Domain > static1.sunlands.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	xuhongzhi@sunland.org.cn
NameServer	DNS22.HICHINA.COM
Created	2009-05-29 00:00:00
Changed	2016-12-21 00:00:00
Expires	2023-05-29 00:00:00
Registrar	HICHINA ZHICHENG TEC

DNS Resolutions

Date	IP Address
2015-05-16	8.37.231.18 (ClassC)
2026-01-20	42.62.10.143 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Tue, 20 Jan 2026 11:09:46 GMTContent-Type: text/htmlContent-Length: 8539Last-Modified: Mon, 18 May 2015 06:13:24 GMTConnection: keep-aliveVary: Accept-EncodingETag: 55598304-215bAccept-Ranges: bytes

!DOCTYPE html>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetutf-8 />title>中国最大的学历教育服务商-尚德机构/title> meta namedescription content尚德机构 /> meta http-equivPragma contentno-cache>meta http-equivExpires content-1>meta nameformat-detection contenttelephoneno>meta nameapple-mobile-web-app-capable contentyes>meta nameapple-mobile-web-app-status-bar-style contentblack>meta nameviewport idviewport contentwidthdevice-width, initial-scale0.5, maximum-scale1.0>link hrefStyle/css.css relstylesheet typetext/css />script typetext/javascript srcjs/jquery-1.9.1.min.js>/script>!--if lt IE 9>  script srchttps://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js>/script>  script srchttps://oss.maxcdn.com/libs/respond.js/1.3.0/respond.min.js>/script>!endif-->script typetext/javascript>var phoneWidth  parseInt(window.screen.width);var phoneScale  phoneWidth/640;var ua  navigator.userAgent; if (/Android (\d+\.\d+)/.test(ua)){ 	if (phoneWidth >  640) {		document.write(meta nameviewport contentwidthdevice-width, initial-scale1.0, maximum-scale1.0>);		} } else {	document.write(meta nameviewport contentwidthdevice-width, user-scalableno, target-densitydpidevice-dpi>);}$(function(){          $(.c_text).click(function(){            var ss$(this).val();          })          $(.c_text).focus(function (){                $(this).attr(value,);            })            $(.c_text).blur(function (){                var thisval  $(this).val();                if(thisval){                   $(this).attr(value,输入手机号立即免费获取);                }else{                $(this).val(thisval);                 }             }) })/script>/head>script typetext/javascript>	function callback(msg){		alert(留言成功);	}/script>body styleoverflow:hidden;>div idloading classloading>img srcimages/load.gif/>加载中.../div>div classdevice rel iddevice>    div classswiper-container idswiper-container>      div classswiper-wrapper>            !-- start -->            div classswiper-slide rel>              div classmain>                img srcimages/wapstart.jpg>              /div>            /div>            !-- corner1 -->            div classswiper-slide rel>              div classmain>                img classlazy srcimages/wap1.jpg>              /div>            /div>            !-- corner1 -->            div classswiper-slide rel>              div classmain>                img classlazy srcimages/wap2.jpg>              /div>            /div>            !-- corner1 -->            div classswiper-slide rel>              div classmain>                img classlazy srcimages/wap3.jpg>              /div>            /div>            !-- corner1 -->            div classswiper-slide rel>              div classmain>                img classlazy srcimages/wap4.jpg>              /div>            /div>            !-- corner2 -->            div classswiper-slide rel>            	div classmain>                img classlazy srcimages/wap5.jpg>              /div>            /div>            !-- corner4 -->            div classswiper-slide rel>              div classmain>                img classlazy srcimages/wapend.jpg>              /div>              div classdraw>                  !-- input typetext nametext classc_text value输入手机号立即免费领取 />                  input typesubmit namesubmit classc_submit value点击提交 onclickreturn check() />                  form namemessageForm methodpost action/message.action idmessageForm1>                       input typehidden value注册成功 namemsg.name classenterinput idname />                  input typehidden namemsg.field1 classenterinput idfield1 />                   input typehidden namemsg.remark classenterinput idremark value自考wap />                   input typehidden value namemsg.email idemail />                   input typehidden value1 namemsg.school_code idschoolCode />                   input typehidden value832 namemsg.project_code />                   input typehidden value自考wap namemsg.message_type />                   input typehidden namemsg.field2 idfield2 />                   input typehidden namemsg.field3 />                   input typehidden valuehttp://i.sunlands.com/portal-war/message.action idmsgUrl />                   input namemsg.phone typetel classc_submit c_text  value输入手机号立即免费领取 />/td>                  input typebutton value点击领取 idmsgBtn classc_submit  onclicktuiguang_message_open(messageForm1,callback,1,35) />                /form>-->                form namemessageForm methodpost action/message.action idmessageForm1>     		input typehidden value注册成功 namemsg.name classenterinput idname />		input typehidden namemsg.field1 classenterinput idfield1 value1 /> 		input typehidden namemsg.remark classenterinput idremark value自考微信推广 /> 		input typehidden valuesunnycareer-tencent-wm-pc-001-01 namemsg.email idemail /> 		input typehidden value北京分校 namemsg.school_code idschoolCode /> 		input typehidden value北京自考 namemsg.project_code /> 		input typehidden value自考微信推广 namemsg.message_type /> 		input typehidden namemsg.field2 idfield2 value832 /> 		input typehidden namemsg.field3 $(#loginForm).find(inputnameservice).val() /> 		input typehidden valuehttp://i.sunlands.com/portal-war/message.action idmsgUrl /> 		input namemsg.phone typetel classc_text value输入手机号立即免费获取 />		input typebutton value点击领取 idmsgBtn classc_submit  onclicktuiguang_message_open(messageForm1,callback,1,35) />    /form>              /div>              div classinfo>                a hreftel:4007776666>                  img classlazy srcimages/logo1.png>                /a>              /div>            /div>            !-- end -->         /div>    /div>/div>script typetext/javascript srcjs/stylee.js>/script>script typetext/javascript>   !window.jQuery && document.write(scr + ipt typetext/javascript srcjs/jquery-1.8.2.js>/scr + ipt>);   /script>script typetext/javascript srcjs/jQuery.jPlayer.2.6.0/jquery.jplayer.min.js>/script>  script srcjs/main.js typetext/javascript>/script>script typetext/javascript> function callback(msg){         alert(msg.name);                            //追加短信调用方法,如果不追加短信可以删除以下方法:                            $.ajax({                                     url: encodeURI(encodeURI(http://www.sunlands.com/tuiguang/tuiguang_message.htm?tel+msg.phone+&name+msg.name+&messageId+msg.messageId+&schoolId+msg.schoolId)),                                     type: post,                                     success: function(data){                                             if(data.succtrue){                                               window.location.href;                                                    //发送成功完短信的操作,可以不写                                             }else{                                                     //发送失败完短信的操作,可以不写                                             } 											                                    }                             }); 										                                }/script>script typetext/javascript>var _bdhmProtocol  ((https:  document.location.protocol) ?  https:// :  http://);document.write(unescape(%3Cscript src + _bdhmProtocol + hm.baidu.com/h.js%3F6476c52539e3b3422bc314e9e877ed1d typetext/javascript%3E%3C/script%3E));/script>/body>/html>

Port 443

HTTP/1.1 200 OKServer: nginxDate: Tue, 20 Jan 2026 11:09:47 GMTContent-Type: text/htmlContent-Length: 8539Last-Modified: Mon, 18 May 2015 06:13:24 GMTConnection: keep-aliveVary: Accept-EncodingETag: 55598304-215bAccept-Ranges: bytes

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > static1.sunlands.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443