Help
RSS
API
Feed
Maltego
Contact
Domain > 1685qs.cc
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2024-11-20
27.0.235.55
(
ClassC
)
2025-08-01
103.101.191.232
(
ClassC
)
Port 80
HTTP/1.1 301 Moved PermanentlyServer: openrestyDate: Fri, 01 Aug 2025 22:35:51 GMTContent-Type: text/htmlContent-Length: 166Connection: keep-aliveLocation: https://1685qs.cc/ html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>openresty/center>/body>/html>
Port 443
HTTP/1.1 200 OKServer: openrestyDate: Fri, 01 Aug 2025 22:35:52 GMTContent-Type: text/html; charsetutf-8Content-Length: 5148Connection: keep-aliveVary: Accept-Encodingx-amz-id-2: wKtqALxegexAX1T1zC2eB6gLzHl+KSZvYNXAtUANgaEG+N40ADPSh+tZLF9ajbm13lrBVM5SDXS2okX9uRrJogx-amz-request-id: H8KC9H6PPQRSBFD1Last-Modified: Thu, 31 Jul 2025 22:12:31 GMTETag: dcb46dcbaa9fd164f6a615774a933d2dx-amz-server-side-encryption: AES256Accept-Ranges: bytesCache-Control: no-store, no-cache, must-revalidate, proxy-revalidatePragma: no-cacheExpires: 0 !DOCTYPE html>head> meta charsetutf-8> meta namecolor-scheme contentlight dark> meta nametheme-color content#fff> meta nameviewport contentwidthdevice-width, initial-scale1.0, maximum-scale1.0, user-scalableno> style> body { margin: 0; font-family: Arial, sans-serif; } /* 顶部加载进度条的样式 */ .loading-bar { position: fixed; top: 0; left: 0; width: 0%; height: 3px; background-color: #4caf50; /* 绿色进度条 */ z-index: 9999; } /style> script charsetUTF-8 idLA_COLLECT src//sdk.51.la/js-sdk-pro.min.js>/script>script>LA.init({id:3KxSYyZcc9geuhWe,ck:3KxSYyZcc9geuhWe})/script>/head>!-- 我是中文站用的301页面 -->body idt classneterror stylefont-family: Segoe UI,Arial,Microsoft Yahei,sans-serif; font-size: 75% jstcache0>div classloading-bar idloadingBar>/div>/body>script srchttps://code.bdstatic.com/npm/jquery@3.6.0/dist/jquery.min.js>/script>script> let siteList Mo03gE/dLVajuE74VcWyJodHRwOi8vY2Myb25lci5xaXVzdTY5LmNjLzMyMjI3Lmh0bWwiLCJodHRwOi8vaW9qdGczb2lnLnFpdXN1NzAuY2MvMzIyMjcuaHRtbCIsImh0dHA6Ly9va2lrOWtydi5xaXVzdTczLmNjLzMyMjI3Lmh0bWwiLCJodHRwOi8vaWp0dWlvcjRmZi5xaXVzdTcyLmNjLzMyMjI3Lmh0bWwiLCJodHRwOi8veHY1OW5icy5xaXVzdTgyLmNjLzMyMjI3Lmh0bWwiLCJodHRwOi8vb2ltaTRvbS5xaXVzdTY0LmNjLzMyMjI3Lmh0bWwiXQ0xE65DeyeK3pqmpw1jT9XyxGLwzSUv/S; let agent ; function mainRedirectLogic() { try { checkDomains(parseSites(siteList)); } catch { console.error(An error occurred:); } } function parseSites(siteList) { let _0x4b2752 siteListsubstring(0x12, siteListlength - 0x20); return _0x4b2752 atob(_0x4b2752), JSONparse(_0x4b2752); } function OK() { console.log(This is good!); } function checkDomainByJsonp(domainUrl) { return new Promise((resolve, reject) > { //这里为了防止出现跨协议的报错,http访问https的问题,将协议给去除,下面这个方法保留域名的端口 let checkUrl // + new URL(domainUrl).host; $.ajax({ url: checkUrl + /check, dataType: jsonp, timeout: 4000, jsonpCallback: OK, complete: function (response) { if (response.status 200) { setupPage(domainUrl); resolve({ domain: domainUrl, status: reachable}); } else { reject({ domain: domainUrl, status: blocked or not reachable }); } } }); }); } // 并行检测多个域名 function checkDomains(domains) { const checkPromises domains.map(domain > { return checkDomainByJsonp(domain).catch(() > {}); }); // 使用 Promise.all 发起所有请求,但不等待结果 Promise.all(checkPromises); } function isEmptyStr(str) { return str null || str undefined || str.trim().length 0; }/script>script> document.addEventListener(DOMContentLoaded, async function () { try { simulateLoading(); await mainRedirectLogic(); } catch (error) { console.error(An error occurred in mainRedirectLogic:, error.message); } }); const loadingBar document.getElementById(loadingBar); let progress 0; function simulateLoading() { if (progress 100) { progress + Math.random() * 10; // 模拟加载速度 loadingBar.style.width Math.min(progress, 100) + %; setTimeout(simulateLoading, 50); } else { loadingBar.style.transition opacity 0.5s; loadingBar.style.opacity 0; setTimeout(() > { loadingBar.style.display none; }, 500); } } let isRunning false; function setupPage(jumpUrl) { if (isRunning) return; // 给方法加锁 isRunning true; let rcCode; let route window.location.pathname; if (!isEmptyStr(route) && route.startsWith(/r/)) { rcCode route.split(/r/)1; } if (!isEmptyStr(agent) && isEmptyStr(rcCode)) { rcCode agent; } if (isEmptyStr(rcCode)) { let url new URL(window.location.href); let params new URLSearchParams(url.search); rcCode params.get(rcCode); } if (isEmptyStr(rcCode)) { rcCode document.location.host; } jumpUrl (jumpUrl.includes(.html)) ? jumpUrl + ?rcCode + rcCode : jumpUrl + /r/ + rcCode; jumpUrl jumpUrl.replace(http:, https:); setTimeout(function () { window.location.replace(jumpUrl); }, 300); }/script>
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]