Domain > 0bq9r7.5xdfdd.club

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-07-10	104.21.30.35 (ClassC)
2024-11-10	38.207.168.62 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Sun, 10 Nov 2024 19:06:04 GMTContent-Type: text/htmlContent-Length: 15095Connection: keep-aliveVary: Accept-EncodingLast-Modified: Sun, 10 Nov 2024 07:25:44 GMTVary: Accept-EncodingETag: 67305ff8-3af7X-Cache: MISSAccept-Ranges: bytes

!DOCTYPE html>html>head>meta charsetUTF-8>meta http-equivX-UA-CompatiblecontentIEedge>meta nameviewportcontentwidthdevice-width, initial-scale1.0>title>开往中/title>script>var _0x5975      w7dIYMONVw,    BgzCnsKl,    w4/ClcOLw6Jw,    ShTDjMOrQA,    wq0JGMKJNQ,    AcKQTsKwwoA,    WsKzwo7CnEI,    d8OKw5giw4E,    AQ3Cjg,    MA08TUE,    cMKxfsKKUg,    5qyS5Z2G5b2I5by45Lqf,    wpwjwrbDkjw,    w5Bhw65/Sw,    wokiwrHDvys,    O8K3fg,    wrhFbMOZ,    wr8OOFNW,    wqXDv8OCH24,    IcO8wprDpcOy,    fUXCrA,    PcKsdsKfEA,    b8OUw49V,    aljCv0/Drg,    wqpaT8OMeA,    w6kTw7MO,    DQ3ClMK5AQ,    PksaXzU,    w6vDpsOb,    fBrDjFIQ,    NDggTUI,    NcKBW8KCwpA,    XllIRcO1,    RCcLawg,    RQTDrDMA,    S8Oqw7s,    BMKaXsKP,    776+6KyO56u45YOUwpg,    N1XCrlPCpQ,    D0TCvHE,    QMKaworDojU,    bMOKYStg,    BkLCkcO0,    fW/CskjDpw,    w4PCi8OYw4Eh,    Bwc9w4zDhg,    wpzCjsKCw6PDlw,    wr7Cp8Oswoo,    AMOow6bDssOo,    QE/CuGII,    wpoOw7x/Zg,    w7htwrnDlmw,    XmhKUMOo,    KMOZwqNIwpo,    77+c5aau5pyg6LWP6L61,    wqY0CQ,    Lj5EAXc,    asO2KMOBSQ,    QcOqw7vDvcOg,    JsOnwpE,    w5MxwrvDoj4,    f8OQw4Imw5A,    P8Knf8KqCg,    Q0/CrigX,    w4XClcONw4t4,    w4Yuwql1XQ,    Pycwd8OL,    MMKkfg,    wq1CTMOOYg,    5qy95Z6Y5b+T5b6v5LuY,    wqjDs8KQw5XCtA,    w67CtMKPwpLCtw,    wrfCusKRX24,    w5Efw60f,    wqMxDBTClg,    w7pSK8KLWA,    YcOSTC9i,    LsKGwoIgw4E,    FcKZU8KVwpA,    ZmjDjQ,    PRgiT1s,    wrfDqih6OA,    wpthwrDDl2o,    SljCu1XDrg,    KsOZwr5Kwpo,    w5dwwr3Dk30,    wr8mCho,    wpUfw7xLdA,    SlbDj8KtAg,    5bGR6K6G772YLcKQ,    wpp1wq/CnGo,    PcOtwp7Dr8O/,    OcOQw4k0w5E,    wpZxw7RyDQ,    w6RDVg,    w5rCvMKDwqjDmg,    w4/ClMOKw5o,    EMOow7V9wqg,    77yV6aOb6KyBAuemrw,    Xm/DlnHCmw,    c8ODVio,    d1/Cv3XDrg,    B1XCkQ,    NRQ6,    w70xEMK3woo,    5bCj6KyC77+wwpxZ,    w6kuKMO4IQ,    6K+h5YqJ5pSc6YaO5pSS,    woTCjcOWw5tt,    csOHw583w4M,    wq0JeQwO,    EcOPw4vCmnQ,    wrECC8KeNw,    SEvDvA,    w6cQPxpa,    wr7Duy7DkMK3,    wqXCtBjCnsOQ;(function (_0x23345c, _0x5975b5) {    var _0x1ee4c3  function (_0x3c2a98) {        while (--_0x3c2a98) {            _0x23345cpush(_0x23345cshift());        }    };    _0x1ee4c3(++_0x5975b5);}(_0x5975, 0xf8));var _0x1ee4  function (_0x23345c, _0x5975b5) {    _0x23345c  _0x23345c - 0x0;    var _0x1ee4c3  _0x5975_0x23345c;    if (_0x1ee4qPaBIg  undefined) {        (function () {            var _0x39c0a7  function () {                var _0x5f36ef;                try {                    _0x5f36ef  Function(return\x20(function()\x20 + {}.constructor(\x22return\x20this\x22)(\x20) + );)();                } catch (_0xbdddb8) {                    _0x5f36ef  window;                }                return _0x5f36ef;            };            var _0x3e0121  _0x39c0a7();            var _0x5ba45a  ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/;            _0x3e0121atob || (_0x3e0121atob  function (_0x2354f7) {                var _0x45c48f  String(_0x2354f7)replace(/+$/, );                var _0x79437c  ;                for (var _0x4e0025  0x0, _0x28d3ea, _0x371b9a, _0x2dcb80  0x0; _0x371b9a  _0x45c48fcharAt(_0x2dcb80++); ~_0x371b9a && (_0x28d3ea  _0x4e0025 % 0x4 ? _0x28d3ea * 0x40 + _0x371b9a : _0x371b9a, _0x4e0025++ % 0x4) ? _0x79437c + StringfromCharCode(0xff & _0x28d3ea >> (-0x2 * _0x4e0025 & 0x6)) : 0x0) {                    _0x371b9a  _0x5ba45aindexOf(_0x371b9a);                }                return _0x79437c;            });        }());        var _0x10c479  function (_0x109b2d, _0x2c5d2e) {            var _0x29f76b  , _0x5a5179  0x0, _0x18e165, _0x1d8190  , _0x445506  ;            _0x109b2d  atob(_0x109b2d);            for (var _0x33b925  0x0, _0x536277  _0x109b2dlength; _0x33b925  _0x536277; _0x33b925++) {                _0x445506 + % + (00 + _0x109b2dcharCodeAt(_0x33b925)toString(0x10))slice(-0x2);            }            _0x109b2d  decodeURIComponent(_0x445506);            var _0x21956c;            for (_0x21956c  0x0; _0x21956c  0x100; _0x21956c++) {                _0x29f76b_0x21956c  _0x21956c;            }            for (_0x21956c  0x0; _0x21956c  0x100; _0x21956c++) {                _0x5a5179  (_0x5a5179 + _0x29f76b_0x21956c + _0x2c5d2echarCodeAt(_0x21956c % _0x2c5d2elength)) % 0x100;                _0x18e165  _0x29f76b_0x21956c;                _0x29f76b_0x21956c  _0x29f76b_0x5a5179;                _0x29f76b_0x5a5179  _0x18e165;            }            _0x21956c  0x0;            _0x5a5179  0x0;            for (var _0x22e0a4  0x0; _0x22e0a4  _0x109b2dlength; _0x22e0a4++) {                _0x21956c  (_0x21956c + 0x1) % 0x100;                _0x5a5179  (_0x5a5179 + _0x29f76b_0x21956c) % 0x100;                _0x18e165  _0x29f76b_0x21956c;                _0x29f76b_0x21956c  _0x29f76b_0x5a5179;                _0x29f76b_0x5a5179  _0x18e165;                _0x1d8190 + StringfromCharCode(_0x109b2dcharCodeAt(_0x22e0a4) ^ _0x29f76b(_0x29f76b_0x21956c + _0x29f76b_0x5a5179) % 0x100);            }            return _0x1d8190;        };        _0x1ee4zYQTIf  _0x10c479;        _0x1ee4uBYwkE  {};        _0x1ee4qPaBIg  !!;    }    var _0x3c2a98  _0x1ee4uBYwkE_0x23345c;    if (_0x3c2a98  undefined) {        if (_0x1ee4fUllYB  undefined) {            _0x1ee4fUllYB  !!;        }        _0x1ee4c3  _0x1ee4zYQTIf(_0x1ee4c3, _0x5975b5);        _0x1ee4uBYwkE_0x23345c  _0x1ee4c3;    } else {        _0x1ee4c3  _0x3c2a98;    }    return _0x1ee4c3;};(function () {    var _0xfbb982  new Date();    var _0x15f201  _0xfbb982_0x1ee4(0x6c, YMV!) + _0x1ee4(0x1b, LZAB) + r()toStr + ing() + (0 + (_0xfbb982_0x1ee4(0x1a, 854a) + _0x1ee4(0x29, kkJQ)() + 0x1))slice(-0x2) + (0 + _0xfbb982_0x1ee4(0x24, *Ce9) + te())_0x1ee4(0x40, YMV!)(-0x2);    var _0x5079c8          _0x1ee4(0x1f, $%lm) + 667.l + _0x1ee4(0x41, W$t6),        _0x15f201 + (_0x1ee4(0x5e, lzXg) + _0x1ee4(0x2a, UGI) + _0x1ee4(0x2, t4CX)),        _0x15f201 + (_0x1ee4(0x4c, FQlt) + _0x1ee4(0x60, m(KT) + _0x1ee4(0x39, F!$g) + tt667 + _0x1ee4(0x22, oi%t)),        _0x15f201 + (_0x1ee4(0x64, m(KT) + dn.hg + _0x1ee4(0x2b, 7nIK) + .viut + _0x1ee4(0xa, tOo3) + _0x1ee4(0x3b, ^IX)),        _0x15f201 + (_0x1ee4(0x74, 5XAk) + _0x1ee4(0x66, Rn) + _0x1ee4(0x4f, 5XAk) + _0x1ee4(0x13, lhl#) + _0x1ee4(0x2e, @4wF) + _0x1ee4(0x4, &unJ) + life),        _0x15f201 + (.xxnn + _0x1ee4(0x4a, NzS) + ew.fu + n),        _0x15f201 + (_0x1ee4(0x71, 7nIK) + _0x1ee4(0x3a, &unJ) + _0x1ee4(0x6d, whnG) + _0x1ee4(0x5a, kkJQ) + .fun),        _0x15f201 + (_0x1ee4(0x6a, NzS) + .fsew + _0x1ee4(0x14, V4*D) + _0x1ee4(0x31, V4*D) + un),        _0x15f201 + (.yios + _0x1ee4(0x36, tOo3) + _0x1ee4(0x38, F!$g) + _0x1ee4(0x1e, lzXg) + _0x1ee4(0x8, h&!j)),        _0x15f201 + (_0x1ee4(0x53, RnQ!) + _0x1ee4(0x18, AzYI) + _0x1ee4(0x61, 854a) + _0x1ee4(0x3, m(KT) + _0x1ee4(0x33, 5XAk)),        _0x15f201 + (_0x1ee4(0x20, 9o&x) + _0x1ee4(0x67, Mfje) + .655. + _0x1ee4(0x27, n&Se) + _0x1ee4(0x3f, bXqG))    ;    var _0x3a89a9  _0x1ee4(0x4e, bXqG) + _0x1ee4(0x3d, Mfje) + tml?a + _0x1ee4(0x19, V4*D);    var _0x4ccc80  OK;    function _0x2cee32() {        var _0x431681  windowlocat + _0x1ee4(0x2d, f95h)_0x1ee4(0x6b, tOo3) + h;        return _0x431681 ? _0x431681 : ;    }    function _0x5cf6b7(_0x462ec4, _0x299de3) {        var _0x47f1fa  _0x1ee4(0x26, 9f^) + _0x1ee4(0x50, tOo3) + _0x462ec4 + (_0x1ee4(0x44, FQlt) + k.txt);        var _0x2ceaf6  new XMLHttpRequest();        _0x2ceaf6_0x1ee4(0x1c, p$w4)(_0x1ee4(0x63, W$t6), _0x47f1fa, !!);        _0x2ceaf6_0x1ee4(0x46, n&Se) + ut  0x1388;        _0x2ceaf6_0x1ee4(0x62, tOo3) + _0x1ee4(0x5f, bXqG) + _0x1ee4(0x3c, 6#(e) + _0x1ee4(0x58, p$w4)  function () {            if (_0x2ceaf6_0x1ee4(0x4d, f95h) + _0x1ee4(0x11, YMV!)  0x4) {                if (_0x2ceaf6_0x1ee4(0x34, pGpv) + s  0xc8 && _0x2ceaf6_0x1ee4(0x55, $q#R) + _0x1ee4(0x57, AzYI) + xt_0x1ee4(0x21, QyFd)()  _0x4ccc80) {                    _0x299de3(null, _0x462ec4);                } else {                    _0x299de3(_0x462ec4);                }            }        };        _0x2ceaf6_0x1ee4(0x2c, oi%t) + _0x1ee4(0x52, lzXg)  function () {            _0x299de3(_0x462ec4);        };        _0x2ceaf6_0x1ee4(0x56, LZAB)();    }    function _0x92bddb() {        var _0x3c7ed1  !;        var _0x193ea8  _0x2cee32();        for (var _0x44645e  0x0; _0x44645e  _0x5079c8_0x1ee4(0x42, uoW9) + h; _0x44645e++) {            (function (_0x2b879b) {                _0x5cf6b7(_0x5079c8_0x2b879b, function (_0x210a00, _0xba5862) {                    if (!_0x3c7ed1 && !_0x210a00) {                        _0x3c7ed1  !!;                        var _0x32f167  _0x1ee4(0x49, *Ce9) + _0x1ee4(0xe, &unJ) + _0xba5862;                        setTimeout(function () {                            windowlocat + ion_0x1ee4(0x48, 6#(e)  _0x32f167 + _0x3a89a9 + _0x193ea8;                        }, 0xbb8);                    }                });            }(_0x44645e));        }    }    if (document_0x1ee4(0x73, @4wF) + entLi + stene + r) {        document_0x1ee4(0x30, 7nIK) + _0x1ee4(0x69, lzXg) + _0x1ee4(0x9, AzYI) + r(_0x1ee4(0x43, lhPQ) + _0x1ee4(0x5, f95h) + _0x1ee4(0x25, FQlt) + d, function () {            _0x92bddb();            var _0x15afdf  document_0x1ee4(0x65, fbSu) + _0x1ee4(0x10, uoW9) + _0x1ee4(0x6f, NzS)(_0x1ee4(0x59, uoW9));            _0x15afdf_0x1ee4(0x2f, bXqG) + Text  _0x1ee4(0x37, n&Se) + ，预计5秒 + ，请稍候, + （如未跳转 + _0x1ee4(0x5d, bXqG) + _0x1ee4(0x5b, whnG) + .;            document_0x1ee4(0x16, YMV!)_0x1ee4(0x5c, XmTs) + _0x1ee4(0xd, UGI) + d(_0x15afdf);        }, !);    } else if (document_0x1ee4(0x3e, LZAB) + _0x1ee4(0x51, 9o&x) + t) {        document_0x1ee4(0x6e, bXqG) + _0x1ee4(0x12, 9f^) + t(_0x1ee4(0x32, lzXg) + dysta + _0x1ee4(0x0, @4wF) + _0x1ee4(0x35, 7nIK), function () {            if (document_0x1ee4(0x23, V4*D) + _0x1ee4(0x45, AzYI)  _0x1ee4(0x7, 7nIK) + _0x1ee4(0x1, 7nIK)) {                _0x92bddb();                var _0x16428d  document_0x1ee4(0x47, FQlt) + _0x1ee4(0xf, S^#d) + _0x1ee4(0x15, oi%t)(_0x1ee4(0x6, AzYI));                _0x16428d_0x1ee4(0xc, NzS) + _0x1ee4(0xb, ^IX)  _0x1ee4(0x72, $%lm) + _0x1ee4(0x54, S^#d) + _0x1ee4(0x17, 9o&x) + _0x1ee4(0x28, t4CX) + 请刷新重新 + _0x1ee4(0x4b, pGpv) + .;                document_0x1ee4(0x68, NzS)_0x1ee4(0x70, uoW9) + _0x1ee4(0x1d, AzYI) + d(_0x16428d);            }        });    }}());    /script>meta nameviewportcontentwidthdevice-width, initial-scale1.0, maximum-scale1.0, minimum-scale1.0, user-scalableno>meta namerobotscontentnoindex, nofollow/>style typetext/css>*{color:#111827}a{text-decoration:none}.blink{font-size: 1.1rem!important;position:fixed;height:100%;width:100%;text-align:center;display:flex;display:-webkit-flex;align-items:center;justify-content:center;animation:blink 3s linear infinite;-webkit-animation:blink 3s linear infinite;-moz-animation:blink 3s linear infinite;-ms-animation:blink 3s linear infinite;-o-animation:blink 3s linear infinite}@keyframes blink{0%{opacity:0;transform:scale(1)}20%{opacity:0;transform:scale(1)}40%{opacity:0.3;transform:scale(1)}80%{opacity:1;transform:scale(0.98)}90%{opacity:1;transform:scale(0.98)}100%{opacity:0.2;transform:scale(1.2)}}@-webkit-keyframes blink{0%{opacity:0;transform:scale(1)}20%{opacity:0;transform:scale(1)}40%{opacity:0.3;transform:scale(1)}80%{opacity:1;transform:scale(0.98)}90%{opacity:1;transform:scale(0.98)}100%{opacity:0.2;transform:scale(1.2)}}@-moz-keyframes blink{0%{opacity:0;transform:scale(1)}20%{opacity:0;transform:scale(1)}40%{opacity:0.3;transform:scale(1)}80%{opacity:1;transform:scale(0.98)}90%{opacity:1;transform:scale(0.98)}100%{opacity:0.2;transform:scale(1.2)}}@-ms-keyframes blink{0%{opacity:0;transform:scale(1)}20%{opacity:0;transform:scale(1)}40%{opacity:0.3;transform:scale(1)}80%{opacity:1;transform:scale(0.98)}90%{opacity:1;transform:scale(0.98)}100%{opacity:0.2;transform:scale(1.2)}}@-o-keyframes blink{0%{opacity:0;transform:scale(1)}20%{opacity:0;transform:scale(1)}40%{opacity:0.3;transform:scale(1)}80%{opacity:1;transform:scale(0.98)}90%{opacity:1;transform:scale(0.98)}100%{opacity:0.2;transform:scale(1.2)}}.botCenter{position:fixed;width:100%;height:50px;bottom:2px;line-height:20px;font-size:12px;text-align:center;animation:botCenter 3s linear;-webkit-animation:botCenter 3s linear;-moz-animation:botCenter 3s linear;-ms-animation:botCenter 3s linear;-o-animation:botCenter 3s linear}@keyframes botCenter{0%{opacity:0}20%{opacity:0}40%{opacity:0.3}80%{opacity:1}90%{opacity:1}100%{opacity:1}}@-webkit-keyframes botCenter{0%{opacity:0}20%{opacity:0}40%{opacity:0.3}80%{opacity:1}90%{opacity:1}100%{opacity:1}}@-moz-keyframes botCenter{0%{opacity:0}20%{opacity:0}40%{opacity:0.3}80%{opacity:1}90%{opacity:1}100%{opacity:1}}@-ms-keyframes botCenter{0%{opacity:0}20%{opacity:0}40%{opacity:0.3}80%{opacity:1}90%{opacity:1}100%{opacity:1}}@-o-keyframes botCenter{0%{opacity:0}20%{opacity:0}40%{opacity:0.3}80%{opacity:1}90%{opacity:1}100%{opacity:1}}/style>/head>body>div classblink>a href#idaaurltarget_blanktitle点击开始“开往” :-)>欢迎回来，正在b> 开往 /b>新的地址…br/>Welcome back,Heading to the new address…br/>font stylefont-size: 13px;color: rgb(255, 0, 0);>出现无法开往，请使用谷歌、Edge等主流游览器/font>/a>/div>div classbotCenter>↩️Tips:b>后退/b>网页可再次开往br/>/div>div styledisplay: none;>a href/ altfree website hit counter target_blank >img  src//sstatic1.histats.com/0.gif?4886902&101 altfree website hit counter border0>/div>/body>/html>

Subdomains

Date	Domain	IP
6fa422.5xdfdd.club	2024-09-17	104.219.214.171
6kmte2.5xdfdd.club	2024-11-04	38.207.168.62
7af7w4.5xdfdd.club	2024-10-22	38.207.168.62
6oe4a6.5xdfdd.club	2024-10-08	38.47.109.49
20240817.5xdfdd.club	2024-09-17	104.219.214.171
0bq9r7.5xdfdd.club	2024-11-10	38.207.168.62
9lvoc8.5xdfdd.club	2024-09-17	104.219.214.171
6qhqwa.5xdfdd.club	2024-10-31	38.207.168.62
1adnib.5xdfdd.club	2024-11-04	38.207.168.62
a23ecd.5xdfdd.club	2024-10-24	38.207.168.62
6i3skd.5xdfdd.club	2024-11-04	38.207.168.62
0xsqoe.5xdfdd.club	2024-11-04	38.207.168.62
bwqo2g.5xdfdd.club	2024-11-04	38.207.168.62
46n4wi.5xdfdd.club	2024-09-29	38.47.109.49
58oobj.5xdfdd.club	2024-10-21	38.47.109.49
4a9bij.5xdfdd.club	2024-09-17	104.219.214.171
djgbyj.5xdfdd.club	2024-11-04	38.207.168.62
9jgwen.5xdfdd.club	2024-10-11	38.47.109.49
376gcp.5xdfdd.club	2024-11-04	38.207.168.62
7ku0vq.5xdfdd.club	2024-09-17	104.219.214.171
8len0x.5xdfdd.club	2024-11-04	38.207.168.62
c7xhfy.5xdfdd.club	2024-11-04	38.207.168.62

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 0bq9r7.5xdfdd.club

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains