Domain > campaign-prelive.ferrero-kinder.cn

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-08-10	23.213.53.26 (ClassC)
2024-06-15	171.214.23.35 (ClassC)
2024-08-01	27.159.75.161 (ClassC)
2024-08-21	111.225.213.35 (ClassC)
2024-09-02	111.177.8.35 (ClassC)
2024-09-15	117.33.185.35 (ClassC)
2024-09-19	125.74.42.35 (ClassC)
2024-10-05	222.216.122.35 (ClassC)
2024-11-21	117.92.139.35 (ClassC)
2024-12-26	114.232.92.35 (ClassC)

HTTP/1.1 200 OKServer: JSP3/2.0.14Date: Sat, 15 Jun 2024 15:56:31 GMTContent-Type: text/htmlContent-Length: 1705Connection: keep-aliveLast-Modified: Mon, 18 Dec 2023 09:10:04 GMTETag: 0x8DBFFA91F36AD9

html langen>head>    meta charsetUTF-8>    noscript>meta http-equivrefresh content0; urlhttps://apps.appinchina.com.cn/details/com.ferrero.applayduGP />/noscript>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    title>QR redirection page/title>    script>        function isIOS() {            const userAgent  navigator.userAgent;            console.log(userAgent);            return userAgent.match(/ios|iOS|iPhone|iPod|Safari|Apple|Mac/i);// same as akamai setting for qr.ferrero-kinder.cn        }        function isAndroid() {            const userAgent  navigator.userAgent;            console.log(userAgent);            return userAgent.match(/Android|android/i);// same as akamai setting for qr.ferrero-kinder.cn        }        window.onload  function () {            const MPGCODE  window.location.pathname.split(/)1;            var redirectUrl  https://ferrero-kinder.cn/;            if (MPGCODE  wechat) {                redirectUrl  /wechat/;            }            else {                if (isIOS()) {                    console.log(It is IOS);                    redirectUrl  `https://apps.apple.com/cn/app/applaydu/id1670294930?pt1127801&ctQR#DIRECT##${MPGCODE}&mt8`;                }                if (isAndroid()) {                    console.log(It is Android);                    redirectUrl  https://apps.appinchina.com.cn/details/com.ferrero.applayduGP;                }            }            window.location.href  redirectUrl;        }    /script>/head>body>    This is Applaydu redirection page/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > campaign-prelive.ferrero-kinder.cn

Is this malicious?

DNS Resolutions

Port 80

Port 443