Domain > app.461099.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	879535353@qq.com
NameServer	NS2.22.CN
Created	2015-09-15 00:00:00
Changed	2016-09-15 00:00:00
Expires	2017-09-15 00:00:00
Registrar	ENAME TECHNOLOGY CO.

DNS Resolutions

Date	IP Address
2024-06-16	18.239.50.122 (ClassC)
2026-03-03	172.67.175.89 (ClassC)

HTTP/1.1 200 OKDate: Tue, 03 Mar 2026 21:00:32 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareLast-Modified: Sun, 15 Feb 2026 05:51:22 GMTReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sPpncfG66X6cjivn27lp0fFADli9SyxZyc6%2BUret6CkoC6HDLD4LJlq0Gstv3tddL2NtR4bNry%2Ba7W%2BmubC13wySLR6j1iscASQDRzLNI}}Cache-Control: max-age900Access-Control-Allow-Origin: *Access-Control-Allow-Methods: GETAccept-Ranges: bytescf-cache-status: DYNAMICCF-RAY: 9d6b923cce12afe8-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>html>    head>        meta charsetutf-8>        meta nameviewport contentwidthdevice-width,initial-scale1>                script>          var jy  {siteid:6828666,type:am3,groupid:f}          var linkUrl  https://dh+new Date().getMonth()+1++new Date().getDate()++new Date().getHours()+.jpsflbz2m3.cyou/#welcome;        /script>				!-- tk  14-8 --->		script>var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?ca4a5b9baf8261d887844a13eb74fea4;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();/script>                style>        ._ls{display:inline-block;width:50px;height:50px;border:4px solid rgba(0,0,0,.1);border-radius:50%;border-top-color:#3498db;animation:lsspin 1s ease-in-out infinite}        @keyframes lsspin{0%{transform:rotate(0)}100%{transform:rotate(360deg)}}        .c_root_popup{display:flex;justify-content:center;align-items:center;position:fixed;top:0;left:0;width:100%;height:100%;background-color:rgba(0,0,0,.5);z-index:1000;visibility:hidden}        .c_root_content{background-color:#fff;padding:20px;border-radius:8px;text-align:center;box-shadow:0 4px 8px rgba(0,0,0,.2);width:300px}        .c_root_cfm{margin-top:20px;padding:10px 20px;background-color:#4caf50;color:#fff;border:none;border-radius:4px;cursor:pointer;font-size:16px}        /style>                script>        var _showTip  !1;        var tip 网络异常或此域名已经无法访问,目前使用的是历史版本,检查网络或联系客服获取最新域名;        serviceWorker in navigator && navigator.serviceWorker.register(/lab.js).then((function(i) {            navigator.serviceWorker.addEventListener(message, (function(i) {                const e  i.data;                if (CACHE_ROOT  e.type && !_showTip) {                    let i  document.getElementById(c_root_popup);                    i && (_showTip  !0, document.getElementById(c_root_p).innerHTML  tip, i.style.visibility  visible)                }            }))        })).catch((function(i) {            console.error(Service Worker registration failed:, i)        }));        /script>    /head>    body>      h1>进入中.../h1>        a href idhao123>/a>        script typetext/javascript>            var _0xa12a  linkUrl, location, href, all, click, hao123, getElementById, MouseEvents, createEvent, initEvent, dispatchEvent;            var strU  _0xa12a0; //+ window_0xa12a1.host;                    hao123_0xa12a2  strU;                    if (document_0xa12a3) {                console.log(document_0xa12a6(_0xa12a5)_0xa12a4());                document_0xa12a6(_0xa12a5)_0xa12a4()            } else {                var e  document_0xa12a8(_0xa12a7);                e_0xa12a9(_0xa12a4, true, true);                document_0xa12a6(_0xa12a5)_0xa12a10(e)            }        /script>                  div idc_root_popup classc_root_popup>             div classc_root_content>                 p idc_root_p stylefont-size:16px>/p>                 button classc_root_cfm onclickdocument.getElementById(c_root_popup).style.visibilityhidden,window.onLineTypeN>ç¡®è®¤/button>            /div>         /div>                  div id_loading_ styledisplay:flex;justify-content:center;align-items:center;height:100vh>/div>    /body>/html>

Port 443

HTTP/1.1 200 OKDate: Tue, 03 Mar 2026 21:00:32 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareLast-Modified: Sun, 15 Feb 2026 05:51:22 GMTReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?s72auwX%2BHkuRhILJ37QDWHQFZqurDfd398N5KkCvao39Pqoj3qTK%2FODAe5JrAMahPfORrST3n3oh4XEHw2UM4yNF9TYhrsc3V%2FBX0l3FJ}}Cache-Control: max-age900Access-Control-Allow-Origin: *Access-Control-Allow-Methods: GETAccept-Ranges: bytescf-cache-status: DYNAMICCF-RAY: 9d6b923f4aaadab7-PDXalt-svc: h3:443; ma86400

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > app.461099.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443