Domain > 889258.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-06-27	148.153.36.52 (ClassC)
2025-08-12	3.168.51.19 (ClassC)
2025-10-10	3.169.173.93 (ClassC)
2025-10-30	3.169.173.22 (ClassC)
2025-11-25	3.169.173.77 (ClassC)

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 217205Connection: keep-aliveServer: nginxDate: Fri, 10 Oct 2025 03:59:38 GMTLast-Modified: Sun, 10 Aug 2025 09:32:35 GMTAccept-Ranges: bytesETag:

!doctype html>html langen>   !--adjust接口start-->   script>    // 创建 URLSearchParams 对象    const urlParams  new URLSearchParams(window.location.search);    let p1  p2  p0  p4  p5 p6  ;    let fbclid  null;    let fbpid  null;    let adjhref  https://app.adjust.com/;    // 下载链接    let downurl  encodeURI(https://d38q8sx9ejc0a5.cloudfront.net/yn11102.apk);    // 代表下载链接    let downloadApk        // adjust     p0  urlParams.get(p0);    p1  urlParams.get(p1);    p2  urlParams.get(p2);    p3  urlParams.get(p3);    p4  urlParams.get(p4);    p5  urlParams.get(p5);    p6  urlParams.get(p6);    fbclid  urlParams.get(fbclid)||null;    fbpid  getFbpid();       downloadApk  adjhref + buildUrl(p0,p1,p2,p3,p4,p5,p6);    if(fbclidnull){       downloadApk  downloadApk +&fbclid;     }else{        downloadApk  downloadApk +&fbclid+fbclid;     }     if(fbpidnull){         downloadApk  downloadApk+&fbpid;     }else{          downloadApk  downloadApk+&fbpid+fbpid;     }          downloadApk  downloadApk +&redirect+downurl;    function buildUrl(a,b,c,d,e,f,g,type1,fbp){        let querystr        querystr  a+?+campaign+b+(+c+)+&adgroup+d+(+e+)+&creative+f+(+g+);       return querystr;    }    function getFbpid() {      let Pid  document.cookie.match(/(^|;) ?_fbp(^;*)(;|$)/);      if (Pid) {        return Pid2;      } else {        return null;      }    }/script>script>// 当文档加载完成后执行document.addEventListener(DOMContentLoaded, function () {// 获取所有具有 my-button 类的元素var buttons  document.querySelectorAll(#Download_app);// 为每个按钮添加点击事件监听器buttons.forEach(function (button) {    button.addEventListener(click, function () {         var xhr  new XMLHttpRequest();                   xhr.onreadystatechange  () > {                    if (xhr.readyState  4) {                        if (xhr.status  200) {                            console.log(1111)                        }                                            }

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 889258.com

Is this malicious?

DNS Resolutions

Port 80

Port 443