Domain > 6933558.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-01-10	23.224.212.179 (ClassC)
2025-02-13	23.224.68.50 (ClassC)
2026-02-15	222.167.32.74 (ClassC)

Port 80

HTTP/1.1 200 OKDate: Sun, 15 Feb 2026 18:16:36 GMTContent-Type: text/htmlContent-Length: 1966Connection: keep-aliveServer: nginxStrict-Transport-Security: max-age31536000; includeSubDomains

html>script>var _0x5654console,log,debug,search,replace,https://,apply,warn,table,pathname,exception,trace,return\x20(function()\x20,{}.constructor(\x22return\x20this\x22)(\x20),error;(function(_0x148b05,_0x5654f0){var _0x3741b3function(_0x396f38){while(--_0x396f38){_0x148b05push(_0x148b05shift());}};_0x3741b3(++_0x5654f0);}(_0x5654,0xba));var _0x3741function(_0x148b05,_0x5654f0){_0x148b05_0x148b05-0x0;var _0x3741b3_0x5654_0x148b05;return _0x3741b3;};var _0xc6f130function(){var _0x193831!!;return function(_0xe3bbb9,_0x1f670d){var _0xace33_0x193831?function(){if(_0x1f670d){var _0x186c12_0x1f670d_0x3741(0x0)(_0xe3bbb9,arguments);_0x1f670dnull;return _0x186c12;}}:function(){};_0x193831!;return _0xace33;};}();var _0x1af9e3_0xc6f130(this,function(){var _0x18a2e7function(){};var _0x4c4a1afunction(){var _0x4da621;try{_0x4da621Function(_0x3741(0x6)+_0x3741(0x7)+);)();}catch(_0x1beecc){_0x4da621window;}return _0x4da621;};var _0x1ed544_0x4c4a1a();if(!_0x1ed544_0x3741(0x9)){_0x1ed544_0x3741(0x9)function(_0xa08ce1){var _0x238492{};_0x238492_0x3741(0xa)_0xa08ce1;_0x238492_0x3741(0x1)_0xa08ce1;_0x238492_0x3741(0xb)_0xa08ce1;_0x238492info_0xa08ce1;_0x238492_0x3741(0x8)_0xa08ce1;_0x238492_0x3741(0x4)_0xa08ce1;_0x238492_0x3741(0x2)_0xa08ce1;_0x238492_0x3741(0x5)_0xa08ce1;return _0x238492;}(_0x18a2e7);}else{_0x1ed544_0x3741(0x9)_0x3741(0xa)_0x18a2e7;_0x1ed544_0x3741(0x9)warn_0x18a2e7;_0x1ed544_0x3741(0x9)_0x3741(0xb)_0x18a2e7;_0x1ed544_0x3741(0x9)info_0x18a2e7;_0x1ed544_0x3741(0x9)_0x3741(0x8)_0x18a2e7;_0x1ed544_0x3741(0x9)exception_0x18a2e7;_0x1ed544_0x3741(0x9)_0x3741(0x2)_0x18a2e7;_0x1ed544_0x3741(0x9)trace_0x18a2e7;}});_0x1af9e3();location_0x3741(0xd)(_0x3741(0xe)+locationhost+location_0x3741(0x3)+location_0x3741(0xc));/script>/html>

Port 443

HTTP/1.1 200 OKDate: Sun, 15 Feb 2026 18:16:38 GMTContent-Type: text/htmlContent-Length: 6792Connection: keep-aliveLast-Modified: Fri, 10 Jan 2025 08:05:43 GMTVary: Accept-EncodingETag: 6780d4d7-1a88Accept-Ranges: bytesServer: nginxX-Request-Id: bbb090294ad9912198a795296946f5c7

