Domain > auth-admin.nordaccount.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-09-14	104.18.42.225 (ClassC)
2025-10-14	172.64.145.31 (ClassC)

HTTP/1.1 403 ForbiddenDate: Mon, 02 Sep 2024 01:23:55 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICSet-Cookie: __cf_bmX9xGhh4690Kds9waVhsyPSImO4b7B

html>head>title>403 Forbidden/title>/head>body bgcolorwhite>center>h1>403 Forbidden/h1>/center>hr>center>nginx/center>script>(function(){function c(){var ba.contentDocument||a.contentWindow.document;if(b){var db.createElement(script);d.innerHTMLwindow.__CF$cv$params{r:8bc9b28ebd86ef2c,t:MTcyNTI0MDIzNS4wMDAwMDA};var adocument.createElement(script);a.nonce;a.src/cdn-cgi/challenge-platform/scripts/jsd/main.js;document.getElementsByTagName(head)0.appendChild(a);;b.getElementsByTagName(head)0.appendChild(d)}}if(document.body){var adocument.createElement(iframe);a.height1;a.width1;a.style.positionabsolute;a.style.top0;a.style.left0;a.style.bordernone;a.style.visibilityhidden;document.body.appendChild(a);if(loading!document.readyState)c();else if(window.addEventListener)document.addEventListener(DOMContentLoaded,c);else{var edocument.onreadystatechange||function(){};document.onreadystatechangefunction(b){e(b);loading!document.readyState&&(document.onreadystatechangee,c())}}}})();/script>/body>/html>

Subdomains

Date	Domain	IP
s1.nordaccount.com	2024-05-25	172.64.154.70
c.nordaccount.com	2024-05-02	104.18.33.186
d.nordaccount.com	2024-05-25	104.18.33.186
auth.nordaccount.com	2023-08-16	104.18.0.169
portal.nordaccount.com	2025-03-04	172.64.145.31
auth-admin.nordaccount.com	2025-09-14	104.18.42.225
order.nordaccount.com	2025-09-13	104.18.42.225
checkout.nordaccount.com	2024-05-25	172.64.154.70
api-gateway.nordaccount.com	2023-08-15	104.18.1.169
my.nordaccount.com	2024-04-27	104.18.33.186

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > auth-admin.nordaccount.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains