Domain > m.amberweather.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2020-01-07	3.114.135.1 (ClassC)
2024-07-24	13.115.184.30 (ClassC)
2024-11-17	35.79.117.246 (ClassC)
2024-12-16	52.196.83.166 (ClassC)
2024-12-29	35.79.142.87 (ClassC)
2025-04-05	13.112.227.85 (ClassC)
2025-04-24	18.177.97.152 (ClassC)
2025-07-16	3.115.232.31 (ClassC)
2025-08-01	18.178.255.188 (ClassC)
2025-09-03	3.113.235.78 (ClassC)
2026-02-07	54.249.3.121 (ClassC)
2026-02-17	13.159.89.77 (ClassC)

Port 80

HTTP/1.1 200 OKContent-Type: text/html; charsetUTF-8Date: Mon, 16 Dec 2024 01:05:42 GMTServer: nginxContent-Length: 8598Connection: keep-alive

!doctype html>html>head>    meta contentwidthdevice-width,initial-scale1.0,maximum-scale1.0,user-scalable0 nameviewport />    meta http-equivContent-Type contenttext/html; charsetutf-8 />    meta nameauthor contentJakeChiu>    meta nameformat-detection contenttelephoneno, emailno/>    title>/title>    meta namekeywords content>    meta namedescription content>    link href/css/jquery.fullpage.min.css relstylesheet typetext/css />    link href/css/default.css relstylesheet typetext/css />    script typetext/javascript src/js/sprintf.min.js>/script>    script typetext/javascript src/js/jquery.min.js>/script>    script typetext/javascript src/js/jquery.fullpage.min.js>/script>    script typetext/javascript srchttps://3gimg.qq.com/lightmap/components/geolocation/geolocation.min.js>/script>    script typetext/javascript src/js/index.js>/script>/head>body>div classonload idonload>div classlayer>/div>div classcont>    img src/images/loading/bg_loading_0.png>p>loading.../p>/div>/div>div classwrap idfullpage>div classsection active idsection0>    div classheader>        a hrefjavascript:void(0)>img src/images/ic_adress.png classlimg>/a>div classname>p>Unknow/p>span>00:00 --/--/--/span>/div>a href/search.html>img src/images/ic_add.png classrimg>/a>    /div>    div classfooter>        div classwd>N/A/div>        div classtq>/div>        div classbh>            img src/images/ic_low_temperature.png classdown>span classdata1>--/span>img src/images/ic_high_temperature.png  classup>span  classdata2>--/span> span  classdata3>--/span>        /div>    /div>/div>div classsection fp-auto-height idsection1>div classlayout>div classlayer>div classlaycont>    div classtitle>Forecast/div>    div classhourly idhourly>        ul>            li>                p classt>--/p>                p>img src/images/wic_unkown.png>/p>                p classf>--°/p>            /li>        /ul>    /div>    div classdaily iddaily>        ul>            li>                div classfl w>                    --                /div>                div c

Port 443

HTTP/1.1 200 OKContent-Type: text/html; charsetUTF-8Date: Mon, 16 Dec 2024 01:05:43 GMTServer: nginxContent-Length: 8598Connection: keep-alive

Subdomains

Date	Domain	IP
f.loca.amberweather.com	2024-09-17	13.231.67.115
f.ad.amberweather.com	2025-07-20	52.194.233.9
h.wd.amberweather.com	2024-06-25	35.75.136.24
aqi.wd.amberweather.com	2023-08-16	52.199.209.188
f.store.amberweather.com	2025-07-31	52.68.164.163
g.store.amberweather.com	2025-08-24	18.182.92.17
push.amberweather.com	2025-10-20	13.115.224.137
m.amberweather.com	2024-12-16	52.196.83.166
api.mediation.amberweather.com	2023-08-16	52.198.0.72

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > m.amberweather.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains