Domain > 853544.505691.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-04-25	18.160.249.75 (ClassC)
2025-12-04	104.21.68.98 (ClassC)

HTTP/1.1 200 OKDate: Thu, 04 Dec 2025 06:45:05 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareLast-Modified: Fri, 21 Nov 2025 07:07:27 GMTReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?slYe%2FFgnpD9YHyZkxXwFg6NDzK1%2F3AR8ZSAGzjCjVpfQUAk9PQx73Dk9yuig1OmzK0nFQcEU00ya7Phal4j9nxbNRFjDhrbwdoefLjakbgci6}}Cache-Control: max-age900Access-Control-Allow-Origin: *Access-Control-Allow-Methods: GETAccept-Ranges: bytescf-cache-status: DYNAMICCF-RAY: 9a8956c2295287cd-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>html>    head>        meta charsetutf-8>        meta nameviewport contentwidthdevice-width,initial-scale1>                script>          var jy {siteid:450144,type:am2,groupid:a,o:46}                   var linkUrl  https://dh+new Date().getMonth()+1++new Date().getDate()++new Date().getHours()+.lq7b6fr215.cyou/#welcome;        /script>        script>           var _hmt  _hmt || ;           (function() {             var hm  document.createElement(script);             hm.src  https://hm.baidu.com/hm.js?b0a3554c0c9db8471af753ec46d56000;             var s  document.getElementsByTagName(script)0;              s.parentNode.insertBefore(hm, s);           })();        /script>                style>        ._ls{display:inline-block;width:50px;height:50px;border:4px solid rgba(0,0,0,.1);border-radius:50%;border-top-color:#3498db;animation:lsspin 1s ease-in-out infinite}        @keyframes lsspin{0%{transform:rotate(0)}100%{transform:rotate(360deg)}}        .c_root_popup{display:flex;justify-content:center;align-items:center;position:fixed;top:0;left:0;width:100%;height:100%;background-color:rgba(0,0,0,.5);z-index:1000;visibility:hidden}        .c_root_content{background-color:#fff;padding:20px;border-radius:8px;text-align:center;box-shadow:0 4px 8px rgba(0,0,0,.2);width:300px}        .c_root_cfm{margin-top:20px;padding:10px 20px;background-color:#4caf50;color:#fff;border:none;border-radius:4px;cursor:pointer;font-size:16px}        /style>                script>        var _showTip  !1;        var tip 网络异常或此域名已经无法访问,目前使用的是历史版本,检查网络或联系客服获取最新域名;        serviceWorker in navigator && navigator.serviceWorker.register(/lab.js).then((function(i) {            navigator.serviceWorker.addEventListener(message, (function(i) {                const e  i.data;                if (CACHE_ROOT  e.type && !_showTip) {                    let i  document.getElementById(c_root_popup);                    i && (_showTip  !0, document.getElementById(c_root_p).innerHTML  tip, i.style.visibility  visible)                }            }))        })).catch((function(i) {            console.error(Service Worker registration failed:, i)        }));        /script>    /head>    body>      h1>进入中...../h1>        a href idhao123>/a>        script typetext/javascript>            var _0xa12a  linkUrl, location, href, all, click, hao123, getElementById, MouseEvents, createEvent, initEvent, dispatchEvent;            var strU  _0xa12a0; //+ window_0xa12a1.host;                    hao123_0xa12a2  strU;                    if (document_0xa12a3) {                console.log(document_0xa12a6(_0xa12a5)_0xa12a4());                document_0xa12a6(_0xa12a5)_0xa12a4()            } else {                var e  document_0xa12a8(_0xa12a7);                e_0xa12a9(_0xa12a4, true, true);                document_0xa12a6(_0xa12a5)_0xa12a10(e)            }        /script>                  div idc_root_popup classc_root_popup>             div classc_root_content>                 p idc_root_p stylefont-size:16px>/p>                 button classc_root_cfm onclickdocument.getElementById(c_root_popup).style.visibilityhidden,window.onLineTypeN>ç¡®è®¤/button>            /div>         /div>                  div id_loading_ styledisplay:flex;justify-content:center;align-items:center;height:100vh>/div>    /body>/html>

Port 443

HTTP/1.1 200 OKDate: Thu, 04 Dec 2025 06:45:05 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareLast-Modified: Fri, 21 Nov 2025 07:07:27 GMTReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sMY2GIs3vVpFnAvfbxQBSNJYEFS2PC0ogCnnyAr%2BGMxpz7lHDXFkZRULuRxPO06vvLNvx9apqG%2Fsi4BdizVQWMFC8mc8Iiy05zIyMh6G3pQ%3D%3D}}Cache-Control: max-age900Access-Control-Allow-Origin: *Access-Control-Allow-Methods: GETAccept-Ranges: bytescf-cache-status: DYNAMICCF-RAY: 9a8956c4a961b8b9-PDXalt-svc: h3:443; ma86400

Subdomains

Date	Domain	IP
bbb2.505691.com	2025-09-27	104.21.68.98
127044.505691.com	2025-12-02	104.21.68.98
976144.505691.com	2025-12-04	172.67.193.226
853544.505691.com	2025-12-04	104.21.68.98

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 853544.505691.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains