Domain > 28quan5.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-10-29	45.194.21.96 (ClassC)
2023-10-29	154.23.184.139 (ClassC)
2023-11-04	154.23.183.76 (ClassC)
2024-05-08	20.205.18.80 (ClassC)
2024-12-18	20.205.28.29 (ClassC)
2025-05-13	20.6.128.141 (ClassC)
2025-05-15	20.6.130.188 (ClassC)
2025-11-01	38.182.138.77 (ClassC)
2026-01-05	38.182.179.7 (ClassC)
2026-02-02	154.38.242.13 (ClassC)

HTTP/1.1 200 OKServer: XcdnDate: Sat, 01 Nov 2025 21:24:01 GMTContent-Type: text/htmlContent-Length: 1590Last-Modified: Wed, 15 Oct 2025 01:47:49 GMTConnection: keep-aliveVary: Accept-EncodingETag: 68

!doctype html>html>head>    meta charsetutf-8>    title>/title>    style>        .container {            width: 60%;            margin: 10% auto 0;            background-color: #f0f0f0;            padding: 2% 5%;            border-radius: 10px        }        ul {            padding-left: 20px;        }            ul li {                line-height: 2.3            }        a {            color: #20a53a        }    /style>/head>body>script>    ///////// /////////////////////////////    const randomStr  len > Array.from({ length: len }, () >       ABCDEFGHIJKLMNOPQRSTUVWXYZMath.floor(Math.random() * 26)    ).join();        const urls          https://103.39.18.214:60443,        https://156.234.65.117:60443,        // `https://${randomStr(6)}.28qk10.com`,    ;    (async () > {        try {            const results  await Promise.all(urls.map(url >                new Promise((resolve) > {                    let timeout  setTimeout(() > resolve(false), 4000);                    fetch(url, { method: HEAD, mode: no-cors })                        .then(() > { clearTimeout(timeout); resolve(true); })                        .catch(() > { clearTimeout(timeout); resolve(false); });                })            ));            const firstWorkingUrl  urlsresults.findIndex(ok > ok);            setTimeout(() > location.replace(firstWorkingUrl || urls0), 500);        } catch (e) {}    })();    ///////////////////////////////////////////////////////    /script> /body>/html>

Port 443

HTTP/1.1 200 OKServer: XcdnDate: Sat, 01 Nov 2025 21:24:02 GMTContent-Type: text/htmlContent-Length: 1590Last-Modified: Wed, 15 Oct 2025 01:47:49 GMTConnection: keep-aliveVary: Accept-EncodingETag: 68

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 28quan5.com

Is this malicious?

DNS Resolutions

Port 80

Port 443