Domain > img1.xfwed.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2015-06-10	119.188.96.110 (ClassC)
2015-06-19	222.73.134.120 (ClassC)
2015-09-15	222.73.134.110 (ClassC)
2015-11-27	117.34.7.120 (ClassC)
2016-05-17	121.9.212.212 (ClassC)
2017-11-06	183.61.180.168 (ClassC)
2018-05-30	122.228.74.173 (ClassC)
2025-04-27	185.143.223.48 (ClassC)

HTTP/1.1 200 OKServer: nginx/1.18.0Date: Sun, 24 Mar 2024 12:03:37 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveSet-Cookie: antibot_uiddcf54b82a445d9fd7eb94c

!DOCTYPE html>html dirltr langen>head>  meta charsetutf-8 />  meta namereferrer contentunsafe-url />  meta namerobots contentnoarchive />  meta nameviewport contentwidthdevice-width, initial-scale1, shrink-to-fitno />  link relicon href/favicon.ico>  link relstylesheet hrefhttps://stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css integritysha384-Vkoo8x4CGsO3+Hhxv8T/Q5PaXtkKtu6ug5TOeNV6gBiFeWPGFN9MuhOf23Q9Ifjh crossoriginanonymous>  title>Just a moment.../title>style>html, body {text-align:center; margin: 10px;}body {margin-top: 10%;}/style>  /head>body>  noscript>h1 stylecolor:#bd2426;>Please turn JavaScript on and reload the page./h1>/noscript>div classtext-center>  div classspinner-border rolestatus>    span classsr-only>Loading.../span>  /div>/div>br />    h2>Checking your browser before accessing the website./h2>    p>This process is automatic. Your browser will redirect to your requested content shortly./p>    p idbtn>Please wait a few seconds./p>    p iderror stylecolor:red;>/p>div classfooter>/div>script>userip  52.40.234.105;/script>! -- counter code -->a hrefhttps://xaxaxa.antibot.cloud/> !-- dont click here --> /a>style>.btn-color {border: 2px solid transparent; cursor: pointer; font-size: 18px; line-height: 15px; padding: 15px 15px; text-decoration: none; text-shadow: none; border-radius: 3px; box-shadow: none; transition: 0.25s; display: block; margin: 0 auto;}.btn-color:hover {line-height: 16px; padding: 16px 16px; border: 1px solid #ccc;}/style>script>if (window.location.hostname ! window.atob(aW1nMS54ZndlZC5jb20) && window.location.hostname ! window.atob()) {window.location  window.atob(aHR0cDovL2ltZzEueGZ3ZWQuY29tLw);throw stop;}function b64_to_utf8(str) {str  str.replace(/s/g, );    return decodeURIComponent(escape(window.atob(str)));}setTimeout(Button, 5000);var country  US;var action  img1xfwedcom;var h1  096481dc66046e4b7f2ce57193d623a9;var h2  1f66649b79a8e8901f88f52529a988cd;var ipfull  52.40.234.105;var ip  52.40.234;var via  ;var v  7.101;var re  0;var rk  6Ley7dsaAAAAAF2quj

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > img1.xfwed.com

Is this malicious?

DNS Resolutions

Port 80