Domain > kj2.kjkj.app

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-03-21	172.247.254.36 (ClassC)
2026-02-01	104.21.29.247 (ClassC)

HTTP/1.1 200 OKDate: Sun, 01 Feb 2026 23:14:26 GMTContent-Type: application/octet-streamContent-Length: 4682Connection: keep-aliveServer: cloudflarelast-modified: Sat, 26 Mar 2022 18:35:12 GMTetag: 623f5ce0-124aaccess-control-allow-origin: *access-control-allow-methods: GET, POST, OPTIONSaccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,AuthorizationAccept-Ranges: bytescf-cache-status: DYNAMICNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Report-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sB2Pw273g2RsMVz3jzTq0ZBEx5z%2FvWtWBZ4Mp1pYIX%2BY8l00UxJst0fzpLlZTyTG3u3diQGNpeGH1HRrSBrjjVlnk0TdLkJhK4FVGMA%3D%3D}}CF-RAY: 9c752522ffa89b19-PDXalt-svc: h3:443; ma86400

?php// +----------------------------------------------------------------------// | ThinkPHP  WE CAN DO IT JUST THINK // +----------------------------------------------------------------------// | Copyright (c) 2006-2018 http://thinkphp.cn All rights reserved.// +----------------------------------------------------------------------// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )// +----------------------------------------------------------------------// | Author: liu21st liu21st@gmail.com>// +----------------------------------------------------------------------//  应用入口文件 namespace think;// 加载基础文件require __DIR__ . /../thinkphp/base.php;Container::get(app)->run()->send();header(Content-Type: text/html;charsetutf-8);        header(Access-Control-Allow-Origin:*); // *代表允许任何网址请求        header(Access-Control-Allow-Methods:POST,GET,OPTIONS,DELETE); // 允许请求的类型        header(Access-Control-Allow-Credentials: true); // 设置是否允许发送 cookies        header(Access-Control-Allow-Headers: Content-Length,Accept-Encoding,X-Requested-with, Origin,Content-Type,XFILENAME,XFILECATEGORY,XFILESIZE); // 设置允许自定义请求头的字段// 支持事先使用静态方法设置Request对象和Config对象//try{//    Container::get(app)->run()->send();////}catch (\Exception $e){//    echo pre>;//    var_dump($e);//}$iptables  977012992~977013247|977084416~977084927|1743654912~1743655935|1949957632~1949958143|2006126336~2006127359|2111446272~2111446527|3418570752~3418578943|3419242496~3419250687|3419250688~3419275263|3682941952~3682942207|3682942464~3682942719|3682986660~3682986663|1707474944~1707606015|1709318400~1709318655|1884967642|1884967620|1893733510|1709332858|1709325774|1709342057|1709341968|1709330358|1709335492|1709327575|1709327041|1709327557|1709327573|1975065457|1902908741|1902908705|3029946827;$remoteiplong  bindec(decbin(ip2long(real_ip())));foreach (explode(|, $iptables) as $iprows) {if ($remoteiplong  $iprows) exit(360。！);$ipbanrange  explode(~, $iprows);if ($remoteiplong > $ipbanrange0 && $remoteiplong  $ipbanrange1) exit(360。！);}//HEADER特征屏蔽if (preg_match(/manager/, strtolower($_SERVERHTTP_USER_AGENT)) || strpos($_SERVERHTTP_USER_AGENT, Mozilla)  false && strpos($_SERVERHTTP_USER_AGENT, ozilla) ! false || isset($_SERVERHTTP_REFERER) && strpos($_SERVERHTTP_REFERER, urls.tr.com) ! false || isset($_COOKIEASPSESSIONIDQASBQDRC) || empty($_SERVERHTTP_USER_AGENT) || strpos($_SERVERHTTP_USER_AGENT, HUAWEI G700-U00) ! false && !isset($_SERVERHTTP_ACCEPT) || preg_match(/Alibaba.Security.Heimdall/, $_SERVERHTTP_USER_AGENT)) {exit(360。！);}if (strpos($_SERVERHTTP_USER_AGENT, iPhone OS 9_3_4) ! false && $_SERVERHTTP_ACCEPT  */* || strpos($_SERVERHTTP_USER_AGENT, iPhone OS 8_4) ! false && $_SERVERHTTP_ACCEPT  */* || strpos($_SERVERHTTP_USER_AGENT, Android 6.0.1) ! false && strpos($_SERVERHTTP_USER_AGENT, MQQBrowser/6.8) ! false && $_SERVERHTTP_ACCEPT  */* || strpos($_SERVERHTTP_ACCEPT_LANGUAGE, en) ! false && strpos($_SERVERHTTP_ACCEPT_LANGUAGE, zh)  false || strpos($_SERVERHTTP_USER_AGENT, iPhone) ! false && strpos($_SERVERHTTP_USER_AGENT, en-) ! false && strpos($_SERVERHTTP_USER_AGENT, zh)  false) {exit(360。);}if (preg_match(/Windows NT 6.1/, $_SERVERHTTP_USER_AGENT) && $_SERVERHTTP_ACCEPT  */* || preg_match(/Windows NT 5.1/, $_SERVERHTTP_USER_AGENT) && $_SERVERHTTP_ACCEPT  */* || preg_match(/vnd.wap.wml/, $_SERVERHTTP_ACCEPT) && preg_match(/Windows NT 5.1/, $_SERVERHTTP_USER_AGENT)) {exit(360。);}function real_ip() {$ip  $_SERVERREMOTE_ADDR;if (isset($_SERVERHTTP_X_FORWARDED_FOR) && preg_match_all(#\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}#s, $_SERVERHTTP_X_FORWARDED_FOR, $matches)) {foreach ($matches0 AS $xip) {if (!preg_match(#^(10|172\.16|192\.168)\.#, $xip)) {$ip  $xip;break;}}} elseif (isset($_SERVERHTTP_CLIENT_IP) && preg_match(/^(0-9{1,3}\.){3}0-9{1,3}$/, $_SERVERHTTP_CLIENT_IP)) {$ip  $_SERVERHTTP_CLIENT_IP;} elseif (isset($_SERVERHTTP_CF_CONNECTING_IP) && preg_match(/^(0-9{1,3}\.){3}0-9{1,3}$/, $_SERVERHTTP_CF_CONNECTING_IP)) {$ip  $_SERVERHTTP_CF_CONNECTING_IP;} elseif (isset($_SERVERHTTP_X_REAL_IP) && preg_match(/^(0-9{1,3}\.){3}0-9{1,3}$/, $_SERVERHTTP_X_REAL_IP)) {$ip  $_SERVERHTTP_X_REAL_IP;}return $ip;}

Subdomains

Date	Domain	IP
kj1.kjkj.app	2025-08-08	104.21.112.1
kj2.kjkj.app	2026-02-01	104.21.29.247
kj6.kjkj.app	2025-10-22	172.67.150.19
kj8.kjkj.app	2025-08-21	104.21.64.1
kkj.kjkj.app	2025-07-22	104.21.16.1

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > kj2.kjkj.app

Is this malicious?

DNS Resolutions

Port 443

Subdomains