Domain > qwinph.app

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-09-12	118.194.238.64 (ClassC)
2026-02-05	165.154.236.188 (ClassC)

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlDate: Thu, 05 Feb 2026 06:12:58 GMTEtag: W/6537bba4-657Last-Modified: Tue, 24 Oct 2023 12:42:12 GMTServer: nginxVary: Accept-EncodingContent-Length: 1623

!doctype html>html>head>   /head>body>    script typetext/javascript>    var browser  {        versions: function() {            var u  navigator.userAgent, app  navigator.appVersion;            return {//移动终端浏览器版本信息                trident: u.indexOf(Trident) > -1, //IE内核                presto: u.indexOf(Presto) > -1, //opera内核                webKit: u.indexOf(AppleWebKit) > -1, //苹果、谷歌内核                gecko: u.indexOf(Gecko) > -1 && u.indexOf(KHTML)  -1, //火狐内核                mobile: !!u.match(/AppleWebKit.*Mobile.*/) || !!u.match(/AppleWebKit/), //是否为移动终端                ios: !!u.match(/\(i^;+;( U;)? CPU.+Mac OS X/), //ios终端                android: u.indexOf(Android) > -1 || u.indexOf(Linux) > -1, //android终端或者uc浏览器                iPhone: u.indexOf(iPhone) > -1 || u.indexOf(Mac) > -1, //是否为iPhone或者QQHD浏览器                iPad: u.indexOf(iPad) > -1, //是否iPad                webApp: u.indexOf(Safari)  -1 //是否web应该程序，没有头部与底部            };        }(),        language: (navigator.browserLanguage || navigator.language).toLowerCase()    }    if (browser.versions.ios || browser.versions.iPhone || browser.versions.iPad) {        location.hrefhttps://qwinph.app/wap/index.html;    }    else {		location.hrefhttps://storage.googleapis.com/download/storage/v1/b/odp_media_v01/o/bwn%2FApp-android%2FF8perZ-1.19.3363-20230920161622.apk?generation1695197782477484&altmedia;	}    /script>  /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > qwinph.app

Is this malicious?

DNS Resolutions

Port 443