Domain > 2024xagl.foxitour.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-03-15	27.221.71.101 (ClassC)
2025-01-13	60.220.179.43 (ClassC)

HTTP/1.1 200 OKEtag: 2b4df304deb52a9c9b1f386c0017ab66Content-Type: text/htmlDate: Wed, 01 Jan 2025 03:47:56 GMTServer: tencent-cosx-cos-hash-crc64ecma: 14567283236898156543x-cos-request-id: Njc3NGJhZWNfYTkyMTYzNjRfNWFiMl8zNWY2MTMyX-Cache-Lookup: Cache HitLast-Modified: Fri, 21 Apr 2023 03:54:26 GMTContent-Length: 1845Accept-Ranges: bytesX-NWS-LOG-UUID: 14006098954030098562Connection: keep-aliveX-Cache-Lookup: Cache Miss

!DOCTYPE html>html langen>script>function getMainHost() {  let key   `mh_${Math.random()}`;  let keyR  new RegExp( `(^|;)\\s*${key}12345` );  let expiredTime  new Date( 0 );  let domain  document.domain;  let domainList  domain.split( . );   let urlItems    ;  // 主域名一定会有两部分组成  urlItems.unshift( domainList.pop() );  // 慢慢从后往前测试  while( domainList.length ) {    urlItems.unshift( domainList.pop() );    let mainHost  urlItems.join( . );    let cookie    `${key}${12345};domain.${mainHost}`;     document.cookie  cookie;     //如果cookie存在，则说明域名合法    if ( keyR.test( document.cookie ) ) {      document.cookie  `${cookie};expires${expiredTime}`;      return mainHost;    }  }}    window.location.href  //www. + getMainHost();/script>head>    meta charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    title>404 Not Found/title>    style>  .showgif{ position: fixed;width: 100%;height: 100%;max-width: 680px; background: url(dj.gif) no-repeat; background-size: contain; margin: auto;left: 0;right: 0;} body{font-family: Segoe UI, Tahoma, Geneva, Verdana, sans-serif;}a{color: inherit;text-decoration: none;}/style>/head>body>    center>        h1 stylecolor: #2b9ec3;>404 Not Found/h1>        h3 stylecolor: #2b9ec3;>不积跬步,无以至千里;不积小流,无以成江海/h3>    /center>    hr>    center stylemargin-bottom: 30px;>Powered By Nginx1.17 On 鼎尖网络科技/center>    div classshowgif>/div>     div styledisplay: none;>       script typetext/javascript srchttps://s4.cnzz.com/z_stat.php?id5910237&web_id5910237>/script>     /div>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 2024xagl.foxitour.com

Is this malicious?

DNS Resolutions

Port 80