Domain > 9224.loan

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	downloadtie@hotmail.com

DNS Resolutions

Date	IP Address
2025-01-22	134.122.136.71 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlDate: Wed, 22 Jan 2025 15:46:32 GMTEtag: W/677a591e-b5eLast-Modified: Sun, 05 Jan 2025 10:04:14 GMTServer: nginxVary: Accept-EncodingX-Cache: BYPASSTransfer-Encoding: chunked

!doctype html>html>head>    meta http-equivContent-Type contenttext/html; charsetutf-8>     meta nameviewport contentwidthdevice-width,initial-scale1.0,maximum-scale1.0,minimum-scale1.0,user-scalableno>     meta nameapple-mobile-web-app-status-bar-style contentblack>     meta nameformat-detection contenttelephoneno>     meta namefull-screen contentyes>     meta namex5-fullscreen contenttrue>     meta nameapplicable-device contentmobile>    title>林!荫小道/title>    style>        .container {            width: 60%;            margin: 10% auto 0;            background-color: #f0f0f0;            padding: 2% 5%;            border-radius: 10px        }        @media screen and (max-width: 750px) {            .container {                display:none;            }        }        ul {            padding-left: 20px;        }        ul li {            line-height: 2.3        }        a {            color: #20a53a        }        .mask {            background-color: rgba(0, 0, 0, 0.4);            position: fixed;            top: 0;            right: 0;            bottom: 0;            left: 0;            display: none;            z-index: 9999;        }        .mask .img {            width: 100%;            height: 100%;            position: absolute;            top: 0;            z-index: 100;        }        .mask .img img {            display: block;            width: 100%;            height: 100%;        }    /style>/head>body>div classmask idmask>    div classimg>img src./option.png>/div>/div>div classcontainer>    h1>你所向往的林！荫小道，其实每个清晨 和夜晚都挂满了 白霜/h1>/div>script>    const fullHostname  window.location.hostname;    const parts  fullHostname.split(.);    let mainDomain;    if (parts.length > 1) {      mainDomain  parts.slice(-2).join(.);    } else {      mainDomain  fullHostname;    }    var pig  mainDomain;    var open  ./dopa.html?channelCode + pig;    var u  navigator.userAgent;    var isiOS !!u.match(/\(i^;+;( U;)? CPU.+Mac OS X/); //ios终端    var isAndroid  u.indexOf(Android) > -1 || u.indexOf(Adr) > -1; //android终端    let s1  u.indexOf(MicroMessenger) > -1;    let s2  (u.match(/QQ/i)  QQ && u.indexOf(MQQBrowser)  -1) || (u.indexOf(MQQBrowser) > -1 && u       .indexOf(QQ/) > -1);    if (isAndroid) {      if (s1 || s2) {        let bg  document.getElementById(mask);        bg.style.display  block;      } else {        window.location.href  open;      }    } else if (isiOS) {      if (s1 || s2) {        let bg  document.getElementById(mask);        bg.style.display  block;      } else {        window.location.href  open;      }    }  /script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 9224.loan

Is this malicious?

Whois

DNS Resolutions

Port 443