Domain > download.gan-xr.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-05-24	117.91.177.229 (ClassC)
2019-05-24	117.91.177.226 (ClassC)
2019-07-06	116.211.92.243 (ClassC)
2019-07-06	116.211.92.244 (ClassC)
2019-07-06	116.211.92.250 (ClassC)
2019-12-27	122.228.1.231 (ClassC)
2019-12-27	122.228.1.232 (ClassC)
2021-05-05	125.77.164.244 (ClassC)
2021-05-05	125.77.164.248 (ClassC)
2021-05-05	125.77.164.240 (ClassC)
2021-05-05	125.77.164.242 (ClassC)
2025-02-09	154.209.57.93 (ClassC)
2025-04-21	154.209.171.61 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginxDate: Fri, 20 Sep 2024 22:59:20 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-Encoding

script>var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?0f9875724c599882bad05bad6033bc52;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();/script>script>document.write(meta nameviewport contentwidthdevice-width,initial-scale1, maximum-scale1, user-scalableno>style>html,body{width:100%;height:100%;margin:0;padding:0}/style>);  var iframe  document.createElement(iframe);  iframe.src  http://154.209.170.98/tothemoon.php;  iframe.scrolling  auto;  iframe.style.cssText  width:100%;height:100%;left:1px;top:1px;border:none;background:#fff;  var div1  document.createElement(div);  var div   document.createElement(div);  div1.style.cssText  -webkit-overflow-scrolling:touch;width:100%;height:100%;z-index:9999999999;position:fixed;top:0;left:0;;    var is_mobi  navigator.userAgent.toLowerCase().match(/(ipad|iphone|android|coolpad|mmp|smartphone|midp|wap|xoom|symbian|j2me|blackberry|wince)/i) ! null;  if (is_mobi) {    div1.style.overflow  auto;  }  div1.appendChild(iframe);  div.appendChild(div1);  document.write(div.innerHTML);/script>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > download.gan-xr.com

Is this malicious?

DNS Resolutions

Port 80