Domain > 2618code17.xyz

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2026-02-10	104.21.55.84 (ClassC)

HTTP/1.1 200 OKDate: Tue, 10 Feb 2026 18:27:16 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveServer: cloudflareNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Vary: Accept-EncodingVary: Accept-EncodingLast-Modified: Mon, 17 Mar 2025 13:38:34 GMTAccess-Control-Allow-Origin: *Access-Control-Allow-Methods: *X-Cache: Hit from cloudfrontVia: 1.1 c9249f7f94011ec15757db9d9378506c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HKG54-P2X-Amz-Cf-Id: HwVxOIkG-QoH9NWt-vv_T9nO8ZA3Xr9RQBB-2CoUlKBO7AdV-0priAAge: 18829cf_cache_status: HITReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?s8ug2T8u3AqK3TDVU63SQvdtc59jtDIX4vMpDZl10hDHCesnI1hM81MK%2BnoIyriZZ9z%2FTMAfhSwcJvGfBGvsRe0OQIqj9VXh9Reys6w%3D%3D}}cf-cache-status: DYNAMICCF-RAY: 9cbda8d73a3d816e-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>html>head>    !--      If you are serving your web app in a path other than the root, change the      href value below to reflect the base path you are serving from.      The path provided below has to start and end with a slash / in order for      it to work correctly.      For more details:      * https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base      This is a placeholder for base href that will be replaced by the value of      the `--base-href` argument provided to `flutter build`.    -->    base href/>    meta charsetUTF-8>    meta nameviewport          contentwidthdevice-width, initial-scale1.0, maximum-scale1.0, user-scalableno, viewport-fitcover>    meta contentIEEdge http-equivX-UA-Compatible>    meta namedescription contentmg>    !--  设置状态栏颜色  -->    meta nametheme-color media(prefers-color-scheme: light) content#DBEAFE>    meta nametheme-color media(prefers-color-scheme: dark) content#DBEAFE>    !-- iOS meta tags & icons -->    meta nameapple-mobile-web-app-capable contentyes>    meta nameapple-mobile-web-app-status-bar-style contentblack>    meta nameapple-mobile-web-app-title content永利皇宫>    meta propertyog:url content/>    meta namereferrer contentno-referrer/>    meta namereferrer contentnever>    link relapple-touch-icon hreficons/Icon-192.png>    !-- Favicon -->    link relicon typeimage/png hreffavicon.png/>    style>        .animateLine{            animation: blink 1s ease-in-out infinite;        }        @keyframes blink {            0% {              opacity: 0.6;            }            50% {              opacity: 1;            }            100% {              opacity: 0.6;            }        }    /style>    title>永利皇宫/title>    link relmanifest hrefmanifest.json>    !--  dont remove  -->    script>    //code process    var tempInviteCode  ;    if(window.location.href.indexOf(code)!-1){        tempInviteCode  window.location.href.split(code)1;        localStorage.setItem(code,tempInviteCode);    }    //fetch(https://api.cloudfareproxy2618.xyz/h5web_start?code+tempInviteCode+&dm+window.location.host);    /script>    !-- This script adds the flutter initialization JS code -->    script srcflutter.js defer>/script>/head>script typetext/javascript src./crypto/dyl.js>/script>script typetext/javascript src./crypto/pyl.js>/script>body stylemargin:0;background-color:#DBEAFE;>!--preload-->div idpreview>    img idindex_bg_v2 alt styleposition:absolute;left:0;top:0;width:100%;height:100%         src>    div styleposition:absolute;left:0;top:0;height:80%;width:100%;display:flex;flex:1;align-items:center;justify-content:center;>        div styledisplay:flex;flex-direction:column;align-items:center;justify-content:center;>            img idindex_logo_v2 stylewidth:70%;                 src                 alt>            div idpreviewProgressText                 stylemargin-top:15%;font-size:3.5vw;color:#508CFF>/div>            div                    classanimateLine                    idpreviewProgressLine                    stylealign-self: flex-start;margin-left:10%;width:0%;margin-top: 10px;height: 0.8vh;border-radius: 10px;background-color: #508CFF;            >            /div>            div stylemargin-bottom:10%;margin-top:5%;display:flex;flex-direction:column;font-size:3.5vw;color:#888;align-items:center;>                div>如长时间未进入,请使用兼容更好的浏览器/div>                div>QQ、UC、夸克、百度、360、Chrome/div>            /div>        /div>    /div>    div stylealign-items: center;justify-content:flex-start;position:relative;display:flex;flex-direction: column;>        div stylewidth:100%;margin-top:10%;display:flex;flex-direction:row;align-items:center;justify-content:flex-end;>            img idindex_website stylewidth:8%;margin-right:5%                 src                 onclickclickMainWebsite()                 alt>            img idindex_service stylewidth:8%;margin-right:5%;                 src                 onclickclickService()                 alt>            img idindex_fix stylewidth:8%;margin-right:5%;                 src                 onclickclickFixed()                 alt>        /div>    /div>/div>/body>script typetext/javascript src./crypto/import_files.js>/script>script>    //20sec check into    window.localStorage.removeItem(intoMgSuccess);    window.setTimeout(function () {         if(window.localStorage.getItem(intoMgSuccess) null || window.localStorage.getItem(intoMgSuccess) undefined){            clickFixed();         }    }, 35000);    function getQueryString(name) {        var rReg  new RegExp((^|&) + name + (^&*)(&|$));        var oaUrl  window.location.search.substring(1).match(rReg);        if (oaUrl ! null) {            return decodeURI(oaUrl2)        }        return null;    }    //code process    var inviteCode  getQueryString(code);    if(inviteCode!null){        localStorage.setItem(code,inviteCode);    }    //dv    function loadScript(url, callback) {      var script  document.createElement(script);      script.src  url;      script.onload  function() {        if (callback) {          callback();        }      };      document.head.appendChild(script);    }    if(getQueryString(DG)!null){        loadScript(https://unpkg.com/vconsole@latest/dist/vconsole.min.js,function(){            var vConsole  new window.VConsole();        });    }    //site proxy    if(getQueryString(py)!null && getQueryString(py)!){        localStorage.setItem(py,getQueryString(py));    }    //random str    function generateRandomString() {        var result  ;        const characters  ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789;        const charactersLength  characters.length;        for (var i  0; i  6; i++) {            result + characters.charAt(Math.floor(Math.random() * charactersLength));        }        return result;    }    //process is d2h    if(window.location.href.indexOf(h2d)!-1){        localStorage.setItem(h2d,Math.random() * 10000+);    }    //edit url to root path    window.history.pushState({}, , /);    //is in desktop    var isInDesktop  undefined ! typeof window.navigator.standalone && window.navigator.standalone;    localStorage.setItem(desktop,isInDesktop?1:0);    //render type    function isIPhone() {        return /iPad|iPhone|iPod/.test(navigator.userAgent);    }    //preview logic    function clickMainWebsite(){        window.location.href  https://www.2618ddd.com;    }    function clickService(){        var visitorId  mg_+generateRandomString();        window.location.href  https://kf.cloudscf01service.com/customer_service/chatIndex?k1&visitor_id + visitorId;    }    function clickFixed(){        try{            navigator.serviceWorker.ready.then(function(registration) {                  registration.unregister();                  window.location.reload();            });        }catch(e){            window.location.reload();        }    }    //preview    var isFirstLoad  true;    var ifValue  localStorage.getItem(if);    var hintText  document.getElementById(hintText);    if (ifValue  null || ifValue  undefined) {        localStorage.setItem(if, Math.random() * 10000+);    }else{        isFirstLoad  false;    }    //isFromExitGame    var isFromExitGame  false;    var g2aValue  localStorage.getItem(g2a);    if (g2aValue ! null && g2aValue ! undefined && g2aValue ! ) {        isFromExitGame  true;        localStorage.setItem(g2a, );    }    var progressMaxValue  Math.random() * 3 + 96;    var progressValue  1;    var previewProgressLine  document.getElementById(previewProgressLine);    var previewProgressText  document.getElementById(previewProgressText);    var progressTimer  setInterval(function(){      if(previewProgressLine && previewProgressText){        if(progressValue99 && previewProgressText.innerText!