Domain > vdzhe2gb52.vscj7cfsa.cc

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-09-11	13.33.67.4 (ClassC)
2025-12-01	3.163.24.56 (ClassC)

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 2967Connection: keep-aliveServer: nginxDate: Mon, 01 Dec 2025 10:12:21 GMTAccept-Ranges: bytesVary: Accept-EncodingVary: Accept-EncodingLast-Modified: Fri, 14 Nov 2025 15:03:49 GMTETag: 691744d5-b97X-Cache: Miss from cloudfrontVia: 1.1 1f941fcf288b6d0259a0f708c955afae.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2X-Amz-Cf-Id: V7LvZb2bsCEa8adYlP1_jbZunU68m4I0Nxc56RqgnRKpbOAkpr_JxAVary: Origin

!DOCTYPE html>html langzh-CH>    head>        meta charsetUTF-8 />        link relicon typeimage/png href/favicon.ico />        meta            nameviewport            contentwidthdevice-width, initial-scale1.0, maximum-scale1.0, minimum-scale1.0, viewport-fitcover, user-scalableno        />        meta namereferrer contentno-referrer />        title>/title>        noscript>            meta http-equivrefresh content0;urlhttps://www.baidu.com />        /noscript>        script src/telegram-web-app.js>/script>        style>            body {                background-color: rgb(23, 24, 35);            }        /style>      script typemodule crossorigin src/assets/index_69c1951f_1763131169795.js>/script>      link relmodulepreload crossorigin href/assets/@vue_15f7f1ea_1763131169795.js>      link relmodulepreload crossorigin href/assets/@vant_2b89f892_1763131169795.js>      link relmodulepreload crossorigin href/assets/vant_d194532a_1763131169795.js>      link relmodulepreload crossorigin href/assets/vue_882a8bf8_1763131169795.js>      link relmodulepreload crossorigin href/assets/pinia_926fc1eb_1763131169795.js>      link relmodulepreload crossorigin href/assets/crypto-js_70940dee_1763131169795.js>      link relmodulepreload crossorigin href/assets/compressorjs_dec42b9c_1763131169795.js>      link relmodulepreload crossorigin href/assets/nanoid_7e542916_1763131169795.js>      link relmodulepreload crossorigin href/assets/axios_d16e7a2c_1763131169795.js>      link relmodulepreload crossorigin href/assets/avatar_c31979db_1763131169795.js>      link relmodulepreload crossorigin href/assets/dayjs_e23fc0dd_1763131169795.js>      link relmodulepreload crossorigin href/assets/mitt_f7ef348c_1763131169795.js>      link relmodulepreload crossorigin href/assets/Y-Component_2e467517_1763131169795.js>      link relmodulepreload crossorigin href/assets/eventemitter3_4b7957f6_1763131169795.js>      link relmodulepreload crossorigin href/assets/delegate_c77f90c8_1763131169795.js>      link relmodulepreload crossorigin href/assets/downloadjs_7b08e096_1763131169795.js>      link relmodulepreload crossorigin href/assets/hls.js_156da410_1763131169795.js>      link relmodulepreload crossorigin href/assets/xgplayer_8ec87178_1763131169795.js>      link relstylesheet href/assets/vant_a128c8a6_1763131169795.css>      link relstylesheet href/assets/vue_38cc2e8f_1763131169795.css>      link relstylesheet href/assets/Y-Component_160e77ca_1763131169795.css>      link relstylesheet href/assets/xgplayer_807661df_1763131169795.css>      link relstylesheet href/assets/index_6f779c28_1763131169795.css>    /head>    body>        div idapp>/div>            /body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 2967Connection: keep-aliveServer: nginxDate: Mon, 01 Dec 2025 10:12:21 GMTAccept-Ranges: bytesVary: Accept-EncodingVary: Accept-EncodingLast-Modified: Fri, 14 Nov 2025 15:03:49 GMTETag: 691744d5-b97X-Cache: Miss from cloudfrontVia: 1.1 e2ad8d56b8dbdb69144113ad1c008e02.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P2X-Amz-Cf-Id: qs0Wfy4709XWaEBKCoSal-ZjPvViAcEG07QN8uYYsAuQRXT6R90aHwVary: Origin

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > vdzhe2gb52.vscj7cfsa.cc

Is this malicious?

DNS Resolutions

Port 80

Port 443