Help
RSS
API
Feed
Maltego
Contact
Domain > ff20.vip
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2025-05-09
20.205.28.29
(
ClassC
)
2025-05-17
20.6.128.141
(
ClassC
)
2025-05-17
20.6.130.188
(
ClassC
)
2026-02-21
20.205.27.187
(
ClassC
)
Port 80
HTTP/1.1 200 OKContent-Type: text/htmlDate: Sat, 21 Feb 2026 19:37:39 GMTEtag: W/6975a879-693Last-Modified: Sun, 25 Jan 2026 05:22:01 GMTServer: gwsSet-Cookie: SITE_TOTAL_ID8e1bf4712bf81678a1bb49e9d5e49f7d; Path/; Max-Age259200000; HttpOnlyVary: Accept-EncodingContent-Length: 1683 !doctype html>html>head> meta charsetutf-8> title>/title> style> .container { width: 60%; margin: 10% auto 0; background-color: #f0f0f0; padding: 2% 5%; border-radius: 10px } ul { padding-left: 20px; } ul li { line-height: 2.3 } a { color: #20a53a } /style>/head>body>script> const randomStr len > Array.from({ length: len }, () > ABCDEFGHIJKLMNOPQRSTUVWXYZMath.floor(Math.random() * 26) ).join(); const urls https://38.47.208.92:61050/navPage/feifanguoji.html, https://154.31.168.30:61051/navPage/feifanguoji.html, https://38.173.251.193:61022/navPage/feifanguoji.html, https://154.31.168.4:62003/navPage/feifanguoji.html, `https://${randomStr(4)}.ffgj1.top/navPage/feifanguoji.html`, ; (async () > { try { const results await Promise.all(urls.map(url > new Promise((resolve) > { let timeout setTimeout(() > resolve(false), 4000); fetch(url, { method: HEAD, mode: no-cors }) .then(() > { clearTimeout(timeout); resolve(true); }) .catch(() > { clearTimeout(timeout); resolve(false); }); }) )); const firstWorkingUrl urlsresults.findIndex(ok > ok); setTimeout(() > location.replace(firstWorkingUrl || urls0), 500); } catch (e) {} })(); /script> /body>/html>
Port 443
HTTP/1.1 200 OKContent-Type: text/htmlDate: Sat, 21 Feb 2026 19:37:40 GMTEtag: W/6975a879-68fLast-Modified: Sun, 25 Jan 2026 05:22:01 GMTServer: gwsSet-Cookie: SITE_TOTAL_ID4955a5a4018575cd898acb3695484743; Path/; Max-Age259200000; HttpOnlyVary: Accept-EncodingContent-Length: 1679 !doctype html>html>head> meta charsetutf-8> title>/title> style> .container { width: 60%; margin: 10% auto 0; background-color: #f0f0f0; padding: 2% 5%; border-radius: 10px } ul { padding-left: 20px; } ul li { line-height: 2.3 } a { color: #20a53a } /style>/head>body>script> const randomStr len > Array.from({ length: len }, () > ABCDEFGHIJKLMNOPQRSTUVWXYZMath.floor(Math.random() * 26) ).join(); const urls https://38.47.208.92:61050/navPage/feifanguoji.html, https://154.31.168.30:61051/navPage/feifanguoji.html, https://38.173.251.193:61022/navPage/feifanguoji.html, https://154.31.168.4:62003/navPage/feifanguoji.html, `https://${randomStr(4)}.ffgj1.top/navPage/feifanguoji.html`, ; (async () > { try { const results await Promise.all(urls.map(url > new Promise((resolve) > { let timeout setTimeout(() > resolve(false), 4000); fetch(url, { method: HEAD, mode: no-cors }) .then(() > { clearTimeout(timeout); resolve(true); }) .catch(() > { clearTimeout(timeout); resolve(false); }); }) )); const firstWorkingUrl urlsresults.findIndex(ok > ok); setTimeout(() > location.replace(firstWorkingUrl || urls0), 500); } catch (e) {} })();/script> /body>/html>
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]