Domain > haywirehospital-server.leancloud.cisgames.cn

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-02-05	60.188.225.8 (ClassC)
2022-04-06	36.25.241.6 (ClassC)
2022-04-06	115.223.28.136 (ClassC)
2022-04-06	36.25.241.9 (ClassC)
2022-04-06	115.223.28.137 (ClassC)
2022-10-03	220.185.166.211 (ClassC)
2022-10-03	220.185.166.210 (ClassC)
2025-10-24	112.47.51.147 (ClassC)

HTTP/1.1 200 OKDate: Fri, 24 Oct 2025 02:34:41 GMTContent-Type: text/html; charsetUTF-8Content-Length: 2432Connection: keep-aliveServer: openrestyVary: Accept-EncodingAccept-Ranges: bytesETag: 2432-1503649571000Cache-Control: public, max-age0Last-Modified: Fri, 25 Aug 2017 08:26:11 GMTx-user-response: trueCache-Control: public, max-age0X-Ser: i27247_c14934, i43604_c26757X-Cache: HIT from i27247_c14934(cloudsvr)

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml xml:langzh-CN langzh-CN>head>title>超脱力医院二维兑换码/title>meta http-equivContent-Type contenttext/html; charsetUTF-8 />meta nameviewport contentwidthdevice-width,initial-scale1,user-scalableno />script typetext/javascript srcjquery.min.js>/script>script typetext/javascript srcqrcode.js>/script>/head>body stylecolor:#41a0da;margin:0;>  img src./PasswordQR_1.gif stylewidth:100%;>  div styletext-align:center;width:100%;margin:20px 0;>    h2>长按二维码后点击【保存图片】保存到本地/h2>    h2>然后在游戏中扫描使用！/h2>    div idqrcode stylewidth:100%;margin:30px 0; aligncenter>/div>  /div>  div styletext-align:center;width:100%;margin:20px 0;>    h2>扫描方法请看↓↓↓/h2>  /div>  img src./PasswordQR_2.gif stylewidth:100%;>script typetext/javascript>  var QueryString  function () {    // This function is anonymous, is executed immediately and     // the return value is assigned to QueryString!    var query_string  {};    var query  window.location.search.substring(1);    var vars  query.split(&);    for (var i0;ivars.length;i++) {      var pair  varsi.split();          // If first entry with this name      if (typeof query_stringpair0  undefined) {        query_stringpair0  decodeURIComponent(pair1);          // If second entry with this name      } else if (typeof query_stringpair0  string) {        var arr   query_stringpair0,decodeURIComponent(pair1) ;        query_stringpair0  arr;          // If third or later entry with this name      } else {        query_stringpair0.push(decodeURIComponent(pair1));      }    }       return query_string;  }();  var qrcode  new QRCode(document.getElementById(qrcode), {  	width : 200,  	height : 200,    correctLevel : QRCode.CorrectLevel.H  });  function makeCode () {		  	qrcode.makeCode(QueryString.redeemcode);    //document.getElementById(qrcode).getElementsByTagName(img)0.style.cssText  margin:auto;clear:both;;    //console.log(document.getElementById(qrcode).getElementsByTagName(img)0)  }  makeCode();/script>/body>

Port 443

HTTP/1.1 200 OKDate: Fri, 24 Oct 2025 02:34:42 GMTContent-Type: text/html; charsetUTF-8Content-Length: 2432Connection: keep-aliveServer: openrestyVary: Accept-EncodingAccept-Ranges: bytesETag: 2432-1503649571000Cache-Control: public, max-age0Last-Modified: Fri, 25 Aug 2017 08:26:11 GMTx-user-response: trueCache-Control: public, max-age0X-Ser: i34692_c4672, i43604_c26757X-Cache: HIT from i43604_c26757(cloudsvr)

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > haywirehospital-server.leancloud.cisgames.cn

Is this malicious?

DNS Resolutions

Port 80

Port 443