Domain > 48k.vip

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-03-20	204.12.198.229 (ClassC)
2021-03-20	34.222.255.74 (ClassC)
2021-04-21	199.27.63.165 (ClassC)
2021-05-01	45.145.230.231 (ClassC)
2021-05-16	64.94.212.224 (ClassC)
2021-08-22	45.145.230.229 (ClassC)
2022-02-17	64.31.34.90 (ClassC)
2022-02-17	172.247.253.148 (ClassC)
2022-02-17	172.247.253.152 (ClassC)
2022-02-17	172.247.253.227 (ClassC)
2026-02-05	43.251.114.35 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Wed, 04 Jun 2025 16:55:44 GMTContent-Type: text/htmlContent-Length: 927Last-Modified: Sun, 11 May 2025 03:26:55 GMTConnection: keep-aliveETag: 682018ff-39fStrict-Tran

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    title>Loading/title>/head>body>    div classspinner>/div>    a href idnnyctWPF>/a>    script typetext/javascript>            var u  window.location.href;        u  u.substr(0,u.length-1);        u  u.split(:);        u  u0+:+u1;        var strU  window.atob(aHR0cDovLzExOS40Mi4zNC40) + /?r + window.btoa(u);        nnyctWPF.href  strU;        if (document.all) {            // IE 浏览器            console.log(click jump, strU);            document.getElementById(nnyctWPF).click();        } else {            // 非 IE 浏览器            var e  document.createEvent(MouseEvents);            console.log(MouseEvents jump, strU);            e.initEvent(click, true, true);            document.getElementById(nnyctWPF).dispatchEvent(e);        }    /script>/body>/html>

Port 443

HTTP/1.1 200 OKServer: nginxDate: Wed, 04 Jun 2025 16:55:45 GMTContent-Type: text/htmlContent-Length: 927Last-Modified: Sun, 11 May 2025 03:26:55 GMTConnection: keep-aliveETag: 682018ff-39fStrict-Tran

Subdomains

Date	Domain	IP
cmsimg.48k.vip	2025-05-31	104.21.32.1
digital.48k.vip	2025-10-24	172.67.176.35
mm.48k.vip	2025-10-24	104.167.65.138
vip.48k.vip	2025-11-02	104.167.65.138
pages.48k.vip	2025-10-24	104.21.48.27
https.48k.vip	2025-10-27	104.167.65.138

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 48k.vip

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains