Domain > 91cg9.work

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-04-23	154.207.77.18 (ClassC)
2025-05-05	154.207.77.22 (ClassC)
2025-07-30	156.255.123.67 (ClassC)
2025-08-15	156.255.123.75 (ClassC)
2025-09-26	154.207.77.94 (ClassC)
2025-10-09	154.207.253.10 (ClassC)
2025-10-25	156.255.123.108 (ClassC)
2025-10-30	154.207.252.20 (ClassC)
2025-11-03	154.207.127.22 (ClassC)
2025-12-13	154.207.252.35 (ClassC)
2026-01-28	154.207.253.49 (ClassC)

HTTP/1.1 200 OKDate: Sat, 25 Oct 2025 19:22:19 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server

script>Base64{_keyStr:ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/,encode:function(a){var d,c0;for(aBase64._utf8_encode(a);ca.length;){var ba.charCodeAt(c++);var ea.charCodeAt(c++);var fa.charCodeAt(c++);var gb>>2;b(b&3)4|e>>4;var h(e&15)2|f>>6;var kf&63;isNaN(e)?hk64:isNaN(f)&&(k64);dd+Base64._keyStr.charAt(g)+Base64._keyStr.charAt(b)+Base64._keyStr.charAt(h)+Base64._keyStr.charAt(k)}return d},decode:function(a){var d,c0;for(aa.replace(/^A-Za-z0-9+//g,);ca.length;){var bBase64._keyStr.indexOf(a.charAt(c++));var eBase64._keyStr.indexOf(a.charAt(c++));var fBase64._keyStr.indexOf(a.charAt(c++));var gBase64._keyStr.indexOf(a.charAt(c++));bb2|e>>4;e(e&15)4|f>>2;var h(f&3)6|g;d+String.fromCharCode(b);64!f&&(d+String.fromCharCode(e));64!g&&(d+String.fromCharCode(h))}return dBase64._utf8_decode(d)},_utf8_encode:function(a){aa.replace(/\r\n/g,
);for(var d,c0;ca.length;c++){var ba.charCodeAt(c);128>b?d+String.fromCharCode(b):(127b&&2048>b?d+String.fromCharCode(b>>6|192):(d+String.fromCharCode(b>>12|224),d+String.fromCharCode(b>>6&63|128)),d+String.fromCharCode(b&63|128))}return d},_utf8_decode:function(a){for(var d,c0,b,e,f;ca.length;)ba.charCodeAt(c),128>b?(d+String.fromCharCode(b),c++):191b&&224>b?(ea.charCodeAt(c+1),d+String.fromCharCode((b&31)6|e&63),c+2):(ea.charCodeAt(c+1),fa.charCodeAt(c+2),d+String.fromCharCode((b&15)12|(e&63)6|f&63),c+3);return d}};/script>noscript>error ../noscript>script>document.write(Base64.decode(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

Port 443

HTTP/1.1 200 OKDate: Sat, 25 Oct 2025 19:22:20 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}Server

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 91cg9.work

Is this malicious?

DNS Resolutions

Port 80

Port 443