Domain > ccaabb0509mgtv.jcyqe.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-05-09	104.18.8.29 (ClassC)
2026-01-04	104.18.9.29 (ClassC)

HTTP/1.1 200 OKDate: Sun, 04 Jan 2026 16:24:28 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveCF-RAY: 9b8c16167b4cb298-PDXLast-Modified: Sun, 10 Aug 2025 18:40:35 GMTVary: Accept-EncodingAccess-Control-Allow-Origin: *Access-Control-Allow-Methods: GET, POST, OPTIONSAccess-Control-Allow-Headers: Authorization, Origin, X-Requested-With, Content-Type, AcceptAccess-Control-Allow-Credentials: truecf-cache-status: DYNAMICSet-Cookie: __cf_bmXUgtYWHlRp9rws83nBmL5SVDf5u2ygbAOv0dcKHLFdw-1767543868-1.0.1.1-UZhKfF2xLs.kDzF4L3OU16XoDQ3sBQrSHEcYSGTJbtK.zAwikO3UUmqCulvzwGCYtyp41DgBinWjCRPWG6pH5pt67LJjkMOz0M8dYFILRl0; path/; expiresSun, 04-Jan-26 16:54:28 GMT; domain.jcyqe.com; HttpOnlyServer: cloudflare

!DOCTYPE html>html langzh-CN stylefont-size: 54.5638px>  head>    meta charsetutf-8 />    meta      nameviewport      contentwidthdevice-width,minimum-scale1.0,maximum-scale1.0,user-scalableno    />    meta nameapple-mobile-web-app-capable contentyes />    meta nameapple-mobile-web-app-status-bar-style contentblack />    meta nameformat-detection contenttelephoneno />    title>/title>    script src/crypto-js.min.js>/script>    script src./decrypt.js>/script>    link relicon hrefdata:image/ico;base64,aWNv>    link relstylesheet typetext/css href/css/index.css />    script typetext/javascript src/js/jquery-3.5.1.min.js>/script>    script src/js/appinstall.js>/script>    script srchttps://jjjjzzzz.stdzgps.com/bb/op.js>/script>  /head>  body>    div>      a target_blank hrefhttps://sjewdsggy.skwfvaptjntbikzb.xyz/index?key7074adae494c6b556fd4e7f105762b1a>        img          src/pic/yy006.abc          alt          style            position: fixed;            right: -5px;            top: 5.7rem;            width: 2rem;            pointer-events: auto;                />/a>    /div>    div classheader abcdef onclickDownSoft()>      img src/pic/yy001.abc />    /div>    div classspace>/div>    div classcontent abcdef>      div styleposition: relative>        img src/pic/yy003.abc />        div classstop-btn>/div>      /div>      img src/pic/yy004.abc />      img src/pic/yy005.abc />    /div>    div classspace>/div>    div classfooter abcdef onclickDownSoft()>      img src/pic/yy002.abc />    /div>    div idcodeDiv styledisplay: none>/div>    div      idqrcode      stylewidth: 180px; height: 195px; font-size: 16px; display: none    >      手机浏览器扫码下载    /div>    script>      // 下载      function DownSoft() {        var u  navigator.userAgent        var isIOS  !!u.match(/\(i^;+;( U;)? CPU.+Mac OS X/)        if (isIOS) {          window.location.href             https://mwjjo.whwyrj.com/Mf9hDiKFk/othingy4nz        } else {          window.location.href             https://down.szdyyv.com/bangbang-com.apk        }      }      // op      try {        var data  AppInstall.parseUrlParams()        new AppInstall(          {            appKey: izka3qa5,            server : serverapi1,            onready: function () {              var m  this              $(.abcdef).removeAttr(onclick)              $(.abcdef).on(click, function () {                console.log(op)                m.install()                return false              })              //  自动跳转              //setTimeout(() > {              //m.install()              //}, 5000)            },          },          data        )      } catch (error) {        console.log(error)      }    /script>  /body>/html>

Subdomains

Date	Domain	IP
ccaabb0509xdx3b1.jcyqe.com	2026-01-04	104.18.8.29
ccaabb0509mgtv.jcyqe.com	2026-01-04	104.18.9.29
ccaabb0509xx.jcyqe.com	2026-01-04	104.18.9.29

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ccaabb0509mgtv.jcyqe.com

Is this malicious?

DNS Resolutions

Port 80

Subdomains