!DOCTYPE html>html>    head design-width750>        meta charsetutf-8 />        meta nameviewport contentwidthdevice-width,minimum-scale1.0,maximum-scale1.0,user-scalableno />        meta nameapple-mobile-web-app-capable contentyes />        meta nameapple-mobile-web-app-status-bar-style contentblack />        meta nameformat-detection contenttelephoneno />        title>Demo/title>        link relstylesheet hrefcss/style.min.css />        link relstylesheet hrefcss/Swiper.css />        script srcjs/rem.js>/script>        script src./js/inviteCodeConfig.js>/script>        script src./js/lineConfig.js>/script>        script src./js/downLoadConfig.js>/script>        script>            const inviteConfigMapAuto  (inviteConfigMap || ).map(url > {                const host, inviteCode  url.split( )                return {                    host,                    pType: inviteConfigMapPtype,                    inviteCode                }            })            function findObjectByName(array, currentName) {                return array.find(item > item.host.indexOf(currentName) ! -1)            }            function findHostitem() {                const currentHostName  window.location.hostname                const currentObj  inviteConfigMapAuto?.length ? findObjectByName(inviteConfigMapAuto, currentHostName) : null                return currentObj            }            function DownSoft() {                if (downLoadConfigMap && downLoadConfigMap.downUrl) {                    const url  new URL(downLoadConfigMap.downUrl)                    const inviteParams  findHostitem()                    if (inviteParams) {                        url.searchParams.append(inviteParams.pType, inviteParams.inviteCode)                    }                    window.location.href  url.toString()                }            }            window.onload  function () {                $(#modal_mask).hide()                let inviteParams                  const currentObj  findHostitem()                if (currentObj) {                    inviteParams  ? + currentObj.pType +  + currentObj.inviteCode                }                if (lineConfigMap?.length) {                    const fetchPromises  lineConfigMap.map(itm > {                        const startTime  performance.now() // 开始时间                        return fetch(itm.link, { method: GET, mode: no-cors })                            .then(response > {                                const duration  (performance.now() - startTime).toFixed(2) // 计算持续时间                                itm.ms  `${duration}ms` // 更新 ms 属性                            })                            .catch(error > {                                itm.ms  error.message // 处理错误                            })                    })                    // 等待所有的 fetch 请求完成                    Promise.all(fetchPromises).then(() > {                        // 所有测速完成后渲染线路                        const lineItems  lineConfigMap                            .map(                                line > `                        div classline-Item>                          div classleftPart>                            div classtopP>                              div>/div>                              div>/div>                              div>/div>                            /div>                            div classbotTime>${line.ms}/div>                          /div>                          div classmidPart>${line.name}/div>                          div classrightPart onclickwindow.open(${line.link}${inviteParams}, _blank)>立即游戏/div>                        /div>                      `                            )                            .join()                        $(#lineContainer).append(lineItems) // 添加到页面                    })                }                $(#closeRightNow).click(() > {                    $(#modal_mask).hide()                })                $(#leftDownLaod).click(() > {                    $(#modal_mask).show()                })                $(#mainBg).click(() > {                    $(#modal_mask).show()                })                //h5                $(#rightDownLaod).click(() > {                    DownSoft()                })            }        /script>    /head>    body>        div classmobile-wrap center>            div classlogo>                img src./img/88428f_442x106.png alt />            /div>            div classbanner>                img src./img/97c948_750x848.jpg alt />            /div>            div classcontainer>                div classintrs>                    img src./img/49291c_750x244.png alt />                /div>                div classbuttons>                    button onClickDownSoft();>/button>                /div>                div classlabel onClickDownSoft();>                    img src./img/3ae50d_692x130.png alt />                /div>                div classtype onClickDownSoft();>                    img src./img/c5741c_750x662.png alt />                /div>                div classrecomment onClickDownSoft();>                    img src./img/887a3b_750x596.png alt />                /div>                div classpays>                    img src./img/fa6e58_750x764.png alt />                /div>            /div>            footer>                div idleftDownLaod classbtns leftDownLaodBtn>                    div classcg-footer-bubble>新人注册领8888元/div>                    span>立即游戏/span>                /div>                div idrightDownLaod classbtns rightDownLaodBtn>                    div classcg-footer-bubble>下载APP领888元/div>                    span>立即下载/span>                /div>            /footer>            !-- 线路弹框 -->            div idmodal_mask classlineModalMask styledisplay: none>                div idlineContainer classlineBox>                    div idcloseRightNow classcloseBtn>/div>                /div>            /div>        /div>        !--mobile_wrap-->        script srcjs/jquery-2.2.4.min.js>/script>        script srcjs/swiper-4.2.0.min.js>/script>        script srcjs/MobEpp-1.1.1.js>/script>    /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 6933558.com

Is this malicious?

DNS Resolutions

Port 80

Port 443