Domain > aws-prod-www.if.com

More information on this domain is in AlienVault OTX

Is this malicious?

DNS Resolutions

Date	IP Address
2020-10-29	23.35.71.89 (ClassC)
2022-07-15	184.28.198.162 (ClassC)
2022-07-18	104.86.111.59 (ClassC)
2025-07-01	23.72.37.160 (ClassC)
2025-07-30	95.101.238.181 (ClassC)
2025-08-05	95.101.238.179 (ClassC)
2025-09-17	96.17.207.80 (ClassC)
2025-10-03	23.72.36.227 (ClassC)
2025-12-22	2.19.176.218 (ClassC)
2026-02-16	2.16.145.151 (ClassC)

Port 80

Port 443

HTTP/1.1 200 OKContent-Length: 17128Content-Type: text/htmlStrict-Transport-Security: max-age31536000 ; includeSubDomainsETag: 3bad931582b6602e2364013495a1a020:1641982495.014679Expires: Tue, 01 Jul 20

!DOCTYPE html>  html langen>  	head>		title>If.com - Error/title>		meta namekeywords content />		meta namedescription content />		meta http-equivContent-Type contenttext/html; charsetutf-8 />		meta http-equivcontent-language contenten-gb />		meta http-equivpragma contentno-cache />		meta http-equivcache-control contentno-store />		!--if gte IE 8>meta http-equivX-UA-Compatible contentIEIE8 />!endif-->		meta namerobots contentall,index,follow />		meta namedistribution contentglobal />		meta namerating contentgeneral />		script typetext/javascript src/ruxitagentjs_ICA27SVfhjoqrux_10179191120132458.js data-dtconfigapp5dd053b12dab85cc|featureHashICA27SVfhjoqrux|rdnt1|uxrgce1|bp2|cucfwm8n8aj|srms1,1,,,|uxrgcm100,25,300,3;100,25,300,3|dpvc1|md1anameajs-remote-user@content|lastModification1585567201116|dtVersion10179191120132458|tp500,50,0,1|uxdcw1500|agentUri/ruxitagentjs_ICA27SVfhjoqrux_10179191120132458.js|reportUrl/rb_bf10006sbr|ridRID_-354823711|rpid-1680745875|domainif.com>/script>		script typetext/javascript src/ruxitagentjs_ICA27SVfhjoqrux_10163190401123328.js data-dtconfigapp5dd053b12dab85cc|featureHashICA27SVfhjoqrux|rdnt1|uxrgce1|bp2|srms1,1,,,|uxrgcm100,25,300,3;100,25,300,3|dpvc1|md1anameajs-remote-user@content|lastModification1578325213472|dtVersion10163190401123328|tp500,50,0,1|uxdcw1500|agentUri/ruxitagentjs_ICA27SVfhjoqrux_10163190401123328.js|reportUrl/rb_bf10006sbr|ridRID_752672997|rpid1740442135|domainif.com>/script>		script typetext/javascript src/ruxitagentjs_ICA27SVfhjoqrux_10163190401123328.js data-dtconfigapp5dd053b12dab85cc|featureHashICA27SVfhjoqrux|rdnt1|uxrgce1|bp2|srms1,1,,,|uxrgcm100,25,300,3;100,25,300,3|dpvc1|md1anameajs-remote-user@content|lastModification1573660643917|dtVersion10163190401123328|tp500,50,0,1|uxdcw1500|agentUri/ruxitagentjs_ICA27SVfhjoqrux_10163190401123328.js|reportUrl/rb_bf10006sbr|ridRID_-35025599|rpid-1356289397|domainif.com>/script>		link relshortcut icon hrefdata:null;base64,AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAD/////////

Subdomains

Date	Domain	IP
log-cf7cce4f.if.com	2026-02-01	52.143.10.43
wup-cf7cce4f.if.com	2025-12-28	52.143.14.130
app.sdk.if.com	2024-12-22	13.224.14.3
email.if.com	2026-02-16	91.192.43.151
brokerinfo.if.com	2025-04-22	184.30.243.211
broker.if.com	2024-12-20	104.73.177.107
www.brokers.if.com	2024-05-14	104.78.161.17
www.if.com	2023-11-01	23.72.254.180
aws-pre-prod-www.if.com	2024-06-09	95.100.98.64
aws-prod-www.if.com	2025-07-01	23.72.37.160
my.if.com	2023-08-26	104.69.5.137
tpp-my.if.com	2024-07-24	23.208.246.184

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]