Domain > demo.hyfin.app

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-12-15	108.157.150.67 (ClassC)
2026-02-02	13.33.153.97 (ClassC)
2026-03-04	3.169.173.24 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 4870Connection: keep-aliveDate: Wed, 04 Mar 2026 11:58:26 GMTLast-Modified: Tue, 24 Feb 2026 15:55:21 GMTETag: 947e177b9f2934a3520e5865dbb0705ax-amz-server-side-encryption: AES256Accept-Ranges: bytesServer: AmazonS3X-Cache: Miss from cloudfrontVia: 1.1 ba53e0bccc2d60bfa0ca7719c7526e16.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: tvxv2giyaHPDSUAxtBoABgiVnukblZ4z80kF4RpS7Wcy9acsvxcSfAX-Content-Type-Options: nosniffStrict-Transport-Security: max-age31536000; includeSubDomains

!doctype html>html langen>	head>		meta charsetutf-8 />		meta nameviewport contentwidthdevice-width,initial-scale1 />		!-- link relapple-touch-icon href/images/touch-icons/logo-192.png> -->		meta namemobile-web-app-capable contentyes />		meta nameapple-mobile-web-app-capable contentyes />		meta nameapple-mobile-web-app-status-bar-style contentdefault />		meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1 />		meta namedescription contentAutomate your accounts receivables and get paid faster! />		title>/title>		link relpreconnect hrefhttps://fonts.googleapis.com />		link relpreconnect hrefhttps://fonts.gstatic.com crossorigin />		link hrefhttps://fonts.googleapis.com/css2?familyReenie+Beanie&displayswap relstylesheet />		link relmodulepreload href/js/iconify-1_0_7.min.js />		script>			//FORCE REDIRECT TO /docs IF docs. IS IN THE SUB DOMAIN			if (window.location.href.indexOf(docs.) > -1 && window.location.href.replace(//, ).indexOf(/docs)  -1) {				window.location  /docs			}			//FORCE REDIRECT TO /media IF media. IS IN THE SUB DOMAIN			if (window.location.href.indexOf(media.) > -1 && window.location.href.replace(//, ).indexOf(/media)  -1) {				window.location  /media			}			//FORCE REDIRECT TO /admin IF URL is admin.hyfin.app OR admin.dev.hyfin.app OR admin.stage.hyfin.app			if (window.location.href.indexOf(//admin.) > -1 && window.location.href.replace(//, ).indexOf(/admin)  -1) {				window.location  /admin			}			window.addEventListener(load, () > {				if (serviceWorker in navigator) {					navigator.serviceWorker.getRegistrations().then(function (registrations) {						for (let registration of registrations) {							registration.unregister()						}					})				}			})			var downloadablePWA  null			window.addEventListener(beforeinstallprompt, e > {				downloadablePWA  e			})			window.addEventListener(appinstalled, () > {				downloadablePWA  false			})			window.initGoogle  () > {}			function debug() {				var Global  this				Global.console?.log?.(...arguments)			}			function onApplePayLoaded() {				window.supportsApplePay  !!window?.ApplePaySession?.canMakePayments?.()			}			function onGooglePayLoaded() {				window.supportsGooglePay  true // TODO_GP			}		/script>		script typemodule src/js/iconify-1_0_7.min.js>/script>		script src/js/lodash.min.js>/script>		script src/js/popper.min.js>/script>		script src/js/tippy-bundle.umd.min.js>/script>		link relstylesheet href/css/scale-subtle.css />		link relstylesheet href/css/uppy.min.css />		link relmodulepreload hrefdata:text/javascript;base64,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 />		script async srchttps://token-cert.dcap.com/v1/client/hosted>/script>		script async srchttps://core.spreedly.com/iframe/iframe-v1.min.js>/script>		script async srchttps://protect.sandbox.paytrace.com/js/protect.min.js>/script>		script async srchttps://gateway-sb.clearent.net/js-sdk/js/clearent-host.js>/script>		script async srchttps://sdk-web.y.uno/v1/static/js/main.min.js>/script>		script async srchttps://applepay.cdn-apple.com/jsapi/1.latest/apple-pay-sdk.js onloadonApplePayLoaded()>/script>		script async srchttps://pay.google.com/gp/p/js/pay.js onloadonGooglePayLoaded()>/script>		!-- script async src/js/clearent-host.js>/script> -->		!-- hardcode clearent file if broken in the future -->		script srchttps://maps.googleapis.com/maps/api/js?keyAIzaSyC1MZR3UZtJmnSeJdOrDDu3MNnA9Amo-40&callbackinitGoogle&librariesplaces&vweekly&typesaddress&loadingasync defer>/script>		!-- Global site tag (gtag.js) - Google Analytics -->		script async srchttps://www.googletagmanager.com/gtag/js?idG-KXY4KTX15Z>/script>		script>			window.dataLayer  window.dataLayer || 			function gtag() {				dataLayer.push(arguments)			}			gtag(js, new Date())			gtag(config, G-KXY4KTX15Z)		/script>		script typemodule crossorigin src/assets/index-i-CEQk0X.js>/script>		link relstylesheet crossorigin href/assets/index-OPo8aVKr.css>	/head>	body idapp-body>/body>/html>

Subdomains

Date	Domain	IP
heartland.hyfin.app	2024-04-07	108.138.94.66
centeredge.hyfin.app	2025-01-22	108.138.94.66
commercebank.hyfin.app	2026-01-17	18.161.6.2
demo.hyfin.app	2026-03-04	3.169.173.24
cardrunner.hyfin.app	2025-02-22	99.84.66.89
clearent.hyfin.app	2026-02-09	18.161.6.31
www.hyfin.app	2024-05-27	99.84.66.20

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > demo.hyfin.app

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains