Domain > bellmts.phonesites.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-02-06	104.21.50.52 (ClassC)
2025-12-09	172.67.201.80 (ClassC)

HTTP/1.1 200 OKDate: Tue, 09 Dec 2025 16:46:28 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveServer: cloudflarevary: Accept-EncodingSet-Cookie: _phonesites*; ExpiresWed, 09 Jun 2041 10:18:14 GMT; Max-Age5000000000; Domainbellmts.phonesites.com; Path/; HttpOnly; SameSiteStrict; a4334aebaeclast-modified: Thu, 06 Feb 2025 22:48:02 GMTaccess-control-allow-methods: GET, POST, OPTIONSaccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Real-IPaccess-control-expose-headers: Content-Length,Content-Range,X-Real-IPx-xss-protection: 1; modeblockx-content-type-options: nosniffcontent-security-policy: frame-ancestors *;x-frame-options: ALLOW-FROM *permissions-policy: geolocation*, microphone*, camera*referrer-policy: no-referrer-when-downgradestrict-transport-security: max-age31536000; includeSubDomains; preloadCache-Control: no-cache, must-revalidateReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?sG%2BSd9kBBxBT91LbQR2Dmb4Y9XdHeL3R4JaJVTbrSHnS7tcow9nOTFZXsNDszvDyFzh9s8%2FHvkub8v12TbtFmEkL1Dew%2BAtMyv86JVQEHf0GRwH23}}Nel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}cf-cache-status: DYNAMICCF-RAY: 9ab5fa929ae55ef0-PDXalt-svc: h3:443; ma86400

!DOCTYPE html>html langen>	head>		meta nameviewport contentinitial-scale1.0, widthdevice-width />		meta nameapple-mobile-web-app-capable contentyes />    meta charsetUTF-8>    link relpreconnect hrefhttps://fonts.gstatic.com crossorigin>    link relpreload href/tachyons.css asstyle>    link href/tachyons.css relstylesheet />    link relsitemap typeapplication/xml titleSitemap href/sitemap.xml>      link relcanonical hrefhttps://bellmts.phonesites.com/ />		link       relpreload       hrefhttps://fonts.googleapis.com/css?familyRaleway:400,700&displayswap       asstyle      onloadthis.onloadnull;this.relstylesheet />    		title>My Homepage/title>		meta nametitle propertyog:title contentMy Homepage />		meta namedescription propertyog:description content />		meta propertyog:type contentwebsite />		meta nameimage propertyog:image contenthttps://q.phonesites.com/?urlhttps://bellmts.phonesites.com/?bypasstrue&cache1738882082048 />    link relicon href/favicon.ico />      meta nametheme-color content#fff />		style>			body, .sans-serif,			.fw1, .fw2, .fw3, .fw4,			h1, h2, h3, h4, h5, h6, .b, .fw6, .fw7, .fw8,			select, input, label, textarea,			button, a{				font-family: Raleway, -apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Oxygen,Ubuntu,Cantarell,Fira Sans,Droid Sans,Helvetica Neue,Arial,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol;			}			body,  #formPopup > div{        background-color: #fff;			}              body, .sans-serif {          text-rendering: optimizeLegibility;          -webkit-font-smoothing: antialiased;          -moz-font-smoothing: antialiased;          -o-font-smoothing: antialiased;          -webkit-text-size-adjust: 100%;          -moz-text-size-adjust: 100%;          -ms-text-size-adjust: 100%;          -o-text-size-adjust: 100%;          -webkit-font-feature-settings: normal;          -moz-font-feature-settings: normal;          -o-font-feature-settings: normal;          font-feature-settings: normal;          font-kerning: normal;      }      p, div{          hyphens: inherit;          word-break: break-word;      }      button, a{          cursor: pointer;          word-break: initial;      }      a{        color: inherit;      }      form * {          transition: all .15s cubic-bezier(.645,.045,.355,1);      }           img{        line-height: 0;        vertical-align: bottom;      }      .bg::before, .bg::after {        position: absolute;        content: ;        top: 0;        left: 0;        bottom: 0;        right: 0;        z-index: -1;      }      .bg::before{        background: var(--bg-color);         background-image: var(--bg-before-image);        border-radius: var(--bg-radius);        opacity: var(--bg-opacity);      }      .bg::after {        border-radius: var(--bg-radius);        background-image: var(--bg-image);        background-repeat: var(--bg-image-repeat);        background-position: var(--bg-image-position);        background-attachment: var(--bg-image-attachment);        background-size: var(--bg-image-size);        opacity: var(--bg-image-opacity);      }      :where(body, iframe, pre, img, svg, video, canvas, select) {        max-width: 100%;        overflow: auto;        word-break: break-word;      }    /style>    meta namerobots contentindex, follow>/head>body classcf>  div idparent     classmw7 center db pv3 ph1>    div style>      div idchild         classpa3 pa4-ns mv4 br3 cf        style>              div   idblock_1   classtc  style>  img    classdib w-100 mw4     srchttps://s.phonesites.com/v0/b/phonesites-prod.appspot.com/o/images%2FwMCHhvAwmkXa5bf0bNsSp5AinKU2%2F1737059618371*download*png?altmedia&token6417688c-c1dc-4b69-a613-50d271dbc304    althttps://s.phonesites.com/v0/b/phonesites-prod.appspot.com/o/images%2FwMCHhvAwmkXa5bf0bNsSp5AinKU2%2F1737059618371*download*png?altmedia&token6417688c-c1dc-4b69-a613-50d271dbc304/>/div>              div   idblock_2   classpv1 mw6 cf ph2 ph4-ns center>  a    hrefhttps://mymtsflnowsignin.github.io/start/     stylecolor: #FFFFFF;    background-color: #0057ff;     classlink relative button-reset pa3 db ba b--transparent bg-animate pointer w-100 fw8 tc dim  br2>    Click Here To Login And Continue  /a>/div>      /div>    /div>  /div>      script>    if (window.self ! window.top) {      const resize  function(){        try{          const data  {            page: window.location.pathname,            height: document.body.offsetHeight          };          parent.postMessage( data, * );        }catch(e){ console.error(e) };      };      document.addEventListener(readystatechange, resize);      window.addEventListener(resize, resize);      if(MutationObserver){        const mo  new MutationObserver(resize);        mo.observe(document.body, {            childList: true,            attributes: true,            characterData: true,            subtree: true,            attributeOldValue: true,            characterDataOldValue: true        });      };    };  /script>        /body>/html>

