Domain > o3.techll.xyz

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-12-22	18.239.199.126 (ClassC)
2025-12-15	3.175.34.129 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 15697Connection: keep-aliveDate: Mon, 15 Dec 2025 13:40:25 GMTLast-Modified: Mon, 04 Dec 2023 08:44:08 GMTETag: 8a84605060728799de682bff75004e15x-amz-server-side-encryption: AES256Accept-Ranges: bytesServer: AmazonS3X-Cache: Miss from cloudfrontVia: 1.1 0b56b2a6b0fdc99543294439c61ded5e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P3X-Amz-Cf-Id: 6c9GsAbMWHtKoMphD1b1zHAZzADJCoOXYILdZQg-fHfKSVdYEt18Yg

!DOCTYPE html>html langen>head>    meta namescreen-orientation contentportrait/>    meta namex5-orientation contentportrait/>    meta nameviewport          contentwidthdevice-width, initial-scale1.0, maximum-scale1.0, minimum-scale1.0, user-scalableno, viewport-fitcover/>    title>Teen Patti Master/title>    meta http-equivX-UA-Compatible contentieedge>    meta http-equivContent-Type contenttext/html; charsetUTF-8/>    meta charsetUTF-8/>    meta propertyog:type contentwebsite/>    link relshortcut icon href./favicon.ico typeimage/x-icon/>	script typetext/javascript src./js/cryptojs-4.2.0.min.js>/script>	meta nameapple-mobile-web-app-title contentTeen Patti Master>	link relmanifest href./manifest.json>	link relapple-touch-icon href./img/pwa-apple-icon.png>	link relmask-icon href./img/icon-48.png colorblack>    style>        * {            margin: 0;            padding: 0;            box-sizing: border-box;        }        img {            width: auto;            height: auto;            max-width: 100%;        }        body {            overflow-x: hidden;			display: flex;			align-items: center;			justify-content: center;			flex-direction: column;        }		.btn {			font-size: 20px;			line-height: 20px;			margin: 20px 0;			padding: 4px 20px;			border: 2px solid #000;			border-radius: 24px;			color: #000;			font-weight: bold;		}				@media screen and (orientation: portrait) {			.body {				height: 100vw;				width: 100vh;				transform: rotate(90deg);				transform-origin: 0 0;				top: 0;				left: 100%;				position: absolute;			}		}				@media screen and (orientation: landscape) {			.body {				height: 100vh;				width: 100vw;				top: 0;				left: 0;				position: absolute;			}		}		    /style>    script>        // adjust init        !function (t, e, a, r, n, s, d, l, o, i, u) { t.Adjust  t.Adjust || {}, t.Adjust_q  t.Adjust_q || ; for (var c  0; c  l.length; c++)o(t.Adjust, t.Adjust_q, lc); i  e.createElement(a), u  e.getElementsByTagName(a)0, i.async  !0, i.src  https://cdn.adjust.com/adjust-5.6.0.min.js, i.onload  function () { for (var e  0; e  t.Adjust_q.length; e++)t.Adjustt.Adjust_qe0.apply(t.Adjust, t.Adjust_qe1); t.Adjust_q   }, u.parentNode.insertBefore(i, u) }(window, document, script, 0, 0, 0, 0, initSdk, getAttribution, getWebUUID, setReferrer, trackEvent, addGlobalCallbackParameters, addGlobalPartnerParameters, removeGlobalCallbackParameter, removeGlobalPartnerParameter, clearGlobalCallbackParameters, clearGlobalPartnerParameters, switchToOfflineMode, switchBackToOnlineMode, stop, restart, gdprForgetMe, disableThirdPartySharing, initSmartBanner, showSmartBanner, hideSmartBanner, (function (t, e, a) { ta  function () { e.push(a, arguments) } }));    /script>	!-- Meta Pixel Code -->	script>		!function(f,b,e,v,n,t,s)		{if(f.fbq)return;nf.fbqfunction(){n.callMethod?		n.callMethod.apply(n,arguments):n.queue.push(arguments)};		if(!f._fbq)f._fbqn;n.pushn;n.loaded!0;n.version2.0;		n.queue;tb.createElement(e);t.async!0;		t.srcv;sb.getElementsByTagName(e)0;		s.parentNode.insertBefore(t,s)}(window, document,script,		https://connect.facebook.net/en_US/fbevents.js);		fbq(init, 2529930040507396);		fbq(track, PageView);	/script>/head>body classbody>div idinit>Loading.../div>script>	// let appToken  l8czd4os6ww0;	// let environment  sandbox;	let appToken  c4osebhpsmio;	let environment  production;	let paramNames  pkg, channel, gaid, aid, ;	let params  {		pn: AW,		pkg: com.WmWaWv.Vd,		channel: slm_3200003,		gaid: ,		aid: ,		webuuid: ,		adid: ,	};	var query  ;	if (!!location.search) {		query  location.search.substring(1);	}	let keyValues  query.split(&);	for (let i  0; i  keyValues.length; i++) {		let keyValue  keyValuesi.split();		if(paramNames.indexOf(keyValue0) > 0) {			paramskeyValue0  keyValue1;		}	}	console.log(start init adjust...);	Adjust.initSdk({		appToken: appToken, // required		environment: environment, // production or sandbox		// optional		attributionCallback: function (e, attribution) {		// define your attribution callback function			console.log(e);			console.log(attribution: , attribution);		},		logLevel: verbose, //  error, none, error, warning, info, verbose		logOutput: #output	});    //todo 事件待确认完善token    let adjustEventMap  {        app_open: {eventToken},        app_update: {eventToken},        app_update_success: {app_update_success},        login: {eventToken},        rechar_page: {eventToken},        rechar_success: {rechar_success},        register: {eventToken},        start_game: {eventToken},        widraw_page: {eventToken},        widraw_success: {widraw_success},        register_login: {eventToken}    }	const gameUrl  `https://www.pattigod.com/Web/game.html`;	const gameIframeId  game-iframe;	const AES_KEY  6950a1c45a6a189ba54f91b7af6b6e49;	const AES_IV  00000000000000000000000000000000;	const key  CryptoJS.enc.Utf8.parse(AES_KEY);	const iv  CryptoJS.enc.Hex.parse(AES_IV);	function aesEncrypt(message, key, iv) {		var cipherText  CryptoJS.AES.encrypt(message, key, {iv: iv, mode: CryptoJS.mode.CBC, padding: CryptoJS.pad.Pkcs7});		return cipherText.toString().replaceAll(+, -).replaceAll(/, _);	}	function aesDecrypt(message, key, iv) {		var content  message.replaceAll(-, +).replaceAll(_, /);		var cipherText  CryptoJS.AES.decrypt(content, key, {iv: iv, mode: CryptoJS.mode.CBC, padding: CryptoJS.pad.Pkcs7});		return cipherText.toString(CryptoJS.enc.Utf8);	}	function createEventId() {		return xxxxxxxyx-xxxx-4xxx-yxxx-xxxxxxxxxxxx.replace(/xy/g, function (c) {			var r  Math.random() * 16 | 0,				v  c  x ? r : (r & 0x3 | 0x8);			return v.toString(16);	    });	}	function reportDownload(web_uuid, adid, channel) {		let eventId  createEventId();		let uri  window.location.href;		uri  uri.replace(/^https?:\/\//, );		// get all Cookie		const cookies  document.cookie;		// put Cookie into URL query		let cookieA  `&cookie${encodeURIComponent(cookies)}`;		let logrpUrl  https://tracker2.bx1.pw/webAdsTracker/report?uri + uri + &eventId + eventId + cookieA + &webUuid + web_uuid + &adid + adid + &channel + channel;		// 		fetch(logrpUrl,{mode:no-cors})		.then(response > {			if (!response.ok) {				throw new Error(`HTTP error! Status: ${response.status}`);			}			return response.json();		})		.then(data > {			console.log(reportLog, logrpUrl)		})		.catch(error > {			console.log(reportLog:, logrpUrl)	    });	}	let loadingFlag  false;	function initAdjustAndIframe() {		if (loadingFlag) {			return;		}		loadingFlag  true;		let cachedWebUUID  localStorage.getItem(master-adjust-webuuid);		let cachedAdid  localStorage.getItem(master-adjust-adid);		if (cachedWebUUID && cachedAdid) {			params.webuuid  cachedWebUUID;			params.adid  cachedAdid;			if (!params.aid) {				params.aid  params.adid;			}			if (!params.gaid) {				params.gaid  params.webuuid;			}			let existsGameIframe  document.getElementById(gameIframeId);			if (existsGameIframe) {				existsGameIframe.style.display  block;				return;			}			let gameIframe  document.createElement(iframe);			gameIframe.id  gameIframeId;			gameIframe.width  100%;			gameIframe.height  100%;			gameIframe.style.width  100%;			gameIframe.style.height  100%;			gameIframe.style.position  absolute;			gameIframe.style.zIndex  1;			gameIframe.style.backgroundColor  #fff;			gameIframe.style.top  0;			gameIframe.style.left  0;			gameIframe.style.border  0;			gameIframe.setAttribute(allowfullscreen, true);			gameIframe.setAttribute(webkitallowfullscreen, true);			gameIframe.setAttribute(mozallowfullscreen, true);			gameIframe.setAttribute(oallowfullscreen, true);			gameIframe.setAttribute(msallowfullscreen, true);			document.body.appendChild(gameIframe);			// gameIframe.src  `${gameUrl}?pnAW&pkg${params.pkg}&channel${params.channel}&gaid${params.gaid}&aid${params.aid}`; 			const token  aesEncrypt(JSON.stringify(params), key, iv);			console.log(params::, JSON.stringify(params));			console.log(token::, token);			gameIframe.src  `${gameUrl}?token${token}`;						} else {			setTimeout(() > {				const webUUID  Adjust.getWebUUID();				let attribution  Adjust.getAttribution();				if (attribution && attribution.adid) {					let adid  attribution.adid;					localStorage.setItem(master-adjust-webuuid, webUUID);					localStorage.setItem(master-adjust-adid, adid);					params.webuuid  webUUID;					params.adid  adid;					if (!params.aid) {						params.aid  params.adid;					}					if (!params.gaid) {						params.gaid  params.webuuid;					}					let existsGameIframe  document.getElementById(gameIframeId);					if (existsGameIframe) {						existsGameIframe.style.display  block;						return;					}					if (webUUID && adid) {						let gameIframe  document.createElement(iframe);						gameIframe.id  gameIframeId;						gameIframe.width  100%;						gameIframe.height  100%;						gameIframe.style.width  100%;						gameIframe.style.height  100%;						gameIframe.style.position  absolute;						gameIframe.style.zIndex  1;						gameIframe.style.backgroundColor  #fff;						gameIframe.style.top  0;						gameIframe.style.left  0;						gameIframe.style.border  0;						gameIframe.setAttribute(allowfullscreen, true);						gameIframe.setAttribute(webkitallowfullscreen, true);						gameIframe.setAttribute(mozallowfullscreen, true);						gameIframe.setAttribute(oallowfullscreen, true);						gameIframe.setAttribute(msallowfullscreen, true);						document.body.appendChild(gameIframe);						// gameIframe.src  `${gameUrl}?pnAW&pkg${params.pkg}&channel${params.channel}&gaid${params.gaid}&aid${params.aid}`; 						const token  aesEncrypt(JSON.stringify(params), key, iv);						console.log(params::, JSON.stringify(params));						console.log(token::, token);						reportDownload(webUUID, adid, slm_3200003);						gameIframe.src  `${gameUrl}?token${token}`;					}									} else {					console.log(waiting for adjust attribution...);				}			}, 5000);		}	}	initAdjustAndIframe();	window.onload  () > {		let initElem  document.getElementById(init);		if (initElem) {			initElem.addEventListener(click, initAdjustAndIframe, false);		}	}	// pwa install status. 0-no support or installed, 1-can install	localStorage.setItem(pwaInstallStatus, 0);	let deferredPrompt;	window.addEventListener(beforeinstallprompt, (e) > {		console.log(current browser beforeinstallprompt event fired);		deferredPrompt  e;		localStorage.setItem(pwaInstallStatus, 1);		e.userChoice.then(function (choiceResult) {			//listener after user choice for installing			if (choiceResult.outcome  accepted) {				window.deferredPrompt  null;				localStorage.setItem(pwaInstallStatus, 0);			} else if (choiceResult.outcome  dismissed) {				console.log(user canceled.);				let gameIframe  document.getElementById(gameIframeId);				gameIframe.contentWindow.postMessage(JSON.stringify({type: pwaInstallFail}), *);			}		});	});	/* whether installed already */	window.addEventListener(appinstalled, (evt) > {		// callback after installed		console.log(callback after installed);		let gameIframe  document.getElementById(gameIframeId);		gameIframe.contentWindow.postMessage(JSON.stringify({type: pwaInstallSuccess}), *);	});	// chrome browser	if (window.matchMedia((display-mode: standalone)).matches) {		// installed mode		console.log(display-mode is standalone 1);	}	// Safari：	if (window.navigator.standalone  true) {		// refresh when page loading		console.log(display-mode is standalone 2);	}	window.addEventListener(message, (event) > {		try {			let mesasgeData  JSON.parse(event.data);			console.log(message data: , mesasgeData);						if (mesasgeData.type  pwaInstall) {				console.log(pwa message data: , mesasgeData);				console.log(pwa message deferredPrompt: , deferredPrompt);				if (deferredPrompt) {					deferredPrompt.prompt();				} else {					let gameIframe  document.getElementById(gameIframeId);					gameIframe.contentWindow.postMessage(JSON.stringify({type: pwaInstallFail}), *);				}			} else if (mesasgeData.type  pwaInstallDetect) {				console.log(pwa message data: , mesasgeData);				console.log(pwa message detected: , localStorage.getItem(pwaInstallStatus));				let gameIframe  document.getElementById(gameIframeId);				gameIframe.contentWindow.postMessage(JSON.stringify({type: pwaInstallDetectResp, status: localStorage.getItem(pwaInstallStatus)}), *);			} else if (mesasgeData.type  adjustEventReport) {                console.log(adjustEventReport messgae data:, mesasgeData)                adjustEvent(mesasgeData)            }		} catch (error) {			console.log(error);		}			}, false);    function adjustEvent(messageData) {        let params  messageData.par        let eventKey  messageData.event        let eventValue  messageData.eventVal        try {            console.log(adjustEvent Adjust:, Adjust)            const webUUID  Adjust.getWebUUID();            console.log(adjustEvent webUUID:, webUUID)            if(eventValue  undefined) {                eventValue  0            }            adjustTrackLog(params, eventKey, eventValue, )            if(!eventKey) {                return;            }            let token  adjustEventMapeventKey            if(!token) {                return;            }            if(!eventValue || eventValue  0) {                Adjust.trackEvent({                    eventToken: token                })            } else {                Adjust.trackEvent({                    eventToken: token,                    revenue: eventValue,                    currency: INR                })            }        } catch (error) {            console.log(adjustEvent report error:, error)            adjustTrackLog(params, eventKey, eventValue, error)        }    }    //nginx    function adjustTrackLog(params, eventKey, eventValue, error) {        console.log(trackLog params:, params, eventKey:, eventKey, eventValue:, eventValue)        let uri  window.location.href;        uri  uri.replace(/^https?:\/\//, );        let logrpUrl  https://tracker.bx1.pw/webAdsTracker/report?uri + uri + ¶ms + encodeURIComponent(JSON.stringify(params)) + &eventKey + eventKey + &eventValue + eventValue +  &error + error;        fetch(logrpUrl,{mode:no-cors})            .then(response > {                if (!response.ok) {                    throw new Error(`HTTP error! Status: ${response.status}`);                }                return response.json();            })            .then(data > {                console.log(reportLog, logrpUrl)            })            .catch(error > {                console.log(reportLog:, logrpUrl)            });    }/script>/body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 15697Connection: keep-aliveDate: Mon, 15 Dec 2025 13:40:25 GMTLast-Modified: Mon, 04 Dec 2023 08:44:08 GMTETag: 8a84605060728799de682bff75004e15x-amz-server-side-encryption: AES256Accept-Ranges: bytesServer: AmazonS3X-Cache: Hit from cloudfrontVia: 1.1 0f2e998c974188ba76236f3dadfba890.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P3X-Amz-Cf-Id: 3Ey6fOq00otrHC17ykKEUtHk3SlRiJ1x0z7e33VabkhlBESVg7QY1QAge: 1

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > o3.techll.xyz

Is this malicious?

DNS Resolutions

Port 80

Port 443