Domain > gggcccbb0104yt.raojw.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-08-22	104.18.23.171 (ClassC)

HTTP/1.1 200 OKDate: Fri, 22 Aug 2025 19:43:16 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveCF-RAY: 9734dbb2aa67efd6-PDXLast-Modified: Sun, 10 Aug 2025 18:40:35 GMTVary: Accept-EncodingAccess-Control-Allow-Origin: *Access-Control-Allow-Methods: GET, POST, OPTIONSAccess-Control-Allow-Headers: Authorization, Origin, X-Requested-With, Content-Type, AcceptAccess-Control-Allow-Credentials: truecf-cache-status: DYNAMICSet-Cookie: __cf_bmpu8dYu_za4u2ZW8Naa1pk.70WYD3IEEP_QQtokS14HM-1755891796-1.0.1.1-uvyqU2IIVyFciTXhK8lEml_62AQM5X.lvvi4KaZyclBV8jHm5a3UC5qJAkBjx41aF.mtwnjLVBzZpsinF_oFFNtuyuytOxsjlYnheipvqDU; path/; expiresFri, 22-Aug-25 20:13:16 GMT; domain.raojw.com; HttpOnly; SecureServer: cloudflare

!DOCTYPE html>html langzh-CN stylefont-size: 54.5638px>  head>    meta charsetutf-8 />    meta      nameviewport      contentwidthdevice-width,minimum-scale1.0,maximum-scale1.0,user-scalableno    />    meta nameapple-mobile-web-app-capable contentyes />    meta nameapple-mobile-web-app-status-bar-style contentblack />    meta nameformat-detection contenttelephoneno />    title>/title>    script src/crypto-js.min.js>/script>    script src./decrypt.js>/script>    link relicon hrefdata:image/ico;base64,aWNv>    link relstylesheet typetext/css href/css/index.css />    script typetext/javascript src/js/jquery-3.5.1.min.js>/script>    script src/js/appinstall.js>/script>    script srchttps://jjjjzzzz.stdzgps.com/bb/op.js>/script>  /head>  body>    div>      a target_blank hrefhttps://sjewdsggy.skwfvaptjntbikzb.xyz/index?key7074adae494c6b556fd4e7f105762b1a>        img          src/pic/yy006.abc          alt          style            position: fixed;            right: -5px;            top: 5.7rem;            width: 2rem;            pointer-events: auto;                />/a>    /div>    div classheader abcdef onclickDownSoft()>      img src/pic/yy001.abc />    /div>    div classspace>/div>    div classcontent abcdef>      div styleposition: relative>        img src/pic/yy003.abc />        div classstop-btn>/div>      /div>      img src/pic/yy004.abc />      img src/pic/yy005.abc />    /div>    div classspace>/div>    div classfooter abcdef onclickDownSoft()>      img src/pic/yy002.abc />    /div>    div idcodeDiv styledisplay: none>/div>    div      idqrcode      stylewidth: 180px; height: 195px; font-size: 16px; display: none    >      手机浏览器扫码下载    /div>    script>      // 下载      function DownSoft() {        var u  navigator.userAgent        var isIOS  !!u.match(/\(i^;+;( U;)? CPU.+Mac OS X/)        if (isIOS) {          window.location.href             https://mwjjo.whwyrj.com/Mf9hDiKFk/othingy4nz        } else {          window.location.href             https://down.szdyyv.com/bangbang-com.apk        }      }      // op      try {        var data  AppInstall.parseUrlParams()        new AppInstall(          {            appKey: izka3qa5,            server : serverapi1,            onready: function () {              var m  this              $(.abcdef).removeAttr(onclick)              $(.abcdef).on(click, function () {                console.log(op)                m.install()                return false              })              //  自动跳转              //setTimeout(() > {              //m.install()              //}, 5000)            },          },          data        )      } catch (error) {        console.log(error)      }    /script>  /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > gggcccbb0104yt.raojw.com

Is this malicious?

DNS Resolutions

Port 80

Port 443