Domain > s24ng.top

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-07-13	206.119.101.64 (ClassC)
2025-11-27	207.56.12.7 (ClassC)
2026-01-24	103.254.151.86 (ClassC)

Port 80

HTTP/1.1 200 OKContent-Length: 1049Content-Type: text/html; charsetutf-8Date: Thu, 27 Nov 2025 08:12:10 GMT

!DOCTYPE html>html>head>meta charsetutf-8>/head>body>script>var urls  https://23.235.160.179:7788/#/link?allwin16430931&froms24ng.top;var domain  location.host;(async ()>{    for (let i  0; i  urls.length; ++i) {        let ok  false;        try {            ok  await new Promise(r>{                let t  setTimeout(() > r(0), 10000);                fetch(urlsi, { method: HEAD, mode: no-cors })                  .then(() > { clearTimeout(t); r(1); })                  .catch(() > { clearTimeout(t); r(0); });            });        } catch(e){}        if(!ok) {            fetch(/log_fail, {                method: POST,                headers: {Content-Type:application/json},                body: JSON.stringify({                     domain: domain,                     failed_urls: urlsi                })            });        } else {            setTimeout(() > location.replace(urlsi), 1000);            return;        }    }})();/script>/body>/html>

Port 443

HTTP/1.1 200 OKAlt-Svc: h3:443; ma2592000Content-Length: 1049Content-Type: text/html; charsetutf-8Date: Thu, 27 Nov 2025 08:12:11 GMT

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > s24ng.top

Is this malicious?

DNS Resolutions

Port 80

Port 443