Domain > www.ybe88.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
Email	yangshuo99889@outlook.com
NameServer	F1G1NS2.DNSPOD.NET
Created	2019-09-04 18:45:10
Changed	2019-09-18 05:34:23
Registrar	Fujian Domains, Inc.

DNS Resolutions

Date	IP Address
2018-08-11	103.100.141.44 (ClassC)
2026-02-10	154.13.5.245 (ClassC)

HTTP/1.1 200 OKContent-Security-Policy-Report-Only: script-src self nonce-okcuEnPP6vPp6KqUHma3XQ https://*.lkwdfkhi.com https://*.njmkfm.com https://*.fuahfm.com https://*.ew91.com https://*.rwnqoja.com https://*.gzsybxw.com https://*.fghjnm.com https://*.cklou.com https://*.bspprnz.com https://*.gynmedu.com https://*.cnzz.com https://*.shujupie.com https://*.byted-static.com https://*.baidu.com; object-src none; base-uri selfContent-Type: text/html;charsetutf-8Date: Mon, 09 Feb 2026 23:34:35 GMTETag: 1770680075Last-Modified: Mon, 09 Feb 2026 23:34:35 GMTServer: nginxX-Cache: HIT, server, diskX-Content-Hash256: VdJH9M/A0f0iQcuuLqV5+OXyVXUWtDZdT9hU+bVfIGoTransfer-Encoding: chunked

!DOCTYPE html>html langen>head>meta charsetutf-8 />meta http-equivX-UA-Compatible contentIEedge />meta nameviewport contentwidthdevice-width, initial-scale1, shrink-to-fitno, maximum-scale1.0, user-scalable0 />meta namecsp-nonce contentokcuEnPP6vPp6KqUHma3XQ>link reldns-prefetch hrefhttps://sta-al.cklou.com/>link relpreconnect hrefhttps://sta-al.cklou.com/ crossorigin>title>/title>meta namecrypt_key contentnz52h7tsz68edd85>meta namec contenthome>link relicon typeimage/x-icon classjs-site-favicon hrefhttps://sta-al.cklou.com/statics/rx/images/favicon.png>script srchttps://sta-al.cklou.com/statics/js/qrcode.min.js>/script>script srchttps://sta-al.cklou.com/statics/js/crypto-js.min.js>/script>script srchttps://sta-al.cklou.com/statics/rx/js/jquery.min.js>/script>script nonceokcuEnPP6vPp6KqUHma3XQ> const cryptKey  document.querySelector(metanamecrypt_key).getAttribute(content); window.SITE  { decrypt_key: cryptKey, } /script>script srchttps://sta-al.cklou.com/statics/js/loading.js?v1432>/script>style> html, body { width: 100%; height: 100%; background-color: #ededed; margin: 0; } a { cursor: pointer; color: #000; text-decoration: none; outline: 0 none; -webkit-transition: all 0.2s linear; -moz-transition: all 0.2s linear; -ms-transition: all 0.2s linear; transition: all 0.2s linear; } .enter-container { box-sizing: border-box; margin: 0 auto; max-width: 500px; padding: 5% 2%; position: relative; text-align: center; } .enter-container .logo-wrapper { width: 110px; height: 110px; margin: 0 auto; border-radius: 50%; display: flex; align-items: center; justify-content: center; } .enter-container .logo-wrapper .img-logo { height: 80px; } .enter-container .txt-title { font-size: 15px; font-weight: 700; line-height: 40px; color: #000; } .enter-container .txt-content { color: #000; font-size: 12px; font-weight: 500; line-height: 25px; } .enter-container .txt-enter { background: linear-gradient(#f8922d, #ff2f00); color: #fff; cursor: pointer; flex: 1 1; line-height: 40px; margin: 20px 0; padding: 0 10px; border-radius: 8px; } .enter-container .txt-saveqr { margin: 20px 0; align-items: center; background: #fff; color: #000; cursor: pointer; display: flex; font-size: 14px; height: 40px; justify-content: center; line-height: 40px; } .enter-container .txt-saveqr .qrcode { margin-right: 4px; } .domain-txt a{ color:#0714c5; font-weight: 700; } /style>/head>body classenter-content pc-enter-content>div classenter-container>div classlogo-wrapper>img classimg-logo src/static/images/logo.png>/div>div classtxt-title data-decryptUYLmW5iTJeu9dhGAUIZzOA data-targettext>/div>div classtxt-content data-decryptQ-69gicfsv1sm06pP1yVtens6PSeJj3a_NtoxRUU3Ac2N86SKyTtmd3ymPxeg_ha data-targettext>/div>div classtxt-content data-decrypt7myYl7jEsx6B6Bq6GIQEzHjexz8RxkQbJ49Nw2xTbYSqumbNez4jlTiJIcGGdyL7i4cFkGzBP1PMfWoFyBprjw data-targettext>/div>a hrefif.html>div classtxt-enter data-decrypt7T_e1qDa5I7jYwuMncCBFsEX4tUFDo9JK2gimfMtDIM data-targettext>点此进入/div>/a>div classdomain-txt>span data-decryptvzRaqRrT3BDLD9wd9PTXdQ data-targettext>/span>a href# idcurrent-host>/a>/div>div classdomain-txt>a href# idcurrent-host-www>/a>/div>div classtxt-content data-decryptieOp1WJq454cr88NF64YbDdXcDKk6lgyG1hxMqB2Ukw data-targettext>/div>div classtxt-content data-decryptBZYts9R3Dz5Zhwm5CcPIZzF8QFknIGx1x7vEAoOFrGVoHNlgMsomCPt4GJUchxrHLyh06TRhO3sp9uaSbxL3jrJYO8MEVDyut3UaxRuQDWTGYeUppi13NJ3ST6Mw5Zfz data-targettext>/div>div classtxt-content>span data-decryptUjZVz_di59z3MZu-x2yCLG9DujZwsXV1RgZ3eEkly5M data-targettext>/span>span data-decryptUfVBIvuukWoN-saDYDmbqmHv8DA5qtG1BgFGiJlGwVc data-targettext>/span>span data-decryptcxQagg31ebPFFP-9v35CeJfcYwEB6dj5dG4rEjb768s data-targettext>/span>/div>div classtxt-saveqr iddownloadQRCode>div classqrcode idqrcodeSmall stylewidth:20px; height:20px;>/div>span data-decrypt_mxM_3Oq9wdrSPJHMq7RGA data-targettext>保存二维码/span>/div>div classtxt-content>span data-decryptun3BjhmQlmNXuItonEnfXg1S8BYFZk3x9AYx6W1e35FhaNDjXqTtXk1noYUmYABc data-targettext>/span>span stylecolor:#0714c5 data-decryptnyqEiA7672Che1ObvHtoBp7-OP4JaUDAODGKE4HjiLn8c1xVqi91hzrn_u31jltX data-targettext>/span>/div>div classtxt-content data-decrypt_cb8w6s96nbDyujusZYA0OGz5NDdPPeFEsiqqJcCd9FL2ZdiRFfDib3wSiy1j-CG data-targettext>/div>/div>div idqrcode stylewidth:200px; height:200px; position: absolute; bottom: 0; left: 0; z-index: -1; visibility: hidden;>/div>span idnewURL styledisplay:none; data-urlwX8NOzcYe1spg0I9cXtKHSReQjt3tp0sgfM5RNP9flFepj7PCxYjSIsEW0pLLWdYYe_wMDmq0bUGAUaImUbBVw>/span>script nonceokcuEnPP6vPp6KqUHma3XQ> var host  document.domain; var qrcode  new QRCode(document.getElementById(qrcode), { width: 200, height: 200 }); qrcode.makeCode(https://+host+/home.html); var qrcodeSmall  new QRCode(document.getElementById(qrcodeSmall), { width: 20, height: 20 }); qrcodeSmall.makeCode(host); function downloadQRCode() { var canvas  document.querySelector(#qrcode canvas); if (!canvas) { return; } var imgData  canvas.toDataURL(image/png); var link  document.createElement(a); link.download  host + /home.png; link.href  imgData; document.body.appendChild(link); link.click(); document.body.removeChild(link); saveDataURLasPNG(imgData, qrcode.png); }  function saveDataURLasPNG(dataUrl, filename  qrcode.png) {  function downloadBlobUrl(blob) { const url  URL.createObjectURL(blob); const a  document.createElement(a); a.href  url; a.download  filename; document.body.appendChild(a); a.click(); a.remove(); URL.revokeObjectURL(url); }; fetch(dataUrl) .then(res > res.blob()) .then(downloadBlobUrl) } document.getElementById(downloadQRCode).addEventListener(click, function () { downloadQRCode(); }); (function () { var now  Math.floor(Date.now() / 1000 / 600); const js https://gg-al.cklou.com/js.txt?fileplay&v + now; loadEncryptedJs(js,script); const domain https://gg-al.cklou.com/js.txt?filedomain/domain_ytlc3&v + now; loadEncryptedJs(domain,script); })();/script>/body>script nonceokcuEnPP6vPp6KqUHma3XQ> var _czc  _czc || ; (function () { var um  document.createElement(script); um.src https://v1.cnzz.com/z.js?id1281438447&async1; var s  document.getElementsByTagName(script)0; s.parentNode.insertBefore(um, s); })();/script>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.ybe88.com

Is this malicious?

Whois

DNS Resolutions

Port 443