Domain > fall.hnshengben.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-10-13	64.125.34.211 (ClassC)
2019-12-11	64.125.34.212 (ClassC)
2019-12-11	64.125.34.213 (ClassC)
2019-12-12	65.153.196.230 (ClassC)
2020-02-09	65.153.196.227 (ClassC)
2020-08-24	221.204.165.207 (ClassC)
2024-06-13	175.6.29.184 (ClassC)
2024-08-12	120.226.156.193 (ClassC)
2024-09-20	221.231.39.66 (ClassC)
2025-02-04	221.231.39.69 (ClassC)
2025-03-25	118.253.168.219 (ClassC)
2025-04-11	118.253.168.216 (ClassC)
2025-06-30	118.253.168.148 (ClassC)
2025-08-30	1.194.194.84 (ClassC)
2025-11-21	118.253.194.5 (ClassC)

HTTP/1.1 200 OKDate: Thu, 13 Jun 2024 01:57:40 GMTContent-Type: text/htmlContent-Length: 3038Connection: keep-aliveServer: nginxLast-Modified: Wed, 25 Dec 2019 03:44:39 GMTVary: Accept-EncodingETag: 5

!DOCTYPE html>html langzh-cn>head>meta charsetutf-8>meta nameviewport contentwidthdevice-width,initial-scale1,maximum-scale1,minimum-scale1,user-scalableno/>title>正在跳转.../title>script typetext/javascript>function $_GET(name, forward){    var reg  new RegExp((^|&)+ name +(^&*)(&|$));    var r  window.location.search.substr(1).match(reg);    if (r!null) return r2; return forward;}function loadScript(src){	if(!src) return;	var head document.getElementsByTagName(head)0;	var script  document.createElement(script);	script.type text/javascript;	script.src  src;	head.appendChild(script);}function download(){	var w  $_GET(w), v  $_GET(v), iosv  $_GET(i), a  $_GET(a), 	isios  /ipad|ipod|iphone|mac/.test(navigator.userAgent.toLowerCase());		if(isios || typeof v  undefined){		if(a > 0 && w > 0){			var down_url  https://itunes.apple.com/cn/app/id+a+?mt8;			//if(iosv.indexOf(lycpaxyxqios)0 && iosv.indexOf(lycpayjzgios) 0 &&  iosv.indexOf(lycpachtgios) 0  ) {      					loadScript(//counter.hnshengben.com/index.php?actad&appid+w+&type2&ver+iosv+&rand+Math.random());			//}				//if (iosv !lycpaxyxqios_9 || iosv ! lycpaxyxqios_7 || iosv ! lycpaxyxqios_8 || iosv ! lycpayjzgios_2  || iosv ! lycpayjzgios_8) {    			//	loadScript(//counter.hnshengben.com/index.php?actad&appid+w+&type2&ver+iosv+&rand+Math.random());			//}			if (iosvxzzjioscpa_5 || iosv  xzzjioscpa_6 || iosvlycpachtgios_38) {			loadScript(https://testcounter.hnshengben.com/index.php?actad&appid+w+&type2&ver+iosv+&rand+Math.random());			}					if (iosv  chtgksdrios_2) {				down_url  https://pack.hnshengben.com/gamepacks/zytxksdr_2.apk;			} else if ( iosv chtgksdrios_3) {				down_url  https://pack.hnshengben.com/gamepacks/zytxksdr_3.apk;			}			if(iosv ! wmyjjios_1 && iosv ! wmyjjios_2){				setTimeout(function(){							window.location.href  down_url;				}, 400);			}			//window.location.href  down_url;		}else if(document.domain.indexOf(trade.yyxxgame.com) ! -1){				var iframe  document.createElement(iframe);				iframe.src  http://trade.yyxxgame.com;				iframe.style.wi

Port 443

HTTP/1.1 200 OKDate: Thu, 13 Jun 2024 01:57:41 GMTContent-Type: text/htmlContent-Length: 3038Connection: keep-aliveServer: nginxLast-Modified: Wed, 25 Dec 2019 03:44:39 GMTVary: Accept-EncodingETag: 5

Subdomains

Date	Domain	IP
pack.hnshengben.com	2024-02-28	111.177.12.6
fall.hnshengben.com	2024-06-13	175.6.29.184

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > fall.hnshengben.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains