Domain > 16970146.h40.508hdusr.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-07-12	104.166.169.132 (ClassC)
2025-11-15	143.14.2.52 (ClassC)
2025-12-14	154.85.94.27 (ClassC)
2026-03-04	154.85.94.28 (ClassC)

Port 80

HTTP/1.1 403 ForbiddenDate: Sat, 15 Nov 2025 06:09:20 GMTContent-Type: image/jpegContent-Length: 4581Connection: keep-aliveServer: F-WEBETag: 6215a83c-11e5Origin-Agent-Cluster: ?0X-Ser: i28855_c3473,

����ExifII*��DuckyP��mhttp://ns.adobe.com/xap/1.0/?xpacket begin idW5M0MpCehiHzreSzNTczkc9d?> x:xmpmeta xmlns:xadobe:ns:meta/ x:xmptkAdobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        > rdf:RDF xmlns:rdfhttp://www.w3.org/1999/02/22-rdf-syntax-ns#> rdf:Description rdf:about xmlns:xmpMMhttp://ns.adobe.com/xap/1.0/mm/ xmlns:stRefhttp://ns.adobe.com/xap/1.0/sType/ResourceRef# xmlns:xmphttp://ns.adobe.com/xap/1.0/ xmpMM:OriginalDocumentIDxmp.did:5E028C0D1AF5E311A593AF462ED4D6D2 xmpMM:DocumentIDxmp.did:CC9AA904F51D11E38D96A9BE352C7749 xmpMM:InstanceIDxmp.iid:CC9AA903F51D11E38D96A9BE352C7749 xmp:CreatorToolAdobe Photoshop CS5 Windows> xmpMM:DerivedFrom stRef:instanceIDxmp.iid:5F028C0D1AF5E311A593AF462ED4D6D2 stRef:documentIDxmp.did:5E028C0D1AF5E311A593AF462ED4D6D2/> /rdf:Description> /rdf:RDF> /x:xmpmeta> ?xpacket endr?>��&Adobed��+��ۄ							������� 4#C@3�6	�3 !1q�2rQa�@A��R��B#0��C��!1Q �Aa�q��0@���P`������3��H�A� (3$������A� ��N��A)�y�ӆ>�z�pjR(3$�:ӟ:���*8�)�y�Y�6����9�)�yȚ�S3f}�PfH$>^~?O����2@!�ŠPfH����#Ȝ�؛p(3$��tJm�6�to�d�|�ޞƜ��(:�^(3$d��̐��1?��m��-#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#�#������.�����+z�ɤ��}���1��>���o&�*���U�&����tb��Qъ:1D�I���Q�V�J��{g:��C�!HW��F�UoD�|g�֒��I()hA!��dn�Q�V�J��{^y���JS��n���Fi8r�r��3ꣀ��oĴ��S��~�B���UoC�5�Y��(����f}8çt��aӌ:q�#����V��*R!�޺��uŽ�m��M�Jm�eu*ɥ8��P��+z&�rXf:�f1���}�D����JeoɂٮK���LU�	�%4p�1q�����Y���,�Q׋�kg���q�WSjz4V��j8���+���.-��`l��6��`l��6��`l��k����������?H��?H��?�΍������W#n�Fݍ��ur6��m��۫��W#n�Fݍ��ur6��m��۫��W#n�X�M:�ܙ��S�s�&t�����	�-�9w;�gKtjv���������X>+�`���‒;���J������J!�����?��~+��V���/�X^�˴(�Gw;�gKtf�Rt{�ɨ�Ҫ�^j�����@�.�pL�n��*N�z,~ª�-7�{�Gi_#û�hQt2�

Port 443

HTTP/1.1 403 ForbiddenDate: Sat, 15 Nov 2025 06:09:21 GMTContent-Type: image/jpegContent-Length: 4581Connection: keep-aliveServer: F-WEBETag: 6215a83c-11e5Origin-Agent-Cluster: ?0X-Ser: i28855_c3473,

Subdomains

Date	Domain	IP
18616190.h40.508hdusr.com	2025-02-02	38.175.43.254
19688091.h40.508hdusr.com	2026-03-04	156.225.111.18
32618764.h40.508hdusr.com	2025-05-24	156.225.111.18
29173035.h40.508hdusr.com	2025-12-14	154.85.94.28
29576765.h40.508hdusr.com	2025-11-14	156.225.111.21
16970146.h40.508hdusr.com	2025-11-15	143.14.2.52
27730356.h40.508hdusr.com	2025-11-20	156.225.111.21
29416258.h40.508hdusr.com	2025-11-29	143.14.2.52

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 16970146.h40.508hdusr.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains