Domain > advance.salaryfinance.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-06-16	18.133.0.8 (ClassC)
2025-08-09	18.132.184.209 (ClassC)
2025-12-24	35.177.80.32 (ClassC)
2026-01-28	35.178.98.201 (ClassC)

HTTP/1.1 302 FoundDate: Wed, 24 Dec 2025 15:51:00 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveServer: nginx/1.25.1Cache-Control: public,max-age60Location: /

!DOCTYPE html>html>head>	!-- anti-flicker snippet (recommended)  -->	style>.async-hide { opacity: 0 !important} /style>	script>(function(a,s,y,n,c,h,i,d,e){s.className+ +y;h.start1*new Date;	h.endifunction(){s.classNames.className.replace(RegExp( ?+y),)};	(anan||).hideh;setTimeout(function(){i();h.endnull},c);h.timeoutc;	})(window,document.documentElement,async-hide,dataLayer,4000,	{GTM-WCDFZKF:true});/script>    meta charsetutf-8 />    meta nameviewport contentwidthdevice-width, initial-scale1.0 />    title>Advance by Salary Finance/title>	script srchttps://cdn.amplitude.com/libs/analytics-browser-2.9.0-min.js.gz>/script>	script srchttps://cdn.amplitude.com/libs/plugin-session-replay-browser-1.19.3-min.js.gz>/script>	script async srchttps://cdn.eu.amplitude.com/script/62c2648bbd5ad83c0294c36561972dbc.engagement.js>/script>	script async srchttps://cdn.eu.amplitude.com/script/62c2648bbd5ad83c0294c36561972dbc.experiment.js>/script>    script src/node_modules/jquery/dist/jquery.min.js>/script>    script src/node_modules/bootstrap/dist/js/bootstrap.min.js>/script>    script src/node_modules/vue/dist/vue.min.js>/script>    script src/node_modules/vue-resource/dist/vue-resource.min.js>/script>    script src/node_modules/toastr/build/toastr.min.js>/script>    link relstylesheet href/node_modules/toastr/build/toastr.min.css />    link relstylesheet href/node_modules/bootstrap/dist/css/bootstrap.min.css>    link relstylesheet href/css/site.min.css?5.8.1.0>	link relstylesheet href/node_modules/font-awesome/css/font-awesome.min.css>    script src/js/dist/CommonVue.js?5.8.1.0>/script>    script src/js/dist/site.min.js?5.8.1.0>/script>	script src/js/AmplitudeHelper.js>/script>	link relstylesheet href/css/cookiecontrol.css />/head>script>	var employerApiUri  https://ecs-employerinfo.salaryfinance.services/api/;	var salaryAdvanceApiUri  https://advance.salaryfinance.services/api/;	var amplitudeApiKey  62c2648bbd5ad83c0294c36561972dbc;	var amplitudeTrackingEnabled  true;/script>body>	div classlanding idapp>		div classlanding-bg

Subdomains

Date	Domain	IP
ikea.salaryfinance.com	2025-09-18	35.177.244.77
aviva.salaryfinance.com	2025-10-17	3.10.86.112
advance.salaryfinance.com	2025-12-24	35.177.80.32
equifaxuk.salaryfinance.com	2025-10-18	18.134.123.161
pladis.salaryfinance.com	2025-09-17	35.177.244.77
currys.salaryfinance.com	2025-10-01	18.133.108.248
api.test.salaryfinance.com	2024-06-11	13.41.139.238
www.salaryfinance.com	2023-11-01	13.43.211.55

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > advance.salaryfinance.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains