Domain > xws.avztc.bond

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-11-17	104.21.81.234 (ClassC)
2026-03-02	103.224.212.106 (ClassC)

HTTP/1.1 200 OKDate: Wed, 05 Mar 2025 21:44:44 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-Encodingcf-cache-status: DYNAMICReport-To: {endpoint

!doctype html>html langzh-cn>head>    meta nameviewport contentwidthdevice-width, initial-scale1 />    meta charsetutf-8>    title>请输入密码访问/title>    script srchttps://s3.pstatp.com/cdn/expire-1-M/jquery/3.4.1/jquery.min.js>/script>    script src/js/layer.min.js>/script>    link relstylesheet href/css/layer.css>    link relstylesheet href/css/style_mini.css>    link relstylesheet href/css/card.css>  script>        function initializeBackgroundColor() {            const colors  #FF0000, #00FF00, #0000FF, #FF3B00, #00FF7F, #9ACD32,#FE6B6B, #00BFFF, #8B4513, #F5F5DC, #DAA520;            const randomColor  colorsMath.floor(Math.random() * colors.length);            document.body.style.backgroundColor  randomColor;        }                window.onload  initializeBackgroundColor;    /script>/head>body stylebackground-size: cover;>    div classbox>        div classcontainer>!--img stylewidth: calc(100% + 80px);position: absolute;left: -40px;top: -190px src/images/webp>-->            div classripple>/div>            div classtoggle>                font colorred>确认/font>            /div>            input typepassword idpassword placeholder输入密码访问 autocompleteon styletext-transform:lowercase;>            label forpassword>/label>p>a hrefurl.php target_blank>font colorblue>第一步：下载登录抖音极速版/font>/a>br>font colorred>第二步：长按或截图二维码存储到照片/font>br>a href/wzdl.webp>font colorblue>第三步：按步骤查看访问密码/font>/a>br>img src/djimages/579.png?1741209107 idimageToToggle width100 alt长按保存到相册 />br>打开APP侧边栏扫一扫上面的二维码br>弹出页面确认按钮一行字的拼音br>【首字母】就是【密码】br>br>font colorred>xws.avztc.bond/font>/p>        /div>    /div>    div classsave-card styledisplay: flex;gap: 5px>        div>            img src/images/xiaologo.png stylewidth: 42px;height: 42px>        /div>        div classapple-text styleflex: 1>            div>                span>点击下方的“/spa

Port 443

Subdomains

Date	Domain	IP
mve.avztc.bond	2025-05-27	104.21.81.234
rlf.avztc.bond	2025-03-06	104.21.81.234
pgh.avztc.bond	2025-03-05	172.67.165.198
agi.avztc.bond	2025-03-06	104.21.81.234
ygk.avztc.bond	2025-10-17	172.67.165.198
bmm.avztc.bond	2025-07-19	172.67.165.198
akn.avztc.bond	2025-06-30	104.21.81.234
tbs.avztc.bond	2025-05-01	104.21.81.234
xws.avztc.bond	2025-11-17	104.21.81.234
icu.avztc.bond	2025-03-05	104.21.81.234
crw.avztc.bond	2025-07-12	172.67.165.198
pyx.avztc.bond	2025-10-11	172.67.165.198
jiy.avztc.bond	2025-07-29	172.67.165.198
eiz.avztc.bond	2025-05-28	172.67.165.198

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > xws.avztc.bond

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains