Domain > best.yowin.mobi

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-04-02	99.84.253.126 (ClassC)
2021-04-03	13.226.14.75 (ClassC)
2021-09-07	13.226.13.36 (ClassC)
2022-01-09	13.226.9.69 (ClassC)
2025-11-02	141.148.161.23 (ClassC)

HTTP/1.1 200 Server: openrestyDate: Sun, 02 Nov 2025 04:21:45 GMTContent-Type: text/html;charsetUTF-8Content-Length: 2684Connection: keep-aliveVary: Accept-EncodingVary: origin,access-control-request-method,access-control-request-headers,accept-encodingAccept-Ranges: bytesLast-Modified: Thu, 30 Oct 2025 07:14:59 GMTContent-Language: en-US

!DOCTYPE html>html langen>head>    meta charsetutf-8>    meta nameviewport          contentwidthdevice-width,initial-scale1,minimum-scale1,maximum-scale1,user-scalableno,shrink-to-fitno,viewport-fitcover>    link relicon hrefdata:image/ico;base64,aWNv>    title>Test/title>    style typetext/css>        .container {            line-height: 40px;            text-align: center;            font-size: 1.2rem;        }        button {            line-height: 30px;            margin: 10px;            width: 80%;        }    /style>    script typetext/javascript srcAdSDK.js>/script>/head>body>div classcontainer idcontainer>/div>script typetext/javascript>    const open  https://s.yowin.mobi/api/game/v1/open;    const url  https://s.yowin.mobi/api/game/v1/list;    function openGame(gid) {        const user  Object.assign({gid: gid}, AdSDK.bfs);        fetch(open, {            body: JSON.stringify(user), // must match Content-Type header            cache: no-cache, // *default, no-cache, reload, force-cache, only-if-cached            method: POST, // *GET, POST, PUT, DELETE, etc.            headers: {                content-type: application/json            }        }).then(response > response.json()        ).then(r > {            AdSDK.openView(r.data);        });    }    AdSDK.addEventListener(viewClose, (e) > {        console.log(e);    });    AdSDK.addEventListener(init, (e) > {        console.log(e);        fetch(url, {            body: JSON.stringify(AdSDK.bfs), // must match Content-Type header            cache: no-cache, // *default, no-cache, reload, force-cache, only-if-cached            method: POST, // *GET, POST, PUT, DELETE, etc.            headers: {                content-type: application/json            }        })            .then(response > response.json()            )            .then(r > {                    var container  document.getElementById(container);                    for (i in r.data) {                        var game  r.datai;                        var a  document.createElement(button);                        a.dataGid  game.gid;                        a.onclick  function () {                            openGame(this.dataGid);                        };                        a.innerText  game.gameName;                        container.appendChild(a);                        container.appendChild(document.createElement(br));                    }                }            );    });    AdSDK.init();/script>/body>/html>

Port 443

Subdomains

Date	Domain	IP
dl.yowin.mobi	2025-02-22	18.161.6.120
cdn.yowin.mobi	2024-08-01	18.161.6.76
best.yowin.mobi	2025-11-02	141.148.161.23

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > best.yowin.mobi

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains