Domain > writer.pocketnovel.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-01-02	108.156.211.40 (ClassC)
2024-07-02	18.245.113.121 (ClassC)
2025-06-02	3.175.34.90 (ClassC)
2025-06-02	52.84.174.85 (ClassC)
2025-06-15	13.226.225.17 (ClassC)
2025-11-30	3.175.34.56 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 6342Connection: keep-aliveLast-Modified: Wed, 19 Nov 2025 12:15:05 GMTx-amz-server-side-encryption: AES256Accept-Ranges: bytesServer: AmazonS3Date: Sun, 30 Nov 2025 06:55:34 GMTETag: 5da06f2d5a5efd5f1222b29b167f5af0X-Cache: Hit from cloudfrontVia: 1.1 434332a359553ee5780f138c0e5bc35c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P3X-Amz-Cf-Id: Led32_ts1JmLeQrl20psFxZeDwLOrhgMDBuso06h10eYb_Aonp5tTwAge: 83853

!doctype html>html langen>  head>    meta charsetutf-8 />    link relshortcut icon href/favicon.svg />    meta      nameviewport      contentwidthdevice-width, initial-scale1.0, minimum-scale1.0    />    meta nametheme-color content#000000 />    meta      namedescription      contentBuild highly engaged audience for your book with Pocket FM | Keep control of your book and make changes anytime you want | Register Now    />    meta      namefacebook-domain-verification      contentds19ybabgk3mia4aedodc5sopp3zqe    />    link relapple-touch-icon href/icons/pocketfm-192.png />    link relmanifest href/manifest.json />    link relpreconnect hrefhttps://fonts.googleapis.com />    link relpreconnect hrefhttps://fonts.gstatic.com crossorigin />    link      hrefhttps://fonts.googleapis.com/css2?familyNoto+Sans&displayswap      relstylesheet    />    link      hrefhttps://fonts.googleapis.com/css2?familyItalianno&displayswap      relstylesheet    />    link      hrefhttps://fonts.googleapis.com/css2?familyInter:wght@100;200;300;400;500;600;700;800;900&displayswap      relstylesheet    />    link relpreconnect hrefhttps://djhonz7dexnot.cloudfront.net/ />    !--      Notice the use of %PUBLIC_URL% in the tags above.      It will be replaced with the URL of the `public` folder during the build.      Only files inside the `public` folder can be referenced from the HTML.      Unlike /favicon.ico or favicon.ico, %PUBLIC_URL%/favicon.ico will      work correctly both with client-side routing and a non-root public URL.      Learn how to configure a non-root public URL by running `npm run build`.    -->    title>Writer@PocketNovel/title>    !-- time tracking start -->    script>      const date  new Date();      localStorage.setItem(app_load_start_time, date.getTime());    /script>    !-- CHAT SUPPORT COMMENTED OUT -->    !-- script      idfreshchat-js-sdk      async      srchttps://wchat.in.freshchat.com/js/widget.js    >/script> -->    script src/ua-parser.min.js>/script>    !-- script>      window.fcSettings  {        onInit: function () {          //After Widget Open/Init or loaded, getting User.          window.fcWidget.on(widget:closed, function (resp) {            const faqIconPresent  document.getElementById(click_close_btn);            if (document.body.contains(faqIconPresent)) {              window.fcWidget.hide();            }          });        },      };    /script> -->    script typemodule crossorigin src/assets/index-MaO99wBc.js>/script>    link relstylesheet crossorigin href/assets/index-BGw56ugA.css>  /head>  body>    noscript>You need to enable JavaScript to run this app./noscript>    div idroot>      input idrecaptcha-container typebutton onClickthis.onClick />    /div>    div idportal>/div>    !--      This HTML file is a template.      If you open it directly in the browser, you will see an empty page.      You can add webfonts, meta tags, or analytics to this file.      The build step will place the bundled scripts into the body> tag.              To begin the development, run `npm start` or `yarn start`.      To create a production bundle, use `npm run build` or `yarn build`.    -->    script>      if (serviceWorker in navigator) {        window.addEventListener(load, () > {          navigator.serviceWorker            .register(/serviceworker.js, {              scope: /,            })            .then((reg) > console.log(Success: , reg.scope))            .catch((err) > console.log(Failure: , err));        });      }      const flutterClassName  !!window.FlutterCallback        ? flutter-present        : ;      document.querySelector(body).className  flutterClassName;    /script>    script>      window.getCookie  function (name) {        var value  ;  + document.cookie;        var parts  value.split(;  + name + );        if (parts.length  2) return parts.pop().split(;).shift();      };      var cook  window.getCookie(pixid);      if (typeof cook  undefined) {        var randomNumber  Math.floor(Math.random() * 100000000000 + 1);        document.cookie  pixid + randomNumber + ;max-age + 300 + ;;      }      !(function (f, b, e, v, n, t, s) {        if (f.fbq) return;        n  f.fbq  function () {          n.callMethod            ? n.callMethod.apply(n, arguments)            : n.queue.push(arguments);        };        if (!f._fbq) f._fbq  n;        n.push  n;        n.loaded  !0;        n.version  2.0;        n.queue  ;        t  b.createElement(e);        t.async  !0;        t.src  v;        s  b.getElementsByTagName(e)0;        s.parentNode.insertBefore(t, s);      })(        window,        document,        script,        https://connect.facebook.net/en_US/fbevents.js      );      fbq(init, 269704251784550, { uid: cook });      fbq(track, PageView);    /script>    !-- script srchttps://svc.webspellchecker.net/spellcheck31/wscbundle/wscbundle.js>/script> -->    !-- script srchttps://cdn.tiny.cloud/1/3poz2t3utjx5i22sypp19sf7lk0e77livs6qak8hfqy0hp48/tinymce/5/tinymce.min.js referrerpolicyorigin>/script> -->    script>      let srcUrl  window.location.href.includes(writer.pocketnovel.com)        ? https://signdesk.in/api/eSignWidgetLive.js        : https://signdesk.in/api/eSignWidgetUat.js;      let scriptEle  document.createElement(script);      scriptEle.setAttribute(src, srcUrl);      scriptEle.setAttribute(type, text/javascript);      document.body.appendChild(scriptEle);    /script>    script typetext/javascript>      (function (c, l, a, r, i, t, y) {        ca           ca ||          function () {            (ca.q  ca.q || ).push(arguments);          };        t  l.createElement(r);        t.async  1;        t.src  https://www.clarity.ms/tag/ + i;        y  l.getElementsByTagName(r)0;        y.parentNode.insertBefore(t, y);      })(window, document, clarity, script, ljlweqt92o);    /script>  /body>/html>

Subdomains

Date	Domain	IP
api.pocketnovel.com	2024-01-08	18.161.6.56
novel-analytics-api.pocketnovel.com	2025-11-25	54.251.99.109
writer.pocketnovel.com	2025-11-30	3.175.34.56

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > writer.pocketnovel.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains