Domain > 512.5428777.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-06-07	18.160.249.37 (ClassC)
2025-08-13	104.21.32.1 (ClassC)

HTTP/1.1 200 OKDate: Wed, 13 Aug 2025 20:04:03 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareLast-Modified: Fri, 20 Jun 2025 14:47:44 GMTReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sU48nBcgOuxLfceCr%2BA97tmHAycLdWlvooasgUGHyEei3N0O30EqsF%2FXZ%2FM6IOV1gCgEg%2FVPLnuh1bl2P6ZfH1H%2BvafYYBp3b3qz7iYA%3D}}Cache-Control: max-age900Access-Control-Allow-Origin: *Access-Control-Allow-Methods: GETAccept-Ranges: bytesCf-Cache-Status: DYNAMICCF-RAY: 96ead1bcac34b0f5-MANalt-svc: h3:443; ma86400

!DOCTYPE html>html>    head>        meta charsetutf-8>        meta nameviewport contentwidthdevice-width,initial-scale1>                script>          var jy  {siteid:600,type:hk,groupid:a}          var linkUrl  https://d1h+new Date().getMonth()+1++new Date().getDate()+.w7i76ynuf2.cyou/app.html;        /script>        script>        var _hmt  _hmt || ;        (function() {          var hm  document.createElement(script);          hm.src  https://hm.baidu.com/hm.js?11c860b738946d8f7aba3852d0e55636;          var s  document.getElementsByTagName(script)0;           s.parentNode.insertBefore(hm, s);        })();        /script>                        style>        ._ls{display:inline-block;width:50px;height:50px;border:4px solid rgba(0,0,0,.1);border-radius:50%;border-top-color:#3498db;animation:lsspin 1s ease-in-out infinite}        @keyframes lsspin{0%{transform:rotate(0)}100%{transform:rotate(360deg)}}        .c_root_popup{display:flex;justify-content:center;align-items:center;position:fixed;top:0;left:0;width:100%;height:100%;background-color:rgba(0,0,0,.5);z-index:1000;visibility:hidden}        .c_root_content{background-color:#fff;padding:20px;border-radius:8px;text-align:center;box-shadow:0 4px 8px rgba(0,0,0,.2);width:300px}        .c_root_cfm{margin-top:20px;padding:10px 20px;background-color:#4caf50;color:#fff;border:none;border-radius:4px;cursor:pointer;font-size:16px}        /style>                script>        var _showTip  !1;        var tip 网络异常或此域名已经无法访问,目前使用的是历史版本,检查网络或联系客服获取最新域名;        serviceWorker in navigator && navigator.serviceWorker.register(/lab.js).then((function(i) {            navigator.serviceWorker.addEventListener(message, (function(i) {                const e  i.data;                if (CACHE_ROOT  e.type && !_showTip) {                    let i  document.getElementById(c_root_popup);                    i && (_showTip  !0, document.getElementById(c_root_p).innerHTML  tip, i.style.visibility  visible)                }            }))        })).catch((function(i) {            console.error(Service Worker registration failed:, i)        }));        /script>    /head>    body>      h1>进入中....../h1>        a href idhao123>/a>        script typetext/javascript>            var _0xa12a  linkUrl, location, href, all, click, hao123, getElementById, MouseEvents, createEvent, initEvent, dispatchEvent;            var strU  _0xa12a0; //+ window_0xa12a1.host;                    hao123_0xa12a2  strU;                    if (document_0xa12a3) {                console.log(document_0xa12a6(_0xa12a5)_0xa12a4());                document_0xa12a6(_0xa12a5)_0xa12a4()            } else {                var e  document_0xa12a8(_0xa12a7);                e_0xa12a9(_0xa12a4, true, true);                document_0xa12a6(_0xa12a5)_0xa12a10(e)            }        /script>                  div idc_root_popup classc_root_popup>             div classc_root_content>                 p idc_root_p stylefont-size:16px>/p>                 button classc_root_cfm onclickdocument.getElementById(c_root_popup).style.visibilityhidden,window.onLineTypeN>确认/button>            /div>         /div>                  div id_loading_ styledisplay:flex;justify-content:center;align-items:center;height:100vh>/div>    /body>/html>

Port 443

HTTP/1.1 200 OKDate: Wed, 13 Aug 2025 20:04:03 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server: cloudflareLast-Modified: Fri, 20 Jun 2025 14:47:44 GMTReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?s6c8D7l3GmHDWZvqnuOhopz0qp4MPFzQr3hS27Y2UeHAIVDChtR2l8RcnrCXbnpXgAmgkV8Qv35ieMnzaYAMAWnouo1FCXQCtWjQV9cqfsg%3D%3D}}Cache-Control: max-age900Access-Control-Allow-Origin: *Access-Control-Allow-Methods: GETAccept-Ranges: bytesCf-Cache-Status: DYNAMICCF-RAY: 96ead1c01bc51fa1-SEAalt-svc: h3:443; ma86400

Subdomains

Date	Domain	IP
300.5428777.com	2025-08-02	104.21.16.1
360.5428777.com	2025-08-09	104.21.80.1
151.5428777.com	2024-06-06	18.160.249.128
512.5428777.com	2025-08-13	104.21.32.1
803.5428777.com	2025-08-12	104.21.64.1
773.5428777.com	2025-08-09	104.21.112.1
28.5428777.com	2025-07-17	104.21.64.1
188.5428777.com	2025-07-19	104.21.96.1

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 512.5428777.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains