Help
RSS
API
Feed
Maltego
Contact
Domain > 28q7.cc
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2025-05-06
20.205.28.29
(
ClassC
)
2025-05-18
20.6.128.141
(
ClassC
)
2026-02-21
154.38.242.8
(
ClassC
)
Port 80
HTTP/1.1 200 OKServer: XcdnDate: Sat, 21 Feb 2026 17:49:11 GMTContent-Type: text/htmlContent-Length: 1590Last-Modified: Sun, 25 Jan 2026 05:22:01 GMTConnection: keep-aliveVary: Accept-EncodingETag: 6975a879-636Set-Cookie: SITE_TOTAL_ID270442eaba1d9c7d6d962a80c6b899ae; Path/; Max-Age259200000; HttpOnlyAccept-Ranges: bytesx-request-id: 019c8151-dd3f-7233-9079-e9aff437c0f0 !doctype html>html>head> meta charsetutf-8> title>/title> style> .container { width: 60%; margin: 10% auto 0; background-color: #f0f0f0; padding: 2% 5%; border-radius: 10px } ul { padding-left: 20px; } ul li { line-height: 2.3 } a { color: #20a53a } /style>/head>body>script> ///////// ///////////////////////////// const randomStr len > Array.from({ length: len }, () > ABCDEFGHIJKLMNOPQRSTUVWXYZMath.floor(Math.random() * 26) ).join(); const urls https://103.39.18.214:60443, https://149.30.162.204:32038, // `https://${randomStr(6)}.28qk10.com`, ; (async () > { try { const results await Promise.all(urls.map(url > new Promise((resolve) > { let timeout setTimeout(() > resolve(false), 4000); fetch(url, { method: HEAD, mode: no-cors }) .then(() > { clearTimeout(timeout); resolve(true); }) .catch(() > { clearTimeout(timeout); resolve(false); }); }) )); const firstWorkingUrl urlsresults.findIndex(ok > ok); setTimeout(() > location.replace(firstWorkingUrl || urls0), 500); } catch (e) {} })(); /////////////////////////////////////////////////////// /script> /body>/html>
Port 443
HTTP/1.1 200 OKServer: XcdnDate: Sat, 21 Feb 2026 17:49:12 GMTContent-Type: text/htmlContent-Length: 1590Last-Modified: Sun, 25 Jan 2026 05:22:01 GMTConnection: keep-aliveVary: Accept-EncodingETag: 6975a879-636Set-Cookie: SITE_TOTAL_IDdf80f1f0d386ccf20c75f9a9dd62ec87; Path/; Max-Age259200000; HttpOnlyAccept-Ranges: bytesx-request-id: 019c8151-e009-79a0-bbfa-0b721155259e !doctype html>html>head> meta charsetutf-8> title>/title> style> .container { width: 60%; margin: 10% auto 0; background-color: #f0f0f0; padding: 2% 5%; border-radius: 10px } ul { padding-left: 20px; } ul li { line-height: 2.3 } a { color: #20a53a } /style>/head>body>script> ///////// ///////////////////////////// const randomStr len > Array.from({ length: len }, () > ABCDEFGHIJKLMNOPQRSTUVWXYZMath.floor(Math.random() * 26) ).join(); const urls https://103.39.18.214:60443, https://149.30.162.204:32038, // `https://${randomStr(6)}.28qk10.com`, ; (async () > { try { const results await Promise.all(urls.map(url > new Promise((resolve) > { let timeout setTimeout(() > resolve(false), 4000); fetch(url, { method: HEAD, mode: no-cors }) .then(() > { clearTimeout(timeout); resolve(true); }) .catch(() > { clearTimeout(timeout); resolve(false); }); }) )); const firstWorkingUrl urlsresults.findIndex(ok > ok); setTimeout(() > location.replace(firstWorkingUrl || urls0), 500); } catch (e) {} })(); /////////////////////////////////////////////////////// /script> /body>/html>
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]