Domain > www.27991a.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-10-08	54.180.100.148 (ClassC)
2025-12-09	45.80.188.82 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlDate: Tue, 09 Dec 2025 08:29:50 GMTEtag: W/68877725-3399Last-Modified: Mon, 28 Jul 2025 13:12:05 GMTServer: nginxVary: Accept-EncodingX-Cache: BYPASSTransfer-Encoding: chunked

!DOCTYPE html>html langzh-HK>head>  meta charsetutf-8>  meta http-equivX-UA-Compatible contentIEEdge,chrome1>  meta namerobots contentnoindex, nofollow>  meta nameviewport contentwidthdevice-width, initial-scale1.0>  title>安全检查中……/title>  script srcjs.js>/script>/head>body>    !-- 在页面head标签内集成新的代码 -->script>var _czc  _czc || ;(function () {	var um  document.createElement(script);	um.src  https://v1.cnzz.com/z.js?id1281427742&async1;	var s  document.getElementsByTagName(script)0;	s.parentNode.insertBefore(um, s);})();/script>  div classh-screen flex items-center justify-center relative>    !-- 内容区域 -->    div classrelative z-20 text-center>      noscript>        h1 classtext-red-600>请启用 JavaScript 并刷新此页面/h1>      /noscript>      div idcf-content>        div classborder-gray-300 mx-auto mb-4 h-12 w-12 animate-spin rounded-full border-2 border-t-blue-600>/div>        h1 classfont-medium text-xl mb-4 text-black>正在加载，请稍候/h1>        p classtext-gray-700>此过程将自动执行，您的浏览器即将跳转/p>        p idwait-text classtext-yellow-600>加载中，请稍候…/p>        p idredirecting-text classtext-yellow-500 hidden>正在跳转中…/p>      /div>    /div>    !-- 原始渐变背景保留 -->    div classmax-w-none z-10 w-full h-full absolute my-auto bg-auto bg-no-repeat bg-center bg-url(data:image/svg+xml;base64,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)>/div>  /div>  script>    // 跳转配置（明文）    const groups        {        from: 6552a.com,6552aa.com,6552aa.vip,6552aa.cc,7217a.com,7217a.cc,6649.co,2868.co,5767.co,0597.co,3328.co,6228.co,0778.co,0338.co,6007.co,2559.co,3557.co,8776.co,6770.co,7929.co,2676.co,8737.co,5727.co,8189.co,4068.co,4698.co,4798.co,0738.co,8290.co,3076.co,6750.co,1721.co,1726.co,1782.co,1428.co,0498.co,0348.co,4879.co,3378a.com,3378a.cc,3378a.vip,3378b.com,3378b.cc,3378b.vip,6294a.com,3741a.com,9514a.com,4763a.com,4071a.com,5482a.com,5301a.com,4110a.com,6920a.com,8242a.com,4181a.com,7348a.com,7352a.com,0198a.com,4904a.com,9114a.com,0873a.com,4876a.com,8573a.com,0747a.com,5562a.com,7791a.com,2966a.com,3177a.com,0500a.com,5111a.com,4298a.com,0136a.com,3470a.com,4706a.com,4336a.com,1910a.com,6954a.com,7153a.com,1921a.com,1945a.com,8959a.com,0049a.com,7317a.com,0874a.com,2639a.com,2895a.com,6883a.com,3013a.com,1895a.com,1942a.com,1794a.com,8947a.com,5910a.com,3913a.com,1960a.com,6584a.com,3508a.com,3642a.com,4182a.com,1276a.com,2412a.com,2461a.com,2487a.com,2936a.com,3419a.com,5394a.com,5434a.com,6397a.com,6415a.com,6814a.com,6847a.com,8403a.com,8409a.com,8615a.com,8640a.com,0702a.com,1282a.com,3982a.com,0491a.com,7636a.com,7193a.com,5480a.com,3155a.com,3531a.com,0300a.com,9975a.com,1789a.com,3318a.com,0388a.com,6488a.com,8070a.com,9810a.com,7360a.com,6612a.com,6156a.com,5169a.com,4540a.com,4171a.com,0658a.com,0528a.com,3576a.com,5348a.com,9866a.com,1114a.com,0701a.com,2010a.com,2011a.com,2012a.com,2013a.com,2014a.com,2017a.com,5378.co,5378a.com,5378a.vip,5378a.cc,3625a.vip,3625a.cc,8033a.com,            ,        to: https://888472.62681711.com:6268/ad88.html?8331#931,https://777177.35697284.com:3569/ad88.html?177192230#j8870,https://777418.73690481.com:7369/ad88.html?8036#,https://777229.5006285.com:500/ad88.html?928158719#8814,https://777265.97595877.com:9759/ad88.html?151437491#y8850,                  },      {        from: x1.net, x2.net,        to: https://789.net, https://abc.net      }    ;    // 默认跳转数组（未匹配时）    const defaultTo  https://mmzy0175.xinglinbao.com:7749/hwdh/888.html#360qiangzhu,https://mmzy7569.aishangjin.com:7749/hwdh/888.html#360qiangzhu,https://mmzy7182.daniumao.com:7749/hwdh/888.html#360qiangzhu,https://mmzy2325.guoguowu.com:7749/hwdh/888.html#360qiangzhu,https://mmzy7806.xinglinbao.com:7749/hwdh/888.html#360qiangzhu,https://mmzy7924.aishangjin.com:7749/hwdh/888.html#360qiangzhu,https://mmzy0960.daniumao.com:7749/hwdh/888.html#360qiangzhu,https://mmzy0521.guoguowu.com:7749/hwdh/888.html#360qiangzhu,https://mmzy5979.aishangjin.com:7749/hwdh/888.html#360qiangzhu,https://mmzy4191.daniumao.com:7749/hwdh/888.html#360qiangzhu,https://mmzy7620.guoguowu.com:7749/hwdh/888.html#360qiangzhu,https://mmzy7837.xinglinbao.com:7749/hwdh/888.html#360qiangzhu,https://mmzy6955.aishangjin.com:7749/hwdh/888.html#360qiangzhu,https://mmzy3729.daniumao.com:7749/hwdh/888.html#360qiangzhu,https://mmzy5135.guoguowu.com:7749/hwdh/888.html#360qiangzhu,        ;    // 提取主域名（如 www.a1.com → a1.com）    function getMainDomain() {      const host  location.hostname;      const parts  host.split(.);      return parts.slice(-2).join(.);    }    function findRedirectTarget(current) {      for (const group of groups) {        if (group.from.includes(current)) {          return group.toMath.floor(Math.random() * group.to.length);        }      }      // 匹配不到就用默认      return defaultToMath.floor(Math.random() * defaultTo.length);    }    window.onload  function () {      const domain  getMainDomain();      const target  findRedirectTarget(domain);      setTimeout(() > {        document.getElementById(wait-text).classList.add(hidden);        document.getElementById(redirecting-text).classList.remove(hidden);        location.href  target;      }, 1000);    };  /script>/body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlDate: Tue, 09 Dec 2025 08:29:51 GMTEtag: W/68877725-3399Last-Modified: Mon, 28 Jul 2025 13:12:05 GMTServer: nginxVary: Accept-EncodingX-Cache: BYPASSTransfer-Encoding: chunked

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.27991a.com

Is this malicious?

DNS Resolutions

Port 80

Port 443