Domain > na-pwa.site

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-12-28	108.138.64.61 (ClassC)
2025-08-02	18.173.121.10 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 12894Connection: keep-aliveDate: Sat, 19 Jul 2025 20:56:30 GMTx-amz-replication-status: COMPLETEDLast-Modified: Fri, 27 Jun 2025 05:49:36 GMTETag: d6bec1dab762cdbeae239ac67cdf033cx-amz-server-side-encryption: AES256x-amz-version-id: L9GVX5xUfs4FI7Fxg6UssesiBqTPU1PJAccept-Ranges: bytesServer: AmazonS3X-Cache: Hit from cloudfrontVia: 1.1 2484d95e1962e4fa6652ac5bdc660206.cloudfront.net (CloudFront)X-Amz-Cf-Pop: SFO53-P6X-Amz-Cf-Id: AIMZVn_IBnbQbuiBHwornJi7shHdEiXpVOMCwIWDGTTABuBwP_FsqQAge: 1140633

!DOCTYPE html>html langzh-CN>head>    meta charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    meta namereferrer contentno-referrer>    meta http-equivX-UA-Compatible contentieedge>    title>娜娜轻量版/title>    meta namedescription content娜娜轻量版>    link relicon href/img/nana-pwa.ico?3>    link relmanifest href/manifest.json>    meta nametheme-color content#a62355>    meta nameapple-mobile-web-app-capable contentyes>    meta nameapple-mobile-web-app-status-bar-style contentblack>    meta nameapple-mobile-web-app-title content娜娜轻量版>    meta namemobile-web-app-capable contentyes>    meta namerenderer contentwebkit>    meta namescreen-orientation contentportrait>    meta namex5-orientation contentportrait>    meta namefull-screen contentyes>    meta namex5-fullscreen contenttrue>    meta namebrowsermode contentapplication>    meta namex5-page-mode contentapp>    link relapple-touch-icon href/img/logo.png?3>    style>        *,        *:before,        *:after {            box-sizing: border-box;            outline: none;            margin: 0;            padding: 0;        }        body {            font-size: 18px;            text-align: center;            line-height: 1.5;        }        #myFrame {            position: fixed;            top: 0;            left: 0;            right: 0;            bottom: 0;            width: 100%;            height: 100%;            border: 0;            outline: none;        }        #container {            position: fixed;            top: 0;            left: 0;            right: 0;            bottom: 0;            display: flex;            align-items: center;            justify-content: center;            width: 100%;            height: 100%;            color: #fff;            /* background-color: #000; */            background-color: #a62355;        }        .lds-ellipsis {            display: inline-block;            position: relative;            width: 40px;            height: 10px;        }        .lds-ellipsis div {            position: absolute;            top: 2px;            width: 3px;            height: 3px;            border-radius: 50%;            background: #fff;            animation-timing-function: cubic-bezier(0, 1, 1, 0);        }        .lds-ellipsis div:nth-child(1) {            left: 6px;            animation: lds-ellipsis1 0.6s infinite;        }        .lds-ellipsis div:nth-child(2) {            left: 6px;            animation: lds-ellipsis2 0.6s infinite;        }        .lds-ellipsis div:nth-child(3) {            left: 17px;            animation: lds-ellipsis2 0.6s infinite;        }        .lds-ellipsis div:nth-child(4) {            left: 28px;            animation: lds-ellipsis3 0.6s infinite;        }        @keyframes lds-ellipsis1 {            0% {                transform: scale(0);            }            100% {                transform: scale(1);            }        }        @keyframes lds-ellipsis2 {            0% {                transform: translate(0, 0);            }            100% {                transform: translate(10px, 0);            }        }        @keyframes lds-ellipsis3 {            0% {                transform: scale(1);            }            100% {                transform: scale(0);            }        }    /style>    script>        var dataLayer  window.dataLayer ||     /script>    script>(function(w,d,s,l,i){wlwl||;wl.push({gtm.start:    new Date().getTime(),event:gtm.js});var fd.getElementsByTagName(s)0,    jd.createElement(s),dll!dataLayer?&l+l:;j.asynctrue;j.src    https://www.googletagmanager.com/gtm.js?id+i+dl;f.parentNode.insertBefore(j,f);    })(window,document,script,dataLayer,GTM-P686XXZ);/script>/head>body>    noscript>iframe srchttps://www.googletagmanager.com/ns.html?idGTM-P686XXZ    height0 width0 styledisplay:none;visibility:hidden>/iframe>/noscript>    !-- iframe idmyFrame allowfullscreentrue webkitallowfullscreentrue mozallowfullscreentrue>/iframe> -->    div idcontainer>        div classmain-content>            p stylefont-size:2rem>线路检测页/p>            p>NETWORK SPEED TEST CENTER/p>            div stylemargin-top:30px;>线路测试中div classlds-ellipsis>                div>/div>                div>/div>                div>/div>                div>/div>            /div>将直接前往站点br>请耐心等候/div>        /div>    /div>    script>        var fastCode  localStorage.getItem(code);        var indexedDB  window.indexedDB || window.webkitIndexedDB || window.mozIndexedDB || window.msIndexedDB;        var request  indexedDB.open(jump, 3);        var db;        var targetUrls              https://pa.meme102.com, // 海外            https://pa.nah103.com, // 阿里            https://pa.na680.com // 阿里備        ;        var apiUrls              https://pwa.meme102.com,            https://pwa.na680.com,            https://pwa.nah103.com,        ;        request.onsuccess  function (e) {            db  request.result;                        var getRequest  db.transaction(user, readwrite).objectStore(user).get(1);            var search  location.search;            getRequest.onsuccess  function() {                if (getRequest.result) {                    // code exist                    testSpeed(targetUrls).then(function(targetResult) {                        window.location.href  targetResult + ?code + getRequest.result.code + (search ? & + search.substr(1) : );                    });                } else {                    // 請求 fastauth                    var targetRes  testSpeed(targetUrls).catch(function (err) {                        console.log(err);                    })                    var apiRes  testSpeed(apiUrls, /speed.html).catch(function (err) {                        console.log(err);                    });                    Promise.all(targetRes, apiRes).then(function (targetResult, apiResult) {                        var http_auth  new XMLHttpRequest();                        http_auth.open(GET, apiResult + /v1/fastauth, true);                        http_auth.responseType  json                        http_auth.onreadystatechange  function() {                            if (http_auth.readyState  XMLHttpRequest.DONE && http_auth.status  200) {                                var code  encodeURIComponent(http_auth.response.response.code);                                var addRequest  db.transaction(user, readwrite).objectStore(user).put({code: code}, 1);                                addRequest.onsuccess  function() {                                    window.location.href  targetResult + ?code + code + (search ? & + search.substr(1) : );                                }                            }                        };                        http_auth.send();                    });                }            }            // makeRequest().then(function(url) {            //     var getRequest  db.transaction(user, readwrite).objectStore(user).get(1);            //     getRequest.onsuccess  function() {            //         // var myFrame  document.getElementById(myFrame);            //         // var container  document.getElementById(container);            //         var search  location.search;            //         if (getRequest.result) {            //             // // iframe 無痕無法開            //             // myFrame.src  url + ?code + getRequest.result.code + (search ? & + search.substr(1) : );            //             // // myFrame.src  url + ?code + getRequest.result.code;            //             // myFrame.onload  function() {            //             //     container.style.display  none;            //             // }            //             // window.location.href  url + ?code + bdEH5jnTfBaIgly+TsYvcLDyxKuaADvww2CIZlbirzi7yJ2m + (search ? & + search.substr(1) : );            //             window.location.href  url + ?code + getRequest.result.code + (search ? & + search.substr(1) : );            //             // 1. 從來未登入過的，會看預設 launch 的圖（ vuex 裡面 ）            //             // 2. 登入過後拿 appInfo裡面的 pwa.launch 路徑會存進去 localstorgae            //             // 如果這兩點之一有死掉的，在各自情境有讀取到圖片，會一直等到 幾十秒甚至一分多鐘 預設 timeout 觸發，然後直接顯示廣告圖片不是顯示 launch 圖            //         } else {            //             var apiUrl  url.replace(pa., pwa.);            //             var http1  new XMLHttpRequest();            //             http1.open(GET, apiUrl + /v1/fastauth, true);            //             http1.responseType  json            //             http1.onreadystatechange  function() {            //                 if (http1.readyState  XMLHttpRequest.DONE && http1.status  200) {            //                     var code  encodeURIComponent(http1.response.response.code)            //                     var addRequest  db.transaction(user, readwrite).objectStore(user).put({code: code}, 1);            //                     addRequest.onsuccess  function() {            //                         // myFrame.src  url + ?code + code + (search ? & + search.substr(1) : );            //                         // // myFrame.src  url + ?code + code;            //                         // myFrame.onload  function() {            //                         //     container.style.display  none;            //                         // }            //                         window.location.href  url + ?code + code + (search ? & + search.substr(1) : );            //                     }            //                 }            //             };            //             http1.send();            //         }            //     }            // })        };        request.onupgradeneeded  function(e) {            db  request.result;            var objectStore            if (!db.objectStoreNames.contains(user)) {                objectStore  db.createObjectStore(user, { autoIncrement: true });            }        };        function testSpeed(urlArr, apiSpeedFile) {            return new Promise(function(resolve, reject) {                if (!apiSpeedFile) apiSpeedFile  ;                urlArr.forEach(async (url, index) > {                    var http  new XMLHttpRequest();                    http.open(GET, url + apiSpeedFile, true);                    http.onreadystatechange  function() {                        if (http.readyState  XMLHttpRequest.DONE && http.status  200) {                            resolve(url);                        }                    };                    http.send();                })            })        }        // function makeRequest() {        //     //pa替換cft        //     var targets          //         https://d1f7w9o32zcl1x.cloudfront.net, // 海外        //         https://d9yq8vdqefa9d.cloudfront.net, // 阿里        //         https://d25pq4414d7gq.cloudfront.net // 阿里備        //     ;        //     return new Promise(function(resolve, reject) {        //         targets.forEach(async (url, index) > {        //             var http  new XMLHttpRequest();        //             http.open(GET, url, true);        //             http.onreadystatechange  function() {        //                 if (http.readyState  XMLHttpRequest.DONE && http.status  200) {        //                     resolve(url);        //                 }        //             };        //             http.send();        //         })        //     })        // }        // window.addEventListener(message, function(e) {        //     if(e.data.event) {        //         window.dataLayer.push(e.data)        //     }        // })    /script>/body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 12894Connection: keep-aliveDate: Sat, 19 Jul 2025 20:56:30 GMTx-amz-replication-status: COMPLETEDLast-Modified: Fri, 27 Jun 2025 05:49:36 GMTETag: d6bec1dab762cdbeae239ac67cdf033cx-amz-server-side-encryption: AES256x-amz-version-id: L9GVX5xUfs4FI7Fxg6UssesiBqTPU1PJAccept-Ranges: bytesServer: AmazonS3X-Cache: Hit from cloudfrontVia: 1.1 3275dd178978f19980675ca4e2c5d45a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: SFO53-P6X-Amz-Cf-Id: lK8M3MOSbJgUV8raxIj3IVRckV2xvXLGQt1P2L7WbVIh_nH0_bC9nAAge: 1140633

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > na-pwa.site

Is this malicious?

DNS Resolutions

Port 80

Port 443