Domain > frescofy.inhaabit.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-01-25	13.56.116.59 (ClassC)
2020-12-09	52.52.15.236 (ClassC)
2021-05-09	52.52.131.89 (ClassC)
2021-12-20	52.52.147.220 (ClassC)
2022-03-07	13.57.92.136 (ClassC)
2024-10-22	50.18.77.146 (ClassC)
2024-12-07	13.57.53.122 (ClassC)
2025-04-28	13.56.86.2 (ClassC)
2025-05-26	52.8.16.244 (ClassC)
2025-06-16	54.151.109.234 (ClassC)
2025-06-26	54.193.132.80 (ClassC)
2025-09-14	44.230.115.150 (ClassC)
2025-11-25	44.252.253.233 (ClassC)

HTTP/1.1 200 OKServer: openrestyDate: Tue, 22 Oct 2024 00:55:35 GMTContent-Type: text/html; charsetutf-8Content-Length: 5219Connection: keep-aliveSet-Cookie: _snDnuL6jVa9mYML%2BAlhyTgR4sCfAxze5FCT7wbY

!DOCTYPE html>html>	head>		link relstylesheet typetext/css hrefhttps://cdn.branch.io/static/styles.css />		link relalternate hrefios-app://1434228793/arPlay/open?link_click_id=1377075185084937973 />			meta propertyal:ios:url contentarPlay://open?link_click_id=1377075185084937973 />			meta nametwitter:app:url:iphone contentarPlay://open?link_click_id=1377075185084937973>			meta propertyal:ios:app_store_id content1434228793 />			meta nametwitter:app:id:iphone content1434228793>			meta propertyal:ios:app_name contentAR Play />			meta nametwitter:app:name:iphone contentAR Play>					meta nametwitter:card contentsummary />			meta propertyog:title content  />				meta nametwitter:title content  />			meta propertyog:url contenthttp://frescofy.inhaabit.com/ />			meta nametwitter:app:country contentUS>	/head>	body>		div classcontainer>			h1>Welcome to AR Play!/h1>			h3 classsubtitle>You will receive a one-time SMS to download the app/h3>			form nameform action methodPOST>				div classform-item>					label forphone>h2>Phone number:/h2>/label>					input typetext namephone idphone placeholder+1 (123) 123-1234 classtext />					button typesubmit classbtn-submit>						svg enable-backgroundnew 0 0 32 32 idplane classbtn-submit-icon height17px width17px idLayer_1 version1.1 viewBox0 0 32 32 xml:spacepreserve xmlnshttp://www.w3.org/2000/svg xmlns:xlinkhttp://www.w3.org/1999/xlink>path dM31.543,0.16C31.377,0.053,31.188,0,31,0c-0.193,0-0.387,0.055-0.555,0.168l-30,20  c-0.309,0.205-0.479,0.566-0.439,0.936c0.038,0.369,0.278,0.688,0.623,0.824l7.824,3.131l3.679,6.438  c0.176,0.309,0.503,0.5,0.857,0.504c0.004,0,0.007,0,0.011,0c0.351,0,0.677-0.186,0.857-0.486l2.077-3.463l9.695,3.877  C25.748,31.977,25.873,32,26,32c0.17,0,0.338-0.043,0.49-0.129c0.264-0.148,0.445-0.408,0.496-0.707l5-30  C32.051,0.771,31.877,0.377,31.543,0.16z M3.136,20.777L26.311,5.326L9.461,23.363c-0.089-0.053-0.168-0.123-0.266-0.162  L3.136,20.777z M10.189,24.066c-0.002-0.004-0.005-0.006-0.007-0.01L29.125,3.781L12.976,28.943L10.189,24.066z M25.217,29.609  l-8.

Port 443

HTTP/1.1 200 OKServer: openrestyDate: Tue, 22 Oct 2024 00:55:35 GMTContent-Type: text/html; charsetutf-8Content-Length: 5219Connection: keep-aliveSet-Cookie: _sIpK7qUjjodLQRLWPeRPX3ZA6mCsrd7nEp%2BQaqi

!DOCTYPE html>html>	head>		link relstylesheet typetext/css hrefhttps://cdn.branch.io/static/styles.css />		link relalternate hrefios-app://1434228793/arPlay/open?link_click_id=1377075185579854232 />			meta propertyal:ios:url contentarPlay://open?link_click_id=1377075185579854232 />			meta nametwitter:app:url:iphone contentarPlay://open?link_click_id=1377075185579854232>			meta propertyal:ios:app_store_id content1434228793 />			meta nametwitter:app:id:iphone content1434228793>			meta propertyal:ios:app_name contentAR Play />			meta nametwitter:app:name:iphone contentAR Play>					meta nametwitter:card contentsummary />			meta propertyog:title content  />				meta nametwitter:title content  />			meta propertyog:url contenthttp://frescofy.inhaabit.com/ />			meta nametwitter:app:country contentUS>	/head>	body>		div classcontainer>			h1>Welcome to AR Play!/h1>			h3 classsubtitle>You will receive a one-time SMS to download the app/h3>			form nameform action methodPOST>				div classform-item>					label forphone>h2>Phone number:/h2>/label>					input typetext namephone idphone placeholder+1 (123) 123-1234 classtext />					button typesubmit classbtn-submit>						svg enable-backgroundnew 0 0 32 32 idplane classbtn-submit-icon height17px width17px idLayer_1 version1.1 viewBox0 0 32 32 xml:spacepreserve xmlnshttp://www.w3.org/2000/svg xmlns:xlinkhttp://www.w3.org/1999/xlink>path dM31.543,0.16C31.377,0.053,31.188,0,31,0c-0.193,0-0.387,0.055-0.555,0.168l-30,20  c-0.309,0.205-0.479,0.566-0.439,0.936c0.038,0.369,0.278,0.688,0.623,0.824l7.824,3.131l3.679,6.438  c0.176,0.309,0.503,0.5,0.857,0.504c0.004,0,0.007,0,0.011,0c0.351,0,0.677-0.186,0.857-0.486l2.077-3.463l9.695,3.877  C25.748,31.977,25.873,32,26,32c0.17,0,0.338-0.043,0.49-0.129c0.264-0.148,0.445-0.408,0.496-0.707l5-30  C32.051,0.771,31.877,0.377,31.543,0.16z M3.136,20.777L26.311,5.326L9.461,23.363c-0.089-0.053-0.168-0.123-0.266-0.162  L3.136,20.777z M10.189,24.066c-0.002-0.004-0.005-0.006-0.007-0.01L29.125,3.781L12.976,28.943L10.189,24.066z M25.217,29.609  l-8.

Subdomains

Date	Domain	IP
ad.inhaabit.com	2024-07-09	52.8.78.89
br.inhaabit.com	2025-08-13	35.167.216.18
frescofy.inhaabit.com	2024-10-22	50.18.77.146

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > frescofy.inhaabit.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains