Domain > 952.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	flyuser@qq.com
NameServer	F1G1NS2.DNSPOD.NET
Created	1998-05-14 00:00:00
Changed	2015-11-13 00:00:00
Expires	2017-05-13 00:00:00
Registrar	ENAME TECHNOLOGY CO.

DNS Resolutions

Date	IP Address
2026-03-02	45.207.193.131 (ClassC)

HTTP/1.1 200 OKDate: Mon, 02 Mar 2026 23:00:42 GMTContent-Type: text/htmlContent-Length: 4816Connection: keep-aliveVary: Accept-EncodingLast-Modified: Sun, 01 Mar 2026 06:12:20 GMTETag: 69a3d8c4-12d0Cache-Control: max-age60Access-Control-Allow-Origin: *Access-Control-Allow-Methods: GETServer: cloudfrontX-Cache-Status: EXPIREDAccept-Ranges: bytes

!DOCTYPE html>html>    head>        meta charsetutf-8>        meta nameviewport contentwidthdevice-width,initial-scale1>        script>var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?e9df21d610201281c131c565d8fc428d;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();/script>        script>          var jy  {siteid:530,type:am,groupid:h,o:21}            var ygc  bydkduyje27y3tn0.cyou;                        function getDomain(str) {                const removePositions  1, 3, 4, 6, 7, 9;                    return str                    .split()                    .filter((char, index) > !removePositions.includes(index + 1))                    .join();            }                    const domain  getDomain(ygc);                    window.onload  function () {                const timestamp  Date.now();                window.location.replace(                    https://530ceo+(new Date().getMonth()+1)++new Date().getDate()+Math.floor(new Date().getHours()/4)*4+. + domain + /load1.html?a530.ygc&b + timestamp                );            };        /script>                style>        ._ls{display:inline-block;width:50px;height:50px;border:4px solid rgba(0,0,0,.1);border-radius:50%;border-top-color:#3498db;animation:lsspin 1s ease-in-out infinite}        @keyframes lsspin{0%{transform:rotate(0)}100%{transform:rotate(360deg)}}        .c_root_popup{display:flex;justify-content:center;align-items:center;position:fixed;top:0;left:0;width:100%;height:100%;background-color:rgba(0,0,0,.5);z-index:1000;visibility:hidden}        .c_root_content{background-color:#fff;padding:20px;border-radius:8px;text-align:center;box-shadow:0 4px 8px rgba(0,0,0,.2);width:300px}        .c_root_cfm{margin-top:20px;padding:10px 20px;background-color:#4caf50;color:#fff;border:none;border-radius:4px;cursor:pointer;font-size:16px}                        /* 正在进入 */        .container {display: flex;justify-content: center;align-items: center;height: 90vh;}        .content {text-align: center;}        .content img{width: 66%;}        .content h1 {font-size: 30px;}        @media (max-width: 992px) {            .content img{width: 64%;}            .content h1 {font-size: 30px;}        }        /style>                script>        var _showTip  !1;        var tip 网络异常或此域名已经无法访问,目前使用的是历史版本,检查网络或联系客服获取最新域名;        serviceWorker in navigator && navigator.serviceWorker.register(/lab.js).then((function(i) {            navigator.serviceWorker.addEventListener(message, (function(i) {                const e  i.data;                if (CACHE_ROOT  e.type && !_showTip) {                    let i  document.getElementById(c_root_popup);                    i && (_showTip  !0, document.getElementById(c_root_p).innerHTML  tip, i.style.visibility  visible)                }            }))        })).catch((function(i) {            console.error(Service Worker registration failed:, i)        }));        /script>    /head>    body>      div classcontainer>        div classcontent>          img srchttps://cdn.edgozy.com/image/res/530dh.png>          h1 styletext-align: center;color: #828282;margin: 0;>正在进入530....../h1>        /div>      /div>        a href idhao123>/a>        script typetext/javascript>            var _0xa12a  linkUrl, location, href, all, click, hao123, getElementById, MouseEvents, createEvent, initEvent, dispatchEvent;            var strU  _0xa12a0; //+ window_0xa12a1.host;                    hao123_0xa12a2  strU;                    if (document_0xa12a3) {                console.log(document_0xa12a6(_0xa12a5)_0xa12a4());                document_0xa12a6(_0xa12a5)_0xa12a4()            } else {                var e  document_0xa12a8(_0xa12a7);                e_0xa12a9(_0xa12a4, true, true);                document_0xa12a6(_0xa12a5)_0xa12a10(e)            }        /script>                  div idc_root_popup classc_root_popup>             div classc_root_content>                 p idc_root_p stylefont-size:16px>/p>                 button classc_root_cfm onclickdocument.getElementById(c_root_popup).style.visibilityhidden,window.onLineTypeN>确认/button>            /div>         /div>                  div id_loading_ styledisplay:flex;justify-content:center;align-items:center;height:100vh>/div>    /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 952.com

Is this malicious?

Whois

DNS Resolutions

Port 443