Domain > loaders.diro.io

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-01-31	54.171.104.235 (ClassC)
2024-04-12	52.211.168.10 (ClassC)
2024-05-13	34.246.137.54 (ClassC)
2024-07-11	52.49.213.117 (ClassC)
2024-09-14	54.76.112.236 (ClassC)
2024-09-21	52.215.93.230 (ClassC)
2024-11-17	54.154.15.155 (ClassC)
2025-01-22	52.18.231.148 (ClassC)
2025-04-23	52.210.209.249 (ClassC)
2025-04-28	34.254.80.75 (ClassC)
2025-08-01	54.170.232.202 (ClassC)

HTTP/1.1 200 OKDate: Wed, 31 Jan 2024 00:33:38 GMTContent-Type: text/htmlContent-Length: 3746Connection: keep-aliveServer: nginx/1.15.8Last-Modified: Wed, 05 Apr 2023 10:53:07 GMTETag: 642d5313-ea2Acc

!DOCTYPE html>html>	head>		!-- script>			window.location.href  https://loader.diro.io;		/script> -->		meta nameviewport contentwidthdevice-width, initial-scale1 />		style>			body {				height: 100vh;				display: flex;				justify-content: center;				align-items: center;			}			.loader {				display: flex;				justify-content: center;				align-items: center;				border: 4px solid #f3f3f3;				border-radius: 50%;				border-top: 4px solid #626262;				width: 30px;				height: 30px;				-webkit-animation: spin 2s linear infinite;				animation: spin 2s linear infinite;			}			/* Safari */			@-webkit-keyframes spin {				0% {					-webkit-transform: rotate(0deg);				}				100% {					-webkit-transform: rotate(360deg);				}			}			@keyframes spin {				0% {					transform: rotate(0deg);				}				100% {					transform: rotate(360deg);				}			}		/style>	/head>	script typetext/javascript languagejavascript>		  function getURL()        {			var baseurl  {				stage1baseurl : https://stage.diro.live/Zuul-1.0/,				stage2baseurl :https://stage2.diro.live/Zuul-1.0/,				prodbaseurl :https://prod.dirolabs.com/Zuul-1.0/			};        var urls  {				stage1:{						get_lastclicked_link : https://stage.diro.live/Zuul-1.0/User-2.0/getlastclickedlink,						update_session: baseurl.stage1baseurl+User-2.0/updatesession,					},						stage2:{						get_lastclicked_link : baseurl.stage2baseurl+User-2.0/getlastclickedlink,							update_session: baseurl.stage2baseurl+User-2.0/updatesession,					},				prodeu:{					get_lastclicked_link: baseurl.prodbaseurl+User-2.0/getlastclickedlink,					update_session: baseurl.prodbaseurl+User-2.0/updatesession,	},				       		 }            return urls.prodeu;        }		var url  window.location.href;			var splitString  url.split(/?);        var finalSessionId  splitStringsplitString.length -1;		console.log(finalSessionId  + finalSessionId)		let myBody  {sessionid: finalSessionId};		console.log(myBody)		var url_log  getURL();        var get_lastclicked_link  url_log.get_lastclicked_link ;		const userAction  async () > {		const response

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > loaders.diro.io

Is this malicious?

DNS Resolutions

Port 80

Port 443