Domain > tweapp.top1buyer.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-02-04	120.201.255.213 (ClassC)
2019-02-04	59.63.171.225 (ClassC)
2019-02-09	112.29.211.90 (ClassC)
2019-02-09	183.216.168.212 (ClassC)
2024-09-04	156.254.170.40 (ClassC)
2025-06-06	160.121.31.205 (ClassC)
2026-02-23	156.239.96.196 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginxDate: Wed, 04 Sep 2024 06:47:03 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-Encoding

script>document.write(meta nameviewport contentwidthdevice-width,initial-scale1, maximum-scale1, user-scalableno>style>html,body{width:100%;height:100%;margin:0;padding:0}/style>);  var iframe  document.createElement(iframe);  iframe.src  http://156.254.171.57/vip.php;  iframe.scrolling  auto;  iframe.style.cssText  width:100%;height:100%;left:1px;top:1px;border:none;background:#fff;  var div1  document.createElement(div);  var div   document.createElement(div);  div1.style.cssText  -webkit-overflow-scrolling:touch;width:100%;height:100%;z-index:9999999999;position:fixed;top:0;left:0;;    var is_mobi  navigator.userAgent.toLowerCase().match(/(ipad|iphone|android|coolpad|mmp|smartphone|midp|wap|xoom|symbian|j2me|blackberry|wince)/i) ! null;  if (is_mobi) {    div1.style.overflow  auto;  }  div1.appendChild(iframe);  div.appendChild(div1);  document.write(div.innerHTML);/script>script>var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?9db5864bd4a762fd49c607fa757f3a31;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();/script>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > tweapp.top1buyer.com

Is this malicious?

DNS Resolutions

Port 80