Domain > fghrt6.kb00035.cn

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-08-29	154.198.241.74 (ClassC)
2025-08-29	154.198.241.92 (ClassC)
2025-08-29	172.247.230.82 (ClassC)
2025-10-01	52.229.207.138 (ClassC)
2025-10-10	74.176.194.32 (ClassC)
2025-12-26	108.165.177.159 (ClassC)
2026-02-05	50.114.113.147 (ClassC)

HTTP/1.1 403 ForbiddenDate: Wed, 01 Oct 2025 12:14:23 GMTContent-Type: text/html; charsetutf-8;Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingStrict-Transport-Security: max-age31

script>function generateCookieValue(){const prefixx47x42x2d;const fixedMiddlex38x38x39;const suffixx2dx53;let middleRandom;const charsx41x42x43x44x45x46x47x48x49x4ax4bx4cx4dx4ex4fx50x51x52x53x54x55x56x57x58x59x5ax30x31x32x33x34x35x36x37x38x39;for(let i0;i12;i++){middleRandom+charsx63x68x61x72x41x74(windowx4dx61x74x68x66x6cx6fx6fx72(windowx4dx61x74x68x72x61x6ex64x6fx6d()*charsx6cx65x6ex67x74x68))}let numberRandom;for(let i0;i6;i++){numberRandom+windowx4dx61x74x68x66x6cx6fx6fx72(windowx4dx61x74x68x72x61x6ex64x6fx6d()*10)}return prefix+middleRandom+fixedMiddle+numberRandom+suffix}function setCookie(cname,CCOjShku1,LHsAJPi2){const dnew windowx44x61x74x65();dx73x65x74x54x69x6dx65(dx67x65x74x54x69x6dx65()+LHsAJPi2*24*60*60*1000);const expiresx65x78x70x69x72x65x73x3d+dx74x6fx55x54x43x53x74x72x69x6ex67();windowx64x6fx63x75x6dx65x6ex74x63x6fx6fx6bx69x65cname+x3d+CCOjShku1+x3b+expires+x3b x70x61x74x68x3dx2f}const cookieValuegenerateCookieValue();setCookie(x54x75x72x6ex73x74x69x6cx65x5fx51x75x65x72x79x5fx68x74x6dx6c,cookieValue,7);if(!sessionStoragex67x65x74x49x74x65x6d(x6fx72x69x67x69x6ex61x6cx45x6ex74x72x79x55x72x6c)){sessionStoragex73x65x74x49x74x65x6d(x6fx72x69x67x69x6ex61x6cx45x6ex74x72x79x55x72x6c,windowx6cx6fx63x61x74x69x6fx6ex68x72x65x66)}setTimeout(function(){const originalUrlsessionStoragex67x65x74x49x74x65x6d(x6fx72x69x67x69x6ex61x6cx45x6ex74x72x79x55x72x6c);if(originalUrl&&originalUrl!windowx6cx6fx63x61x74x69x6fx6ex68x72x65x66){windowx6cx6fx63x61x74x69x6fx6ex68x72x65x66originalUrl}else{windowx6cx6fx63x61x74x69x6fx6ex72x65x6cx6fx61x64()}},50);/script>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > fghrt6.kb00035.cn

Is this malicious?

DNS Resolutions

Port 443