Domain > login.hnagroup.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	hem_huang@hnair.com
NameServer	NS2.HNAGROUP.COM
Created	2001-08-24 00:00:00
Changed	2016-05-22 00:00:00
Expires	2017-08-24 00:00:00
Registrar	HICHINA ZHICHENG TEC

DNS Resolutions

Date	IP Address
2023-08-04	124.70.125.190 (ClassC)
2024-06-05	219.143.207.145 (ClassC)
2024-07-31	114.251.243.162 (ClassC)
2024-09-11	106.120.129.14 (ClassC)
2025-07-18	116.205.4.163 (ClassC)
2026-01-22	120.53.71.3 (ClassC)

HTTP/1.1 200 OKServer: CloudWAFDate: Fri, 04 Aug 2023 19:08:42 GMTContent-Type: text/htmlContent-Length: 1042Connection: keep-aliveVary: Accept-EncodingExpires: Fri, 04 Aug 2023 19:08:41 GMTCache-Cont

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    meta http-equivX-UA-Compatible contentieedge>    title>统一登录平台/title>    style>        body {            text-align: center;        }        .loading-image {            position: absolute;            top: 50%;            left: 50%;            margin-left: -32px;            margin-top: -32px;        }    /style>/head>body>img classloading-image src./images/v-loading.gif?a1 alt>script>//    var screenWidth  window.innerWidth || document.documentElement.clientWidth || document.body.clientWidth;//    if (screenWidth  766) {var isMobileDevice  /(iphone|ipad|ipod|ios|android)/i.test(navigator.userAgent.toLowerCase());    if (isMobileDevice) {        window.location.href  /login-m.html + window.location.search;    } else {        window.location.href  /login.html + window.location.search;    }/script>/body>/html>

Subdomains

Date	Domain	IP
newdo2.hnagroup.com	2023-08-04	124.70.125.183
NS2.HNAGROUP.COM	2025-09-21	1.202.236.136
login.hnagroup.com	2023-08-04	124.70.125.190
doudou.hnagroup.com	2024-12-16	1.202.236.193
www.hnagroup.com	2014-10-16	203.130.60.12

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > login.hnagroup.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443

Subdomains