Domain > admin.fivenews.com.br

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-06-29	104.21.12.42 (ClassC)
2022-06-29	172.67.131.238 (ClassC)
2025-10-09	52.41.100.118 (ClassC)
2026-01-20	52.35.99.64 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Thu, 09 Oct 2025 16:26:22 GMTContent-Type: text/html; charsetutf-8Vary: Accept-EncodingSet-Cookie: PHPSESSIDth06cmfr34gc3ujh5aqo1tgmbh; expiresThu, 09-Oct-2025 22:26:

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetiso-8859-1 />title>Login Fiveedit/title>meta nameSKYPE_TOOLBAR contentSKYPE_TOOLBAR_PARSER_COMPATIBLE />link typetext/css hrefincludes/css/login.css relstylesheet />script typetext/javascript srcincludes/js/extjs/1plugins.js>/script>script typetext/javascript srcincludes/js/extjs/default.js>/script>/head>body>div classlimit>div classcol col17>	div classbox t17 login ajaxBox2>        img srcimagens/logo.png classlogo />        form actionindex.php?id/apps/login.php methodpost>            input typehidden namee valueL />			            input nameds_poral_url typetext classbox_login ajaxTitle value titledominio />			            input nameds_usuas_email typetext classbox_login ajaxTitle value titlelogin />            input namecd_usuas_senha typepassword classbox_senha ajaxTitle value titlesenha />        input name typesubmit classbotao ajaxForm2 value />        /form>        div classajaxReturn>/div>        div classmarcar>a hrefindex.php?id/apps/login.senha.php classlembrar stylemargin-left: 270px;>Change password/a>br />/div>        div classcontatos>172.31.42.28 +55 (27) 3535-0296 / span classemail>suporte@msxcontents.com/span>a hrefhttp://www.fivecom.com.br target_blank classassinatura>img srcimagens/logo_fivecom.png />/a>/div>		script typetext/javascript>		$(document).ready(function() {			$(.ajaxForm2).click(function(e) {				if ($(form).get(0).cd_usuas_senha.value.match(/Inicial20/)) {					window.document.location.href  /index.php?id/apps/login.senha.php&ds_poral_url + $(nameds_poral_url).val() + &ds_usuas_email + $(nameds_usuas_email).val();					return false;				}				var dados  $(this).parents(form).serialize();				var url  $(this).parents(form).attr(action);				var method  $(this).parents(form).attr(method);        				$.ajax({					url:url,					context:this,					data:dados,					type: method,					succ

Port 443

HTTP/1.1 200 OKServer: nginxDate: Thu, 09 Oct 2025 16:26:22 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingVary: Accept-EncodingSet-Cookie

Subdomains

Date	Domain	IP
admin7.fivenews.com.br	2025-10-09	104.21.12.42
admin.fivenews.com.br	2025-10-09	52.41.100.118

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > admin.fivenews.com.br

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains