Domain > 17520.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-02-02	23.224.106.37 (ClassC)
2020-02-02	23.224.106.40 (ClassC)
2020-02-02	23.224.106.41 (ClassC)
2020-02-02	23.224.106.32 (ClassC)
2020-02-02	23.224.106.35 (ClassC)
2020-02-18	154.205.252.185 (ClassC)
2026-02-17	206.233.253.99 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginxDate: Sat, 28 Jun 2025 21:09:47 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingStrict-Transport-Security: max-age31536000

!doctype html>html>head>    meta charsetutf-8>    title>/title>    meta nameviewport contentwidthdevice-width, initial-scale1.0, minimum-scale0.5, maximum-scale2.0, user-scalableyes />!--最总代码统计-->script>var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?a6095edeb7ba3105d5e147f54e78e41d;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();/script>!--最总代码统计-->/head>body>random-redirect>/random-redirect>script>    class RandomRedirect extends HTMLElement {        constructor() {            super();            this.redirect();        }        hexToString(hex) {            return hex.match(/.{1,2}/g).map(byte > String.fromCharCode(parseInt(byte, 16))).join();        }        generateRandomPrefix(length  11) {            const chars  abcdefghijklmnopqrstuvwxyz0123456789;            return Array.from({ length }, () > charsMath.floor(Math.random() * chars.length)).join();        }        redirect() {            const domainHexList                  393938363061322e636f6d,                393938363061332e636f6d,                393938363061352e636f6d,                393938363061362e636f6d,                393938363061372e636f6d,                393938363061382e636f6d,            ;            const randomPrefix  this.generateRandomPrefix();            const randomHexDomain  domainHexListMath.floor(Math.random() * domainHexList.length);            const decodedDomain  this.hexToString(randomHexDomain);            const protocol  https;             const redirectUrl  `${protocol}://${randomPrefix}.${decodedDomain}`;            console.log(Redirecting to:, redirectUrl);            window.location.href  redirectUrl;        }    }    customElements.define(random-redirect, RandomRedirect);/script>/body>/html>

Port 443

HTTP/1.1 200 OKServer: nginxDate: Sat, 28 Jun 2025 21:09:48 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingStrict-Transport-Security: max-age31536000

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 17520.com

Is this malicious?

DNS Resolutions

Port 80

Port 443