary: Accept-Encoding
ETag: "67ff0df0-880"
Age: 0
Ali-Swift-Global-Savetime: 1767093429
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Tue, 30 Dec 2025 11:17:09 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5fea917670934295636590e

Page title: SP212

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>SP212</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:41.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:-17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>function handleBtnDown1() {const url ='https://h5.sp-2127.com?chn=c3BpbnJwX2lkX250bGExNjc%3D'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.spinrp2.com/android/spinrp_id_ntla167.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 163.181.254.192:443 · sp-2127.com

2025-12-22 12:42

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 12:42:27 GMT
Via: ens-cache25.l2de4[1000,1000,304-0,H], ens-cache18.l2de4[1003,0], ens-cache13.de10[1011,112,200-0,C], ens-cache12.de10[116,0]
Last-Modified: Wed, 16 Apr 2025 01:54:56 GMT
Vary: Accept-Encoding
ETag: "67ff0df0-880"
Age: 0
Ali-Swift-Global-Savetime: 1766407347
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Mon, 22 Dec 2025 12:42:27 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5fea017664073473277274e

Page title: SP212

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>SP212</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:41.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:-17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>function handleBtnDown1() {const url ='https://h5.sp-2127.com?chn=c3BpbnJwX2lkX250bGExNjc%3D'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.spinrp2.com/android/spinrp_id_ntla167.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 163.181.254.192:443 · sp-2127.com

2025-12-20 09:47

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Sat, 20 Dec 2025 09:47:55 GMT
Via: ens-cache25.l2de4[1241,1241,304-0,H], ens-cache35.l2de4[1243,0], ens-cache13.de10[1250,179,200-0,C], ens-cache2.de10[187,0]
Last-Modified: Wed, 16 Apr 2025 01:54:56 GMT
Vary: Accept-Encoding
ETag: "67ff0df0-880"
Age: 0
Ali-Swift-Global-Savetime: 1766224075
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Sat, 20 Dec 2025 09:47:55 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5fe9617662240754124362e

Page title: SP212

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>SP212</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:41.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:-17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>function handleBtnDown1() {const url ='https://h5.sp-2127.com?chn=c3BpbnJwX2lkX250bGExNjc%3D'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.spinrp2.com/android/spinrp_id_ntla167.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2025-12-20 by HttpPlugin

Create report

*.sp-2127.comsp-2127.com

Fingerprint:

4b66ae90e416833fab785cbfe77cff7388d7fb5f3d577c74518aef48c33438af

CN:

sp-2127.com

Key:

RSA-4096

Issuer:

R12

Not before:

2025-11-11 01:17

Not after:

2026-02-09 01:17

Domain summary

sp-2127.com 6

1 recorded

IP summary

163.181.254.192 2

1 recorded

Domain sp-2127.com

United States

Software information

MacOS file listing through .DS_Store file

Create report

Create report

Create report

Create report

Create report

*.sp-2127.comsp-2127.com

Domain summary

IP summary