Domain > af.guituu.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-12-21	101.226.26.218 (ClassC)
2024-06-08	222.186.18.208 (ClassC)
2024-06-08	222.186.18.209 (ClassC)
2024-06-08	58.222.47.185 (ClassC)
2024-06-08	58.222.47.188 (ClassC)
2024-06-08	58.222.47.189 (ClassC)
2024-12-15	114.80.179.241 (ClassC)
2024-12-15	101.226.28.235 (ClassC)
2025-03-12	101.226.28.236 (ClassC)
2025-04-21	180.163.147.221 (ClassC)
2025-05-02	101.89.125.241 (ClassC)
2025-05-17	61.170.79.86 (ClassC)
2025-07-16	101.226.28.239 (ClassC)
2025-09-21	61.170.81.213 (ClassC)
2025-11-05	180.163.147.217 (ClassC)
2026-02-18	61.170.80.63 (ClassC)

HTTP/1.1 200 OKServer: TengineContent-Type: text/htmlContent-Length: 2167Connection: keep-aliveDate: Wed, 12 Mar 2025 04:21:48 GMTVary: Accept-Encodingx-oss-request-id: 67D10BDC7F7A763731313614x-oss-c

!DOCTYPE html>html langzh idroot>  head>    meta charsetutf-8>    meta nametheme-color content#333333>    meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1, user-scalableno, viewport-fitcover>    meta namescreen-orientation contentportrait>    meta nameapple-mobile-web-app-capable contentyes>    meta nameapple-touch-fullscreen contentyes>    meta nameapple-mobile-web-app-status-bar-style contentblack>    meta namefull-screen contentyes>    meta namex5-fullscreen contenttrue>    meta nameformat-detection contenttelephoneno,emailno>    meta http-equivCache-Control contentmax-age60>    meta http-equivPragma contentno-cache>    meta http-equivExpires content0>    title>/title>    script>      // 将 http 访问跳转到 https      if (development ! local && location.protocol  http:) {        location.href  location.href.replace(http, https)      }    /script>    link reldns-prefetch hrefhttps://cdn.alltuu.com>    link reldns-prefetch hrefhttps://nm.guituu.com>    link reldns-prefetch hrefhttps://af.guituu.com>    !-- Firefox不支持preconnect -->    link relpreconnect hrefhttps://nm.guituu.com>    script srchttps://cdn.alltuu.com/axios/0.20.0/axios.min.js>/script>    script srchttps://cdn.alltuu.com/vue/2.7.16/vue.js>/script>    script srchttps://cdn.alltuu.com/vuex/3.6.2/vuex.min.js>/script>    script srchttps://cdn.alltuu.com/vue-router/3.6.5/vue-router.min.js>/script>    script srchttps://cdn.alltuu.com/vue-i18n/8.28.2/vue-i18n.min.js>/script>    script srchttps://cdn.alltuu.com/crypto-js/4.2.0/crypto-js.min.js>/script>  script defer srchttps://af.guituu.com/3.340.0/js/chunk-vendors.js crossoriginanonymous>/script>script defer srchttps://af.guituu.com/3.340.0/js/app.js crossoriginanonymous>/script>/head>  body >    noscript>      strong>点击浏览相册/strong>    /noscript>    div idapp>/div>    !-- built files will be auto injected -->  /body>/html>

Port 443

Subdomains

Date	Domain	IP
af.guituu.com	2025-03-12	101.226.28.236
aii.guituu.com	2024-09-22	180.163.207.113
si.guituu.com	2026-02-04	61.170.77.68
ss.guituu.com	2025-04-04	114.80.179.246
www.guituu.com	2024-03-28	163.181.66.108

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > af.guituu.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains