LeakIX - Host sp2109.com

Domain sp2109.com

United States

Zhejiang Taobao Network Co.,Ltd

Software information

Tengine

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 163.181.254.192
Domain: sp2109.com
Port: 443
URL: https://sp2109.com

First seen 2025-06-30 19:50
Last seen 2026-01-02 18:53
Open for 185 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c3c1fc5e93c1fc5e9506476d147b2b72ed805f0ff5eb433dc
```
Found 5 files trough .DS_Store spidering:

/img
/img/bg.jpg
/img/footer.png
/img/icon.png
/index.html
```
  Found on 2026-01-02 18:53
Create report

Open service 163.181.254.192:443 · sp2109.com

2026-01-09 14:17

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Fri, 09 Jan 2026 14:17:25 GMT
Via: ens-cache25.l2de4[837,837,304-0,H], ens-cache33.l2de4[839,0], ens-cache13.de10[0,0,200-0,H], ens-cache9.de10[3,0]
Last-Modified: Sat, 17 May 2025 11:28:48 GMT
Vary: Accept-Encoding
ETag: "682872f0-887"
Age: 2
Ali-Swift-Global-Savetime: 1767968245
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Fri, 09 Jan 2026 14:17:25 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5fe9d17679682473267166e

Page title: SP212

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>SP212</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:17.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:10%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:-17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>function handleBtnDown1() {const url ='https://download.SP212-dw.com/android/spinrp_id_ntla109.apk'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.SP212-dw.com/android/spinrp_id_ntla109.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 163.181.254.192:443 · sp2109.com

2026-01-02 18:53

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Fri, 02 Jan 2026 18:53:40 GMT
Via: ens-cache25.l2de4[737,737,304-0,H], ens-cache34.l2de4[739,0], ens-cache13.de10[0,0,200-0,H], ens-cache9.de10[3,0]
Last-Modified: Sat, 17 May 2025 11:28:48 GMT
Vary: Accept-Encoding
ETag: "682872f0-887"
Age: 1
Ali-Swift-Global-Savetime: 1767380020
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Fri, 02 Jan 2026 18:53:40 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5fe9d17673800210773135e

Page title: SP212

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>SP212</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:17.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:10%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:-17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>function handleBtnDown1() {const url ='https://download.SP212-dw.com/android/spinrp_id_ntla109.apk'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.SP212-dw.com/android/spinrp_id_ntla109.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 163.181.254.192:443 · sp2109.com

2025-12-23 05:35

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Tue, 23 Dec 2025 05:35:48 GMT
Via: ens-cache25.l2de4[958,959,304-0,H], ens-cache39.l2de4[960,0], ens-cache13.de10[0,0,200-0,H], ens-cache11.de10[6,0]
Last-Modified: Sat, 17 May 2025 11:28:48 GMT
Vary: Accept-Encoding
ETag: "682872f0-887"
Age: 0
Ali-Swift-Global-Savetime: 1766468148
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Tue, 23 Dec 2025 05:35:48 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5fe9f17664681488732981e

Page title: SP212

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>SP212</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:17.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:10%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:-17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>function handleBtnDown1() {const url ='https://download.SP212-dw.com/android/spinrp_id_ntla109.apk'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.SP212-dw.com/android/spinrp_id_ntla109.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2025-12-23 by HttpPlugin

Create report

Open service 163.181.254.192:443 · sp2109.com

2025-12-21 01:27

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Sun, 21 Dec 2025 01:27:44 GMT
Via: ens-cache25.l2de4[1025,1025,304-0,H], ens-cache17.l2de4[1027,0], ens-cache13.de10[0,0,200-0,H], ens-cache13.de10[4,0]
Last-Modified: Sat, 17 May 2025 11:28:48 GMT
Vary: Accept-Encoding
ETag: "682872f0-887"
Age: 0
Ali-Swift-Global-Savetime: 1766280464
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Sun, 21 Dec 2025 01:27:44 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5fea117662804647095956e

Page title: SP212

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>SP212</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:17.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:10%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:-17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>function handleBtnDown1() {const url ='https://download.SP212-dw.com/android/spinrp_id_ntla109.apk'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.SP212-dw.com/android/spinrp_id_ntla109.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2025-12-21 by HttpPlugin

Create report

Open service 163.181.254.192:443 · sp2109.com

2025-12-19 05:27

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Fri, 19 Dec 2025 05:27:43 GMT
Via: ens-cache25.l2de4[1154,1154,304-0,H], ens-cache24.l2de4[1156,0], ens-cache13.de10[1163,303,200-0,C], ens-cache20.de10[306,0]
Last-Modified: Sat, 17 May 2025 11:28:48 GMT
Vary: Accept-Encoding
ETag: "682872f0-887"
Age: 0
Ali-Swift-Global-Savetime: 1766122063
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Fri, 19 Dec 2025 05:27:43 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5fea817661220634786096e

Page title: SP212

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>SP212</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:17.5%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:10%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:-17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>function handleBtnDown1() {const url ='https://download.SP212-dw.com/android/spinrp_id_ntla109.apk'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.SP212-dw.com/android/spinrp_id_ntla109.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2025-12-19 by HttpPlugin

Create report

*.sp2109.comsp2109.com

Fingerprint:

3edfd32116574627ba4349cea48f9ac61ea59e8b4219cfaa1cb43dd33af3cfbc

CN:

sp2109.com

Key:

RSA-4096

Issuer:

R12

Not before:

2025-12-01 05:44

Not after:

2026-03-01 05:44

Domain summary

sp2109.com 5

1 recorded

IP summary

163.181.254.192 2

1 recorded

Domain sp2109.com

United States

Software information

MacOS file listing through .DS_Store file

Create report

Create report

Create report

Create report

Create report

*.sp2109.comsp2109.com

Domain summary

IP summary