Domain > bearuoup.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-08-29	149.129.143.65 (ClassC)
2024-08-11	104.26.4.37 (ClassC)
2024-08-25	172.67.74.59 (ClassC)
2024-09-13	104.26.5.37 (ClassC)
2025-01-12	70.32.1.32 (ClassC)
2025-06-26	103.224.212.119 (ClassC)
2025-08-28	103.224.182.242 (ClassC)

HTTP/1.1 200 OKDate: Sat, 11 Nov 2023 11:26:34 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-alivelast-modified: Tue, 19 Sep 2023 03:55:08 GMTvary: Accept-Encoding

!DOCTYPE html>html langen classwf-montserrat-n6-active wf-montserrat-n4-active wf-montserrat-n5-active wf-active>head>script>        var flagSendAdReq  false;        var flagSendAdRes  false;        const ENTER  1;        const SEND  1.5;        const GET_AD  2;        var changeNum  0;        function postBack(ans) {            var para  arrUrl1;            xmlhttp  new XMLHttpRequest();            xmlhttp.open(GET, https://postback.hiddhorse.com/api/notice/conv/launch/gad/gx? + para + &ans + ans, true);            xmlhttp.send();        }        var url  window.location.href;        var arrUrl  url.split(?);        if (arrUrl.length > 1) {            postBack(ENTER);            document.addEventListener(DOMContentLoaded, function (e) {                let adContainer  document.getElementById(adContainer);                var observe  new MutationObserver(function (mutations, observe) {                    for (let i  0; i  mutations.length; i++) {                        changeNum++                        if (((mutationsi.target.name && mutationsi.target.name.includes(iframe)) || mutationsi.target.name  undefined) && !flagSendAdRes) {                            if (changeNum > 2 && changeNum  5 && !flagSendAdReq) {                                postBack(SEND);                                flagSendAdReq  true;                            } else if (changeNum > 5 && mutationsi.target.clientHeight > 250 && mutationsi.attributeName ! style && mutationsi.attributeName ! null && !flagSendAdRes) {                                postBack(GET_AD);                                flagSendAdRes  true;                                observe.disconnect()                            }                        }                    }                });                observe.observe(adContainer, { childList: true, attributes: true, subtree: true });            });        }    /script>script>        // 设备类型判断        function browserRedirect() {            var sUserAgent  navigator.userAgent.toLowerCase();            var b

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > bearuoup.com

Is this malicious?

DNS Resolutions

Port 443