Domain > download.4ehc30.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-09-10	103.101.190.9 (ClassC)
2025-10-24	154.86.23.130 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlDate: Fri, 24 Oct 2025 02:05:11 GMTEtag: W/6676ad76-7509Last-Modified: Sat, 22 Jun 2024 10:54:46 GMTServer: nginxVary: Accept-EncodingX-Cache: BYPASSTransfer-Encoding: chunked

html stylefont-size: 100px>head>  meta http-equivContent-Type contenttext/html; charsetUTF-8 />  title>APP Download Page/title>  meta namekeywords content />  meta namedescription content />  !-- meta      nameviewport      contentwidthdevice-width, initial-scale1, user-scalable0, maximum-scale1, minimum-scale1    /> -->  meta nameviewport    contentwidthdevice-width,initial-scale1.0,minimum-scale1.0,maximum-scale1.0,user-scalableno />  meta contentyes nameapple-mobile-web-app-capable />  meta contentblack nameapple-mobile-web-app-status-bar-style />  meta nameformat-detection contenttelephoneno />  link relstylesheet typetext/css href/static/iframe.css?v20240620 />  script typetext/javascript src/static/jquery.min.js?v20240620>/script>  script typetext/javascript src/static/jquery.md5.js?v20240620>/script>  script typetext/javascript src/static/rem.js?v20240620>/script>  script typetext/javascript src/static/lottie_svg.min.js?v20240620>/script>  link relstylesheet typetext/css href/static/css/bootstrap.min.css?v20240620 />  script typetext/javascript src/static/js/bootstrap.min.js?v20240620>/script>  !-- Google tag (  gtag.js -26 ) -->  script async srchttps://www.googletagmanager.com/gtag/js?idG-SD1Z9YE90P>/script>  script>    window.dataLayer  window.dataLayer || ;    function gtag() {      dataLayer.push(arguments);    }    gtag(js, new Date());    gtag(config, G-SD1Z9YE90P);  /script>  style>    html {      overflow-y: auto;      -webkit-overflow-scrolling: touch;    }    body {      overflow-y: auto;      -webkit-overflow-scrolling: touch;      position: absolute;      top: 0;      left: 0;      right: 0;      bottom: 0;      margin: 0px;      /* background-color: #e0a94c; */      display: flex;      justify-content: center;      align-items: center;    }    .loading {      width: 100px;      height: 100px;      display: flex;      justify-content: center;      position: absolute;      z-index: 10;    }  /style>/head>body styleoverflow-x: hidden>  !-- div classloading idloading>/div> -->  div classapp-dowload>    iframe classiframe-html idmainiframe src allowclipboard-write>/iframe>  /div>  !-- Modal -->  !-- div      classmodal fade      idmyModal      tabindex-1      roledialog      aria-labelledbyexampleModalLabel      aria-hiddentrue    > -->  div classmodal fade idmyModal tabindex-1 roledialog>    div classmy-dialog roledocument>      div classdialog-title>温馨提示/div>      div classdialog-message>点击极速注册 轻松获取收益/div>      div classdialog-footer data-dismissmodal iddo>确定/div>    /div>  /div>  script>    function isMobile() {      let flag  navigator.userAgent.match(        /(phone|pad|pod|iPhone|iPod|ios|iPad|Android|Mobile|BlackBerry|IEMobile|MQQBrowser|JUC|Fennec|wOSBrowser|BrowserNG|WebOS|Symbian|Windows Phone)/i      );      return flag;    }    function isReplaceUrl(nativeUrl) {      if (nativeUrl.includes(^^)) {        const domain  window.location.hostname;        let tempUrlArray  nativeUrl.split(^^urlhttps://);        let tempUrlSubArray  tempUrlArray1 && tempUrlArray1.split(/);        tempUrlSubArray0  domain;        tempUrlArray1  tempUrlSubArray.join(/);        let result  tempUrlArray.join(^^urlhttps://);        return result;      } else {        return nativeUrl;      }    }    (function () {      // setTimeout(() > {      //   $(#loading).hide();      // }, 1500);      langSet();      var winW  $(window).width();      if (winW > 768) {        winW  768;      }      $(html).css(font-size, winW / 7.5);      $(window).resize(function () {        winW  $(window).width();        if (winW > 768) {          winW  768;        }        $(html).css(font-size, winW / 7.5);      });      // loadingAnimation();      // $(#mainiframe).load(function () {      //   $(#loading).hide();      // });      jQuery.ajaxSetup({        cache: true,      });      // 匹配浏览器参数      let paramsStr  window.location.href.split(#/)1;      let paramsObj  {};      if (paramsStr) {        let paramsArray  paramsStr.split(/);        paramsArray.forEach(item > {          if (/^f(0-9{1,})$/.test(item)) {            paramsObjforward_url  /^f(0-9{1,})$/.exec(item)1;          } else if (/^p(0-9{1,})$/.test(item)) {            paramsObjpage  /^p(0-9{1,})$/.exec(item)1;          } else if (/^a(a-zA-Z0-9_{1,})$/.test(item)) {            paramsObjaffid  /^a(a-zA-Z0-9_{1,})$/.exec(item)1;          } else if (item.length > 6 && /^(a-zA-Z0-9{6})$/.test(item.slice(0, 6))) {            const is4eGame  window.location.href.includes(4e.game)            const inviteCode  /^(a-zA-Z0-9{6})$/.exec(item.slice(0, 6))1 ||             if (is4eGame) {              if (!inviteCode) {                paramsObjref  412M8Z                paramsObjinvite_code  412M8Z              } else {                paramsObjref  inviteCode;                paramsObjinvite_code  inviteCode;              }            } else {              paramsObjref  inviteCode;              paramsObjinvite_code  inviteCode;            }          }        });      }      //开始      // jQuery.getUrlParam  function (name) {      //   var reg  new RegExp((^|&) + name + (^&*)(&|$));      //   var r  window.location.search.substr(1).match(reg);      //   if (r ! null) return unescape(r2);      //   return null;      // };      jQuery.getUrlParam  function (name) {        if (paramsObjname) {          return paramsObjname;        }        var reg  new RegExp((^|&) + name + (^&*)(&|$));        var r  null;        if (window.location.search) {          r  window.location.search.substr(1).match(reg);        } else {          r  (            window.location.hash.split(?)1              ? `?${window.location.hash.split(?)1}`              :           )            .substr(1)            .match(reg);        }        if (r ! null) return unescape(r2);        return null;      };      var isSubdirBool  false;      var host  window.location.host;      var hostMd5  $.md5(host);      var fiveMiniter  Math.ceil(new Date().getTime() / 300000);      var tenMiniter  Math.ceil(new Date().getTime() / 600000);      window.addEventListener(hashchange, () > {        location.reload();      })      function innerFum() {        jQuery.getScript(          window.location.protocol +          // +          host +          /config/site/ +          hostMd5.substring(0, 2) +          / +          hostMd5.substring(2, 4) +          / +          hostMd5 +          .js?rv3. +          fiveMiniter,          function (data, status, jqxhr) {            if (!(is_lock_fixed_params in site)) {              site.is_lock_fixed_params  1            }            // 处理 special_invite_code 更换 哈希值            if (site.special_invite_code && JSON.stringify(site.special_invite_code) ! {} && paramsObj.invite_code) {              console.log(2222);              console.log(paramsObj.invite_code, paramsObj.invite_code);              for (const item in site.special_invite_code) {                if (paramsObj.invite_code  item) {                  window.location.hash  site.special_invite_codeitem                }              }            }            function jumpUrls() {              if (site.redirect_urls && site.redirect_urls.length ! 0) {                ping(site.redirect_urls, nextDomain);              } else {                nextDomain(null);              }            }            function handlePath(path) {              const paramsArray  path.split(/)              const is4eGame  window.location.href.includes(4e.game)              paramsArray.map(item > {                if (                  item.length > 6 &&                  /^(a-zA-Z0-9{6})$/.test(item.slice(0, 6))                ) {                  let inviteCode  /^(a-zA-Z0-9{6})$/.exec(                    item.slice(0, 6)                  )1                  if (is4eGame) {                    inviteCode  inviteCode || 412M8Z                  }                  return inviteCode                }                return item              })              return paramsArray.join(/)            }            function nextDomain(redirect_url) {              if (                // site.is_captcha  1 &&                redirect_url &&                redirect_url !               ) {                let nativeHref  window.location.href;                if (site.domain_fixed_params) {                  site.domain_fixed_params  handlePath(site.domain_fixed_params)                }                nativeHref  handlePath(nativeHref)                if (site.is_lock_fixed_params  1 && site.domain_fixed_params) {                  let resultHref  ;                  let level1Href  nativeHref.split(/#/);                  if (level1Href1) {                    let level2Href  level1Href1.split(/?second);                    resultHref                        level1Href0,                      site.domain_fixed_params,                      level2Href1 ? `/?second${level2Href1}` : ,                    .join();                  } else {                    let levelQ1Href  nativeHref.split(/?second);                    if (levelQ1Href1) {                      resultHref                          levelQ1Href0,                        site.domain_fixed_params,                        `/?second${levelQ1Href1}`,                      .join();                    } else {                      resultHref                          levelQ1Href0,                        site.domain_fixed_params,                      .join();                    }                  }                  nativeHref  resultHref;                } else if (site.is_lock_fixed_params  0) {                  let resultHref  ;                  let level1Href  nativeHref.split(/#/);                  const hasParams  nativeHref.includes(/#/)                  const hasSecondParams  nativeHref.includes(/?second)                  if (hasParams) {                    // let level2Href  level1Href1.split(/?second);                    // resultHref                      //   level1Href0,                    //   level1Href1,                    //   `/?second${level2Href1}`,                    // .join();                    resultHref  hasSecondParams ? nativeHref : nativeHref + ?secondtrue                  } else if (site.domain_fixed_params) {                    let levelQ1Href  nativeHref.split(/?second);                    resultHref                        levelQ1Href0,                      site.domain_fixed_params,                    .join();                  }                  nativeHref  resultHref;                } else {                  let resultHref  ;                  let level1Href  nativeHref.split(/#/);                  const hasParams  nativeHref.includes(/#/)                  const hasSecondParams  nativeHref.includes(/?second)                  if (hasParams) {                    resultHref  hasSecondParams ? nativeHref : nativeHref + ?secondtrue                  } else if (site.domain_fixed_params) {                    let levelQ1Href  nativeHref.split(/?second);                    resultHref                        levelQ1Href0,                      site.domain_fixed_params,                    .join();                  }                  nativeHref  resultHref;                }                // const params1  window.location.href.split(#/)1;                // const params2  window.location.href.split(?)1;                const params1  nativeHref.split(#/)1;                const params2  nativeHref.split(?)1;                const haveQuestion  params1 ? params1.includes(?) : false;                window.location.href                   redirect_url +                  (params1                    ? `#/${params1}${haveQuestion ? &secondtrue : /?secondtrue                    }`                    : params2                      ? `/?${params2}&secondtrue`                      : /?secondtrue);                return;              } else {                if (!($.getUrlParam(ref) || $.getUrlParam(invite_code))) {                  if (site.is_lock_fixed_params  1 && site.domain_fixed_params) {                    let paramsStrTemp  site.domain_fixed_params.split(#/)1;                    if (paramsStrTemp) {                      let paramsArray  paramsStrTemp.split(/);                      paramsArray.forEach(item > {                        if (/^f(0-9{1,})$/.test(item)) {                          paramsObjforward_url  /^f(0-9{1,})$/.exec(                            item                          )1;                        } else if (/^p(0-9{1,})$/.test(item)) {                          paramsObjpage  /^p(0-9{1,})$/.exec(item)1;                        } else if (/^a(a-zA-Z0-9_{1,})$/.test(item)) {                          paramsObjaffid  /^a(a-zA-Z0-9_{1,})$/.exec(                            item                          )1;                        } else if (                          item.length > 6 &&                          /^(a-zA-Z0-9{6})$/.test(item.slice(0, 6))                        ) {                          paramsObjref  /^(a-zA-Z0-9{6})$/.exec(                            item.slice(0, 6)                          )1;                          paramsObjinvite_code  /^(a-zA-Z0-9{6})$/.exec(                            item.slice(0, 6)                          )1;                        }                      });                    }                  }                }              }              jQuery.getScript(                window.location.protocol +                // +                host +                /config/channel/ +                site.p +                .js?r +                tenMiniter,                function (data, status, jqxhr) {                  var invite_code  $.getUrlParam(ref) || $.getUrlParam(invite_code)                  if (invite_code) {                    invite_code  invite_code.substring(0, 6)                  }                  invite_code                     (invite_code                      ? /^0-9a-zA-Z{3,10}$/.test(invite_code)                        ? invite_code                        :                       : );                  //is Mobile or Web                  if (!isMobile() && channel_config.web_url) {                    var webUrl  channel_config.web_url;                    if (!webUrl.endsWith(/)) {                      webUrl  webUrl + /;                    }                    webUrl                       webUrl +                      (invite_code                        ? register/?ref + invite_code                        : register);                    window.location.href  webUrl;                    return;                  }                  var affid  $.getUrlParam(affid);                  channel_config.channel_invite_package &&                    channel_config.channel_invite_package.forEach(element > {                      if (element.channel_no  affid) {                        channel_config.defult_apk_url                           element.defult_apk_url;                        channel_config.defult_ios_url                           element.defult_ios_url;                      }                    });                  if (channel_config.channel_download_url &&                    channel_config.channel_download_urlaffid && affid  001) {                    channel_config.st_apk_url  channel_config.channel_download_urlaffid.st_apk_url                    channel_config.th_apk_url  channel_config.channel_download_urlaffid.th_apk_url                    channel_config.th_ios_url  channel_config.channel_download_urlaffid.th_ios_url                    channel_config.st_ios_urls  channel_config.channel_download_urlaffid.st_ios_urls                    channel_config.th_ios_urls  channel_config.channel_download_urlaffid.th_ios_urls                  } else if (channel_config.channel_download_url &&                    channel_config.channel_download_urlaffid) {                    channel_config.defult_apk_url  channel_config.channel_download_urlaffid.defult_apk_url                    channel_config.defult_ios_url  channel_config.channel_download_urlaffid.defult_ios_url                    channel_config.defult_google_play                      channel_config.defult_super_sign_url                    }                  var scenes                     ($.getUrlParam(channel)                      ? $.getUrlParam(channel)                      : 0) ||                    ($.getUrlParam(scenes) ? $.getUrlParam(scenes) : 0);                  var channel  $.getUrlParam(channel);                  var page  $.getUrlParam(page);                  var default_page  $.getUrlParam(default_page);                  var forward_url  $.getUrlParam(forward_url);                  var channelCode  $.getUrlParam(channelCode);                  var lang  $.getUrlParam(lang);                  var product_id  $.getUrlParam(product_id)                    ? $.getUrlParam(product_id)                    : channel_config.default_product_id;                  // var u  navigator.userAgent;                  // var isiOS  !!u.match(/\(i^;+;( U;)? CPU.+Mac OS X/);                  channel_config.tmp_path                     window.location.protocol +                    // +                    host +                    channel_config.tmp_path;                  if (!channel_config.tmp_path.endsWith(/)) {                    channel_config.tmp_path  channel_config.tmp_path + /;                  }                  if (site.subdir) {                    isSubdirBool  true;                    if (!site.subdir.endsWith(/)) {                      site.subdir  site.subdir + /;                    }                  }                  var pathfirst  ;                  // if (window.location.pathname.split(/)1) {                  //   pathfirst  window.location.pathname.split(/)1 + /;                  // }                  var temp_path  host;                  var supportStr  temp_path.split(.)0;                  if (supportStr  support) {                    channel_config.tmp_path                       channel_config.tmp_path + support/;                  }                  if (supportStr  jump) {                    channel_config.tmp_path                       channel_config.tmp_path + jump/;                  }                  $(#mainiframe).attr(                    src,                    channel_config.tmp_path +                    pathfirst +                    (isSubdirBool ? site.subdir : ) +                    ?invite_code +                    invite_code +                    &channel +                    channel +                    &forward_url +                    forward_url +                    &channelCode +                    invite_code +                    &scenes +                    scenes +                    &product_id +                    product_id +                    &channel_id +                    site.p +                    &page +                    page +                    &lang +                    lang +                    &default_page +                    default_page +                    &location_url +                    encodeURIComponent(window.location.href) +                    &point_domain +                    ((site.api_domain &&                      encodeURIComponent(site.api_domain)) ||                      encodeURIComponent(channel_config.point_domain)) +                    &qrcode_download_url +                    encodeURIComponent(channel_config.qrcode_download_url) +                    &defult_ios_url +                    isReplaceUrl(channel_config.defult_ios_url) +                    &defult_apk_url +                    channel_config.defult_apk_url +                    &defult_appstore_url +                    isReplaceUrl(channel_config.defult_appstore_url) +                    &defult_enterprise_sign_url +                    encodeURIComponent(                      isReplaceUrl(                        channel_config.defult_enterprise_sign_url                      )                    ) +                    &defult_super_sign_url +                    isReplaceUrl(channel_config.defult_super_sign_url) +                    &defult_super_sign_url_bak +                    channel_config.defult_super_sign_url_bak +                    &defult_google_play +                    channel_config.defult_google_play +                    &defult_test_flight_url +                    channel_config.defult_test_flight_url +                    &customer_service_url +                    channel_config.customer_service_url +                    &defult_open_install_key +                    channel_config.defult_open_install_key +                    &super_sign_urls +                    JSON.stringify(encodeURIComponent(channel_config.super_sign_urls)) +                    &st_apk_url +                    channel_config.st_apk_url +                    &th_apk_url +                    channel_config.th_apk_url +                    &th_ios_url +                    channel_config.th_ios_url +                    &st_ios_urls +                    JSON.stringify(encodeURIComponent(channel_config.st_ios_urls)) +                    &th_ios_urls +                    JSON.stringify(encodeURIComponent(channel_config.th_ios_urls)) +                    &r +                    fiveMiniter                  );                  //判断是否为IOS                  // if (isiOS) {                  //   $(#mainiframe).attr(                  //     src,                  //     channel_config.tmp_path +                  //       ?invite_code +                  //       invite_code +                  //       &product_id +                  //       product_id +                  //       &defult_ios_url +                  //       channel_config.defult_ios_url +                  //       &defult_apk_url +                  //       channel_config.defult_apk_url +                  //       &r +                  //       fiveMiniter                  //   );                  // } else {                  //   $(#mainiframe).attr(                  //     src,                  //     channel_config.tmp_path +                  //       ?invite_code +                  //       invite_code +                  //       &defult_download_url +                  //       channel_config.defult_apk_url +                  //       &r +                  //       fiveMiniter                  //   );                  // }                }              );            }            if (site.is_captcha  1) {              // if (site.redirect_urls && site.redirect_urls.length ! 0) {              $.ajax({                url: `https://collectlog.${getTopDomain()}/api/verify/check?v${new Date().getTime()}`,                type: POST,                data: {                  from: window.location.href,                  process: $.getUrlParam(second) ? 2 : 1,                },                cache: false,                dataType: json,                success: function (data) {                  if (data.data.status  1) {                    $(#myModal).modal(show); //此处触发模态框                    $(#do).on(click, function () {                      $.ajax({                        url: `https://collectlog.${getTopDomain()}/api/verify/pass?v${new Date().getTime()}`,                        type: POST,                        success: function (data) {                          if (                            data.data.status  3 &&                            !(                              site.redirect_urls &&                              site.redirect_urls.length ! 0                            )                          ) {                            $(#myModal).hide();                            $(.modal-backdrop.fade).hide();                            //none                          } else {                            $(#myModal).hide();                            $(.modal-backdrop.fade).hide();                            jumpUrls();                          }                        },                        error: function (error) {                          $(#myModal).hide();                          $(.modal-backdrop.fade).hide();                          jumpUrls();                        },                      });                    });                  } else if (data.data.status  2) {                    jumpUrls();                  } else {                    //NONE                  }                },                error: function (error) {                  jumpUrls();                },              });            } else {              jumpUrls();            }          }        );      }      innerFum(); //样式完成后恢复    })();    function loadingAnimation() {      // $.getJSON(./static/grey.json, function (result) {      $.getJSON(/static/grey.json, function (result) {        lottie.loadAnimation({          container: document.querySelector(.loading),          renderer: svg,          loop: true,          autoplay: true,          animationData: result,        });      });    }    function getTopDomain() {      // 获取当前域名      let currentDomain  window.location.hostname;      // 使用正则表达式提取顶级域名      let topLevelDomain  currentDomain.match(/^.+\.^.+$/);      return topLevelDomain0;      // console.log(topLevelDomain0)    }    function ping(urls, callUrl) {      let isPass  false;      // let flag  0;      for (let i  0; i  urls.length; i++) {        //这里必须let，如果var则在request的success的回调中无法获取i的值        if (isPass) {          break;        }        // let nowTime  Date.now(); //发送请求时的时间        console.log(请求域名, urlsi);        $.ajax({          url: urlsi + /enabled + i + .txt,          type: POST,          dataType: jsonp,          jsonp: callback,          jsonpCallback: successCallback + i,          success: function (data) {            // let successTime  Date.now(); //得到请求结果时的时间            // let responseTime  successTime - nowTime; //计算响应时间            // flag++;            // console.log(dataTest, data);            if (!isPass) {              isPass  true;              console.log(域名可用, urlsdata.url_index);              callUrl(urlsdata.url_index);            }          },          error: function (error) { },        });      }    }    function langSet() {      let userLang  navigator.language.toLowerCase();      // 判断简体中文      if (userLang  zh || userLang  zh-cn || userLang  zh-sg) {        $(.dialog-title).text(温馨提示);        $(.dialog-message).text(点击极速注册 轻松获取收益);        $(.dialog-footer).text(确定);        // console.log(简体中文);      }      // 判断繁体中文      else if (userLang  zh-tw || userLang  zh-hk) {        $(.dialog-title).text(溫馨提示);        $(.dialog-message).text(點選極速註冊 輕鬆取得收益);        $(.dialog-footer).text(確定);        // console.log(繁体中文);      }      // 判断英语      else if (userLang.startsWith(en)) {        $(.dialog-title).text(Friendly reminder);        $(.dialog-message).text(Click to register quickly and easily earn income);        $(.dialog-footer).text(Confirm);      }      // 判断越南语      else if (userLang.includes(vi)) {        $(.dialog-title).text(Lời nhắc nhở thân thiện);        $(.dialog-message).text(          Click để đăng ký nhanh chóng và dễ dàng kiếm thu nhập        );        $(.dialog-footer).text(Xác nhận);      }      // 判断西班牙语      else if (userLang.startsWith(es)) {        $(.dialog-title).text(Recordatorio amable);        $(.dialog-message).text(          Haga clic para registrarse rápida y fácilmente obtener ingresos        );        $(.dialog-footer).text(Confirmar);      }      // 默认情况      else {        $(.dialog-title).text(Friendly reminder);        $(.dialog-message).text(Click to register quickly and easily earn income);        $(.dialog-footer).text(Confirm);      }    }  /script>/body>/html>

Subdomains

Date	Domain	IP
api-doc.4ehc30.com	2025-10-23	154.86.23.130
download.4ehc30.com	2025-10-24	154.86.23.130
bankcard.4ehc30.com	2025-10-24	154.86.23.52
apiuni.4ehc30.com	2025-10-23	154.86.23.218
api.4ehc30.com	2025-10-23	154.86.23.52
hcapi.4ehc30.com	2025-10-24	154.86.23.218
help.4ehc30.com	2025-10-23	154.86.23.130
app.4ehc30.com	2025-10-24	154.86.23.52
chat-ws.4ehc30.com	2025-10-23	154.86.23.218

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > download.4ehc30.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains