Domain > userback.io

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2018-07-26	52.4.63.15 (ClassC)
2018-09-11	52.84.146.75 (ClassC)
2018-09-20	52.222.222.167 (ClassC)
2018-09-20	52.222.222.205 (ClassC)
2018-09-20	52.222.222.84 (ClassC)
2019-01-20	52.84.146.253 (ClassC)
2019-03-11	54.230.90.189 (ClassC)
2019-04-23	13.249.44.8 (ClassC)
2019-05-01	54.230.90.228 (ClassC)
2019-08-01	13.226.38.91 (ClassC)
2019-08-01	13.226.38.39 (ClassC)
2019-08-01	13.226.38.61 (ClassC)
2019-08-01	13.226.38.62 (ClassC)
2019-08-09	52.84.134.29 (ClassC)
2019-08-11	52.84.134.28 (ClassC)
2019-08-18	54.230.89.236 (ClassC)
2019-08-18	54.230.89.2 (ClassC)
2020-04-27	143.204.142.113 (ClassC)
2021-01-16	54.239.152.68 (ClassC)
2022-01-26	13.225.214.14 (ClassC)
2025-07-16	162.159.136.54 (ClassC)
2025-09-21	162.159.137.54 (ClassC)

HTTP/1.1 200 OKDate: Fri, 04 Aug 2023 19:48:30 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Ray: 7f195179a94630ba-SEACF-Cache-Status: DYNAMICAge: 3753Cach

!doctype html>html langen-US prefixog: https://ogp.me/ns# classno-js>head>meta charsetUTF-8>script>if(navigator.userAgent.match(/MSIE|Internet Explorer/i)||navigator.userAgent.match(/Trident/7..*?rv:11/i)){var hrefdocument.location.href;if(!href.match(/?&nowprocket/)){if(href.indexOf(?)-1){if(href.indexOf(#)-1){document.location.hrefhref+?nowprocket1}else{document.location.hrefhref.replace(#,?nowprocket1#)}}else{if(href.indexOf(#)-1){document.location.hrefhref+&nowprocket1}else{document.location.hrefhref.replace(#,&nowprocket1#)}}}}/script>script>class RocketLazyLoadScripts{constructor(){this.v1.2.3,this.triggerEventskeydown,mousedown,mousemove,touchmove,touchstart,touchend,wheel,this.userEventHandlerthis._triggerListener.bind(this),this.touchStartHandlerthis._onTouchStart.bind(this),this.touchMoveHandlerthis._onTouchMove.bind(this),this.touchEndHandlerthis._onTouchEnd.bind(this),this.clickHandlerthis._onClick.bind(this),this.interceptedClicks,window.addEventListener(pageshow,t>{this.persistedt.persisted}),window.addEventListener(DOMContentLoaded,()>{this._preconnect3rdParties()}),this.delayedScripts{normal:,async:,defer:},this.trash,this.allJQueries}_addUserInteractionListener(t){if(document.hidden){t._triggerListener();return}this.triggerEvents.forEach(e>window.addEventListener(e,t.userEventHandler,{passive:!0})),window.addEventListener(touchstart,t.touchStartHandler,{passive:!0}),window.addEventListener(mousedown,t.touchStartHandler),document.addEventListener(visibilitychange,t.userEventHandler)}_removeUserInteractionListener(){this.triggerEvents.forEach(t>window.removeEventListener(t,this.userEventHandler,{passive:!0})),document.removeEventListener(visibilitychange,this.userEventHandler)}_onTouchStart(t){HTML!t.target.tagName&&(window.addEventListener(touchend,this.touchEndHandler),window.addEventListener(mouseup,this.touchEndHandler),window.addEventListener(touchmove,this.touchMoveHandler,{passive:!0}),window.addEventListener(mousemove,this.touchMoveHandler),t.target.addEventListener(click,this.clickHandler)

Subdomains

Date	Domain	IP
app.staging1.userback.io	2024-06-09	3.229.194.163
static.userback.io	2019-09-20	13.224.2.110
auth.userback.io	2025-08-01	104.18.35.233
api.userback.io	2023-08-04	54.243.217.65
requestaplayground.ideas.userback.io	2025-04-06	35.169.184.252

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > userback.io

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains