Domain > dl-qa.nonton.99array.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-05-25	52.9.39.10 (ClassC)
2020-08-23	52.52.11.228 (ClassC)
2021-01-21	13.57.151.101 (ClassC)
2021-01-21	52.52.207.119 (ClassC)
2021-04-08	52.52.131.89 (ClassC)
2022-02-05	13.57.120.178 (ClassC)
2022-02-05	184.169.223.176 (ClassC)
2022-07-07	50.18.26.77 (ClassC)
2022-07-07	184.72.5.23 (ClassC)
2025-12-07	35.167.216.18 (ClassC)

HTTP/1.1 200 OKServer: openrestyDate: Thu, 18 Sep 2025 05:16:04 GMTContent-Type: text/html; charsetutf-8Content-Length: 5772Connection: keep-aliveAccess-Control-Allow-Origin: *Set-Cookie: _sC9d8waLJqx

!DOCTYPE html>html>	head>		link relstylesheet typetext/css hrefhttps://cdn.branch.io/static/styles.css />		link relalternate hrefandroid-app://com.webstreamindonesia.nonton/androidnonton/open?link_click_id=1497091122380743906 />			meta propertyal:ios:url contentiosnonton://open?link_click_id=1497091122380743906 />			meta nametwitter:app:url:iphone contentiosnonton://open?link_click_id=1497091122380743906>			meta propertyal:ios:app_store_id content300255638 />			meta nametwitter:app:id:iphone content300255638>			meta propertyal:ios:app_name contentNontonQA />			meta nametwitter:app:name:iphone contentNontonQA>			meta propertyal:android:url contentandroidnonton://open?link_click_id=1497091122380743906 />			meta nametwitter:app:url:googleplay contentandroidnonton://open?link_click_id=1497091122380743906>			meta propertyal:android:package contentcom.webstreamindonesia.nonton />			meta nametwitter:app:id:googleplay contentcom.webstreamindonesia.nonton>			meta propertyal:android:app_name contentNontonQA />			meta nametwitter:app:name:googleplay contentNontonQA>					meta nametwitter:card contentsummary />			meta propertyog:title content  />				meta nametwitter:title content  />			meta propertyog:url contenthttp://dl-qa.nonton.99array.com/ />			meta nametwitter:app:country contentUS>	/head>	body>		div classcontainer>			h1>Welcome to NontonQA!/h1>			h3 classsubtitle>You will receive a one-time SMS to download the app/h3>			form nameform action methodPOST>				div classform-item>					label forphone>h2>Phone number:/h2>/label>					input typetext namephone idphone placeholder+1 (123) 123-1234 classtext />					button typesubmit classbtn-submit>						svg enable-backgroundnew 0 0 32 32 idplane classbtn-submit-icon height17px width17px idLayer_1 version1.1 viewBox0 0 32 32 xml:spacepreserve xmlnshttp://www.w3.org/2000/svg xmlns:xlinkhttp://www.w3.org/1999/xlink>path dM31.543,0.16C31.377,0.053,31.188,0,31,0c-0.193,0-0.387,0.055-0.555,0.168l-30,20  c-0.309,0.205-0.479,0.566-0.439,0.936c0.038,0.369,0.278,0.6

Port 443

!DOCTYPE html>html>	head>		link relstylesheet typetext/css hrefhttps://cdn.branch.io/static/styles.css />		link relalternate hrefandroid-app://com.webstreamindonesia.nonton/androidnonton/open?link_click_id=1497091122562782286 />			meta propertyal:ios:url contentiosnonton://open?link_click_id=1497091122562782286 />			meta nametwitter:app:url:iphone contentiosnonton://open?link_click_id=1497091122562782286>			meta propertyal:ios:app_store_id content300255638 />			meta nametwitter:app:id:iphone content300255638>			meta propertyal:ios:app_name contentNontonQA />			meta nametwitter:app:name:iphone contentNontonQA>			meta propertyal:android:url contentandroidnonton://open?link_click_id=1497091122562782286 />			meta nametwitter:app:url:googleplay contentandroidnonton://open?link_click_id=1497091122562782286>			meta propertyal:android:package contentcom.webstreamindonesia.nonton />			meta nametwitter:app:id:googleplay contentcom.webstreamindonesia.nonton>			meta propertyal:android:app_name contentNontonQA />			meta nametwitter:app:name:googleplay contentNontonQA>					meta nametwitter:card contentsummary />			meta propertyog:title content  />				meta nametwitter:title content  />			meta propertyog:url contenthttp://dl-qa.nonton.99array.com/ />			meta nametwitter:app:country contentUS>	/head>	body>		div classcontainer>			h1>Welcome to NontonQA!/h1>			h3 classsubtitle>You will receive a one-time SMS to download the app/h3>			form nameform action methodPOST>				div classform-item>					label forphone>h2>Phone number:/h2>/label>					input typetext namephone idphone placeholder+1 (123) 123-1234 classtext />					button typesubmit classbtn-submit>						svg enable-backgroundnew 0 0 32 32 idplane classbtn-submit-icon height17px width17px idLayer_1 version1.1 viewBox0 0 32 32 xml:spacepreserve xmlnshttp://www.w3.org/2000/svg xmlns:xlinkhttp://www.w3.org/1999/xlink>path dM31.543,0.16C31.377,0.053,31.188,0,31,0c-0.193,0-0.387,0.055-0.555,0.168l-30,20  c-0.309,0.205-0.479,0.566-0.439,0.936c0.038,0.369,0.278,0.6

Subdomains

Date	Domain	IP
deeplink.wbnc.99array.com	2024-10-22	52.9.52.122
dl-qa.nonton.99array.com	2025-12-07	35.167.216.18
www.99array.com	2024-09-10	18.161.3.85

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > dl-qa.nonton.99array.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains