Domain > am.rebuy.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
NameServer	NS-1690.AWSDNS-19.CO.UK
Created	1998-11-22 05:00:00
Changed	2018-12-13 08:57:21
Registrar	INWX GmbH & Co. KG

DNS Resolutions

Date	IP Address
2023-08-04	34.249.222.253 (ClassC)
2023-08-15	52.48.87.135 (ClassC)
2023-09-29	54.194.15.115 (ClassC)
2024-04-17	54.77.23.118 (ClassC)
2024-05-24	52.209.79.119 (ClassC)
2024-06-22	18.202.120.181 (ClassC)
2024-07-12	99.80.28.161 (ClassC)
2024-07-15	34.254.88.41 (ClassC)
2024-07-26	52.16.45.87 (ClassC)
2024-07-30	52.208.55.226 (ClassC)
2024-09-13	34.241.78.58 (ClassC)
2024-10-10	54.170.66.72 (ClassC)
2024-10-20	52.209.3.16 (ClassC)
2024-11-20	52.208.120.153 (ClassC)
2024-12-06	54.155.121.242 (ClassC)
2024-12-26	18.203.146.254 (ClassC)
2025-01-16	108.128.69.46 (ClassC)
2025-01-26	54.195.249.220 (ClassC)
2025-02-14	34.251.221.84 (ClassC)
2025-03-04	54.77.146.93 (ClassC)
2025-03-09	52.16.197.102 (ClassC)
2025-03-26	18.202.45.185 (ClassC)
2025-04-12	52.215.110.101 (ClassC)
2025-04-25	34.250.149.3 (ClassC)
2025-06-10	52.18.198.13 (ClassC)
2025-07-22	54.171.44.83 (ClassC)
2025-08-27	54.75.201.49 (ClassC)
2025-09-04	63.32.40.171 (ClassC)
2025-09-09	52.18.81.66 (ClassC)
2025-10-17	34.249.5.124 (ClassC)

Port 443

HTTP/1.1 429 Too Many RequestsDate: Fri, 04 Aug 2023 21:34:40 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveX-Verify-Location: /wafsc/verify.html?bits14

!DOCTYPE html>html>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1, shrink-to-fitno>    title>Sell My Mobile | reBuy UK/title>    script typetext/javascript>var args  {bits:14,time:1691184880,ip:52.40.234.105};function setCookie(cname, cvalue, exhours) {    var d  new Date();    d.setTime(d.getTime() + (exhours*60*60*1000));    var expires  expires+ d.toUTCString();    document.cookie  cname +  + cvalue + ; + expires + ;path/;}function async_check(counter, multiplier, offset) {    setTimeout(function(){        check(counter, multiplier, offset);    });}function check(counter, multiplier, offset) {    var vars  {        bits: args.bits,        time: args.time,        ip: args.ip,        count: counter * multiplier + offset,    };    var signature  `${vars.bits}:${vars.time}:${vars.ip}:${vars.count}`;    var encoder  new TextEncoder();    var data  encoder.encode(signature);    var hash  crypto.subtle.digest(SHA-512, data);    hash.then(function(digest){        a  new Uint8Array(digest);        var nBytes  Math.floor(vars.bits/8)        var nBits  vars.bits % 8        for (i  0; i  nBytes; i++) {            if (ai ! 0) {                async_check(counter+1, multiplier, offset);                return            }        }        if (anBytes > 2**(8-nBits)) {            async_check(counter+1, multiplier, offset);            return        }        setCookie(wafsc_validation, signature, 24);        if (args.next) {            window.location.replace(args.next);        } else {            window.location.reload();        }    });}// It should make the browser utilize multiple cores. See:// * https://w3c.github.io/webcrypto/#SubtleCrypto-method-digest// * https://developer.mozilla.org/en-US/docs/Web/JavaScript/EventLoopconst n  8;for (i  0; i  n; i++) {    async_check(0, n, i);}/script>    meta namerobots contentnoindex>/head>body>    div classouter>        div classcenter>            img classrebuy-logo height80 srchttps://dyivx00f9izcg.cloudfront.net/images/rebuy-logo-int.rev-

Subdomains

Date	Domain	IP
amlab.rebuy.com	2024-10-10	54.170.66.72
password.rebuy.com	2024-12-01	3.163.158.7
confluence.rebuy.com	2024-12-26	13.224.14.34
salesforce.rebuy.com	2024-11-19	3.163.24.34
mobile.rebuy.com	2024-08-09	99.80.45.168
affiliate.rebuy.com	2024-08-10	18.161.6.119
am.rebuy.com	2023-08-04	34.249.222.253
web-static-app.rebuy.com	2024-10-04	3.163.24.61
email-assets.rebuy.com	2024-01-30	18.161.6.79
www.rebuy.com	2024-11-11	204.246.191.64
sorry.rebuy.com	2024-07-15	18.161.6.107

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > am.rebuy.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443

Subdomains