Domain > deoger.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-08-18	104.21.16.154 (ClassC)
2024-05-01	104.26.4.189 (ClassC)
2024-07-05	104.26.5.189 (ClassC)
2024-08-05	172.67.68.111 (ClassC)
2025-04-25	81.17.18.196 (ClassC)
2025-06-09	23.82.12.32 (ClassC)
2026-01-10	23.105.175.18 (ClassC)
2026-01-14	23.105.175.16 (ClassC)

HTTP/1.1 200 OKDate: Fri, 12 Jan 2024 21:45:58 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-alivelast-modified: Mon, 11 Dec 2023 10:07:49 GMTvary: Accept-Encoding

!DOCTYPE html>html classjs sizes customelements history pointerevents postmessage webgl websockets cssanimations csscolumns csscolumns-width csscolumns-span csscolumns-fill csscolumns-gap csscolumns-rule csscolumns-rulecolor csscolumns-rulestyle csscolumns-rulewidth csscolumns-breakbefore csscolumns-breakafter csscolumns-breakinside flexbox picture srcset webworkers langen>head>script>        var flagSendAdReq  false;        var flagSendAdRes  false;        const ENTER  1;        const SEND  1.5;        const GET_AD  2;        var changeNum  0;        function postBack(ans) {            var para  arrUrl1;            xmlhttp  new XMLHttpRequest();            xmlhttp.open(GET, https://postback.commdience.com/api/notice/conv/launch/gad/gx? + para + &ans + ans, true);            xmlhttp.send();        }        var url  window.location.href;        var arrUrl  url.split(?);        if (arrUrl.length > 1) {            postBack(ENTER);            document.addEventListener(DOMContentLoaded, function (e) {                let adContainer  document.getElementById(adContainer);                var observe  new MutationObserver(function (mutations, observe) {                    for (let i  0; i  mutations.length; i++) {                        changeNum++                        if (((mutationsi.target.name && mutationsi.target.name.includes(iframe)) || mutationsi.target.name  undefined) && !flagSendAdRes) {                            if (changeNum > 2 && changeNum  5 && !flagSendAdReq) {                                postBack(SEND);                                flagSendAdReq  true;                            } else if (changeNum > 5 && mutationsi.target.clientHeight > 250 && mutationsi.attributeName ! style && mutationsi.attributeName ! null && !flagSendAdRes) {                                postBack(GET_AD);                                flagSendAdRes  true;                                observe.disconnect()                            }                        }                    }                });                observ

Subdomains

Date	Domain	IP
postback.deoger.com	2025-09-01	23.82.12.30
www.deoger.com	2024-05-14	104.26.4.189

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > deoger.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains