Domain > haveibeenpwned.com

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Reports

http://www.bleepingcomputer.com/news/security/surp...

https://otx.alienvault.com/pulse/56f2310b67db8c5c5...

Whois

Property	Value
Email	TROYHUNT@HOTMAIL.COM
NameServer	NS2.DNSIMPLE.COM
Created	2013-11-13 00:00:00
Changed	2015-10-15 00:00:00
Expires	2016-11-13 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2024-03-26	104.18.172.13 (ClassC)
2024-04-09	104.18.173.13 (ClassC)
2025-05-13	104.16.123.33 (ClassC)
2025-08-13	104.16.124.33 (ClassC)

HTTP/1.1 200 OKDate: Mon, 07 Aug 2023 10:25:08 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveAccess-Control-Expose-Headers: Request-ContextCache-Control: publ

!DOCTYPE html>html>head>meta charsetutf-8 />meta nameviewport contentwidthdevice-width, initial-scale1.0, maximum-scale1.0>title>Have I Been Pwned: Check if your email has been compromised in a data breach/title>meta propertyog:title contentHave I Been Pwned: Check if your email has been compromised in a data breach />meta namedescription contentHave I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised.>meta propertyog:description contentHave I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised. />meta propertyog:url contenthttps://haveibeenpwned.com/ />meta propertyog:image contenthttps://haveibeenpwned.com/Content/Images/SocialLogo.png />meta propertyfb:app_id content553845121487108 />link href//cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css relstylesheet integritysha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u crossoriginanonymous />link relalternate typeapplication/rss+xml titleHave I Been Pwned latest breaches hrefhttps://feeds.feedburner.com/HaveIBeenPwnedLatestBreaches />link href/content/css/pwned?vezIPJvZzFiDTRVjGJ06tisHFxxF9OwZVoUdDT6JBInU1 relstylesheet />link href//cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css relstylesheet integritysha384-wvfXpqpZZVQGK6TAh5PVlGOfQNHSoD2xbE+QkPxCAFlNEevoEH3Sl0sibVcOQVnN crossoriginanonymous />link relshortcut icon href/favicon.ico>script typetext/javascript nonceoTNZaf9HvQj33iyFp9MH>      (function (i, s, o, g, r, a, m) {        iGoogleAnalyticsObject  r; ir  ir || function () {          (ir.q  ir.q || ).push(arguments)        }, ir.l  1 * new Date(); a  s.createElement(o),          m  s.getElementsByTagName(o)0; a.async  1; a.src  g; m.parentNode.insertBefore(a, m)      })(window, document, script, //www.google-analytics.com/analytics.js, ga);      ga(create, UA-45816011-1, haveibeenpwned.com);      ga(send, pageview);    /script>scri

Subdomains

Date	Domain	IP
stage.haveibeenpwned.com	2024-04-09	104.18.172.13
cache.haveibeenpwned.com	2025-03-20	104.16.124.33
api.haveibeenpwned.com	2025-05-22	104.16.124.33
logos.haveibeenpwned.com	2024-09-07	104.16.123.33
www.haveibeenpwned.com	2024-04-09	104.18.172.13

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]