Help
RSS
API
Feed
Maltego
Contact
Domain > 228w228.work
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2024-05-20
107.149.213.13
(
ClassC
)
2024-06-18
23.226.181.190
(
ClassC
)
2024-10-25
172.247.79.22
(
ClassC
)
2026-02-03
23.224.132.243
(
ClassC
)
Port 80
HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Tue, 03 Feb 2026 06:14:29 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveLocation: https://228w228.work/Strict-Transport-Security: max-age31536000; includeSubdomains; html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>nginx/center>/body>/html>
Port 443
HTTP/1.1 200 OKServer: nginxDate: Tue, 03 Feb 2026 06:14:29 GMTContent-Type: text/htmlContent-Length: 10994Last-Modified: Mon, 22 Dec 2025 09:02:48 GMTConnection: keep-aliveVary: Accept-EncodingETag: 69490938-2af2Strict-Transport-Security: max-age31536000; includeSubdomains; Accept-Ranges: bytes !DOCTYPE html>html>head> meta charsetUTF-8> title>nc18嫩草入口页/title> meta http-equivX-UA-Compatible contentIEedge> meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1, user-scalableno> meta namerenderer contentwebkit> meta http-equivpragma contentno-cache> meta http-equivcache-control contentno-cache> meta http-equivexpires content0> meta http-equivkeywords contentnc18嫩草_nc18嫩草官网_nc18嫩草官方入口> meta http-equivdescription contentnc18嫩草 - 懂你的需要> link href/css/indexstyle.css relstylesheet> script typetext/javascript src/js/tj_mtm.js>/script> script typetext/javascript src/js/expire.js>/script>/head>body> p classp2>a relnofollow href/index.html target_blank>/a>img idimg01 src/favicon.ico>/a>公告：请仔细阅读下面步骤，永久访问本站！/p> a idbtn-jump href#> div idclick1>立即span idcountdown stylefont-size: 12px;>（12秒后）/span>自动进入/div> /a> p classp2>最新地址：span stylecolor:red; classdizhi>/span>/p> center idqrcode>/center> center stylecolor:rgb(239, 244, 245); idtip>/center> a iddownlink> div idnew-qrcode>/div> /a> p classp2>发送任意邮件到 span stylecolor:red;>a hrefmailto:nengcao@mail.com stylecolor:red;>nengcao@mail.com/a>/span> 获取最新地址/p> hr stylecolor:white;> br> img idimg02 src/images/af7fda23-61c5-4fc3-86f6-5ca8c6cf6ea2_80.jpg> !-- script src/js/jquery-1.8.0.min.js>/script> --> !-- script srchttps://lf6-cdn-tos.bytecdntp.com/cdn/expire-3-y/jquery/1.8.0/jquery.min.js>/script> --> script src/js/jquery-1.8.0.min.js>/script> !-- script srchttps://lib.sinaapp.com/js/jquery/1.8/jquery.min.js>/script> --> script typetext/javascript src/js/popup.js>/script> !-- script srchttps://cdn.bootcdn.net/ajax/libs/qrcodejs/1.0.0/qrcode.min.js>/script> --> script src/js/qrcode.min.js>/script> script typetext/javascript> function is_sub_dm(dm) { const dmRegex /^(?:https?:\/\/)?(?:^@\n+@)?(?:www\.)?(^:\/\n?+)(?::\d+)?$/; const match dm.match(dmRegex); if (match && match1) { const parts match1.split(.); return parts.length > 2; //if part >2, regarded as 2 } return false; //if abnormal, regarded as top } function process_sub_dm(sub_dm) { var prefix_arr nc18., ncao., ncao1., ncao2., ncao3., ncao4., ncao5., ncao6., ncao7., ncao8., ncao9., ncao10., ncao11., ncao12., ncao13., ncao14., ncao15., ncao16., ncao17., ncao18., ; var prefix_x prefix_arrMath.floor(Math.random() * prefix_arr.length); const dmPart sub_dm.replace(/^^.+\.?/, ); const match dmPart.match(/^(.*?)(:\d+)?$/); const result match ? match1 + (match2 || ) : ; const finalResult prefix_x + result; return finalResult; } function get_tp_dm(dm) { var dm_regex /^(?:https?:\/\/)?(?:^@\n+@)?(?:www\.)?(^:\/\n+)/; var match dm.match(dm_regex); if (match && match1) { var full_dm match1; var parts full_dm.split(.); if (parts.length > 2) { var top_dm partsparts.length - 2 + . + partsparts.length - 1; finalResult top_dm; } else { finalResult full_dm; } } else { finalResult dm; } return finalResult; } /script> script typetext/javascript> //设置cookie function setCookie(c_name, value, expiredays) { var exdate new Date() exdate.setDate(exdate.getDate() + expiredays) document.cookie c_name + + escape(value) + ((expiredays null) ? : ;expires + exdate.toGMTString()) } // 读取cookie function getCookie(c_name) { if (document.cookie.length > 0) { c_start document.cookie.indexOf(c_name + ) if (c_start ! -1) { c_start c_start + c_name.length + 1 c_end document.cookie.indexOf(;, c_start) if (c_end -1) c_end document.cookie.length return unescape(document.cookie.substring(c_start, c_end)) } } return } var host window.location.host.toLowerCase(); iuiJh1.get(/get_target.php, function (jmsj) { var target_lj aomhyq1(jmsj, encodeURIComponent(jmsj)); if (is_sub_dm(target_lj)) { target_lj process_sub_dm(target_lj); //666. } // console.log(target_lj); host target_lj; a document.getElementById(btn-jump); a.href https:// + encodeURI(target_lj) + /index.html; a.onclick jump; isJumping false; // 防止重复触发 function jump() { if (!isJumping) { isJumping true; try { if (isMatchedDomain(host)) { confirm({ title: 温馨提示, content: 您当前访问的地址 b stylecolor:red> + host + /b> 即将失效，请及时收藏最新地址以确保可持续访问本站！！！