Domain > 12947.cn

More information on this domain is in AlienVault OTX

Whois

Property	Value
Organization	宋禹江
Email	s.fulong@gmail.com
NameServer	dns2.iidns.com

DNS Resolutions

Date	IP Address
2024-10-02	69.160.174.138 (ClassC)
2025-01-23	103.82.214.11 (ClassC)
2025-05-12	103.82.214.12 (ClassC)
2025-07-03	103.82.214.84 (ClassC)
2025-08-19	103.248.137.170 (ClassC)
2026-02-12	104.21.28.57 (ClassC)

HTTP/1.1 200 OKDate: Wed, 02 Oct 2024 23:40:33 GMTContent-Type: text/htmlContent-Length: 3474Connection: keep-aliveVary: Accept-EncodingLast-Modified: Tue, 17 Sep 2024 20:09:29 GMTVary: Accept-Encodin

!DOCTYPE html>!-- saved from url(0032)https://www.26037.org/qweas.com/ -->html langzh-CN>!-- Mirrored from 29823.club/ by HTTrack Website Copier/3.x XR&CO2014, Tue, 27 Feb 2024 15:22:33 GMT -->head>    meta http-equivContent-Type contenttext/html; charsetUTF-8>    meta nameviewport          contentwidthdevice-width,initial-scale1.0,maximum-scale1.0,minimum-scale1.0,user-scalableno>    meta nameapple-mobile-web-app-status-bar-style contentblack>    meta nameformat-detection contenttelephoneno>    meta namefull-screen contentyes>    meta namex5-fullscreen contenttrue>    meta nameapplicable-device contentmobile>    title>/title>    script typetext/javascript srcfiles/conf.js>/script>!--    script typetext/javascript src./files/body.js>/script>-->    link typetext/css relstylesheet hreffiles/index.css>    script typetext/javascript srcfiles/jquery-3.5.1.min.js>/script>    script typetext/javascript srcfiles/appinstall.js>/script>    script typetext/javascript srcfiles/xz.js>/script>    script typetext/javascript srcfiles/qrcode.min.html>/script>    script>        window.onload  function () {            let kf_onclick  document.getElementById(kf_onclick)            kf_onclick.onclick  function () {                window.open(https://gankafz.worldmoreturn.live/index?key1c75a0ce3fb3bcb1fe1a95d3cab56a4b&gidafe4cd1922bb23c9ec881e644e73016c&saa4d0b6b0ea39ba4e1a476801946a5c67)            }            let channelCode  window.location.host.replace(/./g, );            console.log(channelCode)        }    /script>/head>body>!--script typetext/javascript src./files/cdn_domain.js>/script>-->!--script typetext/javascript>-->!--    load_js_css(conf.js, js);-->!--/script>-->div classpage-box stylebackground-image: url(files/static/bg.js);>    !-- 头部logo -->    div classpage-top>        img classlogo abcdef srcfiles/logo.js alt>        a hrefhttps://gankafz.worldmoreturn.live/index?key1c75a0ce3fb3bcb1fe1a95d3cab56a4b&gidafe4cd1922bb23c9ec881e644e73016c&saa4d0b6b0ea39ba4e1a476801946a5c67 target_blank relnoopener noreferrer>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 12947.cn

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443