Help
RSS
API
Feed
Maltego
Contact
Domain > 28quan29.cc
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2023-11-08
154.23.183.76
(
ClassC
)
2024-05-27
20.205.18.80
(
ClassC
)
2025-04-09
20.205.28.29
(
ClassC
)
2025-06-10
20.6.128.141
(
ClassC
)
2026-02-21
20.6.130.193
(
ClassC
)
Port 80
HTTP/1.1 200 OKContent-Type: text/htmlDate: Sat, 21 Feb 2026 14:18:39 GMTEtag: W/6975a879-518Last-Modified: Sun, 25 Jan 2026 05:22:01 GMTServer: gwsSet-Cookie: SITE_TOTAL_ID6b2696516261b50594f0867aeeb !DOCTYPE html>html langen>head> meta charsetUTF-8> meta http-equivX-UA-Compatible contentIEedge> meta nameviewport contentwidthdevice-width, initial-scale1.0> title>/title>/head>body> script> const randomStr len > Array.from({ length: len }, () > ABCDEFGHIJKLMNOPQRSTUVWXYZMath.floor(Math.random() * 26) ).join(); const urls `https://${randomStr(6)}.teqbrnh.com:59443`, `https://${randomStr(6)}.teqdxya.com:60443`, https://149.30.165.137:42031, https://38.190.211.180:42031 ; (async () > { try { const results await Promise.all(urls.map(url > new Promise((resolve) > { let timeout setTimeout(() > resolve(false), 4000); fetch(url, { method: HEAD, mode: no-cors }) .then(() > { clearTimeout(timeout); resolve(true); }) .catch(() > { clearTimeout(timeout); resolve(false); }); }) )); const firstWorkingUrl urlsresults.findIndex(ok > ok); setTimeout(() > location.replace(firstWorkingUrl || urls0), 500); } catch (e) {} })(); /script>/body>/html>
Port 443
HTTP/1.1 200 OKContent-Type: text/htmlDate: Sat, 21 Feb 2026 14:18:40 GMTEtag: W/6975a879-518Last-Modified: Sun, 25 Jan 2026 05:22:01 GMTServer: gwsSet-Cookie: SITE_TOTAL_IDd8a2a60824ff3fd6af402785181 !DOCTYPE html>html langen>head> meta charsetUTF-8> meta http-equivX-UA-Compatible contentIEedge> meta nameviewport contentwidthdevice-width, initial-scale1.0> title>/title>/head>body> script> const randomStr len > Array.from({ length: len }, () > ABCDEFGHIJKLMNOPQRSTUVWXYZMath.floor(Math.random() * 26) ).join(); const urls `https://${randomStr(6)}.teqbrnh.com:59443`, `https://${randomStr(6)}.teqdxya.com:60443`, https://149.30.165.137:42031, https://38.190.211.180:42031 ; (async () > { try { const results await Promise.all(urls.map(url > new Promise((resolve) > { let timeout setTimeout(() > resolve(false), 4000); fetch(url, { method: HEAD, mode: no-cors }) .then(() > { clearTimeout(timeout); resolve(true); }) .catch(() > { clearTimeout(timeout); resolve(false); }); }) )); const firstWorkingUrl urlsresults.findIndex(ok > ok); setTimeout(() > location.replace(firstWorkingUrl || urls0), 500); } catch (e) {} })(); /script>/body>/html>
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]