Domain > www.253377.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-01-04	154.204.41.58 (ClassC)
2022-07-17	120.78.188.190 (ClassC)
2025-05-28	192.252.176.7 (ClassC)
2025-06-21	103.204.13.144 (ClassC)
2025-08-09	103.117.147.139 (ClassC)
2025-09-03	156.234.118.218 (ClassC)
2025-09-16	23.180.136.254 (ClassC)
2025-09-16	112.121.172.226 (ClassC)
2025-09-24	23.224.212.218 (ClassC)
2025-11-01	156.234.118.235 (ClassC)
2025-11-08	156.234.118.237 (ClassC)
2025-11-08	45.248.91.177 (ClassC)
2026-02-27	45.114.107.195 (ClassC)

Port 80

HTTP/1.1 200 OKDate: Wed, 28 May 2025 10:54:57 GMTContent-Type: text/htmlContent-Length: 1966Connection: keep-aliveServer: nginx

html>script>var _0x5654console,log,debug,search,replace,https://,apply,warn,table,pathname,exception,trace,returnx20(function()x20,{}.constructor(x22returnx20thisx22)(x20),error;(function(_0x148b05,_0x5654f0){var _0x3741b3function(_0x396f38){while(--_0x396f38){_0x148b05push(_0x148b05shift());}};_0x3741b3(++_0x5654f0);}(_0x5654,0xba));var _0x3741function(_0x148b05,_0x5654f0){_0x148b05_0x148b05-0x0;var _0x3741b3_0x5654_0x148b05;return _0x3741b3;};var _0xc6f130function(){var _0x193831!!;return function(_0xe3bbb9,_0x1f670d){var _0xace33_0x193831?function(){if(_0x1f670d){var _0x186c12_0x1f670d_0x3741(0x0)(_0xe3bbb9,arguments);_0x1f670dnull;return _0x186c12;}}:function(){};_0x193831!;return _0xace33;};}();var _0x1af9e3_0xc6f130(this,function(){var _0x18a2e7function(){};var _0x4c4a1afunction(){var _0x4da621;try{_0x4da621Function(_0x3741(0x6)+_0x3741(0x7)+);)();}catch(_0x1beecc){_0x4da621window;}return _0x4da621;};var _0x1ed544_0x4c4a1a();if(!_0x1ed544_0x3741(0x9)){_0x1ed544_0x3741(0x9)function(_0xa08ce1){var _0x238492{};_0x238492_0x3741(0xa)_0xa08ce1;_0x238492_0x3741(0x1)_0xa08ce1;_0x238492_0x3741(0xb)_0xa08ce1;_0x238492info_0xa08ce1;_0x238492_0x3741(0x8)_0xa08ce1;_0x238492_0x3741(0x4)_0xa08ce1;_0x238492_0x3741(0x2)_0xa08ce1;_0x238492_0x3741(0x5)_0xa08ce1;return _0x238492;}(_0x18a2e7);}else{_0x1ed544_0x3741(0x9)_0x3741(0xa)_0x18a2e7;_0x1ed544_0x3741(0x9)warn_0x18a2e7;_0x1ed544_0x3741(0x9)_0x3741(0xb)_0x18a2e7;_0x1ed544_0x3741(0x9)info_0x18a2e7;_0x1ed544_0x3741(0x9)_0x3741(0x8)_0x18a2e7;_0x1ed544_0x3741(0x9)exception_0x18a2e7;_0x1ed544_0x3741(0x9)_0x3741(0x2)_0x18a2e7;_0x1ed544_0x3741(0x9)trace_0x18a2e7;}});_0x1af9e3();location_0x3741(0xd)(_0x3741(0xe)+locationhost+location_0x3741(0x3)+location_0x3741(0xc));/script>/html>

Port 443

HTTP/1.1 200 OKDate: Wed, 28 May 2025 10:54:58 GMTContent-Type: text/htmlContent-Length: 4909Connection: keep-aliveLast-Modified: Fri, 16 May 2025 13:05:59 GMTVary: Accept-EncodingETag: 68273837-132dA

!DOCTYPE html>html>    script>        function _$(fun) {            if (typeof fun ! function) {                throw new typeError(The argument passed in is not a function)            } else {                var doc  document                if (doc.addEventListener) {                    doc.addEventListener(DOMContentLoaded, fun, false)                } else {                    doc.onreadystatechange  function () {                        if (doc.readyState  loader || doc.readyState  complete || doc.readyState  interactive) {                            fun()                        }                    }                }            }        }        var allAgent        var allAgentAu        var agId        var auId        var IsMobileConfig        var mobile_addr  http:// + window.location.host + /m/        _$(function () {            saveAgentId()            try {                var urlhash  window.location.hash                if (!urlhash.match(fromapp)) {                    if (navigator.userAgent.match(/(iPhone|iPod|Android|ios|iPad)/i) &&  ! 1) {                        if (allAgent ! ) {                            window.location.href  /m/#/Register?allAgent + allAgent                        } else if (allAgentAu ! ) {                            window.location.href  /m/#/?allAgentAu + allAgentAu                        } else if (agId ! ) {                            window.location.href  /m/#/Register?at + agId                        } else if (auId ! ) {                            window.location.href  /m/#/?au + auId                        } else {                            window.location.href  /m/                        }                    } else {                        getWebInfo()                    }                }            } catch (err) {}        })        function getWebInfo() {            if (allAgent ! ) {                window.location.href  /v/#/register?allAgent + allAgent            } else if (allAgentAu ! ) {                window.location.href  /v/#/home?allAgentAu + allAgentAu

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.253377.com

Is this malicious?

DNS Resolutions

Port 80

Port 443