Domain > 96434858.vip

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-08-13	110.173.50.238 (ClassC)
2025-08-13	110.173.50.234 (ClassC)
2025-08-13	110.173.50.235 (ClassC)
2025-08-13	110.173.50.236 (ClassC)
2025-08-13	110.173.50.237 (ClassC)
2025-08-25	112.121.175.214 (ClassC)
2025-08-25	194.41.58.2 (ClassC)
2025-08-25	112.121.175.211 (ClassC)
2025-08-25	206.119.188.4 (ClassC)
2025-08-25	112.121.175.213 (ClassC)
2025-12-23	112.121.175.210 (ClassC)
2026-02-08	112.121.175.212 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlDate: Tue, 23 Dec 2025 08:27:58 GMTEtag: W/68acb2d9-570Last-Modified: Mon, 25 Aug 2025 19:00:41 GMTServer: nginxVary: Accept-EncodingX-Cache: BYPASSContent-Length

!DOCTYPE html>html>head>    script>        var _czc  _czc || ;        (function () {          var um  document.createElement(script);          um.src  https://s4.cnzz.com/z.js?id1281429317&async1;          var s  document.getElementsByTagName(script)0;          s.parentNode.insertBefore(um, s);        })();        /script>/head>body>script>    function getRandomDomain() {        var dumplist  146.103.74.149:5002;        return dumplistMath.floor(Math.random() * dumplist.length);    }    function generateRandomPrefix() {        var chars  abcdefghijklmnopqrstuvwxyz0123456789;        var length  Math.floor(Math.random() * 6) + 10;         var result  ;        for (var i  0; i  length; i++) {            result + chars.charAt(Math.floor(Math.random() * chars.length));        }        return result;    }    function generateRandomUrl() {        var domain  getRandomDomain();        var prefix  generateRandomPrefix();        var currentUrl  new URL(window.location.href);        var queryParams  currentUrl.search;         //return https:// + prefix + . + domain + queryParams;         return https:// + domain + queryParams;    }        setTimeout(function () {         var randomUrl  generateRandomUrl();        window.location.href  randomUrl;    }, 600);/script>/body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlDate: Tue, 23 Dec 2025 08:27:59 GMTEtag: W/68acb2d9-570Last-Modified: Mon, 25 Aug 2025 19:00:41 GMTServer: nginxVary: Accept-EncodingX-Cache: BYPASSContent-Length

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 96434858.vip

Is this malicious?

DNS Resolutions

Port 80

Port 443