Domain > 6t5em35e5e.toxinzone.buzz

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-11-11	104.21.41.180 (ClassC)
2025-12-28	172.67.149.23 (ClassC)

HTTP/1.1 200 OKDate: Sun, 28 Dec 2025 09:54:28 GMTContent-Type: text/html;charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveServer: cloudflareNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Vary: Accept-EncodingReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sJdac1nSx4qkdY%2FuoDzeeDqxPNrMAFkgI4L2s5yLN5%2F8g%2B211vsIoHI2Mv8xNrvE1BsDpGDp%2Bv5Qa%2FnyW%2BrnKJFHCyeXp7VA%2FpHGhVCrFeepBXUb5%2Fb59}}cf-cache-status: DYNAMICCF-RAY: 9b502d2fcc2e3416-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>html langen>    head>    meta charsetUTF-8>    title>江山如画/title>    meta namekeywords content />    meta namedescription content />meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIE8>meta http-equivExpires content0>meta http-equivPragma contentno-cache>meta http-equivCache-control contentno-cache>meta http-equivCache contentno-cache>meta nameviewport contentwidthdevice-width, initial-scale1.0>meta http-equivX-UA-Compatible contentieedge>meta namereferrer contentalways>    style>        body {            background-color: #001935;            color: #FFFFFF;            text-align: center;            font-family: Arial, sans-serif;            margin: 0;            padding: 20px;        }        h2 {            margin: 20px 0;        }        a {            color: #f74205;            text-decoration: none;            font-weight: bold;        }        p {            color: #999999;            margin-top: 20px;        }        #seconds {            display: block;            margin: 10px 0;            font-size: 1.2em;            color: #FFD700;        }    /style>/head>body>    div>        h2>            江山如画，正在为您加速...请稍后！            span idseconds>2/span>            a href# idobfuscated-link>点击.备用.地址/a>        /h2> p>长.时.间.无.法.加.速.可.手.动.点.击.备.用.地.址.或.刷.新.本.页.面./p>    br> p>/p> p>/p>p styledisplay: none>大江东去，浪淘尽，千古风流人物。故垒西边，人道是：三国周郎赤壁。乱石穿空，惊涛拍岸，卷起千堆雪。江山如画，一时多少豪杰。 遥想公瑾当年，小乔初嫁了，雄姿英发。/p>    /div>script>use strict;const path  /toto/;     const referrer  document.referrer; // 来源页面let seconds  2;const secondElem  document.getElementById(seconds);if (secondElem) secondElem.textContent  seconds;(function tick() {  if (seconds > 1) {    seconds--;    if (secondElem) secondElem.textContent  seconds;    setTimeout(tick, 700);    return;  }  if (secondElem) secondElem.textContent  0;  let target  path;  if (referrer) {    target + `?referrer${encodeURIComponent(referrer)}`;  }  window.location.href  target;})();/script>           /body>/html>

Subdomains

Date	Domain	IP
a85em35e5e.toxinzone.buzz	2025-12-17	104.21.41.180
6t5em35e5e.toxinzone.buzz	2025-12-28	172.67.149.23

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 6t5em35e5e.toxinzone.buzz

Is this malicious?

DNS Resolutions

Port 443

Subdomains