Domain > c902.cn

More information on this domain is in AlienVault OTX

Whois

Property	Value
Organization	林金建
Email	heming335@gmail.com
NameServer	ns2.51dns.com

DNS Resolutions

Date	IP Address
2021-04-21	119.28.94.42 (ClassC)
2021-04-21	119.8.237.49 (ClassC)
2025-04-02	38.173.232.16 (ClassC)
2025-06-25	172.67.150.148 (ClassC)
2025-06-28	104.21.30.47 (ClassC)
2025-07-22	222.167.192.29 (ClassC)
2025-08-22	222.167.192.74 (ClassC)
2025-10-12	38.177.156.221 (ClassC)
2026-03-02	38.11.252.216 (ClassC)

Port 80

HTTP/1.1 200 OKTransfer-Encoding: chunkedContent-Type: text/html; charsetUTF-8Server: Nginx Microsoft-HTTPAPI/2.0X-Powered-By: NginxDate: Mon, 15 Jul 2024 15:19:08 GMT

script>var titlestrdocument.title;setFrame(http://116.204.159.21/dacai5xdpag.html);function setFrame(olink){    var ss  title>+titlestr+/title>div idshowcloneshengxiaon styleheight: 100%; width: 100%; background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;>ifr + ame scrollingyes marginheight0 marginwidth0  frameborder0 width100% height100% src+olink+>/iframe>/div>style typetext/css>html{width:100%;height:100%;}body {width:100%;height:100%;}/style>;    eval(do + cu + ment.wr + ite( + ss + ););    try {      setTimeout(function() {        console.log(document.body.children.length);        for (var i  0; i  document.body.children.length; i++) {          try {            var a  document.body.childreni.tagName;            var b  document.body.childreni.id;            console.log(i+***+a+**+b);            if (b ! iconDiv1 && b ! showcloneshengxiaon && a!title) {              document.body.childreni.style.display  non + e            }          } catch (e) {}        }                 var oMeta  document.createElement(meta);        oMeta.name  viewport;        oMeta.content  widthdevice-width,initial-scale1,minimum-scale1,maximum-scale1,user-scalableno;        document.getElementsByTagName(head)0.appendChild(oMeta);              }, 100)    } catch (e) {}}var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?79a615db3e85b46cab0d3229ac4d7a36;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();/script>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > c902.cn

Is this malicious?

Whois

DNS Resolutions

Port 80