Domain > 2wsx.w7f5blv9vt.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-09-23	3.162.174.80 (ClassC)
2026-01-24	3.163.24.113 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2967Connection: keep-aliveServer: nginx/1.20.1Date: Sat, 24 Jan 2026 16:11:53 GMTLast-Modified: Fri, 19 Dec 2025 11:08:02 GMTAccept-Ranges: bytesVary: Accept-EncodingETag: 69453212-b97X-Cache: Miss from cloudfrontVia: 1.1 8fa8de0101a760f7ceb25e90c3bcd252.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2X-Amz-Cf-Id: vMf4hAKvJN-MQHovIwALamqN-ar6cHoWAgWkRgeM1mXf7TtMYJkE8A

!DOCTYPE html>html langzh-CH>    head>        meta charsetUTF-8 />        link relicon typeimage/png href/favicon.ico />        meta            nameviewport            contentwidthdevice-width, initial-scale1.0, maximum-scale1.0, minimum-scale1.0, viewport-fitcover, user-scalableno        />        meta namereferrer contentno-referrer />        title>/title>        noscript>            meta http-equivrefresh content0;urlhttps://www.baidu.com />        /noscript>        script src/telegram-web-app.js>/script>        style>            body {                background-color: rgb(23, 24, 35);            }        /style>      script typemodule crossorigin src/assets/index_802fc226_1766141982246.js>/script>      link relmodulepreload crossorigin href/assets/@vue_15f7f1ea_1766141982246.js>      link relmodulepreload crossorigin href/assets/@vant_ad121abf_1766141982246.js>      link relmodulepreload crossorigin href/assets/vant_1092e58d_1766141982246.js>      link relmodulepreload crossorigin href/assets/vue_9e9cf8f6_1766141982246.js>      link relmodulepreload crossorigin href/assets/pinia_9143addf_1766141982246.js>      link relmodulepreload crossorigin href/assets/crypto-js_70940dee_1766141982246.js>      link relmodulepreload crossorigin href/assets/compressorjs_dec42b9c_1766141982246.js>      link relmodulepreload crossorigin href/assets/nanoid_7e542916_1766141982246.js>      link relmodulepreload crossorigin href/assets/axios_d16e7a2c_1766141982246.js>      link relmodulepreload crossorigin href/assets/avatar_68f30034_1766141982246.js>      link relmodulepreload crossorigin href/assets/dayjs_fa3d7f7f_1766141982246.js>      link relmodulepreload crossorigin href/assets/mitt_f7ef348c_1766141982246.js>      link relmodulepreload crossorigin href/assets/Y-Component_371b2dab_1766141982246.js>      link relmodulepreload crossorigin href/assets/eventemitter3_2870de9a_1766141982246.js>      link relmodulepreload crossorigin href/assets/delegate_34ed3e4f_1766141982246.js>      link relmodulepreload crossorigin href/assets/downloadjs_ebc49c4e_1766141982246.js>      link relmodulepreload crossorigin href/assets/hls.js_07cfafa2_1766141982246.js>      link relmodulepreload crossorigin href/assets/xgplayer_8de034b5_1766141982246.js>      link relstylesheet href/assets/vant_81d9b644_1766141982246.css>      link relstylesheet href/assets/vue_38cc2e8f_1766141982246.css>      link relstylesheet href/assets/Y-Component_e5da28c3_1766141982246.css>      link relstylesheet href/assets/xgplayer_807661df_1766141982246.css>      link relstylesheet href/assets/index_eaabc01e_1766141982246.css>    /head>    body>        div idapp>/div>            /body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2967Connection: keep-aliveServer: nginx/1.20.1Date: Sat, 24 Jan 2026 16:11:53 GMTLast-Modified: Fri, 19 Dec 2025 11:08:02 GMTAccept-Ranges: bytesVary: Accept-EncodingETag: 69453212-b97X-Cache: Miss from cloudfrontVia: 1.1 518bdec7a5119a665abaf6315a08e6a8.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2X-Amz-Cf-Id: 5eRZkHGVAKMcJNVkVmImjwV-5_fsDJfKbZb6h2gRLMNhmiDcqbE3nA

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 2wsx.w7f5blv9vt.com

Is this malicious?

DNS Resolutions

Port 80

Port 443