Domain > 9df42ms.jb9vy31cf8.cc

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-08-05	3.167.183.69 (ClassC)
2026-02-25	3.163.24.118 (ClassC)

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 2967Connection: keep-aliveServer: nginxDate: Wed, 25 Feb 2026 03:59:48 GMTAccept-Ranges: bytesVary: Accept-EncodingVary: Accept-EncodingLast-Modified: Fri, 13 Feb 2026 16:44:58 GMTETag: 698f550a-b97X-Cache: Miss from cloudfrontVia: 1.1 1cd44a881db3f4cf03175ae5cd21f0be.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2X-Amz-Cf-Id: x6_mr8B0-k31jXqAGDiFZb99zS9jf-MrGchuAhCny3Sx90-fTKG8Ow

!DOCTYPE html>html langzh-CH>    head>        meta charsetUTF-8 />        link relicon typeimage/png href/favicon.ico />        meta            nameviewport            contentwidthdevice-width, initial-scale1.0, maximum-scale1.0, minimum-scale1.0, viewport-fitcover, user-scalableno        />        meta namereferrer contentno-referrer />        title>/title>        noscript>            meta http-equivrefresh content0;urlhttps://www.baidu.com />        /noscript>        script src/telegram-web-app.js>/script>        style>            body {                background-color: rgb(23, 24, 35);            }        /style>      script typemodule crossorigin src/assets/index_3f16551c_1770992547115.js>/script>      link relmodulepreload crossorigin href/assets/@vue_15f7f1ea_1770992547115.js>      link relmodulepreload crossorigin href/assets/@vant_c3e3849a_1770992547115.js>      link relmodulepreload crossorigin href/assets/vant_8a96b194_1770992547115.js>      link relmodulepreload crossorigin href/assets/vue_e6cf9364_1770992547115.js>      link relmodulepreload crossorigin href/assets/pinia_d8c0344f_1770992547115.js>      link relmodulepreload crossorigin href/assets/crypto-js_70940dee_1770992547115.js>      link relmodulepreload crossorigin href/assets/compressorjs_dec42b9c_1770992547115.js>      link relmodulepreload crossorigin href/assets/nanoid_7e542916_1770992547115.js>      link relmodulepreload crossorigin href/assets/axios_d16e7a2c_1770992547115.js>      link relmodulepreload crossorigin href/assets/avatar_9bf1847f_1770992547115.js>      link relmodulepreload crossorigin href/assets/dayjs_3cb31ddb_1770992547115.js>      link relmodulepreload crossorigin href/assets/mitt_f7ef348c_1770992547115.js>      link relmodulepreload crossorigin href/assets/Y-Component_2e903231_1770992547115.js>      link relmodulepreload crossorigin href/assets/eventemitter3_26f0a59d_1770992547115.js>      link relmodulepreload crossorigin href/assets/delegate_1db62583_1770992547115.js>      link relmodulepreload crossorigin href/assets/downloadjs_cf482f55_1770992547115.js>      link relmodulepreload crossorigin href/assets/hls.js_14cfb146_1770992547115.js>      link relmodulepreload crossorigin href/assets/xgplayer_ac813821_1770992547115.js>      link relstylesheet href/assets/vant_6c200f16_1770992547115.css>      link relstylesheet href/assets/vue_38cc2e8f_1770992547115.css>      link relstylesheet href/assets/Y-Component_ae2edf43_1770992547115.css>      link relstylesheet href/assets/xgplayer_807661df_1770992547115.css>      link relstylesheet href/assets/index_647042f7_1770992547115.css>    /head>    body>        div idapp>/div>            /body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 2967Connection: keep-aliveServer: nginxDate: Wed, 25 Feb 2026 03:59:48 GMTAccept-Ranges: bytesVary: Accept-EncodingVary: Accept-EncodingLast-Modified: Fri, 13 Feb 2026 16:44:58 GMTETag: 698f550a-b97X-Cache: Miss from cloudfrontVia: 1.1 250b49a977a2df6676d3fbf2508fc16e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2X-Amz-Cf-Id: B2Ra5RHzkd0zILNJQm7cDEqBmRtKRjiBaurdxGNtr9e8rpOyUxW8mw

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 9df42ms.jb9vy31cf8.cc

Is this malicious?

DNS Resolutions

Port 80

Port 443