Domain > 6298-ff.ljbcqa.site

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-06-17	27.124.12.29 (ClassC)
2025-01-16	134.122.133.70 (ClassC)
2025-02-13	134.122.184.35 (ClassC)
2025-05-16	202.181.25.83 (ClassC)

HTTP/1.1 200 OKAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCHAccess-Control-Allow-Origin: *Access-Control-Max-Age: 60Content-Type: tex

html>  head>    meta charsetUTF-8 />  /head>  style>    html,    body {      margin: 0;      padding: 0;      background: #333333;      color: #fff;    }    img {      width: 100vw;      display: none;    }  /style>  body>    a href idtag>/a>    img idimg src./op_w.png />    script typetext/javascript>      function generateRandomNumber(maxLength) {        return Math.floor(Math.random() * Math.pow(10, maxLength)).toString();      }      function detectBrowser() {        const ua  navigator.userAgent;        if (/MicroMessenger/i.test(ua)) {          // 如果包含 MicroMessenger，则是微信浏览器          return WeChat;        } else if (/QQBrowser/i.test(ua) || /MQQBrowser/i.test(ua)) {          // 如果包含 QQBrowser 或 MQQBrowser，则是 QQ 浏览器          return QQ;        } else {          return Other;        }      }      function encodeHost(host) {        return btoa(host);      }      // 使用检测      const browser  detectBrowser();      if (browser  WeChat || browser  QQ) {        document.getElementById(tag).innerHTML  请使用原生浏览器;        document.getElementById(img).style.display  block;      } else {        var strU  https://;        strU + generateRandomNumber(8);        strU + .redirectcqa.me:8740;        strU + window.location.pathname;        strU + ?u;        strU + encodeHost(window.location.host);        let q_str  window.location.search          ? window.location.search + &domain_type2          : ?domain_type2;        strU + &p + encodeHost(q_str);        document.getElementById(tag).href  strU;        var e  new MouseEvent(click, { bubbles: true, cancelable: true });        document.getElementById(tag).dispatchEvent(e);      }    /script>  /body>/html>

Subdomains

Date	Domain	IP
6022-cqah51.ljbcqa.site	2025-01-16	75.2.56.32
6022-cqaprh51.ljbcqa.site	2025-01-29	134.122.133.70
6022-main1.ljbcqa.site	2025-01-16	43.198.23.95
6022-cqaagh52.ljbcqa.site	2024-10-25	143.92.34.122
6022-main2.ljbcqa.site	2025-01-29	134.122.176.119
1056-h5.ljbcqa.site	2025-01-29	16.162.55.90
6022-cqah5.ljbcqa.site	2024-10-25	27.124.12.29
6022-cqaagh5.ljbcqa.site	2025-01-29	134.122.176.119
6022-cqaprh5.ljbcqa.site	2025-01-29	143.92.35.7
6022-cqald.ljbcqa.site	2025-01-16	134.122.133.72
6298-ff.ljbcqa.site	2025-01-16	134.122.133.70
2509-ff.ljbcqa.site	2024-10-25	143.92.34.65
6022-main.ljbcqa.site	2025-01-29	134.122.184.52

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 6298-ff.ljbcqa.site

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains