Domain > 2ghf32fzh5g.4l9iyi6ky6b.cc

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-10-27	3.169.202.118 (ClassC)
2025-11-02	3.169.173.47 (ClassC)

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 2967Connection: keep-aliveServer: nginxDate: Sun, 02 Nov 2025 11:37:07 GMTAccept-Ranges: bytesVary: Accept-EncodingVary: Accept-EncodingLast-Modified: Tue, 23 Sep 2025 07:05:21 GMTETag: 68d246b1-b97X-Cache: Miss from cloudfrontVia: 1.1 a454a679efa1e16833b77cb6af61e11c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: 64-wE956Vz4Ea-bzY9hwcIdfSvs7OPV6DcyYLikWl-ho71m8KySz4w

!DOCTYPE html>html langzh-CH>    head>        meta charsetUTF-8 />        link relicon typeimage/png href/favicon.ico />        meta            nameviewport            contentwidthdevice-width, initial-scale1.0, maximum-scale1.0, minimum-scale1.0, viewport-fitcover, user-scalableno        />        meta namereferrer contentno-referrer />        title>/title>        noscript>            meta http-equivrefresh content0;urlhttps://www.baidu.com />        /noscript>        script src/telegram-web-app.js>/script>        style>            body {                background-color: rgb(23, 24, 35);            }        /style>      script typemodule crossorigin src/assets/index_8b1f7a38_1758548402122.js>/script>      link relmodulepreload crossorigin href/assets/@vue_15f7f1ea_1758548402122.js>      link relmodulepreload crossorigin href/assets/@vant_b28ade99_1758548402122.js>      link relmodulepreload crossorigin href/assets/vant_445bef20_1758548402122.js>      link relmodulepreload crossorigin href/assets/vue_11858082_1758548402122.js>      link relmodulepreload crossorigin href/assets/pinia_9c439c07_1758548402122.js>      link relmodulepreload crossorigin href/assets/crypto-js_70940dee_1758548402122.js>      link relmodulepreload crossorigin href/assets/compressorjs_dec42b9c_1758548402122.js>      link relmodulepreload crossorigin href/assets/nanoid_7e542916_1758548402122.js>      link relmodulepreload crossorigin href/assets/axios_d16e7a2c_1758548402122.js>      link relmodulepreload crossorigin href/assets/avatar_a1fbab76_1758548402122.js>      link relmodulepreload crossorigin href/assets/dayjs_5a99a06d_1758548402122.js>      link relmodulepreload crossorigin href/assets/mitt_f7ef348c_1758548402122.js>      link relmodulepreload crossorigin href/assets/Y-Component_1d8a584e_1758548402122.js>      link relmodulepreload crossorigin href/assets/eventemitter3_7746cb8e_1758548402122.js>      link relmodulepreload crossorigin href/assets/delegate_7a9bbd7d_1758548402122.js>      link relmodulepreload crossorigin href/assets/downloadjs_3a816ea8_1758548402122.js>      link relmodulepreload crossorigin href/assets/hls.js_160dc7ce_1758548402122.js>      link relmodulepreload crossorigin href/assets/xgplayer_b42eb3aa_1758548402122.js>      link relstylesheet href/assets/vant_a128c8a6_1758548402122.css>      link relstylesheet href/assets/vue_38cc2e8f_1758548402122.css>      link relstylesheet href/assets/Y-Component_a991f83d_1758548402122.css>      link relstylesheet href/assets/xgplayer_807661df_1758548402122.css>      link relstylesheet href/assets/index_6f779c28_1758548402122.css>    /head>    body>        div idapp>/div>            /body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 2967Connection: keep-aliveServer: nginxDate: Sun, 02 Nov 2025 11:37:07 GMTAccept-Ranges: bytesVary: Accept-EncodingVary: Accept-EncodingLast-Modified: Tue, 23 Sep 2025 07:05:21 GMTETag: 68d246b1-b97X-Cache: Miss from cloudfrontVia: 1.1 a454a679efa1e16833b77cb6af61e11c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: 1ha0BIa9grTBVX0Pi1UXvWxrb84xrzsxT21DnxJnl1vHKqlUqykEIA

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 2ghf32fzh5g.4l9iyi6ky6b.cc

Is this malicious?

DNS Resolutions

Port 80

Port 443