Domain > riseofthenaturalwitch.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-04-04	192.0.78.25 (ClassC)
2024-04-26	192.0.78.24 (ClassC)
2024-06-08	191.101.104.224 (ClassC)
2024-06-17	191.96.144.158 (ClassC)
2024-07-01	154.41.250.28 (ClassC)
2024-07-19	154.62.106.232 (ClassC)
2024-08-02	191.101.104.252 (ClassC)
2024-08-06	154.41.250.47 (ClassC)
2024-08-31	191.101.104.7 (ClassC)
2024-09-13	154.41.250.244 (ClassC)
2024-10-20	147.79.120.104 (ClassC)
2024-12-22	77.37.76.115 (ClassC)
2025-01-03	77.37.76.89 (ClassC)
2025-02-28	92.112.198.147 (ClassC)
2025-03-16	92.112.198.179 (ClassC)
2025-04-07	92.112.198.115 (ClassC)
2025-04-20	92.112.198.247 (ClassC)
2025-05-01	148.135.128.105 (ClassC)
2025-06-17	148.135.128.61 (ClassC)
2025-08-04	92.112.198.214 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Sat, 26 Aug 2023 23:59:55 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveStrict-Transport-Security: max-age31536000Vary: Acce

!doctype html>html langen>head>	meta charsetUTF-8 />	meta nameviewport contentwidthdevice-width, initial-scale1 />	link relprofile hrefhttps://gmpg.org/xfn/11 />	title>Rise of the Natural Witch/title>meta namerobots contentmax-image-preview:large />!-- Async WordPress.com Remote Login -->script idwpcom_remote_login_js>var wpcom_remote_login_extra_auth  ;function wpcom_remote_login_remove_dom_node_id( element_id ) {	var dom_node  document.getElementById( element_id );	if ( dom_node ) { dom_node.parentNode.removeChild( dom_node ); }}function wpcom_remote_login_remove_dom_node_classes( class_name ) {	var dom_nodes  document.querySelectorAll( . + class_name );	for ( var i  0; i  dom_nodes.length; i++ ) {		dom_nodes i .parentNode.removeChild( dom_nodes i  );	}}function wpcom_remote_login_final_cleanup() {	wpcom_remote_login_remove_dom_node_classes( wpcom_remote_login_msg );	wpcom_remote_login_remove_dom_node_id( wpcom_remote_login_key );	wpcom_remote_login_remove_dom_node_id( wpcom_remote_login_validate );	wpcom_remote_login_remove_dom_node_id( wpcom_remote_login_js );	wpcom_remote_login_remove_dom_node_id( wpcom_request_access_iframe );	wpcom_remote_login_remove_dom_node_id( wpcom_request_access_styles );}// Watch for messages back from the remote loginwindow.addEventListener( message, function( e ) {	if ( e.origin  https://r-login.wordpress.com ) {		var data  {};		try {			data  JSON.parse( e.data );		} catch( e ) {			wpcom_remote_login_final_cleanup();			return;		}		if ( data.msg  LOGIN ) {			// Clean up the login check iframe			wpcom_remote_login_remove_dom_node_id( wpcom_remote_login_key );			var id_regex  new RegExp( /^0-9+$/ );			var token_regex  new RegExp( /^.*|.*|.*$/ );			if (				token_regex.test( data.token )				&& id_regex.test( data.wpcomid )			) {				// We have everything we need to ask for a login				var script  document.createElement( script );				script.setAttribute( id, wpcom_remote_login_validate );				script.src  /remote-login.php?wpcom_remote_loginvalidate					+ &wpcomid + data.wpcomid					+ &toke

Subdomains

Date	Domain	IP
www.riseofthenaturalwitch.com	2025-03-16	148.135.128.66

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > riseofthenaturalwitch.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains