Domain > portal.gamma.aedu.privacy.a2z.org.cn

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-09-19	118.193.97.133 (ClassC)

HTTP/1.1 403 ForbiddenContent-Type: text/html; charsetutf-8Content-Length: 10596Connection: keep-aliveLast-Modified: Fri, 19 Sep 2025 17:47:02 GMTx-amz-server-side-encryption: AES256Accept-Ranges: bytesServer: AmazonS3Date: Fri, 19 Sep 2025 22:16:45 GMTETag: 0a1018b51e71e84392fb66a97c190bf5Vary: Accept-EncodingX-Cache: Error from cloudfrontVia: 1.1 699adaa2dc1f2524e51f45ab4ae7d892.cloudfront.net (CloudFront)X-Amz-Cf-Pop: BJS9-E1X-Amz-Cf-Id: 9KVLW8zI3F4S0pO6fslo1RYcKUT-6dbR0WM7yo_DrNQcRquaD3KUBg

!DOCTYPE html> html>     head>         script typetext/javascript>             function getParameterByName(name, url) {                 if (!url) url  window.location.href;                 name  name.replace(/\\/g, \\$&);                 let regex  new RegExp(?& + name + ((^&#*)|&|#|$)),                     results  regex.exec(url);                 if (!results) return null;                 if (!results2) return ;                 return decodeURIComponent(results2.replace(/\+/g,  ));             }             function isValidUrl(url) {                 try {                     const parsedUrl  new URL(url);                     return parsedUrl.hostname.includes(aedu.privacy.a2z) && !parsedUrl.href.includes(403.html) &&                            parsedUrl.protocol ! https:;                 } catch (e) {                     return null;                 }             }             /*!              * JavaScript Cookie v2.1.4              * https://github.com/js-cookie/js-cookie              *              * Copyright 2006, 2015 Klaus Hartl & Fagner Brack              * Released under the MIT license              */             ;(function (factory) {                 let registeredInModuleLoader  false;                 if (typeof define  function && define.amd) {                     define(factory);                     registeredInModuleLoader  true;                 }                 if (typeof exports  object) {                     module.exports  factory();                     registeredInModuleLoader  true;                 }                 if (!registeredInModuleLoader) {                     let OldCookies  window.Cookies;                     let api  window.Cookies  factory();                     api.noConflict  function () {                         window.Cookies  OldCookies;                         return api;                     };                 }             }(function () {                 function extend() {                     let i  0;                     let result  {};                     for (; i  arguments.length; i++) {                         let attributes  argumentsi;                         for (let key in attributes) {                             resultkey  attributeskey;                         }                     }                     return result;                 }                 function init(converter) {                     function api(key, value, attributes) {                         let result;                         if (typeof document  undefined) {                             return;                         }                         // Write                         if (arguments.length > 1) {                             attributes  extend({                                 path: /                             }, api.defaults, attributes);                             if (typeof attributes.expires  number) {                                 var expires  new Date();                                 expires.setMilliseconds(expires.getMilliseconds() + attributes.expires * 864e+5);                                 attributes.expires  expires;                             }                             // Were using expires because max-age is not supported by IE                             attributes.expires  attributes.expires ? attributes.expires.toUTCString() : ;                             try {                                 result  JSON.stringify(value);                                 if (/^\{\/.test(result)) {                                     value  result;                                 }                             } catch (e) {                             }                             if (!converter.write) {                                 value  encodeURIComponent(String(value))                                     .replace(/%(23|24|26|2B|3A|3C|3E|3D|2F|3F|40|5B|5D|5E|60|7B|7D|7C)/g, decodeURIComponent);                             } else {                                 value  converter.write(value, key);                             }                             key  encodeURIComponent(String(key));                             key  key.replace(/%(23|24|26|2B|5E|60|7C)/g, decodeURIComponent);                             key  key.replace(//g, escape);                             let stringifiedAttributes  ;                             for (let attributeName in attributes) {                                 if (!attributesattributeName) {                                     continue;                                 }                                 stringifiedAttributes + ;  + attributeName;                                 if (attributesattributeName  true) {                                     continue;                                 }                                 stringifiedAttributes +  + attributesattributeName;                             }                             return (document.cookie  key +  + value + stringifiedAttributes);                         }                         // Read                         if (!key) {                             result  {};                         }                         // To prevent the for loop in the first place assign an empty array                         // in case there are no cookies at all. Also prevents odd result when                         // calling get()                         let cookies  document.cookie ? document.cookie.split(; ) : ;                         let rdecode  /(%0-9A-Z{2})+/g;                         let i  0;                         for (; i  cookies.length; i++) {                             var parts  cookiesi.split();                             var cookie  parts.slice(1).join();                             if (cookie.charAt(0)  ) {                                 cookie  cookie.slice(1, -1);                             }                             try {                                 var name  parts0.replace(rdecode, decodeURIComponent);                                 cookie  converter.read ?                                     converter.read(cookie, name) : converter(cookie, name) ||                                     cookie.replace(rdecode, decodeURIComponent);                                 if (this.json) {                                     try {                                         cookie  JSON.parse(cookie);                                     } catch (e) {                                     }                                 }                                 if (key  name) {                                     result  cookie;                                     break;                                 }                                 if (!key) {                                     resultname  cookie;                                 }                             } catch (e) {                             }                         }                         return result;                     }                     api.set  api;                     api.get  function (key) {                         return api.call(api, key);                     };                     api.getJSON  function () {                         return api.apply({                             json: true                         }, .slice.call(arguments));                     };                     api.defaults  {};                     api.remove  function (key, attributes) {                         api(key, , extend(attributes, {                             expires: -1                         }));                     };                     api.withConverter  init;                     return api;                 }                 return init(function () {                 });             }));             let redirectUri  getParameterByName(encodedTargetUrl) || getParameterByName(redirect_uri);             let keyPairId  getParameterByName(kpid) || getParameterByName(key_pair_id);             let signature  getParameterByName(sig) || getParameterByName(signature);             let expires  getParameterByName(exp) || getParameterByName(expires);             let policy  getParameterByName(policy);             if (policy && keyPairId && expires && signature) {                 Cookies.set(CloudFront-Key-Pair-Id, keyPairId, {secure: true, expires: 1});                 Cookies.set(CloudFront-Signature, signature, {secure: true, expires: 1});                 Cookies.set(CloudFront-Expiration, expires, {secure: true, expires: 1});                 Cookies.set(CloudFront-Policy, policy, {secure: true, expires: 1});                 if (redirectUri && isValidUrl(decodeURIComponent(redirectUri)) && Cookies.get(Aedu-Redirect-Uri)  decodeURIComponent(redirectUri)) {                     window.location.replace(decodeURIComponent(redirectUri));                 } else {                     window.location.replace(window.location.origin);                 }             } else if (policy) {                 //Nothing to do.             } else {                 let redirectUri  encodeURIComponent(window.location.href);                 Cookies.set(Aedu-Redirect-Uri, window.location.href, {secure: true, expires: 1});                 if (window.location.hostname.endsWith(aedu.privacy.a2z.com)) {                     window.location.replace(https://cloudfrontsigner.ninjas.security.a2z.com/sign?encodedTargetUrl + redirectUri);                 }                 else if (window.location.hostname.endsWith(aedu.privacy.a2z.org.cn)) {                     window.location.replace(https://cloudfrontsigner.ninjas.security.a2z.org.cn/authorize?encodedUrl + redirectUri);                 }             }         /script>     /head>     body>         p>Redirecting you for Auth/p>         div styledisplay:none idbindlediv>             amzn1.bindle.resource.zfdqeuf7vnyxnoul72ba         /div>         div styledisplay:none idposixGroup>             aedu-tech         /div>         div styledisplay:none idsecretArn>             arn:aws-cn:secretsmanager:cn-north-1:144200371834:secret:CFSSigningKey-Portal-cn-north-1-ztsk6P         /div>     /body> /html>

Subdomains

Date	Domain	IP
portal.alpha.aedu.privacy.a2z.org.cn	2024-10-08	118.193.97.143
portal.gamma.aedu.privacy.a2z.org.cn	2025-09-19	118.193.97.133
portal.beta.aedu.privacy.a2z.org.cn	2025-03-02	118.193.97.223

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > portal.gamma.aedu.privacy.a2z.org.cn

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains