Domain > 1325a.vip

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-10-20	147.92.32.44 (ClassC)
2026-01-24	104.21.58.236 (ClassC)

HTTP/1.1 200 OKDate: Sat, 24 Jan 2026 12:16:38 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveServer: cloudflareLast-Modified: Sat, 24 Jan 2026 00:44:31 GMTNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Vary: Accept-EncodingReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?syPsrq2Hsu7%2BoYW7Bw4E48%2F7UNKwPe7N1xlKpsJic%2FkbnJBj16L51A8BTQT0EQcJRg45sKLCGrY99cuEcrtBy00sL1SexIwxQEQ%3D%3D}}cf-cache-status: DYNAMICCF-RAY: 9c2f76914eb0c654-PDXalt-svc: h3:443; ma86400

!doctype html>html langzh-CN>head>  meta charsetutf-8 />  meta nameviewport contentwidthdevice-width, initial-scale1 />  meta namereferrer contentstrict-origin-when-cross-origin />  link relicon href/favicon.ico />  title>Welcome/title>  link relstylesheet href/static/ui/screen.12c.css />  script src/static/js/entry.10213.12c.js defer>/script>/head>body>  main classwrap>    section classpanel aria-label访问入口>      header classhead>        div classbadge aria-hiddentrue>●/div>        div classhead-text>          h1 classtitle>请选择访问方式/h1>          p classsub>AG 2004–2026 · 品牌运营，请按网络环境选择线路。/p>        /div>      /header>      div classprogress aria-label准备中>        div classprogress-bar roleprogressbar aria-valuemin0 aria-valuemax100 aria-valuenow0>          span classprogress-fill>/span>        /div>        p classprogress-text>span idpText>正在准备/span>span classdots aria-hiddentrue>.../span>/p>      /div>      a classaction action--primary idcontinueBtn target_blank relnoopener noreferrer href#>        继续访问      /a>      div classactions aria-label可选线路 idlinks>/div>      div classdivider roleseparator aria-hiddentrue>/div>      p classhint>        若无法打开，请尝试切换线路或使用主流浏览器稍后再试。      /p>      footer classfoot>        span>©/span>        span idyear>/span>        span classmuted>Navigation Page/span>      /footer>    /section>  /main>  script charsetUTF-8 idLA_COLLECT src//sdk.51.la/js-sdk-pro.min.js>/script>  script>LA.init({id:3LBZqvfn3PrhZOX8,ck:3LBZqvfn3PrhZOX8})/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 1325a.vip

Is this malicious?

DNS Resolutions

Port 443