Domain > 35587.loan

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-06-06	38.11.163.202 (ClassC)
2026-01-04	203.91.78.72 (ClassC)

Port 80

HTTP/1.0 200 OKConnection: closeContent-Type: text/html;charsetutf-8Content-Length: 1756

!DOCTYPE html>html>head>    meta charsetUTF-8>    title>网站正在打开，请稍后.../title>    script>        if (window.location.protocol  https:) {            window.location.href  http://https. + window.location.host + window.location.pathname + window.location.search + window.location.hash;        }            /script>/head>body styletext-align:center; padding-top:50px;>    h3>网站正在打开，请稍后.../h3>    !-- 可以添加一个倒计时显示给用户 -->    p>剩余等待时间: span idcountdown>3/span> 秒/p>    script>        // 目标链接列表        const destinationUrls  https://w1u1f6t6p.welcomehx.com/299,https://6df5sdf.3145cn.com/516/        ;        // 倒计时逻辑（可选，提升用户体验）        let secondsLeft  3;        const countdownElement  document.getElementById(countdown);        const timerInterval  setInterval(function() {            secondsLeft--;            if (countdownElement) {                countdownElement.textContent  secondsLeft;            }            if (secondsLeft  0) {                clearInterval(timerInterval);                                // 5秒后执行重定向                redirectToRandomUrl(destinationUrls);            }        }, 1000);        // 重定向函数        function redirectToRandomUrl(urls) {            // 随机选择一个链接            const randomIndex  Math.floor(Math.random() * urls.length);            const targetUrl  urlsrandomIndex;                        // 执行跳转            window.location.href  targetUrl;        }    /script>	script srchttp://45.12.89.93:1688/tongji/xbl2.js>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 35587.loan

Is this malicious?

DNS Resolutions

Port 80