正在进入...){            progressValue+Math.random() * (progressValue56?2:0.3) + 0.1;            if(progressValue>progressMaxValue){                progressValue  progressMaxValue;            }            previewProgressLine.style.width  (0.8*progressValue)+%;            previewProgressText.innerText  (isFromExitGame?正在退出游戏:isFirstLoad?首次进入可能较慢 :正在检查更新  )+  ( 进度:+progressValue.toFixed(2)+% );        }      }    },200);    window.addEventListener(load, function () {        //load start        var targetValue  Math.random() * 10 + 16;        if(progressValuetargetValue-13){            progressValue  targetValue-13;        }        fetch(https://api.cloudfareproxy2618.xyz/h5web_load?code+inviteCode+&dm+window.location.host);        //process first hsw.js      var isAlreadyHaveSw  (window.location.host.indexOf(172.20.10.4)!-1||window.location.host.indexOf(localhost)!-1)?true:navigator.serviceWorker.controller;      if (!window._flutter) {  window._flutter  {};}_flutter.buildConfig  {engineRevision:83bacfc52569459a4a654727cad2546820cb0d6a,builds:{compileTarget:dart2js,renderer:canvaskit,mainJsPath:main.dart.js},useLocalCanvasKit:true};      _flutter.loader.load({          serviceWorkerSettings: {            serviceWorkerVersion: 902425807,          },          onEntrypointLoaded: async function(engineInitializer) {            if(!isAlreadyHaveSw){               return window.location.reload();            }else{              if(isFirstLoad){                localStorage.setItem(if, Math.random() * 10000+);              }            }            //main_done            var targetValue  Math.random()*20+38;            if(progressValuetargetValue){                progressValue  targetValue;            }            // Run-time engine configuration            var config  {              renderer: isIPhone() ? html : (isFirstLoad?html:canvaskit),            }            fetch(https://api.cloudfareproxy2618.xyz/h5web_engineinit?code+inviteCode+&dm+window.location.host);            //～～～～～～～～～～～            const appRunner  await engineInitializer.initializeEngine();            //～～～～～～～～～～～～            if(!isAlreadyHaveSw){               return;            }            // init done            previewProgressText.innerText  正在进入...;            previewProgressLine.style.width  80%;            fetch(https://api.cloudfareproxy2618.xyz/h5web_preline?code+inviteCode+&dm+window.location.host);            await appRunner.runApp();            //～～～～～～～～～～～～～            //add listener process ios swiper back            if(isIPhone()){                const flutterRoot  document                      .getElementsByTagName(flt-glass-pane)                      .item(0);                flutterRoot.addEventListener(touchstart, (e) > {                  if (e.pageX > 24 && e.pageX  window.innerWidth - 24) return;                  e.preventDefault();                });            }            //into app，delay remove preview            window.setTimeout(function () {                 if(progressTimer){                    clearInterval(progressTimer);                    var preview  document.getElementById(preview);                    if(preview){                        document.body.removeChild(preview);                    }                }            }, 200);          }      });    });/script>/html>

Port 443

HTTP/1.1 200 OKDate: Tue, 10 Feb 2026 18:27:17 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveServer: cloudflarevary: Accept-Encodingvary: Accept-Encodinglast-modified: Mon, 17 Mar 2025 13:38:34 GMTaccess-control-allow-origin: *access-control-allow-methods: *Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}x-cache: Hit from cloudfrontvia: 1.1 74519eaf9467fae86738c8eb53833d12.cloudfront.net (CloudFront)x-amz-cf-pop: HKG54-P2x-amz-cf-id: UuOlD7HIf1lFbE-QyMO4t_iOfBdAa6H__jMtS8sbr6m0jQaFmDXc4wAge: 32710cf_cache_status: HITReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?srInXsEeAaUHfLoHCuLQtVUhdbN2RIEYasErUWaq5%2Ft9s2TYroSTwuEfQH97vQMDxyrKMUtXsq2ea8meaFZ4vzGxGuNtDEjOpOX%2B7tCVb}}cf-cache-status: DYNAMICCF-RAY: 9cbda8da3f9c6e10-PDXalt-svc: h3:443; ma86400

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 2618code17.xyz

Is this malicious?

DNS Resolutions

Port 80

Port 443