Domain > oneportal.sg.gdefence.io

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-10-07	18.161.6.50 (ClassC)
2025-02-27	18.65.229.61 (ClassC)
2025-03-16	18.161.6.9 (ClassC)
2025-04-11	204.246.191.107 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2027Connection: keep-alivex-amz-id-2: rpZReUmSGF/syzh14e+WIp3O4ATl6zx1huYjT1cm3tnaVHFzLe5pU0j0WZ5zjurrB/qSZxb1ib5CiRj+DlBGkgx-amz-request-id: RQE8

!doctype html>html langen>  head>    title>GrabDefence - OnePortal/title>    meta charsetutf-8 />    meta namedescription contentGrabDefence - OnePortal at Grab. />    meta nameviewport contentwidthdevice-width, initial-scale1 />    meta nametheme-color content#00b140 />    link relshortcut icon href/favicon.ico />    link relmanifest href/manifest.json />    link relstylesheet href/pace.min.css />    script srchttps://cdn.jsdelivr.net/npm/fuse.js/dist/fuse.js>/script>    script srchttps://d3js.org/d3.v3.min.js typetext/javascript>/script>    script src/three.min.js>/script>    script typetext/javascript>      const host  window.location.host.toLowerCase()      const clarityTagMap  {        oneportal.stg.gdefence.io: hnq87t7brr,        oneportal.sg.gdefence.io: hnqlip97nw,        oneportal.id.gdefence.io: hnqlpbv8f5,      }      let clarityTag  clarityTagMaphost      if (clarityTag) {        ;(function (c, l, a, r, i, t, y) {          ca             ca ||            function () {              ;(ca.q  ca.q || ).push(arguments)            }          t  l.createElement(r)          t.async  1          t.src  https://www.clarity.ms/tag/ + i          y  l.getElementsByTagName(r)0          y.parentNode.insertBefore(t, y)        })(window, document, clarity, script, clarityTag)      }    /script>    style>      #root {        display: flex;        min-height: 100vh;        align-items: center;        justify-content: center;      }      @media screen and (min-width: 768px) {        #root {          flex-direction: row;        }      }    /style>    script typemodule crossorigin src/assets/index-B7gBBPuY.js>/script>    link relstylesheet crossorigin href/assets/index-DKyXaUrg.css>  /head>  body>    div idroot>/div>    script src/pace.min.js>/script>    !-- Google tag (gtag.js) -->  /body>/html>

Subdomains

Date	Domain	IP
api.sg.gdefence.io	2023-08-16	52.76.195.153
oneportal.sg.gdefence.io	2024-10-07	18.161.6.50
spellvault-ethlas.sg.gdefence.io	2024-10-07	52.74.57.96
spellvault-gxs-grabathonx.sg.gdefence.io	2024-10-07	13.213.127.47

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > oneportal.sg.gdefence.io

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains