Domain > account.wheatsoft.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-12-05	47.251.10.203 (ClassC)

HTTP/1.1 200 OKDate: Thu, 15 May 2025 06:21:09 GMTContent-Type: text/htmlContent-Length: 15396Connection: keep-aliveVary: Accept-EncodingLast-Modified: Wed, 14 May 2025 02:48:42 GMTVary: Accept-Encodi

!doctype html>html lang>head>style>#iconDivMain1 {        display: none;      }      #mini-btn {        display: none !important;      }/style>script>// 只在疯师傅站点需要      if (document.domain  account-imyfone-cn.iappdata.com      ||document.domain  pre-account.imyfone.cn      || document.domain  account.imyfone.cn) {        var script  document.createElement(script);        script.src  https://res.wx.qq.com/connect/zh_CN/htmledition/js/wxLogin.js;        document.head.appendChild(script);        var _53code  document.createElement(script);        _53code.src  https://tb.53kf.com/code/code/ab141c6ca3e32214a8d46d9b0379b98a2/1;        _53code.async  true; // 明确指出脚本应该异步加载        var s  document.getElementsByTagName(script)0;        s.parentNode.insertBefore(_53code, s);      }/script>script>var show  false      window.onerror  function(msg, url, row,col) {        if (msg.indexOf(SCRIPT5022) ! -1 || msg.indexOf(Expected) ! -1) {          show  true          document.getElementById(errmsg).style.display  show ? block :           document.getElementById(app).style.display  show ? none :         }        // return true;  //加上这句控制台就不会报错      }      // var v 3      // if (localStorage.getItem(v) ! v) {      //   localStorage.clear()      //   localStorage.setItem(v, v)      // }/script>script>const getSubdomain  (domain  document.domain) > {        try {          let subdomain            const key  `mh_${Math.random()}`          const expiredDate  new Date(0)          const domainList  domain.split(.)          const reg  new RegExp(`(^|;)\s*${key}12345`)          const ipAddressReg  /^(d{1,2}|1dd|20-4d|250-5).(d{1,2}|1dd|20-4d|250-5).(d{1,2}|1dd|20-4d|250-5).(d{1,2}|1dd|20-4d|250-5)$/          // 若为 IP 地址、localhost，则直接返回          if (ipAddressReg.test(domain) || domain  localhost) {            return domain          }          const urlItems            urlItems.unshift(domainList.pop())          while (domainList.length) {            urlIte

Subdomains

Date	Domain	IP
order-api.wheatsoft.com	2025-05-10	47.254.4.210
account-api.wheatsoft.com	2025-05-14	47.254.4.210
order.wheatsoft.com	2025-05-19	47.251.10.203
account.wheatsoft.com	2025-12-05	47.251.10.203

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > account.wheatsoft.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains