Domain > 654264.cc

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-12-10	104.114.79.160 (ClassC)
2021-04-29	104.102.249.67 (ClassC)
2021-05-01	23.223.44.146 (ClassC)
2021-05-04	96.7.245.90 (ClassC)
2021-05-10	23.56.237.156 (ClassC)
2021-05-20	104.76.210.77 (ClassC)
2021-05-20	23.73.181.51 (ClassC)
2021-05-22	96.7.224.138 (ClassC)
2021-05-27	23.63.249.168 (ClassC)
2026-01-25	18.183.147.40 (ClassC)

HTTP/1.1 200 OKServer: nginx Date: Sun, 25 Jan 2026 04:49:56 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingVary: Accept-Encodingpsc-cache-status: MISSStrict-Transport-Security: max-age31536000; includeSubDomains; preload

!DOCTYPE html>html langen>head>        meta charsetutf-8>    meta namereferrer contentno-referrer>    meta namerobots contentnoindex, nofollow, noarchive>    meta http-equivPermissions-Policy contentinterest-cohort()>    meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1, minimum-scale1, user-scalableno>    title>加载中.../title>    style>        html,body{            width: 100%;            height: 100%;        }        .centered-alert {            position: absolute;            top: 50%;            left: 50%;            transform: translate(-50%, -50%);            text-align: center;            padding: 20px;            background-color: #f9f9f9;            border: 1px solid #ddd;            border-radius: 5px;            font-size: 16px;            color: #0e0e0e;            text-decoration: none;        }    /style>/head>body>a hrefjavascript:void(0); onclickgoto() classcentered-alert>    strong>即将进入:/strong>或点击直接进入!/a>/body>script>    function decodeBase64(base64String) {        const padding  (base64String.length % 4)  0 ? 0 : 4 - (base64String.length % 4);        base64String + .repeat(padding);        const binaryString  window.atob(base64String);        const bytes  new Uint8Array(binaryString.length);        for (let i  0; i  binaryString.length; i++) {            bytesi  binaryString.charCodeAt(i);        }        return new TextDecoder(utf-8).decode(bytes);    }    function goto(){        // window.location.replace(decodeBase64(aHR0cHM6Ly91bTc4Mmp0NS52aXAveGhwYWdlMDhfamQjLz9jb2RlPTEwMTYyMzA5))        window.location.href  decodeBase64(aHR0cHM6Ly91bTc4Mmp0NS52aXAveGhwYWdlMDhfamQjLz9jb2RlPTEwMTYyMzA5)    }    setTimeout(function (){        goto();    },200);/script>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 654264.cc

Is this malicious?

DNS Resolutions

Port 80

Port 443