Domain > imgvip.xfwed.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2015-05-07	119.188.96.110 (ClassC)
2015-05-25	222.73.134.120 (ClassC)
2015-06-11	222.73.134.110 (ClassC)
2016-02-28	175.6.3.144 (ClassC)
2016-08-04	182.140.245.19 (ClassC)
2017-02-25	218.60.119.242 (ClassC)
2017-04-12	124.112.127.59 (ClassC)
2024-12-27	185.143.223.48 (ClassC)

HTTP/1.1 200 OKServer: nginx/1.18.0Date: Tue, 19 Mar 2024 01:52:32 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveSet-Cookie: antibot_uiddcf54b82a445d9fd7eb94c

!DOCTYPE html>html dirltr langen>head>  meta charsetutf-8 />  meta namereferrer contentunsafe-url />  meta namerobots contentnoarchive />  meta nameviewport contentwidthdevice-width, initial-scale1, shrink-to-fitno />  link relicon href/favicon.ico>  link relstylesheet hrefhttps://stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css integritysha384-Vkoo8x4CGsO3+Hhxv8T/Q5PaXtkKtu6ug5TOeNV6gBiFeWPGFN9MuhOf23Q9Ifjh crossoriginanonymous>  title>Just a moment.../title>style>html, body {text-align:center; margin: 10px;}body {margin-top: 10%;}/style>  /head>body>  noscript>h1 stylecolor:#bd2426;>Please turn JavaScript on and reload the page./h1>/noscript>div classtext-center>  div classspinner-border rolestatus>    span classsr-only>Loading.../span>  /div>/div>br />    h2>Checking your browser before accessing the website./h2>    p>This process is automatic. Your browser will redirect to your requested content shortly./p>    p idbtn>Please wait a few seconds./p>    p iderror stylecolor:red;>/p>div classfooter>/div>script>userip  52.40.234.105;/script>! -- counter code -->a hrefhttps://xaxaxa.antibot.cloud/> !-- dont click here --> /a>style>.btn-color {border: 2px solid transparent; cursor: pointer; font-size: 18px; line-height: 15px; padding: 15px 15px; text-decoration: none; text-shadow: none; border-radius: 3px; box-shadow: none; transition: 0.25s; display: block; margin: 0 auto;}.btn-color:hover {line-height: 16px; padding: 16px 16px; border: 1px solid #ccc;}/style>script>if (window.location.hostname ! window.atob(aW1ndmlwLnhmd2VkLmNvbQ) && window.location.hostname ! window.atob()) {window.location  window.atob(aHR0cDovL2ltZ3ZpcC54ZndlZC5jb20v);throw stop;}function b64_to_utf8(str) {str  str.replace(/s/g, );    return decodeURIComponent(escape(window.atob(str)));}setTimeout(Button, 5000);var country  US;var action  imgvipxfwedcom;var h1  f18dff71121a735ca66be0a817a0f834;var h2  1f66649b79a8e8901f88f52529a988cd;var ipfull  52.40.234.105;var ip  52.40.234;var via  ;var v  7.101;var re  0;var rk  6Ley7dsaAAA

Subdomains

Date	Domain	IP
img1.xfwed.com	2015-06-19	222.73.134.120
img3.xfwed.com	2024-12-12	185.143.223.48
img.xfwed.com	2024-12-12	185.143.223.48
imgvip.xfwed.com	2015-06-11	222.73.134.110
bbs.xfwed.com	2013-12-26	211.155.121.223
www.xfwed.com	2024-12-12	185.143.223.48

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > imgvip.xfwed.com

Is this malicious?

DNS Resolutions

Port 80

Subdomains