Domain > fanshield.insure

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-09-14	18.160.60.6 (ClassC)
2024-07-28	3.163.24.112 (ClassC)
2024-10-19	18.238.217.40 (ClassC)
2024-12-14	18.238.217.28 (ClassC)
2025-03-08	18.238.217.127 (ClassC)
2025-04-12	3.163.24.64 (ClassC)
2025-04-17	3.163.24.29 (ClassC)
2025-12-21	3.169.173.11 (ClassC)
2026-03-02	3.169.173.105 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2052Connection: keep-aliveLast-Modified: Tue, 25 Apr 2023 15:30:54 GMTx-amz-version-id: 1m2dRHsQcLP0a06iFW51QfVtvgNvWXueServer: AmazonS3Date: Tue,

!DOCTYPE html>html>  head>    meta charsetUTF-8 />    title>Redirecting.../title>    script>      // Define the redirection URLs for each domain      const redirections  {        refund.support:          https://requestmyrefund.com/fanshield/cancellation,        cancellation.fanshield.insure:          https://requestmyrefund.com/fanshield/cancellation,        claims.fanshield.insure:          https://requestmyrefund.com/fanshield/refund,        protect.fanshield-sandbox.insure: https://protecht.com/purchase,        protect.fanshield.insure: https://protecht.com/purchase,        cancellation.fanshield.net:          https://requestmyrefund.com/fanshield/cancellation,        refund.fanshield.net: https://requestmyrefund.com/fanshield/refund,        refundrequest.fanshield.net:          https://requestmyrefund.com/fanshield/refund,        claims.ticketguardian.net:          https://requestmyrefund.com/fanshield/refund,        www.fanshield.insure: https://requestmyrefund.com/fanshield/refund,        www.fanshield.net: https://requestmyrefund.com/fanshield/refund,        fanshield.insure: https://requestmyrefund.com/fanshield/refund,        fanshield.net: https://requestmyrefund.com/fanshield/refund,        protect.ticketguardian.net: https://protecht.com/purchase,        purchase.ticketguardian.net: https://protecht.com/purchase,      };      // Get the current domain from the window location      const currentDomain  window.location.hostname;      // Redirect to the appropriate URL based on the current domain      if (currentDomain  refund.support) {      } else if (redirectionscurrentDomain) {        window.location.href  redirectionscurrentDomain;      } else {        // Redirect to a default URL if the current domain is not found in the redirections object        // window.location.href  https://default.com;      }    /script>  /head>  body>    h1>Redirecting.../h1>  /body>/html>

Port 443

Subdomains

Date	Domain	IP
cancellation.fanshield.insure	2023-12-06	204.246.191.17
claims.fanshield.insure	2024-12-23	204.246.191.8
protect.fanshield.insure	2024-11-23	3.163.24.46
www.fanshield.insure	2024-08-10	3.163.24.112

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > fanshield.insure

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains