Domain > 29416258.h40.508hdusr.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-07-02	104.166.169.132 (ClassC)
2025-11-14	156.225.111.22 (ClassC)

HTTP/1.1 403 ForbiddenDate: Fri, 14 Nov 2025 21:23:58 GMTContent-Type: image/jpegContent-Length: 4581Connection: keep-aliveServer: F-WEBETag: 6215a83c-11e5Origin-Agent-Cluster: ?0X-Ser: i24687_c6956, i2103129_c28197, i1984077_c24029, i1932519_c23621X-Cache: MISS from i1932519_c23621(cloudsvr)

����ExifII*��DuckyP��mhttp://ns.adobe.com/xap/1.0/?xpacket begin idW5M0MpCehiHzreSzNTczkc9d?> x:xmpmeta xmlns:xadobe:ns:meta/ x:xmptkAdobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        > rdf:RDF xmlns:rdfhttp://www.w3.org/1999/02/22-rdf-syntax-ns#> rdf:Description rdf:about xmlns:xmpMMhttp://ns.adobe.com/xap/1.0/mm/ xmlns:stRefhttp://ns.adobe.com/xap/1.0/sType/ResourceRef# xmlns:xmphttp://ns.adobe.com/xap/1.0/ xmpMM:OriginalDocumentIDxmp.did:5E028C0D1AF5E311A593AF462ED4D6D2 xmpMM:DocumentIDxmp.did:CC9AA904F51D11E38D96A9BE352C7749 xmpMM:InstanceIDxmp.iid:CC9AA903F51D11E38D96A9BE352C7749 xmp:CreatorToolAdobe Photoshop CS5 Windows> xmpMM:DerivedFrom stRef:instanceIDxmp.iid:5F028C0D1AF5E311A593AF462ED4D6D2 stRef:documentIDxmp.did:5E028C0D1AF5E311A593AF462ED4D6D2/> /rdf:Description> /rdf:RDF> /x:xmpmeta> ?xpacket endr?>��&Adobed��+��ۄ							������� 4#C@3�6	�3 !1q�2rQa�@A��R��B#0��C��!1Q �Aa�q��0@���P`������3��H�A� (3$������A� ��N��A)�y�ӆ>�z�pjR(3$�:ӟ:���*8�)�y�Y�6����9�)�yȚ�S3f\}�PfH$>^~?O����2@!�ŠPfH����#Ȝ�؛p(3$��tJm�6�to�d�|�ޞƜ��(:�^(3$d��̐��1?��m��-#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#������.�����+z�ɤ��}���1��>���o&�*���U�&����tb��Qъ:1D�I���Q�V�J��{g:��C�!HW��F�UoD�|g�֒��I()hA!��dn�Q�V�J��{^y���JS��n���Fi8r�r��3ꣀ��oĴ��S��~�B���UoC�5�Y��(����\f}8çt��aӌ:q�#����V��*R!��\���uŽ�m��M�Jm�eu*ɥ8��P��+z&�rXf:�f1���}�D����JeoɂٮK���LU�	�%4p�1q�����Y���,�Q׋�kg���q�WSjz4V��j8���+���.-��`l��6��`l��6��`l��k����������?H��?H��?�΍������W#n�F�\���ur6��m��۫��W#n�F�\���ur6��m��۫��W#n�X�M:�ܙ��S�s�&t�����	�-�9w;�gKtjv���������X>+�`���‒;���J������J!�����?��~+��V���/�X^�˴(�Gw;�gKtf�Rt{�ɨ�Ҫ�^j�����@�.�pL�n��*N�z,~ª�-7�{�Gi_#û�hQt2�wΖ��Ҥ���O;���9���Vκ��i潝�����+�.��F������T�vƳދ���@�7�zC�hF��ȴ;������3��2�m-4���v&4�k@їs�&t�JӢ�� ���, ������R�wΖ�����3��/�Jcf���O�1��%�فJ���ukA�!L;ey��؟)�+���r���7i�be��n�R�0�k��fc�%$��f�:6�TZ��	�g�%px�?�u��?�^K�Ƹ�I�M�TUf3v�!��V��u�K��:��@��hJ	n�~��������O�Ҥ���+8�{��1G ���>eMڌf2�9��Ȟ|�Z��}���rv#s���Xl���/�D켹��34qF�DC�k�U���rL�m2��;�vs^���ܳ�P?YJ����wAg�C�ҝ鹈���3h��ڎ��F�����(w�j6�s�Y�_b��!k��l�Z۩��g� �0�FZrB�v��+7���ca�N缢bO-�5W�fZ\��U�ɬl��d�x���s���s��e|b�t�ֶ�m��ڳ��X��״�,�.�&1���2�wΖ�����3���.�pL�o�˹�dh�Eu��/�/�/�/�/�/�/�/�/�/�/�/�/�/�/�/�/�/ 4է�;��?!��P�{�x������Ǿ�|O���{�x������Ǿ�|O���{�x��u�D��s폳g9��ٳ��c���}��JN��˸~)��?I�����?I�����?I����DJ\L�>��U�d�/5\{m��l��z_I�7�9϶8k9��}T��)��o_�+�g�|���;8Y�}���Y�vC�a5�%&����0��*\���>���9N�s�lp��s��w��%�-g�Xc��E���&pa&�����g�9N�s�lp�� �w�D�_Ll���o������.�)���s�.��Knq��V.���g9��5t_��ߙ˿3�~g.������6i�G�9϶>͜��%u u�t�hm��ҥ��h��WL�)сw�T�t-�������,�e�e�U�ԝX�Ұ��9϶8m��S�X�B�&K:*�����r뽄U��r+�FM���!�Q�c� -��ɛK���0��$&Ƽ�t��적�,�>��8������d �,��li7C��\y���BZ��ji���Z�����Ԯ�Ĭސ�b��f��SU���s폳g9��ٳ��c��ǫ+�	s�9s�9s�9s�9s�9s�9s�9s�9s�8��%ͱ��?!����?!�����@    I$A @�I$�H$�AI$��?�ҶU_��6lٳf͛6lٳf͛4��d�ѳ�k������j���*4P%z���s�s�s�s�s�r�:����AF�}7f�Q��r���-g@�!��wu�L�	E����cP���Lvo5�~�/���!��~�`\���S�|��h��k���ZcS�-rY�Yt�7���3�j��Տ��*�5��9��P�ټ�i���N��:��&���?.��1e;VV;�q��٨:���L�l�~N���h��k���#������8:z��I3h3��!��&�PDPv�}F���b3��E��:o+Q��л����voC��-��%%%%%%�:%����ٮ�l.K�N��QnN�7��e���t��I��^�V��> $U,0U���\��R�N�!Dr�q��d�ے��G:��5��vj�T��V�;!NK������ 	�)��oo\;P�D��e�����t�OX���+m�F��r�!P����(Y�xm� �k?AL��Q١�h�z�5�f�ѣ�����oQ�E�j��YTJP�W�Z���J��˪��!�N�.�����E��G��t����N�vk��H%��f뮺뮺뮺뮺�?������?����?����

Port 443

HTTP/1.1 403 ForbiddenDate: Fri, 14 Nov 2025 21:23:59 GMTContent-Type: image/jpegContent-Length: 4581Connection: keep-aliveServer: F-WEBETag: 6215a83c-11e5Origin-Agent-Cluster: ?0X-Ser: i24687_c6956, i2103129_c28197, i1984077_c24029, i1932519_c23621X-Cache: MISS from i1932519_c23621(cloudsvr)

Subdomains

Date	Domain	IP
18616190.h40.508hdusr.com	2025-02-02	38.175.43.254
32618764.h40.508hdusr.com	2025-05-24	156.225.111.18
29576765.h40.508hdusr.com	2025-11-14	156.225.111.21
29416258.h40.508hdusr.com	2025-11-14	156.225.111.22

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 29416258.h40.508hdusr.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains