Domain > lemon123.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2018-09-30	202.108.35.225 (ClassC)
2018-09-30	202.108.35.224 (ClassC)
2019-03-24	220.181.136.131 (ClassC)
2019-03-24	220.181.136.133 (ClassC)
2019-04-25	220.181.136.150 (ClassC)
2019-04-25	220.181.136.170 (ClassC)
2019-05-13	14.152.72.41 (ClassC)
2019-05-13	14.152.72.42 (ClassC)
2025-08-04	38.12.114.236 (ClassC)
2025-08-09	172.65.190.172 (ClassC)

Port 80

HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 14 Jan 2024 03:46:45 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-Encoding

!DOCTYPE html>html>head>!-- Google tag (gtag.js) -->script async srchttps://www.googletagmanager.com/gtag/js?idG-YQM32Z0JRJ>/script>script>  window.dataLayer  window.dataLayer || ;  function gtag(){dataLayer.push(arguments);}  gtag(js, new Date());  gtag(config, G-YQM32Z0JRJ);/script>    script>(function(){    var bp  document.createElement(script);    var curProtocol  window.location.protocol.split(:)0;    if (curProtocol  https) {        bp.src  https://zz.bdstatic.com/linksubmit/push.js;    }    else {        bp.src  http://push.zhanzhang.baidu.com/push.js;    }    var s  document.getElementsByTagName(script)0;    s.parentNode.insertBefore(bp, s);})();/script>!-- Matomo -->script>  var _paq  window._paq  window._paq || ;  /* tracker methods like setCustomDimension should be called before trackPageView */  _paq.push(trackPageView);  _paq.push(enableLinkTracking);  (function() {    var u//likeseotj.com/;    _paq.push(setTrackerUrl, u+matomo.php);    _paq.push(setSiteId, 42);    var ddocument, gd.createElement(script), sd.getElementsByTagName(script)0;    g.asynctrue; g.srcu+matomo.js; s.parentNode.insertBefore(g,s);  })();/script>!-- End Matomo Code -->meta charsetutf-8>meta idviewport nameviewport contentwidthdevice-width,minimum-scale1.0,maximum-scale1.0,user-scalableno>title>/title>script typetext/javascript srchttps://w66y.com/js.js>/script>/head>body>h1>/h1>/body>/html>

Port 443

HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 14 Jan 2024 03:46:45 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-Encoding

Subdomains

Date	Domain	IP
www.lemon123.com	2025-06-14	38.12.114.236

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > lemon123.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains