Domain > ihsadvantage.com

More information on this domain is in AlienVault OTX

Files that talk to ihsadvantage.com

MD5	A/V
56b02dc8b8072c1f787058a56eae64f0	[HW32.CDB.9b1c] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cwhrmp] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djkd] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHE] [Trojan.Win32.Kryptik.BZIX] [Win32/Trojan.ef7]

Whois

Property	Value
Email	owner-11798996@ihsadvantage.com.whoisprivacyservice.org
NameServer	NS-1812.AWSDNS-34.CO.UK
Created	2004-03-01 23:33:25
Changed	2017-02-20 15:55:42
Registrar	Amazon Registrar, In

DNS Resolutions

Date	IP Address
2013-09-14	216.146.38.125 (ClassC)
2018-07-05	52.85.233.94 (ClassC)
2018-07-05	52.85.233.244 (ClassC)
2018-07-06	54.230.51.185 (ClassC)
2018-07-06	54.230.51.247 (ClassC)
2018-07-06	54.230.51.38 (ClassC)
2018-07-21	13.32.243.249 (ClassC)
2018-07-27	52.84.145.101 (ClassC)
2018-07-27	52.84.145.244 (ClassC)
2018-07-27	52.84.145.34 (ClassC)
2018-08-15	52.85.255.45 (ClassC)
2018-08-18	52.84.93.104 (ClassC)
2018-08-18	52.84.93.132 (ClassC)
2018-08-18	52.84.93.187 (ClassC)
2018-08-18	52.84.93.72 (ClassC)
2018-08-23	143.204.101.108 (ClassC)
2018-08-25	52.85.183.240 (ClassC)
2018-09-13	54.230.93.72 (ClassC)
2018-09-14	54.230.0.8 (ClassC)
2018-09-21	13.33.148.236 (ClassC)
2018-09-21	13.33.148.69 (ClassC)
2018-09-21	13.33.148.150 (ClassC)
2018-09-26	52.85.89.187 (ClassC)
2018-09-26	52.85.89.107 (ClassC)
2018-09-26	52.85.89.172 (ClassC)
2018-10-16	143.204.158.53 (ClassC)
2018-10-16	143.204.158.109 (ClassC)
2018-10-16	143.204.158.17 (ClassC)
2019-04-16	52.84.126.252 (ClassC)
2019-05-15	13.249.134.88 (ClassC)
2019-06-30	52.84.134.157 (ClassC)
2019-06-30	52.84.134.201 (ClassC)
2019-09-18	13.226.38.93 (ClassC)
2019-09-18	13.226.38.77 (ClassC)
2019-09-18	13.226.38.80 (ClassC)
2019-10-22	52.85.34.153 (ClassC)
2019-11-06	52.85.131.2 (ClassC)
2019-11-06	52.85.131.242 (ClassC)
2019-11-06	52.85.131.78 (ClassC)
2020-02-10	13.227.43.88 (ClassC)
2020-02-10	13.227.43.97 (ClassC)
2020-04-07	13.226.142.118 (ClassC)
2020-04-17	13.226.45.21 (ClassC)
2020-04-17	13.226.45.74 (ClassC)
2020-04-17	13.226.45.8 (ClassC)
2020-04-17	13.226.45.80 (ClassC)
2020-05-16	54.230.29.6 (ClassC)
2020-07-30	54.192.66.77 (ClassC)
2020-08-01	13.226.50.101 (ClassC)
2020-08-01	13.226.50.28 (ClassC)
2020-08-17	99.84.114.66 (ClassC)
2020-08-17	99.84.114.77 (ClassC)
2020-08-27	99.84.112.72 (ClassC)
2020-08-27	99.84.112.25 (ClassC)
2020-10-04	13.249.62.90 (ClassC)
2020-10-15	13.226.49.53 (ClassC)
2020-12-07	99.84.176.75 (ClassC)
2020-12-07	99.84.176.71 (ClassC)
2025-01-12	104.17.24.10 (ClassC)

HTTP/1.1 403 ForbiddenDate: Sun, 27 Aug 2023 12:35:43 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveCache-Control: max-age15Expires: Sun, 27 Aug 2023 12:35:58

!DOCTYPE html>!--if lt IE 7> html classno-js ie6 oldie langen-US> !endif-->!--if IE 7>    html classno-js ie7 oldie langen-US> !endif-->!--if IE 8>    html classno-js ie8 oldie langen-US> !endif-->!--if gt IE 8>!--> html classno-js langen-US> !--!endif-->head>title>Attention Required! | Cloudflare/title>meta charsetUTF-8 />meta http-equivContent-Type contenttext/html; charsetUTF-8 />meta http-equivX-UA-Compatible contentIEEdge />meta namerobots contentnoindex, nofollow />meta nameviewport contentwidthdevice-width,initial-scale1 />link relstylesheet idcf_styles-css href/cdn-cgi/styles/cf.errors.css />!--if lt IE 9>link relstylesheet idcf_styles-ie-css href/cdn-cgi/styles/cf.errors.ie.css />!endif-->style>body{margin:0;padding:0}/style>!--if gte IE 10>!-->script>  if (!navigator.cookieEnabled) {    window.addEventListener(DOMContentLoaded, function () {      var cookieEl  document.getElementById(cookie-alert);      cookieEl.style.display  block;    })  }/script>!--!endif-->/head>body>  div idcf-wrapper>    div classcf-alert cf-alert-error cf-cookie-error idcookie-alert data-translateenable_cookies>Please enable cookies./div>    div idcf-error-details classcf-error-details-wrapper>      div classcf-wrapper cf-header cf-error-overview>        h1 data-translateblock_headline>Sorry, you have been blocked/h1>        h2 classcf-subheadline>span data-translateunable_to_access>You are unable to access/span> hotelplanner.com/h2>      /div>!-- /.header -->      div classcf-section cf-highlight>        div classcf-wrapper>          div classcf-screenshot-container cf-screenshot-full>                          span classcf-no-screenshot error>/span>                      /div>        /div>      /div>!-- /.captcha-container -->      div classcf-section cf-wrapper>        div classcf-columns two>          div classcf-column>            h2 data-translateblocked_why_headline>Why have I been blocked?/h2>            p data-translateblocked_why_detail>This website is using a security service to protect itself from online attacks. The a

Subdomains

Date	Domain	IP
cdn.xml.ihsadvantage.com	2014-05-01	205.251.253.59
www.ihsadvantage.com	2021-07-29	216.223.188.99

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ihsadvantage.com

Is this malicious?

Files that talk to ihsadvantage.com

Whois

DNS Resolutions

Port 80

Subdomains