Domain > qr.ferrero-kinder.cn

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-03-26	104.80.70.212 (ClassC)
2024-10-05	183.131.185.35 (ClassC)
2024-10-22	182.84.110.35 (ClassC)
2024-11-22	124.239.243.35 (ClassC)
2024-12-20	106.225.194.35 (ClassC)
2025-01-04	125.74.42.35 (ClassC)
2025-01-27	42.101.4.35 (ClassC)

HTTP/1.1 200 OKServer: JSP3/2.0.14Date: Sat, 15 Jun 2024 16:21:19 GMTContent-Type: text/htmlContent-Length: 1705Connection: keep-aliveLast-Modified: Mon, 18 Dec 2023 09:10:31 GMTETag: 0x8DBFFA92F579F6

html langen>head>    meta charsetUTF-8>    noscript>meta http-equivrefresh content0; urlhttps://apps.appinchina.com.cn/details/com.ferrero.applayduGP />/noscript>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    title>QR redirection page/title>    script>        function isIOS() {            const userAgent  navigator.userAgent;            console.log(userAgent);            return userAgent.match(/ios|iOS|iPhone|iPod|Safari|Apple|Mac/i);// same as akamai setting for qr.ferrero-kinder.cn        }        function isAndroid() {            const userAgent  navigator.userAgent;            console.log(userAgent);            return userAgent.match(/Android|android/i);// same as akamai setting for qr.ferrero-kinder.cn        }        window.onload  function () {            const MPGCODE  window.location.pathname.split(/)1;            var redirectUrl  https://ferrero-kinder.cn/;            if (MPGCODE  wechat) {                redirectUrl  /wechat/;            }            else {                if (isIOS()) {                    console.log(It is IOS);                    redirectUrl  `https://apps.apple.com/cn/app/applaydu/id1670294930?pt1127801&ctQR#DIRECT##${MPGCODE}&mt8`;                }                if (isAndroid()) {                    console.log(It is Android);                    redirectUrl  https://apps.appinchina.com.cn/details/com.ferrero.applayduGP;                }            }            window.location.href  redirectUrl;        }    /script>/head>body>    This is Applaydu redirection page/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > qr.ferrero-kinder.cn

Is this malicious?

DNS Resolutions

Port 80

Port 443