Domain > app.city-holder.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-07-18	104.21.91.234 (ClassC)
2025-01-16	104.21.86.170 (ClassC)
2025-10-02	172.67.68.109 (ClassC)
2025-10-15	104.26.6.122 (ClassC)
2026-01-24	104.26.7.122 (ClassC)

HTTP/1.1 200 OKDate: Thu, 02 Oct 2025 14:02:57 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveAccess-Control-Allow-Origin: *Cache-Control: public, max-age0, mu

!DOCTYPE html>html langen>  head>    meta charsetUTF-8 />    link relicon typeimage/svg+xml href/vite.svg />    meta      nameviewport      contentwidthdevice-width, initial-scale1, maximum-scale1, user-scalableno    />    meta namerobots contentnoindex, nofollow>    title>CITY Holder/title>    script srchttps://telegram.org/js/telegram-web-app.js>/script>    script      async      srchttps://www.googletagmanager.com/gtag/js?idG-QNF78S3T7L    >/script>    script>      window.dataLayer  window.dataLayer || ;      const userId         window?.Telegram?.WebApp?.initDataUnsafe.user?.id ?? unknown_user;      const sessionId  Math.random().toString(36).substr(2, 9);      localStorage.setItem(userId, userId);      localStorage.setItem(sessionId, sessionId);      function gtag() {        if (window.location.hostname  localhost) return;        dataLayer.push(arguments);      }      gtag(js, new Date());      gtag(config, G-QNF78S3T7L, {        player_id: userId,        session_id: sessionId,      });      Telegram.WebApp.expand();    /script>    script typemodule crossorigin src/assets/index-FWKNTd6H.js>/script>    link relmodulepreload crossorigin href/assets/vendor-BrF_x-ig.js>    link relstylesheet crossorigin href/assets/index-S3irXMax.css>  /head>  body>    div idroot>/div>  /body>/html>

Subdomains

Date	Domain	IP
cdn-stage.city-holder.com	2025-10-21	104.26.6.122
adm.city-holder.com	2025-10-15	104.26.6.122
cdn.city-holder.com	2025-11-09	172.67.68.109
app.city-holder.com	2025-10-02	172.67.68.109

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > app.city-holder.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains