Domain > heroinvesting.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2013-04-20	174.37.172.69 (ClassC)
2023-08-07	13.224.2.63 (ClassC)
2023-08-14	13.224.2.37 (ClassC)
2023-09-16	13.224.2.22 (ClassC)
2024-07-05	13.224.14.120 (ClassC)
2024-08-02	13.224.14.16 (ClassC)
2024-09-27	3.165.160.124 (ClassC)
2024-10-06	3.165.160.31 (ClassC)
2024-10-14	13.224.14.106 (ClassC)
2024-12-18	13.224.14.12 (ClassC)
2024-12-23	18.161.6.50 (ClassC)
2025-01-12	13.35.93.33 (ClassC)
2025-01-20	204.246.191.49 (ClassC)
2025-02-13	18.161.6.119 (ClassC)
2025-03-24	18.161.6.124 (ClassC)
2025-04-21	18.161.6.62 (ClassC)
2025-04-29	204.246.191.2 (ClassC)

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8Content-Length: 237419Connection: keep-aliveDate: Mon, 07 Aug 2023 10:25:21 GMTServer: nginx/1.20.2ETag: 39f6b-3/jsUoQ08evG4UHc26xTSbcqHIwAccept-Ran

!doctype html>html data-n-head-ssr langen data-n-head%7B%22lang%22:%7B%22ssr%22:%22en%22%7D%7D>head >  script>function getUrlParameter(e){ee.replace(//,\).replace(//,\);var tnew RegExp(\?&+e+(^&#*)).exec(location.search);return nullt||2!t.length?:decodeURIComponent(t1.replace(/+/g, ))}function chooseSplitTests(e){let t{};for(const o of Object.keys(e)){const reo;if(Array.isArray(r)){const eMath.floor(Math.random()*r.length);tore}else{Math.floor(Math.random()*Math.floor(100))r&&(void 0to&&(to0),to++)}}return tObject.keys(e).map(o>Array.isArray(eo)?to:o),t}function checkAySplitTest(e){try{let t1e3,o`https://api.heroinvesting.com/split/${window.location.hostname.split(.).shift()}/${getUrlParameter(utm_campaign)}`;const rnew XMLHttpRequest;r.ontimeout()>{console.error(`The request for ${o} timed out.`),e(rd)},r.onload()>{if(4r.readyState)if(200r.status){let tNumber(r.responseText);console.log(Ay Split Test %,r.responseText,t>50?true:false),e(t>50?ay:sv)}else console.log(checkAySplitTest onload err,r.statusText),e(rd)},r.onerrort>{console.log(checkAySplitTest onerror,r.statusText),e(rd)},r.open(GET,o,!0),r.timeoutt,r.send(null)}catch(t){console.error(checkAySplitTest,t),e(rd)}}/script>  link relpreconnect href//global.proper.io>  link relpreconnect href//eb.proper.io>  link relpreconnect href//bids.proper.io>  link relpreconnect href//eb-staging.proper.io>  link relpreconnect href//c.amazon-adsystem.com>  link relpreconnect href//hb-api.omnitagjs.com>  link relpreconnect href//https://adserver-us.adtech.advertising.com>  link relpreconnect href//ib.adnxs.com>  link relpreconnect href//acdn.adnxs.com>  link relpreconnect href//bids.concert.io>  link relpreconnect href//web.hb.ad.cpe.dotomi.com>  link relpreconnect href//bidder.criteo.com>  link relpreconnect href//dmx.districtm.io>  link relpreconnect href//demo.arrepiblik.com>  link relpreconnect href//cdn.districtm.io>  link relpreconnect href//hb.emxdgt.com>  link relpreconnect href//biddr.brealtime.com>  link relpreconnect href//an.facebook.com>  link relpreconnect

Subdomains

Date	Domain	IP
www.heroinvesting.com	2024-07-26	18.161.6.62

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > heroinvesting.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains