Help
RSS
API
Feed
Maltego
Contact
Domain > 945737671223947305.discordsays.com
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2024-07-08
104.18.41.78
(
ClassC
)
2024-07-25
172.64.146.178
(
ClassC
)
2024-10-21
104.18.8.105
(
ClassC
)
Port 80
HTTP/1.1 301 Moved PermanentlyDate: Sun, 16 Jun 2024 11:21:50 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveCache-Control: max-age3600Expires: Sun, 16 Jun 2024 12:21:50 GMTLocatio html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>cloudflare/center>/body>/html>
Port 443
HTTP/1.1 200 OKDate: Sun, 16 Jun 2024 11:21:50 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveCF-Ray: 894a6b2b9fd67592-SEACF-Cache-Status: DYNAMICAccess-Control-Allow-Origin !DOCTYPE html>html> head> meta charsetUTF-8 /> meta nameviewport contentuser-scalableno,widthdevice-width,initial-scale1.0,minimum-scale1.0,maximum-scale1.0,shrink-to-fitno /> meta nameapple-mobile-web-app-capable contentyes /> /head> body> iframe idiframe-container style position: fixed; top: 0; left: 0; bottom: 0; right: 0; width: 100%; height: 100%; border: none; margin: 0; padding: 0; overflow: hidden; z-index: 999999; >/iframe> script typetext/javascript nonceNDYsMzQsMTIzLDEyNywxOTIsMTU4LDEzNCwxMjE>RTCPeerConnection null;WebTransport null;/script>script nonceNDYsMzQsMTIzLDEyNywxOTIsMTU4LDEzNCwxMjE> function call() { // update per env, maybe use replacement python code or something eventually const DevID `910224161476083792`; const QAID `945748195256979606`; const ProdID `945737671223947305`; const AppID ProdID; /** * This is copied/edited from the PlayCo activity Ask Away. It does most of the things we need * so I could add a call to our API to get the current version. * * The iframe cant tell if its in a popout or not. If it is, it can * send messages to the main window via window.top.opener.postMessage * We cant assume a non-null window.top.opener means that were in the * popout, as it could be populated by an external site. (i.e. if an * external site calls window.open(https://discord.com/app)). We cant * ask for window.top.name, as our iframe security policy has disallowed * most parent window apis from the context of the iframe. * Instead, well broadcast messages to both the top and the opener top * This will spam the popout window, or any 3rd party window that opens * discord, which we are okay with, as the alternative solution is to * either extend the activitys required query params or relax iframe
Subdomains
Date
Domain
IP
879863686565621790.discordsays.com
2024-06-16
104.18.41.78
852509694341283871.discordsays.com
2024-07-18
172.64.146.178
902271654783242291.discordsays.com
2024-07-18
172.64.146.178
1078728822972764312.discordsays.com
2024-06-16
104.18.41.78
1007373802981822582.discordsays.com
2023-08-15
104.18.9.201
755827207812677713.discordsays.com
2024-06-16
172.64.146.178
235088799074484224.discordsays.com
2024-06-16
104.18.41.78
880218394199220334.discordsays.com
2023-08-15
104.18.9.201
947957217959759964.discordsays.com
2024-07-08
104.18.41.78
832012774040141894.discordsays.com
2024-06-16
172.64.146.178
945737671223947305.discordsays.com
2024-07-08
104.18.41.78
903769130790969345.discordsays.com
2024-06-16
172.64.146.178
1199271093882589195.discordsays.com
2024-06-13
104.18.41.78
832025144389533716.discordsays.com
2024-07-08
172.64.146.178
936929561302675456.discordsays.com
2024-06-16
172.64.146.178
1186785228182798556.discordsays.com
2024-06-16
104.18.41.78
1011683823555199066.discordsays.com
2024-07-08
172.64.146.178
1070087967294631976.discordsays.com
2024-07-23
104.18.41.78
1106787098452832296.discordsays.com
2024-07-06
104.18.41.78
1196535986226745437.discordsays.com
2024-06-16
104.18.41.78
1039835161136746497.discordsays.com
2024-06-16
172.64.146.178
1070111026420391997.discordsays.com
2024-06-16
172.64.146.178
1037680572660727838.discordsays.com
2024-06-16
172.64.146.178
1194351737264406548.discordsays.com
2024-07-22
172.64.146.178
1199817737728442569.discordsays.com
2024-07-08
104.18.41.78
www.discordsays.com
2024-07-22
104.18.41.78
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]