Domain > api.mongo.refundco.io

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-12-15	54.230.15.97 (ClassC)
2021-12-15	54.230.15.25 (ClassC)
2021-12-15	54.230.15.85 (ClassC)
2021-12-15	54.230.15.93 (ClassC)
2024-06-18	204.246.191.108 (ClassC)
2024-08-28	18.161.6.109 (ClassC)
2025-03-08	108.138.94.4 (ClassC)
2025-04-12	204.246.191.51 (ClassC)
2025-07-06	204.246.191.126 (ClassC)
2025-07-17	204.246.191.10 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1791Connection: keep-aliveLast-Modified: Sun, 13 Mar 2022 13:15:23 GMTAccept-Ranges: bytesServer: AmazonS3Date: Tue, 20 Jun 2023 02:29:00 GMTETag:

!doctype html>html>head>  meta charsetUTF-8>  meta nameviewport contentwidthdevice-width, initial-scale1.0>  script srchttps://cdn.tailwindcss.com>/script>/head>body stylebackground-color: #423121;>  div classw-full h-screen flex justify-center items-center flex-col>    svg idlogo classhidden w-72 h-72 width512 height512 viewBox0 0 512 512 fillnone xmlnshttp://www.w3.org/2000/svg>      rect width512 height512 rx113.778 fill#FFD950/>      path dM256.534 93.8667C240.534 117.867 239.467 155.733 239.467 233.6H122.667V442.667H141.867C204.8 442.667 239.467 442.667 259.734 412.8C276.267 388.267 277.867 350.4 277.867 271.467H393.067V64H371.2C310.4 64 276.8 64 256.534 93.8667ZM228.267 391.467C220.8 402.133 201.6 404.267 161.067 404.267V272H239.467C239.467 337.067 238.4 376.533 228.267 391.467ZM354.667 233.6H277.867C277.867 169.067 278.934 130.133 288.534 115.2C295.467 104.533 314.667 102.933 354.134 102.4V233.6H354.667Z fill#2C1804/>    /svg>    p classtext-white text-2xl mt-8>      Taking you there...    /p>    p classtext-white text-lg mt-2>      If you are not redirected in two seconds, a idclickHereLink href#>click here/a>.    /p>  /div>  script typetext/javascript>    var currentUrl  window.location.href;    var showLogo  !(currentUrl.includes(/checkout/) || currentUrl.includes(/track/));    if (showLogo) {      document.getElementById(logo).classList.remove(hidden);    }    var redirectUrl  currentUrl.replace(refundco.io, getfondue.com);    document.getElementById(clickHereLink).setAttribute(href, redirectUrl);    setTimeout(function() {      window.location.replace(redirectUrl);    }, 2000);  /script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > api.mongo.refundco.io

Is this malicious?

DNS Resolutions

Port 80