Domain > affiliates.wetorchid.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-05-27	172.67.203.247 (ClassC)
2025-11-27	162.55.161.122 (ClassC)

HTTP/1.1 200 OKAccept-Ranges: bytesAlt-Svc: h3:443; ma2592000Content-Length: 5681Content-Type: text/html; charsetutf-8Etag: dee5wittsclf4dtLast-Modified: Fri, 21 Nov 2025 06:34:21 GMTServer: CaddyVary: Accept-EncodingDate: Thu, 27 Nov 2025 20:59:19 GMT

!DOCTYPE html>html langen>  head>    link relpreconnect hrefhttps://api.goaffpro.com />    link relpreconnect hrefhttps://static.goaffpro.com />    link relpreconnect hrefhttps://fonts.googleapis.com />    link relpreconnect hrefhttps://sessions.bugsnag.com />    link relpreconnect hrefhttps://fonts.gstatic.com />    meta charsetutf-8 />    meta nameviewport contentwidthdevice-width, initial-scale1 />    !--      manifest.json provides metadata used when your web app is installed on a      users mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/    -->    !--      Notice the use of %PUBLIC_URL% in the tags above.      It will be replaced with the URL of the `public` folder during the build.      Only files inside the `public` folder can be referenced from the HTML.      Unlike /favicon.ico or favicon.ico, %PUBLIC_URL%/favicon.ico will      work correctly both with client-side routing and a non-root public URL.      Learn how to configure a non-root public URL by running `npm run build`.    -->    title>Affiliate Portal/title>    script typemodule crossorigin src/assets/index-BvSvlc-I.js>/script>    link relstylesheet crossorigin href/assets/index-CGjW2KdK.css>    script typemodule>import.meta.url;import(_).catch(()>1);(async function*(){})().next();if(location.protocol!file:){window.__vite_is_modern_browsertrue}/script>    script typemodule>!function(){if(window.__vite_is_modern_browser)return;console.warn(vite: loading legacy chunks, syntax error above and the same error below should be ignored);var edocument.getElementById(vite-legacy-polyfill),ndocument.createElement(script);n.srce.src,n.onloadfunction(){System.import(document.getElementById(vite-legacy-entry).getAttribute(data-src))},document.body.appendChild(n)}();/script>  /head>  body>    noscript>You need to enable JavaScript to run this app./noscript>    div idroot>/div>    !--      This HTML file is a template.      If you open it directly in the browser, you will see an empty page.      You can add webfonts, meta tags, or analytics to this file.      The build step will place the bundled scripts into the body> tag.      To begin the development, run `npm start` or `yarn start`.      To create a production bundle, use `npm run build` or `yarn build`.    -->  script>    if ( window.addEventListener ) {      window.addEventListener(message,    handleMessage, false);      // message event handler (e is event object)      function handleMessage(e) {        // Reference to element for data display        if(e.data.load_iframe_resizer){          loadIframeResizer()        }      }    }    if(window.self ! window.top){      // it is embedded      loadIframeResizer()      const style  document.createElement(style);      document.body.appendChild(style);      style.innerHTML  .min-vh-100{min-height:inherit !important};    }    function loadIframeResizer() {      var script  document.createElement(script);      script.src  https://cdnjs.cloudflare.com/ajax/libs/iframe-resizer/4.3.6/iframeResizer.contentWindow.min.js;      document.head.appendChild(script);    }  /script>    script typetext/javascript>      function setupResizer(){        const style  document.createElement(style);        document.body.appendChild(style);        style.innerHTML  .min-vh-100{min-height:inherit !important};        const targetNode  document.getElementById(root);        // Options for the observer (which mutations to observe)        const config  { attributes: true, childList: true, subtree: true };        // Callback function to execute when mutations are observed        const callback  function(mutationsList, observer) {          setHeight()        };        //setInterval(setHeight, 1000)        function getDocHeight() {          return targetNode.offsetHeight        }        // Create an observer instance linked to the callback function        const observer  new MutationObserver(callback);        // Start observing the target node for configured mutations        observer.observe(targetNode, config);        function setHeight(){          const height  getDocHeight()          window.parent.postMessage({affiliate_page_height: height}, *)        }        setHeight();        //setInterval(setHeight, 1000)      }      if ( window.addEventListener ) {        window.addEventListener(message,  handleMessage, false);        // message event handler (e is event object)        function handleMessage(e) {          // Reference to element for data display          if(e.data.setup_resizer){            setupResizer()            window.removeEventListener(message, handleMessage)          }        }      }      // Later, you can stop observing      //    observer.disconnect();    /script>    script nomodule>!function(){var edocument,te.createElement(script);if(!(noModulein t)&&onbeforeloadin t){var n!1;e.addEventListener(beforeload,(function(e){if(e.targett)n!0;else if(!e.target.hasAttribute(nomodule)||!n)return;e.preventDefault()}),!0),t.typemodule,t.src.,e.head.appendChild(t),t.remove()}}();/script>    script nomodule crossorigin idvite-legacy-polyfill src/assets/polyfills-legacy-EILJC8lJ.js>/script>    script nomodule crossorigin idvite-legacy-entry data-src/assets/index-legacy-B5db5Lws.js>System.import(document.getElementById(vite-legacy-entry).getAttribute(data-src))/script>  /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > affiliates.wetorchid.com

Is this malicious?

DNS Resolutions

Port 443