Domain > client.clashlayer.top

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2026-02-18	104.21.0.134 (ClassC)
2026-02-23	172.67.150.253 (ClassC)

HTTP/1.1 200 OKDate: Wed, 18 Feb 2026 22:43:02 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveServer: cloudflareNel: {report_to:cf-nel,success_fraction:0.0,max

!DOCTYPE html>html>head>    link relstylesheet href/theme/default/assets/components.chunk.css?v1.7.5.2685.2222>    link relstylesheet href/theme/default/assets/umi.css?v1.7.5.2685.2222>        meta charsetutf-8>    meta nameviewport contentwidthdevice-width,initial-scale1,maximum-scale1,minimum-scale1,user-scalableno>        meta nametheme-color content#0665d0>    title>Clashlayer/title>    !-- link relstylesheet hrefhttps://fonts.googleapis.com/css?familyNunito+Sans:300,400,400i,600,700> -->    script>window.routerBase  /;/script>    script>        window.settings  {            title: Clashlayer,            assets_path: /theme/default/assets,            theme: {                sidebar: light,                header: dark,                color: default,            },            version: 1.7.5.2685.2222,            background_url: ,            description: Keep your senses and break through everything.,            i18n:                 zh-CN,                en-US,                ja-JP,                vi-VN,                ko-KR,                zh-TW,                fa-IR            ,            logo: https://writerpard.com/assets/img/5050.png        }    /script>    script src/theme/default/assets/i18n/zh-CN.js?v1.7.5.2685.2222>/script>    script src/theme/default/assets/i18n/zh-TW.js?v1.7.5.2685.2222>/script>    script src/theme/default/assets/i18n/en-US.js?v1.7.5.2685.2222>/script>    script src/theme/default/assets/i18n/ja-JP.js?v1.7.5.2685.2222>/script>    script src/theme/default/assets/i18n/vi-VN.js?v1.7.5.2685.2222>/script>    script src/theme/default/assets/i18n/ko-KR.js?v1.7.5.2685.2222>/script>    script src/theme/default/assets/i18n/fa-IR.js?v1.7.5.2685.2222>/script>/head>body>div idroot>/div>!--Start of Tawk.to Script-->script typetext/javascript>var Tawk_APITawk_API||{}, Tawk_LoadStartnew Date();(function(){var s1document.createElement(script),s0document.getElementsByTagName(script)0;s1.asynctrue;s1.srchttps://embed.tawk.to/5f32e2870bd8c42de339a412/default;s1.charsetUTF-8;s1.setAttribute(crossorigin,*)

Port 443

HTTP/1.1 200 OKDate: Wed, 18 Feb 2026 22:43:03 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveServer: cloudflarevary: Accept-EncodingCache-Control: no-cache, p

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > client.clashlayer.top

Is this malicious?

DNS Resolutions

Port 80

Port 443