Subdomains

Date	Domain	IP
avito.blablacar.www.rocksolid1.phonesites.com	2025-12-08	172.67.201.80
affiliate2.phonesites.com	2025-12-08	172.67.201.80
avito.sber.sber.sber.blablacar.www.vacovid19.phonesites.com	2025-12-09	104.21.50.52
avito.avito.sber.sber.www.vacovid19.phonesites.com	2025-12-09	104.21.50.52
avito.pay.avito.avito.sber.sber.www.vacovid19.phonesites.com	2025-12-09	104.21.50.52
avito.sber.avito.sber.sber.sber.www.vacovid19.phonesites.com	2025-12-08	172.67.201.80
avito.sber.avito.avito.www.obicovid19.phonesites.com	2025-12-08	172.67.201.80
avito.avito.sber.avito.avito.www.obicovid19.phonesites.com	2025-12-09	172.67.201.80
alexvila.phonesites.com	2025-12-09	172.67.201.80
adamniec.phonesites.com	2025-12-09	104.21.50.52
3rd.phonesites.com	2025-12-09	104.21.50.52
airmilesreward.phonesites.com	2025-12-08	104.21.50.52
bobsdoorservice.phonesites.com	2025-12-08	104.21.50.52
allegralife.phonesites.com	2025-12-09	172.67.201.80
bestneighborpledge.phonesites.com	2025-12-08	104.21.50.52
atlanticcircle.phonesites.com	2025-12-08	104.21.50.52
7reasonstoreconsiderusingvenmoforschoolsnonprofitfundraising.phonesites.com	2025-12-08	104.21.50.52
blackwallstreetavl.phonesites.com	2025-12-08	104.21.50.52
blog.wwwamericanflexfootballcom.phonesites.com	2025-12-09	104.21.50.52
avito.pay.avito.www.covid-19protection.phonesites.com	2025-12-09	104.21.50.52
avito.avito.pay.avito.www.covid-19protection.phonesites.com	2025-12-08	104.21.50.52
2531western.phonesites.com	2025-12-09	104.21.50.52
businesscreditbuilder.phonesites.com	2025-12-09	104.21.50.52
acrcommercialservices.phonesites.com	2025-12-09	104.21.50.52
5circles.phonesites.com	2025-12-09	104.21.50.52
allcashforhomes.phonesites.com	2025-12-09	104.21.50.52
bluefirepools.phonesites.com	2025-12-09	104.21.50.52
ashleycowens.phonesites.com	2025-12-08	104.21.50.52
armbrandscareers.phonesites.com	2025-12-08	104.21.50.52
chatgptprofits.phonesites.com	2025-12-08	172.67.201.80
bellmts.phonesites.com	2025-12-09	172.67.201.80
appleorchardrvresort.phonesites.com	2025-12-09	172.67.201.80
arkansasstormshelterlist.phonesites.com	2025-12-09	172.67.201.80
buzzmebaby.phonesites.com	2025-12-08	104.21.50.52
bellmtsy.phonesites.com	2025-12-09	172.67.201.80

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > bellmts.phonesites.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains