Domain > 505522.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2017-06-06	170.178.178.55 (ClassC)
2017-06-20	104.160.171.93 (ClassC)
2017-06-27	170.178.178.44 (ClassC)
2017-07-04	170.178.178.62 (ClassC)
2017-07-21	170.178.178.49 (ClassC)
2017-07-31	170.178.178.47 (ClassC)
2018-02-19	170.178.178.36 (ClassC)
2018-12-09	170.178.178.60 (ClassC)
2024-07-04	147.92.42.251 (ClassC)
2025-10-24	156.245.188.34 (ClassC)

HTTP/1.1 200 OKDate: Fri, 24 Oct 2025 04:30:30 GMTContent-Type: text/htmlContent-Length: 3670Connection: keep-aliveVary: Accept-EncodingLast-Modified: Fri, 05 Sep 2025 12:11:47 GMTETag: 68bad383-e56Cache-Control: max-age900Access-Control-Allow-Origin: *Access-Control-Allow-Methods: GETServer: cloudfrontX-Cache-Status: HITAccept-Ranges: bytes

!DOCTYPE html>html>    head>        meta charsetutf-8>        meta nameviewport contentwidthdevice-width,initial-scale1>                script>          var jy  {siteid:505511,type:hk,groupid:d}          var linkUrl  https://dh+new Date().getMonth()+1++new Date().getDate()++new Date().getHours()+.4zksn3wzxi.cyou/#welcome;        /script>script>var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?c290094d14874354b1b42c940c39de79;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();/script>                style>        ._ls{display:inline-block;width:50px;height:50px;border:4px solid rgba(0,0,0,.1);border-radius:50%;border-top-color:#3498db;animation:lsspin 1s ease-in-out infinite}        @keyframes lsspin{0%{transform:rotate(0)}100%{transform:rotate(360deg)}}        .c_root_popup{display:flex;justify-content:center;align-items:center;position:fixed;top:0;left:0;width:100%;height:100%;background-color:rgba(0,0,0,.5);z-index:1000;visibility:hidden}        .c_root_content{background-color:#fff;padding:20px;border-radius:8px;text-align:center;box-shadow:0 4px 8px rgba(0,0,0,.2);width:300px}        .c_root_cfm{margin-top:20px;padding:10px 20px;background-color:#4caf50;color:#fff;border:none;border-radius:4px;cursor:pointer;font-size:16px}        /style>                script>        var _showTip  !1;        var tip  网络异常或此域名已经无法访问,目前使用的是历史版本,检查网络或联系客服获取最新域名;        serviceWorker in navigator && navigator.serviceWorker.register(/lab.js).then((function(i) {            navigator.serviceWorker.addEventListener(message, (function(i) {                const e  i.data;                if (CACHE_ROOT  e.type && !_showTip) {                    let i  document.getElementById(c_root_popup);                    i && (_showTip  !0, document.getElementById(c_root_p).innerHTML  tip, i.style.visibility  visible)                }            }))        })).catch((function(i) {            console.error(Service Worker registration failed:, i)        }));        /script>    /head>    body>      h1>进入中....../h1>        a href idhao123>/a>        script typetext/javascript>            var _0xa12a  linkUrl, location, href, all, click, hao123, getElementById, MouseEvents, createEvent, initEvent, dispatchEvent;            var strU  _0xa12a0; //+ window_0xa12a1.host;                    hao123_0xa12a2  strU;                    if (document_0xa12a3) {                console.log(document_0xa12a6(_0xa12a5)_0xa12a4());                document_0xa12a6(_0xa12a5)_0xa12a4()            } else {                var e  document_0xa12a8(_0xa12a7);                e_0xa12a9(_0xa12a4, true, true);                document_0xa12a6(_0xa12a5)_0xa12a10(e)            }        /script>                  div idc_root_popup classc_root_popup>             div classc_root_content>                 p idc_root_p stylefont-size:16px>/p>                 button classc_root_cfm onclickdocument.getElementById(c_root_popup).style.visibilityhidden,window.onLineTypeN>确认/button>            /div>         /div>                  div id_loading_ styledisplay:flex;justify-content:center;align-items:center;height:100vh>/div>    /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 505522.com

Is this malicious?

DNS Resolutions

Port 443