Domain > lcb.ninja

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-07-19	52.84.126.35 (ClassC)
2020-08-01	13.249.40.123 (ClassC)
2020-08-01	13.249.40.71 (ClassC)
2020-08-01	13.249.40.89 (ClassC)
2020-08-01	13.249.40.91 (ClassC)
2020-08-17	99.84.42.90 (ClassC)
2020-08-17	99.84.42.124 (ClassC)
2020-08-17	99.84.42.129 (ClassC)
2020-10-05	13.249.25.79 (ClassC)
2020-10-20	13.226.49.10 (ClassC)
2020-10-20	13.226.49.117 (ClassC)
2020-10-20	13.226.49.20 (ClassC)
2021-01-18	52.85.86.91 (ClassC)
2021-01-18	52.85.86.56 (ClassC)
2021-06-30	54.192.121.120 (ClassC)
2021-07-01	13.249.79.105 (ClassC)
2024-07-21	18.161.6.29 (ClassC)
2024-11-15	18.161.6.33 (ClassC)
2024-12-25	18.161.6.120 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 1452Connection: keep-aliveDate: Mon, 19 Feb 2024 03:46:13 GMTLast-Modified: Thu, 04 Mar 2021 00:07:59 GMTETag: 82da15ab4ce5dfb786ade5cd2829691cAcc

html>            head>                h1>MyHealth Deep Links/h1>            /head>            body>            h1>            a hrefhttps://stagemyhealth.stanfordhealthcare.org>Main Page (should not launch)/a>            br>            br>            a hrefhttps://stagemyhealth.stanfordhealthcare.org/#>Main Page with fragment (should not launch)/a>            br>            br>            a hrefhttps://stagemyhealth.stanfordhealthcare.org/Private>Private Path (valid but should not launch)/a>            br>            br>            a hrefhttps://stagemyhealth.stanfordhealthcare.org/Private2>Bogus Path (no launch)/a>            br>            br>            a hrefhttps://stagemyhealth.stanfordhealthcare.org/#/messages/inbox>Message inbox (valid deep web link to messages, app should not launch)/a>            br>            br>            a hrefhttps://stagemyhealth.stanfordhealthcare.org/Credentials/ResetPasswordByToken/?tokenxxxxxxx>Reset Password (app should launch to password reset entry)/a>/a>            br>            br>            a hrefhttps://stagemyhealth.stanfordhealthcare.org/Private#/billing/accountsummary>New Billing Letter Tickler Link (app should not launch)/a>                        br>            br>            a hrefhttps://lcb.ninja/accounts>Test App/a>            /h1>            /body>            /html>

Port 443

Subdomains

Date	Domain	IP
www.lcb.ninja	2024-09-27	18.238.217.105

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > lcb.ninja

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains