Domain > 3950r.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-11-06	103.91.56.152 (ClassC)
2024-07-07	14.128.63.166 (ClassC)
2024-09-12	154.219.3.51 (ClassC)
2024-09-12	154.85.11.129 (ClassC)
2024-10-15	23.225.187.250 (ClassC)
2024-11-26	172.247.228.156 (ClassC)
2025-02-08	23.224.212.179 (ClassC)
2025-08-10	112.121.174.98 (ClassC)
2025-09-02	23.180.136.254 (ClassC)
2025-09-02	112.121.172.226 (ClassC)
2025-10-02	198.16.61.202 (ClassC)
2025-10-18	103.37.40.219 (ClassC)
2025-11-08	45.248.91.177 (ClassC)
2025-11-08	156.234.118.237 (ClassC)
2026-02-09	156.234.118.235 (ClassC)

Port 80

HTTP/1.1 200 OKDate: Thu, 02 Oct 2025 15:38:48 GMTContent-Type: text/htmlContent-Length: 1966Connection: keep-aliveServer: nginx

html>script>var _0x5654console,log,debug,search,replace,https://,apply,warn,table,pathname,exception,trace,returnx20(function()x20,{}.constructor(x22returnx20thisx22)(x20),error;(function(_0x148b05,_0x5654f0){var _0x3741b3function(_0x396f38){while(--_0x396f38){_0x148b05push(_0x148b05shift());}};_0x3741b3(++_0x5654f0);}(_0x5654,0xba));var _0x3741function(_0x148b05,_0x5654f0){_0x148b05_0x148b05-0x0;var _0x3741b3_0x5654_0x148b05;return _0x3741b3;};var _0xc6f130function(){var _0x193831!!;return function(_0xe3bbb9,_0x1f670d){var _0xace33_0x193831?function(){if(_0x1f670d){var _0x186c12_0x1f670d_0x3741(0x0)(_0xe3bbb9,arguments);_0x1f670dnull;return _0x186c12;}}:function(){};_0x193831!;return _0xace33;};}();var _0x1af9e3_0xc6f130(this,function(){var _0x18a2e7function(){};var _0x4c4a1afunction(){var _0x4da621;try{_0x4da621Function(_0x3741(0x6)+_0x3741(0x7)+);)();}catch(_0x1beecc){_0x4da621window;}return _0x4da621;};var _0x1ed544_0x4c4a1a();if(!_0x1ed544_0x3741(0x9)){_0x1ed544_0x3741(0x9)function(_0xa08ce1){var _0x238492{};_0x238492_0x3741(0xa)_0xa08ce1;_0x238492_0x3741(0x1)_0xa08ce1;_0x238492_0x3741(0xb)_0xa08ce1;_0x238492info_0xa08ce1;_0x238492_0x3741(0x8)_0xa08ce1;_0x238492_0x3741(0x4)_0xa08ce1;_0x238492_0x3741(0x2)_0xa08ce1;_0x238492_0x3741(0x5)_0xa08ce1;return _0x238492;}(_0x18a2e7);}else{_0x1ed544_0x3741(0x9)_0x3741(0xa)_0x18a2e7;_0x1ed544_0x3741(0x9)warn_0x18a2e7;_0x1ed544_0x3741(0x9)_0x3741(0xb)_0x18a2e7;_0x1ed544_0x3741(0x9)info_0x18a2e7;_0x1ed544_0x3741(0x9)_0x3741(0x8)_0x18a2e7;_0x1ed544_0x3741(0x9)exception_0x18a2e7;_0x1ed544_0x3741(0x9)_0x3741(0x2)_0x18a2e7;_0x1ed544_0x3741(0x9)trace_0x18a2e7;}});_0x1af9e3();location_0x3741(0xd)(_0x3741(0xe)+locationhost+location_0x3741(0x3)+location_0x3741(0xc));/script>/html>

Port 443

HTTP/1.1 200 OKDate: Thu, 02 Oct 2025 15:38:48 GMTContent-Type: text/htmlContent-Length: 4509Connection: keep-aliveLast-Modified: Wed, 01 Oct 2025 11:15:53 GMTVary: Accept-EncodingETag: 68dd0d69-119dA

!DOCTYPE html>html>    script>        ;(function () {            //  配置开关             // havePC  true（ pc + m 端都有），havePC  false（只有 m 端）            var havePC  true            // 获取 URL 参数            function getUrlParams() {                var params  {}                var search  window.location.search.substring(1)                if (search) {                    var pairs  search.split(&)                    for (var i  0; i  pairs.length; i++) {                        var pair  pairsi.split()                        if (pair.length  2) {                            paramspair0  decodeURIComponent(pair1)                        }                    }                }                return params            }            // 判断是否为手机            function isMobile() {                return /Mobi|Android|iPhone|iPad|iPod/i.test(navigator.userAgent) || window.innerWidth  768            }            // 保存参数            function saveParam(key, value) {                if (value && value ! null && value ! undefined) {                    localStorage.setItem(key, value)                    return value                }                return             }            // 生成 m 端 跳转链接            function getMobileUrl(params) {                // 保存参数到本地 localStorage                var allAgent  saveParam(allAgent, params.allAgent)                var allAgentAu  saveParam(allAgentAu, params.allAgentAu)                var agId  saveParam(agId, params.at)                var auId  saveParam(auId, params.au)                // 按优先级生成 m 链接                if (allAgent) return /m/#/Register?allAgent + allAgent                if (allAgentAu) return /m/#/?allAgentAu + allAgentAu                if (agId) return /m/#/Register?at + agId                if (auId) return /m/#/?au + auId                return /m/            }            // 生成 pc 端跳转链接            function getPCUrl(params) {                // 保存参数到本地 local

Subdomains

Date	Domain	IP
www.3950r.com	2026-01-04	156.234.118.235

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 3950r.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains