Domain > hexserver.win

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-01-02	50.114.4.42 (ClassC)
2025-01-22	50.114.4.21 (ClassC)
2025-01-23	50.114.4.106 (ClassC)
2025-02-21	50.114.4.17 (ClassC)
2025-05-27	50.114.4.13 (ClassC)
2025-07-01	50.114.4.101 (ClassC)
2025-12-09	50.114.4.2 (ClassC)
2026-01-25	172.67.199.97 (ClassC)

HTTP/1.1 200 OKDate: Sun, 25 Jan 2026 23:26:31 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveCf-Ray: 9c3b89388facc3af-PDXAccess-Control-Allow-Origin: *Cache-Control: public, max-age0, must-revalidateReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffReport-To: {endpoints:{url:https:\/\/a.nel.cloudflare.com\/report\/v4?sv9JVxLDjaCJQ66A8UYqzAkH2cpC9XGuGb3O8f%2BYl5STQaxbegj2U9zaLMGEpzCw1iuLMYacSH5W953rD4B7QZ7qBPMCqxA5lOKsb12RNoKa1Ywdb%2BwJCJtCRqVMTnz%2FFrwwDqvthlS7t9aLGDe3BO4dR},group:cf-nel,max_age:604800}Nel: {success_fraction:0,report_to:cf-nel,max_age:604800}Vary: Accept-EncodingCf-Cache-Status: DYNAMICSet-Cookie: __cf_bmFaWNqtj8UhA17r.ht2BF9GKjl9IoEEkuf4KeyCSleMQ-1769383591-1.0.1.1-.tgg0gTXohwdm.z9CTFAwymTYPdlibBBOPRMp.CD5zJvZ0QrxIf763M3YnqbSom2lrBuR1bBu37pmognPMVjXObF56LFGZE__J7L_4xmJ5iHv9YEQCRoiFUKigKwnsQe; path/; expiresSun, 25-Jan-26 23:56:31 GMT; domain.cloudflareregistrar.com; HttpOnly; Secure; SameSiteNoneServer: cloudflarealt-svc: h3:443; ma86400

!doctype html>html langen>  head>    meta charsetUTF-8 />    meta      nameviewport      contentwidthdevice-width, initial-scale1.0 />    title>Cloudflare Registrar/title>    link      relicon      hrefhttps://parking.registrar.cloudflare.com/favicon.ico />    link      relstylesheet      hrefhttps://parking.registrar.cloudflare.com/assets/style.css />  /head>  body>    div idapp>/div>    script      typemodule      srchttps://parking.registrar.cloudflare.com/assets/main.js>/script>  script>(function(){function c(){var ba.contentDocument||a.contentWindow.document;if(b){var db.createElement(script);d.innerHTMLwindow.__CF$cv$params{r:9c3b8938afd5c3af,t:MTc2OTM4MzU5MS4wMDAwMDA};var adocument.createElement(script);a.nonce;a.src/cdn-cgi/challenge-platform/scripts/jsd/main.js;document.getElementsByTagName(head)0.appendChild(a);;b.getElementsByTagName(head)0.appendChild(d)}}if(document.body){var adocument.createElement(iframe);a.height1;a.width1;a.style.positionabsolute;a.style.top0;a.style.left0;a.style.bordernone;a.style.visibilityhidden;document.body.appendChild(a);if(loading!document.readyState)c();else if(window.addEventListener)document.addEventListener(DOMContentLoaded,c);else{var edocument.onreadystatechange||function(){};document.onreadystatechangefunction(b){e(b);loading!document.readyState&&(document.onreadystatechangee,c())}}}})();/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Sun, 25 Jan 2026 23:26:31 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveCf-Ray: 9c3b89391a1be6e0-PDXAccess-Control-Allow-Origin: *Cache-Control: public, max-age0, must-revalidateReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffReport-To: {endpoints:{url:https:\/\/a.nel.cloudflare.com\/report\/v4?s8dLv0BXL1i4bSR8gq2lPtXcSW6DTzCD%2FTikNMgnXJjQQIQ2opjHjtoZuwDOW0vMeBM6LfkWjTV%2BKC6Mz8LvDgd9bqYSUoARFM3JzzPvraec1mMag4nf61RyAqlLlN6MRCd4QPaMBztDU67kQ7rBm1cix0R0CMBXfQwH8MoOJ},group:cf-nel,max_age:604800}Nel: {success_fraction:0,report_to:cf-nel,max_age:604800}Vary: Accept-EncodingCf-Cache-Status: DYNAMICSet-Cookie: __cf_bmD5iII83MdW0xkqF.PNK8qE5MhP0rDFm4EvdNG6NE_I0-1769383591-1.0.1.1-nE1Ma1ec3w7qy3YjBXpAfjxyvkKXJNliIn3o4nY9BiHK1lGRDohyDjcsEcGYcu7mM4lIVS8JSnUUMyayWe3Vmj13IqV_dEiwveDeVV76NDknjy6VQ0S_M_mpR2KEOGXQ; path/; expiresSun, 25-Jan-26 23:56:31 GMT; domain.cloudflareregistrar.com; HttpOnly; Secure; SameSiteNoneServer: cloudflarealt-svc: h3:443; ma86400

!doctype html>html langen>  head>    meta charsetUTF-8 />    meta      nameviewport      contentwidthdevice-width, initial-scale1.0 />    title>Cloudflare Registrar/title>    link      relicon      hrefhttps://parking.registrar.cloudflare.com/favicon.ico />    link      relstylesheet      hrefhttps://parking.registrar.cloudflare.com/assets/style.css />  /head>  body>    div idapp>/div>    script      typemodule      srchttps://parking.registrar.cloudflare.com/assets/main.js>/script>  script>(function(){function c(){var ba.contentDocument||a.contentWindow.document;if(b){var db.createElement(script);d.innerHTMLwindow.__CF$cv$params{r:9c3b89392a35e6e0,t:MTc2OTM4MzU5MS4wMDAwMDA};var adocument.createElement(script);a.nonce;a.src/cdn-cgi/challenge-platform/scripts/jsd/main.js;document.getElementsByTagName(head)0.appendChild(a);;b.getElementsByTagName(head)0.appendChild(d)}}if(document.body){var adocument.createElement(iframe);a.height1;a.width1;a.style.positionabsolute;a.style.top0;a.style.left0;a.style.bordernone;a.style.visibilityhidden;document.body.appendChild(a);if(loading!document.readyState)c();else if(window.addEventListener)document.addEventListener(DOMContentLoaded,c);else{var edocument.onreadystatechange||function(){};document.onreadystatechangefunction(b){e(b);loading!document.readyState&&(document.onreadystatechangee,c())}}}})();/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > hexserver.win

Is this malicious?

DNS Resolutions

Port 80

Port 443