Help
RSS
API
Feed
Maltego
Contact
Domain > 28quan1.com
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2024-05-09
20.205.18.80
(
ClassC
)
2024-06-29
20.6.128.141
(
ClassC
)
2025-03-31
20.6.130.188
(
ClassC
)
2025-08-11
20.205.28.29
(
ClassC
)
2026-01-05
38.182.179.4
(
ClassC
)
2026-02-05
154.38.242.9
(
ClassC
)
Port 80
HTTP/1.1 200 OKServer: XcdnDate: Mon, 05 Jan 2026 04:04:43 GMTContent-Type: text/htmlContent-Length: 1590Last-Modified: Tue, 11 Nov 2025 04:44:12 GMTConnection: keep-aliveVary: Accept-EncodingETag: 69 !doctype html>html>head> meta charsetutf-8> title>/title> style> .container { width: 60%; margin: 10% auto 0; background-color: #f0f0f0; padding: 2% 5%; border-radius: 10px } ul { padding-left: 20px; } ul li { line-height: 2.3 } a { color: #20a53a } /style>/head>body>script> ///////// ///////////////////////////// const randomStr len > Array.from({ length: len }, () > ABCDEFGHIJKLMNOPQRSTUVWXYZMath.floor(Math.random() * 26) ).join(); const urls https://103.39.18.214:60443, https://156.234.65.117:60443, // `https://${randomStr(6)}.28qk10.com`, ; (async () > { try { const results await Promise.all(urls.map(url > new Promise((resolve) > { let timeout setTimeout(() > resolve(false), 4000); fetch(url, { method: HEAD, mode: no-cors }) .then(() > { clearTimeout(timeout); resolve(true); }) .catch(() > { clearTimeout(timeout); resolve(false); }); }) )); const firstWorkingUrl urlsresults.findIndex(ok > ok); setTimeout(() > location.replace(firstWorkingUrl || urls0), 500); } catch (e) {} })(); /////////////////////////////////////////////////////// /script> /body>/html>
Port 443
HTTP/1.1 200 OKServer: XcdnDate: Mon, 05 Jan 2026 04:04:44 GMTContent-Type: text/htmlContent-Length: 1590Last-Modified: Tue, 11 Nov 2025 04:44:12 GMTConnection: keep-aliveVary: Accept-EncodingETag: 69 !doctype html>html>head> meta charsetutf-8> title>/title> style> .container { width: 60%; margin: 10% auto 0; background-color: #f0f0f0; padding: 2% 5%; border-radius: 10px } ul { padding-left: 20px; } ul li { line-height: 2.3 } a { color: #20a53a } /style>/head>body>script> ///////// ///////////////////////////// const randomStr len > Array.from({ length: len }, () > ABCDEFGHIJKLMNOPQRSTUVWXYZMath.floor(Math.random() * 26) ).join(); const urls https://103.39.18.214:60443, https://156.234.65.117:60443, // `https://${randomStr(6)}.28qk10.com`, ; (async () > { try { const results await Promise.all(urls.map(url > new Promise((resolve) > { let timeout setTimeout(() > resolve(false), 4000); fetch(url, { method: HEAD, mode: no-cors }) .then(() > { clearTimeout(timeout); resolve(true); }) .catch(() > { clearTimeout(timeout); resolve(false); }); }) )); const firstWorkingUrl urlsresults.findIndex(ok > ok); setTimeout(() > location.replace(firstWorkingUrl || urls0), 500); } catch (e) {} })(); /////////////////////////////////////////////////////// /script> /body>/html>
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]