Domain > img.nights.fun

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-07-08	115.127.249.83 (ClassC)
2019-10-18	14.0.44.211 (ClassC)
2019-12-04	14.0.44.247 (ClassC)
2020-08-18	14.0.41.244 (ClassC)
2024-02-26	14.0.43.176 (ClassC)
2024-04-30	14.0.41.189 (ClassC)
2024-07-23	138.113.153.220 (ClassC)
2024-10-01	138.113.153.219 (ClassC)
2024-12-26	14.0.44.246 (ClassC)

HTTP/1.1 200 OKDate: Fri, 24 Nov 2023 22:33:49 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveServer: PWS/8.3.1.0.8Set-Cookie: Apache10.244.6.0.355141700865228989; path/; ex

?xml version1.0 encodingutf-8?>!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml langja xml:langja>head>script typetext/javascript>var _HeavenScriptfunction(){};_HeavenScript.urlfunction(a){if(a.match(/(&|?)(pcmodesp|spmodepc)/)){return a}var blocation.search;var c;if(b.match(/(&|?)pcmodesp/)){cpcmodesp}else{if(b.match(/(&|?)spmodepc/)){cspmodepc}}if(c!){if(a.indexOf(?)!-1){aa+&+c}else{aa+?+c}}return a};_HeavenScript.adLurlfunction(e){var blocation.search;var h;if(b.match(/(&|?)pcmodesp/)){hpcmode%3Dsp}else{if(b.match(/(&|?)spmodepc/)){hspmode%3Dpc}}var knew RegExp(^(.+?&_lurl)((https?(:|%3A)?)?(//|%2F%2F))(.*?(smart|www).nights.fun^/%*?)((/|%2F)^?&+)(?&.+)?$);var fk.exec(e);var if1;var df2;var clocation.host.indexOf(www)!-1?location.host.replace(smart.,www.):location.host;var gf8;var af10!undefined?f10:;var jencodeURIComponent(decodeURIComponent(d+c+g));if(h!){if(g.indexOf(%3F)!-1){ei+j+%26+h+a}else{ei+j+%3F+h+a}}return e};/script>        !-- Google Tag Manager -->        script>if (!~navigator.userAgent.indexOf(Google Page Speed Insights) && !~navigator.userAgent.indexOf(Googlebot) && !~navigator.userAgent.indexOf(Chrome-Lighthouse)) {(function(w,d,s,l,i){wlwl||;wl.push({gtm.start:        new Date().getTime(),event:gtm.js});var fd.getElementsByTagName(s)0,        jd.createElement(s),dll!dataLayer?&l+l:;j.asynctrue;j.src        https://www.googletagmanager.com/gtm.js?id+i+dl;f.parentNode.insertBefore(j,f);        })(window,document,script,dataLayer,GTM-WRLF233);};/script>        !-- End Google Tag Manager -->            link relapple-touch-icon-precomposed href//img.nights.fun/img/icone_heaven.png />    meta http-equivcontent-type contenttext/html; charsetutf-8 />    meta nameverify-v1 contentEjP2TgeGru/z//UXikqxsYDQUbiSMboT/wC+RgVSkEE />    meta namey_key content56f742105f0da65e />    meta namegoogle-site-verification contentxXo_7yQPijbAqZ9GUw95Zg-52moZt27fyQKgQv3sHv0 />    meta namedescription contentナイ

Port 443

HTTP/1.1 200 OKDate: Fri, 24 Nov 2023 22:33:50 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveServer: PWS/8.3.1.0.8Set-Cookie: Apache10.244.7.0.34708170086523010; path/; exp

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > img.nights.fun

Is this malicious?

DNS Resolutions

Port 80

Port 443