Domain > decodedemo.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-01-09	104.21.64.234 (ClassC)
2025-11-24	172.67.169.112 (ClassC)

HTTP/1.1 200 OKDate: Thu, 09 Jan 2025 15:38:25 GMTContent-Type: application/javascriptTransfer-Encoding: chunkedConnection: keep-aliveLast-Modified: Tue, 01 Jan 2019 17:55:15 GMTETag: W/710-57e693b514

const app  require(express)()const bodyParser  require(body-parser)const axios  require(axios)// const mandrill  require(mandrill-api/mandrill)// const mandrillClient  new mandrill.Mandrill(Y-OvmBE5VE641HnX5hqeWA)const multer  require(multer)()const moment  require(moment)const port  4201let level  let sendClientEmails  async (data, res) > {  let code  12345  let email  dataq5_email  let status  subscribed  let date  moment().format(MM/DD/YYYY)  let month  moment().format(MMM)  code  month.toUpperCase() + CHI  let firstName  dataq3_firstName  let lastName  dataq4_lastName  let config  {    auth: {      username: doesntmatter,      password: bde6c20e8b2fc90c655ffbd9f3a0fead-us15    }  }  switch (dataq6_whatLevel) {    case Level III: For the Ambitious:      level  beff44cf6e      break    case Level II: For the Motivated:      level  0f2a6acf1f      break    default:      level  ad51055507  }  let subscriber  {    members: {      email_address: email,      status: status,      merge_fields: {        FNAME: firstName,        STARTDATE: date,        LNAME: lastName,        CODE: code      }    }  }  await axios.post(`https://us15.api.mailchimp.com/3.0/lists/${level}`, subscriber, config).then((a, err) > err ? console.log(err) : console.log(a.data))}app.use(bodyParser.json())app.use(bodyParser.urlencoded({extended: true}))app.post(/, multer.array(), (req, res) > {  // console.log(received info, req, res)  var data  JSON.parse(req.body.rawRequest)  sendClientEmails(data, res)  // sendEmployeeEmails(data,res)})app.get(/, (req, res) > {  res.json({success: true})})app.listen(port, () > {  console.log(`Listening on port: ${port}`)})

Port 443

HTTP/1.1 200 OKDate: Thu, 09 Jan 2025 15:38:25 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveLast-Modified: Wed, 06 Dec 2017 00:42:55 GMTVary: Accept-EncodingAccess-Control

!DOCTYPE html>html>    head>        meta charsetutf-8>        title>React App/title>        link relstylesheet hrefhttps://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css integritysha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u crossoriginanonymous>        link relstylesheet hrefhttps://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css integritysha384-rHyoN1iRsVXV4nD0JutlnGaslCJuC7uwjduW9SVrLvRYooPp2bWYgmgJQIXwl/Sp crossoriginanonymous>        link relstylesheet hrefhttps://maxcdn.bootstrapcdn.com/font-awesome/4.6.3/css/font-awesome.min.css>        !--link relstylesheet href/wp-content/plugins/ddm-plan-for-it/assets/bundle.css>-->        link relstylesheet href/assets/bundle.css>    /head>    body>        div idapp>/div>        script srchttps://code.jquery.com/jquery-3.1.0.min.js integritysha256-cCueBR6CsyA4/9szpPfrX3s49M9vUU5BgtiJj06wt/s crossoriginanonymous>/script>        !-- Latest compiled and minified JavaScript -->        script srchttps://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js integritysha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa crossoriginanonymous>/script>        script srchttps://maps.googleapis.com/maps/api/js?keyAIzaSyA7EYFP-lJUP50sfySkpDzlEwu2apVfw1E>/script>        script srchttps://cdn.rawgit.com/davidjbradshaw/iframe-resizer/master/js/iframeResizer.contentWindow.min.js>/script>        !--script src/wp-content/plugins/ddm-plan-for-it/assets/bundle.js>/script>-->        script src/assets/bundle.js>/script>    /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > decodedemo.com

Is this malicious?

DNS Resolutions

Port 80

Port 443