Help
RSS
API
Feed
Maltego
Contact
Domain > thkgjt.com
×
Welcome!
Right click nodes and scroll the mouse to navigate the graph.
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2024-10-13
156.225.92.213
(
ClassC
)
2025-01-08
154.44.30.160
(
ClassC
)
Port 80
HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 13 Oct 2024 13:32:06 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveLocation: https://thkgjt.com/Strict-Transport-Security: ma html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>nginx/center>/body>/html>
Port 443
HTTP/1.1 200 OKServer: nginxDate: Sun, 13 Oct 2024 13:32:07 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingSet-Cookie: PHPSESSIDd99491ca24 !DOCTYPE html>html langjp>head> meta charsetUTF-8> meta http-equivX-UA-Compatible contentIEedge> meta nameviewport contentwidthdevice-width, initial-scale1.0> link relicon href/favicon.ico typeimage/x-icon />/head>body>div idview>/div>div classcf-turnstile data-sitekey0x4AAAAAAAwr_96eejpijMRK data-callbackjavascriptCallback>/div>script srchttps://challenges.cloudflare.com/turnstile/v0/api.js defer>/script>a href/xj.html stylecolor: rgba(0,0,0,0)>xj/a>script srcjs/axios.min.js>/script>script> let token let yzmStatefalse let fhStatefalse function javascriptCallback(data){ tokendata yzmStatetrue } function phpJump() { console.log(token) //表单发送 fetch(/yz.php, { method: POST, headers: { Content-Type: application/json, }, body: JSON.stringify({ token: token }) }).then(response > response.json()) .then(data > { console.log(Success:, data); if(data.code200){ // window.location.replace(data.url); location.href data.url; } }) .catch((error) > { console.error(Error:, error); }); } // axios.get(https://www.aini1314.shop/api/jump.php) // .then(function (response) { // document.cookie isusertrue; // fhStatetrue; // }) // .catch(function (error) { // document.write( // div>h1>Forbidden/h1>p>You dont have permission to access / on this server./p>/div> // ); // // var protocol window.location.protocol; // // var host window.location.host; // // var url protocol+//+host+/index.php; // // window.location.replace(url); // }); setInterval(function(){ if(yzmState){ phpJump() } },1000)/script>/body>/html>
Subdomains
Date
Domain
IP
www.thkgjt.com
2024-12-10
154.44.30.160
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]