Domain > entrypage3.zone7531.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-08-15	104.18.5.72 (ClassC)
2026-01-05	104.18.4.72 (ClassC)

HTTP/1.1 200 OKDate: Mon, 05 Jan 2026 18:54:26 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveAccess-Control-Allow-Origin: *Cache-Control: public, max-age0, must-revalidatereferrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffVary: accept-encodingcf-cache-status: DYNAMICReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sWpZmfyQk%2Ffvvjxcj%2F%2Fo63cnjDQC1rwV8IsjWTQCfr6eu4xNQEnEJgtcQks3koS0OpwvuClyQZaxnS2hD%2BDHIhG1SgJiBd5lEVBV9AFXGPj41btVScA%3D%3D}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareset-cookie: __cf_bmRWp00d4KJNAUsRsSh1SgpA44E9UIgdXlVnNBYEktfZc-1767639266.6313744-1.0.1.1-3GOLYRYPkCcfP8HhU0WDzYqzzmwjqacKW4Jo44Ag9PU1YdKmrVBDOv4c0yW8GiW9gXVwMEx2qIdpgsURSyDv5GXPezrxJ82X1M2Dv_8vS9hCLk6aZskzgHx4n3NYrtft; HttpOnly; Secure; Path/; Domainzone7531.com; ExpiresMon, 05 Jan 2026 19:24:26 GMTCF-RAY: 9b952f28789dfef6-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    title>Loading.../title>    style>        body {            display: flex;            justify-content: center;            align-items: center;            min-height: 100vh;            margin: 0;            background-color: #f3f3f3;        }        .spinner {            width: 50px;            height: 50px;            border: 5px solid transparent;            border-top: 5px solid #3498db; /* Color of the spinner */            border-radius: 50%;            animation: spin 1s linear infinite;        }        @keyframes spin {            0% {                transform: rotate(0deg);            }            100% {                transform: rotate(360deg);            }        }    /style>/head>body>    img srcloading.svg>/img>    script>        var baseUrl  window.location.origin;        const configURL  baseUrl + /api/domain_list; // Using CF Functions that reads from CFs .env        // Function to get URL arguments as an object        function getUrlArgs() {            const args  new URLSearchParams(window.location.search);            const obj  {};            args.forEach((value, key) > objkey  value);            return obj;        }        // Fetch .json file and process each domain        async function fetchDataAndProcessDomains(domainURL) {            try {                const response  await fetch(domainURL);                const data  await response.text();                const trimmedData  data.replaceAll( , ); // Remove all spaces                const domains  trimmedData.split(,); // Split by comma                // const domains  https://test.aa.com                // Assuming domains is the key in the JSON object containing the domain list                // const domains  data.domains;                if (!Array.isArray(domains)) {                    throw new Error(Invalid JSON format: domains should be an array);                }                processDomains(domains); // Call function to test each domain            } catch (error) {                console.error(Error fetching data:, error);            }        }        function processDomains(domains) {            let fastestDomain  null;            let fastestTime  Infinity;            let testedCount  0;            let index  0;            // Function to test a domain with XHR            async function testDomain(domain, index) {                const startTime  performance.now();                const xhr  new XMLHttpRequest();                const args  getUrlArgs(); // Get arguments from URL                let urlWithArgs  domain; // Start with base domain                if (Object.keys(args).length > 0) {                    // Check for sub_domain and domain_path keys                    const subDomain  args.sub_domain;                    const tempDomainPath  getDomainPath(window.location.href);                    const domainPath  tempDomainPath?.startsWith(/) ? tempDomainPath.slice(1) : tempDomainPath;                    // Create a URL object for easier manipulation                    const parsedUrl  new URL(urlWithArgs);                    // Extract protocol, domain, and path (including query string)                    const protocol  parsedUrl.protocol;                    const newDomain  parsedUrl.hostname;                    //http://localhost/html-test/index.html?sub_domaintest&domain_path/index.html&test_paramtest&tokenfake&host_id1                    //https://test-66ab970bcdd96.pages.dev/?sub_domainst-cr                    //https://test-66ab970bcdd96.pages.dev/?sub_domainlobby&domain_path/lobby/home&host_id416c2bd6015e438aa750e2a2071300cf&access_tokene45f037b84735f27f28aad3cf1981575                    //https://test-66ab970bcdd96.pages.dev/?sub_domaindslot&domain_pathgslot-028/index.html&host_id416c2bd6015e438aa750e2a2071300cf&access_tokene45f037b84735f27f28aad3cf1981575                    // Check if the domain already has a subdomain                    const hasSubdomain  newDomain.includes(.);                    const domainLength  newDomain.split(.).length;                    if (subDomain && domainPath) {                        // Construct URL with replaced subdomain and appended domain path                        urlWithArgs  `${protocol}//${subDomain}.${newDomain.split(.)domainLength - 2}.${newDomain.split(.)domainLength - 1}/${domainPath}`;                        // Remove sub_domain and domain_path from remaining args                        delete args.sub_domain;                        delete args.domain_path;                    } else if (subDomain) {                        // Construct URL with replaced subdomain and appended domain path                        urlWithArgs  `${protocol}//${subDomain}.${newDomain.split(.)domainLength - 2}.${newDomain.split(.)domainLength - 1}/`;                        // Remove sub_domain and domain_path from remaining args                        delete args.sub_domain;                    }                    // Add remaining arguments (excluding sub_domain and domain_path)                    // if (Object.keys(args).length > 0) {                    //     urlWithArgs + window.location.search.endsWith(?) ? & : ?;                    //     urlWithArgs + new URLSearchParams(args);                    // }                }                var pingResult  await ping(domain);                if (pingResult) {                    const loadTime  performance.now() - startTime;                    if (loadTime  fastestTime) {                        fastestDomain  urlWithArgs; // Store entire URL with arguments                        fastestTime  loadTime;                        if (fastestTime  15) { // Redirect immediate if below 15ms response time                            window.location.href  fastestDomain;                        }                    }                    testedCount++;                    if (testedCount  domains.length) {                        // Redirect to fastest domain (if any)                        if (fastestDomain) {                            window.location.href  fastestDomain;                        } else {                            console.error(No domains responded with a 200 status code.);                        }                    }                } else {                    testedCount++;                    if (testedCount  domains.length) {                        // Redirect to fastest domain (if any)                        if (fastestDomain) {                            window.location.href  fastestDomain;                        } else {                            console.error(No domains responded with a 200 status code.);                        }                    }                }            }            async function ping(url) {                try {                    const response  await fetch(url, { mode: no-cors });                    if (response.ok || response.type  opaque) {                        console.log(`Ping to ${url} succeeded.`);                        return true;                    } else {                        console.log(`Ping to ${url} failed.`);                        return false;                    }                } catch (error) {                    console.log(`Error pinging ${url}:`, error);                    return false;                }            }            function getDomainPath(url) {                const parsedUrl  url; // Parse the URL                const domainPathStart  parsedUrl.indexOf(domain_path);                if (domainPathStart > 0) {                    var domainPath  parsedUrl.substring(domainPathStart).replace(domain_path, ).replaceAll(%2F, /);                    return domainPath;                }                                return null;            }            // Test each domain            domains.forEach((domain) > testDomain(domain, index++));        }        fetchDataAndProcessDomains(configURL);    /script>/body>/html>

Subdomains

Date	Domain	IP
entrypage2.zone7531.com	2026-01-04	104.18.5.72
entrypage3.zone7531.com	2026-01-05	104.18.4.72
entrypage5.zone7531.com	2026-01-05	104.18.5.72
entrypage.zone7531.com	2025-12-16	104.18.5.72

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > entrypage3.zone7531.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains