LeakIX - Host zsfed.com

Domain zsfed.com

United States

Zhejiang Taobao Network Co.,Ltd

Software information

Tengine

tcp/443

MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 163.181.254.192
Domain: zsfed.com
Port: 443
URL: https://zsfed.com

First seen 2025-08-31 00:49
Last seen 2026-01-02 13:49
Open for 124 days
- Severity: low
  Fingerprint: 5f32cf5d6962f09c2eda814e2eda814eb40dc2baa19d85c7f77379bc18e2073a
```
Found 6 files trough .DS_Store spidering:

/img
/img/bg.jpg
/img/footer.png
/img/icon.png
/img/logo.png
/index.html
```
  Found on 2026-01-02 13:49
Create report

Open service 163.181.254.192:443 · zsfed.com

2026-01-09 13:54

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Fri, 09 Jan 2026 13:54:39 GMT
Via: ens-cache25.l2de4[765,765,304-0,M], ens-cache16.l2de4[766,0], ens-cache13.de10[0,0,200-0,H], ens-cache16.de10[4,0]
Last-Modified: Tue, 17 Jun 2025 08:21:36 GMT
Vary: Accept-Encoding
ETag: "68512590-88e"
Age: 3
Ali-Swift-Global-Savetime: 1767966879
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Fri, 09 Jan 2026 13:54:39 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5fea417679668820211868e

Page title: SalamBet

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>SalamBet</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:25%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>function handleBtnDown1() {const url ='https://h5.salamspin.com?chn=c2FsYW1iZXRfcGtfbnRsYTY3Nw%3D%3D'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.salam677.com/android/v-A3hmSFOPvhUypgg5oZa_.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 163.181.254.192:443 · zsfed.com

2026-01-02 13:49

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Fri, 02 Jan 2026 13:49:24 GMT
Via: ens-cache25.l2de4[816,816,304-0,H], ens-cache37.l2de4[818,0], ens-cache13.de10[0,0,200-0,H], ens-cache22.de10[2,0]
Last-Modified: Tue, 17 Jun 2025 08:21:36 GMT
Vary: Accept-Encoding
ETag: "68512590-88e"
Age: 0
Ali-Swift-Global-Savetime: 1767361764
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Fri, 02 Jan 2026 13:49:24 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5feaa17673617648733887e

Page title: SalamBet

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>SalamBet</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:25%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>function handleBtnDown1() {const url ='https://h5.salamspin.com?chn=c2FsYW1iZXRfcGtfbnRsYTY3Nw%3D%3D'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.salam677.com/android/v-A3hmSFOPvhUypgg5oZa_.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 163.181.254.192:443 · zsfed.com

2025-12-30 14:46

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Tue, 30 Dec 2025 14:46:42 GMT
Via: ens-cache25.l2de4[1266,1265,304-0,H], ens-cache25.l2de4[1268,0], ens-cache13.de10[1275,405,200-0,C], ens-cache2.de10[410,0]
Last-Modified: Tue, 17 Jun 2025 08:21:36 GMT
Vary: Accept-Encoding
ETag: "68512590-88e"
Age: 0
Ali-Swift-Global-Savetime: 1767106002
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Tue, 30 Dec 2025 14:46:42 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5fe9617671060022012048e

Page title: SalamBet

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>SalamBet</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:25%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>function handleBtnDown1() {const url ='https://h5.salamspin.com?chn=c2FsYW1iZXRfcGtfbnRsYTY3Nw%3D%3D'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.salam677.com/android/v-A3hmSFOPvhUypgg5oZa_.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2025-12-30 by HttpPlugin

Create report

Open service 163.181.254.192:443 · zsfed.com

2025-12-22 10:09

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Mon, 22 Dec 2025 10:09:32 GMT
Via: ens-cache25.l2de4[981,980,304-0,H], ens-cache40.l2de4[982,0], ens-cache13.de10[0,0,200-0,H], ens-cache7.de10[3,0]
Last-Modified: Tue, 17 Jun 2025 08:21:36 GMT
Vary: Accept-Encoding
ETag: "68512590-88e"
Age: 0
Ali-Swift-Global-Savetime: 1766398172
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Mon, 22 Dec 2025 10:09:32 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5fe9b17663981721483740e

Page title: SalamBet

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>SalamBet</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:25%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>function handleBtnDown1() {const url ='https://h5.salamspin.com?chn=c2FsYW1iZXRfcGtfbnRsYTY3Nw%3D%3D'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.salam677.com/android/v-A3hmSFOPvhUypgg5oZa_.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 163.181.254.192:443 · zsfed.com

2025-12-20 07:12

HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Date: Sat, 20 Dec 2025 07:12:06 GMT
Via: ens-cache25.l2de4[918,918,304-0,M], ens-cache29.l2de4[919,0], ens-cache13.de10[0,0,200-0,H], ens-cache17.de10[5,0]
Last-Modified: Tue, 17 Jun 2025 08:21:36 GMT
Vary: Accept-Encoding
ETag: "68512590-88e"
Age: 0
Ali-Swift-Global-Savetime: 1766214726
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2
X-Swift-SaveTime: Sat, 20 Dec 2025 07:12:06 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: a3b5fea517662147264784898e

Page title: SalamBet

<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="icon" href="./img/icon.png" />
<script src="https://cdn.tailwindcss.com"></script>
<title>SalamBet</title>
<style>.btn1{position:absolute;width:80%;left:3%;height:7%;top:25%;cursor:pointer;}.t{}.footer{position:fixed;display:flex;bottom:5px;width:100%;}.footer-bg{width:100%;height:auto;}.icon{position:absolute;top:13%;width:13%;left:1%;}.btn2{position:absolute;width:25%;left:73%;height:58%;top:20.4%;cursor:pointer;}.logo{position:absolute;top:6%;left:17.5%;width:75%;height:auto;}</style>
</head>
<body>
<div class="relative max-w-[640px] mx-auto">
<img src="./img/bg.jpg" alt="" class="w-full" />
<div class="btn1 t" onclick="handleBtnDown1()">
</div>
<img src="./img/logo.png" alt="" class="logo">
<div class="footer max-w-[640px] mx-auto">
<div class="w-full relative">
<img src="./img/footer.png" alt="" class="footer-bg" />
<img src="./img/icon.png" alt="" class="icon">
<div class="btn2 t" onclick="handleBtnDown2()"></div>
</div>
</div>
</div>
</body>
<script>function handleBtnDown1() {const url ='https://h5.salamspin.com?chn=c2FsYW1iZXRfcGtfbnRsYTY3Nw%3D%3D'
window.open(url,'_blank');}
function handleBtnDown2() {const url ='https://download.salam677.com/android/v-A3hmSFOPvhUypgg5oZa_.apk'
window.open(url,'_blank');}
</script>
</html>

Found 2025-12-20 by HttpPlugin

Create report

*.zsfed.comzsfed.com

Fingerprint:

3bd84dbc46bd7429d3731f8c8637b6d2be757770d437660f70e3acdfdd197870

CN:

zsfed.com

Key:

RSA-4096

Issuer:

R13

Not before:

2025-11-18 21:02

Not after:

2026-02-16 21:02

Domain summary

zsfed.com 5

1 recorded

IP summary

163.181.254.192 2

1 recorded

Domain zsfed.com

United States

Software information

MacOS file listing through .DS_Store file

Create report

Create report

Create report

Create report

Create report

*.zsfed.comzsfed.com

Domain summary

IP summary