Domain > 202505312hgudgud99.1028cc5289b2fd72e8ea8b1028gg.win

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-05-31	147.92.34.139 (ClassC)
2025-11-22	103.204.13.230 (ClassC)

HTTP/1.1 200 OKCache-Control: no-cacheContent-Type: text/htmlDate: Sat, 22 Nov 2025 22:38:35 GMTEtag: W/69200759-f0aLast-Modified: Fri, 21 Nov 2025 06:31:53 GMTServer: nginxVary: Accept-EncodingX-Cache: BYPASSTransfer-Encoding: chunked

!DOCTYPE html>html>head>meta charsetutf-8>meta http-equivX-UA-Compatible contentIEedge,chrome1>meta nameviewport contentwidthdevice-width,initial-scale1,minimum-scale1,maximum-scale1,user-scalableno>meta http-equivX-UA-Compatible contentIEedge>meta nameapple-touch-fullscreen contentyes>meta nameformat-detection contenttelephoneno>meta nameformat-detection contentemailno>title>Welcome/title>meta namedescription content->meta namesite content->meta namerenderer contentwebkit>meta nameHandheldFriendly contenttrue>meta nameMobileOptimized content320>meta namescreen-orientation contentportrait>meta namex5-orientation contentportrait>meta namefull-screen contentyes>meta namex5-fullscreen contenttrue>meta namebrowsermode contentapplication>meta namex5-page-mode contentapp>meta namemsapplication-tap-highlight contentno>link relshortcut icon hreffavicon.ico typeimage/x-icon>script>(function () {    var IEvar  9, IEnum  navigator.userAgent.toLowerCase();    if (IEnum.indexOf(msie) > -1) {      if (Number(IEnum.match(/msie (\d.+)/)1)  IEvar) {        location.href  /updateBrowser.html;      }    } else {      if (window.localStorage && window.sessionStorage) {        try {          sessionStorage.setItem(TextLocalStorage, hello world);          sessionStorage.removeItem(TextLocalStorage);          localStorage.setItem(TextLocalStorage, hello world);          localStorage.removeItem(TextLocalStorage);        } catch (e) {          alert(您的浏览器太旧或者开启了隐私模式/无痕模式，无法浏览网页，请更换浏览器或使用常规模式，给您带来的不便，表示抱歉！)        }      } else {        location.href  /updateBrowser.html;      }      ;    }  })();  ;(function () {    if (location.href.search(CanPc) > -1) {      sessionStorage.setItem(CanPc, 1);    }    // var u  navigator.userAgent;    // if (!!u.match(/AppleWebKit.*Mobile.*/) && !sessionStorage.getItem(CanPc)) {    //   location.href  location.href.replace(www., ).replace(.html, ).replace(://m., ://).replace(://, ://m.);    // }  })();/script>script src/static/public/layer.m.js>/script>script src/static/js/yidun/index.js>/script>style>body {      background-color: #f2f2f2;    }    .spinner {      position: fixed;      top: 0;      left: 0;      right: 0;      bottom: 0;      margin: auto;      width: 84px;      height: 84px;      border-radius: 100%;      border: 16px solid #dc3b40;      border-left: 16px solid transparent;      -webkit-animation: sk-stretchdelay 1.2s infinite linear;      animation: sk-stretchdelay 1.2s infinite linear;    }    @-webkit-keyframes sk-stretchdelay {      0% {        transform: rotate(0deg)      }      100% {        transform: rotate(360deg)      }    }    @keyframes sk-stretchdelay {      0% {        transform: rotate(0deg)      }      100% {        transform: rotate(360deg)      }    }/style>script typemodule crossorigin src/static/chat/jiliaoPcJs.js>/script>link relstylesheet crossorigin href/static/chat/jiliaoPcCss.css>link href/static/css/vendor.e8a6d11d8fdf.css relstylesheet>link href/static/css/app.f6b0dce34c45.css relstylesheet>/head>body ontouchstart>div idapp>div classspinner>/div>/div>div idchat>/div>script typetext/javascript charsetutf-8 src//g.alicdn.com/sd/ncpc/nc.js?t2015052012>/script>script typetext/javascript src/static/js/manifest.e21820b53b54845d8aa9.js>/script>script typetext/javascript src/static/js/0.a16fdadc6a525d92e414.js>/script>script typetext/javascript src/static/js/6.582ccb6bac678bca8c6b.js>/script>/body>script typetext/javascript>window.noCaptcha  noCaptcha/script>/html>

Subdomains

Date	Domain	IP
20250531y7y8hy9jo0.1028cc5289b2fd72e8ea8b1028gg.win	2025-11-22	103.204.13.223
2025053153gydgyeg4.1028cc5289b2fd72e8ea8b1028gg.win	2025-11-22	103.204.13.248
2025053183h8dh8eb5.1028cc5289b2fd72e8ea8b1028gg.win	2025-11-22	103.204.13.223
202505316guh8h9ho7.1028cc5289b2fd72e8ea8b1028gg.win	2025-11-22	103.204.13.230
202505312hgudgud99.1028cc5289b2fd72e8ea8b1028gg.win	2025-11-22	103.204.13.230
1028-30dad.1028cc5289b2fd72e8ea8b1028gg.win	2025-11-22	45.204.19.31
1028-52dad.1028cc5289b2fd72e8ea8b1028gg.win	2025-11-22	45.204.19.31
1028-23dad.1028cc5289b2fd72e8ea8b1028gg.win	2025-11-22	103.204.13.230
1028-38dad.1028cc5289b2fd72e8ea8b1028gg.win	2025-11-22	45.204.19.31
1028-59dad.1028cc5289b2fd72e8ea8b1028gg.win	2025-11-22	103.204.13.230

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 202505312hgudgud99.1028cc5289b2fd72e8ea8b1028gg.win

Is this malicious?

DNS Resolutions

Port 443

Subdomains