, doneText: 已知晓, cancelText: 获取最新地址 }).then(() > { top.location.href https:// + encodeURI(target_lj) + /index.html; }).catch(() > { // top.location.href https://bitbucket.org/nencao666/dizhifabu/src/master/README.md; top.location.href https://github.com/nencao666/dizhifabu; }) } else { top.location.href https:// + encodeURI(target_lj) + /index.html; } } catch (e) { top.location.href https:// + encodeURI(target_lj) + /index.html; } } } var list document.getElementsByClassName(dizhi); //获取div元素 for (var i 0; i list.length; i++) { listi.innerHTML host; } new QRCode(document.getElementById(qrcode), { text: https:// + host, width: 300, height: 300, colorDark: #2e343F, colorLight: #ffffff, correctLevel: QRCode.CorrectLevel.H }); createNewQrcode(document.querySelector(#qrcode canvas)); /** * 创建新的二维码 */ function createNewQrcode(originalQrcode) { var newQrcodeWrap document.querySelector(#new-qrcode); var resolutionMultiple 2; // 分辨率倍数 var borderSize 10 * resolutionMultiple; // 边框留白 var canvasWidth 300 * resolutionMultiple; // 图片宽度 var logoSize 80 * resolutionMultiple; // logo直径 var logoBorderSize 4 * resolutionMultiple; // logo描边 var logoUrl ./favicon.png; var text 最新地址： + host; // 底部文字 var fontSize 0;// 30 * resolutionMultiple; // 文字大小 var canvasHeight canvasWidth + fontSize; var canvas document.createElement(canvas); if (!canvas.getContext) return; canvas.width canvasWidth; canvas.height canvasHeight; var ctx canvas.getContext(2d); ctx.fillStyle rgb(255,255,255); // 调色(纯白) ctx.fillRect(0, 0, canvasWidth, canvasHeight); // 绘制背景 var qrcodeSize canvasWidth - borderSize * 2; ctx.drawImage( originalQrcode, borderSize, borderSize, qrcodeSize, qrcodeSize ); // 填充二维码 var logoCenterX borderSize + qrcodeSize / 2; var logoCenterY logoCenterX; ctx.arc( logoCenterX, logoCenterY, logoSize / 2 + logoBorderSize, 0, Math.PI * 2, false ); // 绘制logo圆形底图 ctx.fill(); // 填充背景 var logoX (qrcodeSize - logoSize) / 2 + borderSize; var logoY logoX; var logo new Image(); logo.setAttribute(crossOrigin, anonymous); // logo跨域许可 logo.onload function () { ctx.beginPath(); ctx.arc( logoCenterX, logoCenterY, logoSize / 2, 0, Math.PI * 2, false ); ctx.fill(); ctx.clip(); // 裁剪logo成圆形 ctx.drawImage(logo, logoX, logoY, logoSize, logoSize); // 填充logo createImage(); }; logo.src logoUrl; // 设置logo源地址 ctx.fillStyle rgb(0,0,0); // 调色(纯黑) ctx.font fontSize + px Arial; // 文本大小, 字体 ctx.textAlign center; ctx.fillText( text, canvasWidth / 2, qrcodeSize + borderSize + fontSize, qrcodeSize ); // 绘制文本 canvas.style.display none; newQrcodeWrap.appendChild(canvas); function createImage() { // logo加载完成后再生成img,否则logo部分空白 var newQrcodeImg new Image(); newQrcodeImg.src canvas.toDataURL(image/png); newQrcodeWrap.appendChild(newQrcodeImg); } } //invisiable original img var elmt document.getElementById(qrcode); elmt.style.display none; var p document.getElementById(tip); p.innerText 点击二维码图片/截图保存; }) // 12s秒倒计时 var count 12; function CountDown() { if (count > 0) { document.querySelector(#countdown).innerHTML （ + count + 秒后）; --count; } else { // jump(); top.location.href https:// + encodeURI(host) + /index.html; } } timer setInterval(CountDown(), 1000); function updateDownloadLink() { //找到canvas标签 var cvs document.getElementById(new-qrcode).getElementsByTagName(canvas); if (cvs.length 0) { console.error(Canvas not found! Retrying...); setTimeout(updateDownloadLink, 500); // 继续尝试 return; } //创建一个a标签节点 var a document.getElementById(downlink); //设置a标签的href属性（将canvas变成png图片） a.href cvs0.toDataURL(image/png).replace(image/png, image/octet-stream); //设置下载文件的名字 a.download nencao.png; } window.onload function () { setTimeout(updateDownloadLink, 500); // 延迟执行 }; /script> !-- script type text/javascript>var _Hasync _Hasync|| ; _Hasync.push(Histats.start, 1,4726303,4,0,0,0,00010000); _Hasync.push(Histats.fasi, 1); _Hasync.push(Histats.track_hits, ); (function() { var hs document.createElement(script); hs.type text/javascript; hs.async true; hs.src (//s10.histats.com/js15_as.js); (document.getElementsByTagName(head)0 || document.getElementsByTagName(body)0).appendChild(hs); })();/script> --> script async srchttps://www.googletagmanager.com/gtag/js?idG-03GV6MC2YL>/script> script> window.dataLayer window.dataLayer || ; function gtag() { dataLayer.push(arguments); } gtag(js, new Date()); gtag(config, G-03GV6MC2YL); /script>/body>/html>
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]