Domain > rf88.9597.rf56.cc

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-09-15	103.215.78.135 (ClassC)
2025-09-15	156.234.58.133 (ClassC)
2025-09-15	182.16.20.211 (ClassC)
2025-10-18	182.16.20.212 (ClassC)
2025-10-21	182.16.20.214 (ClassC)
2025-11-27	203.91.74.50 (ClassC)
2025-12-06	43.224.225.168 (ClassC)
2026-01-10	183.90.187.115 (ClassC)
2026-02-06	156.234.6.140 (ClassC)

HTTP/1.1 200 OKDate: Sat, 18 Oct 2025 10:42:18 GMTContent-Type: text/html;charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingVary: Accept-EncodingSet-Cookie: SESSION14ca3

!DOCTYPE html>html langen>head>    title>瑞丰贵宾会/title>link relstylesheet href/css/style.css?v11>link relstylesheet href/css/common.css>link relShortcut Icon href/images/favicon.ico?v1.3>script src/js/jquery-1.8.3.min.js>/script>script src/js/jquery.SuperSlide.2.1.1.js>/script>script>    var base  ;    var isLogin  ;/script>style>    * {        margin: 0;        padding: 0;    }    .alertIframe {        position: fixed;        left: 50%;        top: 25%;        transform: translate(-50%, -50%);        border-radius: 10px;        width: 400px;        height: 400px;        z-index: 9999;    }    .verify-overlay {        position:fixed;        top: 0;right: 0;left: 0;bottom: 0;        background:rgba(0,0,0,0.5);        display: none;        z-index: 999;    }/style>div classverify-overlay>/div>input  typehidden idhideVerifyCode value>script>    function initFingerprintJS() {        FingerprintJS.load().then(fp > {fp.get().then(result > {document.cookie  SESSIONV+result.visitorId+;path/;})});    }/script>script async src/common/fingerprint/fp.min.js?v1 onloadinitFingerprintJS()>/script>link href/common/css/secondary_verification.css?v1.00 relstylesheet>link hrefhttps://fonts.googleapis.com/css2?familyZCOOL+KuaiLe&displayswap relstylesheet>  script src/common/member/js/secondary_verification.js?v1.00>/script>script src/common/member/js/user.util.js?v2>/script>script src/js/float.js>/script>script>    function newWinOpen(){        window.open(/index/news.do,,menubarno,statusyes,scrollbarsyes,top150,left400,toolbarno,width920,height650);    }/script>/head>body idindex>    div idcontainer>div idcontainer>    div idheader stylewidth: 100%;>      div classhSection styleheight: 40px;>       div classhBox clearfix>        div classhBox clearfix>         ul classhLink>          li classli01>a href/activity.do classtg1>优惠办理大厅/a>/li>          li classli02>a hrefjavascript:void(0) onclickSetHome()>设为首页/a>/li>          li classli03>a hrefjavascript:void(0) onclickAddFavorite()>加入收藏/a>/li>

Port 443

HTTP/1.1 200 OKDate: Sat, 18 Oct 2025 10:42:19 GMTContent-Type: text/html;charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingVary: Accept-EncodingSet-Cookie: SESSIONff1c8

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > rf88.9597.rf56.cc

Is this malicious?

DNS Resolutions

Port 80

Port 443