Domain > billbuck.app

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-08-13	204.236.228.104 (ClassC)
2024-05-30	52.200.65.251 (ClassC)
2024-06-09	44.197.19.241 (ClassC)
2024-08-27	3.214.40.114 (ClassC)
2024-10-14	54.156.126.196 (ClassC)
2025-01-09	52.5.228.232 (ClassC)
2025-04-04	54.226.118.2 (ClassC)

HTTP/1.1 200 OKDate: Thu, 30 May 2024 23:39:11 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveServer: nginxX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Cont

!DOCTYPE html>html>  head>    title>BillBuckGenerator/title>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    meta namecsrf-param contentauthenticity_token />meta namecsrf-token contentYrkJ62A48sUc0xrZ_64tIl5SULxXDbMJUnFUsqUGcehPrZGCJ1lo2HDzn05eal2BxlqhgstcWcXdF8ENKqhfPQ />        link relstylesheet href/assets/application-e9c147ca29cd645ccf6f1622732cd7602f6ad1492e469cbfaf5842d48f3e279b.css data-turbo-trackreload />    script typeimportmap data-turbo-trackreload>{  imports: {    application: /assets/application-5b2325b8817952d2f1f95c9291430e65dc68d72a9e1340315744ff39fefbc93f.js,    generator: /assets/generator-5fc47d3c8893ba3be879c3828de491414cf3825e2b452097b455f70a9dcf9ed1.js,    jquery: https://ga.jspm.io/npm:jquery@3.7.0/dist/jquery.js,    bootstrap: /assets/bootstrap.min-66205b26114de61d89e43e56c855537a1a4cf6ef35da2bea1436e7aa38a30fb9.js,    @popperjs/core: /assets/popper-003a40d80fd205e1fa00da117d5bdc19720ba330706eaa17f9ba9513fa502304.js  }}/script>link relmodulepreload href/assets/application-5b2325b8817952d2f1f95c9291430e65dc68d72a9e1340315744ff39fefbc93f.js>link relmodulepreload href/assets/bootstrap.min-66205b26114de61d89e43e56c855537a1a4cf6ef35da2bea1436e7aa38a30fb9.js>link relmodulepreload href/assets/popper-003a40d80fd205e1fa00da117d5bdc19720ba330706eaa17f9ba9513fa502304.js>script src/assets/es-module-shims.min-4ca9b3dd5e434131e3bb4b0c1d7dff3bfd4035672a5086deec6f73979a49be73.js asyncasync data-turbo-trackreload>/script>script typemodule>import application/script>  /head>  body>    !-- Page Header -->header>  div classcontainer>    h1>Make a Bill/h1>    div classlogin-status>      a href/login?return_to_urlhttps%3A%2F%2Fbillbuck.app%2Fbucks%2Fnew>Login/a>    /div>  /div>/header>!-- Page Body -->div classmain-body>  div classcontainer>    div classrow>      div classcol-sm>        form action/bucks/generate accept-charsetUTF-8 methodpost>input typehidden nameauthenticity_token value-Ahart5VmKXmIb02Or1XNOjrGi5c2CHk9Yk-q9PXJaM-IBvUrjE5aSEn3JJcn7yjTzKCAb4spPECDLlUq6PN0w autocompleteoff /

Subdomains

Date	Domain	IP
www.billbuck.app	2025-01-09	52.5.228.232

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > billbuck.app

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains