Domain > login.demo-admin.cesfxhkd.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-02-21	13.236.64.110 (ClassC)
2024-04-12	13.210.193.205 (ClassC)
2024-08-28	13.211.183.60 (ClassC)
2024-08-31	3.24.228.201 (ClassC)
2024-12-09	3.24.147.168 (ClassC)
2025-03-06	13.236.144.174 (ClassC)
2025-04-30	13.237.237.56 (ClassC)
2025-05-09	13.55.75.66 (ClassC)
2025-05-15	3.24.228.44 (ClassC)
2025-07-24	13.54.143.179 (ClassC)
2025-12-24	13.237.105.31 (ClassC)
2026-01-26	3.24.2.119 (ClassC)

HTTP/1.1 302 Moved Temporarilycache-control: no-store, no-cache, no-store, must-revalidatecontent-security-policy: frame-ancestors noneContent-Type: text/html; charsetUTF-8Date: Wed, 21 Feb 2024 14:39

!DOCTYPE HTML PUBLIC -//IETF//DTD HTML//EN>!-- Copyright (C) 2000 Tivoli Systems, Inc. -->!-- Copyright (C) 1999 IBM Corporation -->!-- Copyright (C) 1998 Dascom, Inc. -->!-- All Rights Reserved. -->!--     This is an Application Gateway error message template file.  It is used     by the Application Gateway to build a response when a particular     error occurs.  This file can be modified as appropriate.     Error details:          * Code: 0x00000000     * Text: HPDBA0521I   Successful completion     -->html>head>meta http-equivContent-Type content text/html; charsetUTF-8>!-- Enter Page Title -->title>Moved Temporarily/title>/head>body bgcolor#FFFFFF>img src/pics/amlogo.gif      width100%      height75      border0     alt Application Gateway Home>!-- Enter Message Header -->h1>font color#FF0000>Moved Temporarily/font>/h1>p>!-- Enter Error Message -->The Web resource you have requested has been temporarily moved.BR>BR>BR>!-- Provide Error Explanation -->H4>Explanation/H4>P>The requested resource has been temporarily moved. This usually occurs if there has been a mishandled redirect./P>BR>BR>BR>!-- Provide Possible Solution -->H4>Solutions/H4>P>A HREF/sepas/serve?TAM_OPlogin&USERNAMEunauthenticated&ERROR_CODE0x00000000&URL%2FFIM%2FCGM%2FSHKADMINDEMO%2F.noindex.html&REFERER&PROTOCOLhttps&HTTPHDR_Hostlogin.demo-admin.cesfxhkd.com&HOSTNAMElogin.demo-admin.cesfxhkd.com>Click here/A> to fetch the resource./P>br>br>br>!-- Enter Link -->a href/>none BUTTON/a>/p>/body>/html>

Subdomains

Date	Domain	IP
api.cesfxhkd.com	2024-04-20	18.175.29.248
demo-api.cesfxhkd.com	2024-02-21	35.178.99.76
login.cesfxhkd.com	2024-04-20	3.104.161.167
admin.cesfxhkd.com	2024-04-20	18.135.224.204
login-admin.cesfxhkd.com	2024-04-20	13.54.188.179
demo-admin.cesfxhkd.com	2024-02-21	18.135.224.17
login-demo-admin.cesfxhkd.com	2024-04-12	13.210.193.205
login.demo-admin.cesfxhkd.com	2024-02-21	13.236.64.110
demo.cesfxhkd.com	2024-02-21	18.135.64.232
login.demo.cesfxhkd.com	2024-02-21	13.238.136.204
www.cesfxhkd.com	2024-04-13	52.64.54.59

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > login.demo-admin.cesfxhkd.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains