Domain > qr-prelive.ferrero-kinder.cn

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-10-05	125.74.1.35 (ClassC)
2024-11-22	150.138.188.35 (ClassC)
2025-01-16	171.214.23.35 (ClassC)
2025-01-21	117.33.185.35 (ClassC)
2025-02-04	118.212.224.35 (ClassC)
2025-03-04	120.41.32.35 (ClassC)
2025-03-09	171.214.24.35 (ClassC)
2025-04-07	27.221.77.35 (ClassC)
2025-07-19	111.170.165.35 (ClassC)
2025-07-29	183.6.224.65 (ClassC)
2025-08-26	116.153.76.35 (ClassC)

HTTP/1.1 200 OKServer: JSP3/2.0.14Date: Sat, 05 Oct 2024 19:29:29 GMTContent-Type: text/htmlContent-Length: 1705Connection: keep-aliveLast-Modified: Mon, 18 Dec 2023 09:10:04 GMTETag: 0x8DBFFA91F36AD9

html langen>head>    meta charsetUTF-8>    noscript>meta http-equivrefresh content0; urlhttps://apps.appinchina.com.cn/details/com.ferrero.applayduGP />/noscript>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    title>QR redirection page/title>    script>        function isIOS() {            const userAgent  navigator.userAgent;            console.log(userAgent);            return userAgent.match(/ios|iOS|iPhone|iPod|Safari|Apple|Mac/i);// same as akamai setting for qr.ferrero-kinder.cn        }        function isAndroid() {            const userAgent  navigator.userAgent;            console.log(userAgent);            return userAgent.match(/Android|android/i);// same as akamai setting for qr.ferrero-kinder.cn        }        window.onload  function () {            const MPGCODE  window.location.pathname.split(/)1;            var redirectUrl  https://ferrero-kinder.cn/;            if (MPGCODE  wechat) {                redirectUrl  /wechat/;            }            else {                if (isIOS()) {                    console.log(It is IOS);                    redirectUrl  `https://apps.apple.com/cn/app/applaydu/id1670294930?pt1127801&ctQR#DIRECT##${MPGCODE}&mt8`;                }                if (isAndroid()) {                    console.log(It is Android);                    redirectUrl  https://apps.appinchina.com.cn/details/com.ferrero.applayduGP;                }            }            window.location.href  redirectUrl;        }    /script>/head>body>    This is Applaydu redirection page/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > qr-prelive.ferrero-kinder.cn

Is this malicious?

DNS Resolutions

Port 80

Port 443