Domain > 6u542.cqleyou.top

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-04-12	27.221.71.101 (ClassC)
2025-01-13	218.29.50.234 (ClassC)
2025-01-21	116.163.31.218 (ClassC)
2025-01-25	221.204.18.221 (ClassC)
2025-02-03	123.6.40.242 (ClassC)
2025-02-07	116.169.183.167 (ClassC)
2025-02-15	118.212.138.171 (ClassC)
2025-03-11	116.131.57.65 (ClassC)
2025-04-18	122.189.171.115 (ClassC)
2025-08-05	43.141.52.49 (ClassC)

HTTP/1.1 200 OKLast-Modified: Fri, 21 Apr 2023 03:54:26 GMTEtag: 2b4df304deb52a9c9b1f386c0017ab66Content-Type: text/htmlDate: Wed, 08 Jan 2025 17:45:18 GMTServer: tencent-cosx-cos-hash-crc64ecma: 1456

!DOCTYPE html>html langen>script>function getMainHost() {  let key   `mh_${Math.random()}`;  let keyR  new RegExp( `(^|;)\s*${key}12345` );  let expiredTime  new Date( 0 );  let domain  document.domain;  let domainList  domain.split( . );   let urlItems    ;  // 主域名一定会有两部分组成  urlItems.unshift( domainList.pop() );  // 慢慢从后往前测试  while( domainList.length ) {    urlItems.unshift( domainList.pop() );    let mainHost  urlItems.join( . );    let cookie    `${key}${12345};domain.${mainHost}`;     document.cookie  cookie;     //如果cookie存在，则说明域名合法    if ( keyR.test( document.cookie ) ) {      document.cookie  `${cookie};expires${expiredTime}`;      return mainHost;    }  }}    window.location.href  //www. + getMainHost();/script>head>    meta charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    title>404 Not Found/title>    style>  .showgif{ position: fixed;width: 100%;height: 100%;max-width: 680px; background: url(dj.gif) no-repeat; background-size: contain; margin: auto;left: 0;right: 0;} body{font-family: Segoe UI, Tahoma, Geneva, Verdana, sans-serif;}a{color: inherit;text-decoration: none;}/style>/head>body>    center>        h1 stylecolor: #2b9ec3;>404 Not Found/h1>        h3 stylecolor: #2b9ec3;>不积跬步,无以至千里;不积小流,无以成江海/h3>    /center>    hr>    center stylemargin-bottom: 30px;>Powered By Nginx1.17 On 鼎尖网络科技/center>    div classshowgif>/div>     div styledisplay: none;>       script typetext/javascript srchttps://s4.cnzz.com/z_stat.php?id5910237&web_id5910237>/script>     /div>/body>/html>

Port 443

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 6u542.cqleyou.top

Is this malicious?

DNS Resolutions

Port 80

Port 443