Help
RSS
API
Feed
Maltego
Contact
Domain > www.1292666.com
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2018-07-15
103.59.42.245
(
ClassC
)
2025-05-01
34.92.0.182
(
ClassC
)
Port 80
HTTP/1.1 301 Moved PermanentlyDate: Thu, 01 May 2025 04:11:02 GMTContent-Type: text/htmlContent-Length: 166Connection: keep-aliveLocation: https://www.1292666.com/Server: NginxX-Safe: 1746072662oY94pebBYTI4FFZh/LdG3gAQjVkzycTgwyEpm57hAbEB2vSvggtnk7liPBjhYj9B9yhoZ4XGv13ioY1a2YBx3j8UZ1NUC2yI0GwR6nAf3eB78mbnkPFnGN5Hv4fTxQ033qtAeLLadtCe3YiWRaz71MqM1/PP0NzijzcZTbWacQ3I3x0oRotVxlb/wojbflt0Strict-Transport-Security: max-age31536000;includeSubDomains;X-VIA: l1VYYeeRQqS0VvRQU3X-VERSION: 1745251927 html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>openresty/center>/body>/html>
Port 443
HTTP/1.1 403 ForbiddenDate: Thu, 01 May 2025 04:11:02 GMTContent-Type: text/html; charsetutf-8;Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingCache-Control: no-cacheServer: NginxX-Safe: 1746072662oY94pebBYTI4FFZh/LdG3gAQjVkzycTgwyEpm57hAbEB2vSvggtnk7liPBjhYj9B9yhoZ4XGv13ioY1a2YBx3j8UZ1NUC2yI0GwR6nAf3eB78mbnkPFnGN5Hv4fTxQ033qtAeLLadtCe3YiWRaz71MqM1/PP0NzijzcZTbWacQ3I3x0oRotVxlb/wojbflt0Strict-Transport-Security: max-age31536000;includeSubDomains;X-VIA: l1VYYeeRQqS0VvRQU3X-VERSION: 1745251927 script>function generateCookieValue(){const prefix\x47\x42\x2d;const fixedMiddle\x38\x38\x39;const suffix\x2d\x53;let middleRandom;const chars\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39;for(let i0;i12;i++){middleRandom+chars\x63\x68\x61\x72\x41\x74(window\x4d\x61\x74\x68\x66\x6c\x6f\x6f\x72(window\x4d\x61\x74\x68\x72\x61\x6e\x64\x6f\x6d()*chars\x6c\x65\x6e\x67\x74\x68))}let numberRandom;for(let i0;i6;i++){numberRandom+window\x4d\x61\x74\x68\x66\x6c\x6f\x6f\x72(window\x4d\x61\x74\x68\x72\x61\x6e\x64\x6f\x6d()*10)}return prefix+middleRandom+fixedMiddle+numberRandom+suffix}function setCookie(cname,CCOjShku1,LHsAJPi2){const dnew window\x44\x61\x74\x65();d\x73\x65\x74\x54\x69\x6d\x65(d\x67\x65\x74\x54\x69\x6d\x65()+LHsAJPi2*24*60*60*1000);const expires\x65\x78\x70\x69\x72\x65\x73\x3d+d\x74\x6f\x55\x54\x43\x53\x74\x72\x69\x6e\x67();window\x64\x6f\x63\x75\x6d\x65\x6e\x74\x63\x6f\x6f\x6b\x69\x65cname+\x3d+CCOjShku1+\x3b+expires+\x3b \x70\x61\x74\x68\x3d\x2f}const cookieValuegenerateCookieValue();setCookie(\x54\x75\x72\x6e\x73\x74\x69\x6c\x65\x5f\x51\x75\x65\x72\x79\x5f\x68\x74\x6d\x6c,cookieValue,7);if(!sessionStorage\x67\x65\x74\x49\x74\x65\x6d(\x6f\x72\x69\x67\x69\x6e\x61\x6c\x45\x6e\x74\x72\x79\x55\x72\x6c)){sessionStorage\x73\x65\x74\x49\x74\x65\x6d(\x6f\x72\x69\x67\x69\x6e\x61\x6c\x45\x6e\x74\x72\x79\x55\x72\x6c,window\x6c\x6f\x63\x61\x74\x69\x6f\x6e\x68\x72\x65\x66)}setTimeout(function(){const originalUrlsessionStorage\x67\x65\x74\x49\x74\x65\x6d(\x6f\x72\x69\x67\x69\x6e\x61\x6c\x45\x6e\x74\x72\x79\x55\x72\x6c);if(originalUrl&&originalUrl!window\x6c\x6f\x63\x61\x74\x69\x6f\x6e\x68\x72\x65\x66){window\x6c\x6f\x63\x61\x74\x69\x6f\x6e\x68\x72\x65\x66originalUrl}else{window\x6c\x6f\x63\x61\x74\x69\x6f\x6e\x72\x65\x6c\x6f\x61\x64()}},50);/script>
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]