Domain > win4399.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-05-26	65.8.228.109 (ClassC)
2022-09-17	13.224.222.95 (ClassC)
2022-09-19	18.65.39.59 (ClassC)
2022-09-19	18.65.39.20 (ClassC)
2022-09-20	99.84.88.44 (ClassC)
2022-09-29	65.8.243.38 (ClassC)
2022-11-28	54.192.76.107 (ClassC)
2024-11-04	104.21.5.22 (ClassC)
2024-11-13	172.67.132.194 (ClassC)
2024-12-13	104.21.64.1 (ClassC)
2025-01-23	104.21.80.1 (ClassC)
2025-01-31	104.21.48.1 (ClassC)
2025-03-07	104.21.112.1 (ClassC)
2025-03-30	13.248.213.45 (ClassC)

Port 443

HTTP/1.1 200 OKDate: Sat, 17 Feb 2024 11:26:21 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveAccess-Control-Allow-Origin: *CF-Cache-Status: DYNAMICReport-To:

!DOCTYPE HTML>html>head>		script typetext/javascript>		var JSGlobal_isPC  YES;		var JSGlobal_hostDomain  https://win4399.com/;		var JSGlobal_globalPage  indexPC.php;		var JSGlobal_H5RenderMode  webgl;	/script>script typetext/javascript>			function startGamePageAegis(){				var s  document.createElement(script);		s.src  https://tam.cdn-go.cn/aegis-sdk/latest/aegis.min.js;		s.addEventListener(load, function () {			//s.parentNode.removeChild(s);			//s.removeEventListener(load, arguments.callee, false);			var aegis  new Aegis({				id: LlxaoTjLr3a74mX2Rm, 				reportApiSpeed: false, // 				reportAssetSpeed: false, // 				spa: true, 				hostUrl: https://rumt-sg.com, 				pageUrl: window.location.href,				beforeRequest(data){					if(data.logType  log && data.logs.msg.indexOf(:0:0) > -1){						return false;					}					return data;				}			});		}, false);				document.head.appendChild(s);				}/script>script typetext/javascript>	function setCookie(name,value){		var Days  30;		var exp  new Date();		exp.setTime(exp.getTime() + Days*24*60*60*1000);		document.cookie  name + + escape (value) + ;expires + exp.toGMTString();	}	function getCookie(name){		var arr,regnew RegExp((^| )+name+(^;*)(;|$));		if(arrdocument.cookie.match(reg))			return unescape(arr2);		else			return null;	}	function ajax(url, fnSucc, faild) {		var ajax  false;		if (window.XMLHttpRequest){// code for IE7+, Firefox, Chrome, Opera, Safari		  ajaxnew XMLHttpRequest();		}else{// code for IE6, IE5		  ajaxnew ActiveXObject(Microsoft.XMLHTTP);		}				ajax.open(get, url, true);		ajax.send();		ajax.onreadystatechange  function() {			if(ajax.readyState  4) {				if(ajax.status  200 && fnSucc) {					fnSucc(ajax.responseText);				} else {					if(faild)						faild(ajax.status);				}			}		}	}	function ajaxPost(url, data, fnSucc, faild) {		var ajax  false;		if (window.XMLHttpRequest){// code for IE7+, Firefox, Chrome, Opera, Safari		  ajaxnew XMLHttpRequest();		}else{// code for IE6, IE5		  ajaxnew ActiveXObject(Microsoft.XMLHTTP);		}				ajax.open( post , url , true );		ajax.setRe

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > win4399.com

Is this malicious?

DNS Resolutions

Port 443