Domain > pay.94p.cn

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-09-12	23.224.198.100 (ClassC)
2026-02-13	154.220.86.170 (ClassC)

Port 80

HTTP/1.1 500 Bad GatewayServer: nginxDate: Fri, 13 Feb 2026 19:11:38 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-alive

script>document.write(unescape(%3C%21DOCTYPE%20html%3E%0A%3Chtml%3E%0A%09%3Chead%3E%0A%09%09%3Cmeta%20charset%3D%22utf-8%22%20/%3E%0A%09%09%20%3Cmeta%20name%3D%22viewport%22%20content%3D%22width%3Ddevice-width%2C%20initial-scale%3D1%2C%20shrink-to-fit%3Dno%22%3E%0A%09%09%3Clink%20rel%3D%22stylesheet%22%20href%3D%22ad/css/bootstrap.min.css%22%20integrity%3D%22sha384-ggOyR0iXCbMQv3Xipma34MD+dH/1fQ784/j6cY/iJTQUOhcWr7x9JvoRxT2MZw1T%22%20crossorigin%3D%22anonymous%22%3E%0A%09%09%3Cscript%20src%3D%22ad/js/c3a2717da300c16e.js%22%3E%3C/script%3E%0A%09%09%3Ctitle%3E%u5B89%u5168%u8DF3%u8F6C%u9875%u9762%3C/title%3E%0A%09%09%3Cstyle%3E%0A%09%09%09*%7B%0A%09%09%09%20%20%20%20padding%3A%200px%3B%0A%09%09%09%09margin%3A%200px%3B%0A%09%09%09%7D%0A%09%09%09body%7B%0A%09%09%09%09width%3A%20100%25%3B%0A%09%09%09%09height%3A%20100vh%3B%0A%09%09%09%7D%0A%09%09%09.main%7B%0A%09%09%09%09position%3A%20relative%3B%0A%09%09%09%20%20%20%20width%3A%20100%25%3B%0A%09%09%09%09height%3A%20100%25%3B%0A%09%09%09%09background%3A%20%23000%3B%0A%09%09%09%09display%3A%20flex%3B%0A%09%09%09%09justify-content%3A%20center%3B%0A%09%09%09%09align-items%3A%20center%3B%0A%09%09%09%7D%0A%09%09%09.circle%7B%0A%09%09%09%09display%3A%20flex%3B%0A%09%09%09%09justify-content%3A%20center%3B%0A%09%09%09%09align-items%3A%20center%3B%0A%09%09%09%09width%3A%20200px%3B%0A%09%09%09%09height%3A%20200px%3B%0A%09%09%09%09background-image%3A%20linear-gradient%280deg%2C%0A%09%09%09%09rgb%2847%2C102%2C255%29%2C%0A%09%09%09%09rgb%28153%2C64%2C255%29%2030%25%2C%0A%09%09%09%09rgb%28238%2C55%2C255%29%2060%25%2C%0A%09%09%09%09rgb%28255%2C0%2C76%29%20100%25%29%3B%0A%09%09%09%09border-radius%3A%2050%25%3B%0A%09%09%09%09animation%3A%20rotate%201s%20linear%20infinite%3B%0A%09%09%09%7D%0A%09%09%09/*%20%u6A21%u7CCA%20*/%0A%09%09%09.circle%3A%3Abefore%7B%0A%09%09%09%09content%3A%20%22%22%3B%0A%09%09%09%09position%3Aabsolute%3B%0A%09%09%09%09width%3A%20200px%3B%0A%09%09%09%09height%3A%20200px%3B%0A%09%09%09%09background-image%3A%20linear-gradient%280deg%2C%0A%09%09%09%09rgb%2847%2C102%2C255%29%2C%0A%09%09%09%09rgb%28153%2C64%2C255%29%2030%25%2C%0A%09%09%09%09rgb%28238%2C55%2C255%29%2060%25%2C%0A%09%09%09%09rgb%28255%2C0%2C76%29%20100%25%29%3B%0A%09%09%09%09border-radius%3A%2050%25%3B%0A%09%09%09%09filter%3A%20blur%2835px%29%3B%0A%09%09%09%7D%0A%09%09%09/*%20%u9ED1%u5706%20*/%0A%09%09%09.circle%3A%3Aafter%7B%0A%09%09%09%09content%3A%20%22%22%3B%0A%09%09%09%09position%3Aabsolute%3B%0A%09%09%09%09width%3A%20150px%3B%0A%09%09%09%09height%3A%20150px%3B%0A%09%09%09%09background%3A%23000%3B%0A%09%09%09%09border-radius%3A%2050%25%3B%0A%09%09%09%7D%0A%09%09%09h1%7B%0A%09%09%09%09position%3A%20absolute%3B%0A%09%09%09%09color%3A%20%23fff%3B%0A%09%09%09%09font-weight%3A%20bold%3B%0A%09%09%09%7D%0A%09%09%09.title%7B%0A%09%09%09%09color%3A%20%23FFFFFF%3B%0A%09%09%09%09position%3Aabsolute%3B%0A%09%09%09%09top%3A10%25%3B%0A%09%09%09%09text-shadow%3A0px%200%2030px%20%23fff%3B%0A%09%09%09%09text-align%3A%20center%3B%0A%09%09%09%09font-size%3A%202rem%3B%0A%09%09%09%09font-weight%3A%20bold%3B%0A%09%09%09%7D%0A%09%09%09.text%7B%0A%09%09%09%09color%3A%20%23FFFFFF%3B%0A%09%09%09%09position%3Aabsolute%3B%0A%09%09%09%09bottom%3A10%25%3B%0A%09%09%09%09text-shadow%3A0px%200%2030px%20%23fff%3B%0A%09%09%09%09font-weight%3A%20bold%3Btext-align%3A%20center%3B%0A%09%09%09%7D%0A%09%09%09/*%20%u6DFB%u52A0%u52A8%u753B%20*/%0A%09%09%09@keyframes%20rotate%7B%0A%09%09%09%090%25%7B%0A%09%09%09%09%09transform%3A%20rotate%280deg%29%3B%0A%09%09%09%09%7D%0A%09%09%09%09100%25%7B%0A%09%09%09%09%09transform%3A%20rotate%28360deg%29%3B%0A%09%09%09%09%7D%0A%09%09%09%7D%0A%09%09%3C/style%3E%0A%09%3C/head%3E%0A%09%3Cbody%20onload%3D%22time%28%29%22%3E%0A%09%20%20%20%20%3Cdiv%20class%3D%22main%22%3E%0A%09%09%09%3Cdiv%20class%3D%22circle%22%3E%3C/div%3E%0A%09%09%09%3Ch1%20id%3D%22second%22%3E6s%3C/h1%3E%0A%09%09%09%3Cp%20class%3D%22title%22%3E%u5B89%u5168%u8DF3%u8F6C%u9875%3C/p%3E%0A%09%09%09%3Cp%20class%3D%22text%22%3E%u6B63%u5728%u6821%u9A8C%u7F51%u7EDC%uFF0C%u8BF7%u7A0D%u505C%3C/p%3E%0A%09%09%3C/div%3E%0A%09%3C/body%3E%0A%09%3Cscript%3E%0A%09%09function%20cs%28%29%7B%0A%09%09%09var%20query%20%3D%20window.location.search.substring%281%29%3B%0A%09%09%09%20%20%20%20%20%20%20var%20vars%20%3D%20query.split%28%22%26%22%29%3B%0A%09%09%09%20%20%20%20%20%20%20for%20%28var%20i%3D0%3Bi%3Cvars.length%3Bi++%29%20%7B%0A%09%09%09%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20var%20pair%20%3D%20vars%5Bi%5D.split%28%22%3D%22%29%3B%0A%09%09%09%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20if%28pair%5B0%5D%20%3D%3D%20%22url%22%29%7B%0A%09%09%09%09%09%09%09%20%20%20return%20pair%5B1%5D%3B%0A%09%09%09%09%09%09%09%7D%0A%09%09%09%20%20%20%20%20%20%20%7D%0A%09%09%09return%28%22?showad%22%29%3B//%u65E0%u6307%u5B9A%u8DF3%u8F6C%u5730%u5740%uFF0C%u5C06%u8DF3%u8F6C%u6B64%u7F51%u9875%u5730%u5740%u3002%0A%09%09%7D%0A%09%09function%20time%28%29%7B%0A%09%09%09var%20sec%20%3D%20document.getElementById%28%22second%22%29%3B%0A%09%09%09%20var%20i%20%3D%203%3B//%u8BBE%u7F6E%u5B9A%u65F6%u65F6%u95F4%0A%09%09%09%20var%20timer%20%3D%20setInterval%28function%28%29%7B%0A%09%09%09%20i--%3B%0A%09%09%09%20sec.innerHTML%20%3D%20i+%22s%22%3B%0A%09%09%09%20if%28i%3D%3D1%29%7B%0A%09%09%09%20%20window.location.href%20%3D%20cs%28%29%3B%0A%09%09%09%20%7D%0A%09%09%09%20%7D%2C1000%29%3B%0A%09%09%09%20%20%0A%09%09%09%20function%20goBack%28%29%7B%20%0A%09%09%09%20window.history.go%28-1%29%3B%0A%09%09%09%20%7D%20%0A%09%09%7D%0A%09%3C/script%3E%0A%3C/html%3E));/script>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > pay.94p.cn

Is this malicious?

DNS Resolutions

Port 80